Vehicle taking service processing method, device and equipment

Abstract

The embodiment of the invention discloses a vehicle taking service processing method, device and equipment. The scheme applied to a user side program comprises the following steps: after a user mobile terminal is close to an intelligent card deployed for a vehicle on which the user mobile terminal takes, obtaining identification information corresponding to the intelligent card and a to-be-verified factor generated by the intelligent card through near field communication; generating a security protection key corresponding to the vehicle in a specified security area on the user mobile terminal according to the identification information and pre-acquired card reading authorization data, so that the generated security protection key is not exposed out of the specified security area; performing encryption operation on the to-be-verified factor by using the security protection key to generate a card reading instruction; and the card reading instruction is sent to the smart card, so that the smart card performs decryption operation on the card reading instruction and verifies the to-be-verified factor by using the security protection key held by the smart card, and after verification is passed, the relevant information of taking is returned to the user mobile terminal for fee deduction.

Description

Technical Field

[0001] The present invention relates to the field of near field communication technology, and in particular to a method, device and equipment for processing transportation boarding services. Background Art

[0002] With the development of Internet technology and the popularization of smart phones, more and more services can be carried out through corresponding applications on smart phones, which has brought great convenience to people's lives. Scanning QR code to take a ride (mainly buses and subways) is one of the convenient services. However, in actual application, scanning QR code to take a ride also has some cumbersome operation problems.

[0003] In response to the above-mentioned problems of scanning codes to take the bus, considering that more and more smartphones support the Near Field Communication (NFC) function, some service providers are considering providing corresponding NFC solutions so that users can take the bus based on NFC interaction.

[0004] In these NFC solutions, a hardware device that can recognize NFC cards needs to be deployed on buses or subway gates, and the background system needs to be modified accordingly. The user's NFC-enabled smartphone can then simulate itself as an NFC boarding card so that it can be recognized by the hardware device, thereby making boarding more convenient.

[0005] Based on this, there is also a need for ride-hailing solutions that are lower cost, safe and reliable, and can help reduce dependence on mobile phone manufacturers. Summary of the invention

[0006] One or more embodiments of this specification provide methods, devices, and equipment for processing transportation boarding services to solve the following technical problems: requiring a lower-cost, safe and secure boarding solution that helps reduce dependence on mobile phone manufacturers.

[0007] To solve the above technical problems, one or more embodiments of this specification are implemented as follows:

[0008] One or more embodiments of this specification provide a method for processing a transportation vehicle boarding service, which is applied to a user-side program on a user's mobile terminal, and the method includes:

[0009] After the user mobile terminal is close to the smart card deployed for the transportation vehicle, the identification information corresponding to the smart card and the factor to be verified generated by the smart card are obtained through near field communication;

[0010] In a designated security area on the user mobile terminal, generating a security protection key corresponding to the vehicle according to the identification information and the pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area;

[0011] Using the security protection key, an encryption operation is performed on the factor to be verified to generate a card reading instruction;

[0012] Sending the card reading instruction to the smart card, so that the smart card uses the security protection key it holds to perform a decryption operation on the card reading instruction, verify the factor to be verified, and return the boarding related information to the user mobile terminal after the verification is passed;

[0013] Based on the ride-related information, corresponding deductions are made on the user's mobile terminal or on the server corresponding to the user-side program.

[0014] One or more embodiments of this specification provide a method for processing a vehicle boarding service, which is applied to a smart card deployed on a vehicle, and the method includes:

[0015] After the user mobile terminal is close to the smart card, providing the user mobile terminal with identification information corresponding to the smart card and the factor to be verified generated by the smart card through near field communication;

[0016] Receiving a card reading instruction sent by a user-side program on the user mobile terminal, wherein the card reading instruction is generated by the user-side program using a security protection key corresponding to the vehicle to perform an encryption operation on the factor to be verified, wherein the security protection key is generated by the user-side program in its local designated security area according to the identification information and pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area;

[0017] Using the security protection key in its possession, the card reading instruction is decrypted and the factors to be verified are verified. After the verification is passed, the boarding related information is returned to the user's mobile terminal for corresponding deductions on the user's mobile terminal or on the server corresponding to the user-side program.

[0018] One or more embodiments of this specification provide a transportation vehicle boarding service processing device, which is applied to a user terminal program on a user mobile terminal, and the device includes:

[0019] A verification information acquisition module, after the user mobile terminal is close to a smart card deployed for the transportation vehicle, obtains identification information corresponding to the smart card and a factor to be verified generated by the smart card through near field communication;

[0020] A protection key generation module, in a designated security area on the user mobile terminal, generates a security protection key corresponding to the vehicle according to the identification information and pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area;

[0021] A card reading instruction generating module, using the security protection key, performs encryption operation on the factor to be verified, and generates a card reading instruction;

[0022] a card reading instruction sending module, which sends the card reading instruction to the smart card, so that the smart card uses the security protection key it holds to perform a decryption operation on the card reading instruction, verify the factor to be verified, and return the boarding related information to the user mobile terminal after the verification is passed;

[0023] The ride information deduction module performs corresponding deductions on the user's mobile terminal or on the server corresponding to the user-side program based on the ride-related information.

[0024] One or more embodiments of this specification provide a vehicle boarding service processing device, which is applied to a smart card deployed on a vehicle, and the device includes:

[0025] A verification information providing module, which provides identification information corresponding to the smart card and a factor to be verified generated by the smart card to the user mobile terminal through near field communication after the user mobile terminal is close to the smart card;

[0026] a card reading instruction receiving module, receiving a card reading instruction sent by a user-side program on the user mobile terminal, wherein the card reading instruction is generated by the user-side program using a security protection key corresponding to the vehicle to perform an encryption operation on the factor to be verified, wherein the security protection key is generated by the user-side program in its local designated security area according to the identification information and pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area;

[0027] The factor verification return module uses the security protection key it holds to perform decryption operations on the card reading instruction, verify the factor to be verified, and after the verification is passed, returns the boarding related information to the user mobile terminal for corresponding deductions on the user mobile terminal or on the server corresponding to the user-side program.

[0028] One or more embodiments of this specification provide a transportation vehicle boarding service processing device, which is applied to a user terminal program on a user mobile terminal, and the device includes:

[0029] at least one processor; and,

[0030] a memory communicatively connected to the at least one processor; wherein,

[0031] The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to execute:

[0032] After the user mobile terminal is close to the smart card deployed for the transportation vehicle, the identification information corresponding to the smart card and the factor to be verified generated by the smart card are obtained through near field communication;

[0033] In a designated security area on the user mobile terminal, generating a security protection key corresponding to the vehicle according to the identification information and the pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area;

[0034] Using the security protection key, an encryption operation is performed on the factor to be verified to generate a card reading instruction;

[0035] Sending the card reading instruction to the smart card, so that the smart card uses the security protection key it holds to perform a decryption operation on the card reading instruction, verify the factor to be verified, and return the boarding related information to the user mobile terminal after the verification is passed;

[0036] Based on the ride-related information, corresponding deductions are made on the user's mobile terminal or on the server corresponding to the user-side program.

[0037] One or more embodiments of this specification provide a vehicle boarding service processing device, which is applied to a smart card deployed on a vehicle, and the device includes:

[0038] at least one processor; and,

[0039] a memory communicatively connected to the at least one processor; wherein,

[0040] The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to execute:

[0041] After the user mobile terminal is close to the smart card, providing the user mobile terminal with identification information corresponding to the smart card and the factor to be verified generated by the smart card through near field communication;

[0042] Receiving a card reading instruction sent by a user-side program on the user mobile terminal, wherein the card reading instruction is generated by the user-side program using a security protection key corresponding to the vehicle to perform an encryption operation on the factor to be verified, wherein the security protection key is generated by the user-side program in its local designated security area according to the identification information and pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area;

[0043] Using the security protection key in its possession, the card reading instruction is decrypted and the factors to be verified are verified. After the verification is passed, the boarding related information is returned to the user's mobile terminal for corresponding deductions on the user's mobile terminal or on the server corresponding to the user-side program.

[0044] At least one of the above-mentioned technical solutions adopted in one or more embodiments of the present specification can achieve the following beneficial effects: there is no need to deploy additional hardware equipment specifically for the transportation tool, but it is relatively simple to deploy a smart card, which effectively reduces the cost and is easy to deploy flexibly; and the verification is completed by quickly obtaining the identification information corresponding to the verification smart card and the factors to be verified generated by the smart card, as well as two-way interaction based on the card reading instruction and the security protection key corresponding to the transportation tool, so that the interaction speed is as fast as possible, and the risk of illegal copying of the smart card is effectively reduced, taking into account both efficiency and security; not only that, this solution allows the user's smartphone to be used as a card reader instead of as a simulated card, so that it can realize the deduction of transportation fees, which is a ride solution that helps to reduce dependence on mobile phone manufacturers. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] In order to more clearly illustrate the embodiments of this specification or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this specification. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0046] Figure 1 A flowchart of a method for processing a transportation vehicle boarding service provided in one or more embodiments of this specification;

[0047] Figure 2 A flowchart of a smart card interaction solution based on ATS information and card reading instructions provided for one or more embodiments of this specification;

[0048] Figure 3 A flowchart of a card reading instruction generation solution provided in one or more embodiments of this specification;

[0049] Figure 4 A flowchart of a solution to the pain point of swiping a card when getting on and off a bus provided by one or more embodiments of this specification;

[0050] Figure 5 In an application scenario provided by one or more embodiments of this specification, Figure 1 A schematic diagram of an implementation scheme of the method;

[0051] Figure 6 A flowchart of another method for processing transportation vehicle boarding services provided in one or more embodiments of this specification;

[0052] Figure 7 A schematic diagram of the structure of a transportation vehicle boarding service processing device provided in one or more embodiments of this specification;

[0053] Figure 8 A schematic diagram of the structure of another transportation vehicle boarding service processing device provided in one or more embodiments of this specification;

[0054] Fig. 9 A schematic diagram of the structure of a transportation vehicle boarding service processing device provided in one or more embodiments of this specification;

[0055] Fig.10 A schematic diagram of the structure of another transportation vehicle boarding business processing device provided for one or more embodiments of this specification. DETAILED DESCRIPTION

[0056] The embodiments of this specification provide a method, device, equipment and storage medium for processing transportation boarding services.

[0057] In order to enable those skilled in the art to better understand the technical solutions in this specification, the technical solutions in the embodiments of this specification will be clearly and completely described below in conjunction with the drawings in the embodiments of this specification. Obviously, the described embodiments are only part of the embodiments of this application, not all of them. Based on the embodiments of this specification, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of this application.

[0058] The background technology mentions some problems with the existing scan code boarding solutions and NFC boarding solutions, mainly including that the operation is still relatively cumbersome, the cost is high, or it is highly dependent on mobile phone manufacturers.

[0059] Regarding the issue of high costs, currently, whether it is a bus card, a boarding code or an NFC mobile phone, it is necessary to deploy a dedicated hardware machine that can recognize the corresponding cards and codes for the means of transportation (mainly buses, but also other means of transportation such as subways. For the sake of ease of description, the bus is mainly used as an example below). The machine needs to have certain programming capabilities, and functions such as card and code reading and billing need to be implemented within the machine, which is costly.

[0060] Regarding the issue of dependence, in the traditional solution, the user's NFC-enabled smartphone simulates itself as an NFC boarding card to be provided to the hardware device that acts as a card reader for identification. This method is often subject to stricter control by mobile phone manufacturers in terms of permissions, etc. For service providers such as payment service providers, it has greater restrictions and poor flexibility. For users, it is also not convenient to expand payment channels more freely.

[0061] In response to these problems, this application intends to provide a low-cost, high-experience solution for riding, so that bus companies can achieve a convenient riding experience like a physical card without complicated modifications. At the same time, for bus companies, the subsequent maintenance costs of the system will also have a significant saving effect, which is conducive to low-cost and rapid promotion. The following is a detailed description of the solution of this application.

[0062] The solution of this application involves multiple terminals, one of which is a user-side program on a user's mobile terminal. The explanation is mainly from this end. The user's mobile terminal can be a smart terminal carried by the user, such as a smart phone, smart watch, smart bracelet, tablet computer, handheld game console, or smart ring. The user-side program can be a client or applet of an application with payment capabilities, for example, it can be some comprehensive head applications (including applet embedded therein) installed on the user's mobile terminal, or it can be an application launched by a public transportation department, etc.

[0063] Figure 1 This is a flow chart of a method for processing a transportation vehicle boarding service provided in one or more embodiments of this specification. The execution subject of the flow can include the above-mentioned user-side program, and the execution subject in terms of hardware can be the user mobile terminal where the user-side program is located.

[0064] Figure 1 The process in includes the following steps:

[0065] S102: After the user mobile terminal is close to a smart card deployed for the transportation vehicle that the user takes, identification information corresponding to the smart card and a factor to be verified generated by the smart card are obtained through near field communication.

[0066] The transportation means may mainly include buses. Of course, the solution may also be applied to other transportation means riding scenarios, such as subways, trams, and even taxis. The smart card can be a card with certain computing capabilities that supports NFC function, such as a contactless CPU card. In this way, it is low-cost and easy to deploy, without deploying the hardware equipment mentioned above that is more expensive and inconvenient to maintain.

[0067] How to deploy it specifically may depend on the type of transportation. For buses, smart cards can be deployed directly inside the bus, for example, where passengers usually swipe their cards when boarding; for subways, smart cards can be deployed on subway gates; and so on.

[0068] The corresponding identification information can be pre-written in the smart card, which can be the smart card's own identification or the identification of the corresponding transportation vehicle. The identification information is, for example, physical identification, custom number, device type, and other information with sufficient differentiation, so as to distinguish the respective ride services for different types of transportation vehicles and different transportation vehicles of the same type, so as to facilitate the correct settlement of fees.

[0069] The factor to be verified is used for the subsequent interaction between the smart card and the user's mobile terminal to perform consistency verification to ensure the legitimacy of both parties (not impersonated, for example, the smart card has not been illegally copied, the user of the user's mobile terminal has correctly activated the corresponding ride service, etc.). In order to improve security, the smart card can generate different factors to be verified for each ride interaction. For example, a random factor (random number or other random string, etc.) can be used as the factor to be verified. Of course, it is also possible to use other data with a certain degree of confidentiality (difficult to guess) as the factor to be verified.

[0070] S104: In a designated security area on the user mobile terminal, a security protection key corresponding to the vehicle is generated according to the identification information and pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area.

[0071] In order to smoothly implement the interactive verification process based on the factors to be verified, the user needs to activate the corresponding boarding service in advance, so as to obtain the card reading authorization data in advance to support the interactive verification process.

[0072] For example, before the user's mobile terminal approaches the smart card deployed for the transportation vehicle to be taken, a request for activating the boarding service based on the smart card is sent in advance to the server program corresponding to the user program on the server, and the card reading authorization data returned by the server program after the server program agrees to the boarding service activation request is received. The card reading authorization data can be saved locally for backup. The server can be, for example, the server of the service provider of the transportation vehicle, or the server of the service provider (i.e., the payment service provider) that provides the corresponding payment service. Depending on the specific cooperation method, the latter method is more convenient for the subsequent deduction and settlement of the boarding service, and is convenient for promoting the solution to more transportation vehicles.

[0073] The card reading authorization data can be in the form of a token or other forms. The same card reading authorization data can be granted to different activated users, which helps to simplify the processing logic on the smart card.

[0074] Each transportation tool (or the smart card deployed on it) can have its own corresponding security protection key and can obtain the security protection key independently of the user's mobile terminal. For example, the security protection key can be generated by the server and then written into the smart card deployed on the transportation tool, or the smart card can generate the security protection key by itself. In order to improve the processing efficiency during riding, the smart card can obtain the security protection key in advance.

[0075] The security protection key can be used for encrypted communication between the smart card and the user's mobile terminal (mainly using symmetric encryption) to implement the interactive verification process. In this case, the user's mobile terminal also needs to obtain the security protection key. To this end, the method adopted by this application is: the user's mobile terminal generates the security protection key corresponding to the identification information based on the identification information obtained in the previous step and the pre-acquired card reading authorization data. In this way, there is no need to negotiate with the smart card for the key, and it can support smart cards corresponding to multiple means of transportation more efficiently and flexibly.

[0076] It should be noted that the security protection key obtained by the user's mobile terminal is generated in a designated security area on the user's mobile terminal. This prevents the security protection key from being leaked from the user's mobile terminal, thereby preventing attackers from using the leaked security protection key to illegally copy the smart card. It also helps to ensure the security of riding transactions and protect the interests of multiple parties such as transportation operators, passengers and payment service providers.

[0077] Designated security areas can be, for example, TEE or IIFFA security areas. The calculations performed in these areas are trusted computing, which can more fully protect information privacy and security. At the same time, it does not hinder the indirect use of information that needs to be protected to calculate the final target result.

[0078] S106: Using the security protection key, perform encryption operation on the factor to be verified to generate a card reading instruction.

[0079] In one or more embodiments of this specification, the boarding related information is obtained through the card reading interaction in order to deduct the fee. Here, the card reading interaction is cleverly used to realize the verification of the verification factor. Based on this idea, it is necessary to construct the card reading instruction accordingly. Here, the verification factor can be encrypted and used as the accompanying data of the standard card reading instruction. Thus, the format of the standard card reading instruction can be used as much as possible, which reduces the transformation cost and has little effect on the efficiency of the card reading interaction. The verification factor can be directly encrypted using a security protection key, or it can be transformed or accompanied by other data (for example, user-related information such as user identification or user preference data, etc.), and then encrypted using a security protection key. What algorithm is used for encryption and decryption in this application is not limited here and is not the focus. It can be selected according to actual security requirements, efficiency requirements or smart card processing capabilities.

[0080] S108: Send the card reading instruction to the smart card, so that the smart card uses the security protection key it holds to perform decryption operations on the card reading instruction, verify the factors to be verified, and return the boarding related information to the user mobile terminal after the verification is passed.

[0081] The security protection key held by the smart card itself is obtained from the server or the card writer or generated by itself, and does not need to be obtained from the user's mobile terminal. The smart card uses the security protection key to decrypt the card reading instruction to obtain the factor to be verified, and then can verify whether the factor to be verified is consistent with the factor to be verified provided to the user's mobile terminal in step S102. If they are consistent, the verification is passed, otherwise, the verification fails.

[0082] The ride-related information is information used to determine how to deduct fees, and includes, for example, one or more of the following information: identification of the means of transport, route information, fare rules, discount information, etc. The deduction amount, when to deduct fees, or the deduction type, etc. can be calculated based on the ride-related information.

[0083] S110: Based on the ride-related information, corresponding charges are deducted on the user mobile terminal or on the server corresponding to the user-side program.

[0084] In one or more embodiments of the present specification, one or more of the aforementioned ride-related information is obtained, and the corresponding deduction amount for the ride is calculated based on the obtained information, especially the fare rules, and the corresponding deductions are made on the user's mobile terminal or on the server corresponding to the user-side program based on the deduction amount.

[0085] If the corresponding deduction is performed on the user's mobile terminal, it can be done offline, which can bring more convenience to users and better compatibility with scenarios where wireless communication signals may be poor, such as subways. If it is performed on the server, the corresponding user of the user's mobile terminal will be deducted according to the server's strategy. The deducted fees will be settled to the service provider of the transportation tool, such as a bus company.

[0086] In one or more embodiments of the present specification, the smart card can also be triggered to record the current ride record corresponding to the user-side program in the smart card after verification, so as to deduct the fee or verify the deduction result. In this way, the service provider of the transportation tool and the payment service provider can cooperate more trustfully and accurately, and it also helps to settle the account more timely.

[0087] In order to enable the smart card to record the ride record for a specific user more accurately, the smart card can actively sense the user identifier corresponding to the other party's user-side program, thereby accurately associating the ride record with the user identifier.

[0088] pass Figure 1 The method does not require the deployment of additional hardware equipment specifically for transportation tools, but it is relatively simple to deploy a smart card, which effectively reduces costs and is easy to flexibly deploy; and the verification is completed by quickly obtaining the identification information corresponding to the verification smart card and the factor to be verified generated by the smart card, as well as two-way interaction based on the card reading instruction and the security protection key corresponding to the transportation tool, so that the interaction speed is as fast as possible, and the risk of illegal copying of the smart card is effectively reduced, taking into account both efficiency and security; not only that, this solution allows the user's smartphone to be used as a card reader instead of as a simulated card, which can realize the deduction of transportation fees, helping to reduce the reliance on mobile phone manufacturers for travel solutions.

[0089] based on Figure 1 This specification also provides some specific implementation plans and extension plans of the method, which will be described below.

[0090] In one or more embodiments of this specification, a smart card interaction solution based on ATS (Answer To Select) information and card reading instructions is adopted, so that both efficiency and security can be taken into account. Figure 2 , Figure 2 The figure is a flow chart of the smart card interaction solution.

[0091] Figure 2 The process in includes the following steps:

[0092] S202: Acquire the ATS information of the smart card through near field communication.

[0093] ATS information can be used for the approaching terminal to select the correct smart card, or for the smart card to respond to the correct approaching terminal. However, in this application, it is mainly used for the user's mobile terminal to quickly obtain the material used to generate the security protection key and the factors to be verified this time, which at least includes the identification information corresponding to the smart card. For example, the interaction of RATS information and ATS information.

[0094] S204: Parse the ATS information to obtain the identification information corresponding to the smart card and the factor to be verified generated by the smart card.

[0095] S206: Generate a protected card reading instruction according to the identification information, and perform card reading interaction with the smart card based on the card reading instruction to verify the factor to be verified.

[0096] In this step, the pre-acquired card reading authorization data is also used, as well as the generation and use of security protection keys and encryption actions. The specific implementation method can refer to the previous description.

[0097] In this way, before the user's mobile terminal actually starts reading the card, it can quickly prepare based on the ATS information and then perform the card reading action. In addition to obtaining riding-related information, the key point of card reading is that it also completes the verification process to provide security protection.

[0098] In order to make the above-mentioned incidental effect more intuitive, one or more embodiments of this specification provide a flowchart of a card reading instruction generation solution, see Figure 3 .

[0099] Figure 3 The process in includes the following steps:

[0100] S302: Generate a near field communication standard card reading instruction.

[0101] The near field communication standard card reading instruction may refer to a reading instruction constructed in a relatively standard format when performing near field communication to read a card or tag supporting the NFC function without implementing the solution of the present application. Such an instruction is an instruction that a card or tag supporting the NFC function can respond normally even without special modification, so that the party issuing the instruction can read the corresponding data written in the card or tag.

[0102] S304: Using the security protection key, encrypt the factor to be verified to obtain an encrypted factor.

[0103] S306: Assemble the NFC standard card reading instruction and the encryption factor to obtain a NFC extended card reading instruction, so that the smart card parses the NFC extended card reading instruction to obtain the factor to be verified and performs the verification.

[0104] The NFC standard card reading instruction is extended by data assembly, so that the final NFC extended card reading instruction can carry additional verification factors (which can be in encrypted form). This method has low implementation costs and low processing overhead, and is more friendly to smart cards with limited capabilities, thus helping to improve interaction efficiency.

[0105] In actual applications, there is another pain point for bus rides, that is, some routes are long and fare is calculated by section, so users need to swipe their cards when getting on and off the bus, otherwise the fare will be incorrectly charged (usually calculated based on the longest section), causing user losses, and some users will forget to swipe their cards at least once, or fail to swipe their cards without knowing it. In response to this pain point, this application also provides a solution using smart cards, see Figure 4 , Figure 4 A flowchart of the solution is shown below.

[0106] Figure 4 The process in includes the following steps:

[0107] S402: Using the security protection key, perform encryption operation on the factor to be verified to generate a card reading instruction containing the first location information of the user's mobile terminal, so that the smart card obtains the first location information; or, after the user's mobile terminal approaches the smart card deployed for the transportation vehicle, send the first location information of the user's mobile terminal to the server.

[0108] The first location information is the location information when the user interacts with the smart card for the first time after getting on the bus. Therefore, it reflects the location of the bus, and the station where the bus is boarded can be determined. The subject that obtains the first location information can perform subsequent actions. Of course, the first location information can also be transferred to other subjects for execution, and the execution results can be written into the smart card in a timely manner.

[0109] S404: After sending the card reading instruction to the smart card, detecting whether the user mobile terminal and the transportation vehicle are in a position separation state.

[0110] If capabilities permit, position separation status detection can be performed more frequently.

[0111] However, a relatively reasonable solution is provided here as an example, including: receiving a location acquisition request from the server after the vehicle arrives at the next stop (there may be a delay here, because after arriving at the stop, some users need to wait for a short period of time, such as tens of seconds, before they can be far enough away from the vehicle after getting off); returning the second location information of the user's mobile terminal to the server so that the server can directly use the second location information, or providing the second location information to the smart card, wherein the second location information is used to detect the location separation state in combination with the location information of the vehicle. It can be seen that the second location information may reflect the location of getting off, based on which the station to get off can be determined. Combined with the previous first location information, the correct section of the corresponding user's ride can be reasonably inferred, and then the correct billing can be achieved, and the mistakes of users or system factors can be accommodated, so that users do not even need to get off the vehicle to swipe the card in this scenario, which is more convenient and reliable.

[0112] S406: If yes, the fee is deducted according to the first location information and the location information of the user mobile terminal after separation.

[0113] The separated position information is, for example, the second position information, or is more accurately determined based on the second position information.

[0114] The basic solution and the extended solution of the present application are described above. To facilitate understanding and implementation, one or more embodiments of this specification provide an application scenario. Figure 1 A flow chart of an implementation scheme of the method can be used as a more recommended implementation scheme, see Figure 5 . In this application scenario, the means of transportation is specifically a bus (it can be implemented similarly for subways or some other means of transportation), and the above-mentioned smart card is exemplarily named: Touch Mother Card. This solution involves four ends: the Touch Mother Card deployed on the bus; the Bus Touch applet on the user's mobile phone, such as provided by the payment service provider, as the above-mentioned user-end program; the bus owner service end; the Bus Touch service end, such as provided by the payment service provider, that is, the service end corresponding to the Bus Touch applet.

[0115] exist Figure 5 In the embodiment, some steps are briefly marked and explained, which can be understood in combination with the following content and the knowledge possessed by those skilled in the art:

[0116] 1. This solution does not require the installation of special hardware equipment on the bus. Instead, a contactless CPU card, i.e. a touch mother card, can be placed in the bus.

[0117] 2. The touch card is issued by the bus owner (from the perspective of the payment service provider, that is, the service provider of the above-mentioned bus) or the payment service provider. The issuance can refer to writing the bus vehicle number, route number, vehicle fare rules and other information into the touch card.

[0118] 3. When a user activates the tap-to-ride bus service, he or she must first apply for activation in the payment service provider's mini program, i.e. the aforementioned bus tap-to-ride mini program. When applying, the mini program will request the bus owner's service end and inform the bus of the mobile phone number, nickname, and other information to be activated. At the same time, the bus or payment service provider will issue the permission to read the tap-to-ride mother card.

[0119] 4. After the user activates the service, he will get a card reader token on his mobile phone, which is the card reader authorization data mentioned above. When riding, he only needs to touch the mother card with his mobile phone, and the mobile phone will read the information of the mother card under the protection of the card reader token. Then, the mobile phone or the server will calculate the fare and initiate the deduction.

[0120] 5. The deduction adopts a security protection mechanism, which does not require passengers to confirm again. The security mechanism is as follows:

[0121] 5.1. First, one card, one key. The read and write keys of the touch mother card of each vehicle are unique. The main principle is: the payment service provider (or bus) has the highest card reading root key. When the touch mother card is issued, according to the physical identification of the touch mother card, it is assumed to be H, and it is dispersed (so that different cars correspond to different keys) to obtain the key KeyC as the above-mentioned security protection key, and written into the touch mother card as the security protection key for information protection. The calculation process can be participated in by the card reader token, so that the key KeyC can also be generated on the passenger's mobile phone later.

[0122] 5.2. When a passenger activates the touch application, the payment service provider's user-end program (or bus) generates a key and writes it into the IIFFA storage area of ​​the payment service provider's user-end program or the TEE area of ​​the mobile phone. The payment service provider's user-end program obtains the ATS information of the touch mother card through NFC. The ATS information includes the hardware identifier H of the touch mother card and a randomly generated factor, denoted as RandA, as the above-mentioned factor to be verified. The payment service provider's user-end program APP parses RandA and H, calls the security area of ​​the payment service provider's user-end program, and performs subsequent operations through the IIFFA or TEE link. First, assemble the card reading instruction and construct it as readcard. Secondly, according to the card reading token, the security area can use H to disperse and obtain the key KeyC, and use KeyC to encrypt RandA to obtain EnCD, and then assemble it to the end of the card reading instruction to form the final card reading instruction: denoted as readcard|EncD.

[0123] 5.3. The mobile phone sends the command back to the touch mother card. After receiving the command, the touch target card uses its own KeyC to decrypt EncD, obtains the plain text, and compares it with the random number generated by itself to verify whether it is consistent. If the verification passes, the card related information is returned, otherwise, it is not returned. In this way, a security protection mechanism for this scenario is constructed.

[0124] 6. Under the security protection mechanism, the user-side program of the payment service provider obtains the data information on the touch mother card, in which the information is ciphertext and needs to be decrypted by calling IIFFA or TEE environment again. The decryption key is also KeyC. The amount of this deduction can be calculated by the vehicle number, the route number, and the vehicle's fare rules. The deduction can be initiated by the server, or the mobile phone can be temporarily deducted, so that the mobile phone can be used for offline riding.

[0125] 7. In addition, additional functional enhancements can be made, such as: touching the mother card can sense the user identification information of the scanned payment service provider's user-end program through signal amplification and MCU, on the one hand, the ride data can be temporarily saved, and on the other hand, the user can be prompted to get on the bus through external voice broadcast capabilities. In addition, a wireless communication module (for example, a 4G or 5G module) can be superimposed to push the ride record to the server for reconciliation of the ride.

[0126] Based on the same idea, one or more embodiments of this specification also provide a flow chart of another method for processing a transportation vehicle boarding service, which is described from the perspective of a smart card deployed on a transportation vehicle, and the execution subject of the process is the smart card or a program running on it, see Figure 6 .

[0127] Figure 6 The process in includes the following steps:

[0128] S602: After the user mobile terminal is close to the smart card, the identification information corresponding to the smart card and the factor to be verified generated by the smart card are provided to the user mobile terminal through near field communication.

[0129] S604: Receive a card reading instruction sent by a user-side program on the user's mobile terminal, wherein the card reading instruction is generated by the user-side program using a security protection key corresponding to the vehicle to perform an encryption operation on the factor to be verified, wherein the security protection key is generated by the user-side program in its local designated security area according to the identification information and pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area.

[0130] S606: Use the security protection key in your possession to perform decryption operations on the card reading instruction, verify the factors to be verified, and after the verification is passed, return the boarding related information to the user's mobile terminal for corresponding deductions on the user's mobile terminal or on the server corresponding to the user-side program.

[0131] The security protection key can be obtained by dispersing the preset system root key twice through the physical identification corresponding to the industry application identification and ATS information; and the card reading authorization data can be obtained by dispersing the system root key once through the industry application identification. In this case, the security protection key is logically the superior key of the smart card. Therefore, the secure operation interacting with the smart card can be realized in the secure area of ​​the user's mobile terminal, and it is capable of realizing one-time one-key.

[0132] For the user's mobile terminal, the user-side program can transport it safely in a secure area based on the card reading authorization data. Its security factor is, for example, the physical identification mentioned above. The calculated data is the random number of this interaction (which can be used as a verification factor) and the instruction information. Under the premise of ensuring that the sub-key is not output, a secure message for this instruction interaction is generated to achieve a one-time one-key.

[0133] Based on the same idea, one or more embodiments of this specification also provide devices and apparatuses corresponding to the above methods, such as Figure 7 to Figure 10 The apparatus and device can accordingly execute the above method and related optional solutions.

[0134] Figure 7 This is a schematic diagram of the structure of a transportation vehicle boarding service processing device provided in one or more embodiments of this specification, wherein the device is applied to a user-side program on a user's mobile terminal, and the device includes:

[0135] The verification information acquisition module 702 acquires identification information corresponding to the smart card and a verification factor generated by the smart card through near field communication after the user mobile terminal approaches the smart card deployed for the transportation vehicle that the user takes;

[0136] A protection key generation module 704 generates a security protection key corresponding to the vehicle in a designated security area on the user mobile terminal according to the identification information and the pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area;

[0137] The card reading instruction generating module 706 uses the security protection key to perform encryption operation on the factor to be verified to generate a card reading instruction;

[0138] The card reading instruction sending module 708 sends the card reading instruction to the smart card, so that the smart card uses the security protection key it holds to perform a decryption operation on the card reading instruction, verify the factor to be verified, and return the boarding related information to the user mobile terminal after the verification is passed;

[0139] The ride information deduction module 710 performs corresponding deductions on the user mobile terminal or on the server corresponding to the user-side program based on the ride-related information.

[0140] Optionally, the transportation vehicle comprises a bus.

[0141] Optionally, it also includes:

[0142] The boarding service activation module 712 sends a smart card-based boarding service activation request to a server program corresponding to the user program on the server before the user mobile terminal approaches the smart card deployed for the transportation vehicle to be boarded;

[0143] The receiving server program returns the card reading authorization data after agreeing to the ride service activation request.

[0144] Optionally, the verification information acquisition module 702 acquires the ATS information of the smart card through near field communication;

[0145] The identification information corresponding to the smart card and the factor to be verified generated by the smart card are parsed from the ATS information.

[0146] Optionally, the factor to be verified is a randomly generated random factor.

[0147] Optionally, the card reading instruction generation module 706 generates a near field communication standard card reading instruction;

[0148] Using the security protection key, encrypting the factor to be verified to obtain an encrypted factor;

[0149] The near field communication standard card reading instruction and the encryption factor are assembled to obtain a near field communication extended card reading instruction, so that the smart card parses the near field communication extended card reading instruction to obtain the factor to be verified and perform the verification.

[0150] Optionally, the card reading instruction generating module 706 uses the security protection key to perform encryption operation on the factor to be verified, and generates a card reading instruction containing the first location information of the user mobile terminal, so that the smart card obtains the first location information, which is used to perform the deduction according to the first location information;

[0151] Alternatively, the device further comprises:

[0152] The location information reporting module 714 sends the first location information of the user's mobile terminal to the server after the user's mobile terminal approaches the smart card deployed for the transportation vehicle that the user takes, so as to deduct the fee according to the first location information.

[0153] Optionally, the deducting fees according to the first location information specifically includes:

[0154] After sending the card reading instruction to the smart card, detecting whether the user mobile terminal and the transportation vehicle are in a position separation state;

[0155] If so, the deduction is performed based on the first location information and the separated location information of the user mobile terminal.

[0156] Optionally, the detecting whether the user mobile terminal and the transportation vehicle are in a position separation state specifically includes:

[0157] receiving a location acquisition request sent by the server after the vehicle arrives at the next stop;

[0158] The second location information of the user mobile terminal is returned to the server so that the server can directly use the second location information, or the second location information is provided to the smart card, wherein the second location information is used to detect the location separation state in combination with the location information of the vehicle.

[0159] Figure 8 A schematic diagram of the structure of another transportation vehicle boarding service processing device provided in one or more embodiments of this specification, wherein the device is applied to a smart card deployed on a transportation vehicle, and the device includes:

[0160] A verification information providing module 802, after the user mobile terminal is close to the smart card, provides the user mobile terminal with identification information corresponding to the smart card and a factor to be verified generated by the smart card through near field communication;

[0161] The card reading instruction receiving module 804 receives the card reading instruction sent by the user-side program on the user mobile terminal, wherein the card reading instruction is generated by the user-side program using the security protection key corresponding to the transportation means to perform encryption operation on the factor to be verified, wherein the security protection key is generated by the user-side program in its local designated security area according to the identification information and pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area;

[0162] The factor verification return module 806 uses the security protection key it holds to perform decryption operations on the card reading instruction, verify the factor to be verified, and after the verification is passed, returns the boarding related information to the user mobile terminal for corresponding deductions on the user mobile terminal or on the server corresponding to the user-side program.

[0163] Fig. 9 A schematic diagram of a traffic vehicle boarding service processing device provided in one or more embodiments of this specification, wherein the device is applied to a user-side program on a user's mobile terminal, and the device includes:

[0164] at least one processor; and,

[0165] a memory communicatively connected to the at least one processor; wherein,

[0166] The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to execute:

[0167] After the user mobile terminal is close to the smart card deployed for the transportation vehicle, the identification information corresponding to the smart card and the factor to be verified generated by the smart card are obtained through near field communication;

[0168] In a designated security area on the user mobile terminal, generating a security protection key corresponding to the vehicle according to the identification information and the pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area;

[0169] Using the security protection key, an encryption operation is performed on the factor to be verified to generate a card reading instruction;

[0170] Sending the card reading instruction to the smart card, so that the smart card uses the security protection key it holds to perform a decryption operation on the card reading instruction, verify the factor to be verified, and return the boarding related information to the user mobile terminal after the verification is passed;

[0171] Based on the ride-related information, corresponding deductions are made on the user's mobile terminal or on the server corresponding to the user-side program.

[0172] Fig.10 This is a schematic diagram of a structure of a transportation vehicle boarding service processing device provided in one or more embodiments of this specification. The device is applied to a smart card deployed on a transportation vehicle. The device includes:

[0173] at least one processor; and,

[0174] a memory communicatively connected to the at least one processor; wherein,

[0175] The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to execute:

[0176] After the user mobile terminal is close to the smart card, providing the user mobile terminal with identification information corresponding to the smart card and the factor to be verified generated by the smart card through near field communication;

[0177] Receiving a card reading instruction sent by a user-side program on the user mobile terminal, wherein the card reading instruction is generated by the user-side program using a security protection key corresponding to the vehicle to perform an encryption operation on the factor to be verified, wherein the security protection key is generated by the user-side program in its local designated security area according to the identification information and pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area;

[0178] Using the security protection key in its possession, the card reading instruction is decrypted and the factors to be verified are verified. After the verification is passed, the boarding related information is returned to the user's mobile terminal for corresponding deductions on the user's mobile terminal or on the server corresponding to the user-side program.

[0179] Based on the same idea, one or more embodiments of this specification further provide a non-volatile computer storage medium, which is applied to a user-side program on a user mobile terminal, wherein the medium stores computer executable instructions, and the computer executable instructions are configured as follows:

[0180] After the user mobile terminal is close to the smart card deployed for the transportation vehicle, the identification information corresponding to the smart card and the factor to be verified generated by the smart card are obtained through near field communication;

[0181] In a designated security area on the user mobile terminal, generating a security protection key corresponding to the vehicle according to the identification information and the pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area;

[0182] Using the security protection key, an encryption operation is performed on the factor to be verified to generate a card reading instruction;

[0183] Sending the card reading instruction to the smart card, so that the smart card uses the security protection key it holds to perform a decryption operation on the card reading instruction, verify the factor to be verified, and return the boarding related information to the user mobile terminal after the verification is passed;

[0184] Based on the ride-related information, corresponding deductions are made on the user's mobile terminal or on the server corresponding to the user-side program.

[0185] Based on the same idea, one or more embodiments of this specification also provide another non-volatile computer storage medium, which is applied to a smart card deployed on a vehicle, and the medium stores computer executable instructions, and the computer executable instructions are set to:

[0186] After the user mobile terminal is close to the smart card, providing the user mobile terminal with identification information corresponding to the smart card and the factor to be verified generated by the smart card through near field communication;

[0187] Receiving a card reading instruction sent by a user-side program on the user mobile terminal, wherein the card reading instruction is generated by the user-side program using a security protection key corresponding to the vehicle to perform an encryption operation on the factor to be verified, wherein the security protection key is generated by the user-side program in its local designated security area according to the identification information and pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area;

[0188] Using the security protection key in its possession, the card reading instruction is decrypted and the factors to be verified are verified. After the verification is passed, the boarding related information is returned to the user's mobile terminal for corresponding deductions on the user's mobile terminal or on the server corresponding to the user-side program.

[0189] In the 1990s, improvements to a technology could be clearly distinguished as hardware improvements (for example, improvements to the circuit structure of diodes, transistors, switches, etc.) or software improvements (improvements to the method flow). However, with the development of technology, many improvements to the method flow today can be regarded as direct improvements to the hardware circuit structure. Designers almost always obtain the corresponding hardware circuit structure by programming the improved method flow into the hardware circuit. Therefore, it cannot be said that an improvement in a method flow cannot be implemented using a hardware entity module. For example, a programmable logic device (PLD) (such as a field programmable gate array (FPGA)) is such an integrated circuit whose logical function is determined by the user's programming of the device. Designers can "integrate" a digital system on a PLD by programming it themselves, without having to ask a chip manufacturer to design and produce a dedicated integrated circuit chip. Moreover, nowadays, instead of manually making integrated circuit chips, this kind of programming is mostly implemented by "logic compiler" software, which is similar to the software compiler used when developing and writing programs, and the original code before compilation must also be written in a specific programming language, which is called hardware description language (HDL). There is not only one HDL, but many kinds, such as ABEL (Advanced Boolean Expression Language), AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCal, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, RHDL (Ruby Hardware Description Language), etc. The most commonly used ones are VHDL (Very-High-Speed ​​Integrated Circuit Hardware Description Language) and Verilog. Those skilled in the art should also know that it is only necessary to program the method flow slightly in the above-mentioned hardware description languages ​​and program it into the integrated circuit, and then it is easy to obtain the hardware circuit that implements the logic method flow.

[0190] The controller can be implemented in any appropriate manner, for example, the controller can take the form of a microprocessor or processor and a computer-readable medium storing a computer-readable program code (such as software or firmware) that can be executed by the (micro)processor, a logic gate, a switch, an application-specific integrated circuit (ASIC), a programmable logic controller, and an embedded microcontroller. Examples of controllers include, but are not limited to, the following microcontrollers: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20, and Silicone Labs C8051F320. The memory controller can also be implemented as part of the control logic of the memory. Those skilled in the art also know that in addition to implementing the controller in a purely computer-readable program code manner, the controller can be implemented in the form of a logic gate, a switch, an application-specific integrated circuit, a programmable logic controller, and an embedded microcontroller by logically programming the method steps. Therefore, this controller can be considered as a hardware component, and the devices included therein for implementing various functions can also be regarded as structures within the hardware component. Or even, the devices for implementing various functions can be regarded as both software modules for implementing the method and structures within the hardware component.

[0191] The systems, devices, modules or units described in the above embodiments may be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0192] For the convenience of description, the above device is described in various units according to their functions. Of course, when implementing this specification, the functions of each unit can be implemented in the same or multiple software and / or hardware.

[0193] Those skilled in the art will appreciate that the embodiments of this specification may be provided as methods, systems, or computer program products. Therefore, the embodiments of this specification may be in the form of complete hardware embodiments, complete software embodiments, or embodiments in combination with software and hardware. Moreover, the embodiments of this specification may be in the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0194] This specification is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of this specification. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0195] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0196] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable device. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0197] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0198] The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0199] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0200] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0201] This specification may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. This specification may also be practiced in distributed computing environments where tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules may be located in local and remote computer storage media, including storage devices.

[0202] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device, equipment, and non-volatile computer storage medium embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0203] The above is a description of a specific embodiment of the present specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0204] The above description is only one or more embodiments of this specification and is not intended to limit this specification. For those skilled in the art, one or more embodiments of this specification may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of one or more embodiments of this specification shall be included in the scope of the claims of this specification.

Claims

1. A method for processing transportation vehicle boarding services, applied to a user terminal program on a user mobile terminal, the method comprising: After the user mobile terminal is close to the smart card deployed for the transportation vehicle, the identification information corresponding to the smart card and the factor to be verified generated by the smart card are obtained through near field communication; In a designated security area on the user mobile terminal, generating a security protection key corresponding to the vehicle according to the identification information and the pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area; Using the security protection key, an encryption operation is performed on the factor to be verified to generate a card reading instruction; Sending the card reading instruction to the smart card, so that the smart card uses the security protection key it holds to perform a decryption operation on the card reading instruction, verify the factor to be verified, and return the boarding related information to the user mobile terminal after the verification is passed; Based on the ride-related information, corresponding deductions are made on the user's mobile terminal or on the server corresponding to the user-side program.

2. The method of claim 1, wherein the transportation vehicle comprises a bus.

3. The method according to claim 1, before the user mobile terminal approaches the smart card deployed for the transportation vehicle that the user takes, the method further comprises: Sending a smart card-based boarding service activation request to a server program on the server corresponding to the client program; The receiving server program returns the card reading authorization data after agreeing to the ride service activation request.

4. The method according to claim 1, wherein obtaining the identification information corresponding to the smart card and the factor to be verified generated by the smart card through near field communication specifically comprises: Acquire the ATS information of the smart card through near field communication; The identification information corresponding to the smart card and the factor to be verified generated by the smart card are parsed from the ATS information.

5. The method according to claim 1, wherein the factor to be verified is a randomly generated random factor.

6. The method according to claim 1, wherein the step of using the security protection key to perform encryption operation on the factor to be verified to generate a card reading instruction specifically comprises: Generate near field communication standard card reading instructions; Using the security protection key, encrypting the factor to be verified to obtain an encrypted factor; The near field communication standard card reading instruction and the encryption factor are assembled to obtain a near field communication extended card reading instruction, so that the smart card parses the near field communication extended card reading instruction to obtain the factor to be verified and perform the verification.

7. The method according to claim 1, wherein the step of using the security protection key to perform encryption operation on the factor to be verified to generate a card reading instruction specifically comprises: Using the security protection key, an encryption operation is performed on the factor to be verified to generate a card reading instruction containing the first location information of the user mobile terminal, so that the smart card obtains the first location information for deducting the fee according to the first location information; Alternatively, the method further comprises: After the user mobile terminal approaches the smart card deployed for the transportation vehicle that the user takes, the first location information of the user mobile terminal is sent to the server for deducting the fee according to the first location information.

8. The method according to claim 7, wherein the deducting the fee according to the first location information specifically comprises: After sending the card reading instruction to the smart card, detecting whether the user mobile terminal and the transportation vehicle are in a position separation state; If so, the deduction is performed based on the first location information and the separated location information of the user mobile terminal.

9. The method according to claim 8, wherein the detecting whether the user mobile terminal and the transportation vehicle are in a position separation state specifically comprises: receiving a location acquisition request sent by the server after the vehicle arrives at the next stop; The second location information of the user mobile terminal is returned to the server so that the server can directly use the second location information, or the second location information is provided to the smart card, wherein the second location information is used to detect the location separation state in combination with the location information of the vehicle.

10. The method according to claim 1, wherein the corresponding fee is deducted on the user's mobile terminal or on the server corresponding to the user-side program according to the ride-related information; Acquire at least one of the following information included in the boarding related information: identification, route information, and fare rules of the transportation tool; Calculate the deduction amount corresponding to this ride based on the acquired information; According to the deduction amount, corresponding deductions are made on the user mobile terminal or on the server corresponding to the user-side program.

11. The method of claim 1 , further comprising: After the verification is passed, the smart card is triggered to record the ride record corresponding to the user-side program in the smart card for the purpose of deducting the fee or verifying the deduction.

12. According to the method of claim 1, different vehicles correspond to different security protection keys.

13. A method for processing transportation boarding services, applied to a smart card deployed on a transportation vehicle, the method comprising: After the user mobile terminal is close to the smart card, providing the user mobile terminal with identification information corresponding to the smart card and the factor to be verified generated by the smart card through near field communication; Receiving a card reading instruction sent by a user-side program on the user mobile terminal, wherein the card reading instruction is generated by the user-side program using a security protection key corresponding to the vehicle to perform an encryption operation on the factor to be verified, wherein the security protection key is generated by the user-side program in its local designated security area according to the identification information and pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area; Using the security protection key in its possession, the card reading instruction is decrypted and the factors to be verified are verified. After the verification is passed, the boarding related information is returned to the user's mobile terminal for corresponding deductions on the user's mobile terminal or on the server corresponding to the user-side program.

14. A transportation vehicle boarding service processing device, applied to a user terminal program on a user mobile terminal, the device comprising: A verification information acquisition module, after the user mobile terminal is close to a smart card deployed for the transportation vehicle, obtains identification information corresponding to the smart card and a factor to be verified generated by the smart card through near field communication; A protection key generation module, in a designated security area on the user mobile terminal, generates a security protection key corresponding to the vehicle according to the identification information and pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area; A card reading instruction generating module, using the security protection key, performs encryption operation on the factor to be verified, and generates a card reading instruction; a card reading instruction sending module, which sends the card reading instruction to the smart card, so that the smart card uses the security protection key it holds to perform a decryption operation on the card reading instruction, verify the factor to be verified, and return the boarding related information to the user mobile terminal after the verification is passed; The ride information deduction module performs corresponding deductions on the user's mobile terminal or on the server corresponding to the user-side program based on the ride-related information.

15. The apparatus of claim 14, wherein the vehicle comprises a bus.

16. The apparatus of claim 14, further comprising: A boarding service activation module, which sends a smart card-based boarding service activation request to a server program corresponding to the user program on the server before the user mobile terminal approaches the smart card deployed for the transportation vehicle to be boarded; The receiving server program returns the card reading authorization data after agreeing to the ride service activation request.

17. The device according to claim 14, wherein the verification information acquisition module acquires the ATS information of the smart card through near field communication; The identification information corresponding to the smart card and the factor to be verified generated by the smart card are parsed from the ATS information. The device according to claim 14 , wherein the factor to be verified is a randomly generated random factor.

19. The device of claim 14, wherein the card reading instruction generation module generates a near field communication standard card reading instruction; Using the security protection key, encrypting the factor to be verified to obtain an encrypted factor; The near field communication standard card reading instruction and the encryption factor are assembled to obtain a near field communication extended card reading instruction, so that the smart card parses the near field communication extended card reading instruction to obtain the factor to be verified and perform the verification.

20. The device according to claim 14, wherein the card reading instruction generating module uses the security protection key to perform encryption operation on the factor to be verified, and generates a card reading instruction containing the first location information of the user mobile terminal, so that the smart card obtains the first location information, and is used to perform the deduction according to the first location information; Alternatively, the device further comprises: The location information reporting module sends the first location information of the user's mobile terminal to the server after the user's mobile terminal approaches the smart card deployed for the transportation vehicle that the user takes, so as to deduct the fee according to the first location information.

21. The device according to claim 20, wherein the deducting the fee according to the first location information specifically comprises: After sending the card reading instruction to the smart card, detecting whether the user mobile terminal and the transportation vehicle are in a position separation state; If so, the deduction is performed based on the first location information and the separated location information of the user mobile terminal.

22. The device according to claim 21, wherein the detecting whether the user mobile terminal and the transportation vehicle are in a position separation state specifically comprises: receiving a location acquisition request sent by the server after the vehicle arrives at the next stop; The second location information of the user mobile terminal is returned to the server so that the server can directly use the second location information, or the second location information is provided to the smart card, wherein the second location information is used to detect the location separation state in combination with the location information of the vehicle.

23. A vehicle boarding service processing device, applied to a smart card deployed on a vehicle, the device comprising: A verification information providing module, which provides identification information corresponding to the smart card and a factor to be verified generated by the smart card to the user mobile terminal through near field communication after the user mobile terminal is close to the smart card; a card reading instruction receiving module, receiving a card reading instruction sent by a user-side program on the user mobile terminal, wherein the card reading instruction is generated by the user-side program using a security protection key corresponding to the means of transport to perform an encryption operation on the factor to be verified, wherein the security protection key is generated by the user-side program in its local designated security area according to the identification information and pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area; The factor verification return module uses the security protection key it holds to perform decryption operations on the card reading instruction, verify the factor to be verified, and after the verification is passed, returns the boarding related information to the user mobile terminal for corresponding deductions on the user mobile terminal or on the server corresponding to the user-side program.

24. A transportation vehicle boarding service processing device, applied to a user terminal program on a user mobile terminal, the device comprising: at least one processor; as well as, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to execute: After the user mobile terminal is close to the smart card deployed for the transportation vehicle, the identification information corresponding to the smart card and the factor to be verified generated by the smart card are obtained through near field communication; In a designated security area on the user mobile terminal, generating a security protection key corresponding to the vehicle according to the identification information and the pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area; Using the security protection key, an encryption operation is performed on the factor to be verified to generate a card reading instruction; Sending the card reading instruction to the smart card, so that the smart card uses the security protection key it holds to perform a decryption operation on the card reading instruction, verify the factor to be verified, and return the boarding related information to the user mobile terminal after the verification is passed; Based on the ride-related information, corresponding deductions are made on the user's mobile terminal or on the server corresponding to the user-side program.

25. A transportation vehicle boarding service processing device, applied to a smart card deployed on a transportation vehicle, the device comprising: at least one processor; as well as, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to execute: After the user mobile terminal is close to the smart card, providing the user mobile terminal with identification information corresponding to the smart card and the factor to be verified generated by the smart card through near field communication; Receiving a card reading instruction sent by a user-side program on the user mobile terminal, wherein the card reading instruction is generated by the user-side program using a security protection key corresponding to the vehicle to perform an encryption operation on the factor to be verified, wherein the security protection key is generated by the user-side program in its local designated security area according to the identification information and pre-acquired card reading authorization data, so that the generated security protection key is not exposed outside the designated security area; Using the security protection key in its possession, the card reading instruction is decrypted and the factors to be verified are verified. After the verification is passed, the boarding related information is returned to the user's mobile terminal for corresponding deductions on the user's mobile terminal or on the server corresponding to the user-side program.

Images