Payment method, device, nonvolatile storage medium and computer device

Abstract

The application discloses a payment method and device, a nonvolatile storage medium and a computer device. The method comprises the following steps: receiving payment information, wherein the payment information comprises an amount of payment; sending digital identity information of a payer to a payee device based on the payment information; receiving a payment instruction returned by the payee device, wherein the payment instruction is generated after the digital identity information of the payer is verified by the payee device, and the payment instruction comprises the payment information and digital identity information of a payee; sending the digital identity information of the payee to an authentication agency, and receiving a payee identity authentication result fed back by the authentication agency for the digital identity information of the payee; and paying digital currency to the payee device according to the payment instruction in the case that the payee identity authentication result is passed. The application solves the technical problem that it is difficult to confirm whether the identities of the two parties participating in the transaction are real and legal in the related art.

Description

Technical Field

[0001] This invention relates to the field of financial technology, and more specifically, to a payment method, apparatus, non-volatile storage medium, and computer equipment. Background Technology

[0002] Cryptocurrencies possess the value characteristics of currency, enabling genuine and straightforward transactions between parties. However, because cryptocurrencies rely on digital technology, ordinary people often struggle to verify their authenticity during transactions. This raises the challenge of ensuring the authenticity, uniqueness, and non-repudiation of payment information and currency during transactions, as well as guaranteeing the confidentiality and legality of user information. These challenges must be addressed for cryptocurrency exchanges to function effectively.

[0003] There is currently no effective solution to the above problems. Summary of the Invention

[0004] This invention provides a payment method, apparatus, non-volatile storage medium, and computer equipment to at least solve the technical problem in the related art of difficulty in verifying the authenticity and legality of the identities of the parties involved in a transaction.

[0005] According to one aspect of the present invention, a payment method is provided, comprising: receiving payment information, wherein the payment information includes a payment amount; sending digital identity information of a payer to a receiving device based on the payment information; receiving a payment instruction returned by the receiving device, wherein the payment instruction is an instruction generated by the receiving device after verifying the digital identity information of the payer, and the payment instruction includes the payment information and the digital identity information of the payee; sending the digital identity information of the payee to an authentication authority, and receiving a payee identity authentication result fed back by the authentication authority for the digital identity information of the payee; and, if the payee identity authentication result is successful, paying digital currency to the receiving device according to the payment instruction.

[0006] Optionally, sending the payer's digital identity information to the receiving device based on the payment information includes: transmitting the payment information to the payer's SE chip; receiving the payer's digital identity information returned by the payer's SE chip in response to the payment information, wherein the payer's digital identity information includes at least one of the following information of the payer: personal digital ID, national identity card number, biometric information; and sending the payer's digital identity information to the receiving device.

[0007] Optionally, the step of paying digital currency to the receiving device according to the payment instruction includes: transmitting the payment instruction to the payer's SE chip; receiving a payment voucher returned by the payer's SE chip, wherein the payment voucher is used to prove that the digital currency has been paid to the receiving device according to the payment instruction; and sending the payment voucher to the receiving device.

[0008] Optionally, the above method further includes: receiving a first session encryption character transmitted by the payer's SE chip and sending the first session encryption character to the receiving device; receiving a second session encryption character sent by the receiving device and transmitting the second session encryption character to the payer's SE chip, wherein the first session encryption character and the second session encryption character are used to generate a session key, and the session key is used to encrypt communication with the receiving device.

[0009] Optionally, receiving the payment voucher returned by the payer's SE chip includes: receiving the payment voucher ciphertext returned by the payer's SE chip, wherein the payment voucher ciphertext is the ciphertext obtained by the payer's SE chip encrypting the payment voucher using the session key.

[0010] Optionally, the step of paying digital currency to the receiving device according to the payment instruction includes: sending the payment instruction to the back-end of the paying institution, wherein the back-end of the paying institution is used to store the digital currency of the paying party, and the payment instruction is used to instruct the back-end of the paying institution to pay the digital currency to the back-end of the receiving institution corresponding to the receiving device; and receiving the payment result fed back by the back-end of the paying institution in response to the payment instruction, wherein the payment result is used to confirm that the back-end of the paying institution has completed the payment of the digital currency to the back-end of the receiving institution.

[0011] According to another aspect of the present invention, a payment method is also provided, comprising: sending payment information to a payment device, wherein the payment information includes the amount of payment; receiving digital identity information of the payer returned by the payment device; sending the digital identity information of the payer to an authentication authority, and receiving a payer identity authentication result fed back by the authentication authority for the digital identity information of the payer; if the payer identity authentication result is successful, sending a payment instruction to the payment device, wherein the payment instruction includes the payment information and the digital identity information of the payee; and receiving digital currency paid by the payment device according to the payment instruction.

[0012] Optionally, before sending the payment instruction to the payment device, the method further includes: if the payer's identity authentication result is successful, transmitting the payer's digital identity information and the payment information to the payee's SE chip, wherein the payer's digital identity information includes at least one of the following information of the payer: personal digital ID, ID card number, biometric information; receiving the payee's initialization response result generated by the payee's SE chip in response to the payer's digital identity information and the payment information; and generating the payment instruction based on the payee's initialization response result.

[0013] Optionally, receiving the digital currency paid by the payment device according to the payment instruction includes: receiving a payment voucher sent by the payment device, wherein the payment voucher is used to prove that the payment device has paid the digital currency according to the payment instruction; verifying the payment voucher, and if the payment voucher is verified, determining that the payment device has paid the digital currency according to the payment instruction.

[0014] Optionally, the above method further includes: receiving a first session encryption character sent by the receiving device and transmitting the first session encryption character to the receiving SE chip; receiving a second session encryption character generated by the receiving SE chip in response to the first session encryption character, wherein the first session encryption character and the second session encryption character are used to generate a session key, the session key being used to encrypt communication with the receiving device; and sending the second session encryption character to the payment device.

[0015] Optionally, receiving the payment voucher sent by the payment device includes: receiving encrypted payment voucher sent by the payment device, wherein the encrypted payment voucher is the encrypted text obtained by the payer's SE chip encrypting the payment voucher using the session key.

[0016] Optionally, verifying the payment voucher includes: transmitting the encrypted payment voucher to the payee's SE chip; and receiving the verification result of the payee's SE chip for the encrypted payment voucher, wherein the payee's SE chip uses a session key generated based on the first session encryption character and the second session encryption character to decrypt the encrypted payment voucher to verify the payment voucher.

[0017] Optionally, receiving the digital currency paid by the payment device according to the payment instruction includes: receiving a payment result sent by the payee institution's backend, wherein the payee institution's backend is used to store the payee's digital currency, and the payment instruction is used to instruct the payee institution's backend corresponding to the payment device to pay the digital currency to the payee institution's backend; and confirming that the payee institution's backend has completed the payment of the digital currency to the payee institution's backend based on the payment result.

[0018] According to another aspect of the present invention, a payment method is also provided, comprising: receiving payment information transmitted by a payment device, wherein the payment information includes a payment amount, and the payment information is information received by the payment device from a receiving device; transmitting digital identity information of a payer to the payment device based on the payment information, wherein the digital identity information of the payer is used by the payment device to send to the receiving device for verification by the receiving device; receiving a payment instruction transmitted by the payment device, wherein the payment instruction is an instruction generated and sent to the payment device by the receiving device after the digital identity information of the payer has been verified, the payment instruction including the payment information and the digital identity information of the payer, and the payment device transmitting the payment instruction when sending the digital identity information of the payer to an authentication authority and confirming that the authentication result of the payer's identity has been verified as successful by the authentication authority; paying digital currency to the receiving device according to the payment instruction and generating a payment voucher, wherein the payment voucher is used to prove to the receiving device that the digital currency has been paid to the receiving device according to the payment instruction; and transmitting the payment voucher to the payment device.

[0019] Optionally, based on the payment information, a first session encrypted character is generated and transmitted to the payment device; a second session encrypted character is received from the payment device, wherein the second session encrypted character is a character generated by the receiving device based on the first session encrypted character and sent to the payment device; based on the first session encrypted character and the second session encrypted character, a session key is generated, wherein the session key is used to encrypt communication with the receiving device.

[0020] Optionally, transmitting the payment voucher to the payment device includes: encrypting the payment voucher using the session key to obtain payment voucher ciphertext; and transmitting the payment voucher ciphertext to the payment device.

[0021] Optionally, transmitting the payer's digital identity information to the payment device includes: encrypting the payer's digital identity information using the payer's private key to obtain ciphertext of the payer's digital identity; transmitting the ciphertext of the payer's digital identity to the payment device; receiving the payee's digital identity information included in the payment instruction includes: receiving the payee's ciphertext of the payee's digital identity included in the payment instruction, and downloading the payee's public key certificate from the certification authority; decrypting the ciphertext of the payee's digital identity based on the payee's public key certificate to obtain the payee's digital identity information.

[0022] According to another aspect of the present invention, a payment method is also provided, comprising: receiving payment information and payer digital identity information transmitted by a receiving device, wherein the payment information includes the amount of payment, and the receiving device transmits the payment information and the payer digital identity information after sending the payer digital identity information to an authentication authority and determining that the payment device has passed verification based on the payment identity authentication result fed back by the authentication authority; generating a payee initialization response result based on the payment information, wherein the payee initialization response result includes the payment information and the payee digital identity information; transmitting the payee initialization response result to the receiving device, wherein the receiving device generates a payment instruction based on the payee initialization response result, and the payment instruction is used to be sent by the receiving device to the payment device; receiving a payment voucher transmitted by the receiving device, wherein the payment voucher is received by the receiving device from the payment device, and the payment voucher is used to prove that the payment device has paid the digital currency corresponding to the payment information to the receiving device according to the payment instruction; verifying the payment voucher, and confirming that the payment device has paid the digital currency if the payment voucher passes verification.

[0023] Optionally, the above method further includes: receiving a first session encryption character transmitted by the receiving device, wherein the first session encryption character is sent by the payment device to the receiving device; generating a second session encryption character based on the first session encryption character; transmitting the second session encryption character to the receiving device, wherein the second session encryption character is used to be sent by the receiving device to the payment device; and generating a session key based on the first session encryption character and the second session encryption character, wherein the session key is used to encrypt communication with the payment device.

[0024] Optionally, receiving the payment voucher transmitted by the payment receiving device includes: receiving encrypted payment voucher text transmitted by the payment receiving device, wherein the encrypted payment voucher text is obtained by the payment device encrypting the payment voucher using the session key; verifying the payment voucher and confirming that the payment device has paid the digital currency includes: decrypting the encrypted payment voucher text using the session key to obtain the payment voucher; and confirming that the payment device has paid the digital currency by verifying the payment voucher.

[0025] Optionally, receiving the payer's digital identity information transmitted by the receiving device includes: receiving the payer's encrypted digital identity information transmitted by the receiving device and downloading the payer's public key certificate from the certification authority; decrypting the encrypted payer's digital identity information based on the payer's public key certificate to obtain the payer's digital identity information; generating the payer's initialization response result and transmitting the payer's initialization response result to the receiving device includes: encrypting the payer's digital identity information using the payer's private key to obtain the payer's encrypted digital identity information; transmitting the payer's initialization response result to the receiving device, wherein the payer's initialization response result includes the payer's encrypted digital identity information.

[0026] According to another aspect of the present invention, a payment method is also provided, comprising: receiving digital identity information of a payer sent by a receiving device, wherein the receiving device obtains the digital identity information of the payer through communication with a payment device; generating a payer identity authentication result based on the digital identity information of the payer, and sending the payer identity authentication result to the receiving device; receiving digital identity information of a payee sent by the payment device, wherein the payment device obtains the digital identity information of the payee through communication with the receiving device; generating a payee identity authentication result based on the digital identity information of the payee, and sending the payee identity authentication result to the payment device.

[0027] According to another aspect of the present invention, a payment device is also provided, comprising: a first receiving module for receiving payment information, wherein the payment information includes a payment amount; a first sending module for sending digital identity information of a payer to a receiving device based on the payment information; a second receiving module for receiving a payment instruction returned by the receiving device, wherein the payment instruction is an instruction generated by the receiving device after verifying the digital identity information of the payer, and the payment instruction includes the payment information and the digital identity information of the payee; a second sending module for sending the digital identity information of the payee to an authentication authority and receiving a payee identity authentication result fed back by the authentication authority for the digital identity information of the payee; and a first payment module for paying digital currency to the receiving device according to the payment instruction if the authentication result of the payee identity is successful.

[0028] According to another aspect of the present invention, a payment device is also provided, comprising: a third sending module for sending payment information to a payment device, wherein the payment information includes the amount of payment; a third receiving module for receiving digital identity information of the payer returned by the payment device; a fourth sending module for sending the digital identity information of the payer to an authentication authority and receiving a payer identity authentication result fed back by the authentication authority for the digital identity information of the payer; a fifth sending module for sending a payment instruction to the payment device if the payer identity authentication result is successful, wherein the payment instruction includes the payment information and the digital identity information of the payee; and a fourth receiving module for receiving digital currency paid by the payment device according to the payment instruction.

[0029] According to another aspect of the present invention, a payment device is also provided, comprising: a fifth receiving module, configured to receive payment information transmitted by a payment device, wherein the payment information includes a payment amount, and the payment information is information received by the payment device from a receiving device; a first transmitting module, configured to transmit digital identity information of a payer to the payment device based on the payment information, wherein the digital identity information of the payer is used by the payment device to send to the receiving device for verification by the receiving device; and a sixth receiving module, configured to receive a payment instruction transmitted by the payment device, wherein the payment instruction is a verification of the digital identity information of the payer by the receiving device. A payment instruction is generated and sent to the payment device after the identity information is verified. The payment instruction includes the payment information and the payee's digital identity information. The payment device transmits the payment instruction when it sends the payee's digital identity information to the authentication authority and confirms that the authentication result of the payee's identity is verified. A second payment module is used to pay digital currency to the payment device according to the payment instruction and generate a payment voucher. The payment voucher is used to prove to the payment device that the digital currency has been paid to the payment device according to the payment instruction. A second transmission module is used to transmit the payment voucher to the payment device.

[0030] According to another aspect of the present invention, a payment device is also provided, comprising: a seventh receiving module, configured to receive payment information and payer digital identity information transmitted by a receiving device, wherein the payment information includes the amount of payment, and the receiving device transmits the payment information and the payer digital identity information after sending the payer digital identity information to an authentication authority and determining that the payment device has passed verification based on the payment identity authentication result fed back by the authentication authority; a generating module, configured to generate a payer initialization response result based on the payment information, wherein the payer initialization response result includes the payment information and the payer digital identity information; and a third transmission module. The system includes: a first module for transmitting the payee's initialization response result to the receiving device, wherein the receiving device generates a payment instruction based on the payee's initialization response result, and the payment instruction is sent by the receiving device to the payment device; a second module for receiving a payment voucher transmitted by the receiving device, wherein the payment voucher is received by the receiving device from the payment device, and the payment voucher is used to prove that the payment device has paid the digital currency corresponding to the payment information to the receiving device according to the payment instruction; and a third module for verifying the payment voucher, and confirming that the payment device has paid the digital currency if the payment voucher is verified.

[0031] According to another aspect of the present invention, a payment device is also provided, comprising: a ninth receiving module, configured to receive payer digital identity information sent by a receiving device, wherein the receiving device obtains the payer digital identity information through communication with a payment device; a second generating module, configured to generate a payer identity authentication result based on the payer digital identity information and send the payer identity authentication result to the receiving device; a tenth receiving module, configured to receive payee digital identity information sent by the payment device, wherein the payment device obtains the payee digital identity information through communication with the receiving device; and a third generating module, configured to generate a payee identity authentication result based on the payee digital identity information and send the payee identity authentication result to the payment device.

[0032] According to another aspect of the present invention, a non-volatile storage medium is also provided, the non-volatile storage medium including a stored program, wherein, when the program is executed, the device where the non-volatile storage medium is located is controlled to perform any of the payment methods described above.

[0033] According to another aspect of the present invention, a computer device is also provided, the computer device including a memory and a processor, the memory being used to store a program, and the processor being used to run the program stored in the memory, wherein the program, when running, executes any of the payment methods described above.

[0034] In this embodiment of the invention, an identity verification method is adopted by introducing an authentication authority. This involves receiving payment information, including the payment amount; sending the payer's digital identity information to the receiving device based on the payment information; receiving a payment instruction from the receiving device, where the payment instruction is generated after the receiving device has verified the payer's digital identity information and includes both payment information and the payee's digital identity information; sending the payee's digital identity information to the authentication authority and receiving the authentication result from the authentication authority regarding the payee's digital identity information; and, if the payee's identity authentication result is successful, paying digital currency to the receiving device according to the payment instruction. This achieves the purpose of authoritative verification of the identities of both the payer and the payee, thereby ensuring the authenticity and legality of the identities of both parties involved in the transaction and solving the technical problem in related technologies where it is difficult to confirm the authenticity and legality of the identities of both parties involved in the transaction. Attached Figure Description

[0035] The accompanying drawings, which are included to provide a further understanding of the invention and form part of this application, illustrate exemplary embodiments of the invention and, together with their description, serve to explain the invention and do not constitute an undue limitation thereof. In the drawings:

[0036] Figure 1 A hardware structure block diagram of a mobile terminal for implementing a payment method is shown.

[0037] Figure 2 This is a flowchart illustrating payment method one provided according to an embodiment of the present invention;

[0038] Figure 3 This is a flowchart illustrating payment method two provided according to an embodiment of the present invention;

[0039] Figure 4 This is a flowchart illustrating payment method three according to an embodiment of the present invention;

[0040] Figure 5 This is a flowchart illustrating payment method four provided according to an embodiment of the present invention;

[0041] Figure 6 This is a flowchart illustrating payment method five according to an embodiment of the present invention;

[0042] Figure 7 This is a timing diagram of a payment method based on a secure chip payment according to an optional embodiment of the present invention;

[0043] Figure 8 This is a timing diagram of a payment method based on back-end payment provided according to an optional embodiment of the present invention;

[0044] Figure 9 This is a structural block diagram of a payment device according to an embodiment of the present invention;

[0045] Figure 10 This is a structural block diagram of a payment device two provided according to an embodiment of the present invention;

[0046] Figure 11 This is a structural block diagram of a payment device three provided according to an embodiment of the present invention;

[0047] Figure 12 This is a structural block diagram of a payment device four provided according to an embodiment of the present invention;

[0048] Figure 13 This is a structural block diagram of a payment device five provided according to an embodiment of the present invention. Detailed Implementation

[0049] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0050] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0051] According to an embodiment of the present invention, a method embodiment for payment implementation is provided. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Furthermore, although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in a different order than that shown here.

[0052] The method embodiment provided in Embodiment 1 of this application can be executed on a mobile terminal, computer terminal, or similar computing device. Figure 1 A hardware structure block diagram of a mobile terminal for implementing a payment method is shown. Figure 1 As shown, the mobile terminal 10 may include one or more processors 102 (the processor may include, but is not limited to, a microprocessor MCU or a programmable logic device FPGA, etc.) and a memory 104 for storing data. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of a BUS bus), a network interface, a power supply, and / or a camera. Those skilled in the art will understand that... Figure 1 The structure shown is for illustrative purposes only and does not limit the structure of the aforementioned electronic device. For example, the mobile terminal 10 may also include... Figure 1 The more or fewer components shown, or having the same Figure 1 The different configurations shown.

[0053] It should be noted that the aforementioned one or more processors and / or other data processing circuits are generally referred to herein as "data processing circuits". These data processing circuits can be implemented wholly or partially as software, hardware, firmware, or any other combination thereof. Furthermore, the data processing circuits can be a single, independent processing module, or wholly or partially integrated into any other element in the mobile terminal 10. As involved in the embodiments of this application, the data processing circuit serves as a processor control mechanism (e.g., selection of a variable resistor termination path connected to an interface).

[0054] The memory 104 can be used to store software programs and modules of application software, such as the program instructions / data storage device corresponding to the payment method in this embodiment of the invention. The processor executes various functional applications and data processing by running the software programs and modules stored in the memory 104, thereby implementing the payment method of the aforementioned application. The memory 104 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include memory remotely located relative to the processor, and these remote memories can be connected to the mobile terminal 10 via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0055] The display can be, for example, a touchscreen liquid crystal display (LCD) that allows the user to interact with the user interface of the mobile terminal 10.

[0056] Figure 2 This is a flowchart illustrating a payment method one provided according to an embodiment of the present invention. Optionally, this payment method one can be applied to a payment device. Figure 2 As shown, the method includes the following steps:

[0057] Step S202: Receive payment information, wherein the payment information includes the amount of payment.

[0058] In this step, the payment information can be sent by the receiving device. The receiving and paying devices can communicate via technologies such as Near Field Communication (NFC). It should be noted that both the receiving and paying devices can be NFC-enabled mobile terminals, such as smartphones or tablets, or NFC-enabled POS machines. In addition to NFC, communication between the receiving and paying devices can also use wireless near-field communication methods such as Bluetooth or UWB, as long as both devices have the corresponding hardware capabilities and support the relevant protocols. The payment information is generated and sent by the receiving device, and includes the amount requested from the payer, and may also include the time when the payer requested payment.

[0059] Step S204: Based on the payment information, send the payer's digital identity information to the receiving device.

[0060] After receiving the payer's digital identity information through the payment device, the payee can verify the payer's digital identity information to confirm the payer's identity and thus confirm that the payment is legitimate and secure.

[0061] As an optional embodiment, sending the payer's digital identity information to the receiving device based on payment information may include the following steps: transmitting payment information to the payer's SE chip; receiving the payer's digital identity information returned by the payer's SE chip in response to the payment information, wherein the payer's digital identity information includes at least one of the following information of the payer: personal digital ID, national identity card number, biometric information; and sending the payer's digital identity information to the receiving device.

[0062] It's important to note that the SE chip, or Secure Element chip (SE chip for short), is used in digital currency payment scenarios. Payment and receiving devices can each connect to their respective SE chips. The SE chip enables functions such as encrypted computation, digital currency transfers, and identity information storage. Digital currency converts cash values ​​into a series of electronically encrypted sequences. The security of the currency itself relies on cryptographic algorithms. Regarding cryptographic algorithms, the security of digital currency systems involves symmetric cryptography, asymmetric cryptography, message digest algorithms, and identity-based cryptography. System implementation must deeply consider the overall security of the cryptographic system, the selection of cryptographic algorithms, the implementation of cryptographic algorithms, the design of interaction protocols, and compatibility with international and domestic standards to ensure the security of digital currency transactions.

[0063] Optionally, the payer's digital identity information can be stored in the payer's SE chip. When the payee is a reliable institution, more information from the payer's digital identity information can be provided to the payee. If the payee is a merchant or individual, only the payer's personal digital ID (PID) can be sent to the payee, while information involving the payer's privacy, such as the payer's ID number and biometric information, is protected within the payer's SE chip. Optionally, the biometric information can include at least one of the payer's fingerprint information, facial information, and iris information. The payer's digital information within the SE chip can be information entered by the payer when activating digital currency payment functionality at a reliable certification institution. This information is protected by the SE chip, and unless the payee is highly reliable, the payer's SE chip will not provide all the information in the payer's digital identity information.

[0064] Furthermore, the payer's digital identity information within the SE chip is information entered into the chip when the payer goes to a reliable certification authority to activate digital currency payment functionality. This information is protected by the SE chip; unless the payee is highly reliable, the payer's SE chip will not disclose all information within the payer's digital identity information. The payer's or payee's digital identity information can be pre-stored in the payer's or payee's SE chip before the target transaction. For example, when the payer and payee open digital wallets at a financial institution or Trusted Service Manager (TSM), the financial institution or TSM platform can access the data interface provided by the security authority's authorized certification center to obtain the corresponding digital identity information. Then, the financial institution or TSM platform can transmit the corresponding digital identity information to the payer's or payee's SE chip, ensuring the security and reliability of the digital identity information stored in the SE chip.

[0065] Step S206: Receive a payment instruction returned by the receiving device. The payment instruction is generated by the receiving device after verifying the digital identity information of the payer. The payment instruction includes payment information and the digital identity information of the payer.

[0066] In this step, the payee provides its digital identity information to the payer for verification. This process is similar to the handling of the payer's digital identity information in the previous embodiment. The payee's digital identity information can also be provided by the payee's connected SE chip, and the information includes at least one of the payee's personal digital ID, ID card number, and biometric information. Furthermore, the payment instruction is used to instruct the payment device to transfer funds to the payee device. The payment information represents the amount transferred, and the payee's digital identity information indicates the recipient of the transfer.

[0067] Step S208: Send the payee's digital identity information to the certification authority and receive the payee's identity authentication result from the certification authority based on the payee's digital identity information.

[0068] It's important to note that the certification authority is an institution trusted by both the payer and payee. It can be an authoritative body or a subordinate agency established by an authoritative body, such as an official institution endorsed by public authority. Both the payer and payee can pre-authenticate with the certification authority. The certification authority generates the payer's digital identity information and stores it in the payer's SE chip, and vice versa. In a payment scenario, the payee can send the received payer's digital identity information to the certification authority for verification of the payer's authenticity and legitimacy. Similarly, the payer can send the received payee's digital identity information to the certification authority for verification of the payee's authenticity and legitimacy, ensuring the authenticity and reliability of both parties' identities.

[0069] Step S210: If the recipient's identity authentication result is successful, digital currency is paid to the receiving device according to the payment instruction.

[0070] As an optional embodiment, digital currency can be paid to the receiving device by: transmitting a payment instruction to the payer's SE chip; receiving a payment voucher returned by the payer's SE chip, wherein the payment voucher serves as proof that digital currency has been paid to the receiving device according to the payment instruction; and sending the payment voucher to the receiving device.

[0071] In this optional embodiment, the payer's SE chip can be used to perform actual calculations of digital currency, paying the digital currency stored by the payer to the payee. After completing the payment, the payer's SE chip can generate a payment voucher based on the digital currency paid to the payee for the payee to verify the transaction. The payer's SE chip can sign the payment voucher using the payer's private key, and then send the signed payment voucher to the payee's voucher. The payee's voucher can verify the signature using the public key corresponding to the payer's private key. After verifying that the payment voucher is indeed sent by the payer, the payee's device can further verify the payment voucher to confirm whether the payment is complete.

[0072] By employing the above steps and introducing an authentication agency for identity verification, the purpose of authoritatively verifying the identities of both the payer and the payee is achieved. This ensures the authenticity and legality of the identities of both parties involved in the transaction, thereby solving the technical problem of difficulty in verifying the authenticity and legality of the identities of the parties involved in the transaction in related technologies.

[0073] As an optional embodiment, the above embodiment may further include the following steps: receiving a first session encryption character transmitted by the payer's SE chip and sending the first session encryption character to the receiving device; receiving a second session encryption character sent by the receiving device and transmitting the second session encryption character to the payer's SE chip, wherein the first session encryption character and the second session encryption character are used to generate a session key, and the session key is used to encrypt the communication with the receiving device.

[0074] In this optional embodiment, the payment device and the receiving device can pre-agree on a session encryption algorithm, with each party generating a set of session encryption characters. Either the payer or the receiver can generate the same session key based on the first and second session encryption characters and the pre-agreement session encryption algorithm, and then communicate based on the session key. Optionally, the generation process of the session encryption characters and session key can be performed separately in the payer's SE chip and the receiver's SE chip.

[0075] Optionally, the first session encryption character may include a first random number and a first random number factor, and the second session encryption character may include a second random number and a second random number factor. Either the payer's SE chip or the payee's SE chip may generate the same session key based on the above two sets of random numbers and two sets of random number factors using a pre-agreed encryption algorithm.

[0076] As an optional embodiment, receiving the payment voucher returned by the payer's SE chip may include the following process: receiving the encrypted payment voucher returned by the payer's SE chip, wherein the encrypted payment voucher is the ciphertext obtained by the payer's SE chip encrypting the payment voucher using a session key. In this step, to prevent the payment voucher from being intercepted, the payer's SE chip can pre-encrypt the payment voucher using a session key to obtain the ciphertext. After being transmitted to the payee's SE chip, the payee's SE chip can decrypt the ciphertext using its own generated session key to obtain the payment voucher, thereby verifying whether the payer has completed the payment transaction corresponding to the payment instruction.

[0077] As an optional embodiment, the payment of digital currency to the receiving device according to the payment instruction can also be carried out in the following manner: sending the payment instruction to the back-end of the paying institution, wherein the back-end of the paying institution is used to store the digital currency of the paying party, and the payment instruction is used to instruct the back-end of the paying institution to pay the digital currency to the back-end of the receiving institution corresponding to the receiving device; receiving the payment result fed back by the back-end of the paying institution in response to the payment instruction, wherein the payment result is used to confirm that the back-end of the paying institution has completed the payment of digital currency to the back-end of the receiving institution.

[0078] In this optional embodiment, the payer's backend can correspond to the payer's bank account, and the payee's backend can correspond to the payee's bank account. This embodiment can use a backend-to-backend transfer method to complete the payment transaction, further improving the security of fund transfers. It should be noted that when the payer pays the payee digital currency, both the payer and payee can update their respective digital currencies to complete the payment. For example, the payer's backend stores the payer's digital currency, and the payee's backend stores the payee's digital currency. When the payer's backend transfers funds to the payee's backend, both parties agree on the transfer amount. Then, the payer's backend updates its stored payer's digital currency based on the transfer amount, and the payee's backend updates its stored payee's digital currency based on the transfer amount, thus completing a digital currency transaction.

[0079] Figure 3 This is a flowchart illustrating a second payment method according to an embodiment of the present invention. Optionally, this method can be applied to a payment receiving device. Figure 3 As shown, the method includes the following steps:

[0080] Step S302: Send payment information to the payment device, wherein the payment information includes the amount of payment.

[0081] In this step, the receiving device and the payment device can communicate via, for example, Near Field Communication (NFC) technology. It should be noted that both the receiving and payment devices can be NFC-enabled mobile terminals, such as smartphones or tablets, or NFC-enabled POS machines. Payment information is generated and sent by the receiving device, and this information may include the amount requested from the payee and the payment time.

[0082] Step S304: Receive the payer's digital identity information returned by the payment device. Optionally, the payer's digital identity information may include at least one of the following: personal digital ID, national identity card number, or biometric information.

[0083] Step S306: Send the payer's digital identity information to the certification authority and receive the payer's identity authentication result from the certification authority based on the payer's digital identity information.

[0084] It's important to note that the certification authority is an institution trusted by both the payer and payee. It can be an authoritative body or a subordinate agency established by an authoritative body, such as an official institution endorsed by public authority. Both the payer and payee can pre-authenticate with the certification authority. The certification authority generates the payer's digital identity information and stores it in the payer's SE chip, and vice versa. In a payment scenario, the payee can send the received payer's digital identity information to the certification authority for verification of the payer's authenticity and legitimacy. Similarly, the payer can send the received payee's digital identity information to the certification authority for verification of the payee's authenticity and legitimacy, ensuring the authenticity and reliability of both parties' identities.

[0085] Step S308: If the payer's identity authentication result is successful, a payment instruction is sent to the payment device, wherein the payment instruction includes payment information and the payee's digital identity information.

[0086] In this step, the digital identity information of the payee included in the payment instruction is used by the payer to verify the authenticity and validity of the payee's identity.

[0087] Step S310: Receive the digital currency paid by the payment device according to the payment instruction.

[0088] As an optional embodiment, the receiving device can use the following method when receiving digital currency according to a payment instruction: receiving a payment voucher sent by the payment device, wherein the payment voucher proves that the payment device has paid digital currency according to the payment instruction; verifying the payment voucher, and if the payment voucher is verified, determining that the payment device has paid digital currency according to the payment instruction. It should be noted that the payer's SE chip can sign the payment voucher with the payer's private key after generating it, and send the signed payment voucher to the receiving device. The receiving device can verify the payer's signature in the payment voucher based on the public key matching the payer's private key, and determine that the payment voucher is the payer's payment record through signature verification. Afterwards, it verifies the payment voucher to determine whether the payment device has paid digital currency.

[0089] By employing the above steps and introducing an authentication agency for identity verification, the purpose of authoritatively verifying the identities of both the payer and the payee is achieved. This ensures the authenticity and legality of the identities of both parties involved in the transaction, thereby solving the technical problem of difficulty in verifying the authenticity and legality of the identities of the parties involved in the transaction in related technologies.

[0090] As an optional embodiment, before sending the payment instruction to the payment device, the following steps may be included: if the payer's identity authentication result is successful, transmitting the payer's digital identity information and payment information to the payee's SE chip, wherein the payer's digital identity information includes at least one of the following information of the payer: personal digital ID, ID card number, biometric information; receiving the payee's initialization response result generated by the payee's SE chip in response to the payer's digital identity information and payment information; and generating a payment instruction based on the payee's initialization response result.

[0091] If the payer's authentication fails, it indicates that the payer's identity is not authentic or secure. In this case, the payment process can be suspended, and the payer's digital identity information and payment information will not be transmitted to the payee's SE chip. If the payer's authentication succeeds, it indicates that the payer's identity is authentic, valid, secure, and legitimate. In this case, the aforementioned information can be transmitted to the payee's SE chip, which will generate a payee initialization response. This response informs the payment device that the payee's SE chip has completed initialization for this transaction, and the entire payment process can continue. It should be noted that the payee's initialization response may include the payee's digital identity information pre-stored in the payee's SE chip. The payment device generates a payment instruction based on the payee's initialization response and instructs the payment device to make payment to the payee.

[0092] As an optional embodiment, the above embodiment may further include the following steps: receiving a first session encryption character sent by the receiving device and transmitting the first session encryption character to the receiving SE chip; receiving a second session encryption character generated by the receiving SE chip in response to the first session encryption character, wherein the first session encryption character and the second session encryption character are used to generate a session key, and the session key is used to encrypt the communication with the receiving device; and sending the second session encryption character to the payment device.

[0093] In this optional embodiment, the payment device and the receiving device can pre-agree on a session encryption algorithm, with each party generating a set of session encryption characters. Either the payer or the receiver can generate the same session key based on the first and second session encryption characters and the pre-agreement session encryption algorithm, and then communicate based on the session key. Optionally, the generation process of the session encryption characters and session key can be performed separately in the payer's SE chip and the receiver's SE chip.

[0094] Optionally, the first session encryption character may include a first random number and a first random number factor, and the second session encryption character may include a second random number and a second random number factor. Either the payer's SE chip or the payee's SE chip may generate the same session key based on the above two sets of random numbers and two sets of random number factors using a pre-agreed encryption algorithm.

[0095] As an optional embodiment, a payment credential sent by a payment device can be received in the following manner: receiving ciphertext of a payment credential sent by the payment device, wherein the ciphertext of the payment credential is the ciphertext obtained by the payer's SE chip encrypting the payment credential using a session key.

[0096] As an optional embodiment, when verifying a payment voucher, the encrypted payment voucher can be transmitted to the payee's SE chip; the payee's SE chip can then receive the verification result of the encrypted payment voucher from the payee's SE chip, wherein the payee's SE chip uses a session key generated based on a first session encryption character and a second session encryption character to decrypt the encrypted payment voucher in order to verify the payment voucher.

[0097] In the above optional embodiments, in order to prevent the payment voucher from being intercepted, the payer's SE chip can encrypt the payment voucher in advance using a session key to obtain ciphertext. After being transmitted to the payee's SE chip, the payee's SE chip can decrypt the ciphertext using its own generated session key to obtain the payment voucher, thereby verifying whether the payer has completed the payment transaction corresponding to the payment instruction, thus improving the security of the payment process.

[0098] As an optional embodiment, the receiving payment device can receive the digital currency paid according to the payment instruction in the following manner: receiving the payment result sent by the payee institution's backend, wherein the payee institution's backend is used to store the payee's digital currency, and the payment instruction is used to instruct the payer institution's backend corresponding to the payment device to pay the digital currency to the payee institution's backend; confirming that the payer institution's backend has completed the payment of the digital currency to the payee institution's backend based on the payment result.

[0099] In this optional embodiment, the back-end of the paying institution can correspond to the bank account of the paying party, and the back-end of the receiving institution can correspond to the bank account of the receiving party. In this embodiment, a back-to-back transfer method can be used to complete the payment transaction, further improving the security of fund transfer.

[0100] Figure 4 This is a flowchart illustrating payment method three according to an embodiment of the present invention, as shown below. Figure 4 As shown, the method includes the following steps:

[0101] Step S402: Receive payment information transmitted by the payment device, wherein the payment information includes the amount of payment and is information received by the payment device from the receiving device.

[0102] Step S404: Based on the payment information, transmit the payer's digital identity information to the payment device, wherein the payer's digital identity information is used by the payment device to send to the receiving device for verification by the receiving device.

[0103] Step S406: Receive payment instruction transmitted by payment device. The payment instruction is generated and sent to payment device by receiving device after verifying the digital identity information of the payer. The payment instruction includes payment information and digital identity information of the payee. Payment device transmits payment instruction when sending the digital identity information of the payee to the certification authority and confirming that the authentication result of the payee's identity returned by the certification authority is verified as successful.

[0104] Step S408: According to the payment instruction, digital currency is paid to the receiving device and a payment voucher is generated, wherein the payment voucher is used to prove to the receiving device that digital currency has been paid to the receiving device according to the payment instruction.

[0105] Step S410: Transmit the payment voucher to the payment device.

[0106] Optionally, the above embodiments can be applied to the payer's SE chip connected to the payment device. Through the above steps, by introducing an authentication authority for identity verification, the identities of both the payer and payee are authoritatively verified, thereby ensuring the authenticity and legality of the identities of both parties involved in the transaction. This solves the technical problem in related technologies where it is difficult to confirm the authenticity and legality of the identities of both parties involved in a transaction.

[0107] As an optional embodiment, the payer's SE chip can perform the following steps: generating a first session encrypted character based on the payment information and transmitting the first session encrypted character to the payment device; receiving a second session encrypted character transmitted by the payment device, wherein the second session encrypted character is a character generated by the receiving device based on the first session encrypted character and sent to the payment device; generating a session key based on the first session encrypted character and the second session encrypted character, wherein the session key is used to encrypt communication with the receiving device.

[0108] As an optional embodiment, the payment voucher can be transmitted to the payment device in the following manner: the payment voucher is encrypted using a session key to obtain the ciphertext of the payment voucher; the ciphertext of the payment voucher is then transmitted to the payment device.

[0109] As an optional embodiment, transmitting the payer's digital identity information to the payment device may include the following steps: encrypting the payer's digital identity information using the payer's private key to obtain the payer's digital identity ciphertext; transmitting the payer's digital identity ciphertext to the payment device; when receiving the payee's digital identity information included in the payment instruction, the following method may be used: receiving the payee's digital identity ciphertext included in the payment instruction and downloading the payee's public key certificate from the certification authority; decrypting the payee's digital identity ciphertext based on the payee's public key certificate to obtain the payee's digital identity information.

[0110] In this optional embodiment, by encrypting the digital identity information of the payee and payer with private keys, it can be ensured that the digital identity information of both parties will not be leaked during the transaction, thus protecting the personal privacy of both parties. Specifically, the payer's private key and the payee's private key can be pre-installed in the payer's SE chip and the payee's SE chip, respectively, and will never be leaked from the SE chips. The payer's public key matching the payer's private key and the payee's public key matching the payee's private key can be certified by a certification authority to form payer's public key certificates and payee's public key certificates, respectively. These certificates can be used by both parties to decrypt the ciphertext of the payer's digital identity and the ciphertext of the payee's digital identity, respectively, achieving encrypted transmission of digital identity information.

[0111] Figure 5 This is a flowchart illustrating payment method four according to an embodiment of the present invention, as shown below. Figure 5 As shown, the method includes the following steps:

[0112] Step S502: Receive payment information and payer digital identity information transmitted by the receiving device. The payment information includes the amount of payment. The receiving device transmits the payment information and payer digital identity information after sending the payer digital identity information to the certification authority and determining that the payment device has passed the verification based on the payment identity authentication result fed back by the certification authority.

[0113] Step S504: Generate a payee initialization response result based on the payment information, wherein the payee initialization response result includes payment information and payee digital identity information.

[0114] Step S506: Transmit the payee's initialization response result to the receiving device, wherein the receiving device generates a payment instruction based on the payee's initialization response result, and the payment instruction is used to send the payment instruction to the payment device.

[0115] Step S508: Receive payment voucher transmitted by the receiving device, wherein the payment voucher is received by the receiving device from the payment device, and the payment voucher is used to prove that the payment device has paid the digital currency corresponding to the payment information to the receiving device according to the payment instruction.

[0116] Step S510: Verify the payment voucher. If the payment voucher is verified, confirm that the payment device has paid the digital currency.

[0117] Optionally, the above embodiments can be applied to the SE chip of the receiving party connected to the receiving device. Through the above steps, by introducing an authentication authority for identity verification, the purpose of authoritatively verifying the identities of both the payer and the payee is achieved, thereby ensuring the authenticity and legality of the identities of both parties involved in the transaction, and thus solving the technical problem in related technologies that it is difficult to confirm whether the identities of the parties involved in the transaction are authentic and legal.

[0118] As an optional embodiment, the receiving SE chip can also perform the following steps: receiving a first session encryption character transmitted by the receiving device, wherein the first session encryption character is sent from the paying device to the receiving device; generating a second session encryption character based on the first session encryption character; transmitting the second session encryption character to the receiving device, wherein the second session encryption character is used to be sent from the receiving device to the paying device; and generating a session key based on the first session encryption character and the second session encryption character, wherein the session key is used to encrypt communication with the paying device.

[0119] As an optional embodiment, receiving the payment voucher transmitted by the payment receiving device can be done in the following manner: receiving the encrypted payment voucher transmitted by the payment receiving device, wherein the encrypted payment voucher is obtained by the payment device encrypting the payment voucher using a session key; verifying the payment voucher to confirm that the payment device has paid digital currency, including: decrypting the encrypted payment voucher using the session key to obtain the payment voucher; and confirming that the payment device has paid digital currency by verifying the payment voucher.

[0120] Receiving the payer's digital identity information transmitted by the receiving device may include the following steps: receiving the ciphertext of the payer's digital identity transmitted by the receiving device and downloading the payer's public key certificate from the certification authority; decrypting the ciphertext of the payer's digital identity based on the payer's public key certificate to obtain the payer's digital identity information; generating a payee initialization response result and transmitting the payee initialization response result to the receiving device, which may be done in the following way: encrypting the payee's digital identity information using the payee's private key to obtain the ciphertext of the payee's digital identity; transmitting the payee initialization response result to the receiving device, wherein the payee initialization response result includes the ciphertext of the payer's digital identity.

[0121] In this optional embodiment, by encrypting the digital identity information of the payee and payer with private keys, it can be ensured that the digital identity information of both parties will not be leaked during the transaction, thus protecting the personal privacy of both parties. Specifically, the payer's private key and the payee's private key can be pre-installed in the payer's SE chip and the payee's SE chip, respectively, and will never be leaked from the SE chips. The payer's public key matching the payer's private key and the payee's public key matching the payee's private key can be certified by a certification authority to form payer's public key certificates and payee's public key certificates, respectively. These certificates can be used by both parties to decrypt the ciphertext of the payer's digital identity and the ciphertext of the payee's digital identity, respectively, achieving encrypted transmission of digital identity information.

[0122] Figure 6 This is a flowchart illustrating payment method five according to an embodiment of the present invention, as shown below. Figure 6 As shown, the method includes the following steps:

[0123] Step S602: Receive the payer's digital identity information sent by the receiving device, wherein the receiving device obtains the payer's digital identity information through communication with the payment device.

[0124] Step S604: Generate a payer identity authentication result based on the payer's digital identity information, and send the payer identity authentication result to the receiving device.

[0125] Step S606: Receive the digital identity information of the payee sent by the payment device, wherein the payment device obtains the digital identity information of the payee through communication with the payee device.

[0126] Step S608: Generate a payee identity authentication result based on the payee's digital identity information, and send the payee identity authentication result to the payment device.

[0127] Optionally, the above steps can be applied to certification authorities. By introducing certification authorities for identity verification, the identities of both the payer and payee are authoritatively verified, thus ensuring the authenticity and legality of the identities of both parties involved in the transaction. This solves the technical problem of difficulty in verifying the authenticity and legality of the identities of the parties involved in a transaction in related technologies.

[0128] Figure 7 This is a timing diagram of a payment method based on a secure chip payment according to an optional embodiment of the present invention, such as... Figure 7 As shown, the payment method for online payments based on a security chip may include the following steps:

[0129] Step 1: The receiving device sends payment information to the payer's SE chip to initiate payment. The payment information includes the payment amount and time. Optionally, the receiving device can first send the payment information to the paying device, and then the paying device can transmit it to the payer's SE chip.

[0130] Step 2: The payer's SE chip responds to the payment information by returning the payment information, the payer's digital identity information, and the first session encryption character to the receiving device. Optionally, the payer's digital identity information can be the payer's PID, and the first session encryption character can include a first random number and a first random number factor, which are used to generate session keys in the payer's SE chip and the receiving SE chip, respectively.

[0131] Step 3: The receiving device sends the PID to the certification authority. Optionally, the certification authority can be an organization that has certified and backed up the personal information of both the payer and the payee, and both parties to the transaction unconditionally trust the certification authority.

[0132] Step 4: The receiving device receives the payer's identity verification result from the certification authority. If the verification result shows that the payer's identity has been verified, proceed to Step 5.

[0133] Step 5: The payee initializes the payment process. The receiving device transmits the first session encryption character, the payer's PID, and payment information to the payee's SE chip.

[0134] Step 6: The payee SE chip completes the initialization response of the payee SE chip based on the above information, generates the payee initialization response result and transmits it to the payee device. The payee initialization response result includes payment information, payee PID and second session encryption characters.

[0135] Step 7: The receiving device generates a payment instruction based on the receiving party's initialization response and sends the payment instruction to the payment device via NFC.

[0136] Step 8: The payment device sends the payee's PID to the certification authority for identity verification.

[0137] Step 9: The payment device receives the payee's identity verification result from the certification authority. If the verification result shows that the payee's identity has been verified, proceed to Step 10.

[0138] Step 10: Transmit the payment instruction along with the MAC to the payer's SE chip. The MAC is a verification code used to prevent information tampering.

[0139] Step 11: The payer's SE chip completes the payment based on the payment instruction, generates a payment voucher, and encrypts the payment voucher using a session key generated based on the first session encryption character, the second session encryption character, and a pre-agreed encryption algorithm to obtain the payment voucher ciphertext. In addition, the session key can also be used to encrypt the first session encryption character and the second session encryption character to obtain the encrypted character ciphertext. Then, the payment voucher ciphertext, the encrypted character ciphertext, the payer's PID, and the MAC are sent to the receiving device.

[0140] Step 12: The receiving device transmits the payment voucher ciphertext, encrypted character ciphertext, payer PID, and MAC to the receiving SE chip for verification of the payment.

[0141] Step 13: The payee's SE chip verifies the correctness of the session key used by the payer's SE chip based on the encrypted character ciphertext. Based on the session key, it decrypts the payment voucher ciphertext to obtain the payment voucher. Then, it verifies the payment voucher. If it is confirmed that the payer has indeed paid the digital currency, it pushes the result to the payee device, which then informs the payee that the other party has completed the payment.

[0142] Figure 8 This is a timing diagram of a payment method based on back-end payment provided by an optional embodiment of the present invention, such as... Figure 8 As shown, online payment methods based on an institution's back-end system may include the following steps:

[0143] Step 1: The receiving device sends payment information to the payer's SE chip to initiate payment. The payment information includes the payment amount and time. Optionally, the receiving device can first send the payment information to the paying device, and then the paying device can transmit it to the payer's SE chip.

[0144] Step 2: The payer's SE chip responds to the payment information by returning the payment information, the payer's digital identity information, and the first session encryption character to the receiving device. Optionally, the payer's digital identity information can be the payer's PID, and the first session encryption character can include a first random number and a first random number factor, which are used to generate session keys in the payer's SE chip and the receiving SE chip, respectively.

[0145] Step 3: The receiving device sends the PID to the certification authority. Optionally, the certification authority can be an organization that has certified and backed up the personal information of both the payer and the payee, and both parties to the transaction unconditionally trust the certification authority.

[0146] Step 4: The receiving device receives the payer's identity verification result from the certification authority. If the verification result shows that the payer's identity has been verified, proceed to Step 5.

[0147] Step 5: The payee initializes the payment process. The receiving device transmits the first session encryption character, the payer's PID, and payment information to the payee's SE chip.

[0148] Step 6: The payee SE chip completes the initialization response of the payee SE chip based on the above information, generates the payee initialization response result and transmits it to the payee device. The payee initialization response result includes payment information, payee PID and second session encryption characters.

[0149] Step 7: The receiving device can generate a payment instruction based on the initial response of the receiving party and send the payment instruction to the payment device via NFC.

[0150] Step 8: The payment device sends the payee's PID to the certification authority for identity verification.

[0151] Step 9: The payment device receives the payee's identity verification result from the certification authority. If the verification result shows that the payee's identity has been verified, proceed to Step 10.

[0152] Step 10: Transmit the payment instruction along with the MAC to the back-end of the paying institution. The MAC is a verification code used to prevent information tampering.

[0153] Step 11: The payer's backend transfers funds to the payee's backend based on the payment instruction, generating a payment voucher. The payer's backend then encrypts the payment voucher using a session key generated based on the first session encryption characters, the second session encryption characters, and a pre-agreed encryption algorithm, obtaining the payment voucher ciphertext. In addition, the first and second session encryption characters are also encrypted using the session key, obtaining the encrypted character ciphertext. The payment voucher ciphertext, the encrypted character ciphertext, the payer's PID, and the MAC address are then sent to the payee's backend.

[0154] Step 12: The receiving institution's backend verifies the payment based on the encrypted payment voucher, encrypted characters, payer's PID, and MAC address. If the verification is successful, it confirms that the payer's backend has indeed completed the transfer to the receiving institution's backend. At this point, the receiving institution's backend returns the payment result to the payer's backend to indicate that the payment is complete.

[0155] Step 13: The payer's backend pushes the payment result to the payment device to inform the payer that the payment is complete.

[0156] Step 14: The payment device pushes the payment result to the receiving device to inform the recipient that the payment is complete.

[0157] This invention proposes a secure authentication technology based on digital identity, which can verify the legitimacy of the identities of both parties in a transaction through an authoritative certification body, enabling seamless digital currency payments. This avoids the leakage of personal identity information and the hijacking of transmitted data, ensuring that the data is securely stored in the SE chip. At the same time, it has a high degree of confidentiality, legality, and guarantees the validity of digital currency transactions. It also avoids the situation where lost paper or card identification documents can be easily used for illegal activities.

[0158] It should be noted that, for the sake of simplicity, the foregoing method embodiments are all described as a series of actions. However, those skilled in the art should understand that the present invention is not limited to the described order of actions, because according to the present invention, some steps can be performed in other orders or simultaneously. Furthermore, those skilled in the art should also understand that the embodiments described in the specification are preferred embodiments, and the actions and modules involved are not necessarily essential to the present invention.

[0159] Through the above description of the embodiments, those skilled in the art can clearly understand that the payment method according to the above embodiments can be implemented by means of software plus necessary general-purpose hardware platform. Of course, it can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) and includes several instructions to cause a terminal device (which may be a mobile phone, computer, server, or network device, etc.) to execute the methods of the various embodiments of the present invention.

[0160] According to an embodiment of the present invention, a payment device for implementing the above-described payment method is also provided. Figure 9 This is a structural block diagram of a payment device according to an embodiment of the present invention, such as... Figure 9 As shown, the payment device includes: a first receiving module 902, a first sending module 904, a second receiving module 906, a second sending module 908, and a first payment module 910. The payment device will be described below.

[0161] The first receiving module 902 is used to receive payment information, wherein the payment information includes the amount of payment;

[0162] The first sending module 904 is used to send the payer's digital identity information to the receiving device based on the payment information;

[0163] The second receiving module 906 is used to receive a payment instruction returned by the receiving device. The payment instruction is an instruction generated by the receiving device after the payment device has verified the digital identity information of the payer. The payment instruction includes payment information and the digital identity information of the payer.

[0164] The second sending module 908 is used to send the payee's digital identity information to the authentication authority and receive the payee's identity authentication result fed back by the authentication authority based on the payee's digital identity information.

[0165] The first payment module 910 is used to pay digital currency to the receiving device according to the payment instruction if the recipient's identity authentication result is successful.

[0166] It should be noted that the first receiving module 902, the first sending module 904, the second receiving module 906, the second sending module 908, and the first payment module 910 correspond to steps S202 to S210 in the embodiments. Multiple modules implement the same instances and application scenarios as their corresponding steps, but are not limited to the content disclosed in the above embodiments. It should also be noted that the above modules, as part of the device, can run in the computer terminal 10 provided in the embodiments.

[0167] According to an embodiment of the present invention, a second payment device for implementing the second payment method described above is also provided. Figure 10 This is a structural block diagram of a payment device two provided according to an embodiment of the present invention, as shown below. Figure 10 As shown, the payment device 2 includes: a third sending module 1002, a third receiving module 1004, a fourth sending module 1006, a fifth sending module 1008, and a fourth receiving module 1010. The payment device 2 will be described below.

[0168] The third sending module 1002 is used to send payment information to the payment device, wherein the payment information includes the amount of payment;

[0169] The third receiving module 1004 is used to receive the payer's digital identity information returned by the payment device;

[0170] The fourth sending module 1006 is used to send the payer's digital identity information to the certification authority and receive the payer's identity authentication result from the certification authority based on the payer's digital identity information.

[0171] The fifth sending module 1008 is used to send a payment instruction to the payment device when the payer's identity authentication result is successful. The payment instruction includes payment information and the payee's digital identity information.

[0172] The fourth receiving module 1010 is used to receive digital currency paid by the payment device according to the payment instruction.

[0173] It should be noted that the third sending module 1002, the third receiving module 1004, the fourth sending module 1006, the fifth sending module 1008, and the fourth receiving module 1010 mentioned above correspond to steps S302 to S310 in the embodiments. Multiple modules implement the same instances and application scenarios as their corresponding steps, but are not limited to the content disclosed in the above embodiments. It should also be noted that the above modules, as part of the device, can run in the computer terminal 10 provided in the embodiments.

[0174] According to an embodiment of the present invention, a payment device three for implementing the payment method three described above is also provided. Figure 11 This is a structural block diagram of a payment device three provided according to an embodiment of the present invention, such as... Figure 11 As shown, the payment device 3 includes: a fifth receiving module 1102, a first transmission module 1104, a sixth receiving module 1106, a second payment module 1108, and a second transmission module 1110. The payment device 3 will be described below.

[0175] The fifth receiving module 1102 is used to receive payment information transmitted by the payment device, wherein the payment information includes the amount of payment and is information received by the payment device from the receiving device;

[0176] The first transmission module 1104 is used to transmit the payer's digital identity information to the payment device based on the payment information, wherein the payer's digital identity information is sent by the payment device to the receiving device for verification by the receiving device.

[0177] The sixth receiving module 1106 is used to receive the payment instruction transmitted by the payment device. The payment instruction is an instruction generated and sent to the payment device after the receiving device verifies the digital identity information of the payer. The payment instruction includes payment information and the digital identity information of the payee. The payment device transmits the payment instruction when it sends the digital identity information of the payee to the certification authority and confirms that the authentication result of the payee's identity returned by the certification authority is verified as successful.

[0178] The second payment module 1108 is used to pay digital currency to the receiving device according to the payment instruction and generate a payment voucher, wherein the payment voucher is used to prove to the receiving device that digital currency has been paid to the receiving device according to the payment instruction.

[0179] The second transmission module 1110 is used to transmit payment vouchers to the payment device.

[0180] It should be noted that the fifth receiving module 1102, the first transmitting module 1104, the sixth receiving module 1106, the second payment module 1108, and the second transmitting module 1110 correspond to steps S402 to S410 in the embodiments. Multiple modules and their corresponding steps implement the same instances and application scenarios, but are not limited to the content disclosed in the above embodiments. It should also be noted that the above modules, as part of the device, can run in the computer terminal 10 provided in the embodiments.

[0181] According to an embodiment of the present invention, a payment device four for implementing the above-described payment method four is also provided. Figure 12 This is a structural block diagram of a payment device four provided according to an embodiment of the present invention, as shown below. Figure 12 As shown, the payment device four includes: a seventh receiving module 1202, a generating module 1204, a third transmitting module 1206, an eighth receiving module 1208, and a confirmation module 1210. The payment device four will be described below.

[0182] The seventh receiving module 1202 is used to receive payment information and payer digital identity information transmitted by the payment receiving device. The payment information includes the amount of payment. The payment receiving device transmits the payment information and payer digital identity information after sending the payer digital identity information to the certification authority and determining that the payment device has passed the verification based on the payment identity authentication result fed back by the certification authority.

[0183] The generation module 1204 is used to generate a payee initialization response result based on the payment information, wherein the payee initialization response result includes payment information and payee digital identity information;

[0184] The third transmission module 1206 is used to transmit the payee's initialization response result to the receiving device, wherein the receiving device generates a payment instruction based on the payee's initialization response result, and the payment instruction is used to be sent by the receiving device to the payment device.

[0185] The eighth receiving module 1208 is used to receive the payment voucher transmitted by the receiving device. The payment voucher is received by the receiving device from the payment device and is used to prove that the payment device has paid the digital currency corresponding to the payment information to the receiving device according to the payment instruction.

[0186] The confirmation module 1210 is used to verify the payment voucher. If the payment voucher is verified, it confirms that the payment device has paid the digital currency.

[0187] It should be noted that the seventh receiving module 1202, the generating module 1204, the third transmitting module 1206, the eighth receiving module 1208, and the confirmation module 1210 mentioned above correspond to steps S502 to S510 in the embodiments. Multiple modules and their corresponding steps implement the same instances and application scenarios, but are not limited to the content disclosed in the above embodiments. It should also be noted that the above modules, as part of the device, can run in the computer terminal 10 provided in the embodiments.

[0188] According to an embodiment of the present invention, a payment device five for implementing the above-described payment method five is also provided. Figure 13 This is a structural block diagram of payment device five provided according to an embodiment of the present invention, such as... Figure 13 As shown, the payment device 5 includes: a ninth receiving module 1302, a second generating module 1304, a tenth receiving module 1306, and a third generating module 1308. The payment device 5 will be described below.

[0189] The ninth receiving module 1302 is used to receive the payer's digital identity information sent by the receiving device, wherein the receiving device obtains the payer's digital identity information through communication with the payment device;

[0190] The second generation module 1304 is used to generate a payer identity authentication result based on the payer's digital identity information and send the payer identity authentication result to the receiving device.

[0191] The tenth receiving module 1306 is used to receive the digital identity information of the payee sent by the payment device, wherein the payment device obtains the digital identity information of the payee through communication with the receiving device;

[0192] The third generation module 1308 is used to generate a payee identity authentication result based on the payee's digital identity information and send the payee identity authentication result to the payment device.

[0193] It should be noted that the ninth receiving module 1302, the second generating module 1304, the tenth receiving module 1306, and the third generating module 1308 mentioned above correspond to steps S602 to S608 in the embodiments. Multiple modules and their corresponding steps implement the same instances and application scenarios, but are not limited to the content disclosed in the above embodiments. It should also be noted that the above modules, as part of the device, can run in the computer terminal 10 provided in the embodiments.

[0194] Embodiments of the present invention may provide a computer device. Optionally, in this embodiment, the computer device may be located in at least one of a plurality of network devices in a computer network. The computer device includes a memory and a processor.

[0195] The memory can be used to store software programs and modules, such as the program instructions / modules corresponding to the payment method and device in this embodiment of the invention. The processor executes various functional applications and data processing by running the software programs and modules stored in the memory, thereby realizing the aforementioned payment method. The memory may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory may further include memory remotely located relative to the processor, and these remote memories can be connected to a computer terminal via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0196] The processor can access information and applications stored in memory via a transmission device to perform the following steps: receiving payment information, including the amount of payment; sending the payer's digital identity information to the receiving device based on the payment information; receiving a payment instruction returned by the receiving device, wherein the payment instruction is generated by the receiving device after verifying the payer's digital identity information, and includes payment information and the payee's digital identity information; sending the payee's digital identity information to an authentication authority, and receiving the payee's identity authentication result fed back by the authentication authority regarding the payee's digital identity information; and, if the payee's identity authentication result is successful, paying digital currency to the receiving device according to the payment instruction.

[0197] Optionally, the processor may also execute program code for the following steps: sending the payer's digital identity information to the receiving device based on the payment information, including: transmitting the payment information to the payer's SE chip; receiving the payer's digital identity information returned by the payer's SE chip in response to the payment information, wherein the payer's digital identity information includes at least one of the following information of the payer: personal digital ID, national identity card number, biometric information; and sending the payer's digital identity information to the receiving device.

[0198] Optionally, the processor may also execute program code for the following steps: paying digital currency to the receiving device according to a payment instruction, including: transmitting the payment instruction to the payer's SE chip; receiving a payment voucher returned by the payer's SE chip, wherein the payment voucher is used to prove that digital currency has been paid to the receiving device according to the payment instruction; and sending the payment voucher to the receiving device.

[0199] Optionally, the processor may also execute program code that performs the following steps: receiving a first session encryption character transmitted by the payer's SE chip and sending the first session encryption character to the receiving device; receiving a second session encryption character sent by the receiving device and transmitting the second session encryption character to the payer's SE chip, wherein the first session encryption character and the second session encryption character are used to generate a session key, and the session key is used to encrypt the communication with the receiving device.

[0200] Optionally, the processor may also execute program code for the following steps: receiving a payment voucher returned by the payer's SE chip, including: receiving ciphertext of the payment voucher returned by the payer's SE chip, wherein the ciphertext of the payment voucher is the ciphertext obtained by the payer's SE chip encrypting the payment voucher using a session key.

[0201] Optionally, the processor may also execute program code for the following steps: paying digital currency to the receiving device according to a payment instruction, including: sending the payment instruction to the back-end of the paying institution, wherein the back-end of the paying institution is used to store the digital currency of the paying party, and the payment instruction is used to instruct the back-end of the paying institution to pay the digital currency to the back-end of the receiving institution corresponding to the receiving device; receiving the payment result fed back by the back-end of the paying institution in response to the payment instruction, wherein the payment result is used to confirm that the back-end of the paying institution has completed the payment of digital currency to the back-end of the receiving institution.

[0202] The processor can invoke information and applications stored in the memory via a transmission device to perform the following steps: sending payment information to a payment device, wherein the payment information includes the amount of payment; receiving the payer's digital identity information returned by the payment device; sending the payer's digital identity information to an authentication authority and receiving the payer's identity authentication result fed back by the authentication authority based on the payer's digital identity information; if the payer's identity authentication result is successful, sending a payment instruction to the payment device, wherein the payment instruction includes payment information and the payee's digital identity information; and receiving the digital currency paid by the payment device according to the payment instruction.

[0203] Optionally, the processor may also execute program code that performs the following steps: before sending a payment instruction to the payment device, it further includes: if the payer's identity authentication result is successful, transmitting the payer's digital identity information and payment information to the payee's SE chip, wherein the payer's digital identity information includes at least one of the following information of the payer: personal digital ID, ID card number, biometric information; receiving the payee's initialization response result generated by the payee's SE chip in response to the payer's digital identity information and payment information; and generating a payment instruction based on the payee's initialization response result.

[0204] Optionally, the processor may also execute program code for the following steps: receiving digital currency paid by the payment device according to the payment instruction, including: receiving a payment voucher sent by the payment device, wherein the payment voucher is used to prove that the payment device has paid digital currency according to the payment instruction; verifying the payment voucher, and if the payment voucher is verified, determining that the payment device has paid digital currency according to the payment instruction.

[0205] Optionally, the processor may also execute program code for the following steps: receiving a first session encryption character sent by the receiving device and transmitting the first session encryption character to the receiving SE chip; receiving a second session encryption character generated by the receiving SE chip in response to the first session encryption character, wherein the first session encryption character and the second session encryption character are used to generate a session key, and the session key is used to encrypt the communication with the receiving device; and sending the second session encryption character to the payment device.

[0206] Optionally, the processor may also execute program code for the following steps: receiving a payment voucher sent by the payment device, including: receiving ciphertext of the payment voucher sent by the payment device, wherein the ciphertext of the payment voucher is the ciphertext obtained by encrypting the payment voucher using a session key by the payer's SE chip.

[0207] Optionally, the processor may also execute program code that performs the following steps: verifying payment vouchers, including: transmitting ciphertext of the payment voucher to the payee's SE chip; receiving the verification result of the ciphertext of the payment voucher from the payee's SE chip, wherein the payee's SE chip uses a session key generated based on a first session encryption character and a second session encryption character to decrypt the ciphertext of the payment voucher to verify the payment voucher.

[0208] Optionally, the processor may also execute program code for the following steps: receiving digital currency paid by the payment device according to the payment instruction, including: receiving a payment result sent by the payee institution's backend, wherein the payee institution's backend is used to store the payee's digital currency, and the payment instruction is used to instruct the payer institution's backend corresponding to the payment device to pay the digital currency to the payee institution's backend; and confirming that the payer institution's backend has completed the payment of digital currency to the payee institution's backend based on the payment result.

[0209] The processor can invoke information and applications stored in memory via the transmission device to perform the following steps: receiving payment information transmitted by the payment device, wherein the payment information includes the amount of payment and is information received by the payment device from the receiving device; based on the payment information, transmitting the payer's digital identity information to the payment device, wherein the payer's digital identity information is used by the payment device to send to the receiving device for verification; receiving a payment instruction transmitted by the payment device, wherein the payment instruction is an instruction generated and sent to the payment device by the receiving device after the payer's digital identity information has been verified, the payment instruction includes payment information and the payee's digital identity information, and the payment device transmits the payment instruction when it sends the payee's digital identity information to the certification authority and confirms that the certification authority's response to the payee's identity verification result is successful; paying digital currency to the receiving device according to the payment instruction and generating a payment voucher, wherein the payment voucher is used to prove to the receiving device that digital currency has been paid to the receiving device according to the payment instruction; and transmitting the payment voucher to the payment device.

[0210] Optionally, the processor may also execute program code for the following steps: generating a first session encrypted character based on payment information and transmitting the first session encrypted character to the payment device; receiving a second session encrypted character transmitted by the payment device, wherein the second session encrypted character is a character generated by the receiving device based on the first session encrypted character and sent to the payment device; generating a session key based on the first session encrypted character and the second session encrypted character, wherein the session key is used to encrypt communication with the receiving device.

[0211] Optionally, the processor may also execute program code that performs the following steps: transmitting payment vouchers to a payment device, including: encrypting the payment voucher using a session key to obtain payment voucher ciphertext; and transmitting the payment voucher ciphertext to the payment device.

[0212] Optionally, the processor may also execute program code for the following steps: transmitting the payer's digital identity information to the payment device, including: encrypting the payer's digital identity information using the payer's private key to obtain the payer's digital identity ciphertext; transmitting the payer's digital identity ciphertext to the payment device; receiving the payee's digital identity information included in the payment instruction, including: receiving the payee's digital identity ciphertext included in the payment instruction and downloading the payee's public key certificate from the certification authority; decrypting the payee's digital identity ciphertext based on the payee's public key certificate to obtain the payee's digital identity information.

[0213] The processor can invoke information and applications stored in memory via the transmission device to perform the following steps: receiving payment information and payer digital identity information transmitted by the receiving device, wherein the payment information includes the payment amount, and the receiving device transmits the payment information and payer digital identity information after sending the payer digital identity information to the authentication authority and determining that the paying device has passed the verification based on the payment identity authentication result fed back by the authentication authority; generating a payer initialization response result based on the payment information, wherein the payer initialization response result includes the payment information and the payer digital identity information; transmitting the payer initialization response result to the receiving device, wherein the receiving device generates a payment instruction based on the payer initialization response result, and the payment instruction is used by the receiving device to send to the paying device; receiving a payment voucher transmitted by the receiving device, wherein the payment voucher is received by the receiving device from the paying device, and the payment voucher is used to prove that the paying device has paid the digital currency corresponding to the payment information to the receiving device according to the payment instruction; verifying the payment voucher, and confirming that the paying device has paid the digital currency if the payment voucher is verified.

[0214] Optionally, the processor may also execute program code for the following steps: receiving a first session encryption character transmitted by the receiving device, wherein the first session encryption character is sent from the payment device to the receiving device; generating a second session encryption character based on the first session encryption character; transmitting the second session encryption character to the receiving device, wherein the second session encryption character is used to be sent from the receiving device to the payment device; and generating a session key based on the first session encryption character and the second session encryption character, wherein the session key is used to encrypt communication with the payment device.

[0215] Optionally, the processor may also execute program code for the following steps: receiving a payment voucher transmitted by the receiving device, including: receiving encrypted payment voucher text transmitted by the receiving device, wherein the encrypted payment voucher text is obtained by encrypting the payment voucher using a session key by the receiving device; verifying the payment voucher to confirm that the receiving device has paid digital currency, including: decrypting the encrypted payment voucher text using a session key to obtain the payment voucher; and confirming that the receiving device has paid digital currency by verifying the payment voucher.

[0216] Optionally, the processor may also execute program code for the following steps: receiving payer digital identity information transmitted by the receiving device, including: receiving the payer digital identity ciphertext transmitted by the receiving device and downloading the payer public key certificate from the certification authority; decrypting the payer digital identity ciphertext based on the payer public key certificate to obtain the payer digital identity information; generating a payee initialization response result and transmitting the payee initialization response result to the receiving device, including: encrypting the payee digital identity information using the payee private key to obtain the payee digital identity ciphertext; transmitting the payee initialization response result to the payment device, wherein the payee initialization response result includes the payer digital identity ciphertext.

[0217] The processor can invoke information and applications stored in the memory via the transmission device to perform the following steps: receiving payer digital identity information sent by the receiving device, wherein the receiving device obtains the payer digital identity information through communication with the paying device; generating a payer authentication result based on the payer digital identity information and sending the payer authentication result to the receiving device; receiving payee digital identity information sent by the paying device, wherein the paying device obtains the payee digital identity information through communication with the receiving device; generating a payee authentication result based on the payee digital identity information and sending the payee authentication result to the paying device.

[0218] Those skilled in the art will understand that all or part of the steps in the various methods of the above embodiments can be implemented by a program instructing the hardware related to the terminal device. The program can be stored in a non-volatile storage medium, which may include: flash drive, read-only memory (ROM), random access memory (RAM), magnetic disk or optical disk, etc.

[0219] Embodiments of the present invention also provide a non-volatile storage medium. Optionally, in this embodiment, the aforementioned non-volatile storage medium can be used to store the program code executed by the payment method provided in the above embodiments.

[0220] Optionally, in this embodiment, the non-volatile storage medium may be located in any computer terminal in a group of computer terminals in a computer network, or in any mobile terminal in a group of mobile terminals.

[0221] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: receiving payment information, wherein the payment information includes the amount of payment; sending the payer's digital identity information to the receiving device based on the payment information; receiving a payment instruction returned by the receiving device, wherein the payment instruction is an instruction generated by the receiving device after verifying the payer's digital identity information, and the payment instruction includes the payment information and the payee's digital identity information; sending the payee's digital identity information to an authentication authority, and receiving the payee's identity authentication result fed back by the authentication authority for the payee's digital identity information; and, if the payee's identity authentication result is successful, paying digital currency to the receiving device according to the payment instruction.

[0222] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: sending the payer's digital identity information to the receiving device based on the payment information, including: transmitting the payment information to the payer's SE chip; receiving the payer's digital identity information returned by the payer's SE chip in response to the payment information, wherein the payer's digital identity information includes at least one of the following information of the payer: personal digital ID, ID card number, biometric information; and sending the payer's digital identity information to the receiving device.

[0223] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: paying digital currency to the receiving device according to a payment instruction, including: transmitting the payment instruction to the payer's SE chip; receiving a payment voucher returned by the payer's SE chip, wherein the payment voucher is used to prove that digital currency has been paid to the receiving device according to the payment instruction; and sending the payment voucher to the receiving device.

[0224] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: receiving a first session encryption character transmitted by the payer's SE chip and sending the first session encryption character to the receiving device; receiving a second session encryption character sent by the receiving device and transmitting the second session encryption character to the payer's SE chip, wherein the first session encryption character and the second session encryption character are used to generate a session key, and the session key is used to encrypt the communication with the receiving device.

[0225] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: receiving a payment voucher returned by the payer's SE chip, including: receiving ciphertext of the payment voucher returned by the payer's SE chip, wherein the ciphertext of the payment voucher is the ciphertext obtained by the payer's SE chip encrypting the payment voucher using a session key.

[0226] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: paying digital currency to the receiving device according to a payment instruction, including: sending the payment instruction to the back-end of the paying institution, wherein the back-end of the paying institution is used to store the digital currency of the paying party, and the payment instruction is used to instruct the back-end of the paying institution to pay the digital currency to the back-end of the receiving institution corresponding to the receiving device; receiving the payment result fed back by the back-end of the paying institution in response to the payment instruction, wherein the payment result is used to confirm that the back-end of the paying institution has completed the payment of digital currency to the back-end of the receiving institution.

[0227] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: sending payment information to a payment device, wherein the payment information includes the amount of payment; receiving the payer's digital identity information returned by the payment device; sending the payer's digital identity information to an authentication authority and receiving the payer's identity authentication result fed back by the authentication authority for the payer's digital identity information; if the payer's identity authentication result is successful, sending a payment instruction to the payment device, wherein the payment instruction includes payment information and the payee's digital identity information; and receiving the digital currency paid by the payment device according to the payment instruction.

[0228] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: before sending a payment instruction to the payment device, the method further includes: if the payer's identity authentication result is successful, transmitting the payer's digital identity information and payment information to the payee's SE chip, wherein the payer's digital identity information includes at least one of the following information of the payer: personal digital ID, ID card number, biometric information; receiving the payee's initialization response result generated by the payee's SE chip in response to the payer's digital identity information and payment information; and generating a payment instruction based on the payee's initialization response result.

[0229] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: receiving digital currency paid by the payment device according to the payment instruction, including: receiving a payment voucher sent by the payment device, wherein the payment voucher is used to prove that the payment device has paid digital currency according to the payment instruction; verifying the payment voucher, and if the payment voucher is verified, determining that the payment device has paid digital currency according to the payment instruction.

[0230] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: receiving a first session encryption character sent by the receiving device and transmitting the first session encryption character to the receiving SE chip; receiving a second session encryption character generated by the receiving SE chip in response to the first session encryption character, wherein the first session encryption character and the second session encryption character are used to generate a session key, and the session key is used to encrypt the communication with the receiving device; and sending the second session encryption character to the payment device.

[0231] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: receiving a payment voucher sent by the payment device, including: receiving ciphertext of the payment voucher sent by the payment device, wherein the ciphertext of the payment voucher is the ciphertext obtained by encrypting the payment voucher using a session key by the payer's SE chip.

[0232] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: verifying a payment voucher, including: transmitting the ciphertext of the payment voucher to the payee's SE chip; receiving the verification result of the ciphertext of the payment voucher from the payee's SE chip, wherein the payee's SE chip uses a session key generated based on a first session encryption character and a second session encryption character to decrypt the ciphertext of the payment voucher to realize the verification of the payment voucher.

[0233] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: receiving digital currency paid by the payment device according to the payment instruction, including: receiving a payment result sent by the payee institution's backend, wherein the payee institution's backend is used to store the payee's digital currency, and the payment instruction is used to instruct the payer institution's backend corresponding to the payment device to pay the digital currency to the payee institution's backend; and confirming that the payer institution's backend has completed the payment of digital currency to the payee institution's backend based on the payment result.

[0234] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: receiving payment information transmitted by the payment device, wherein the payment information includes the amount of payment and is information received by the payment device from the receiving device; based on the payment information, transmitting the payer's digital identity information to the payment device, wherein the payer's digital identity information is used by the payment device to send to the receiving device for verification by the receiving device; receiving a payment instruction transmitted by the payment device, wherein the payment instruction is an instruction generated and sent to the payment device by the receiving device after the payer's digital identity information has been verified, the payment instruction includes payment information and the payee's digital identity information, and the payment device transmits the payment instruction when it sends the payee's digital identity information to the certification authority and confirms that the certification authority's feedback on the payee's identity authentication result is verified as successful; paying digital currency to the receiving device according to the payment instruction and generating a payment voucher, wherein the payment voucher is used to prove to the receiving device that digital currency has been paid to the receiving device according to the payment instruction; and transmitting the payment voucher to the payment device.

[0235] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: generating a first session encrypted character based on payment information and transmitting the first session encrypted character to the payment device; receiving a second session encrypted character transmitted by the payment device, wherein the second session encrypted character is a character generated by the receiving device based on the first session encrypted character and sent to the payment device; generating a session key based on the first session encrypted character and the second session encrypted character, wherein the session key is used to encrypt communication with the receiving device.

[0236] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: transmitting a payment voucher to a payment device, including: encrypting the payment voucher using a session key to obtain ciphertext of the payment voucher; and transmitting the ciphertext of the payment voucher to the payment device.

[0237] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: receiving payment information and payer digital identity information transmitted by the receiving device, wherein the payment information includes the amount of payment, and the receiving device transmits the payment information and payer digital identity information after sending the payer digital identity information to the authentication authority and determining that the paying device has passed the verification based on the payment identity authentication result fed back by the authentication authority; generating a payer initialization response result based on the payment information, wherein the payer initialization response result includes the payment information and the payer digital identity information; transmitting the payer initialization response result to the receiving device, wherein the receiving device generates a payment instruction based on the payer initialization response result, and the payment instruction is used to be sent by the receiving device to the paying device; receiving a payment voucher transmitted by the receiving device, wherein the payment voucher is received by the receiving device from the paying device, and the payment voucher is used to prove that the paying device has paid the digital currency corresponding to the payment information to the receiving device according to the payment instruction; verifying the payment voucher, and confirming that the paying device has paid the digital currency if the payment voucher is verified.

[0238] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: receiving a first session encryption character transmitted by the receiving device, wherein the first session encryption character is sent from the payment device to the receiving device; generating a second session encryption character based on the first session encryption character; transmitting the second session encryption character to the receiving device, wherein the second session encryption character is used to be sent from the receiving device to the payment device; and generating a session key based on the first session encryption character and the second session encryption character, wherein the session key is used to encrypt communication with the payment device.

[0239] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: receiving a payment voucher transmitted by a payment receiving device, including: receiving encrypted payment voucher text transmitted by the payment receiving device, wherein the encrypted payment voucher text is obtained by the payment device encrypting the payment voucher using a session key; verifying the payment voucher to confirm that the payment device has paid digital currency, including: decrypting the encrypted payment voucher text using a session key to obtain the payment voucher; and confirming that the payment device has paid digital currency by verifying the payment voucher.

[0240] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: receiving payer digital identity information transmitted by the receiving device, including: receiving the payer digital identity ciphertext transmitted by the receiving device and downloading the payer public key certificate from the certification authority; decrypting the payer digital identity ciphertext based on the payer public key certificate to obtain the payer digital identity information; generating a payee initialization response result and transmitting the payee initialization response result to the receiving device, including: encrypting the payee digital identity information using the payee private key to obtain the payee digital identity ciphertext; transmitting the payee initialization response result to the payment device, wherein the payee initialization response result includes the payer digital identity ciphertext.

[0241] Optionally, in this embodiment, the non-volatile storage medium is configured to store program code for performing the following steps: receiving payer digital identity information sent by the receiving device, wherein the receiving device obtains the payer digital identity information through communication with the paying device; generating a payer authentication result based on the payer digital identity information and sending the payer authentication result to the receiving device; receiving payee digital identity information sent by the paying device, wherein the paying device obtains the payee digital identity information through communication with the receiving device; generating a payee authentication result based on the payee digital identity information and sending the payee authentication result to the paying device.

[0242] The sequence numbers of the above embodiments of the present invention are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0243] In the above embodiments of the present invention, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0244] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. The device embodiments described above are merely illustrative; for example, the division of units can be a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the displayed or discussed mutual couplings, direct couplings, or communication connections may be through some interfaces; indirect couplings or communication connections between units or modules may be electrical or other forms.

[0245] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0246] Furthermore, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0247] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a non-volatile storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of the present invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, read-only memory (ROM), random access memory (RAM), portable hard drives, magnetic disks, or optical disks.

[0248] The above are merely preferred embodiments of the present invention. It should be noted that those skilled in the art can make various improvements and modifications without departing from the principle of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.

Claims

1. A payment method, characterized in that, Applications in payment devices, including: Receive payment information, wherein the payment information includes the amount of payment; Based on the payment information, the payer's digital identity information is sent to the receiving device. The first session encryption character transmitted by the payer's SE chip is received and sent to the receiving device. The first session encryption character includes a first random number and a first random number factor. The payment device includes the payer's SE chip. The system receives a payment instruction returned by the payment receiving device, wherein the payment instruction is generated by the payment receiving device after verifying the digital identity information of the payer, and the payment instruction includes the payment information and the digital identity information of the payer; it also receives a second session encryption character sent by the payment receiving device and transmits the second session encryption character to the payer's SE chip, wherein the second session encryption character includes a second random number and a second random number factor, and the first session encryption character and the second session encryption character are used to generate a session key, and the session key is used to encrypt the communication with the payment receiving device; Send the recipient's digital identity information to the authentication authority, and receive the recipient's identity authentication result from the authentication authority based on the recipient's digital identity information; If the recipient's identity verification result is successful, digital currency is paid to the receiving device according to the payment instruction; The payer's SE chip is used to complete the payment based on the payment instruction, generate a payment voucher, and encrypt the payment voucher using the session key generated according to the first session encryption character, the second session encryption character, and a pre-agreed encryption algorithm to obtain payment voucher ciphertext; encrypt the first session encryption character and the second session encryption character using the session key to obtain encrypted character ciphertext; and send the payment voucher ciphertext, the encrypted character ciphertext, the payer's digital identity information, and the verification code together to the receiving device, wherein the payer's digital identity information includes the payer's PID.

2. The method according to claim 1, characterized in that, The step of sending the payer's digital identity information to the receiving device based on the payment information includes: The payment information is transmitted to the payer's SE chip; The system receives the payer's digital identity information returned by the payer's SE chip in response to the payment information, wherein the payer's digital identity information includes at least one of the following information of the payer: personal digital ID, national identity card number, or biometric information; The payer's digital identity information is sent to the receiving device.

3. The method according to claim 1, characterized in that, The step of paying digital currency to the receiving device according to the payment instruction includes: The payment instruction is transmitted to the payer's SE chip; Receive a payment voucher returned by the payer's SE chip, wherein the payment voucher serves as proof that the digital currency has been paid to the receiving device in accordance with the payment instruction; Send the payment voucher to the receiving device.

4. The method according to claim 3, characterized in that, The receipt of the payment voucher returned by the payer's SE chip includes: The system receives the ciphertext of the payment voucher returned by the payer's SE chip, wherein the ciphertext of the payment voucher is the ciphertext obtained by the payer's SE chip encrypting the payment voucher using the session key.

5. The method according to claim 1, characterized in that, The step of paying digital currency to the receiving device according to the payment instruction includes: The payment instruction is sent to the back-end of the paying institution, wherein the back-end of the paying institution is used to store the digital currency of the paying institution, and the payment instruction is used to instruct the back-end of the paying institution to pay the digital currency to the back-end of the receiving institution corresponding to the receiving device. The system receives a payment result from the payer's backend in response to the payment instruction, wherein the payment result confirms that the payer's backend has completed the payment of the digital currency to the payee's backend.

6. A payment method, characterized in that, Applications in payment collection devices include: Send payment information to the payment device, wherein the payment information includes the amount of payment; The system receives the payer's digital identity information returned by the payment device; receives a first session encryption character sent by the payment device and transmits the first session encryption character to the payee's SE chip; receives a second session encryption character generated by the payee's SE chip in response to the first session encryption character, wherein the first session encryption character and the second session encryption character are used to generate a session key, and the session key is used to encrypt communication with the payment device; and sends the second session encryption character to the payment device, wherein the first session encryption character includes a first random number and a first random number factor, and the second session encryption character includes a second random number and a second random number factor. Send the payer's digital identity information to the certification authority, and receive the payer's identity authentication result from the certification authority based on the payer's digital identity information; If the payer's identity authentication result is successful, a payment instruction is sent to the payment device, wherein the payment instruction includes the payment information and the payee's digital identity information; Receive digital currency paid by the payment device according to the payment instruction; Specifically, the payment voucher is received from the payment device after the payer's SE chip completes payment based on the payment instruction, and the payment voucher is encrypted using the session key generated according to the first session encryption character, the second session encryption character, and a pre-agreed encryption algorithm to obtain ciphertext of the payment voucher; and the encrypted character ciphertext is received from the payment device after the payer's SE chip encrypts the first session encryption character and the second session encryption character using the session key.

7. The method according to claim 6, characterized in that, Before sending the payment instruction to the payment device, the method further includes: If the payer's identity authentication result is successful, the payer's digital identity information and the payment information are transmitted to the payee's SE chip, wherein the payer's digital identity information includes at least one of the following information of the payer: personal digital ID, ID card number, biometric information; Receive the payee initialization response result generated by the payee's SE chip in response to the payer's digital identity information and the payment information; The payment instruction is generated based on the initialization response of the payee.

8. The method according to claim 6, characterized in that, The receiving device for digital currency payment according to the payment instruction includes: Receive a payment voucher sent by the payment device, wherein the payment voucher serves to prove that the payment device has paid the digital currency according to the payment instruction; The payment voucher is verified, and if the payment voucher is verified, it is determined that the payment device has paid the digital currency according to the payment instruction.

9. The method according to claim 8, characterized in that, The receiving of the payment voucher sent by the payment device includes: The payment device receives a payment voucher ciphertext, wherein the payment voucher ciphertext is the ciphertext obtained by the payer's SE chip encrypting the payment voucher using the session key.

10. The method according to claim 9, characterized in that, The verification of the payment voucher includes: Transmit the encrypted payment voucher to the payee's SE chip; The receiving party's SE chip receives the verification result of the payment voucher ciphertext, wherein the receiving party's SE chip uses a session key generated based on the first session encryption character and the second session encryption character to decrypt the payment voucher ciphertext in order to verify the payment voucher.

11. The method according to claim 6, characterized in that, The receiving device for digital currency payment according to the payment instruction includes: The system receives a payment result sent from the payee institution's backend, wherein the payee institution's backend is used to store the payee's digital currency, and the payment instruction is used to instruct the payer institution's backend corresponding to the payment device to pay the digital currency to the payee institution's backend. Based on the payment result, the payer's backend confirms that the digital currency has been paid to the payee's backend.

12. A payment method, characterized in that, Applications to the payer's SE chip include: The payment device receives payment information transmitted from the payment device, wherein the payment information includes the amount of payment and is information received by the payment device from the receiving device. Based on the payment information, the payer's digital identity information is transmitted to the payment device, wherein the payer's digital identity information is sent by the payment device to the receiving device for verification by the receiving device; The payment device receives a payment instruction transmitted by the payment device, wherein the payment instruction is an instruction generated and sent to the payment device by the receiving device after the payment device verifies the digital identity information of the payer. The payment instruction includes the payment information and the digital identity information of the payee. The payment device transmits the payment instruction when it sends the digital identity information of the payee to the certification authority and confirms that the authentication result of the payee's identity returned by the certification authority is verified as successful. According to the payment instruction, digital currency is paid to the receiving device and a payment voucher is generated, wherein the payment voucher is used to prove to the receiving device that the digital currency has been paid to the receiving device according to the payment instruction; Transmit the payment voucher to the payment device; The method further includes: generating a first session encryption character based on the payment information and transmitting the first session encryption character to the payment device; receiving a second session encryption character transmitted by the payment device, wherein the second session encryption character is a character generated by the receiving device based on the first session encryption character and sent to the payment device; generating a session key based on the first session encryption character and the second session encryption character, wherein the session key is used to encrypt communication with the receiving device, the first session encryption character includes a first random number and a first random number factor, and the second session encryption character includes a second random number and a second random number factor; The method further includes: completing payment based on the payment instruction, generating a payment voucher, and encrypting the payment voucher using the session key generated according to the first session encryption character, the second session encryption character, and a pre-agreed encryption algorithm to obtain payment voucher ciphertext; encrypting the first session encryption character and the second session encryption character using the session key to obtain encrypted character ciphertext; and sending the payment voucher ciphertext, the encrypted character ciphertext, the payer's digital identity information, and the verification code together to the payment device, and then sending them to the receiving device through the payment device, wherein the payer's digital identity information includes the payer's PID.

13. The method according to claim 12, characterized in that, The transmission of the payment voucher to the payment device includes: The payment voucher is encrypted using the session key to obtain the payment voucher ciphertext; The encrypted payment voucher is transmitted to the payment device.

14. The method according to any one of claims 12 to 13, characterized in that, The transmission of the payer's digital identity information to the payment device includes: The payer's digital identity information is encrypted using the payer's private key to obtain the payer's digital identity ciphertext; Transmit the digital identity ciphertext of the payer to the payment device; The digital identity information of the payee included in receiving the payment instruction includes: Receive the digital identity ciphertext of the payee included in the payment instruction, and download the payee's public key certificate from the certification authority; The digital identity ciphertext of the payee is decrypted based on the payee's public key certificate to obtain the payee's digital identity information.

15. A payment method, characterized in that, Applications to the SE chip in the receiving party include: The receiving device receives payment information and payer digital identity information transmitted from the receiving device. The payment information includes the amount of payment. The receiving device transmits the payment information and payer digital identity information after sending the payer digital identity information to an authentication authority and determining that the receiving device has passed the authentication based on the payment identity authentication result fed back by the authentication authority. A payee initialization response result is generated based on the payment information, wherein the payee initialization response result includes the payment information and the payee's digital identity information; The initialization response result of the payee is transmitted to the payment device, wherein the payment device generates a payment instruction based on the initialization response result of the payee, and the payment instruction is used to be sent by the payment device to the payment device; The receiving device receives a payment voucher transmitted by the receiving device, wherein the payment voucher is received by the receiving device from the payment device, and the payment voucher is used to prove that the payment device has paid the digital currency corresponding to the payment information to the receiving device according to the payment instruction; Verify the payment voucher, and if the payment voucher is verified, confirm that the payment device has paid the digital currency; The method further includes: receiving a first session encryption character transmitted by the receiving device, wherein the first session encryption character is sent from the payment device to the receiving device; generating a second session encryption character based on the first session encryption character; transmitting the second session encryption character to the receiving device, wherein the second session encryption character is used to be sent from the receiving device to the payment device; generating a session key based on the first session encryption character and the second session encryption character, wherein the session key is used to encrypt communication with the payment device, the first session encryption character including a first random number and a first random number factor, and the second session encryption character including a second random number and a second random number factor; The method further includes: receiving the payment voucher generated by the payer's SE chip after completing the payment based on the payment instruction, and encrypting the payment voucher using the session key generated according to the first session encryption character, the second session encryption character, and a pre-agreed encryption algorithm to obtain ciphertext of the payment voucher; and receiving the encrypted character ciphertext obtained by the payer's SE chip using the session key to encrypt the first session encryption character and the second session encryption character, wherein the ciphertext of the payment voucher and the encrypted character ciphertext are sent by the payer's SE chip to the payment device, sent through the payment device to the receiving device, and sent through the receiving device to the receiving SE chip.

16. The method according to claim 15, characterized in that, The receipt of the payment voucher transmitted by the payment receiving device includes: The payment device receives encrypted payment voucher data transmitted by the payment receiving device, wherein the encrypted payment voucher data is obtained by the payment device encrypting the payment voucher using the session key; The verification of the payment voucher, confirming that the payment device has paid the digital currency, includes: The payment voucher is decrypted using the session key to obtain the payment voucher. By verifying the payment voucher, it is confirmed that the payment device has paid the digital currency.

17. The method according to any one of claims 15 to 16, characterized in that, The digital identity information of the payer transmitted by the receiving device includes: Receive the digital identity ciphertext of the payer transmitted by the receiving device, and download the payer's public key certificate from the certification authority; The digital identity ciphertext of the payer is decrypted based on the payer's public key certificate to obtain the payer's digital identity information; Generating the payee initialization response result and transmitting the payee initialization response result to the receiving device includes: The recipient's digital identity information is encrypted using the recipient's private key to obtain the recipient's digital identity ciphertext; The payee initialization response result is transmitted to the payment device, wherein the payee initialization response result includes the digital identity ciphertext of the payer.

18. A payment device, characterized in that, Applications in payment devices, including: The first receiving module is used to receive payment information, wherein the payment information includes the amount of payment; The first sending module is configured to send the payer's digital identity information to the receiving device based on the payment information, receive the first session encryption character transmitted by the payer's SE chip and send the first session encryption character to the receiving device, wherein the first session encryption character includes a first random number and a first random number factor, and the payment device includes the payer's SE chip; The second receiving module is configured to receive a payment instruction returned by the receiving device, wherein the payment instruction is generated by the receiving device after verifying the digital identity information of the payer, and the payment instruction includes the payment information and the digital identity information of the payer; receive a second session encryption character sent by the receiving device and transmit the second session encryption character to the payer's SE chip, wherein the second session encryption character includes a second random number and a second random number factor, and the first session encryption character and the second session encryption character are used to generate a session key, the session key being used to encrypt communication with the receiving device; The second sending module is used to send the digital identity information of the payee to the authentication authority and receive the authentication result of the payee's identity based on the digital identity information of the payee from the authentication authority. The first payment module is used to pay digital currency to the payment device according to the payment instruction if the identity authentication result of the payee is successful. The payer's SE chip is used to complete the payment based on the payment instruction, generate a payment voucher, and encrypt the payment voucher using the session key generated according to the first session encryption character, the second session encryption character, and a pre-agreed encryption algorithm to obtain payment voucher ciphertext; encrypt the first session encryption character and the second session encryption character using the session key to obtain encrypted character ciphertext; and send the payment voucher ciphertext, the encrypted character ciphertext, the payer's digital identity information, and the verification code together to the receiving device, wherein the payer's digital identity information includes the payer's PID.

19. A payment device, characterized in that, Applications in payment collection devices include: The third sending module is used to send payment information to the payment device, wherein the payment information includes the amount of payment; The third receiving module is configured to receive the payer's digital identity information returned by the payment device; receive a first session encryption character sent by the payment device and transmit the first session encryption character to the payee's SE chip; receive a second session encryption character generated by the payee's SE chip in response to the first session encryption character, wherein the first session encryption character and the second session encryption character are used to generate a session key, and the session key is used to encrypt communication with the payment device; and send the second session encryption character to the payment device, wherein the first session encryption character includes a first random number and a first random number factor, and the second session encryption character includes a second random number and a second random number factor. The fourth sending module is used to send the payer's digital identity information to the authentication authority and receive the payer's identity authentication result fed back by the authentication authority for the payer's digital identity information; The fifth sending module is used to send a payment instruction to the payment device when the payer's identity authentication result is successful, wherein the payment instruction includes the payment information and the payee's digital identity information; The fourth receiving module is used to receive the digital currency paid by the payment device according to the payment instruction; The device is further configured to receive a payment voucher generated by the payer's SE chip after completing payment based on the payment instruction, sent by the payment device, and encrypt the payment voucher using the session key generated according to the first session encryption character, the second session encryption character, and a pre-agreed encryption algorithm to obtain ciphertext of the payment voucher; and to receive ciphertext of encrypted characters obtained by the payer's SE chip encrypting the first session encryption character and the second session encryption character using the session key, sent by the payment device.

20. A payment device, characterized in that, Applications to the payer's SE chip include: The fifth receiving module is used to receive payment information transmitted by the payment device, wherein the payment information includes the amount of payment, and the payment information is information received by the payment device from the receiving device; The first transmission module is used to transmit the payer's digital identity information to the payment device based on the payment information, wherein the payer's digital identity information is used by the payment device to send to the receiving device for verification by the receiving device; The sixth receiving module is used to receive the payment instruction transmitted by the payment device, wherein the payment instruction is an instruction generated and sent to the payment device by the receiving device after the payment device verifies the digital identity information of the payer. The payment instruction includes the payment information and the digital identity information of the payee. The payment device transmits the payment instruction when it sends the digital identity information of the payee to the certification authority and confirms that the authentication result of the payee's identity returned by the certification authority is verified as successful. The second payment module is used to pay digital currency to the receiving device according to the payment instruction and generate a payment voucher, wherein the payment voucher is used to prove to the receiving device that the digital currency has been paid to the receiving device according to the payment instruction; The second transmission module is used to transmit the payment voucher to the payment device; The device is further configured to: generate a first session encryption character based on the payment information and transmit the first session encryption character to the payment device; receive a second session encryption character transmitted by the payment device, wherein the second session encryption character is a character generated by the receiving device based on the first session encryption character and sent to the payment device; generate a session key based on the first session encryption character and the second session encryption character, wherein the session key is used to encrypt communication with the receiving device, the first session encryption character includes a first random number and a first random number factor, and the second session encryption character includes a second random number and a second random number factor; The device is further configured to complete payment based on the payment instruction, generate a payment voucher, and encrypt the payment voucher using the session key generated according to the first session encryption character, the second session encryption character, and a pre-agreed encryption algorithm to obtain payment voucher ciphertext; encrypt the first session encryption character and the second session encryption character using the session key to obtain encrypted character ciphertext; and send the payment voucher ciphertext, the encrypted character ciphertext, the payer's digital identity information, and the verification code together to the payment device, which then sends them to the receiving device. The payer's digital identity information includes the payer's PID.

21. A payment device, characterized in that, Applications to the SE chip in the receiving party include: The seventh receiving module is used to receive payment information and payer digital identity information transmitted by the payment receiving device. The payment information includes the amount of payment. The payment receiving device transmits the payment information and the payer digital identity information after sending the payer digital identity information to the authentication authority and determining that the payment device has passed the authentication based on the payment identity authentication result fed back by the authentication authority. A generation module is used to generate a payee initialization response result based on the payment information, wherein the payee initialization response result includes the payment information and the payee's digital identity information; The third transmission module is used to transmit the payee's initialization response result to the payment receiving device, wherein the payment receiving device generates a payment instruction based on the payee's initialization response result, and the payment instruction is used to be sent by the payment receiving device to the payment device; The eighth receiving module is used to receive the payment voucher transmitted by the receiving device, wherein the payment voucher is received by the receiving device from the payment device, and the payment voucher is used to prove that the payment device has paid the digital currency corresponding to the payment information to the receiving device according to the payment instruction; A confirmation module is used to verify the payment voucher and, if the payment voucher is verified, confirm that the payment device has paid the digital currency. The device is further configured to receive a first session encryption character transmitted by the receiving device, wherein the first session encryption character is sent from the payment device to the receiving device; generate a second session encryption character based on the first session encryption character; transmit the second session encryption character to the receiving device, wherein the second session encryption character is used to be sent from the receiving device to the payment device; and generate a session key based on the first session encryption character and the second session encryption character, wherein the session key is used to encrypt communication with the payment device, wherein the first session encryption character includes a first random number and a first random number factor, and the second session encryption character includes a second random number and a second random number factor. The device is further configured to receive payment voucher ciphertext obtained by the payer's SE chip completing payment based on the payment instruction, generating a payment voucher, and encrypting the payment voucher using the session key generated according to the first session encryption character, the second session encryption character, and a pre-agreed encryption algorithm; and to receive encrypted character ciphertext obtained by the payer's SE chip encrypting the first session encryption character and the second session encryption character using the session key, wherein the payment voucher ciphertext and the encrypted character ciphertext are sent by the payer's SE chip to the payment device, then to the receiving device, and finally to the receiving SE chip.

22. A non-volatile storage medium, characterized in that, The non-volatile storage medium includes a stored program, wherein, when the program is executed, it controls the device containing the non-volatile storage medium to perform the payment method according to any one of claims 1 to 17.

23. A computer device, characterized in that, The computer device includes a memory and a processor, the memory being used to store a program, and the processor being used to run the program stored in the memory, wherein the program, when running, executes the payment method according to any one of claims 1 to 17.

Images