Verification method and system based on POS acquirer

Abstract

The invention provides a verification method and system based on a POS (Point of Sale) acquirer. The method comprises the following steps: initiating an HTTPS (Hyper Text Transfer Protocol over Secure Security) request for certificate creation based on merchant information input by a user; the method comprises the following steps of: anchoring a random seed to obtain a random number based on an HTTPS request created by a certificate, performing DES encryption on a character string formed by combining a merchant number and / or a terminal number in merchant information by using the random number to obtain data I, performing asymmetric encryption on the random number to obtain data II, and combining the data I and the data II according to a JSON format to generate a certificate file; when the POS software calls the POS machine, the merchant number and / or the terminal number stored in the corresponding POS machine are / is obtained, the certificate file is obtained and decrypted, and the merchant number and / or the terminal number in the certificate file are / is obtained; and performing matching verification on the merchant number and / or the terminal number in the POS machine and the merchant number and / or the terminal number in the certificate file so as to prevent the software from being illegally embezzled or used without authorization. The method has the advantage that the POS machine and matched software thereof can be effectively prevented from being illegally embezzled or used in an unauthorized manner.

Description

Technical Field

[0001] The present invention relates to the field of POS payment application technology, and in particular to a verification method and system based on POS acquiring merchants. Background Art

[0002] At present, the legal use of existing software is usually determined based on whether the machine code of the POS machine or the hard disk serial number is compliant. This method has great limitations in bank payment application scenarios and is not suitable for merchant environments based on POS card swiping financial devices. With the increase in the number of merchant terminals, the above traditional method is difficult to manage and maintain, and cannot protect the interests of software developers. Therefore, a new solution is urgently needed to solve the above problems. Summary of the invention

[0003] The object of the present invention is to provide a verification method and system based on POS acquiring merchants, so as to solve the above-mentioned problems existing in the prior art.

[0004] In order to achieve the above object, the technical solution adopted by the present invention is as follows:

[0005] A verification method based on POS acquiring merchants, comprising the following steps:

[0006] S1. Create request: Based on the merchant information entered by the user, initiate an HTTPS request for certificate creation;

[0007] S2. Certificate creation: Based on the HTTPS request for certificate creation, anchor the random seed to obtain a random number, use the random number to perform DES encryption on the string of the merchant number and / or terminal number in the merchant information, obtain data 1, perform asymmetrical encryption on the random number, obtain data 2, combine data 1 and data 2 in JSON format, and generate a certificate file;

[0008] S3. Certificate verification: When calling a POS machine, the POS software obtains the merchant number and / or terminal number stored in the corresponding POS machine, obtains the certificate file and performs asymmetric decryption and DES decryption on it in sequence, and obtains the merchant number and / or terminal number in the certificate file; the merchant number and / or terminal number in the POS machine is matched and verified with the merchant number and / or terminal number in the certificate file to prevent the software from being illegally stolen or used without authorization.

[0009] Preferably, in step S2, after data one and data two are combined, it is necessary to determine whether the combined data file is greater than a preset threshold. If so, a transcoding compression algorithm is used to compress the data, and a compression mark is added to form a new JOSN data to generate a certificate file; otherwise, a certificate file is directly generated.

[0010] Preferably, in step S3, before decrypting the certificate file, it is necessary to determine whether the certificate file has a compression mark. If so, it is necessary to first perform a transcoding and decompression operation on it, obtain the decompressed content, and then decrypt it.

[0011] Preferably, the transcoding compression algorithm is a BCD transcoding compression algorithm.

[0012] Preferably, when generating the certificate, a validity period is set, and the merchant can normally generate the certificate file within the validity period. If the validity period exceeds, the merchant needs to contact the POS software vendor to regenerate the certificate file.

[0013] Preferably, the generated certificate file is stored in the local server, and the user can subsequently view all generated certificate files in the merchant certificate list of the local server, and query the specified certificate file according to the merchant number and / or terminal number, and download and save it for local use.

[0014] The present invention also aims to provide a verification system based on POS acquiring merchants, the system is used to implement any of the above methods, the system comprises:

[0015] View module: used to provide login interface, certificate file browsing interface, certificate file creation interface and certificate file editing interface;

[0016] Service module: used to create, retrieve, store, and modify certificate files;

[0017] Database: used to store various certificate files.

[0018] Preferably, POS software vendors need to load the software interface for certificate verification provided by the system during the process of developing POS software; during the merchant transaction authorization process, this software interface is called to retrieve the certificate file in the current directory. If there is a certificate file matching the merchant, the certificate file is read, decrypted, and the integrity of the data is verified. After the data verification passes, the data is decomposed in an orderly manner, and the software interface automatically verifies key information to determine the legitimacy of the transaction, or the software interface returns plaintext data information in JSON format, allowing the merchant to verify other relevant data by themselves; after the verification passes, the subsequent POS operations continue, otherwise, an error is directly reported.

[0019] The beneficial effects of the present invention are as follows: 1. By introducing the authorization generation and verification mechanism based on the POS merchant number and terminal number, the management efficiency and security of the system are improved, and the uniqueness and legitimacy of the merchant authorization are ensured. 2. A software interface for certificate verification is provided, and the software interface is adapted to various common platforms such as Windows, Android, and Linux. It can automatically verify key information to determine the legitimacy of the transaction, and can also return plaintext data information in JSON format, allowing merchants to verify other relevant data by themselves, thereby improving the compatibility and scalability of the system. 3. Flexible use environment, most Windows, Android, and Linux environments can be used, and the use is simple and efficient. 4. POS software developers no longer need to consider the risks of theft and misappropriation, and can focus on realizing the bank's payment interface, simplifying the development process and improving development efficiency. 5. If there are multiple data that need to be encrypted and verified in the software interface, they can be integrated into one file to simplify the subsequent development and deployment of POS machine software. 6. The function of conveniently setting the validity period allows software vendors to more effectively control and master the use of the software. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 is a flow chart of certificate generation in an embodiment of the present invention;

[0021] Figure 2 is a flow chart of certificate verification in an embodiment of the present invention;

[0022] Figure 3 It is a system structure diagram in an embodiment of the present invention. DETAILED DESCRIPTION

[0023] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings. It should be understood that the specific implementation methods described herein are only used to explain the present invention and are not used to limit the present invention.

[0024] like Figure 1 and Figure 2 As shown, in this embodiment, a verification method based on a POS acquiring merchant is provided, comprising the following steps:

[0025] S1. Create request: Based on the merchant information entered by the user, initiate an HTTPS request for certificate creation;

[0026] S2. Certificate creation: Based on the HTTPS request for certificate creation, anchor the random seed to obtain a random number, use the random number to perform DES encryption on the string composed of the merchant number and / or terminal number in the merchant information, obtain data one, asymmetrically encrypt the random number, obtain data two, combine data one and data two in JSON format, and generate a certificate file.

[0027] In this step, after data one and data two are combined, it is necessary to determine whether the combined data file is greater than a preset threshold. If so, a transcoding compression algorithm (such as a BCD transcoding compression algorithm) is used to compress the data, and a compression mark is added to form a new JOSN data to generate a certificate file; otherwise, a certificate file is directly generated.

[0028] S3. Certificate verification: When calling a POS machine, the POS software obtains the merchant number and / or terminal number stored in the corresponding POS machine, obtains the certificate file and performs asymmetric decryption and DES decryption on it in sequence, and obtains the merchant number and / or terminal number in the certificate file; the merchant number and / or terminal number in the POS machine is matched and verified with the merchant number and / or terminal number in the certificate file to prevent the software from being illegally stolen or used without authorization.

[0029] In this step, before decrypting the certificate file, it is necessary to determine whether the certificate file has a compression mark. If so, it is necessary to first perform a transcoding and decompression operation on it, obtain the decompressed content, and then decrypt it.

[0030] In this embodiment, when generating a certificate, a validity period can be set. Merchants can normally generate certificate files within the validity period. If the validity period exceeds, they need to contact the POS software vendor to regenerate the certificate file.

[0031] In this embodiment, the generated certificate file is stored in the local server. The user can subsequently view all generated certificate files in the merchant certificate list of the local server, query the specified certificate file according to the merchant number and / or terminal number, and download and save it for local use.

[0032] In this embodiment, in addition to integrating and encrypting information such as the merchant number and / or terminal number to create a certificate file, you can also customize various other information that needs to be encrypted and import them into a certificate file. Then, during the use of the software, decrypt them through a specific decryption method to obtain the customized information.

[0033] like Figure 3 As shown, in this embodiment, a verification system based on POS acquiring merchants is provided, and the system is used to implement the method described. The server of the system is built using the webframework-jwp framework, which itself uses Spring Boot as the core container, Spring MVC as the model view controller, and MyBatis as the data access layer. The system includes:

[0034] View module: used to provide login interface, certificate file browsing interface, certificate file creation interface and certificate file editing interface. The view module enters the user number and password to log in according to the user information in the database. After successful login, it enters the main interface, selects Create Merchant Certificate in the early navigation bar, and enters the merchant information (merchant information includes merchant number, terminal number, software type, platform type, validity date, etc.). Based on the merchant information, the view module initiates an HTTPS request for certificate creation to the service module.

[0035] The view module displays the certificate information on the web page for easy viewing by operators, and provides an entry for certificate download. Merchants can download the certificate locally according to the HTTPS protocol for their own use.

[0036] During the certificate generation process, the WEB service framework is used to allow authorized operators to perform simple and intuitive operations directly on the browser, and ultimately the system manages and uses the certificate files efficiently.

[0037] Service module: used to create, retrieve, store and modify certificate files. The service module receives request information, integrates merchant information, encrypts it using encryption algorithms, and generates certificate files that are stored in the local server.

[0038] Database: used to store various certificate files.

[0039] In this embodiment, when developing POS software, POS software vendors need to load the software interface for certificate verification provided by the system; during the merchant transaction authorization process, this software interface is called to retrieve the certificate file in the current directory. If there is a certificate file matching the merchant, the certificate file is read, decrypted, and the integrity of the data is verified. After the data verification is passed, the data is orderly decomposed, and the software interface automatically verifies key information to determine the legality of the transaction, or the software interface returns plaintext data information in JSON format, allowing the merchant to verify other relevant data by himself; after the verification is passed, the subsequent POS operation continues, otherwise, an error is directly reported. Only transaction parameters that meet the conditions (such as the specified merchant number) can pass the verification and continue the subsequent POS operation, otherwise an error is directly reported.

[0040] By adopting the above technical solution disclosed in the present invention, the following beneficial effects are obtained:

[0041] The present invention provides a verification method and system based on POS acquiring merchants. By introducing an authorization generation and verification mechanism based on POS merchant terminal numbers, the management efficiency and security of the system are improved, and the uniqueness and legitimacy of merchant authorization are ensured. A software interface for certificate verification is provided, and the software interface is adapted to various common platforms such as Windows, Android, and Linux. It can automatically verify key information to determine the legitimacy of transactions, and can also return plaintext data information in JSON format, allowing merchants to verify other relevant data by themselves, thereby improving the compatibility and scalability of the system. A flexible use environment can be used in most Windows, Android, and Linux environments, and the use is simple and efficient. POS software developers no longer need to consider the risks of theft and misappropriation, and can focus on realizing the payment interface of the bank, simplifying the development process and improving development efficiency. If there are multiple data that need to be encrypted and verified in the software interface, they can be integrated into one file to simplify the subsequent development and deployment of POS machine software. The function of conveniently setting the validity period allows software vendors to more effectively control and master the use of the software.

[0042] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principle of the present invention. These improvements and modifications should also be considered as the scope of protection of the present invention.

Claims

1. A verification method based on POS acquiring merchants, characterized by: The following steps are included: S1. Create request: Based on the merchant information entered by the user, initiate an HTTPS request for certificate creation; S2. Certificate creation: Based on the HTTPS request for certificate creation, anchor the random seed to obtain a random number, use the random number to perform DES encryption on the string of the merchant number and / or terminal number in the merchant information, obtain data 1, perform asymmetrical encryption on the random number, obtain data 2, combine data 1 and data 2 in JSON format, and generate a certificate file; S3. Certificate verification: When calling a POS machine, the POS software obtains the merchant number and / or terminal number stored in the corresponding POS machine, obtains the certificate file and performs asymmetric decryption and DES decryption on it in sequence, and obtains the merchant number and / or terminal number in the certificate file; the merchant number and / or terminal number in the POS machine is matched and verified with the merchant number and / or terminal number in the certificate file to prevent the software from being illegally stolen or used without authorization.

2. The verification method based on POS acquiring merchant according to claim 1, characterized in that: In step S2, after data one and data two are combined, it is necessary to determine whether the combined data file is greater than a preset threshold. If so, a transcoding compression algorithm is used to compress the data, and a compression mark is added to form a new JOSN data to generate a certificate file; otherwise, a certificate file is directly generated.

3. The verification method based on POS acquiring merchant according to claim 2, characterized in that: In step S3, before decrypting the certificate file, it is necessary to determine whether the certificate file has a compression mark. If so, it is necessary to first perform a transcoding and decompression operation on it, obtain the decompressed content, and then decrypt it.

4. The verification method based on POS acquiring merchant according to claim 2, characterized in that: The transcoding compression algorithm is a BCD transcoding compression algorithm.

5. The verification method based on POS acquiring merchant according to claim 1, characterized in that: When generating a certificate, set the validity period. Merchants can generate certificate files normally within the validity period. If the validity period expires, they need to contact the POS software vendor to regenerate the certificate file.

6. The verification method based on POS acquiring merchant according to claim 1, characterized in that: The generated certificate files are stored in the local server. Users can then view all generated certificate files in the merchant certificate list of the local server, query the specified certificate files based on the merchant number and / or terminal number, and download and save them locally for use.

7. A verification system based on POS acquiring merchants, characterized by: The system is used to implement the method described in any one of claims 1 to 6, and the system includes: View module: used to provide login interface, certificate file browsing interface, certificate file creation interface and certificate file editing interface; Service module: used to create, retrieve, store, and modify certificate files; Database: used to store various certificate files.

8. The verification system based on POS acquiring merchants according to claim 7, characterized in that: When developing POS software, POS software vendors need to load the software interface for certificate verification provided by the system. During merchant transaction authorization, this software interface is called to retrieve the certificate file in the current directory. If there is a certificate file matching the merchant, the certificate file is read, decrypted, and the integrity of the data is verified. After the data verification is passed, the data is decomposed in order. The software interface automatically verifies key information to determine the legitimacy of the transaction, or the software interface returns plaintext data information in JSON format, allowing the merchant to verify other relevant data by themselves. After the verification is passed, the subsequent POS operation continues, otherwise, an error is directly reported.

Images