A method, medium, and apparatus for verifying the authenticity of a transaction

Abstract

The application provides a method, medium and device for verifying transaction authenticity. The method for verifying transaction authenticity comprises: a third-party acquirer platform requesting a message from a payment channel; if a payment transaction is successful, the payment channel appends a trust string in a successful response message, and the trust string is used as a verification factor of the payment transaction; wherein the payment channel uses its own private key certificate to sign the trust string, inserts the trust string into the response message, and sends the response message to the third-party acquirer platform; the public key of the payment channel is stored in a bank settlement system and used for signature verification; and after the third-party acquirer platform finally receives the payment transaction result, the trust string of the payment channel needs to be persistently stored and used to verify settlement authenticity.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of transaction verification, and more particularly, to a method, medium and device for verifying the authenticity of a transaction. BACKGROUND

[0002] Some third-party acquirer platforms in the market do not have the qualification to directly make merchant settlement, so banks provide a special settlement system for such acquirer platforms. The third-party acquirer platform makes payment transaction through a payment channel, and the payment flow does not pass through the bank settlement system. After the transaction is successful, the third-party platform initiates a settlement request to the bank settlement system, the settlement system identifies and verifies the identity of the initiator, confirms the legal identity, and then makes merchant settlement, without verifying whether the transaction behind the settlement is real.

[0003] In normal acquirer business, each settlement request should correspond to one or more actual payment transaction flows, and the payee merchant should also exist, so as to ensure the legality of the settlement and avoid malicious transfer of bank funds. In the mode described in the first part, since the payment transaction itself does not pass through the bank settlement system, the settlement system has no payment transaction flow. When the third-party platform initiates a settlement request, the settlement system cannot verify whether there is a real and legal payment transaction behind the settlement request. At the same time, these platforms are developed by third-party companies and are not supervised by banks, which poses a risk to the transfer of bank funds.

[0004] The existing technology solves the problem in the following way:

[0005] 1. The third-party platform will sign both parties when requesting the settlement system, but this only solves the problem of system identity verification.

[0006] 2. The third-party platform will also attach the payment transaction flow number behind the settlement when requesting the settlement system. The bank settlement system receives the request and queries the payment channel through an interface to determine whether the payment flow is successful. However, this method will cause a huge performance pressure on the payment channel, because each settlement may fail, and after the failure, the third-party platform will initiate a settlement request again, at which time the settlement system will also query the payment channel again, so this method may increase the performance pressure on the payment channel by several times, and therefore few banks in the market will adopt this method.

[0007] In summary, the bank currently only verifies the identity of the third-party platform with low risk, and does not provide system connection for platforms with high risk due to the inability to solve the above problems, but this also hinders the business development of the bank to a great extent. SUMMARY

[0008] The application aims to provide a method, medium and device for verifying transaction authenticity.

[0009] The application aims to solve the problems in the prior art.

[0010] Compared with the prior art, the technical scheme and advantages of the application are as follows.

[0011] In a first aspect, the application discloses a method for verifying transaction authenticity, comprising: a third-party acquirer platform requesting a message from a payment channel; if a payment transaction is successful, the payment channel adds a trust string in a successful response message, and the trust string is used as a verification factor of the payment transaction; wherein the payment channel uses its own private key certificate to sign the trust string, inserts the trust string into the response message, and sends the response message to the third-party acquirer platform; the public key of the payment channel is stored in a bank settlement system and used for signature verification; and after the third-party acquirer platform finally receives a payment transaction result, the trust string of the payment channel needs to be persistently stored and used to verify settlement authenticity.

[0012] As a further improvement, the trust string includes but is not limited to subsystem number, merchant number, serial number, transaction amount, transaction time and channel number.

[0013] As a further improvement, after the third-party acquirer platform finally receives a payment transaction result, the trust string of the payment channel needs to be persistently stored and used to verify settlement authenticity, comprising: when the transaction type is real-time settlement, the third-party acquirer platform sends settlement information corresponding to a payment transaction and the trust string to the bank settlement system, the bank settlement system uses the public key of the payment channel to verify the trust string, if the trust string passes the verification, it indicates that the payment transaction exists and can be settled with the merchant, and the bank settlement system informs the third-party acquirer platform of the settlement result.

[0014] As a further improvement, after the third-party acquirer platform finally receives a payment transaction result, the trust string of the payment channel needs to be persistently stored and used to verify settlement authenticity, comprising: when the transaction type is non-real-time settlement, the third-party acquirer platform sends settlement information corresponding to multiple payment transactions and the trust string to the bank settlement system in the form of a file, and requires the file content to be provided in the form of a list, each line corresponding to the settlement information and the trust string of a transaction; the bank settlement system verifies each transaction in the transaction list, and settles the payment transaction that passes the verification; and the bank settlement system registers the number of lines and error information of the payment transaction that does not pass the verification, and informs the third-party acquirer platform of the processing result in the form of a return file when the file processing is completed.

[0015] As a further improvement, when a payment transaction needs to pass through several payment channels, only each payment channel needs to insert its own trust string into the respective response message, wherein the third-party acquirer platform sends the request message to each payment channel, the first payment channel sends the response message with the inserted self-owned trust string to the next payment channel, the next payment channel inserts the self-owned trust string and the trust string of the first payment channel into the response message and sends it to the next receiving institution; wherein the next receiving institution is a payment channel or a third-party acquirer platform; the third-party acquirer platform receives the response message carrying the trust strings of all payment channels, and the third-party acquirer platform sends the settlement request carrying the trust strings of all payment channels to the bank settlement system; the bank settlement system checks any one trust string in the settlement request.

[0016] As a further improvement, the bank settlement system can check any one trust string, including that the bank settlement system stores the public key certificate of each payment channel, and when the third-party acquirer platform requests settlement, the bank settlement system can use the public key to verify any or all trust strings to ensure the authenticity and reliability of the payment link.

[0017] The second aspect of the present application discloses a storage medium, which stores a computer program, and the computer program is executed by a processor to realize the steps of the method for verifying the authenticity of a transaction.

[0018] The third aspect of the present application discloses an electronic device, which at least includes a memory and a processor, the memory stores a computer program, and the processor realizes the steps of the method for verifying the authenticity of a transaction when executing the computer program on the memory.

[0019] The present application has the following advantages:

[0020] By adding a trust string in the transaction message, the problem that the settlement system cannot verify the authenticity of the transaction under the multi-node transaction link is solved, the safety of the bank funds is protected, and the system performance pressure is reduced.

[0021] The present application is applicable to any length of transaction link, only needs to add a trust string in the response message of each node system on the link, has strong expansibility, and can be used in various types of transaction scenarios that need to verify the authenticity of the original transaction.

[0022] The present application can realize the bank transaction authenticity verification between different systems of different organizations. BRIEF DESCRIPTION OF DRAWINGS

[0023] Fig. 1 is a schematic diagram of a method for verifying the authenticity of a transaction provided by an embodiment of the present application.

[0024] Fig. 2 is a system schematic diagram provided by an embodiment of the present application with only one payment channel.

[0025] Fig. 3 is a system schematic diagram provided by an embodiment of the present application with three payment channels. DETAILED DESCRIPTION

[0026] In order to make the objects, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, rather than all the embodiments of the present application. Therefore, the following detailed description of the embodiments of the present application provided in the drawings is not intended to limit the scope of the claimed present application, but only represents selected embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the scope of the present application.

[0027] In the description of the present application, the terms "first", "second" are only used for descriptive purposes, and cannot be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined with "first", "second" can explicitly or implicitly include one or more of the features. In the description of the present application, the meaning of "multiple" is two or more, unless otherwise explicitly and specifically limited.

[0028] Referring to Figs. 1 to 3 As shown in the figure, a method for verifying the authenticity of a transaction includes: a third-party acquirer platform requesting a message from a payment channel, and if a payment transaction is successful, the payment channel attaches a trust string in a successful response message, and the trust string serves as a verification factor for the payment transaction; wherein the payment channel uses its own private key certificate to sign the trust string, inserts the trust string into the response message, and sends it to the third-party acquirer platform, the public key of the payment channel is saved in the bank settlement system and used for signature verification; after the third-party acquirer platform finally receives the payment transaction result, the trust string of the payment channel needs to be persistently saved and used to verify the settlement authenticity.

[0029] The trust string includes but is not limited to subsystem number, merchant number, serial number, transaction amount, transaction time and channel number. Each element is linked using a vertical bar, for example, subsystem number | merchant number | serial number | transaction amount | transaction time | channel number.

[0030] After the third-party acquirer platform finally receives the payment transaction result, the trust string of the payment channel needs to be persistently saved and used to verify the settlement authenticity, including:

[0031] When the transaction type is real-time settlement, the third-party acquirer platform sends the settlement information corresponding to a payment transaction and the trust string to the bank settlement system, the bank settlement system verifies the trust string using the public key of the payment channel, if the trust string passes the verification, it indicates that the payment transaction exists and can be settled, and the bank settlement system informs the third-party acquirer platform of the settlement result.

[0032] After the third-party acquirer platform finally receives the payment transaction result, it needs to persist the trust string of the payment channel and use it to verify the settlement authenticity, including:

[0033] When the transaction type is non-real-time settlement, the third-party acquirer platform sends the settlement information and trust string corresponding to multiple payment transactions to the bank settlement system in the form of a file, and requires the file content to be provided in list form, with each line corresponding to the settlement information and trust string of a transaction.

[0034] The bank settlement system verifies each transaction in the file, and settles the payment transaction that passes the verification. For the payment transaction that does not pass the verification, the bank settlement system records the number of lines and error information, and when the file processing is completed, the bank settlement system informs the third-party acquirer platform of the processing result in the form of a return file.

[0035] Referring to Fig. 3 When a payment transaction needs to pass through several payment channels, only the trust string of each payment channel needs to be inserted into the respective response message. The third-party acquirer platform sends a request message to each payment channel, the first payment channel sends a response message with its own trust string to the next payment channel, the next payment channel inserts its own trust string and the trust string of the first payment channel into the response message and sends it to the next receiving agency. The next receiving agency is a payment channel or a third-party acquirer platform.

[0036] The third-party acquirer platform receives the response message carrying the trust strings of all payment channels, and the third-party acquirer platform sends a settlement request carrying the trust strings of all payment channels to the bank settlement system.

[0037] The bank settlement system verifies any one trust string in the settlement request.

[0038] For example, the transaction passes through payment channels A, B, and C, each channel independently constructs trust strings A, B, and C. The final response message received by the third-party platform contains trust string A, trust string B, and trust string C, and they are in a parallel relationship.

[0039] The bank settlement system can verify any one trust string, including:

[0040] The bank settlement system stores the public key certificate of each payment channel, and when the third-party acquirer platform requests settlement, the bank settlement system can use the public key to verify any or all trust strings to ensure the authenticity and reliability of the payment link.

[0041] In this way, the settlement system can confirm the authenticity of the transaction in the transaction chain of any length without increasing the system performance pressure.

[0042] A storage medium stores a computer program, and the computer program is executed by a processor to implement the steps of the method for verifying the authenticity of a transaction.

[0043] An electronic device includes at least a memory and a processor, the memory stores a computer program, and the processor implements the steps of the method for verifying the authenticity of a transaction when executing the computer program on the memory.

[0044] The above embodiments are only used to explain and illustrate the technical solutions of the present application, but not to limit it. Those skilled in the art should understand that any modification and equivalent replacement without departing from the spirit and scope of the present application shall fall within the protection scope of the claims of the present application.

Claims

1. A method of verifying the authenticity of a transaction, characterized by, Comprise: The third party acquires the message from the payment channel, if the payment transaction is successful, the payment channel adds the trust string in the successful response message, the trust string is used as the verification factor of the payment transaction; wherein, the payment channel uses its own private key certificate to sign the trust string, inserts the trust string into the response message and sends it to the third party acquires, the public key of the payment channel is saved in the bank settlement system and is used for signature verification; After the third party acquires receives the payment transaction result, the trust string of the payment channel needs to be saved and used to verify the settlement authenticity.

2. The method of claim 1, wherein, The trust string includes but is not limited to subsystem number, merchant number, serial number, transaction amount, transaction time and channel number.

3. The method of claim 1, wherein, After the third party acquires receives the payment transaction result, the trust string of the payment channel needs to be saved and used to verify the settlement authenticity, including: When the transaction type is real-time settlement, the third party acquires sends the settlement information and the trust string corresponding to a payment transaction to the bank settlement system, the bank settlement system uses the public key of the payment channel to verify the trust string, if the trust string passes the verification, it means that the payment transaction exists and the merchant settlement can be carried out, and the bank settlement system informs the third party acquires of the settlement result.

4. The method of claim 1, wherein, After the third party acquires receives the payment transaction result, the trust string of the payment channel needs to be saved and used to verify the settlement authenticity, including: When the transaction type is non-real-time settlement, the third party acquires sends the settlement information and the trust string corresponding to multiple payment transactions to the bank settlement system in the form of a file, and requires the file content to be provided in the form of a list, each line corresponding to the settlement information and the trust string of a transaction; The bank settlement system verifies each transaction in the file, and settles the payment transaction that passes the verification; for the payment transaction that does not pass the verification, the bank settlement system records the number of lines and error information, and when the file is completely processed, the bank settlement system informs the third party acquires of the processing result in the form of a return file.

5. The method of claim 1, wherein, Also include: When a payment transaction needs to pass through several payment channels, only the trust string of each payment channel needs to be inserted into the respective response message, wherein the third party acquires sends the request message to each payment channel, the first payment channel sends the response message with the inserted trust string to the next payment channel, the next payment channel inserts the trust string of the first payment channel and its own trust string into the response message and sends it to the next receiving agency; wherein, the next receiving agency is the payment channel or the third party acquires; The third party acquires receives the response message carrying the trust string of all payment channels, and the third party acquires sends the settlement request carrying the trust string of all payment channels to the bank settlement system; The bank settlement system verifies any one trust string in the settlement request.

6. The method of claim 5, wherein, The bank settlement system can verify any one trust string, including: The bank settlement system stores the public key certificate of each payment channel, and when the third-party collection platform requests settlement, the bank settlement system can use the public key to verify any or all trust strings to ensure the authenticity and reliability of the payment link.

7. A storage medium, characterized by The storage medium stores a computer program, and the computer program is executed by the processor to realize the steps of the method for verifying the authenticity of the transaction in any one of claims 1-6.

8. An electronic device, comprising: At least comprising a memory and a processor, the memory stores a computer program, and the processor realizes the steps of the method for verifying the authenticity of the transaction in any one of claims 1-6 when executing the computer program on the memory.

Images