Payment service authentication method, computer device, and computer storage medium

Abstract

Embodiments of the present application disclose a payment service authentication method, a computer device and a computer storage medium. Embodiments of the present application include that the computer device deploys an authentication service program, and uses the authentication service program to verify user information submitted by a user, and submits a payment service processing document of a service required by the user to a payment service platform when the verification is passed, and the payment service platform processes the service corresponding to the payment service processing document. Therefore, in order to complete user identity authentication, the user can not need to carry a UKey, and only needs to use the authentication service program deployed by the computer device to perform user identity authentication, and the user information does not need to be written into the UKey again during user identity authentication, and the authentication service program can directly read the user information, so that the user information writing operation is saved, and the time consumption of each service processing can be reduced, and the service processing efficiency is improved.

Description

Technical Field

[0001] This application relates to the field of business processing, specifically to a payment business authentication method, computer equipment, and computer storage medium. Background Technology

[0002] Enterprise-bank interconnection refers to the connection between a bank's system and a company's financial system. Companies can directly handle banking services such as account management and fund transfers through their financial systems, and can customize more personalized online banking functions within their financial systems as needed. This is an electronic banking product offered by banks to high-end clients. Users submitting payment transactions through enterprise-bank interconnection need to bind CA authentication to ensure payment security and meet audit requirements. During CA authentication, users need to insert a hardware UKey into the terminal device. The client on the terminal device verifies, signs, and validates the user information based on the UKey. Upon successful validation, the transaction processing information is submitted to the enterprise-bank service platform, which then processes the corresponding transaction based on this information.

[0003] However, the signature verification process using physical hardware U-keys is time-consuming, with the fastest verification time for each payment transaction being only 0.5 seconds. When the number of payment transactions is high, this impacts the company's settlement efficiency. Traditional physical U-key signature verification can no longer meet the demands of large enterprises for improved payment efficiency. Furthermore, if users do not have their U-keys, it will also affect business processing, preventing timely transaction handling and causing inconvenience. Summary of the Invention

[0004] This application provides a payment business authentication method, computer equipment, and computer storage medium for efficiently performing user identity authentication, thereby improving business processing efficiency.

[0005] A first aspect of this application provides a payment transaction authentication method, the method being applied to a computer device; the method includes:

[0006] Obtain the authentication service procedure, and obtain the user information of the target user and the payment transaction processing document submitted by the target user;

[0007] The authentication service program is used to verify the user information of the target user and the verification result is returned.

[0008] When the verification result indicates that the user information of the target user has been verified, the payment transaction processing document is submitted to the payment service platform so that the payment service platform can process the transaction corresponding to the payment transaction processing document.

[0009] A second aspect of this application provides a computer device, the computer device comprising:

[0010] The acquisition unit is used to acquire the authentication service program, and to acquire the user information of the target user and the payment transaction processing document submitted by the target user;

[0011] An authentication unit is used to verify the user information of the target user using the authentication service program and return the verification result;

[0012] The submission unit is used to submit the payment transaction processing document to the payment service platform when the verification result indicates that the user information of the target user has been verified, so that the payment service platform can process the transaction corresponding to the payment transaction processing document.

[0013] A third aspect of this application provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the method of the first aspect described above.

[0014] A fourth aspect of this application provides a computer storage medium storing instructions that, when executed on a computer, cause the computer to perform the method described in the first aspect.

[0015] A fifth aspect of this application provides a computer program product that, when run on a computer device, causes the computer device to perform the method described in the first aspect.

[0016] As can be seen from the above technical solutions, the embodiments of this application have the following advantages:

[0017] The computer device deploys an authentication service program to verify the user information submitted by the user. Upon successful verification, it submits a payment processing document for the user's required transaction to the payment service platform, which then processes the transaction corresponding to that document. Therefore, to complete user authentication, users no longer need to carry a UKey; the authentication service program deployed on the computer device is sufficient. Furthermore, user information does not need to be written to the UKey during authentication; the authentication service program can directly read the user information, eliminating the need for manual data writing and thus reducing the time spent on each transaction, improving overall efficiency. Attached Figure Description

[0018] Figure 1 This is a schematic diagram of the network framework in an embodiment of this application;

[0019] Figure 2 This is a flowchart illustrating the payment authentication method in this application.

[0020] Figure 3 This is another flowchart illustrating the payment authentication method in this application.

[0021] Figure 4 This is a schematic diagram of the structure of a computer device in an embodiment of this application;

[0022] Figure 5 This is another schematic diagram of the structure of the computer device in the embodiments of this application. Detailed Implementation

[0023] This application provides a payment business authentication method, computer equipment, and computer storage medium for efficiently performing user identity authentication, thereby improving business processing efficiency.

[0024] Please see Figure 1 The network framework in this embodiment includes:

[0025] The business server 100 and the terminal cluster; the terminal cluster may include: terminal devices 200a, terminal devices 200b, terminal devices 200c, ..., terminal devices 200n and other terminal devices.

[0026] The aforementioned business server 100 can be an independent physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server providing basic cloud computing services such as cloud databases, cloud services, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms. The terminal devices (including terminal devices 200a, 200b, 200c, ..., 200n) can be smartphones, tablets, laptops, desktop computers, PDAs, mobile internet devices (MIDs), wearable devices (such as smartwatches, smart bracelets, etc.), smart computers, smart in-vehicle systems, and other smart terminals.

[0027] The service server 100 can establish communication connections with each terminal device in the terminal cluster, and the terminal devices in the terminal cluster can also establish communication connections with each other. In other words, the service server 100 can establish communication connections with each terminal device among terminal devices 200a, 200b, 200c, ..., 200n. For example, terminal device 200a can establish a communication connection with the service server 100. Terminal devices 200a and 200b can establish a communication connection, and terminal devices 200a and 200c can also establish a communication connection. The communication connection method is not limited; it can be established directly or indirectly through wired communication or wireless communication, etc., depending on the actual application scenario. This application does not impose any restrictions on this.

[0028] It should be understood that, such as Figure 1 Each terminal device in the terminal cluster shown can have an application client installed. When the application client runs on each terminal device, it can interact with the business server 100, allowing the business server 100 to receive business data from each terminal device (such as financial management data uploaded by users through the terminal device). This application client can be a financial management application, enterprise affairs management application, social application, instant messaging application, live streaming application, game application, short video application, video application, music application, shopping application, novel application, payment application, or any other application client with the function of displaying text, images, audio, and video data. The specific application client can be determined according to the actual application scenario requirements and is not limited here. This application client can be a standalone client or an embedded sub-client integrated into a client (such as a financial management client, enterprise affairs management client, etc.), depending on the actual application scenario and is not limited here.

[0029] In bank-enterprise interconnection scenarios, users need to carry a hardware device (UKey) for user authentication and business transactions. However, carrying the UKey is inconvenient for users, and without it, authentication and transactions cannot be completed, disrupting their work. Furthermore, when the UKey is inserted into the terminal device, user information and transaction processing information need to be written to it for verification using the UKey's CA authentication process. However, writing this information to the UKey is time-consuming, resulting in longer processing times for each transaction and impacting overall efficiency.

[0030] To address the aforementioned technical problems, this application proposes a payment transaction authentication method according to an embodiment. The following will combine... Figure 1The network framework described herein is used to illustrate the payment authentication method in the embodiments of this application.

[0031] Please see Figure 2 One embodiment of the payment business authentication method in this application includes:

[0032] 201. Obtain the authentication service procedure, and obtain the user information of the target user and the payment transaction processing document submitted by the target user;

[0033] The method of this embodiment can be applied to a computer device, which may be... Figure 1 The network framework shown includes a business server 100 or various terminal devices. The computer devices can access an authentication service program, which is used to authenticate the user's identity to determine its legitimacy. When a user needs to conduct business, they can submit their user information and the business information of the desired transaction on the computer device. This business can be any type, such as payment processing, collection processing, investment and financing, etc. No specific restrictions are placed on the type of business here.

[0034] The payment transaction processing document submitted by the target user represents any aspect of the transaction. For example, a payment transaction processing document can be a payment slip, which records multiple details of the payment transaction, such as the payee and their account, the payer and their account, and so on.

[0035] 202. Use the authentication service program to verify the user information of the target user and return the verification result;

[0036] After obtaining the authentication service program, it can be activated to verify the target user's information and return the verification result. The verification result indicates whether the target user's information has been successfully verified. If the verification is successful, it means that the target user's request to process the corresponding business transaction of the payment transaction document is legitimate and the requested business can be processed. If the verification fails, it means that the target user's request to process the corresponding business transaction of the payment transaction document is illegitimate and the requested business will not be processed.

[0037] 203. When the verification result indicates that the user information of the target user has been verified, the payment transaction processing document is submitted to the payment service platform so that the payment service platform can process the transaction corresponding to the payment transaction processing document.

[0038] When the verification result indicates that the target user's user information has been verified, it means that the user's request for processing the business is legitimate. The payment business processing document submitted by the target user can be submitted to the payment business service platform. The payment business service platform processes the business based on the payment business processing document submitted by the target user. For example, if the payment business processing document submitted by the target user is the information recorded in the payment slip, the platform can complete the amount transfer operation based on the information such as the payee and their account, and the payer and their account recorded in the payment slip, thereby completing the payment business processing.

[0039] The payment service platform can be any service platform capable of processing user-submitted payment transactions, such as a bank that handles payment and receipt transactions, or a financial institution that handles investment and financing transactions. This embodiment does not limit the type of payment service platform.

[0040] In this embodiment, the computer device deploys an authentication service program to verify the user information submitted by the user. Upon successful verification, the program submits a payment processing document for the user's required transaction to the payment service platform, which then processes the transaction corresponding to that document. Therefore, to complete user authentication, the user does not need to carry a UKey; only the authentication service program deployed on the computer device is required. Furthermore, user information does not need to be written to the UKey during authentication; the authentication service program can directly read the user information, eliminating the need for writing data. This reduces the time required for each transaction and improves processing efficiency.

[0041] The following will be discussed in the preceding text. Figure 1 The network framework shown and Figure 2 Based on the illustrated embodiments, embodiments of this application will be described in further detail. Please refer to [link to relevant documentation]. Figure 3 Another embodiment of the payment business authentication method in this application includes:

[0042] 301. Obtain the authentication service procedure, and obtain the user information of the target user and the payment transaction processing document submitted by the target user;

[0043] The application developer develops a target application, which can be installed on the computer device of this embodiment, thereby enabling the computer device to run the target application to perform the payment business authentication method of this embodiment.

[0044] In this embodiment, one way to obtain the authentication service program is to obtain multiple installation files of the authentication service program and configure multiple installation files of the authentication service program in the software installation directory of the target application on the local computer device, so that the authentication service program is associated with the target application, realizing the docking and binding of the authentication service program and the target application, so that the user identity authentication service provided by the authentication service program can be called when the target application executes the payment business authentication method of this embodiment.

[0045] The authentication service program can be a CA (Certificate Authority) authentication program. A CA can be an application or software program provided by a certification authority to authenticate user identities. A CA can issue CA certificates to users, enabling them to sign payment transaction documents. The payment service platform then identifies the signature information in the payment transaction document and, upon confirming the signature information is valid and corresponds to the user's identity, processes the transaction corresponding to the user's submitted payment transaction document.

[0046] 302. Use the authentication service program to verify the user information of the target user and return the verification result;

[0047] In this embodiment, the authentication service program verifies the user information of the target user, including the following steps:

[0048] Determine the identification information of the target user's user terminal device based on the target user's user information;

[0049] Verify whether the identification information of the target user's client device is bound to a special field preset by the authentication service program;

[0050] If so, return a verification result indicating that the target user's user information verification has passed;

[0051] If not, return a verification result indicating that the user information verification for the target user failed.

[0052] The target user's user information may include the identification information of the user terminal device used by the target user to submit the payment transaction processing document. Therefore, the identification information of the target user's user terminal device can be found from the target user's user information. This identification information is used to identify the user's user terminal device, that is, each identification information can determine the unique user terminal device corresponding to each identification information.

[0053] For example, the target user's client device can be the target user's server. The target user's server can communicate with the computer device in this embodiment. The target user uses the computer device to send a data processing request to the target user's server. The target user's server responds to the data processing request, performs data processing, and returns the data processing result to the computer device. That is, the target user's server acts as the server and the computer device acts as the client, forming a C / S network architecture.

[0054] In one implementation, the target user's server can be bound to the authentication service program configured by the target user. This involves establishing a binding relationship between the target user's server identification information and a pre-defined field in the authentication service program. Therefore, when authenticating the target user, it is only necessary to verify whether the target user's server identification information is bound to the pre-defined field in the authentication service program. If so, the target user's identity is legitimate and authentication is successful; if no binding relationship is established, it indicates that the target user has not configured this authentication service program, the target user's identity is illegitimate, and authentication fails. The target user's server identification information can be uniquely identifying information such as the server's MAC address.

[0055] In one embodiment of this example, when the identification information of the target user's client is bound to a special field preset by the authentication service program, the authentication service program can also add the signature information corresponding to the target user to the payment transaction processing document, so that the payment transaction processing document carries this signature information so as to confirm the initiator of the transaction corresponding to the payment transaction processing document based on the signature information.

[0056] 303. When the verification result indicates that the user information of the target user has been verified, the payment transaction processing document is submitted to the payment service platform so that the payment service platform can process the transaction corresponding to the payment transaction processing document.

[0057] When the authentication service program returns a verification result indicating that the target user's user information has passed verification, proving that the target user's identity is legitimate, the payment transaction processing document submitted by the user is sent to the payment transaction service platform, which then processes the transaction corresponding to the payment transaction processing document.

[0058] In one implementation, if the authentication service program adds signature information corresponding to the target user to the payment transaction processing document, the computer device can submit the payment transaction processing document with the added signature information of the target user to the payment transaction service platform. The payment transaction service platform confirms that the signature information added to the payment transaction processing document corresponds to the target user and processes the transaction corresponding to the payment transaction processing document.

[0059] For example, when the identification information of the target user's client is bound to a special field preset by the authentication service program, the authentication service program can affix a signature to the payment order, that is, add the target user's signature to the payment order. The computer device receives the payment order with the target user's signature information added by the authentication service program and submits this payment order to the bank. Then, when the bank confirms that the payer and his / her account recorded on the payment order correspond to the signature on the payment order, it performs the amount transfer operation according to the payment order.

[0060] Compared to related solutions that require users to carry a UKey and insert it into a computer device for user authentication, this embodiment eliminates the need for UKey-based authentication. User authentication can be automatically completed simply by deploying an authentication service program on the computer device. Furthermore, the speed and efficiency of user authentication are higher than UKey authentication. This not only enables intelligent completion of business submissions but also improves the efficiency of user business processing. Unlike UKeys, this embodiment avoids information security and account security risks associated with lost or illegally obtained UKeys, ensuring payment security and business transaction security.

[0061] The payment authentication method in the embodiments of this application has been described above. The computer equipment in the embodiments of this application is described below. Please refer to [link / reference]. Figure 4 One embodiment of the computer device in this application includes:

[0062] The acquisition unit 401 is used to acquire the authentication service program, and to acquire the user information of the target user and the payment transaction processing document submitted by the target user.

[0063] The authentication unit 402 is used to verify the user information of the target user using the authentication service program and return the verification result;

[0064] The submission unit 403 is used to submit the payment transaction processing document to the payment service platform when the verification result indicates that the user information of the target user has been verified, so that the payment service platform can process the transaction corresponding to the payment transaction processing document.

[0065] In a preferred embodiment of this example, the step of the authentication service program verifying the user information of the target user includes:

[0066] The identification information of the target user's client device is determined based on the user information;

[0067] Verify whether the identification information of the target user's client device is bound to a special field preset by the authentication service program;

[0068] If so, return a verification result indicating that the user information verification of the target user has passed;

[0069] If not, a verification result indicating that the user information verification of the target user failed is returned.

[0070] In a preferred embodiment of this example, when the identification information of the target user's user terminal device is bound to a special field preset by the authentication service program, the authentication service program is further used to add the signature information corresponding to the target user to the payment transaction processing document.

[0071] The submission unit 403 is specifically used to submit the payment transaction processing document with the signature information of the target user added to it to the payment transaction service platform, so that the payment transaction service platform can confirm that the signature information added to the payment transaction processing document corresponds to the target user and process the transaction corresponding to the payment transaction processing document.

[0072] In a preferred embodiment of this invention, the target user's client device includes the target user's server, and the target user's server is communicatively connected to the computer device; the identification information of the target user's client device includes the MAC address information of the target user's server.

[0073] In a preferred embodiment of this example, the acquisition unit 401 is specifically used to acquire multiple installation files of the authentication service program; and to configure the multiple installation files of the authentication service program in the software installation directory of the target application locally, so that the authentication service program is associated with the target application.

[0074] The target application is used to execute the payment business authentication method.

[0075] In this embodiment, the operations performed by each unit in the computer device are the same as described above. Figures 2 to 3 The embodiments shown are similar and will not be repeated here.

[0076] In this embodiment, the computer device deploys an authentication service program to verify the user information submitted by the user. Upon successful verification, the program submits a payment processing document for the user's required transaction to the payment service platform, which then processes the transaction corresponding to that document. Therefore, to complete user authentication, the user does not need to carry a UKey; only the authentication service program deployed on the computer device is required. Furthermore, user information does not need to be written to the UKey during authentication; the authentication service program can directly read the user information, eliminating the need for writing data. This reduces the time required for each transaction and improves processing efficiency.

[0077] The computer device in the embodiments of this application is described below. Please refer to [link / reference]. Figure 5 One embodiment of the computer device in this application includes:

[0078] The computer device 500 may include one or more central processing units (CPUs) 501 and a memory 505, in which one or more applications or data are stored.

[0079] The memory 505 can be volatile or persistent storage. The program stored in the memory 505 can include one or more modules, each module including a series of instruction operations on the computer device. Furthermore, the central processing unit 501 can be configured to communicate with the memory 505 and execute the series of instruction operations stored in the memory 505 on the computer device 500.

[0080] Computer device 500 may also include one or more power supplies 502, one or more wired or wireless network interfaces 503, one or more input / output interfaces 504, and / or one or more operating systems, such as Windows Server™, Mac OS X™, Unix™, Linux™, FreeBSD™, etc.

[0081] The central processing unit 501 can perform the aforementioned... Figures 2 to 3 The specific operations performed by the computer device in the illustrated embodiment will not be described in detail here.

[0082] This application also provides a computer storage medium, one embodiment of which includes: the computer storage medium storing instructions, which, when executed on a computer, cause the computer to perform the aforementioned... Figures 2 to 3 The operations performed by the computer device in the illustrated embodiment.

[0083] This application also provides a computer program product, one embodiment of which includes: when the computer program product is run on a computer device, causing the computer device to perform the aforementioned... Figures 2 to 3 The operations performed by the computer device in the illustrated embodiment.

[0084] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0085] In the several embodiments provided in this application, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection between apparatuses or units through some interfaces, and may be electrical, mechanical, or other forms.

[0086] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0087] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0088] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

Claims

1. A payment transaction authentication method, characterized in that, The method is applied to a computer device; the method includes: Obtain the authentication service procedure, and obtain the user information of the target user and the payment transaction processing document submitted by the target user; The authentication service program is used to verify the user information of the target user and the verification result is returned. When the verification result indicates that the user information of the target user has been verified, the signature information corresponding to the target user is added to the business processing document, and the business processing document with the signature information of the target user added is submitted to the payment business service platform, so that the payment business service platform confirms that the signature information added to the business processing document corresponds to the target user and processes the business corresponding to the business processing document. The verification of the target user's user information is based on the identification information of the target user's user terminal device, and the identification information of the target user's user terminal device is bound to a special field preset by the authentication service program. The process of verifying the user information of the target user using the authentication service program includes: Based on the association between the authentication service program and the target application local to the computer device, the target application is run to call the user identity authentication service provided by the authentication service program to verify the user information of the target user; The authentication service program interfaces with the target application by configuring its multiple installation files in the software installation directory of the target application.

2. The method according to claim 1, characterized in that, The authentication service procedure verifies the user information of the target user through the following steps: The identification information of the target user's client device is determined based on the user information; Verify whether the identification information of the target user's client device is bound to a special field preset by the authentication service program; If so, return a verification result indicating that the user information verification of the target user has passed; If not, a verification result indicating that the user information verification of the target user failed is returned.

3. The method according to claim 2, characterized in that, The target user's client device includes the target user's server, which is communicatively connected to the computer device; the identification information of the target user's client device includes the MAC address information of the target user's server.

4. The method according to claim 1, characterized in that, The authentication service acquisition procedure includes: Obtain multiple installation files of the authentication service program; Configure multiple installation files of the authentication service program in the software installation directory of the target application locally, so that the authentication service program is associated with the target application; The payment authentication method is executed when the computer device runs the target application.

5. A computer device, characterized in that, The computer device includes: The acquisition unit is used to acquire the authentication service program, and to acquire the user information of the target user and the payment transaction processing document submitted by the target user; An authentication unit is used to verify the user information of the target user using the authentication service program and return the verification result; The submission unit is used to add the signature information corresponding to the target user to the business processing document when the verification result indicates that the user information of the target user has been verified, and submit the business processing document with the signature information of the target user added to it to the payment business service platform, so that the payment business service platform confirms that the signature information added to the business processing document corresponds to the target user and processes the business corresponding to the business processing document. The verification of the target user's user information is based on the identification information of the target user's user terminal device, and the identification information of the target user's user terminal device is bound to a special field preset by the authentication service program. The authentication unit is specifically used for: Based on the association between the authentication service program and the target application local to the computer device, the target application is run to call the user identity authentication service provided by the authentication service program to verify the user information of the target user; The authentication service program interfaces with the target application by configuring its multiple installation files in the software installation directory of the target application.

6. The computer device according to claim 5, characterized in that, The authentication service procedure verifies the user information of the target user through the following steps: The identification information of the target user's client device is determined based on the user information; Verify whether the identification information of the target user's client device is bound to a special field preset by the authentication service program; If so, return a verification result indicating that the user information verification of the target user has passed; If not, a verification result indicating that the user information verification of the target user failed is returned.

7. The computer device according to claim 5, characterized in that, The acquisition unit is specifically used to acquire multiple installation files of the authentication service program; and to configure the multiple installation files of the authentication service program in the software installation directory of the target application locally, so that the authentication service program is associated with the target application. The computer device executes the payment business authentication method according to any one of claims 1 to 4 when running the target application.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the method as described in any one of claims 1 to 4.

9. A computer storage medium, characterized in that, The computer storage medium stores instructions that, when executed on the computer, cause the computer to perform the method as described in any one of claims 1 to 4.

10. A computer program product, characterized in that, When the computer program product is run on a computer device, it causes the computer device to perform the method as described in any one of claims 1 to 4.

Images