A palm payment method and related device
By replacing dedicated payment devices with camera modules and terminal equipment, the deployment cost of palm payment has been reduced, solving the problem of high cost of palm payment devices and promoting the popularization of palm payment.
Patent Information
- Application Number
- CN202311341833.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2023-10-13
- Publication Date
- 2025-12-12
- Estimated Expiration
- 2043-10-13
AI Technical Summary
The high cost of existing mobile payment devices makes it difficult for small-scale merchants to deploy them, thus hindering the promotion and popularization of mobile payment.
By using camera modules and terminal devices equipped with the swipe payment application to replace dedicated payment devices, the camera module only contains image acquisition and communication components, the application is installed on the terminal device, and the backend server processes the payment results, thus reducing deployment costs.
This significantly reduces the deployment cost of the mobile payment service, improves the ease of merchant access, and facilitates the promotion and popularization of mobile payment.
Smart Images

Figure CN117333187B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the technical field of computer, in particular to a palm payment method and related device. BACKGROUND
[0002] Palm payment is a mobile payment method based on biometric technology. After a user opens the palm payment function, the user can perform palm print scanning in the palm print recognition area of the palm payment device. After palm print recognition, the corresponding amount can be deducted from the payment account of the user, and the payment operation is completed. Compared with face payment, two-dimensional code payment and other methods, palm payment has the advantages of reducing privacy information leakage and convenient operation.
[0003] At present, palm payment needs to be completed through a special palm payment device. The palm payment device usually has many high-cost hardware configurations (such as a computing unit and a storage unit) integrated inside. This correspondingly leads to a high deployment cost of the palm payment device, which is not conducive to the installation and deployment of small-scale merchants and the popularization and promotion of palm payment. SUMMARY
[0004] The palm payment method and related device provided by the embodiments of the present application can reduce the deployment cost of the palm payment service, facilitate the deployment of the palm payment service by merchants, and facilitate the popularization and promotion of the palm payment service.
[0005] Therefore, the first aspect of the present application provides a palm payment method applied to a terminal device installed with a palm payment application, and the method comprises the following steps:
[0006] receiving a target palm image transmitted by a camera module;
[0007] transmitting the target palm image to a background server corresponding to the palm payment application; the background server is configured to find a target object corresponding to the target palm image according to the target palm image, and determine a target payment result corresponding to the target palm image according to the finding result;
[0008] receiving the target payment result returned by the background server, and prompting the target payment result.
[0009] The second aspect of the present application provides a palm payment method applied to a camera module, and the method comprises the following steps:
[0010] collecting a plurality of basic palm images;
[0011] perform target screening processing on the plurality of base palm images to obtain target palm images; the target screening processing includes at least one of living body screening and optimization screening; the living body screening is used for screening and retaining a base palm image corresponding to a living body palm; the optimization screening is used for screening and retaining a base palm image with image quality meeting a preset quality requirement;
[0012] transmitting the target palm image to a terminal device installed with a palm payment application; the terminal device is used for transmitting the target palm image to a background server of the palm payment application; the background server is used for determining a target payment result corresponding to the target palm image based on the target palm image.
[0013] The third aspect of the present application provides a palm payment method applied to a background server corresponding to a palm payment application, and the method comprises the following steps:
[0014] receiving a target palm image transmitted by a terminal device installed with the palm payment application;
[0015] finding a target object corresponding to the target palm image according to the target palm image;
[0016] if the target object is found, performing a payment operation based on a payment account of the target object and generating a target payment result representing a result corresponding to the payment operation; if the target object is not found, generating a target payment result representing a palm payment failure;
[0017] returning the target payment result to the terminal device.
[0018] The fourth aspect of the present application provides a palm payment system, and the system comprises a camera module, a terminal device installed with a palm payment application, and a background server corresponding to the palm payment application;
[0019] The camera module is used for collecting a target palm image and transmitting the target palm image to the terminal device;
[0020] The terminal device is used for receiving the target palm image and transmitting the target palm image to the background server;
[0021] The background server is used for receiving the target palm image, finding a target object corresponding to the target palm image according to the target palm image, determining a target payment result corresponding to the target palm image according to a finding result, and returning the target payment result to the terminal device;
[0022] The terminal device is further used for receiving the target payment result and prompting the target payment result.
[0023] The fifth aspect of the present application provides a palm brushing payment device, the device comprising:
[0024] A first receiving module is configured to receive a target palm image transmitted by a camera module;
[0025] A first sending module is configured to transmit the target palm image to a background server corresponding to the palm brushing payment application; the background server is configured to search for a target object corresponding to the target palm image according to the target palm image, and determine a target payment result corresponding to the target palm image according to a search result;
[0026] A second receiving module is configured to receive the target payment result returned by the background server, and prompt the target payment result.
[0027] Optionally, the device further comprises:
[0028] A security checking module is configured to perform security checking on a running environment of the palm brushing payment application, and obtain an environment checking result;
[0029] A communication establishing module is configured to establish a communication connection between the device and the camera module if the environment checking result indicates that the running environment of the palm brushing payment application meets preset security requirements.
[0030] Optionally, the security checking module is specifically configured to perform security checking in at least one of the following manners:
[0031] Check whether a target management permission of the terminal device is modified;
[0032] Check whether the palm brushing payment application is running in a virtualization environment or an emulator;
[0033] Check a system version and a security patch version of the terminal device;
[0034] Check whether application signature and permission of the palm brushing payment application are correct;
[0035] Check a network environment and a proxy setting in which the terminal device is located;
[0036] Check a permission of a file storage space corresponding to the palm brushing payment application.
[0037] Optionally, the first receiving module is further configured to receive first encrypted identity information transmitted by the camera module; the first encrypted identity information is obtained by encrypting identity information of the camera module;
[0038] The first sending module is further configured to transmit second encrypted identity information to the background server, wherein the second encrypted identity information is obtained by encrypting identity information of the camera module and identity information of the palm payment application;
[0039] The second receiving module is further configured to receive an identity verification result returned by the background server, wherein the identity verification result is obtained by the background server verifying the identity information of the camera module and the identity information of the palm payment application;
[0040] The communication establishing module is further configured to determine that a communication connection between the camera module is safe if the identity verification result indicates that the identity verification of the camera module is passed and the identity verification of the palm payment application is passed, wherein the safe communication connection supports transmission of a palm image.
[0041] Optionally, the first receiving module is specifically configured to:
[0042] receive a first encrypted message transmitted by the camera module, wherein the first encrypted message comprises encrypted image information and first signature information, the encrypted image information is obtained by encrypting the target palm image, and the first signature information is generated based on the encrypted image information;
[0043] perform integrity verification on the encrypted image information based on the first signature information;
[0044] decrypt the encrypted image information to obtain the target palm image if the integrity verification is passed.
[0045] Optionally, the first sending module is further configured to transmit a second encrypted message to the camera module, wherein the second encrypted message comprises encrypted instruction information and second signature information, the encrypted instruction information is obtained by encrypting a control instruction for the camera module, and the second signature information is generated based on the encrypted instruction information.
[0046] Optionally, the apparatus further comprises:
[0047] an application keep-alive module configured to control a process corresponding to the palm payment application to maintain a live state in the terminal device through a process setting program in the palm payment application.
[0048] Optionally, the apparatus further comprises:
[0049] a floating window module configured to create a target floating window in a foreground of the terminal device through a floating window creation program in the palm payment application, and display the target payment result through the target floating window.
[0050] The sixth aspect of the application provides a palm brushing payment device, the device comprises:
[0051] An image collecting module is configured to collect a plurality of basic palm images.
[0052] An image screening module is configured to perform target screening processing on the plurality of basic palm images to obtain target palm images, wherein the target screening processing comprises at least one of living body screening and optimization screening, the living body screening is configured to screen and retain the basic palm images corresponding to the living body palm, and the optimization screening is configured to screen and retain the basic palm images with image quality meeting preset quality requirements.
[0053] A second sending module is configured to transmit the target palm images to a terminal device installed with a palm brushing payment application, the terminal device is configured to transmit the target palm images to a background server of the palm brushing payment application, and the background server is configured to determine a corresponding target payment result based on the target palm images.
[0054] Optionally, the second sending module is specifically configured to:
[0055] perform encryption processing on the target palm images to obtain encrypted image information;
[0056] perform signature processing based on the encrypted image information to obtain first signature information;
[0057] generate a first encrypted message according to the encrypted image information and the first signature information;
[0058] transmit the first encrypted message to the terminal device.
[0059] The seventh aspect of the application provides a palm brushing payment device, the device comprises:
[0060] A third receiving module is configured to receive target palm images transmitted by a terminal device installed with the palm brushing payment application;
[0061] An object searching module is configured to search for a target object corresponding to the target palm images according to the target palm images.
[0062] A result generating module is configured to perform a payment operation based on a payment account of the target object and generate a target payment result representing a result corresponding to the payment operation if the target object is found, and generate a target payment result representing a palm brushing payment failure if the target object is not found.
[0063] A third sending module is configured to return the target payment result to the terminal device.
[0064] Optionally, the third receiving module is further configured to receive encrypted identity information sent by the terminal device; the encrypted identity information is obtained by encrypting identity information of the palm payment application and identity information of a camera module that establishes a communication connection with the terminal device.
[0065] The apparatus further includes:
[0066] An identity verification module configured to verify the identity of the palm payment application and the identity of the camera module based on the encrypted identity information, to obtain an identity verification result, and to return the identity verification result to the terminal device.
[0067] A device recording module configured to record the terminal device as a legal device that supports the palm payment service if the identity verification result indicates that the identity of the camera module is verified and the identity of the palm payment application is verified.
[0068] Optionally, the apparatus further includes:
[0069] A heartbeat establishing module configured to establish an associated heartbeat between the palm payment application in the terminal device; the associated heartbeat is used to detect whether the palm payment application in the terminal device remains in a live state.
[0070] A prompting module configured to send a prompt information to the terminal device to prompt the terminal device to detect a running state of the palm payment application when it is detected that the associated heartbeat is disconnected.
[0071] An eighth aspect of the present application provides an electronic device, the device including a processor and a memory:
[0072] The memory is configured to store a computer program.
[0073] The processor is configured to execute steps of the palm payment method according to the computer program.
[0074] A ninth aspect of the present application provides a computer readable storage medium, the computer readable storage medium is configured to store a computer program, the computer program is configured to execute steps of the palm payment method according to the first aspect, or the second aspect, or the third aspect.
[0075] The tenth aspect of the present application provides a computer program product or a computer program, which comprises computer instructions stored in a computer readable storage medium. A processor of a computer device reads the computer instructions from the computer readable storage medium, and the processor executes the computer instructions, so that the computer device executes the steps of the palm brushing payment method of the first aspect, or the second aspect, or the third aspect.
[0076] From the above technical solutions, it can be seen that the embodiments of the present application have the following advantages:
[0077] The embodiments of the present application provide a palm brushing payment method, which is cooperatively executed by a camera module, a terminal device installed with a palm brushing payment application, and a background server corresponding to the palm brushing payment application. In the method, the terminal device installed with the palm brushing payment application can receive a target palm image collected by the camera module, and transmit the target palm image to the background server corresponding to the palm brushing payment application; the background server can find a target object corresponding to the target palm image according to the target palm image, and determine a target payment result corresponding to the target palm image according to the finding result, and return the target payment result to the terminal device; after receiving the target payment result, the terminal device can prompt the target payment result. The method provided by the embodiments of the present application uses the camera module and the terminal device installed with the palm brushing payment application to replace the special palm brushing payment device in the related art, because the camera module used only includes related image collection devices and communication devices, and the palm brushing payment application can be installed on any common terminal device in daily life, so the deployment cost of the palm brushing payment service is greatly reduced; when a merchant accesses the palm brushing payment service, only a low-cost camera module needs to be deployed, and the palm brushing payment application needs to be installed on a commonly used terminal device, without the need to deploy a high-cost special palm brushing payment device, so that the convenience of the merchant accessing the palm brushing payment service is improved, which is conducive to the popularization and promotion of the palm brushing payment. BRIEF DESCRIPTION OF DRAWINGS
[0078] Figure 1 A working principle schematic diagram of the palm brushing payment system provided by the embodiments of the present application;
[0079] Figure 2 A flowchart of the palm brushing payment method on the terminal device side provided by the embodiments of the present application;
[0080] Figure 3 A signaling interaction diagram in the identity verification process provided by the embodiments of the present application;
[0081] Figure 4 A schematic diagram of a target floating window provided by the embodiments of the present application;
[0082] Figure 5 A flowchart of a palm brushing payment method provided by an embodiment of the present application is shown in FIG. 1.
[0083] Figure 6 A flowchart of a palm brushing payment method provided by an embodiment of the present application is shown in FIG. 1.
[0084] Figure 7 A flowchart of a palm brushing payment method provided by an embodiment of the present application is shown in FIG. 1.
[0085] Figure 8 A flowchart of a palm brushing payment method provided by an embodiment of the present application is shown in FIG. 1.
[0086] Figure 9 A structure diagram of a palm brushing payment device provided by an embodiment of the present application is shown in FIG. 2.
[0087] Figure 10 A structure diagram of a palm brushing payment device provided by an embodiment of the present application is shown in FIG. 2.
[0088] Figure 11 A structure diagram of a palm brushing payment device provided by an embodiment of the present application is shown in FIG. 2.
[0089] Figure 12 A structure diagram of a palm brushing payment device provided by an embodiment of the present application is shown in FIG. 2.
[0090] Figure 13 A structure diagram of a palm brushing payment device provided by an embodiment of the present application is shown in FIG. 2. DETAILED DESCRIPTION
[0091] In order to make the personnel in the art better understand the present application, the technical solutions in the embodiments of the present application will be described clearly and completely below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, but not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor fall within the scope of protection of the present application.
[0092] The terms "first", "second", "third", "fourth" and the like in the description and in the claims of the present application, and above-described drawings, if any, are used to distinguish between similar objects and are not necessarily used to describe a particular sequential or chronological order. It is to be understood that the use of the terms so-termed, where appropriate, can be interchanged with each other to allow the embodiments of the present application described herein to be implemented in other than the order illustrated or described herein. Moreover, the terms "comprising" and "having" and any variations thereof, are intended to cover non-exclusive inclusions, for example, a process, method, system, product, or apparatus that includes a list of steps or units is not necessarily limited to those steps or units clearly listed, but can include other steps or units not clearly listed or inherent to such processes, methods, products, or apparatuses.
[0093] The palm payment method provided by the embodiments of the present application includes a palm payment method on the side of a terminal device (wherein a palm payment application is installed), a palm payment method on the side of a camera module, and a palm payment method on the side of a background server (corresponding to the palm payment application).
[0094] The palm payment method on the side of the terminal device is executed by the terminal device, which can include but is not limited to a mobile phone, a computer, a smart voice interactive device, a smart home appliance, a vehicle-mounted terminal, an aircraft, etc. The palm payment method on the side of the camera module is executed by the camera module, which can include an image acquisition device and a communication device. The image acquisition device can be a three-dimensional camera, for example, wherein software and hardware related to living body detection and / or image quality detection can be added, including a depth camera and an infrared camera. The communication device can be at least one of a wireless communication device (such as a Bluetooth communication device, etc.) and a wired communication device. The palm payment method on the side of the background server is executed by the server, which is an independent physical server, can be a server cluster or a distributed system composed of multiple physical servers, or can be a cloud server.
[0095] It should be understood that the terminal device and the camera module in the embodiments of the present application can be directly or indirectly connected through wired or wireless communication, and the terminal device and the server in the embodiments of the present application can also be directly or indirectly connected through wired or wireless communication, which is not limited in the embodiments of the present application.
[0096] It should be noted that the information (including but not limited to the information exchanged between the terminal device and the camera module, the information exchanged between the terminal device and the background server, etc.), data (including but not limited to palm image data, etc.), and signals involved in the embodiments of the present application are all authorized by the relevant objects or fully authorized by all parties, and the collection, use and processing of the relevant data comply with the relevant laws, regulations and standards of the relevant countries and regions.
[0097] To facilitate understanding of the palm payment method provided by the embodiments of the present application, the palm payment system supporting the palm payment method is introduced first.
[0098] Referring to Figure 1 , Figure 1 The working principle schematic diagram of the palm payment system provided by the embodiments of the present application is shown in FIG. 1. As shown in FIG. 1, the palm payment system includes a camera module 110, a terminal device 120 and a server 130; wherein the palm payment application is installed on the terminal device 120, and the server 130 is a background server corresponding to the palm payment application. The camera module 110 and the terminal device 120 can communicate through wired or wireless mode, and the terminal device 120 and the server 130 can also communicate through wired or wireless mode. Figure 1
[0099] In the embodiments of the present application, the camera module 110 is configured to collect a target palm image and transmit the target palm image to the terminal device 120. Specifically, the camera module 110 can collect multiple palm images of a user as basic palm images when the user's palm is close; then the camera module 110 can perform target screening processing on the multiple basic palm images to retain a target palm image, wherein the target screening processing can include at least one of living body screening and optimization screening, the living body screening is configured to screen and retain a basic palm image corresponding to a living body palm, and the optimization screening is configured to screen and retain a basic palm image with image quality meeting a preset quality requirement; further, the camera module 110 can transmit the retained target palm image to the terminal device 120.
[0100] In the embodiments of the present application, the terminal device 120 is configured to receive the target palm image transmitted by the camera module 110, and further transmit the target palm image to the server 130.
[0101] In the embodiments of the present application, the server 130 is configured to receive the target palm image transmitted by the terminal device 120, find a target object corresponding to the target palm image according to the target palm image, determine a target payment result corresponding to the target palm image according to the finding result, and further return the target payment result to the terminal device 120. Specifically, after receiving the target palm image, the server 130 can find a target object corresponding to the target palm image according to the target palm image; if the target object is found, the corresponding payment operation can be performed based on the payment account of the target object, and a target payment result representing the result corresponding to the payment operation is generated, if the target object is not found, a target payment result representing the failure of palm payment is directly generated; further, the server 130 can feed back the generated target payment result to the terminal device 120.
[0102] In the embodiment of the present application, the terminal device 120 is further configured to receive the target payment result returned by the server 130 and prompt the target payment result, so as to inform the merchant and trigger the user related payment result of the palm payment.
[0103] In this way, the camera module 110 and the terminal device 120 installed with the palm payment application are used to replace the special palm payment device in the related art. Since the camera module 110 is simple to configure and only includes related image acquisition devices and communication devices, and the palm payment application can be installed on any common terminal device in daily life, the deployment cost of the palm payment service is greatly reduced. When the merchant accesses the palm payment service, only the low-cost camera module 110 needs to be deployed, and the palm payment application needs to be installed on the commonly used terminal device 120, without the need to deploy the high-cost special palm payment device, thereby improving the convenience of the merchant accessing the palm payment service and facilitating the popularization and promotion of the palm payment. In addition, the server 130 can provide corresponding background service support in the palm payment process, thereby ensuring that the palm payment service is stable and reliable.
[0104] The palm payment method provided by the present application will be described in detail through the method embodiment.
[0105] Referring to Figure 2 , Figure 2 The flowchart of the palm payment method on the terminal device side provided by the embodiment of the present application is shown. It should be understood that the terminal device used to execute the palm payment method is installed with a palm payment application, which is an application program used to realize the palm payment service in combination with the camera module. As Figure 2 shown, the palm payment method includes the following steps:
[0106] Step 201: receiving the target palm image transmitted by the camera module.
[0107] In the embodiment of the present application, when the user uses the palm payment function, the palm can be aimed at the camera module; correspondingly, the camera module can acquire the palm image of the user, determine the target palm image from the acquired palm image, and then transmit the target palm image to the terminal device which establishes a communication connection and is installed with the palm payment application.
[0108] It should be noted that the camera module in the embodiment of the present application is a device for collecting and transmitting palm images to a terminal device. The camera module can be composed of a camera component for collecting palm images, a communication component for transmitting palm images, and a basic power supply component. Among them, the camera component for collecting palm images can be a traditional camera with lower cost, or a three-dimensional camera with image detection and screening function; the three-dimensional camera adds image detection and screening related software and hardware compared with the traditional camera, such as software and hardware related to living body screening (for detecting whether the collected palm image corresponds to a living palm, and screening palm images corresponding to a living palm), software and hardware related to image quality detection and screening (for detecting the quality of the image, such as detecting the size of the palm, the angle of the palm, the contrast of the image, the brightness of the image, the definition of the image, and other indicators in the collected image, and screening the palm image with better image quality accordingly), etc., and the three-dimensional camera can specifically include a depth camera and an infrared camera. The communication component for transmitting palm images can be a component supporting wireless communication (such as Bluetooth communication), or a component supporting wired communication (such as communication through a data line).
[0109] It should be noted that the target palm image is a palm image transmitted by the camera module to the terminal device installed with the palm brushing payment application. The target palm image can be the palm image originally collected by the camera module, for example, when the camera component in the camera module is a traditional camera, the target palm image is the palm image originally collected by the camera module. The target palm image can also be a palm image retained after screening processing by the camera module, for example, when the camera component in the camera module is a three-dimensional camera with added software and hardware related to living body screening and image quality detection and screening, the target palm image can be a palm image retained after at least one of living body screening and optimization screening by the camera model, wherein the living body screening can screen and retain palm images corresponding to a living palm, and the optimization screening can screen and retain palm images with image quality meeting the preset quality requirements.
[0110] As an example, the terminal device installed with the palm brushing payment application can establish a Bluetooth connection with the camera module, when the user triggers the palm brushing payment, the camera module can collect a video stream including the user's palm, and perform living body screening and optimization screening on the video frames in the video stream to screen and retain video frames corresponding to a living palm and meeting the preset quality requirements as target palm images, and then transmit the target palm images to the terminal device installed with the palm brushing payment application through Bluetooth.
[0111] It should be understood that the target palm image transmitted by the camera module to the terminal device can be one or more, and the number of target palm images transmitted by the camera module to the terminal device is not limited in the embodiment of the present application.
[0112] Step 202: transmitting the target palm image to a background server corresponding to the palm brushing payment application; the background server is configured to find a target object corresponding to the target palm image according to the target palm image, and determine a target payment result corresponding to the target palm image according to a finding result.
[0113] After the terminal device receives the target palm image transmitted by the camera module, the terminal device can further transmit the target palm image to a background server corresponding to the palm brushing payment application, so that the background server completes a corresponding palm brushing payment service based on the target palm image.
[0114] It should be noted that the background server corresponding to the palm brushing payment application in the embodiments of the present application is configured to provide background support for the palm brushing payment service. Specifically, the background server can find a target object corresponding to a target palm image transmitted by a terminal device, i.e., find a user corresponding to the target palm image, according to the target palm image. If the target object is found, the background server can further deduct a corresponding amount of money from a payment account corresponding to the target object, and accordingly generate a target payment result corresponding to the target palm image. It should be understood that if the deduction of the amount of money is successful, the generated target payment result indicates that the palm brushing payment is successful, and if the deduction of the amount of money fails (e.g., due to insufficient balance in the payment account), the generated target payment result indicates that the palm brushing payment fails. If the target object is not found, the background server can directly generate a target payment result indicating that the palm brushing payment fails. Then, the background server can return the generated target payment result to the terminal device.
[0115] It should be understood that in actual applications, in a case where the target palm image transmitted by the camera module to the terminal device is a raw palm image collected by the camera module, the terminal device can perform a screening process on the target palm image through the palm brushing payment application in the terminal device. For example, the terminal device can perform at least one of a living body screening and an optimization screening on the received target palm image, and then transmit the target palm image remaining after the screening process to the background server. In a case where the target palm image transmitted by the camera module to the terminal device is a palm image remaining after the screening process of the camera module, the terminal device can directly forward the received target palm image to the background server. That is, in the embodiments of the present application, the screening process on the raw collected palm image can be performed by the camera module or the terminal device.
[0116] Step 203: receiving the target payment result returned by the background server, and prompting the target payment result.
[0117] After receiving the target payment result returned by the background server corresponding to the palm payment application, the terminal device can prompt the target payment result, so as to make the merchant and the user triggering the palm payment know the payment result of the palm payment.
[0118] It should be understood that the terminal device can prompt the target payment result in the following ways: displaying the target payment result on the screen of the terminal device, or playing the voice corresponding to the target payment result through the terminal device. The embodiments of the present application do not limit the prompting manner of the target payment result. In addition, the target payment result can reflect the payment amount corresponding to the palm payment, the payment account used for the palm payment, and the like, in addition to reflecting whether the palm payment is successful. The embodiments of the present application do not limit the content reflected by the target payment result.
[0119] In a possible implementation, the terminal device installed with the palm payment application in the embodiments of the present application can be a terminal device provided by a merchant, for example, the palm payment application can be installed on the terminal device (such as a mobile phone) of a merchant staff, the terminal device establishes a communication connection with the camera module, and receives the target palm image transmitted by the camera module. In this way, the security of the commodity transaction is ensured, and the merchant participates in the palm payment process of the user and knows the result of the palm payment in time.
[0120] In another possible implementation, the terminal device installed with the palm payment application in the embodiments of the present application can also be a terminal device of a user triggering the transaction through the palm payment.
[0121] For example, assuming that the user a needs to pay for the selected goods through the palm payment, the user a can establish a communication connection between the terminal device carried by the user a and the camera module for collecting the palm image. For example, the terminal device can establish a communication connection with the camera module based on the near field communication (NFC) technology, that is, the user a can bring the terminal device close to the camera module, the terminal device recognizes the existence of the camera module (the camera module is also configured with a corresponding induction chip) through the induction chip installed in the terminal device, and the terminal device and the camera module can establish a communication connection after successfully recognizing the camera module. It should be understood that the terminal device and the camera module can also be connected in other ways in actual application, and the embodiments of the present application do not limit the connection manner.
[0122] After the terminal device prompts that the communication connection between the terminal device and the camera module is successfully established, the user A can aim his palm at the camera module. The camera module correspondingly collects the palm image of the user A to obtain a target palm image, and sends the target palm image to the terminal device of the user A through the established communication connection. The terminal device sends the target palm image to the background server corresponding to the palm payment application.
[0123] In this way, by the above manner, the terminal device carried by the user who triggers the palm payment is used to perform the relay task of the target palm image, which can further reduce the cost required by the merchant to deploy the palm payment service, i.e., the merchant only needs to deploy the camera module for collecting the palm image. In addition, the terminal device carried by the user relays the target palm image, which can better ensure the security of the target palm image, i.e., avoiding the terminal device of other users from obtaining the target palm image, so as to avoid the palm image information from being leaked. Moreover, the terminal device carried by the user relays the target palm image, which can further improve the convenience of the palm payment, i.e., the user can complete the payment by himself. In a possible implementation manner, one camera module can be deployed in one merchant, i.e., the camera module can establish a communication connection with the terminal device provided by the merchant and installed with the palm payment application, and the camera module is used to perform the palm payment service of the merchant.
[0124] In another possible implementation manner, one camera module can be shared by multiple merchants, such as multiple merchants (the distance between the multiple merchants does not exceed a preset distance threshold) located within a preset range. The camera module can establish a communication connection with the terminal device provided by each of the multiple merchants and installed with the palm payment application. In order to enable the camera module to support the palm payment service of the multiple merchants, a moving device (such as a wheel installed at the bottom of the camera module, a propeller installed at the top of the camera module, etc.) and a corresponding moving control device can be installed on the camera module, so as to facilitate the camera module to move to the corresponding merchant.
[0125] In the implementation, after the camera module and the terminal device of the merchant establish the communication connection, the camera module can obtain the merchant location information provided by the terminal device, and record the correspondence between the identifier of the terminal device and the merchant location information. Correspondingly, in actual application, if a merchant to which a terminal device establishing a communication connection with the camera module belongs needs to use the palm payment service, the merchant can correspondingly trigger the calling instruction for the camera module through the palm payment application on the terminal device, that is, the terminal device can send the calling instruction to the camera module. After receiving the calling instruction, the camera module can find the merchant location information corresponding to the terminal device sending the calling instruction based on the correspondence between the identifier of the terminal device and the merchant location information recorded in advance by the camera module, and then control the camera module to move to the merchant to which the terminal device belongs through the motion controller and the motion device on the camera module, and perform the palm image acquisition task.
[0126] In this way, by sharing one camera module for performing the palm payment service by multiple merchants, the cost of the merchants accessing the palm payment service can be further reduced, and the popularization and promotion of the palm payment service are facilitated.
[0127] The palm payment method provided by the embodiment of the present application uses the camera module and the terminal device installed with the palm payment application to replace the dedicated palm payment device in the related art. Since the camera module used has a simple configuration, only the related image acquisition device and the communication device are included, and the palm payment application can be installed on any common terminal device in daily life, the deployment cost of the palm payment service is greatly reduced. When the merchant accesses the palm payment service, only the low-cost camera module needs to be deployed, and the palm payment application needs to be installed on the commonly used terminal device, without the need to deploy the high-cost dedicated palm payment device. In this way, the convenience of the merchant accessing the palm payment service is improved, and the popularization and promotion of the palm payment are facilitated.
[0128] In a possible implementation, before the terminal device completes the installation operation of the palm payment application and establishes the communication connection with the camera module, the method provided by the embodiment of the present application further includes:
[0129] Performing security check on the running environment of the palm payment application to obtain an environment check result. If the environment check result indicates that the running environment of the palm payment application meets the preset security requirement, the communication connection with the camera module is established.
[0130] In the embodiments of the present application, if a merchant or a user wants to access the palm payment service, the merchant or the user can download the palm payment application from the official platform and install the palm payment application on the terminal device. Since the palm payment application is installed on the terminal device of the merchant side, in order to ensure the security of the palm payment service, the running environment of the palm payment application needs to be checked for security before the palm payment application is officially used, that is, after the palm payment application is started, the running environment of the palm payment application can be automatically checked for security. If the obtained environment check result indicates that the running environment of the palm payment application meets the preset security requirement, it means that the running environment of the palm payment application is secure, and the security of the palm payment service can be ensured, at this time, the terminal device and the camera module can be allowed to establish a communication connection, that is, the terminal device is allowed to obtain the palm image in the palm payment; if the obtained environment check result indicates that the running environment of the palm payment application does not meet the preset security requirement, it means that the running environment of the palm payment application is not secure, and it is difficult to ensure the security of the palm payment service, at this time, the terminal device and the camera module are not allowed to establish a communication connection, that is, the terminal device is not allowed to obtain the palm image collected by the camera module.
[0131] It should be noted that the running environment of the palm payment application can be checked for security from the following aspects: whether the terminal device on which the palm payment application is installed is secure, whether the network environment in which the terminal device on which the palm payment application is installed is located is secure, whether the installed palm payment application itself is secure, and whether the file storage space occupied by the installed palm payment application in the terminal device is secure. If the environment check results obtained through each security check are all safe, it can be considered that the running environment of the palm payment application meets the preset security requirement, at this time, the terminal device and the camera module can be allowed to establish a communication connection, if the environment check result obtained through at least one security check is unsafe, it can be considered that the running environment of the palm payment application does not meet the preset security requirement, at this time, the terminal device and the camera module will not be allowed to establish a communication connection.
[0132] In this way, by the above-mentioned manner, the security of the running environment of the palm payment application is ensured, that is, the terminal device and the palm payment application accessing the palm payment service meet the specific security requirement, so as to avoid the palm payment service being illegally attacked and stolen, and the security and reliability of the palm payment service are ensured.
[0133] As an example, the running environment of the palm payment application can be checked for security, which can include at least one of the following security check manners:
[0134] 1) Check whether the target management permission of the terminal device on which the palm payment application is installed is modified.
[0135] The target management permission of the terminal device is checked, which is a way to check whether the terminal device installed with the palm swiping payment application is safe.
[0136] The target management permission can be a super management permission (root permission) of the terminal device. The super management permission is a kind of system management permission, and can also be referred to as root permission. An object obtaining the super management permission can perform operations such as adding, deleting, modifying, and inquiring any file in the terminal device system. In order to ensure the safety of the files in the terminal device, the super management permission is usually locked before the terminal device is shipped.
[0137] Since the application runs on the terminal device with the modified super management permission, the safety of the application cannot be guaranteed. Therefore, in the embodiments of the present application, whether the super management permission of the terminal device installed with the palm swiping payment application is modified, i.e., whether the terminal device is rooted, is checked. If it is found that the super management permission of the terminal device is modified, it is determined that the terminal device installed with the palm swiping payment application is not safe. For example, the RootBeer library or whether the system directory is writable is checked to check whether the super management permission of the terminal device is modified. Of course, in actual applications, other ways can also be used to check whether the super management permission of the terminal device is modified, and the embodiments of the present application do not make any limitation in this regard.
[0138] 2) Check whether the palm swiping payment application runs in a virtualization environment or an emulator.
[0139] The check whether the palm swiping payment application runs in a virtualization environment or an emulator is a way to check whether the terminal device installed with the palm swiping payment application is safe.
[0140] In some cases (such as application debugging), the application can run in a virtualization environment or an emulator, which is different from running in a physical device. The application running in a virtualization environment or an emulator has a high security risk, and the application itself and the data in the application are easy to be modified and attacked.
[0141] Based on this, in the embodiments of the present application, it can be checked whether the palm payment application is running in a virtualization environment or an emulator. If it is found that the palm payment application is running in a virtualization environment or an emulator, it can be determined that the palm payment application is not installed on a real terminal device, and the running environment of the palm payment application is not safe. For example, the CPU (Central Processing Unit) information, hardware parameters, system attributes and the like can be checked to check whether the palm payment application is running in a virtualization environment or an emulator. Of course, in actual application, other manners can also be used to check whether the palm payment application is running in a virtualization environment or an emulator, and the embodiments of the present application do not make any limitation in this regard.
[0142] 3) Check the system version and security patch version of the terminal device on which the palm payment application is installed.
[0143] Checking the system version and security patch version of the terminal device is a manner for checking whether the terminal device on which the palm payment application is installed is safe.
[0144] Generally, if the system version of the terminal device is too low or the security patch version is too old, the terminal device has a high possibility of having security vulnerabilities and being easily exploited by attackers.
[0145] Based on this, in the embodiments of the present application, the system version and security patch version of the terminal device on which the palm payment application is installed can be checked. If the system version is lower than a preset system version or the security patch version is lower than a preset security patch version, it indicates that the system version of the terminal device is too low or the security patch version is too old, and the security of the terminal device is not high enough. At this time, it can be determined that the terminal device on which the palm payment application is installed is not safe. For example, Build.VERSION.SDK_INT and SecurityPatchChecker can be used to check the system version and security patch version of the terminal device. Of course, in actual application, other manners can also be used to check the system version and security patch version of the terminal device, and the embodiments of the present application do not make any limitation in this regard.
[0146] 4) Check whether the application signature and permission of the palm payment application are correct.
[0147] Checking whether the application signature and permission of the palm payment application are correct is a manner for checking whether the installed palm payment application itself is safe.
[0148] In actual application, the developer of the palm payment application sets the corresponding application signature and permission for the palm payment application to ensure the security of the palm payment application. The application signature can ensure that the palm payment application is not tampered with, and the permission can ensure that the data of the palm payment application is not stolen.
[0149] Therefore, in the embodiments of the present application, the application signature and permission of the palm payment application can be checked. That is, whether the application signature of the palm payment application installed in the terminal device is consistent with the application signature set by the developer for the palm payment application, and whether the permission of the palm payment application installed in the terminal device is consistent with the permission set by the developer for the palm payment application are checked. If at least one of them is inconsistent, such as the application signature is tampered with or the permission is abused, it indicates that the palm payment application may have a security risk, that is, the palm payment application is determined to be unsafe. For example, the signature and permission of the palm payment application can be checked by using classes such as PackageManager and PackageInfo. Of course, in actual application, other ways can also be used to check the signature and permission of the palm payment application, and the embodiments of the present application do not make any limitation in this regard.
[0150] 5) Check the network environment and proxy settings of the terminal device on which the palm payment application is installed.
[0151] Checking the network environment and proxy settings of the terminal device is one way to check whether the network environment of the terminal device is secure.
[0152] In actual application, if the network environment of the terminal device is not secure, such as connecting to an untrusted network, the data exchanged between the terminal device and the server may be at risk of being attacked. In addition, if the terminal device sets a proxy, that is, a network proxy is set between the terminal device and the server to transfer data, the network proxy can obtain the data exchanged between the terminal device and the server, and accordingly, the risk of data theft attack is also easy to occur.
[0153] Therefore, in the embodiments of the present application, the network environment of the terminal device on which the palm payment application is installed can be checked to determine whether it is secure. That is, whether the network connected by the terminal device is trusted, and whether the network proxy is set by the terminal device are checked. If it is found that the network connected by the terminal device is not trusted, or it is found that the network proxy is set by the terminal device, it can be determined that the network environment of the terminal device is not secure. For example, the network environment and proxy settings of the terminal device can be checked by using classes such as NetworkInfo and Proxy. Of course, in actual application, other ways can also be used to check the network environment and proxy settings of the terminal device, and the embodiments of the present application do not make any limitation in this regard.
[0154] 6) checking the permission of the file storage space corresponding to the palm payment application.
[0155] Checking the permission of the file storage space corresponding to the palm payment application is a way to check whether the file storage space occupied by the palm payment application in the terminal device is safe.
[0156] In actual application, if the permission of the file storage space occupied by the application in the terminal device is acquired by other objects, it indicates that the object can access the data in the application from the file storage space, and then the data in the application will exist security risks.
[0157] Based on this, in the embodiments of the present application, it can be checked whether the permission of the file storage space corresponding to the palm payment application is acquired by other objects except the palm payment application itself. If it is found by checking that other objects acquire the permission of the file storage space corresponding to the palm payment application, it indicates that other objects can acquire the data in the palm payment application, that is, it indicates that the data in the palm payment application exists security risks. Exemplarily, the permission of the file storage space corresponding to the palm payment application can be checked by using classes such as PackageManager and File. Of course, in actual application, other ways can also be used to check the permission of the file storage space corresponding to the palm payment application, and the embodiments of the present application do not make any limitation in this regard.
[0158] In this way, by using one or more checking ways described above to check whether the running environment of the palm payment application is safe, the safety of the terminal device itself on which the palm payment application is installed, the safety of the palm payment application itself, the safety of the network environment in which the terminal device is located, and the safety of the data in the palm payment application can be reliably ensured, so as to ensure the safety and reliability of the palm payment service.
[0159] It should be understood that in actual application, other checking ways can also be used to check whether the running environment of the palm payment application is safe from other dimensions, and the embodiments of the present application do not make any limitation in this regard.
[0160] In a possible implementation, after the terminal device on which the palm payment application is installed establishes a communication connection with the camera module, before the camera module transmits the target palm image to the terminal device, the method provided by the embodiments of the present application further includes:
[0161] The terminal device receives first encrypted identity information transmitted by the camera module, the first encrypted identity information being obtained by encrypting identity information of the camera module. The terminal device transmits second encrypted identity information to the background server, the second encrypted identity information being obtained by encrypting the identity information of the camera module and identity information of the palm payment application. The terminal device receives an identity verification result returned by the background server, the identity verification result being obtained by the background server verifying the identity information of the camera module and the identity information of the palm payment application. If the identity verification result indicates that the identity verification of the camera module is passed and the identity verification of the palm payment application is passed, it is determined that the communication connection between the terminal device and the camera module is safe, and the safe communication connection can support transmission of the palm image.
[0162] In the embodiments of the present application, before the terminal device installed with the palm payment application and the camera module jointly implement the palm payment service, the identity of the camera module and the palm payment application can be verified by means of the background server corresponding to the palm payment application, so as to ensure that the camera module accessing the palm payment service is a legal camera module, and the palm payment application accessing the palm payment service is a legal palm payment application, and further ensure the security of the palm payment service.
[0163] Figure 3 The signaling interaction diagram in the identity verification process provided by the embodiments of the present application will be described below in conjunction with the signaling interaction process shown in Figure 3 It should be noted that after the communication connection is established between the terminal device and the camera module, the public key exchange can be performed first, that is, the terminal device provides its own public key (hereinafter referred to as the first public key) to the camera module, and the camera module provides its own public key (hereinafter referred to as the second public key) to the terminal device, so as to facilitate subsequent encrypted communication between the terminal device and the camera module.
[0164] As shown in Figure 3As shown, the camera module can encrypt its identity information (such as identity identifier, identity signature, etc.) by using the first public key to obtain first encrypted identity information. In addition, in order to ensure the integrity of the first encrypted identity information, the camera module can also generate first signature identity information based on the first encrypted identity information, and then transmit the first encrypted identity information and the first signature identity information to the terminal device through the communication connection between the camera module and the terminal device. After receiving the first encrypted identity information and the first signature identity information, the terminal device can first verify the integrity of the first encrypted identity information based on the first signature identity information. For example, the terminal device can calculate the first signature identity information based on the received first encrypted identity information, and if the calculated first signature identity information is the same as the actually received first signature identity information, it can be determined that the first encrypted identity information has not been tampered with. Then, the terminal device can decrypt the first encrypted identity information by using its own private key (which can be referred to as the first private key) to obtain the identity information of the camera module.
[0165] In addition, the terminal device can encrypt the identity information of the palm payment application (such as the APK (Android application package) package name and APK signature of the palm payment application) and the identity information of the camera module to obtain second encrypted identity information. It should be understood that the terminal device can pre-acquire the public key (which can be referred to as the third public key) of the background server, and then encrypt the identity information of the palm payment application and the identity information of the camera module by using the third public key to obtain the second encrypted identity information. In addition, in order to ensure the integrity of the second encrypted identity information, the terminal device can also generate second signature identity information based on the second encrypted identity information, and then transmit the second encrypted identity information and the second signature identity information to the background server.
[0166] After receiving the second encrypted identity information and the second signed identity information transmitted by the terminal device, the background server can first verify the integrity of the second encrypted identity information based on the second signed identity information. For example, the background server can calculate the second signed identity information based on the received second encrypted identity information. If the calculated second signed identity information is the same as the actually received second signed identity information, it can be determined that the second encrypted identity information has not been tampered with. Then, the background server can decrypt the second encrypted identity information using its own private key (which can be referred to as a third private key) to obtain the identity information of the palm payment application and the identity information of the camera module. Further, the server can verify the identity of the palm payment application and the camera module, respectively, for example, based on the APK package name and the APK signature of the palm payment application to verify whether the palm payment application is legal, and based on the identity of the camera model to verify whether the camera module is legal, thereby obtaining the corresponding identity verification result, which represents whether the identity of the palm payment application is verified and whether the identity of the camera module is verified, and feeding back the identity verification result to the terminal device.
[0167] The terminal device receives the identity verification result. If the identity verification result indicates that the identity of the palm payment application is verified and the identity of the camera module is verified, it can be determined that the communication connection between the terminal device and the camera module is secure. If the identity verification result indicates that the identity of the palm payment application is not verified and / or the identity of the camera module is not verified, it can be determined that the communication connection between the terminal device and the camera module is not secure, and the communication connection between the terminal device and the camera module needs to be cut off. It should be noted that in the embodiments of the present application, only the communication connection that is confirmed to be secure can support the transmission of palm images, that is, the palm payment business needs to be implemented based on a secure communication connection between the camera module and the terminal device.
[0168] In this way, by the above method, before the terminal device installed with the palm payment application and the camera module jointly perform the palm payment business, the identity of the palm payment application in the terminal device and the identity of the camera module are verified by the background server, which ensures that the camera module accessing the palm payment business is a legal camera module, and ensures that the palm payment application accessing the palm payment business is a legal application, thereby providing security guarantee for subsequent palm payment business. In addition, in the above identity verification process, the identity information of the palm payment application and the identity information of the camera module are transmitted in an encrypted manner, which can avoid the identity information of the palm payment application and the identity information of the camera module being leaked, and further improves the security of the entire identity verification process.
[0169] In a possible implementation, the terminal device receives the target palm image transmitted by the camera module, specifically comprising:
[0170] receive a first encrypted message transmitted by the camera module, the first encrypted message comprising encrypted image information and first signature information, the encrypted image information being obtained by encrypting a target palm image, and the first signature information being generated based on the encrypted image information. Then, integrity verification is performed on the encrypted image information based on the first signature information. If the integrity verification is passed, the encrypted image information is decrypted to obtain the target palm image.
[0171] Specifically, in the embodiments of the present application, when the camera module transmits the target palm image to the terminal device, the target palm image needs to be encrypted. As introduced above, after the communication connection is established between the terminal device and the camera module, the public keys of each other can be exchanged, based on which the camera module can use the obtained public key of the terminal device (i.e., the first public key) to encrypt the target palm image to obtain encrypted image information. In order to ensure that the encrypted image information is not tampered with during transmission, the camera module can also generate first signature information based on the encrypted image information, for example, can calculate the corresponding hash value based on the encrypted image information, and generate the first signature information accordingly. Further, the camera module can add the above encrypted image information and the first signature information to the first encrypted message, and send the first encrypted message to the terminal device.
[0172] After the terminal device receives the first encrypted message, the terminal device can first perform integrity verification on the encrypted image information in the first encrypted message based on the first signature information in the first encrypted message. Specifically, the terminal device can calculate the first signature information based on the encrypted image information in the first encrypted message, and compare whether the calculated first signature information is consistent with the first signature information in the first encrypted message. If they are consistent, it can be determined that the encrypted image information has not been tampered with during transmission and has passed the integrity verification. At this time, the terminal device can use its own private key (i.e., the first private key) to decrypt the encrypted image information, thereby obtaining the target palm image.
[0173] In this way, by the above method, the target palm image is transmitted to the terminal device based on the encryption and signature mechanism, which can ensure the integrity and confidentiality of the transmitted target palm image, thereby ensuring the security and reliability of the palm payment service, and avoiding the target palm image being stolen during transmission.
[0174] In a possible implementation, the terminal device also transmits control instructions to the camera module to control the camera module to perform relevant actions, such as turning on, turning off, collecting images, rotating by a specific angle, etc. The terminal device can transmit control instructions to the camera module in the following way:
[0175] transmit a second encrypted message to the camera module, the second encrypted message comprising encrypted instruction information and second signature information, the encrypted instruction information being obtained by encrypting a control instruction for the camera module, and the second signature information being generated based on the encrypted instruction information.
[0176] Specifically, in the embodiments of the present application, when the terminal device transmits a control instruction to the camera module, the control instruction needs to be encrypted. As introduced above, after the communication connection is established between the terminal device and the camera module, the public keys of each other can be exchanged, based on which the terminal device can encrypt the control instruction for the camera module by using the obtained public key of the camera module (i.e. the second public key), to obtain encrypted instruction information. In order to ensure that the encrypted instruction information is not tampered with during transmission, the terminal device can also generate second signature information based on the encrypted instruction information, for example, can calculate the corresponding hash value based on the encrypted instruction information, and generate the second signature information accordingly. Further, the terminal device can add the above-mentioned encrypted instruction information and second signature information to the second encrypted message, and send the second encrypted message to the camera module.
[0177] After the camera module receives the second encrypted message, it can first verify the integrity of the encrypted instruction information therein based on the second signature information therein. Specifically, the camera module can calculate the second signature information based on the encrypted instruction information in the second encrypted message, and compare whether the calculated second signature information is consistent with the second signature information in the second encrypted message. If they are consistent, it can be determined that the encrypted instruction information has not been tampered with during transmission and has passed the integrity verification. At this time, the camera module can decrypt the encrypted instruction information by using its own private key (i.e. the second private key), thereby obtaining the control instruction and executing the corresponding action accordingly.
[0178] In this way, by the above-mentioned manner, the control instruction is transmitted to the camera module based on the encryption and signature mechanism, which can ensure the integrity and confidentiality of the transmitted control instruction, thereby ensuring the security and reliability of the palm payment business, and avoiding the control instruction being stolen during transmission.
[0179] It should be noted that after the communication connection between the terminal device and the camera module is closed, the terminal device and the camera module need to clear the held keys accordingly, such as clearing its own private key and the public key of the other party, so as to protect the security of the communication.
[0180] It should be understood that, in the embodiments of the present application, in order to ensure that the data exchanged between the terminal device and the background server is not stolen by an attack, the data exchanged between the terminal device and the background server also needs to be encrypted. Specifically, the terminal device and the background server can exchange data through an encrypted communication channel, or can encrypt the data exchanged by using a corresponding key, or can encrypt the data exchanged by using other encryption methods. The embodiments of the present application do not limit the encryption method of the data exchanged between the terminal device and the background server.
[0181] In a possible implementation, the method provided by the embodiments of the present application further includes:
[0182] The process setting program in the palm payment application is used to control the process corresponding to the palm payment application to remain in a live state in the terminal device.
[0183] In the embodiments of the present application, in order to ensure that the palm payment service can be continuously and normally and stably performed, it is necessary to ensure that the process corresponding to the palm payment application remains in a live state in the terminal device, that is, to ensure that the resources occupied by the palm payment application in the terminal device are not preempted by other applications. Once the process corresponding to the palm payment application is closed by the system, the palm payment service will not be normally performed. When the palm payment application is installed on a terminal device provided by a merchant, it is particularly important to ensure that the process corresponding to the palm payment application remains in a live state.
[0184] As an example, the priority of the process corresponding to the palm payment application can be set to a high priority, so as to ensure that the process is not closed by the system. Specifically, the startForeground() program can be used to set the service of the palm payment application to a foreground service, and the setThreadPriority() program can be used to set the priority of the corresponding thread to a high priority.
[0185] As another example, the AlarmManager (timing prompt service) program can also be used to enable the service of the palm payment application at a timing, so as to ensure that the palm payment application is periodically run, thereby keeping the process corresponding to the palm payment application in a live state.
[0186] As another example, the JobScheduler (job scheduling) program can also be used to execute a background task. The JobScheduler program can determine the running time of the palm payment application according to the resource occupation of the system of the terminal device, thereby ensuring that the service of the palm payment application is not closed by the system.
[0187] Of course, in actual application, other manners can also be adopted to control the process corresponding to the palm payment application to keep alive in the terminal device, and the embodiments of the present application do not make any limitation in this aspect.
[0188] In this way, by controlling the process corresponding to the palm payment application to keep alive in the terminal device, the palm payment service can be effectively ensured to continuously and normally proceed, i.e., the stability of the palm payment service is ensured.
[0189] In a possible implementation manner, the terminal device can prompt the target payment result fed back by the background server in the following manner:
[0190] The target payment result is displayed through the target floating window created by the floating window creation program in the palm payment application.
[0191] In the embodiments of the present application, in order to conveniently display the target payment result on the terminal device and not to affect the use of other functions of the terminal device, the target payment result can be displayed through the target floating window displayed on the front interface of the terminal device, Figure 4 A schematic diagram of a target floating window provided in the embodiments of the present application is shown in Figure 4 The target floating window is displayed on the front interface of the terminal device and occupies part of the front interface.
[0192] As an example, the target floating window displayed in suspension can be added through the Window Manager program in the palm payment application, and this method needs to apply for the SYSTEM_ALERT_WINDOW permission. As another example, a floating dialog box can be created as the target floating window through the DialogFragment program, and the target floating window can be moved and scaled. As another example, a pop-up window can be created as the target floating window through the PopupWindow program.
[0193] Of course, in actual application, other manners can also be adopted to create the target floating window, and the embodiments of the present application do not make any limitation in this aspect.
[0194] In this way, by prompting the payment result corresponding to the palm payment service through the target floating window, on the one hand, the palm payment result can be conveniently prompted, and on the other hand, the palm payment service can be prevented from affecting other functions on the terminal device.
[0195] Referring to Figure 5 , Figure 5 A flowchart of a palm payment method provided in the embodiments of the present application is shown in Figure 5 The palm payment method includes the following steps:
[0196] Step 501: Collect multiple basic palm images.
[0197] In the embodiment of the present application, the camera module used to implement the palm payment service can collect multiple palm images of the user as basic palm images when the user triggers the palm payment.
[0198] It should be noted that the basic palm image in the embodiment of the present application is the palm image originally collected by the camera module. Specifically, it can be a video frame image in the palm video stream collected by the camera module, for example, each video frame image in the palm video stream collected by the camera module can be used as a basic palm image, or a certain sampling rule can be used to extract several video frame images from the palm video stream collected by the camera module as basic palm images. Specifically, it can also be a palm image captured by the camera module at a preset shooting interval (such as 20 ms, etc.).
[0199] As an example, the camera module can collect basic palm images in response to an image collection instruction sent by a terminal device installed with a palm payment application; for example, when the user triggers the palm payment, the merchant can send an image collection instruction to the camera module through the palm payment application on the terminal device, and the camera module can start collecting basic palm images after receiving the image collection instruction. Of course, in actual application, the camera module can also be triggered to collect basic palm images through other triggering methods, such as automatically triggering the collection of basic palm images when the camera module detects that the user's palm is close, etc. The embodiment of the present application does not make any limitation on the way of triggering the camera module to collect basic palm images.
[0200] Step 502: Perform target screening processing on the multiple basic palm images to obtain target palm images; the target screening processing includes at least one of living body screening and optimization screening, the living body screening is used to screen and retain basic palm images corresponding to living body palms, and the optimization screening is used to screen and retain basic palm images with image quality meeting a preset quality requirement.
[0201] After the camera module collects multiple basic palm images, target screening processing can be performed on the multiple basic palm images to obtain target palm images that are conducive to the smooth implementation of the palm payment service.
[0202] It should be noted that in the embodiments of the present application, the target screening processing can include at least one of living body screening and optimization screening. Among them, the living body screening is used to screen and retain the basic palm image corresponding to the living body palm, so as to avoid the palm image corresponding to the non-living body palm attacking the palm payment service, and ensure the safety and reliability of the palm payment service. The optimization screening is used to screen and retain the basic palm image with image quality meeting the preset quality requirement, that is, to screen and retain the basic palm image with high image quality, so as to ensure that the background server can smoothly execute the palm payment service according to the received palm image.
[0203] As an example, the living body screening can be realized by a corresponding living body detection model, which is used to analyze the relevant living body features in the input palm image and determine whether the palm image corresponds to the living body palm. Specifically, the camera module can input the collected basic palm image into the living body detection model, and the living body detection model can output the probability that the basic palm image corresponds to the living body palm by analyzing and processing the input basic palm image. If the probability exceeds the preset probability threshold, it can be considered that the basic palm image corresponds to the living body palm, and the basic palm image is retained. Otherwise, if the probability does not reach the preset probability threshold, it can be considered that the basic palm image does not correspond to the living body palm, and the basic palm image is discarded.
[0204] As an example, the optimization screening can be realized by a corresponding image quality detection model, which is used to evaluate the input palm image from multiple dimensions, such as the size of the palm in the image, the angle of the palm, the contrast of the image, the brightness of the image, the definition of the image, etc. Finally, the score corresponding to the palm image is obtained. Specifically, the camera module can input the collected basic palm image into the image quality detection model, and the image quality detection model can evaluate the basic palm image and output the score corresponding to the basic palm image. If the score exceeds the preset score threshold, it can be considered that the quality of the basic palm image is better, and the basic palm image can be retained. Otherwise, if the score does not reach the preset score threshold, it can be considered that the quality of the basic palm image is poor, and the basic palm image can be discarded.
[0205] It should be understood that in the embodiments of the present application, when the target screening processing retains both the living body screening and the optimization screening, the living body screening can be performed first to retain the basic palm image corresponding to the living body palm, thereby preferentially ensuring the safety of the palm payment service. Then, based on the basic palm image retained by the living body screening, the optimization screening is performed to further retain the basic palm image with better image quality as the target palm image, thereby ensuring the smooth progress of the palm payment service.
[0206] In step 503, the target palm image is transmitted to a terminal device installed with a palm payment application; the terminal device is configured to transmit the target palm image to a background server of the palm payment application; and the background server is configured to determine a target payment result corresponding to the target palm image based on the target palm image.
[0207] After the camera module retains the target palm image through the target screening process, the target palm image can be transmitted to a terminal device installed with a palm payment application and communicatively connected to the camera module, so that the terminal device further transmits the target palm image to a background server corresponding to the palm payment application, and completes a palm payment service through the background server to determine a target payment result corresponding to the target palm image.
[0208] It should be noted that the camera module in the embodiments of the present application only retains core hardware modules, such as an infrared and color camera for collecting image data, an image signal processor (ISP) for performing live body screening and / or optimization screening through a front-end algorithm, a communication module (such as a Bluetooth module) for establishing a communication connection with a terminal device, and a power module, etc. Compared with the special palm payment device in the related art, the configuration of the camera module is greatly simplified, and accordingly, the deployment cost is greatly reduced.
[0209] In addition, in the embodiments of the present application, since the live body screening and / or optimization screening algorithm is pre-positioned from the CPU to the neural network processor (NPU), the algorithm needs to be modified accordingly, using the data types and calculation operations supported by the NPU, reducing data transmission and memory access, and other optimization measures, and the interface between the NPU and other hardware (including data transmission and control signals, etc.) also needs to be redesigned.
[0210] The palm payment method provided by the embodiments of the present application uses a camera module and a terminal device installed with a palm payment application to replace the special palm payment device in the related art. Since the camera module used has a simple configuration, only relevant image collection devices and communication devices are included, and the palm payment application can be installed on any common terminal device in daily life, the deployment cost of the palm payment service is greatly reduced. When a merchant accesses the palm payment service, only a low-cost camera module needs to be deployed, and a palm payment application needs to be installed on a commonly used terminal device, without the need to deploy a high-cost special palm payment device. In this way, the convenience of the merchant accessing the palm payment service is improved, which is conducive to the popularization and promotion of the palm payment.
[0211] In a possible implementation manner, the camera module can transmit the target palm image to the terminal device installed with the palm payment application in the following manner:
[0212] The target palm image is encrypted to obtain encrypted image information; signature processing is performed based on the encrypted image information to obtain first signature information; a first encrypted message is generated according to the encrypted image information and the first signature information; and the first encrypted message is transmitted to the terminal device.
[0213] Specifically, in the embodiment of the present application, when the camera module transmits the target palm image to the terminal device, the target palm image needs to be encrypted. As introduced above, after the communication connection is established between the terminal device and the camera module, the public keys of each other can be exchanged, based on which the camera module can encrypt the target palm image by using the obtained public key of the terminal device (i.e. the first public key) to obtain encrypted image information; in order to ensure that the encrypted image information is not tampered with during transmission, the camera module can also generate first signature information based on the encrypted image information, for example, the corresponding hash value can be calculated based on the encrypted image information, and the first signature information is generated accordingly. Further, the camera module can add the above-mentioned encrypted image information and the first signature information to the first encrypted message, and send the first encrypted message to the terminal device.
[0214] After the terminal device receives the first encrypted message, the integrity of the encrypted image information therein can be verified based on the first signature information therein; specifically, the terminal device can calculate the first signature information based on the encrypted image information in the first encrypted message, and compare whether the calculated first signature information is consistent with the first signature information in the first encrypted message. If they are consistent, it can be determined that the encrypted image information has not been tampered with during transmission and has passed the integrity verification, at which time the terminal device can decrypt the encrypted image information by using its own private key (i.e. the first private key) to obtain the target palm image.
[0215] In this way, by the above-mentioned manner, the target palm image is transmitted to the terminal device based on the encryption and signature mechanism, which can ensure the integrity and confidentiality of the transmitted target palm image, thereby ensuring the security and reliability of the palm payment service and avoiding the target palm image being stolen during transmission.
[0216] Referring to Figure 6 , Figure 6 The flowchart of the palm payment method provided by the background server side of the embodiment of the present application is shown. As Figure 6 shown, the palm payment method comprises the following steps:
[0217] Step 601: receiving a target palm image transmitted by a terminal device installed with the palm payment application.
[0218] In the embodiment of the present application, the background server corresponding to the palm payment application can receive the target palm image transmitted by the terminal device installed with the palm payment application, so as to complete the palm payment service according to the received target palm image.
[0219] Step 602: According to the target palm image, the target object corresponding to the target palm image is searched.
[0220] After the background server receives the target palm image, the target object corresponding to the target palm image can be searched according to the target palm image, that is, the target object to which the palm in the target palm image belongs is searched.
[0221] As an example, the background server can extract features of the received target palm image through an image feature extraction model to obtain palm features corresponding to the target palm image. Then, the background server can search for palm features matching the palm features corresponding to the target palm image in the palm feature library, that is, search for palm features satisfying a preset similarity requirement between the palm features corresponding to the target palm image in the palm feature library; it should be understood that the palm feature library herein stores palm features of each user who has opened the palm payment function.
[0222] Of course, in actual application, the background server can also search for the corresponding target object according to the target palm image through other ways, and the embodiments of the present application do not limit the way of searching for the target object.
[0223] Step 603: If the target object is found, a payment operation is performed based on the payment account of the target object, and a target payment result representing the result corresponding to the payment operation is generated; if the target object is not found, a target payment result representing the failure of palm payment is generated.
[0224] If the background server finds the target object corresponding to the target palm image, the background server can further determine the payment account corresponding to the target object and deduct the corresponding amount from the payment account; it should be understood that the amount of money to be deducted herein can be provided by the terminal device installed with the palm payment application, that is, the terminal device can transmit the amount of money to be paid for this time of palm payment to the background server at the same time of transmitting the target palm image. If the deduction from the payment account is successful, a target payment result representing the success of palm payment can be generated; if the deduction from the payment account fails, for example, due to insufficient balance of the payment account, the payment account does not support direct deduction by the background server, etc., a target payment result representing the failure of palm payment can be generated.
[0225] If the target object corresponding to the target palm image is not found by the background server, the background server can directly generate a target payment result representing that the palm payment fails.
[0226] Step 604: returning the target payment result to the terminal device.
[0227] After the server generates the target payment result, the terminal device sending the target palm image can be fed back the target payment result correspondingly, so as to prompt the terminal device to the target payment result, and inform the merchant and the user triggering the palm payment whether the palm payment is successful this time.
[0228] The palm payment method provided by the embodiments of the present application uses the camera module and the terminal device installed with the palm payment application to replace the special palm payment device in the related art. Since the camera module used is simple in configuration, only the related image acquisition device and the communication device are included, and the palm payment application can be installed on any common terminal device in daily life, the deployment cost of the palm payment service is greatly reduced. When the merchant accesses the palm payment service, only the low-cost camera module needs to be deployed, and the palm payment application needs to be installed on the commonly used terminal device, without the need to deploy the high-cost special palm payment device. In this way, the convenience of the merchant accessing the palm payment service is improved, which is conducive to the popularization and promotion of the palm payment. In the palm payment service, the background server provides corresponding background support for the front-end palm payment service, finds the object corresponding to the palmprint image collected by the camera module, and completes the deduction from the payment account of the found object, so as to ensure that the palm payment service is stable and reliable.
[0229] In a possible implementation, the method provided by the embodiments of the present application further includes:
[0230] receiving the encrypted identity information sent by the terminal device installed with the palm payment application, the encrypted identity information being obtained by encrypting the identity information of the palm payment application and the identity information of the camera module establishing the communication connection with the terminal device; verifying the identity of the palm payment application and the identity of the camera module based on the encrypted identity information, obtaining an identity verification result, and returning the identity verification result to the terminal device. If the identity verification result represents that the identity verification of the camera module passes and the identity verification of the palm payment application passes, the terminal device installed with the palm payment application is recorded as a legal device supporting the palm payment service.
[0231] In the embodiments of the present application, after the terminal device installed with the palm payment application and the camera module establish a communication connection, but before formally accessing the palm payment service, the identity of the palm payment application installed on the terminal device and the identity of the camera module need to be verified by the background server, that is, whether the identity of the palm payment application is legal and whether the identity of the camera module is legal are verified, and after it is determined that the identity of the palm payment application and the identity of the camera module are both legal, the terminal device installed with the palm payment application and the camera module are allowed to formally access the palm payment service to collect and transmit palm images. The specific way of verifying the identity of the palm payment application and the identity of the camera module has been introduced above, and details can be referred to the related introduction content above.
[0232] In addition, after the background server determines that the identity of the palm payment application and the identity of the camera module are both legal, the terminal device installed with the palm payment application can be registered, that is, the terminal device is recorded as a legal device supporting the palm payment service. Specifically, the encrypted identity information transmitted by the terminal device to the background server can also carry the identity information of the terminal device itself, such as the product serial number (Serial Number, SN) of the terminal device, which can uniquely identify the identity of the terminal device; after the background server determines that the identity of the palm payment application installed on the terminal device is legal and the identity of the camera module establishing a communication connection with it is also legal, the identity information of the terminal device can be registered and managed to realize the registration record of the terminal device accessing the palm payment service. It should be understood that if the terminal device subsequently exits the palm payment service, the background server can also cancel the recorded identity information of the terminal device accordingly.
[0233] In this way, through the above-mentioned manner, before the terminal device installed with the palm payment application and the camera module jointly perform the palm payment service, the identity of the palm payment application in the terminal device and the identity of the camera module are verified by the background server, which ensures that the camera module accessing the palm payment service is a legal camera module, and ensures that the palm payment application accessing the palm payment service is a legal application, thereby providing security guarantee for subsequent palm payment service. In addition, in the above identity verification process, the identity information of the palm payment application and the identity information of the camera module are transmitted in an encrypted manner, which can avoid the identity information of the palm payment application and the identity information of the camera module being leaked, further improving the security of the entire identity verification process. In addition, after it is determined that the identity of the palm payment application and the identity of the camera module are both legal, the background server registers and manages the terminal device, which can realize the unified management of the terminal device accessing the palm payment service.
[0234] In a possible implementation manner, the method provided by the embodiments of the present application further comprises:
[0235] An association heartbeat is established with the palm payment application in the terminal device, and the association heartbeat is used to detect whether the palm payment application in the terminal device remains in a survival state. When it is detected that the association heartbeat is disconnected, prompt information is sent to the terminal device to prompt the terminal device to detect the running state of the palm payment application.
[0236] In the embodiment of the present application, after the terminal device installed with the palm payment application accesses the palm payment service, an association heartbeat can be established between the background server and the palm payment application in the terminal device. The association heartbeat may, for example, be a periodic signal sent by the palm payment application in the terminal device to the background server. The association heartbeat can help the background server to detect whether the palm payment application in the terminal device remains in a survival state.
[0237] When the background server detects that the association heartbeat is disconnected, for example, the background server does not receive the periodic signal sent by the palm payment application within a preset time interval, it can be considered that the association heartbeat between the background server and the palm payment application is disconnected. At this time, the background server can send prompt information to the terminal device, and the prompt information is used to prompt the terminal device to detect the running state of the palm payment application therein. After the terminal device receives the prompt information, it can correspondingly detect whether the palm payment application is in a survival state. If the palm payment application is not in a survival state, the palm payment application is restarted in time.
[0238] In this way, based on the association heartbeat between the background server and the palm payment application, and by means of the background server supervising whether the palm payment application in the terminal device is in a survival state, the palm payment service can be more effectively ensured to continuously and stably run, and the palm payment service is prevented from being interrupted, thereby avoiding negative experience for users.
[0239] In order to further understand the palm payment method provided by the embodiments of the present application, the following will be combined with Figure 7 and Figure 8 to make an exemplary overall introduction to the palm payment method provided by the embodiments of the present application.
[0240] Figure 7 The overall architecture of the palm payment method provided by the embodiments of the present application is shown in the figure. As shown in the figure, the palm payment method provided by the embodiments of the present application needs to be cooperatively implemented by a terminal device, a camera module and a background server. Figure 7
[0241] The terminal device is installed with a palm payment application, which includes a network module, a Bluetooth module, a floating window module and a resident module. The network module is used for communication with a background server, and transmits a target palm image sent by a camera module to the background server, and receives a target payment result returned by the background server. The Bluetooth module is used for communication with the camera module, and is used for receiving a target palm image sent by the camera module, and sending a control instruction to the camera module. The floating window module is used to create a floating window in the foreground of the terminal device, so as to display the target payment result fed back by the background server through the floating window. The resident module is used to control the process corresponding to the palm payment application to keep alive in the terminal device.
[0242] The camera module includes an ISP and a three-dimensional camera. The ISP is used to support the implementation of the front living body screening algorithm and the preferred screening algorithm. The three-dimensional camera includes an infrared camera and a color camera.
[0243] The background server is used to support the implementation of the palm recognition service, the basic payment service, the device management service and the abnormal strategy management service. The palm recognition service is used to identify a target object corresponding to a target palm image based on the target palm image sent by the terminal device. The basic payment service is used to complete the payment of the corresponding amount based on the payment account of the target object in the case of identifying the target object. The device management service is used to manage the terminal device accessing the palm payment service, and registers and manages the terminal device accessing the palm payment service. The abnormal strategy management service is used to establish an association heartbeat with the palm payment application in the terminal device, and detects whether the palm payment application in the terminal device is normally running based on the association heartbeat, so as to ensure the stable operation of the palm payment service.
[0244] Figure 8 The palm payment method provided by the embodiment of the application is provided. As shown in Figure 8 The merchant can install and start the palm payment application on the terminal device. After the palm payment application is started, it will automatically check the security of its running environment. If the obtained environment check result represents that the running environment is safe, the terminal device and the camera module can be controlled to establish a communication connection.
[0245] When the palm payment service is performed, the user can perform palm swiping against the camera module, and the camera module can collect multiple palm images of the user as base palm images. Then, the camera module can perform screening processing on the collected multiple base palm images through live body screening and optimization screening, to retain a base palm image corresponding to a live body palm and having better image quality as a target palm image. Further, the camera module can transmit the target palm image to a terminal device in communication connection therewith. After the terminal device receives the target palm image, the terminal device further transmits the target palm image to a background server corresponding to a palm payment application. After the background server receives the target palm image, the background server can search for a target object corresponding to the target palm image based on the target palm image, perform a corresponding deduction operation based on a payment account of the searched target object, further generate a target payment result corresponding to the palm payment, and return the target payment result to the terminal device. After the terminal device receives the target payment result, the terminal device correspondingly prompts the target payment result, to inform a merchant and a user triggering the palm payment whether the palm payment is successfully completed.
[0246] For the palm payment method described above, the application further provides a corresponding palm payment device, so that the palm payment method described above can be applied and implemented in practice.
[0247] Referring to Figure 9 , Figure 9 is a structural schematic diagram of a palm payment device 900 corresponding to the palm payment method shown in the above Figure 2 . As shown in the above Figure 9 , the palm payment device 900 includes:
[0248] A first receiving module 901 is configured to receive a target palm image transmitted by a camera module.
[0249] A first sending module 902 is configured to transmit the target palm image to a background server corresponding to a palm payment application. The background server is configured to search for a target object corresponding to the target palm image according to the target palm image, and determine a target payment result corresponding to the target palm image according to a search result.
[0250] A second receiving module 903 is configured to receive the target payment result returned by the background server, and prompt the target payment result.
[0251] Optionally, the device further includes:
[0252] A security checking module is configured to perform security checking on a running environment of the palm payment application, to obtain an environment checking result.
[0253] The communication establishing module is configured to establish a communication connection with the camera module if the environment inspection result indicates that the running environment of the palm payment application meets preset security requirements.
[0254] Optionally, the security inspection module is specifically configured to perform security inspection in at least one of the following manners:
[0255] checking whether a target management permission of the terminal device is modified;
[0256] checking whether the palm payment application runs in a virtualization environment or an emulator;
[0257] checking a system version and a security patch version of the terminal device;
[0258] checking whether application signature and permission of the palm payment application are correct;
[0259] checking a network environment and a proxy setting in which the terminal device is located;
[0260] checking a permission of a file storage space corresponding to the palm payment application.
[0261] Optionally, the first receiving module 901 is further configured to receive first encrypted identity information transmitted by the camera module; the first encrypted identity information is obtained by encrypting identity information of the camera module;
[0262] The first sending module 902 is further configured to transmit second encrypted identity information to the background server; the second encrypted identity information is obtained by encrypting the identity information of the camera module and identity information of the palm payment application;
[0263] The second receiving module 903 is further configured to receive an identity verification result returned by the background server; the identity verification result is obtained by the background server performing verification on the identity information of the camera module and the identity information of the palm payment application;
[0264] The communication establishing module is further configured to determine that the communication connection with the camera module is safe if the identity verification result indicates that identity verification of the camera module is passed and identity verification of the palm payment application is passed; the safe communication connection supports transmission of a palm image.
[0265] Optionally, the first receiving module 901 is specifically configured to:
[0266] receive a first encrypted message transmitted by the camera module; the first encrypted message includes encrypted image information and first signature information, the encrypted image information is obtained by encrypting the target palm image, and the first signature information is generated based on the encrypted image information;
[0267] based on the first signature information, integrity of the encrypted image information is verified;
[0268] if the integrity verification is passed, the encrypted image information is decrypted to obtain the target palm image.
[0269] Optionally, the first sending module 902 is further configured to transmit a second encrypted message to the camera module; the second encrypted message includes encrypted instruction information and second signature information, the encrypted instruction information is obtained by encrypting a control instruction for the camera module, and the second signature information is generated based on the encrypted instruction information.
[0270] Optionally, the apparatus further includes:
[0271] an application keep-alive module configured to control a process corresponding to the palm brushing payment application to remain alive in the terminal device through a process setting procedure in the palm brushing payment application.
[0272] Optionally, the apparatus further includes:
[0273] a floating window module configured to create a target floating window in a foreground of the terminal device through a floating window creation procedure in the palm brushing payment application, and display the target payment result through the target floating window.
[0274] Referring to Figure 10 , Figure 10 is a structural schematic diagram of a palm brushing payment apparatus 1000 corresponding to the palm brushing payment method shown in the foregoing Figure 5 . As shown in the foregoing Figure 10 , the palm brushing payment apparatus 1000 includes:
[0275] an image acquisition module 1001 configured to acquire a plurality of basic palm images;
[0276] an image screening module 1002 configured to perform target screening processing on the plurality of basic palm images to obtain a target palm image; the target screening processing includes at least one of living body screening and optimization screening, the living body screening is configured to screen and retain a basic palm image corresponding to a living body palm, and the optimization screening is configured to screen and retain a basic palm image with an image quality meeting a preset quality requirement;
[0277] The second sending module 1003 is configured to transmit the target palm image to a terminal device installed with a palm payment application; the terminal device is configured to transmit the target palm image to a background server of the palm payment application; and the background server is configured to determine a corresponding target payment result based on the target palm image.
[0278] Optionally, the second sending module 1003 is specifically configured to:
[0279] perform encryption processing on the target palm image to obtain encrypted image information;
[0280] perform signature processing based on the encrypted image information to obtain first signature information;
[0281] generate a first encrypted message according to the encrypted image information and the first signature information;
[0282] transmit the first encrypted message to the terminal device.
[0283] Referring to Figure 11 , Figure 11 is a structural schematic diagram of a palm payment device 1100 corresponding to the palm payment method shown in the above Figure 6 As shown in Figure 11 , the palm payment device 1100 comprises:
[0284] A third receiving module 1101 is configured to receive a target palm image transmitted by a terminal device installed with the palm payment application;
[0285] A target searching module 1102 is configured to search for a target object corresponding to the target palm image according to the target palm image;
[0286] A result generating module 1103 is configured to, if the target object is found, perform a payment operation based on a payment account of the target object and generate a target payment result representing a result corresponding to the payment operation; and if the target object is not found, generate a target payment result representing a palm payment failure;
[0287] A third sending module 1104 is configured to return the target payment result to the terminal device.
[0288] Optionally, the third receiving module 1101 is further configured to receive encrypted identity information sent by the terminal device; the encrypted identity information is obtained by encrypting identity information of the palm payment application and identity information of a camera module establishing a communication connection with the terminal device.
[0289] The device further comprises:
[0290] An identity authentication module is configured to authenticate the identity of the palm payment application and the identity of the camera module based on the encrypted identity information, obtain an identity authentication result, and return the identity authentication result to the terminal device.
[0291] A device recording module is configured to record the terminal device as a legal device supporting the palm payment service if the identity authentication result indicates that the identity of the camera module is authenticated and the identity of the palm payment application is authenticated.
[0292] Optionally, the apparatus further includes:
[0293] A heartbeat establishing module is configured to establish an associated heartbeat between the palm payment application in the terminal device; the associated heartbeat is used to detect whether the palm payment application in the terminal device remains in a live state.
[0294] A prompting module is configured to send a prompt information to the terminal device to prompt the terminal device to detect the running state of the palm payment application when it is detected that the associated heartbeat is disconnected.
[0295] The palm payment apparatus provided by the embodiments of the present application uses the camera module and the terminal device installed with the palm payment application to replace the special palm payment device in the related art, and thus the deployment cost of the palm payment service is greatly reduced, because the camera module used only includes the related image acquisition device and the communication device, and the palm payment application can be installed on any common terminal device in daily life. When a merchant accesses the palm payment service, only the low-cost camera module needs to be deployed, and the palm payment application needs to be installed on the commonly used terminal device, and thus the high-cost special palm payment device does not need to be deployed, and thus the convenience of the merchant accessing the palm payment service is improved, and the popularization and generalization of the palm payment are facilitated. In the palm payment service, the background server provides corresponding background support for the front-end palm payment service, finds the object corresponding to the palmprint image collected by the camera module, and completes the deduction from the payment account of the found object, and thus the palm payment service is stably and reliably performed.
[0296] The embodiments of the present application further provide an electronic device for palm payment, which can be a terminal device, or a camera module, or a server. The hardware structure of the camera module has been introduced above, and the terminal device and the server provided by the embodiments of the present application will be introduced from the perspective of hardware entity.
[0297] Referring to Figure 12 , Figure 12 is a structural schematic diagram of the terminal device provided by the embodiments of the present application. As shown in Figure 12As shown, for ease of illustration, only parts related to the embodiments of the present application are shown, and specific technical details are not disclosed, please refer to the method part of the embodiments of the present application. The terminal can be any terminal device including a mobile phone, a tablet computer, a personal digital assistant (PDA), a point of sales (POS), a vehicle-mounted computer, etc. Take the terminal as a smart phone for example:
[0298] Figure 12 The diagram shows a block diagram of part of the structure of a smart phone related to the terminal provided by the embodiments of the present application. Referring to Figure 12 , the smart phone includes: radio frequency (RF) circuit 1210, memory 1220, input unit 1230 (including touch panel 1231 and other input devices 1232), display unit 1240 (including display panel 1241), sensor 1250, audio circuit 1260 (which can be connected to speaker 1261 and microphone 1262), wireless fidelity (WiFi) module 1270, processor 1280, and power supply 1290, etc. Those skilled in the art can understand, Figure 12 that the structure of the smart phone shown in the above is not a limitation to the smart phone, and can include more or less components than the diagram, or combine some components, or different component arrangement.
[0299] Memory 1220 can be used to store software programs and modules, and processor 1280 can execute various function applications and data processing of the smart phone by running the software programs and modules stored in memory 1220. Memory 1220 can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, at least one application program required by a function (such as a sound playing function, an image playing function, etc.), etc.; the data storage area can store data created according to the use of the smart phone (such as audio data, a phone book, etc.), etc. In addition, memory 1220 can include a high-speed random access memory, and can also include a non-volatile memory, for example, at least one magnetic disk storage device, a flash memory device, or other volatile solid-state memory device.
[0300] The processor 1280 is the control center of the smartphone, connecting all parts of the smartphone through various interfaces and lines, executing various functions of the smartphone and processing data by running or executing software programs and / or modules stored in the memory 1220 and calling data stored in the memory 1220. Optionally, the processor 1280 can include one or more processing units; preferably, the processor 1280 can integrate an application processor and a modem processor, wherein the application processor mainly processes operating systems, user interfaces, and application programs, and the modem processor mainly processes wireless communication. It can be understood that the above-mentioned modem processor can also not be integrated into the processor 1280.
[0301] In the embodiment of the application, the processor 1280 included in the terminal is further configured to perform the steps of any one of the implementation manners of the palm brushing payment method on the terminal device side provided by the embodiment of the application.
[0302] Referring to Figure 13 , Figure 13 A structural schematic diagram of a server 1300 provided by an embodiment of the application is shown. The server 1300 can have great differences due to different configurations or performances, and can include one or more central processing units (CPUs) 1322 (for example, one or more processors) and a memory 1332, one or more storage media 1330 (for example, one or more mass storage devices) storing application programs 1342 or data 1344. The memory 1332 and the storage media 1330 can be temporary storage or persistent storage. The programs stored in the storage media 1330 can include one or more modules (not shown in the figure), each of which can include a series of instruction operations in the server. Further, the central processing unit 1322 can be configured to communicate with the storage media 1330 and execute the series of instruction operations in the storage media 1330 on the server 1300.
[0303] The server 1300 can also include one or more power supplies 1326, one or more wired or wireless network interfaces 1350, one or more input / output interfaces 1358, and / or one or more operating systems, such as Windows Server TM , Mac OS X TM , Unix TM , Linux TM , FreeBSD TM , etc.
[0304] The steps performed by the server in the above embodiments can be based on the server structure shown in the above embodiments. Figure 13
[0305] The CPU 1322 can also be configured to execute the steps of any of the methods for palm payment on the server side provided in the embodiments of the present application.
[0306] The embodiments of the present application also provide a computer readable storage medium for storing a computer program, which is configured to execute any of the methods for palm payment.
[0307] The embodiments of the present application also provide a computer program product or a computer program, which includes computer instructions stored in a computer readable storage medium. A processor of a computer device reads the computer instructions from the computer readable storage medium, and the processor executes the computer instructions to make the computer device execute any of the methods for palm payment.
[0308] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the above-described system, device and unit can refer to the corresponding processes in the foregoing method embodiments, which will not be repeated here.
[0309] In the several embodiments provided in the present application, it should be understood that the disclosed system, device and method can be implemented in other ways. For example, the device embodiments described above are only schematic. The division of the units is only a logical function division. There can be another division manner for actual implementation. For example, a plurality of units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the displayed or discussed mutual couplings or direct couplings or communication connections between the units can be indirect couplings or communication connections through some interfaces, devices or units, and can be electrical, mechanical or in other forms.
[0310] The units described as separate components can or can not be physically separate, and the components displayed as units can or can not be physical units. That is, they can be located in one place, or can be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the embodiments.
[0311] In addition, each functional unit in the embodiments of the present application can be integrated in one processing unit, or each unit can exist physically, or two or more units can be integrated in one unit. The integrated unit can be in the form of hardware or in the form of software functional unit.
[0312] The integrated unit, if implemented in the form of a software function unit and sold or used as an independent product, can be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the present application essentially or say the part that contributes to the prior art or the whole or part of the technical solutions can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a number of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage medium includes: a U disk, a mobile hard disk, a read-only memory (Read-Only Memory, ROM), a random access memory (Random Access Memory, RAM), a magnetic disk or an optical disk, and various computer program storage media.
[0313] It should be understood that in the present application, "at least one" means one or more, and "multiple" means two or more. "And / or" is used to describe the association relationship of the associated objects, which means that there can be three kinds of relationships, for example, "A and / or B" can represent: only A, only B, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally represents that the associated objects before and after are in an "or" relationship. "At least one of the following" or the like means any combination of these items, including any combination of single or multiple items. For example, at least one of a, b or c can represent: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, and c can be single or multiple.
[0314] The above-described and above-mentioned embodiments are only used to illustrate the technical solutions of the present application, rather than limit them; although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that they can still modify the technical solutions recorded in the foregoing embodiments, or make equivalent replacements to some technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application.
Claims
1. A palm-swipe payment method, characterized in that, It is applied to any one of the terminal devices provided by multiple merchants; each of the terminal devices provided by the multiple merchants has the swipe payment application installed; each of the terminal devices provided by the multiple merchants has established a communication connection with the same independently deployed camera module; the camera module records the correspondence between the location information of the terminal devices and the merchants; The camera module is equipped with motion devices and motion control devices; the method includes: The palm payment application sends a call command to the camera module, which then searches for the merchant location information corresponding to the terminal device based on the correspondence. The motion controller moves the camera module to the merchant to which the terminal device belongs and performs the palm image acquisition task. The system receives a target hand image transmitted from the camera module; the target hand image is obtained by the camera module through target filtering processing of multiple basic hand images; the camera module includes an image processor for performing the target filtering processing; the target filtering processing includes at least one of liveness filtering and optimization filtering. The target palm image is transmitted to the backend server corresponding to the palm payment application; the backend server is used to find the target object corresponding to the target palm image based on the target palm image, and to determine the target payment result corresponding to the target palm image based on the search result; Receive the target payment result returned by the backend server and display the target payment result.
2. The method according to claim 1, characterized in that, The method further includes: A security check is performed on the operating environment of the aforementioned mobile payment application to obtain the environment check results; If the environmental check results indicate that the operating environment of the swipe payment application meets the preset security requirements, then a communication connection is established with the camera module.
3. The method according to claim 2, characterized in that, The security check of the operating environment of the palm payment application includes at least one of the following: Check whether the target management permissions of the terminal device have been modified; Check whether the swipe payment application is running in a virtualized environment or emulator; Check the system version and security patch version of the terminal device; Check whether the application signature and permissions of the swipe payment application are correct; Check the network environment and proxy settings of the terminal device; Check the permissions of the file storage space corresponding to the aforementioned mobile payment application.
4. The method according to claim 1, characterized in that, The method further includes: Receive the first encrypted identity information transmitted by the camera module; the first encrypted identity information is obtained by encrypting the identity information of the camera module. The second encrypted identity information is transmitted to the backend server; the second encrypted identity information is obtained by encrypting the identity information of the camera module and the identity information of the palm payment application. Receive the authentication result returned by the backend server; the authentication result is obtained by the backend server verifying the identity information of the camera module and the identity information of the swipe payment application; If the authentication result indicates that the authentication of the camera module is successful and the authentication of the palm payment application is successful, then the communication connection with the camera module is determined to be secure; the secure communication connection supports the transmission of palm images.
5. The method according to claim 1 or 4, characterized in that, The target hand image transmitted by the receiving camera module includes: The system receives a first encrypted message transmitted by the camera module; the first encrypted message includes encrypted image information and first signature information, wherein the encrypted image information is obtained by encrypting the target palm image, and the first signature information is generated based on the encrypted image information. Based on the first signature information, the integrity of the encrypted image information is verified; If the integrity verification is passed, the encrypted image information is decrypted to obtain the target hand image.
6. The method according to claim 1 or 4, characterized in that, The method further includes: A second encrypted message is transmitted to the camera module; the second encrypted message includes encrypted instruction information and second signature information, wherein the encrypted instruction information is obtained by encrypting control instructions for the camera module, and the second signature information is generated based on the encrypted instruction information.
7. The method according to claim 1, characterized in that, The method further includes: The process settings program in the aforementioned swipe payment application controls the process corresponding to the swipe payment application to remain alive on the terminal device.
8. The method according to claim 1, characterized in that, The notification of the target payment result includes: The floating window creation program in the aforementioned swipe payment application creates a target floating window in the foreground of the terminal device; the target payment result is displayed through the target floating window.
9. A palm-swipe payment method, characterized in that, The system is applied to camera modules, which are independently deployed. Each camera module establishes communication connections with terminal devices provided by multiple merchants. Each terminal device provided by the multiple merchants has a mobile payment application installed. The camera module records the correspondence between the location information of the terminal devices and the merchants. The camera module is equipped with motion devices and motion control devices; the method includes: In response to a call command sent by a terminal device through the PalmPay application, the location information of the merchant corresponding to the terminal device that sent the call command is found based on the correspondence, and the camera module is moved to the merchant to which the terminal device that sent the call command belongs through the motion controller and the motion controller. Collect multiple basic hand images; The multiple basic palm images are subjected to target filtering processing to retain target palm images; the target filtering processing includes at least one of liveness filtering and optimization filtering, the liveness filtering is used to filter and retain basic palm images corresponding to live palms, and the optimization filtering is used to filter and retain basic palm images whose image quality meets preset quality requirements; the camera module includes an image processor for performing the target filtering processing; The target palm image is transmitted to the terminal device that sends the call instruction; the terminal device that sends the call instruction is used to transmit the target palm image to the backend server of the palm payment application; the backend server is used to determine the corresponding target payment result based on the target palm image.
10. The method according to claim 9, characterized in that, The step of transmitting the target palm image to the terminal device that sends the calling command includes: The target hand image is encrypted to obtain encrypted image information; The encrypted image information is used for signature processing to obtain the first signature information; A first encrypted message is generated based on the encrypted image information and the first signature information; The first encrypted message is transmitted to the terminal device.
11. A method for making payments by swiping one's palm, characterized in that, The method, applied to the backend server of a mobile payment application, includes: The system receives a target palm image transmitted from a terminal device equipped with the palm payment application; the terminal device is any one of multiple terminal devices provided by various merchants; each of the multiple merchant-provided terminal devices has the palm payment application installed; each of the multiple merchant-provided terminal devices has established a communication connection with the same independently deployed camera module; the camera module records the correspondence between the terminal device and the merchant's location information; the camera module is equipped with motion devices and motion control devices; the mobile terminal sends a call command to the camera module through the palm payment application, causing the camera module to find the merchant's location information corresponding to the terminal device based on the correspondence, and controls the camera module to move to the merchant to which the terminal device belongs through the motion control devices and the motion devices, and to perform the palm image acquisition task; the target palm image is transmitted from the independently deployed camera module to the terminal device. Based on the target palm image, the target object corresponding to the target palm image is located; the target palm image is obtained by the camera module through target filtering processing of multiple basic palm images; the camera module includes an image processor for performing the target filtering processing; the target filtering processing includes at least one of liveness filtering and optimization filtering; If the target object is found, a payment operation is performed based on the target object's payment account, and a target payment result representing the result of the payment operation is generated; if the target object is not found, a target payment result representing the failure of the swipe payment is generated. The target payment result is returned to the terminal device.
12. The method according to claim 11, characterized in that, The method further includes: The device receives encrypted identity information sent by the terminal device; the encrypted identity information is obtained by encrypting the identity information of the swipe payment application and the identity information of the camera module that establishes a communication connection with the terminal device. The identity of the swipe payment application and the identity of the camera module are verified based on the encrypted identity information to obtain the identity verification result, and the identity verification result is returned to the terminal device. If the authentication result indicates that the camera module has passed authentication and the swipe payment application has passed authentication, then the terminal device is recorded as a legitimate device supporting swipe payment service.
13. The method according to claim 11 or 12, characterized in that, The method further includes: Establish a heartbeat connection between the palm payment application in the terminal device; the heartbeat connection is used to detect whether the palm payment application in the terminal device remains active. When the associated heartbeat connection is detected to be interrupted, a prompt message is sent to the terminal device to prompt the terminal device to check the running status of the palm payment application.
14. A palm-swipe payment system, characterized in that, The system includes: an independently deployed camera module, terminal devices provided by multiple merchants, and a backend server corresponding to the "Swipe Payment" application; the terminal devices are either provided by the merchants or by the payment users; each of the multiple merchant-provided terminal devices has the "Swipe Payment" application installed; each of the multiple merchant-provided terminal devices has a communication connection with the same independently deployed camera module; the camera module records the correspondence between the location information of the terminal devices and the merchants; and the camera module is equipped with motion devices and motion control devices. The terminal device is used to send a call command to the camera module through the palm payment application; The camera module is used to locate the merchant location information corresponding to the terminal device based on the correspondence, and to control the camera module to move to the merchant to which the terminal device sending the call command belongs, through the motion controller and the motion device, to capture a target palm image, and to transmit the target palm image to the terminal device sending the call command; the target palm image is obtained by the camera module through target filtering processing of multiple captured basic palm images; the camera module includes an image processor for performing the target filtering processing; the target filtering processing includes at least one of liveness filtering and optimization filtering; The terminal device is also used to receive the target palm image and transmit the target palm image to the backend server; The backend server is configured to receive the target palm image, locate the target object corresponding to the target palm image, determine the target payment result corresponding to the target palm image based on the search result, and return the target payment result to the terminal device. The terminal device is also used to receive the target payment result and display the target payment result.
15. A palm payment device, characterized in that, It is applied to any one of the terminal devices provided by multiple merchants; each of the terminal devices provided by the multiple merchants has the swipe payment application installed; each of the terminal devices provided by the multiple merchants has established a communication connection with the same independently deployed camera module; the camera module records the correspondence between the location information of the terminal devices and the merchants; the camera module is equipped with motion devices and motion control devices; The device is used to send a call command to the camera module through the palm payment application, so that the camera module can find the merchant location information corresponding to the terminal device based on the correspondence, and control the camera module to move to the merchant to which the terminal device belongs through the motion controller and the motion device, and perform the palm image acquisition task. The device includes: The first receiving module is used to receive a target palm image transmitted by the camera module; the target palm image is obtained by the camera module through target filtering processing of multiple basic palm images; the camera module includes an image processor for the target filtering processing; the target filtering processing includes at least one of live body filtering and optimized filtering; The first sending module is used to transmit the target palm image to the backend server corresponding to the palm payment application; the backend server is used to find the target object corresponding to the target palm image based on the target palm image, and to determine the target payment result corresponding to the target palm image based on the search result; The second receiving module is used to receive the target payment result returned by the backend server and to display the target payment result.
16. The apparatus according to claim 15, characterized in that, The device further includes: The security check module is used to perform a security check on the operating environment of the swipe payment application and obtain the environment check results. The communication establishment module is used to establish a communication connection with the camera module if the environment check result indicates that the operating environment of the swipe payment application meets the preset security requirements.
17. The apparatus according to claim 16, characterized in that, The security check module is specifically used to perform security checks in at least one of the following ways: Check whether the target management permissions of the terminal device have been modified; Check whether the swipe payment application is running in a virtualized environment or emulator; Check the system version and security patch version of the terminal device; Check whether the application signature and permissions of the swipe payment application are correct; Check the network environment and proxy settings of the terminal device; Check the permissions of the file storage space corresponding to the aforementioned mobile payment application.
18. The apparatus according to claim 15, characterized in that, The device further includes: a communication establishment module; The first receiving module is further configured to receive first encrypted identity information transmitted by the camera module; the first encrypted identity information is obtained by encrypting the identity information of the camera module; The first sending module is further configured to transmit second encrypted identity information to the backend server; the second encrypted identity information is obtained by encrypting the identity information of the camera module and the identity information of the swipe payment application; The second receiving module is further configured to receive the authentication result returned by the backend server; the authentication result is obtained by the backend server verifying the identity information of the camera module and the identity information of the swipe payment application. The communication establishment module is used to determine that the communication connection with the camera module is secure if the authentication result indicates that the authentication of the camera module is successful and the authentication of the palm payment application is successful; the secure communication connection supports the transmission of palm images.
19. The apparatus according to claim 15 or 18, characterized in that, The first receiving module is specifically used for: The system receives a first encrypted message transmitted by the camera module; the first encrypted message includes encrypted image information and first signature information, wherein the encrypted image information is obtained by encrypting the target palm image, and the first signature information is generated based on the encrypted image information. Based on the first signature information, the integrity of the encrypted image information is verified; If the integrity verification is passed, the encrypted image information is decrypted to obtain the target hand image.
20. The apparatus according to claim 15 or 18, characterized in that, The first sending module is further configured to transmit a second encrypted message to the camera module; the second encrypted message includes encrypted instruction information and second signature information, wherein the encrypted instruction information is obtained by encrypting control instructions for the camera module, and the second signature information is generated based on the encrypted instruction information.
21. The apparatus according to claim 15, characterized in that, The device further includes: The application keep-alive module is used to control the process corresponding to the swipe payment application to remain alive in the terminal device through the process setting program in the swipe payment application.
22. The apparatus according to claim 15, characterized in that, The device further includes: The floating window module is used to create a target floating window in the foreground of the terminal device through the floating window creation program in the palm payment application; and to display the target payment result through the target floating window.
23. A palm-swipe payment device, characterized in that, This is applied to a camera module, which is an independently deployed camera module; the camera module establishes communication connections with terminal devices provided by multiple merchants; each of the terminal devices provided by multiple merchants has a swipe payment application installed; the camera module records the correspondence between the location information of the terminal devices and the merchants; and motion devices and motion control devices are installed on the camera module. The device is used to: respond to a call command sent by a terminal device through a swipe payment application, search for the merchant location information corresponding to the terminal device that sent the call command based on the correspondence, and control the camera module to move to the merchant to which the terminal device that sent the call command belongs through the motion controller and the motion controller; The device includes: The image acquisition module is used to acquire multiple basic palm images; An image filtering module is used to perform target filtering processing on the multiple basic palm images to retain target palm images; the target filtering processing includes at least one of live screening and optimization screening, the live screening is used to filter and retain basic palm images corresponding to live palms, and the optimization screening is used to filter and retain basic palm images whose image quality meets preset quality requirements; the camera module includes an image processor for performing the target filtering processing; The second sending module is used to transmit the target palm image to the terminal device that sends the call instruction; the terminal device that sends the call instruction is used to transmit the target palm image to the backend server of the palm payment application; the backend server is used to determine the corresponding target payment result based on the target palm image.
24. The apparatus according to claim 23, characterized in that, The second sending module is specifically used for: The target hand image is encrypted to obtain encrypted image information; The encrypted image information is used for signature processing to obtain the first signature information; A first encrypted message is generated based on the encrypted image information and the first signature information; The first encrypted message is transmitted to the terminal device.
25. A palm-swipe payment device, characterized in that, The device, used in the backend server of a mobile payment application, includes: The third receiving module is used to receive a target palm image transmitted from a terminal device equipped with the palm payment application; the terminal device is any one of multiple terminal devices provided by various merchants; each of the multiple merchant-provided terminal devices is equipped with the palm payment application; each of the multiple merchant-provided terminal devices has a communication connection with the same independently deployed camera module; the camera module records the correspondence between the terminal device and the merchant's location information; the camera module is equipped with motion devices and motion control devices; the mobile terminal is used to send a call command to the camera module through the palm payment application, so that the camera module can find the merchant's location information corresponding to the terminal device based on the correspondence, and control the camera module to move to the merchant to which the terminal device belongs through the motion control devices and the motion devices, and perform the palm image acquisition task; the target palm image is transmitted from the independently deployed camera module to the terminal device. The object search module is used to search for the target object corresponding to the target hand image based on the target hand image; the target hand image is obtained by the camera module through target filtering processing of multiple basic hand images; the camera module includes an image processor for performing the target filtering processing; the target filtering processing includes at least one of liveness filtering and optimization filtering; The result generation module is used to perform a payment operation based on the payment account of the target object if the target object is found, and generate a target payment result representing the result of the payment operation; if the target object is not found, it generates a target payment result representing the failure of the swipe payment. The third sending module is used to return the target payment result to the terminal device.
26. The apparatus according to claim 25, characterized in that, The third receiving module is also used to receive encrypted identity information sent by the terminal device; the encrypted identity information is obtained by encrypting the identity information of the swipe payment application and the identity information of the camera module that establishes a communication connection with the terminal device. The device further includes: The identity verification module is used to verify the identity of the swipe payment application and the identity of the camera module based on the encrypted identity information, obtain the identity verification result, and return the identity verification result to the terminal device; The device recording module is used to record the terminal device as a legitimate device that supports the swipe payment service if the authentication result indicates that the authentication of the camera module is successful and the authentication of the swipe payment application is successful.
27. The apparatus according to claim 25 or 26, characterized in that, The device further includes: A heartbeat establishment module is used to establish a heartbeat association with the palm payment application in the terminal device; the associated heartbeat is used to detect whether the palm payment application in the terminal device remains alive. The prompting module is used to send a prompt message to the terminal device when the associated heartbeat connection is detected to prompt the terminal device to check the running status of the palm payment application.
28. An electronic device, characterized in that, The device includes a processor and a memory; The memory is used to store computer programs; The processor is configured to execute the palm payment method according to any one of claims 1 to 13 according to the computer program.
29. A computer-readable storage medium, characterized in that, The computer-readable storage medium is used to store a computer program for executing the palm payment method according to any one of claims 1 to 13.
30. A computer program product, comprising a computer program or instructions, characterized in that, When the computer program or the instructions are executed by the processor, the palm payment method according to any one of claims 1 to 13 is implemented.
Citation Information
Patent Citations
Authentication system based on biological characteristics and identification authentication method thereof
CN101330386A
Method and a device for carrying out security management and control on an application running environment
CN109522708A
Payment verification method and device, detachable camera assembly and storage medium
CN112749971A
Payment verification method and device, terminal, server and storage medium
CN115829575A