Vehicle-mounted electronic wallet payment method and device, equipment and storage medium

Abstract

The invention relates to a vehicle-mounted electronic wallet payment method and device, equipment and a storage medium. The vehicle-mounted electronic wallet payment method comprises the steps that a payment request sent by a wallet application is received, current time is determined as transaction time, and the payment request comprises a digital certificate and transaction information of the wallet application; under the condition of determining that the digital certificate is valid, performing security processing on the trusted digital identity identifier, the transaction time and the transaction information allocated to the payment request to generate security information, and returning the security information to the wallet application; receiving a transaction signature verification request generated by payment confirmation operation initiated by a wallet background of the wallet application based on the wallet application; and performing signature verification processing on the security information to generate signature verification information, and returning the signature verification information to the wallet background, so that the wallet background completes payment based on the signature verification information. According to the method provided by the invention, the payment process is simplified, the payment experience of the user is improved, and the security of the whole transaction link and the non-repudiation of the transaction are ensured.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a vehicle-mounted electronic wallet payment method, device, equipment and storage medium. Background Art

[0002] With the vigorous development of automobile intelligence and networking, the functions of vehicle-side applications are becoming more and more abundant. For example, vehicle-side applications involve payment operations. At present, the payment method of many vehicles is to display the payment QR code on the large screen of the vehicle computer, and then the user needs to open the mobile phone and use a third-party payment tool to scan the code to complete the payment. However, this payment method will bring users a cumbersome operation experience of using the vehicle-side application process. Summary of the invention

[0003] In order to solve the above technical problems, the embodiments of the present disclosure provide a vehicle-mounted electronic wallet payment method, device, equipment and storage medium.

[0004] In a first aspect, an embodiment of the present disclosure provides a vehicle-mounted electronic wallet payment method, which is applied to a digital system, and the method includes:

[0005] Receive a payment request sent by a wallet application, and determine the current time as the transaction time, the payment request including the digital certificate of the wallet application and transaction information;

[0006] When determining that the digital certificate is valid, securely processing the trusted digital identity identifier assigned to the payment request, the transaction time and the transaction information, generating security information, and returning the security information to the wallet application so that the wallet application determines the authentication information according to the vehicle hardware capabilities and the transaction security policy;

[0007] Receiving a transaction verification request generated by a wallet backend of a wallet application based on a payment confirmation operation initiated by the wallet application, wherein the transaction verification request includes authentication information and security information;

[0008] The security information is subjected to a signature verification process corresponding to the security processing, signature verification information is generated, and the signature verification information is returned to the wallet backend, so that the wallet backend completes the payment based on the signature verification information.

[0009] In a second aspect, an embodiment of the present disclosure provides a vehicle-mounted electronic wallet payment method, which is applied to a wallet application, and the method includes:

[0010] Receive transaction information sent by the target application, and send a payment request generated according to the transaction information and the digital certificate obtained by application registration to the digital system, the digital system is used to determine the current time of receiving the payment request as the transaction time, and when determining that the digital certificate is valid, perform security processing on the trusted digital identity identifier assigned to the payment request, the transaction time and the transaction information, generate security information, and return the security information to the wallet application;

[0011] Receive security information and determine authentication information based on vehicle hardware capabilities and transaction security policies;

[0012] A payment confirmation operation is initiated to the wallet backend of the wallet application, so that the wallet backend responds to the payment confirmation operation, generates a transaction verification request based on the authentication information and security information, and sends the transaction verification request to the digital system. The digital system is used to perform verification processing on the security information corresponding to the security processing, generate verification information, and return the verification information to the wallet backend, so that the wallet backend completes the payment based on the verification information.

[0013] In a third aspect, an embodiment of the present disclosure provides a vehicle-mounted electronic wallet payment device, which is applied to a digital system, and the device includes:

[0014] A first receiving unit is used to receive a payment request sent by a wallet application and determine the current time as the transaction time, wherein the payment request includes a digital certificate of the wallet application and transaction information;

[0015] a security processing unit, configured to securely process the trusted digital identity identifier assigned to the payment request, the transaction time and the transaction information, generate security information, and return the security information to the wallet application, so that the wallet application determines the authentication information according to the vehicle hardware capability and the transaction security policy, if the digital certificate is determined to be valid;

[0016] A second receiving unit is used to receive a transaction signature verification request generated by a wallet backend of the wallet application based on a payment confirmation operation initiated by the wallet application, wherein the transaction signature verification request includes authentication information and security information;

[0017] The signature verification processing unit is used to perform signature verification processing on the security information corresponding to the security processing, generate signature verification information, and return the signature verification information to the wallet background so that the wallet background completes the payment based on the signature verification information.

[0018] In a fourth aspect, an embodiment of the present disclosure provides a vehicle-mounted electronic wallet payment device, which is applied to a wallet application, and the device includes:

[0019] The third receiving unit is used to receive the transaction information sent by the target application, and send the payment request generated according to the transaction information and the digital certificate obtained by the application registration to the digital system, the digital system is used to determine the current time of receiving the payment request as the transaction time, and when it is determined that the digital certificate is valid, perform security processing on the trusted digital identity identifier assigned to the payment request, the transaction time and the transaction information, generate security information, and return the security information to the wallet application;

[0020] a fourth receiving unit, configured to receive security information and determine authentication information according to vehicle hardware capabilities and transaction security policies;

[0021] The payment unit is used to initiate a payment confirmation operation to the wallet background of the wallet application, so that the wallet background responds to the payment confirmation operation, generates a transaction verification request according to the authentication information and security information, and sends the transaction verification request to the digital system. The digital system is used to perform verification processing on the security information corresponding to the security processing, generate verification information, and return the verification information to the wallet background, so that the wallet background completes the payment based on the verification information.

[0022] In a fifth aspect, an embodiment of the present disclosure provides an electronic device, including:

[0023] Memory;

[0024] Processor; and

[0025] Computer programs;

[0026] The computer program is stored in the memory and is configured to be executed by the processor to implement the in-vehicle electronic wallet payment method as described above.

[0027] In a sixth aspect, an embodiment of the present disclosure provides a computer-readable storage medium having a computer program stored thereon, which implements the steps of the above-mentioned in-vehicle electronic wallet payment method when the computer program is executed by a processor.

[0028] The in-vehicle electronic wallet payment method provided by the present disclosure receives a payment request sent by a wallet application, and determines the current time as the transaction time, wherein the payment request includes a digital certificate and transaction information of the wallet application; when determining that the digital certificate is valid, securely processes the trusted digital identity identifier, transaction time and transaction information assigned to the payment request, generates security information, and returns the security information to the wallet application, so that the wallet application determines the authentication information according to the vehicle hardware capability and the transaction security policy; receives a transaction verification request generated by the wallet background of the wallet application based on the confirmation payment operation initiated by the wallet application; verifies the security information, generates verification information, and returns the verification information to the wallet background, so that the wallet background completes the payment based on the verification information. The method provided by the present invention ensures the fluency of users using the vehicle-side application, simplifies the payment process, improves the user payment experience, and ensures the security of the entire transaction link and the non-repudiation of the transaction. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and, together with the description, serve to explain the principles of the present disclosure.

[0030] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0031] Figure 1 A schematic diagram of the structure of the vehicle-mounted electronic wallet payment system provided by an embodiment of the present disclosure;

[0032] Figure 2 A schematic diagram of the process of the vehicle-mounted electronic wallet payment method provided in an embodiment of the present disclosure;

[0033] Figure 3 A schematic diagram of the structure of the key system provided in the embodiment of the present disclosure;

[0034] Figure 4 A schematic diagram of the vehicle-mounted electronic wallet payment process provided in an embodiment of the present disclosure;

[0035] Figure 5 A schematic diagram of a process of a vehicle-mounted electronic wallet payment method provided by another embodiment of the present disclosure;

[0036] Figure 6 A schematic diagram of a wallet account opening process provided in an embodiment of the present disclosure;

[0037] Figure 7 A schematic diagram of the interface of a target application provided by an embodiment of the present disclosure;

[0038] Figure 8 A schematic diagram of the structure of a vehicle-mounted electronic wallet payment device provided in an embodiment of the present disclosure;

[0039] Fig. 9 A schematic diagram of the structure of a vehicle-mounted electronic wallet payment device provided by another embodiment of the present disclosure;

[0040] Fig.10 A schematic diagram of the structure of an in-vehicle electronic device provided in an embodiment of the present disclosure. DETAILED DESCRIPTION

[0041] In order to more clearly understand the above-mentioned objectives, features and advantages of the present disclosure, the scheme of the present disclosure will be further described below. It should be noted that the embodiments of the present disclosure and the features in the embodiments can be combined with each other without conflict.

[0042] In the following description, many specific details are set forth to facilitate a full understanding of the present disclosure, but the present disclosure may also be implemented in other ways different from those described herein; it is obvious that the embodiments in the specification are only part of the embodiments of the present disclosure, rather than all of the embodiments.

[0043] Specifically, the payment method of scanning the QR code through a third-party payment tool on the vehicle side is relatively cumbersome and will also cause users to experience a fragmented process of using the vehicle-side application. At the same time, since payment needs to be completed through a third-party payment tool, the payment process cannot be controlled. And with the continuous growth and diversification of vehicle-side payment, security issues also arise, with risks such as network interception and data leakage, making payment security an issue that the automotive industry urgently needs to solve.

[0044] In view of the above technical problems, the embodiments of the present disclosure provide a vehicle-mounted electronic wallet payment method, which enables users to have a smooth and secure payment experience on the large screen of the vehicle based on the trusted digital identity of the vehicle. The method is described in detail through one or more of the following embodiments.

[0045] The vehicle-mounted electronic wallet payment method provided by the embodiment of the present disclosure can be applied to the scenario of vehicle-side application payment. The method can be executed by a vehicle-mounted electronic wallet payment device, which can be implemented by software and / or hardware, and the device can be integrated in an electronic device. Among them, the electronic device can include but is not limited to mobile terminals such as smart phones, laptops, digital broadcast receivers, personal digital assistants (PDAs), tablet computers (Tablet Personal Computers, Tablet PCs), PMPs (portable multimedia players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), wearable devices, etc., and fixed terminals such as digital televisions, desktop computers, smart home devices, etc.

[0046] Figure 1 The schematic diagram of the structure of the vehicle-mounted electronic wallet payment system provided in the embodiment of the present disclosure, the vehicle-mounted electronic wallet payment system includes a digital system, a financial institution, an OEM and a car, wherein the digital system includes a digital platform, a digital interface and a digital program, the digital system can be understood as a trusted digital identity authentication system, and the digital interface refers to a trusted digital identity API (Application Programming Interface). The digital program can be understood as a trusted digital identity Applet in the vehicle-security chip (Secure Element, SE), and Applet refers to a small application written in the Java programming language. The digital platform can be understood as a trusted digital identity platform. Financial institutions refer to institutions that support electronic payments, such as banks, UnionPay and NetsUnion. The OEM includes an in-vehicle wallet background, and the trusted digital identity platform is also deployed in the OEM. The car is deployed with an in-vehicle wallet application, a vehicle-side application, a digital interface and a security chip. As Figure 1 As shown, a possible implementation process includes: the in-vehicle wallet application accesses the trusted digital identity Applet in the vehicle-safety chip through the trusted digital identity API to sign the transaction information, thereby ensuring the authenticity, tamper-proof and non-repudiation of the transaction; the in-vehicle wallet application requests the in-vehicle wallet background through the car's 4G / 5G and submits the signed transaction information; the in-vehicle wallet background completes the signature verification of the transaction information through the trusted digital identity platform, verifies the authenticity of the transaction information, and then connects to the financial institution through the Internet to complete the payment.

[0047] Figure 2 The flowchart of the vehicle-mounted electronic wallet payment method provided in the embodiment of the present disclosure is applied to the above-mentioned digital system, specifically including the following steps: Figure 2 The following steps are shown:

[0048] S201. Receive a payment request sent by a wallet application, and determine the current time as the transaction time.

[0049] Among them, the payment request includes the digital certificate and transaction information of the wallet application. The transaction information is generated by the wallet application based on the transaction information and digital certificate sent by the target application. The digital certificate is generated when the wallet application is registered on the digital platform.

[0050] It is understandable that the target application initiates transaction information to the wallet application. The target application refers to the application to be paid. The target application (vehicle-side application) and the wallet application are deployed on the car. After the wallet application receives and saves the transaction information, it generates a payment request based on the transaction information and the digital certificate stored after the wallet application is successfully registered on the digital platform, and sends the payment request to the digital interface to request the transaction information to be signed. The digital interface receives the payment request and determines the current time of the car as the transaction time corresponding to the transaction request.

[0051] Optionally, the above-mentioned receiving the payment request sent by the wallet application and determining the current time as the transaction time can be specifically implemented through the following steps:

[0052] A payment request sent by a wallet application is received through a digital interface; the current time is obtained as the transaction time corresponding to the payment request; the transaction information, transaction time and digital certificate are encapsulated into a data unit form, and sent to the digital program, so that the digital program processes the received information securely, and returns the generated security information to the wallet application through the digital interface.

[0053] Understandably, the digital interface receives the payment request sent by the wallet application and obtains the current time of the car as the transaction time. Then the transaction information, transaction time and digital certificate are encapsulated into a data unit form (Application Protocol Data Unit, APDU), and the transaction signature request APDU is obtained, and the transaction signature request APDU is sent to the digital program.

[0054] S202. When it is determined that the digital certificate is valid, securely process the trusted digital identity identifier, transaction time, and transaction information assigned to the payment request, generate security information, and return the security information to the wallet application so that the wallet application determines the authentication information based on the vehicle hardware capabilities and the transaction security policy.

[0055] It is understandable that, based on the above S201, the digital program verifies the validity of the received digital certificate, and if the digital certificate is valid, determines the trusted digital identity identifier (denoted as VSID) assigned to the payment request from the data set storing the trusted digital identifier. Each payment request corresponds to a unique trusted digital identity identifier at the same stage. Subsequently, the trusted digital identity identifier, transaction time and transaction information are securely processed to generate security information. The security processing includes but is not limited to signature verification, encryption and signing. The security information is returned to the wallet application through the digital interface. Subsequently, the wallet application determines the authentication information applicable to the security information according to the transaction security policy. The authentication information refers to the relevant information determined by the user to make the payment, that is, the payment information entered by the user under the security policy, such as the payment password, fingerprint or voiceprint entered by the user.

[0056] Optionally, when the digital certificate is determined to be valid, the trusted digital identity identifier, transaction time and transaction information assigned to the payment request are securely processed to generate security information, which can be specifically achieved through the following steps:

[0057] Use the platform public key of the digital platform to verify the digital certificate, check the validity period of the digital certificate, and generate a check result, wherein the check result is that the digital certificate is valid or the digital certificate is invalid; when the digital certificate is valid, use the application public key of the wallet application in the digital certificate to encrypt the trusted digital identity identifier and transaction time assigned to the payment request to generate ciphertext information; use the first key corresponding to the trusted digital identity identifier to sign the transaction information and transaction time to generate signature information; wherein the security information includes ciphertext information and signature information.

[0058] Understandably, the digital program also includes the platform public key of the digital platform, and the platform public key is used to verify the digital certificate and check the validity period of the digital certificate, wherein the digital certificate includes the application identifier (recorded as APPID), the application public key, the information authorization set (application authorization scope), the certificate signature and the certificate validity period. The certificate signature is obtained by signing the platform private key when the wallet application is registered on the digital platform. The platform private key and the platform public key are the key pair of the digital platform. Specifically, the platform public key is used to verify the certificate signature, and the certificate validity period is checked to generate a check result. The check result includes the digital certificate being valid and the digital certificate being invalid. The digital certificate being valid means that the signature verification is successful and the digital certificate is within the validity period. When the digital certificate is valid, the application public key of the wallet application in the digital certificate is obtained, and the application public key is used to encrypt the trusted digital identity identifier and the transaction time to generate ciphertext information, which can be understood as the dynamic ciphertext Enc-VSID. The digital program uses the first key corresponding to the trusted digital identity identifier to sign the transaction information and transaction time to generate signature information. The first key refers to the key corresponding to the trusted digital identity identifier, wherein the security information includes ciphertext information and signature information.

[0059] The first key includes an identifier private key and an authentication code key, and the authentication code key is used to generate a dynamic authentication code.

[0060] It can be understood that the first key includes an identifier private key and an authentication code key, wherein the identifier private key can be recorded as a VSID private key, and the identifier private key has a corresponding identifier public key. The identifier private key and the identifier public key constitute a VSID public-private key pair. Specifically, the elliptic curve public key cryptography algorithm (SM2), the elliptic curve mathematics public key encryption algorithm (EllipticCurve Cryptography, ECC) or the asymmetric encryption algorithm (RSA) can be used for signing and verifying transaction information. The authentication code key can be recorded as a VSID-TOTP shared key, which uses a time-based one-time password algorithm (in compliance with RFC6238 standards) for the generation and verification of dynamic authentication codes.

[0061] Optionally, the above-mentioned use of the first key corresponding to the trusted digital identity identifier to sign the transaction information and transaction time to generate signature information can be specifically implemented through the following steps:

[0062] The transaction information and transaction time are signed using the identifier private key to generate a transaction signature; the payment authentication code is generated using the authentication code key combined with the transaction time; wherein the signature information includes the transaction signature and the payment authentication code.

[0063] It can be understood that the digital program uses the identifier private key to sign the transaction information and transaction time to generate a transaction signature, and uses the authentication code key in combination with the transaction time to generate a payment authentication code, wherein the signature information includes the transaction signature and the payment authentication code, and further the security information includes the dynamic ciphertext, the transaction signature and the payment authentication code.

[0064] S203: Receive a transaction signature verification request generated by the wallet backend of the wallet application based on the payment confirmation operation initiated by the wallet application.

[0065] Among them, the transaction verification request includes authentication information and security information.

[0066] It is understandable that on the basis of the above S202, the wallet application opens the corresponding authentication strategy (also called security strategy) according to the transaction security strategy and vehicle hardware capabilities, which can be a multi-factor (Multi-Factor Authentication, MFA) authentication strategy, such as small amount of password-free, payment password, SMS verification, fingerprint, facial recognition, voiceprint recognition and other authentication methods that users can use. After completing the collection of relevant authentication information, the wallet application sends the authentication information and security information to the wallet background of the wallet application, requesting confirmation of the payment operation. The wallet background responds to the confirmation of the payment operation and sends a transaction verification request to the digital platform, requesting a transaction information verification operation.

[0067] S204: Perform signature verification processing corresponding to the security processing on the security information, generate signature verification information, and return the signature verification information to the wallet backend, so that the wallet backend completes the payment based on the signature verification information.

[0068] It is understandable that, based on the above S203, the digital platform performs a signature verification process on the security information corresponding to the security processing to generate the signature verification information. For example, the security processing includes encryption, signature and authentication code generation, and the signature verification process includes decryption corresponding to encryption, signature verification corresponding to signature, and authentication code verification. After obtaining the signature verification information, the digital platform returns the signature verification information to the wallet background. The wallet background checks the activation status of the wallet service based on the signature verification information, that is, checks whether the wallet service is activated for the car (target device) and / or target application where the target application is deployed. If it is determined that the wallet service is activated, the authentication information is verified again according to the transaction security policy, that is, the user can authenticate again, or the wallet background verifies the authentication information again to ensure payment security. After the authentication is passed, the bank card quick payment interface of the financial institution is called to complete the payment, and the payment result is returned to the wallet application.

[0069] Optionally, the above-mentioned signature verification processing corresponding to the security processing is performed on the security information to generate the signature verification information, which can be specifically implemented through the following steps:

[0070] Use the application private key of the wallet application to decrypt the ciphertext information to obtain the trusted digital identity identifier and transaction time, where the application private key and the application public key are the key pair of the wallet application; use the identifier public key that forms a key pair with the identifier private key to verify the transaction signature and generate a verification result, which is either a successful verification or a failed verification; use the authentication code key in combination with the transaction time to verify the payment authentication code; when the verification result is a successful verification and the payment authentication code is successfully verified, combine the application identifier of the wallet application and the trusted digital identity identifier to generate an identifier set corresponding to the wallet application, where the verification information includes the identifier set, transaction time and verification result.

[0071] It is understandable that the transaction verification request also includes the application identifier of the wallet application. The digital platform obtains the application private key of the wallet application based on the application identifier, and uses the application private key to decrypt the dynamic ciphertext in the security information to obtain the trusted digital identity identifier and transaction time. Find the corresponding identifier public key based on the trusted digital identity identifier, use the identifier public key to verify the transaction signature, and obtain the transaction time and transaction information. Find the corresponding authentication code key based on the trusted digital identity identifier, and use the authentication code key combined with the transaction time to verify the payment authentication code. After the verification is successful and the payment authentication code is verified successfully, the identifier set corresponding to the wallet application is obtained. The identifier set includes user identifiers and device identifiers that identify the target application, wallet application, and / or the device on which the application is deployed.

[0072] For example, see Figure 3 , Figure 3A structural diagram of a key system provided in an embodiment of the present disclosure, wherein the key system involves transaction data, a trusted digital identity platform, a trusted digital identity Applet, and a vehicle wallet digital certificate (a digital certificate of a wallet application), wherein the transaction data includes transaction information and a transaction signature, the transaction information is generated by the application to be paid, and the transaction signature is obtained by signing the trusted digital identity Applet using an identifier private key (VSID private key); the trusted digital identity platform includes a first data set (referred to as a first VSID) storing a trusted digital identity identifier, a platform private key, and a vehicle wallet private key, the first data set including an identifier public key (VSID public key) and an authentication code key (TOTP key); the trusted digital identity Applet includes a second data set (referred to as a second VSID) storing a trusted digital identity identifier and a platform public key, the second data set including an identifier private key and an authentication code key, the identifier private key and the identifier public key are a VSID public-private key pair, and an asymmetric encryption algorithm such as SM2, ECC, and RSA is used for signing and verifying transaction information, the authentication code private key included in the first data set and the second data set is a shared key, and a time-based one-time password algorithm is used for generating and verifying a dynamic authentication code when confirming a transaction, and the platform public key is used for signing and verifying a transaction information, and ... The key and platform private key are the platform public-private key pair, which are used to sign and verify the digital certificate of the car wallet. The platform refers to the trusted digital identity platform; the digital certificate of the car wallet includes APPID, car wallet public key, information authorization set, certificate validity period and APP certificate signature, among which APPID is the APPID assigned by the platform when the car wallet application applies for access to the trusted digital identity platform, that is, the unique identifier assigned by the platform when the car wallet application is registered on the platform. The car wallet public key is the car wallet public-private key pair generated by the platform when the car wallet application applies for access. The car wallet public key is mainly used to verify the VSID The on-board wallet public key and the on-board wallet private key are the on-board wallet public-private key pair, which are used for the process of the on-board wallet application authorizing the acquisition of VSID. The on-board wallet private key is kept by the platform; the information authorization set is the information set that the platform can obtain through user authorization after reviewing the usage scenarios of the on-board wallet application when the on-board wallet application applies for access; the certificate validity period is the effective expiration date of the on-board wallet digital certificate, and the digital certificate cannot be used after expiration; the APP certificate signature is when the on-board wallet application applies for access, the platform uses the platform private key to sign the complete certificate information and issues it to the on-board wallet application.

[0073] For example, see Figure 4 , Figure 4The schematic diagram of the vehicle electronic wallet payment process provided by the embodiment of the present disclosure specifically refers to the schematic diagram of the process of implementing the vehicle wallet payment by interaction between the vehicle wallet application, the vehicle wallet background, the financial institution, the trusted digital identity API, the trusted digital identity Applet and the trusted digital identity platform, specifically: 1) When the vehicle-side application needs to pay, it initiates a payment operation to the vehicle wallet application through transaction information; 2) The vehicle wallet application saves the transaction information, and sends the APP digital certificate and transaction information to the trusted digital identity API, requesting to sign the transaction information; 3) The trusted digital identity API obtains the current time as the transaction time, and encapsulates the APP digital certificate, transaction time and transaction information into a transaction signature request APDU; 4) The trusted digital identity API obtains the current time as the transaction time, and encapsulates the APP digital certificate, transaction time and transaction information into a transaction signature request APDU; 5) The trusted digital identity API obtains the current time as the transaction time, and encapsulates the APP digital certificate, transaction time and transaction information into a transaction signature request APDU; 6) The trusted digital identity API obtains the current time as the transaction time, and encapsulates the APP digital certificate, transaction time and transaction information into a transaction signature request APDU; 7) The trusted digital identity API obtains the current time as the transaction time, and encapsulates the APP digital certificate, transaction time and transaction information into a transaction signature request APDU; 8) The trusted digital identity API obtains the current time as the transaction time, and encapsulates the APP digital certificate, transaction time and transaction information into a transaction signature request APDU; 9) The trusted digital identity API obtains the current time as the transaction time, and encapsulates the APP digital certificate, transaction time and transaction information into a transaction signature request APDU; 10) The trusted digital identity API obtains the current time as the transaction time, and encapsulates the APP digital certificate, transaction time and transaction information into a transaction signature request APDU; 11) The trusted digital identity API obtains the current time as the transaction time, and encapsulates the APP digital The digital identity API sends the transaction information signature request APDU to the trusted digital identity Applet in the SE; 5) The trusted digital identity Applet uses the platform public key to verify the APP digital certificate, check the validity period of the APP digital certificate, and obtain the in-vehicle wallet public key of the APP digital certificate; 6) The trusted digital identity Applet determines the assigned VSID, encrypts the VSID and transaction time with the in-vehicle wallet public key, generates a dynamic ciphertext Enc-VSID, uses the VSID private key to sign the transaction information and transaction time, generates a transaction signature, uses the VSID-TOTP key combined with the transaction time to generate a payment authentication code, and combines the Enc-VSID, transaction signature and payment authentication code into a The completed security information is returned to the trusted digital identity API and the vehicle wallet application; 7) The vehicle wallet application determines the MFA authentication strategy corresponding to the security information based on the transaction security strategy and vehicle hardware capabilities, and completes the collection of relevant MFA authentication information; 8) The vehicle wallet application sends transaction information, MFA authentication information, Enc-VSID, transaction signature and payment authentication code to the vehicle wallet background, requesting confirmation of the payment operation; 9) The vehicle wallet background sends transaction information, Enc-VSID, transaction signature and payment authentication code to the trusted digital identity platform, requesting a transaction information verification operation; 10) The trusted digital identity platform obtains the vehicle wallet private key based on the APPID, and uses the vehicle wallet private key to decrypt the Enc-VSID to obtain the VSID and transaction time, determine the corresponding VSID public key according to VSID, use the VSID public key to verify the transaction information and transaction time, determine the corresponding VSID-TOTP key according to VSID, use the VSID-TOTP key combined with the transaction time to verify the payment authentication code, and obtain the ID set corresponding to the in-vehicle wallet application. The ID set includes the user identifier of the wallet application (S-OpenID), the user identifier of the application group where the wallet application is located (S-UnionID), the device identifier of the device where the wallet application is deployed (V-OpenID) and the device identifier of the application group where the device is located (V-UnionID), and return the verification information such as the ID set, transaction time and verification result to the in-vehicle wallet backend;11) The vehicle wallet backend checks the activation status of the wallet service according to S-OpenID, checks the validity of the transaction time according to the transaction security policy, verifies the MFA authentication information, calls the bank card quick payment interface of the financial institution to complete the payment, and returns the payment result to the vehicle wallet application. The payment result is payment success or payment failure. ;

[0074] The disclosed embodiment provides a vehicle-mounted electronic wallet payment method, which ensures the authenticity and non-repudiation of transaction information by signing and verifying the transaction information during the payment process. At the same time, the TOTP shared key mechanism is introduced to generate a payment authentication code in combination with the transaction time, thereby realizing two-factor authentication (2FA) authentication, thereby ensuring the security of transaction authentication.

[0075] Based on the above embodiments, Figure 5 A flow chart of a vehicle-mounted electronic wallet payment method provided by another embodiment of the present disclosure, which is applied to a wallet application, specifically includes the following steps: Figure 5 The following steps are shown:

[0076] S501. Receive transaction information sent by the target application, and send a payment request generated according to the transaction information and the digital certificate obtained by application registration to the digital system. The digital system is used to determine the current time when the payment request is received as the transaction time, and when it is determined that the digital certificate is valid, securely process the trusted digital identity identifier, transaction time and transaction information assigned to the payment request, generate security information, and return the security information to the wallet application.

[0077] It is understandable that the transaction information sent by the target application is received, a payment request is generated according to the transaction information and the digital certificate, and the payment request is sent to the digital interface to request the signature of the transaction information. The digital interface sends the transaction time, transaction information and digital certificate to the digital program, and the digital program verifies the digital certificate and checks the validity period of the certificate. If the digital certificate is valid, the trusted digital identity identifier, transaction time and transaction information are securely processed to generate security information, and the security information is returned to the wallet application through the identity authentication interface. The specific implementation steps of the digital interface and the digital program refer to the above embodiment and are not repeated here.

[0078] S502: Receive security information and determine authentication information based on vehicle hardware capabilities and transaction security policies.

[0079] It can be understood that, based on the above S501, the wallet application receives security information, and determines an authentication strategy that matches the security information based on the transaction security policy, and collects authentication information determined by the user based on the authentication strategy. The authentication strategy refers to the payment method that can be used for the transaction information. Specifically, the authentication strategy is determined considering the transaction environment and the transaction amount. For example, if the transaction amount is less than the preset amount, authentication strategies such as small-amount password-free, fingerprint, password and / or face can be adopted.

[0080] S503. Initiate a payment confirmation operation to the wallet backend of the wallet application, so that the wallet backend responds to the payment confirmation operation, generates a transaction signature verification request according to the authentication information and security information, and sends the transaction signature verification request to the digital system. The digital system is used to perform signature verification processing on the security information corresponding to the security processing, generate signature verification information, and return the signature verification information to the wallet backend, so that the wallet backend completes the payment based on the signature verification information.

[0081] It is understandable that, based on the above S502, after the authentication information is determined, a payment confirmation operation is initiated to the wallet backend, and the authentication information and security information are sent to the wallet backend. The wallet backend generates a transaction verification request based on the authentication information and security information and sends it to the digital platform, requesting the digital platform to verify the transaction information. The digital platform uses the application private key to decrypt the dynamic ciphertext, uses the identifier public key for verification, uses the authentication code key in combination with the transaction time to verify the payment authentication code, and combines the application identifier and the trusted digital identity identifier to generate an identifier set corresponding to the wallet application, and generates verification information. The specific implementation process of the digital platform refers to the above embodiment, which will not be repeated here.

[0082] The signature verification information includes the user identifier of the wallet application.

[0083] It can be understood that the verification information includes an identifier set, transaction time and verification result. The identifier set includes the user identifier of the wallet application, the user identifier of the application group where the wallet application is located, the device identifier of the target device where the wallet application is deployed and the device identifier of the application group where the target application is located. The verification result is the successful verification of the payment authentication code and the successful verification of the transaction signature or the failure of verification of any information.

[0084] Optionally, after returning the signature verification information to the wallet backend, the method further includes:

[0085] Receive wallet activation information sent by the wallet backend, where the wallet activation information is generated by the wallet backend by checking whether the wallet account is activated based on the user identifier; if the wallet activation information shows that the wallet account is not activated, perform user authentication using the application identifier and user identifier of the wallet application through the digital system to obtain an authentication result; if the authentication result is successful, send a confirmation request for activation of the wallet account to the wallet backend, so that the wallet backend activates the wallet account according to the user identifier included in the confirmation request, and returns the activation result and vehicle hardware capabilities to the wallet application; if the activation result is successful, enable payment authentication settings within the authentication information range according to the hardware information, and obtain input information of the target user for the payment authentication settings, where the target user is a user who can conduct transactions through the wallet account; send the input information to the wallet backend, so that the wallet backend completes the payment after successfully verifying the input information.

[0086] It is understandable that after the wallet application receives the security information transmitted by the digital interface, it sends the security information to the wallet background, and at the same time initiates a check operation to check the wallet activation status to the wallet background, or the wallet application calls the wallet background to check the wallet activation status. After the wallet background receives the signature verification information sent by the digital platform, it checks whether the wallet account is activated based on the user identifier in the identifier set in the signature verification information, and generates wallet activation information, which includes whether the wallet has been activated or not. If the wallet has been activated, the wallet background completes automatic login and obtains wallet activation related information based on the user identifier, and returns the login result and wallet activation information to the wallet application. In the case where the wallet account is not activated, the wallet application uses the application identifier and the user identifier to perform user authentication through the digital interface to obtain the authentication result, which is either successful authentication or failed authentication. In the case where the authentication result is successful authentication, the wallet application binds the wallet account to the financial institution corresponding to the user and confirms the activation of the wallet account, and then sends a confirmation request for the activation of the wallet account to the wallet background. The wallet background initiates a bank card binding operation to the financial institution, and activates the wallet account according to the user identifier after the binding is successful, and returns the activation result and the vehicle hardware capability to the wallet application. The activation result is either successful activation or failed activation. The vehicle hardware capability refers to the hardware information of the target vehicle on which the wallet application is deployed, that is, the authentication method supported by the target vehicle. For example, the target vehicle does not have a camera device and cannot perform facial recognition, and the authentication method cannot select facial authentication. In the case where the activation result is successful activation, the wallet application opens the payment authentication setting within the authentication information range according to the hardware information, that is, the user uses the hardware of the target vehicle for payment authentication, and obtains the input information of the target user for the payment authentication setting, such as the user directly enters the payment password on the vehicle-mounted display of the target vehicle. The input information refers to the payment password entered by the user. The target user is a user who can conduct transactions through the wallet account. After the wallet application saves the input information, it sends the input information to the wallet backend. The wallet backend saves the input information according to the device identifier of the target vehicle in the identifier set, and completes the payment using the bound bank card after successfully verifying the input information.

[0087] For example, see Figure 6 , Figure 6The schematic diagram of the wallet account activation process provided by the embodiment of the present disclosure specifically refers to the interaction process between the vehicle wallet application, the vehicle wallet background and the bank / UnionPay / NetsUnion and other banking institutions, wherein: 1) the vehicle wallet application obtains the dynamic ciphertext Enc-VSID through the trusted digital identity API (digital interface); 2) the vehicle wallet application calls the vehicle wallet background to check the wallet activation status and request login; 3) the vehicle wallet background obtains the ID set (identifier set) and user authorization information, the ID set includes S-OpenID, S-UnionID, V-OpenID and V-UnionID, and the user authorization information includes basic information (user desensitized information) and vehicle hardware capabilities; 4) the vehicle wallet background checks whether the application to be paid and / or the car deploying the application to be paid has opened a wallet account according to the S-OpenID in the ID set. If the wallet account has been opened, the wallet activation information is obtained and the login operation is completed, and then the login result and the wallet activation information are returned to the vehicle wallet application. If the wallet service is not opened, the user desensitized information is returned to the vehicle wallet application; 5) If the wallet service is not activated, if the user confirms to activate the wallet service, the APPID and S-OpenID are used through the trusted digital identity API to complete user authentication, such as user detection, to ensure that the user himself operates to activate the wallet service; 6) The user performs the card binding operation in the wallet service activation interface of the vehicle wallet application to activate the wallet service; 7) The vehicle wallet background sends the card binding request to the financial institution; 8) After the financial institution successfully binds the card, the vehicle wallet background helps the user to open a wallet account based on S-OpenID; 9) The vehicle wallet background returns the wallet activation result and the vehicle hardware capabilities (such as hardware information such as cockpit camera, fingerprint collector, voiceprint recognition capability, etc.) to the vehicle wallet application; 10) The vehicle wallet application opens the payment-related MFA setting interface based on the vehicle hardware capabilities, and the user completes the MFA setting in the setting interface; 11) The vehicle wallet application calls the payment MFA setting save interface to the vehicle wallet background, and the vehicle wallet background saves the vehicle's payment MFA settings based on V-OpenID.

[0088] For example, see Figure 7 , Figure 7 The interface diagram of the target application provided by the embodiment of the present disclosure specifically refers to the payment interface diagram of the vehicle-side application. The payment interface is displayed on the application interface in the form of a pop-up window. In a possible application scenario, when a user needs to purchase a resource object involved in the vehicle-side application, the vehicle-side application sends the transaction information of the resource object purchase to the vehicle-mounted wallet application. The vehicle-mounted wallet application sends the transaction information to the trusted digital identity API and requests the transaction information signature from the trusted digital identity API. After the signature is successful, the security policy is determined according to the transaction security policy and the transaction information. It can be a security policy for small-amount payment without password, such as Figure 7The payment interface shown displays the transaction amount, payment method and confirmation mark of the resource object. The transaction amount is "￥AA" and the payment method is to use "Wallet" (car wallet application). Users can directly click on the confirmation mark to pay and obtain authentication information, thus avoiding the fragmented user experience caused by payment operations during the use of the car-side application. Subsequently, the car wallet application initiates a payment confirmation operation to the car wallet background. First, the transaction information is verified and the payment authentication code is verified to the trusted digital identity platform (digital platform). After the verification is passed, the bank card bound to the car wallet application is used for quick payment. After the bank card quick payment is successful, the car wallet background returns the payment result to the car wallet application, and the car wallet application returns the payment result to the car-side application.

[0089] The disclosed embodiment provides an in-vehicle electronic wallet payment method. The wallet application implements different MFA authentication strategies for the wallet application on different vehicles through the device identifier and the vehicle hardware capability. The authentication strategy that the user can select is relatively flexible and avoids the leakage of vehicle information, such as the need to disclose VIN / license plate information. The wallet service can be activated in real time even if the wallet service is not activated, and the service activation process is simplified, thereby improving the payment experience.

[0090] Figure 8 The structure diagram of the vehicle-mounted electronic wallet payment device provided by the embodiment of the present disclosure is as follows. The vehicle-mounted electronic wallet payment device provided by the embodiment of the present disclosure can execute the processing flow provided by the vehicle-mounted electronic wallet payment method embodiment, such as Figure 8 As shown, the vehicle-mounted electronic wallet payment device 800 includes a first receiving unit 801, a security processing unit 802, a second receiving unit 803 and a signature verification processing unit 804, wherein:

[0091] The first receiving unit 801 is used to receive a payment request sent by a wallet application and determine the current time as the transaction time, wherein the payment request includes a digital certificate of the wallet application and transaction information;

[0092] The security processing unit 802 is used to perform security processing on the trusted digital identity identifier assigned to the payment request, the transaction time and the transaction information when determining that the digital certificate is valid, generate security information, and return the security information to the wallet application so that the wallet application determines the authentication information according to the vehicle hardware capability and the transaction security policy;

[0093] The second receiving unit 803 is used to receive a transaction verification request generated by the wallet backend of the wallet application based on the payment confirmation operation initiated by the wallet application, wherein the transaction verification request includes authentication information and security information;

[0094] The signature verification processing unit 804 is used to perform signature verification processing on the security information corresponding to the security processing, generate signature verification information, and return the signature verification information to the wallet background, so that the wallet background completes the payment based on the signature verification information.

[0095] Among them, the digital system includes the digital platform.

[0096] Optionally, the security processing unit 802 is used to:

[0097] Use the platform public key of the digital platform to verify the digital certificate, check the validity period of the digital certificate, and generate a check result, where the check result is that the digital certificate is valid or invalid;

[0098] When the digital certificate is valid, the trusted digital identity identifier assigned to the payment request and the transaction time are encrypted using the application public key of the wallet application in the digital certificate to generate ciphertext information;

[0099] Sign the transaction information and transaction time using the first key corresponding to the trusted digital identity identifier to generate signature information;

[0100] Among them, security information includes ciphertext information and signature information.

[0101] The first key includes an identifier private key and an authentication code key, and the authentication code key is used to generate a dynamic authentication code.

[0102] Optionally, the signature verification processing unit 804 is used to:

[0103] Use the identifier private key to sign the transaction information and transaction time to generate a transaction signature;

[0104] Use the authentication code key combined with the transaction time to generate a payment authentication code;

[0105] Among them, the signature information includes the transaction signature and the payment authentication code.

[0106] Optionally, the signature verification processing unit 804 is used to:

[0107] Use the application private key of the wallet application to decrypt the ciphertext information to obtain a trusted digital identity identifier and transaction time, where the application private key and the application public key are the key pair of the wallet application;

[0108] Use the identifier public key that forms a key pair with the identifier private key to verify the transaction signature and generate a verification result, which is either a verification success or a verification failure;

[0109] Use the authentication code key combined with the transaction time to verify the payment authentication code;

[0110] When the signature verification result is successful and the payment authentication code verification is successful, the application identifier and the trusted digital identity identifier of the wallet application are combined to generate an identifier set corresponding to the wallet application, wherein the signature verification information includes the identifier set, transaction time and signature verification result.

[0111] Among them, the digital system includes digital interface and digital program.

[0112] Optionally, the first receiving unit 801 is used for:

[0113] receiving a payment request sent by a wallet application through a digital interface;

[0114] Get the current time as the transaction time corresponding to the payment request;

[0115] The transaction information, transaction time and digital certificate are encapsulated into a data unit and sent to the digital program so that the digital program can securely process the received information and return the generated security information to the wallet application through the digital interface.

[0116] Figure 8 The vehicle-mounted electronic wallet payment device of the illustrated embodiment can be used to execute the technical solution of the above-mentioned method embodiment. Its implementation principle and technical effects are similar and will not be repeated here.

[0117] Fig. 9 This is a schematic diagram of the structure of a vehicle-mounted electronic wallet payment device provided by another embodiment of the present disclosure. The vehicle-mounted electronic wallet payment device provided by the embodiment of the present disclosure can execute the processing flow provided by the vehicle-mounted electronic wallet payment method embodiment, such as Fig. 9 As shown, the vehicle-mounted electronic wallet payment device 900 includes a third receiving unit 901, a fourth receiving unit 902 and a payment unit 903, wherein:

[0118] The third receiving unit 901 is used to receive the transaction information sent by the target application, and send the payment request generated according to the transaction information and the digital certificate obtained by the application registration to the digital system, and the digital system is used to determine the current time of receiving the payment request as the transaction time, and when it is determined that the digital certificate is valid, perform security processing on the trusted digital identity identifier assigned to the payment request, the transaction time and the transaction information, generate security information, and return the security information to the wallet application;

[0119] The fourth receiving unit 902 is used to receive security information and determine authentication information according to the vehicle hardware capability and the transaction security policy;

[0120] The payment unit 903 is used to initiate a payment confirmation operation to the wallet background of the wallet application, so that the wallet background responds to the payment confirmation operation, generates a transaction signature verification request according to the authentication information and security information, and sends the transaction signature verification request to the digital system. The digital system is used to perform signature verification processing on the security information corresponding to the security processing, generate signature verification information, and return the signature verification information to the wallet background, so that the wallet background completes the payment based on the signature verification information.

[0121] The signature verification information includes the user identifier of the wallet application.

[0122] Optionally, the vehicle-mounted electronic wallet payment device 900 is also used for:

[0123] Receive the wallet activation information sent by the wallet backend. The wallet activation information is generated by the wallet backend based on the user identifier to check whether the wallet account is activated;

[0124] When the wallet activation information indicates that the wallet account is not activated, the digital system uses the application identifier and the user identifier of the wallet application to perform user authentication and obtain an authentication result;

[0125] If the authentication result is successful, a confirmation request for opening a wallet account is sent to the wallet backend, so that the wallet backend opens the wallet account according to the user identifier included in the confirmation request, and returns the activation result and vehicle hardware capabilities to the wallet application;

[0126] If the activation result is successful, the payment authentication setting is enabled within the authentication information range according to the vehicle hardware capability, and the input information of the target user for the payment authentication setting is obtained. The target user is a user who can conduct transactions through the wallet account;

[0127] The input information is sent to the wallet backend so that the wallet backend completes the payment after successfully verifying the input information.

[0128] Fig. 9 The vehicle-mounted electronic wallet payment device of the illustrated embodiment can be used to execute the technical solution of the above-mentioned method embodiment. Its implementation principle and technical effects are similar and will not be repeated here.

[0129] Fig.10 This is a schematic diagram of the structure of an electronic device provided by an embodiment of the present disclosure. Fig.10, which shows a schematic diagram of the structure of an electronic device 1000 suitable for implementing the embodiment of the present disclosure. The electronic device 1000 in the embodiment of the present disclosure may include, but is not limited to, mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (personal digital assistants), PADs (tablet computers), PMPs (portable multimedia players), vehicle terminals (such as vehicle navigation terminals), wearable electronic devices, etc., and fixed terminals such as digital TVs, desktop computers, smart home devices, etc. Fig.10 The electronic device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0130] like Fig.10 As shown, the electronic device 1000 may include a processing device 1001 (e.g., a central processing unit, a graphics processor, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 1002 or a program loaded from a storage device 1008 to a random access memory (RAM) 1003 to implement the vehicle-mounted electronic wallet payment method of the embodiment described in the present disclosure. In RAM 1003, various programs and data required for the operation of the electronic device 1000 are also stored. The processing device 1001, ROM 1002, and RAM 1003 are connected to each other via a bus 1004. An input / output (I / O) interface 1005 is also connected to the bus 1004.

[0131] Typically, the following devices may be connected to the I / O interface 1005: an input device 1006 including, for example, a touch screen, a touch pad, a keyboard, a mouse, a camera, a microphone, an accelerometer, a gyroscope, etc.; an output device 1007 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, etc.; a storage device 1008 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 may allow the electronic device 1000 to communicate with other devices wirelessly or by wire to exchange data. Although Fig.10 The electronic device 1000 is shown with various devices, but it should be understood that it is not required to implement or possess all the devices shown. More or fewer devices may be implemented or possessed instead.

[0132] In particular, according to an embodiment of the present disclosure, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program carried on a non-transitory computer-readable medium, and the computer program contains a program code for executing the method shown in the flowchart, thereby implementing the vehicle-mounted electronic wallet payment method as described above. In such an embodiment, the computer program can be downloaded and installed from the network through the communication device 1009, or installed from the storage device 1008, or installed from the ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment of the present disclosure are executed.

[0133] It should be noted that the computer-readable medium disclosed above may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in combination with an instruction execution system, device or device. In the present disclosure, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, in which a computer-readable program code is carried. This propagated data signal may take a variety of forms, including but not limited to an electromagnetic signal, an optical signal, or any suitable combination of the above. The computer readable signal medium may also be any computer readable medium other than a computer readable storage medium, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer readable medium may be transmitted using any suitable medium, including but not limited to: wires, optical cables, RF (radio frequency), etc., or any suitable combination of the above.

[0134] In some embodiments, the client and the server may communicate using any currently known or future developed network protocol such as HTTP (HyperText Transfer Protocol), and may be interconnected with any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include a local area network ("LAN"), a wide area network ("WAN"), an internet (e.g., the Internet), and a peer-to-peer network (e.g., an ad hoc peer-to-peer network), as well as any currently known or future developed network.

[0135] The computer-readable medium may be included in the electronic device, or may exist independently without being installed in the electronic device.

[0136] Optionally, when the above one or more programs are executed by the electronic device, the electronic device may also execute other steps described in the above embodiments.

[0137] Computer program code for performing the operations of the present disclosure may be written in one or more programming languages ​​or a combination thereof, including, but not limited to, object-oriented programming languages, such as Java, Smalltalk, C++, and conventional procedural programming languages, such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., through the Internet using an Internet service provider).

[0138] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present disclosure. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some implementations as replacements, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0139] The units involved in the embodiments described in the present disclosure may be implemented by software or hardware, wherein the name of a unit does not, in some cases, limit the unit itself.

[0140] The functions described above herein may be performed at least in part by one or more hardware logic components. For example, without limitation, exemplary types of hardware logic components that may be used include: field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), complex programmable logic devices (CPLDs), and the like.

[0141] In the context of the present disclosure, a machine-readable medium may be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, device, or equipment. A machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or equipment, or any suitable combination of the foregoing. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0142] It should be noted that, in this article, relational terms such as "first" and "second" are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or gateway that includes a series of elements includes not only those elements, but also other elements that are not explicitly listed, or also includes elements inherent to such process, method, article or gateway. In the absence of further restrictions, the elements defined by the sentence "comprise one..." do not exclude the presence of other identical elements in the process, method, article or gateway that includes the elements.

[0143] The above description is only a specific embodiment of the present disclosure, so that those skilled in the art can understand or implement the present disclosure. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present disclosure. Therefore, the present disclosure will not be limited to the embodiments described herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A vehicle-mounted electronic wallet payment method, characterized in that: Applied to a digital system, the method comprises: Receiving a payment request sent by a wallet application, and determining the current time as the transaction time, wherein the payment request includes a digital certificate of the wallet application and transaction information; If it is determined that the digital certificate is valid, securely process the trusted digital identity identifier assigned to the payment request, the transaction time, and the transaction information, generate security information, and return the security information to the wallet application so that the wallet application determines authentication information based on vehicle hardware capabilities and transaction security policies; Receiving a transaction signature verification request generated by a wallet backend of the wallet application based on a payment confirmation operation initiated by the wallet application, wherein the transaction signature verification request includes the authentication information and the security information; Performing a signature verification process corresponding to the security process on the security information, generating signature verification information, and returning the signature verification information to the wallet backend, so that the wallet backend completes the payment based on the signature verification information.

2. The method according to claim 1, characterized in that The digital system includes a digital platform, and when it is determined that the digital certificate is valid, securely processes the trusted digital identity identifier assigned to the payment request, the transaction time, and the transaction information to generate security information, including: Using the platform public key of the digital platform to verify the digital certificate, and checking the validity period of the digital certificate to generate a check result, wherein the check result is that the digital certificate is valid or the digital certificate is invalid; If the digital certificate is valid, encrypting the trusted digital identity identifier assigned to the payment request and the transaction time using the application public key of the wallet application in the digital certificate to generate ciphertext information; Sign the transaction information and the transaction time using the first key corresponding to the trusted digital identity identifier to generate signature information; The security information includes the ciphertext information and the signature information.

3. The method according to claim 2, characterized in that The first key includes an identifier private key and an authentication code key, the authentication code key is used to generate a dynamic authentication code, and the first key corresponding to the trusted digital identity identifier is used to sign the transaction information and the transaction time to generate signature information, including: Sign the transaction information and the transaction time using the identifier private key to generate a transaction signature; Generate a payment authentication code using the authentication code key in combination with the transaction time; The signature information includes the transaction signature and the payment authentication code.

4. The method according to claim 3, characterized in that The performing a signature verification process on the security information corresponding to the security process to generate signature verification information includes: Decrypting the ciphertext information using the application private key of the wallet application to obtain the trusted digital identity identifier and the transaction time, wherein the application private key and the application public key are a key pair of the wallet application; Verify the transaction signature using the identifier public key that forms a key pair with the identifier private key to generate a verification result, where the verification result is verification success or verification failure; Verify the payment authentication code using the authentication code key in combination with the transaction time; When the signature verification result is successful and the payment authentication code is successfully verified, the application identifier of the wallet application and the trusted digital identity identifier are combined to generate an identifier set corresponding to the wallet application, wherein the signature verification information includes the identifier set, the transaction time and the signature verification result.

5. The method according to claim 1, characterized in that The digital system includes a digital interface and a digital program. The receiving of the payment request sent by the wallet application and determining the current time as the transaction time includes: Receiving a payment request sent by a wallet application through the digital interface; Obtaining the current time as the transaction time corresponding to the payment request; The transaction information, the transaction time and the digital certificate are packaged into a data unit and sent to the digital program, so that the digital program processes the received information securely and returns the generated security information to the wallet application through the digital interface.

6. A vehicle-mounted electronic wallet payment method, characterized in that: Applied to a wallet application, the method comprises: Receive transaction information sent by the target application, and send a payment request generated according to the transaction information and the digital certificate obtained by application registration to the digital system, the digital system is used to determine the current time of receiving the payment request as the transaction time, and when determining that the digital certificate is valid, perform security processing on the trusted digital identity identifier assigned to the payment request, the transaction time and the transaction information, generate security information, and return the security information to the wallet application; receiving the security information and determining authentication information based on vehicle hardware capabilities and transaction security policies; A payment confirmation operation is initiated to the wallet backend of the wallet application, so that the wallet backend generates a transaction verification request according to the authentication information and the security information in response to the payment confirmation operation, and sends the transaction verification request to the digital system. The digital system is used to perform a verification process on the security information corresponding to the security processing, generate verification information, and return the verification information to the wallet backend, so that the wallet backend completes the payment based on the verification information.

7. The method according to claim 6, characterized in that The signature verification information includes a user identifier of the wallet application. After returning the signature verification information to the wallet backend, the method further includes: Receiving wallet activation information sent by the wallet backend, where the wallet activation information is generated by the wallet backend based on the user identifier to check whether the wallet account is activated; When the wallet activation information indicates that the wallet account is not activated, performing user authentication by the digital system using the application identifier of the wallet application and the user identifier to obtain an authentication result; If the authentication result is successful, sending a confirmation request for opening a wallet account to the wallet backend, so that the wallet backend opens the wallet account according to the user identifier included in the confirmation request, and returns the activation result and the vehicle hardware capability to the wallet application; When the activation result is successful, opening the payment authentication setting within the authentication information range according to the vehicle hardware capability, and obtaining input information of the target user for the payment authentication setting, the target user being a user who can conduct transactions through the wallet account; The input information is sent to the wallet backend, so that the wallet backend completes the payment after successfully verifying the input information.

8. A vehicle-mounted electronic wallet payment device, characterized in that: Applied to a digital system, the device comprises: A first receiving unit is used to receive a payment request sent by a wallet application and determine the current time as the transaction time, wherein the payment request includes a digital certificate of the wallet application and transaction information; a security processing unit, configured to, if it is determined that the digital certificate is valid, securely process the trusted digital identity identifier assigned to the payment request, the transaction time, and the transaction information, generate security information, and return the security information to the wallet application, so that the wallet application determines authentication information according to the vehicle hardware capability and the transaction security policy; A second receiving unit is used to receive a transaction verification request generated by a wallet backend of the wallet application based on a payment confirmation operation initiated by the wallet application, wherein the transaction verification request includes the authentication information and the security information; The signature verification processing unit is used to perform signature verification processing on the security information corresponding to the security processing, generate signature verification information, and return the signature verification information to the wallet background, so that the wallet background completes the payment based on the signature verification information.

9. A vehicle-mounted electronic wallet payment device, characterized in that: Applied to wallet applications, the device comprises: a third receiving unit, configured to receive transaction information sent by the target application, and to send a payment request generated according to the transaction information and the digital certificate obtained by application registration to the digital system, wherein the digital system is configured to determine the current time when the payment request is received as the transaction time, and, if it is determined that the digital certificate is valid, to perform security processing on the trusted digital identity identifier assigned to the payment request, the transaction time and the transaction information, to generate security information, and to return the security information to the wallet application; a fourth receiving unit, configured to receive the security information and determine authentication information according to the vehicle hardware capability and the transaction security policy; A payment unit is used to initiate a payment confirmation operation to the wallet background of the wallet application, so that the wallet background generates a transaction verification request according to the authentication information and the security information in response to the payment confirmation operation, and sends the transaction verification request to the digital system. The digital system is used to perform a verification process on the security information corresponding to the security process, generate verification information, and return the verification information to the wallet background, so that the wallet background completes the payment based on the verification information.

10. An electronic device, characterized in that: include: Memory; processor; as well as Computer programs; The computer program is stored in the memory and is configured to be executed by the processor to implement the in-vehicle electronic wallet payment method as described in any one of claims 1 to 7.

11. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the in-vehicle electronic wallet payment method as described in any one of claims 1 to 7 are implemented.

Images