Password-free payment method, system, device, medium and program product

Abstract

The invention provides a password-free payment method which can be applied to the field of information security, the field of block chains or other fields. The password-free payment method for a first server comprises the steps that a transaction request sent by a terminal device is received, the transaction request comprises transaction information and user information associated with a transaction, and the transaction comprises a direct payment transaction of a user to a payee; querying a time window of the user according to the user information, the time window being preset according to the time when the terminal device sends payment authentication information to the first server, and the payment authentication information being used for representing the identity of the user; if the transaction timestamp of the transaction is in the time window, executing a password-free payment operation to the payee according to the transaction information; and returning an execution result of the password-free payment operation to the terminal equipment.

Description

Technical Field

[0001] The present disclosure relates to the field of information security, blockchain or other fields, and more specifically, to a password-free payment method, system, device, medium and program product. Background Art

[0002] Password-free payment is generally used in specific scenarios, that is, in the case of specific payees. For example, in online shopping, after enabling small-amount password-free payment on a specific online shopping platform, users can make small-amount password-free payments.

[0003] The reason why this method can be adopted in such platforms is that the payee is actually restricted by the online shopping platform. That is, the merchants who open stores on the online shopping platform will pay a store deposit, and the money sent by the user to the online shopping platform is actually saved in the account of the online shopping platform. After the transaction is completely completed, the amount generated by the transaction will be sent to the corresponding merchant. Therefore, for the online shopping platform, its risks can be fully controlled, and it can provide users with password-free payment services. At the same time, for some payment software, it can also provide such online shopping platforms with a password-free payment interface.

[0004] In the process of realizing the invention concept disclosed herein, the inventor discovered that in the process of direct transactions between the payer and the payee, the transaction software itself can only serve as a payment interface. In the direct transaction scenario, there is no third-party organization such as an online shopping platform to participate in risk control, resulting in the existing password-free payment method being unable to be directly applied. Summary of the invention

[0005] In view of the above problems, the present disclosure provides a password-free payment method, system, device, medium and program product.

[0006] According to the first aspect of the present disclosure, a password-free payment method is provided, characterized in that, for a first server, the method comprises: receiving a transaction request sent by a terminal device, wherein the transaction request comprises transaction information and user information associated with the transaction, and the transaction comprises a direct payment transaction from a user to a payee; querying a time window of the user according to the user information, wherein the time window is pre-set according to a time when the terminal device sends payment authentication information to the first server, and the payment authentication information is used to characterize the identity of the user; if a transaction timestamp of the transaction is within the time window, executing a password-free payment operation to the payee according to the transaction information; and returning an execution result of the password-free payment operation to the terminal device.

[0007] According to an embodiment of the present disclosure, before querying the time window of the user based on the user information, pre-setting the time window includes: receiving the payment authentication information and the corresponding timestamp sent by the terminal device, wherein, with the authorization of the user, the terminal device is configured to obtain the payment authentication information and the corresponding timestamp before the transaction occurs; comparing the payment authentication information with the pre-stored authentication information to obtain a comparison result, the pre-stored authentication information being sent in advance by the terminal device to the first server; when the comparison result is passed, setting the time window based on the timestamp corresponding to the payment authentication information.

[0008] According to an embodiment of the present disclosure, after setting the time window based on the timestamp corresponding to the payment authentication information, the method further includes: sending the time window to the terminal device, the terminal device being configured to re-acquire and re-send the payment authentication information and the corresponding timestamp after the end of the time window; the first server is used to re-execute the operation of pre-setting the time window, wherein the time lengths of any two time windows are the same or different.

[0009] According to an embodiment of the present disclosure, setting the time window based on the timestamp corresponding to the payment authentication information includes: obtaining historical data of the user performing password-free payment, the historical data including the user's password-free payment behavior and the corresponding time period within a specific time interval in the past; determining the current time period to which the timestamp corresponding to the payment authentication information belongs; and setting the time window according to the number of password-free payment behaviors within the current time period.

[0010] According to an embodiment of the present disclosure, setting the time window based on the timestamp corresponding to the payment authentication information includes: acquiring payment environment information sent by the terminal device; and setting the time window according to the payment environment information and the timestamp corresponding to the payment authentication information.

[0011] According to an embodiment of the present disclosure, before comparing the payment authentication information with the pre-stored authentication information, the method also includes: receiving the password-free transaction authority and the pre-stored authentication information sent by the terminal device; wherein the password-free transaction authority is generated based on the user's password-free transaction authorization behavior at the terminal device, and the pre-stored authentication information includes information representing the user's identity obtained by the terminal device in response to the password-free transaction authority.

[0012] According to an embodiment of the present disclosure, receiving the password-free transaction authority and the pre-stored authentication information sent by the terminal device includes: receiving an authority file sent by the terminal device, wherein the authority file is encrypted by the private key of the terminal device and the public key of the first server; calling the private key of the first server to decrypt the authority file to obtain the password-free transaction authority and the pre-stored authentication information.

[0013] According to an embodiment of the present disclosure, receiving a transaction request sent by a terminal device includes: receiving a transaction file sent by the terminal device, wherein the transaction file is encrypted by a private key of the terminal device and a public key of the first server; and calling the private key of the first server to decrypt the transaction file to obtain the transaction request.

[0014] According to an embodiment of the present disclosure, if the transaction timestamp of the transaction is within the time window, the method further includes: calling the private key of the first server to encrypt the authority file and the transaction file to obtain a backup file; and storing the backup file in a distributed file storage system of the blockchain.

[0015] Another aspect of an embodiment of the present disclosure provides a password-free payment method, characterized in that, for a terminal device, the method includes: in response to a direct payment transaction from a user to a payee, sending a transaction request to a first server, wherein the transaction request includes transaction information and user information associated with the transaction; receiving an execution result of the password-free payment operation sent by the first server, wherein the first server is configured to execute any of the above methods for it to obtain the execution result of the password-free payment operation.

[0016] According to an embodiment of the present disclosure, before receiving the execution result of the password-free payment operation sent by the first server, with the authorization of the user, payment authentication information and the corresponding timestamp are obtained before the transaction occurs; the payment authentication information and the corresponding timestamp are sent to the first server, and the first server is configured to set the time window based on the timestamp corresponding to the payment authentication information after the payment authentication information is compared with the pre-stored authentication information.

[0017] According to an embodiment of the present disclosure, after sending the payment authentication information and the corresponding timestamp to the first server, the method also includes: receiving the time window sent by the first server; re-acquiring and sending the payment authentication information and the corresponding timestamp after the time window ends, and the first server is used to re-execute the operation of pre-setting the time window, wherein the time lengths of any two time windows are the same or different.

[0018] According to an embodiment of the present disclosure, before obtaining payment authentication information and the corresponding timestamp, the method also includes: generating a password-free transaction permission based on the user's password-free transaction authorization behavior on the terminal device; obtaining pre-stored authentication information representing the user's identity in response to the password-free transaction permission; and sending the password-free transaction permission and the pre-stored authentication information to the first server.

[0019] Another aspect of an embodiment of the present disclosure provides a password-free transaction system, characterized in that it includes: a terminal device, configured to execute any of the above methods for the terminal device in response to a direct payment transaction from a user to a payee; and a first server, configured to receive a transaction request sent by the terminal device, and execute any of the above methods for the first server.

[0020] Another aspect of an embodiment of the present disclosure provides a terminal device, including: one or more processors; and a memory for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors execute the method described above.

[0021] Another aspect of the embodiments of the present disclosure provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, causes the processor to perform the method described above. Another aspect of the embodiments of the present disclosure provides a computer program product, including a computer program, which, when executed by a processor, implements the method described above.

[0022] One or more of the above embodiments have the following beneficial effects: a scheme for performing password-free payment in direct payment transactions is provided, and the first server pre-sets a time window according to the time when the terminal device sends payment authentication information. Since the payment authentication information can represent the identity of the user, it can be shown that the user himself makes the payment within the time window, so that when the transaction timestamp is within the time window, the password-free payment operation to the payee is allowed to be executed. It is ensured that the person who controls the terminal device to perform the password-free payment is the payee himself. Through the setting of the time window, even if there is no third-party organization such as an online shopping platform involved in risk control, the security of the password-free payment is also guaranteed to a certain extent, and it can also avoid transaction disputes caused by the inability to understand whether the operation is performed by the payee himself during the password-free transaction. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] The above contents and other objects, features and advantages of the present disclosure will become more apparent through the following description of the embodiments of the present disclosure with reference to the accompanying drawings, in which:

[0024] Figure 1 A diagram schematically shows a password-free payment system according to an embodiment of the present disclosure;

[0025] Figure 2 A flowchart of a password-free payment method according to an embodiment of the present disclosure is schematically shown;

[0026] Figure 3 A flowchart of setting a time window according to an embodiment of the present disclosure is schematically shown;

[0027] Figure 4 A flowchart of setting a time window for a first server according to an embodiment of the present disclosure is schematically shown;

[0028] Figure 5 A flowchart of a first server setting a time window according to another embodiment of the present disclosure is schematically shown;

[0029] Figure 6 A flowchart of providing password-free transaction authority according to an embodiment of the present disclosure is schematically shown;

[0030] Figure 7 A flowchart of encrypted transmission according to an embodiment of the present disclosure is schematically shown;

[0031] Figure 8 Schematically shows a flowchart of encrypted transmission according to another embodiment of the present disclosure;

[0032] Fig. 9 The structure block diagram of the password-free payment device for the first server according to the embodiment of the present disclosure is schematically shown;

[0033] Fig.10 A schematic diagram of a structure of a password-free payment device for a terminal device according to an embodiment of the present disclosure is shown;

[0034] Fig.11 A block diagram of a terminal device suitable for implementing a password-free payment method according to an embodiment of the present disclosure is schematically shown. DETAILED DESCRIPTION

[0035] Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the present disclosure. In the following detailed description, for ease of explanation, many specific details are set forth to provide a comprehensive understanding of the embodiments of the present disclosure. However, it is apparent that one or more embodiments may also be implemented without these specific details. In addition, in the following description, descriptions of known structures and technologies are omitted to avoid unnecessary confusion of the concepts of the present disclosure.

[0036] In the technical solution of the present invention, the user information (including but not limited to user personal information, user image information, user device information, such as location information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved are all information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of the relevant data comply with relevant laws, regulations and standards, take necessary confidentiality measures, do not violate public order and good morals, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0037] In the scenario of using personal information for automated decision-making, the methods, devices, and systems provided by the embodiments of the present invention provide users with corresponding operation portals for users to choose to agree or reject the automated decision-making results; if the user chooses to reject, the expert decision-making process will be entered. The expression "automated decision-making" here refers to the activity of automatically analyzing and evaluating an individual's behavioral habits, interests and hobbies, or economic, health, credit status, etc. through computer programs, and making decisions. The expression "expert decision-making" here refers to the activity of making decisions by people who specialize in a certain field, have specialized experience, knowledge and skills, and have reached a certain level of professionalism.

[0038] In the related art, in the process of direct transactions between the payer and the payee, the transaction software itself can only serve as a payment interface. In the context of traditional secret transactions, after receiving the payee's password, the transaction software will give the payee the corresponding amount. The password received by the transaction software is actually a promise to determine whether it is operated by the payee himself, so as to avoid disputes after the transaction. In the environment of password-free payment, due to the lack of the key step of the payee entering the password, it is easy to be paid by others by mistake or fraudulently. For example, when a dispute occurs in a transaction, it is impossible to determine whether the transaction software itself deducts funds, or whether others manipulate the payee's account to maliciously deduct funds, or whether the payee himself initiates a complaint after deducting funds, and then when a dispute occurs, it is impossible to restore the transaction process to find the corresponding responsible party. Therefore, in the scenario of direct transactions, there is no third-party organization such as an online shopping platform to participate in risk control, resulting in the inability to directly apply the existing password-free payment method.

[0039] Some embodiments of the present disclosure provide a scheme for performing password-free payment in direct payment transactions. The first server pre-sets a time window according to the time when the terminal device sends payment authentication information. Since the payment authentication information can represent the identity of the user, it can be shown that the user himself makes the payment within the time window. Therefore, when the transaction timestamp is within the time window, the password-free payment operation to the payee is allowed. It is ensured that the person who controls the terminal device to perform the password-free payment is the payee himself. Through the setting of the time window, even if there is no third-party organization such as an online shopping platform involved in risk control, the security of the password-free payment is guaranteed to a certain extent, and it can also avoid transaction disputes caused by the inability to understand whether the operation is performed by the payee himself during the password-free transaction.

[0040] Figure 1 The following schematically shows a password-free payment system diagram according to an embodiment of the present disclosure. It should be noted that: Figure 1 What is shown are merely examples to which the embodiments of the present disclosure can be applied, so as to help those skilled in the art understand the technical content of the present disclosure, but it does not mean that the embodiments of the present disclosure cannot be used in other devices, systems, environments or scenarios.

[0041] like Figure 1 As shown, the password-free payment system 100 according to this embodiment may include terminal devices 101, 102, 103, a network 104 and a server 105. The network 104 is used to provide a medium for a communication link between the terminal devices 101, 102, 103 and the server 105. The network 104 may include various connection types, such as wired, wireless communication links or optical fiber cables, etc.

[0042] Users can use terminal devices 101, 102, 103 to interact with server 105 through network 104 to receive or send messages, etc. Various communication client applications can be installed on terminal devices 101, 102, 103, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, etc. (only examples).

[0043] The terminal devices 101, 102, and 103 can execute the password-free payment method for terminal devices of the embodiment of the present disclosure. They can be various terminal devices with display screens and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, etc.

[0044] The server 105 can execute the password-free payment method for the first server of the embodiment of the present disclosure, and can be a server that provides various services, such as a background management server (only as an example) that provides support for websites browsed by users using terminal devices 101, 102, and 103. The background management server can analyze and process the received data such as user requests, and feed back the processing results (such as web pages, information, or data obtained or generated according to user requests) to the terminal device. For example, the server 105 can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a first server that provides basic cloud computing services such as cloud services, cloud computing, network services, and middleware services.

[0045] In applications such as client applications and web applications (abbreviated as APP in English), the client (i.e., front end) and the server (i.e., back end) can communicate data through network messages. For example, in the APP client, the parameters that the server needs to obtain from the client are assembled, and the network request method is called to send to the server. For example, the payer uses the payment software (such as mobile banking) installed in the terminal device 101 to transfer money to the payee. For example, the payee uses the payment software installed in the terminal device 102 to display the QR code, and the payer uses the terminal device 101 to scan the QR code and call the payment software to pay the corresponding amount.

[0046] It should be understood that Figure 1 The number of terminal devices, networks and servers in the embodiment is only for illustration. Any number of terminal devices, networks and servers may be provided according to the implementation requirements.

[0047] The following will be based on Figure 1 The scene described by Figure 2~Figure 8 The password-free payment method of the embodiment of the present disclosure is described in detail.

[0048] Figure 2 The flowchart of the password-free payment method according to an embodiment of the present disclosure is schematically shown.

[0049] like Figure 2 As shown, this embodiment includes:

[0050] In operation S210, the terminal device sends a transaction request to the first server in response to a direct payment transaction from a user to a payee;

[0051] In a direct payment transaction, the user, as the payer, directly transfers money to the payee's account. After the user clicks the payment button, the user does not need to enter a password, and the terminal device generates and sends a transaction request.

[0052] In operation S220, the first server receives a transaction request sent by the terminal device, wherein the transaction request includes transaction information and user information associated with the transaction;

[0053] Transaction information includes data directly related to the transaction, such as the amount, the parties involved in the transaction, etc. For example, a transaction may include the transaction amount of RMB 100, the recipient's account number, and a description of the goods or services involved in the transaction. User information includes information used to identify the user who initiated the transaction, such as the user name, account number, or ID number.

[0054] In operation S230, the first server queries a time window of the user according to the user information, wherein the time window is preset according to a time when the terminal device sends payment authentication information to the first server, and the payment authentication information is used to characterize the identity of the user;

[0055] The time window refers to a preset time range used to constrain the timeliness of password-free payment. For example, the time window may be within 3 minutes from the time the payment authentication information is sent. The payment authentication information may include passwords, gestures, and user biometric information. User biometric information includes voice, fingerprint, iris, or facial recognition data.

[0056] In operation S240, the first server determines whether the transaction timestamp is within the time window. If so, operation S250 is executed; if not, an instruction to require the user to provide a payment password is returned.

[0057] The transaction timestamp includes a mark that records the time when the transaction occurred. For example, if a transaction occurs at 10:00:00 on May 16, 2024, this time is the transaction timestamp.

[0058] In operation S250, if the transaction timestamp of the transaction is within the time window, the first server performs a password-free payment operation to the payee according to the transaction information;

[0059] In some embodiments, the first server may be a server for processing payment transactions. For example, a bank or payment platform (such as WeChat Pay, Alipay) has one or more first servers for processing payment transactions. Then the first server can directly deduct from the user account based on the balance in the transaction information and transfer it to the payee's account. In other embodiments, the bank or payment platform (such as WeChat Pay, Alipay) has one or more second servers for processing payment transactions. The first server is a device between the terminal device and the second server, which is used to provide the setting and judgment of the time window. The execution of the password-free payment operation can be to call the payment interface of the second server to perform the deduction operation.

[0060] In operation S260, the first server returns the execution result of the password-free payment operation to the terminal device.

[0061] In operation S270, the terminal device receives the execution result of the password-free payment operation sent by the first server.

[0062] Password-free payment is generally used in small transactions and retail transactions. In online small transactions, because the merchant provides a deposit to the platform, the payment software provides the transaction platform with a password-free transaction interface. After the user questions the transaction, at least the transaction can be canceled by returning the goods. However, in offline small transactions, the user takes out the mobile phone to trade with the merchant, which is a process of handing over money and handing over goods. There is a lack of a connection between the user and the merchant. When a transaction dispute occurs, the payee or the merchant will not bear the corresponding responsibility, and the payee cannot be traced. In this way, the risk of password-free transactions needs to be shared by users and transaction software. In addition, when an abnormal transaction occurs, it is difficult to trace the cause of the abnormal transaction by tracing the source.

[0063] According to an embodiment of the present disclosure, a scheme for performing password-free payment in direct payment transactions is provided. The first server pre-sets a time window according to the time when the terminal device sends payment authentication information. Since the payment authentication information can represent the identity of the user, it can be shown that the user himself makes the payment within the time window. Therefore, when the transaction timestamp is within the time window, the password-free payment operation to the payee is allowed. It is ensured that the person who operates the terminal device to perform the password-free payment is the payee himself. Through the setting of the time window, even if there is no third-party organization such as an online shopping platform involved in risk control, the security of the password-free payment is guaranteed to a certain extent, and it can also avoid transaction disputes caused by the inability to understand whether the operation is performed by the payee himself during the password-free transaction.

[0064] Figure 3 The flowchart of setting the time window according to an embodiment of the present disclosure is schematically shown.

[0065] like Figure 3 As shown, this embodiment includes:

[0066] In operation S310, with user authorization, the terminal device obtains payment authentication information and a corresponding timestamp before a transaction occurs;

[0067] For example, when using a terminal device, a user usually needs to enter payment authentication information, such as fingerprint information, to unlock the device screen, access specific permission files, or start certain software. When a user enters a fingerprint into a terminal device to unlock the screen, the underlying logic is to compare the acquired fingerprint information. If the comparison is successful, it will be unlocked, otherwise it will not be unlocked. The fingerprint information entered each time will not be saved. In this embodiment, the fingerprint information that has been printed will be collected and sent to the first server. Based on the acquired fingerprint information, the time window for opening password-free payment is determined to ensure that the person performing the password-free payment operation is the payer himself. This measure effectively avoids transaction disputes caused by the inability to confirm whether the password-free transaction is operated by the payer himself.

[0068] When multiple users have the authority to use the terminal device, you can specify to obtain the payment authentication information of at least one user. For example, if both the parent's fingerprint information and the child's fingerprint information can unlock the phone, then you can specify the parent's fingerprint information as the payment authentication information.

[0069] In operation S320, the terminal device sends payment authentication information and a corresponding timestamp to the first server.

[0070] In operation S330, the first server receives payment authentication information and a corresponding timestamp sent by the terminal device;

[0071] In operation S340, the first server compares the payment authentication information with the pre-stored authentication information to obtain a comparison result, and the pre-stored authentication information is sent to the first server in advance by the terminal device;

[0072] Pre-stored authentication information refers to information that is stored in the system in advance and is used to compare with the payment authentication information provided by the user. For example, the fingerprint information entered by the user when setting up fingerprint payment for the first time. For example, when the user's fingerprint matches the pre-stored fingerprint, a "pass" comparison result will be obtained.

[0073] In operation S350, the first server determines whether the comparison is passed, and if so, performs operation S360; if not, does not set the time window.

[0074] In operation S360, when the comparison result is passed, the first server sets a time window based on a timestamp corresponding to the payment authentication information.

[0075] If the comparison result is passed, the first server will set a specific time window based on the received timestamp, during which the user can make a password-free payment. For example, if the payment authentication information is received at 9 am, the server may set a time window from 9 am to 9:30 am as the user's password-free payment time window.

[0076] For example, when a user enters biometric information on a terminal device during operation, not only will the biometric information be verified, but the biometric information entered by the user will also be sent to the first server. After receiving the biometric information, the first server will know that the current terminal device is operated by the user himself, and thus provide the corresponding time-limited password-free payment authority, thereby ensuring that the password-free payment is carried out at the user's instruction.

[0077] For example, the time window is less than 1 minute. Generally speaking, in a face-to-face retail scenario, after a user takes out his mobile phone and unlocks it, the time it takes to scan the code for a transaction will not exceed 1 minute. Therefore, setting the time window to 1 minute can basically meet the needs of password-free payment in face-to-face transactions.

[0078] In operation S370, the time window is sent to the terminal device;

[0079] In operation S380, after sending the payment authentication information and the corresponding timestamp to the first server, the terminal device receives the time window sent by the first server;

[0080] In operation S390, the terminal device re-acquires and sends the payment authentication information and the corresponding timestamp after the time window ends; the first server is used to re-execute the operation of pre-setting the time window, wherein the time lengths of any two time windows are the same or different.

[0081] In operation S390, the terminal device may return to execute operations S310 to S320, and the first server may return to execute operations S330 to S370.

[0082] According to the embodiments of the present disclosure, the time window makes the password-free payment time-effective, thereby improving the payment security capability. The time window can be continuously and imperceptibly updated through the interaction between the terminal device and the first server, thereby improving the user experience. In addition, the time window can be dynamically changed, and windows of the same or different time lengths can be set for different users, and windows of the same or different time lengths can be set for the same user in different time periods.

[0083] Figure 4 The flowchart of the first server setting the time window according to the embodiment of the present disclosure is schematically shown.

[0084] like Figure 4 As shown, this embodiment includes:

[0085] In operation S410, the first server obtains historical data of password-free payment performed by the user, where the historical data includes the password-free payment behavior of the user within a specific time interval in the past and the corresponding time period;

[0086] Historical data includes the user's past transaction records, including time, amount, payment behavior and other information. For example, the number of times and time that Mr. Zhang used the password-free function to pay every day in the past 30 days. Time period refers to the specific time interval in historical data. For example, 7 am to 10 am.

[0087] In operation S420, the first server determines a current time period to which the timestamp corresponding to the payment authentication information belongs;

[0088] The current time period is the time interval when the user makes a password-free payment. For example, if Mr. Zhang makes a payment at 9 p.m., his current time period may be between 9 p.m. and 10 p.m.

[0089] In operation S430, the first server sets a time window according to the number of password-free payment behaviors in the current time period.

[0090] For example, the time window can be dynamically adjusted based on historical data and the current time period. If Mr. Zhang usually has a high frequency of payment behavior between 9 pm and 10 pm, a relatively longer time window may be set for him, such as 20 minutes. If there is no payment behavior between 1 am and 2 am, even if he unlocks and collects facial information during this time period, a shorter time window, such as 30 seconds, will be set.

[0091] According to an embodiment of the present disclosure, the user's historical password-free payment behavior and time period are taken as a basis, and the length of the time window is adjusted according to the number of password-free payment behaviors in the current time period, so that the length of the time window is more in line with the user's personal transaction habits, which can enhance security and provide personalized services based on user habits.

[0092] Figure 5 The flowchart of setting a time window by a first server according to another embodiment of the present disclosure is schematically shown.

[0093] like Figure 5 As shown, this embodiment includes:

[0094] In operation S510, payment environment information sent by the terminal device is obtained;

[0095] The payment environment information includes relevant environment information when the user makes a payment, such as location, network status, transaction device type, etc. For example, the GPS location information when the user uses a mobile phone to pay in a coffee shop.

[0096] In operation S520, a time window is set according to the payment environment information and the timestamp corresponding to the payment authentication information.

[0097] For example, a user starts the payment process at a merchant using his mobile terminal device. At this step, the user may need to open the payment application and initiate the payment operation, such as by scanning a code or near field communication (NFC). When the user clicks the payment button, the terminal device will send data containing payment environment information to the first server. The payment environment information here may include payment location, terminal device information, network status, etc. After receiving the payment environment information, the payment server sets a time window based on the timestamp corresponding to the payment authentication information. This time window is used to limit the time range in which the password-free payment operation occurs.

[0098] For example, the first server may perform a risk assessment on the payment environment information. In a commonly used payment environment, if the risk is low, a longer time window may be set starting from the timestamp corresponding to the payment authentication information; otherwise, a shorter time window may be set.

[0099] According to the embodiments of the present disclosure, a matching time window is set considering the payment environment, thereby improving the security of the transaction.

[0100] Figure 6 A flowchart for providing password-free transaction authority according to an embodiment of the present disclosure is schematically shown.

[0101] like Figure 6 As shown, this embodiment includes:

[0102] In operation S610, the terminal device generates a password-free transaction permission according to the password-free transaction authorization behavior of the user at the terminal device;

[0103] For example, a password-free transaction authorization button is provided on the payment software settings page, and the password-free transaction authorization behavior can be that the user turns on the button. Password-free transaction permission means that the user can set the permission for a specific transaction to be completed without entering a password. For example, the user can set a certain amount of transaction to be paid directly without a password.

[0104] In operation S620, the terminal device obtains pre-stored authentication information representing the user identity in response to the password-free transaction authority; the pre-stored authentication information may be obtained in real time in operation S620.

[0105] When the user opens the password-free transaction authorization button, information representing the user's identity, such as facial information, can be obtained accordingly to confirm the user's identity and send it to the first server for pre-storage.

[0106] In operation S630, the terminal device sends the password-free transaction authority and the pre-stored authentication information to the first server.

[0107] In operation S640, the first server receives the password-free transaction authority and pre-stored authentication information sent by the terminal device;

[0108] In operation S650, the first server stores the password-free transaction authority and pre-stored authentication information sent by the terminal device.

[0109] According to the embodiments of the present disclosure, the password-free transaction authority and authentication information are sent to the server and stored, further ensuring that the password-free payment is made with the user's password-free transaction authorization. This allows for quick verification of the user's identity in subsequent transactions, thereby improving transaction security.

[0110] Figure 7 The flowchart of encrypted transmission according to an embodiment of the present disclosure is schematically shown.

[0111] like Figure 7 As shown, this embodiment includes:

[0112] In operation S710, the terminal device calls the private key and the public key of the first server to encrypt the non-confidential transaction authority and pre-stored authentication information to obtain an authority file; the first encryption indicates that the information comes from the terminal device, and the second encryption ensures that the information can only be decoded by the first server, thereby ensuring the security of the information.

[0113] In operation S720, the terminal device sends the authority file to the first server;

[0114] In operation S730, the first server receives the authority file sent by the terminal device;

[0115] In operation S740, the private key decryption authority file of the first server is called to obtain the password-free transaction authority and the pre-stored authentication information.

[0116] Exemplarily, the terminal device and the first server both generate a pair of public-private key pairs. In some embodiments, the terminal device or the first server may use an RSA encryption algorithm to generate the public-private key pair. In other embodiments, the terminal device or the first server may use a chaotic encryption algorithm to generate the public-private key pair.

[0117] Chaos algorithm is an optimization algorithm based on chaos theory. It uses the randomness, unpredictability and highly sensitive initial conditions of chaotic systems to perform global search and optimization. The algorithm is used in this solution to effectively prevent illegal attackers from deciphering transaction files, permission files, and backup files to obtain user identity information. Chaos algorithm is a commonly used algorithm in this field. The specific configuration method is not given here. For ease of understanding, the following simple configuration method is provided. The configuration method of the chaos algorithm may include the following steps:

[0118] 1: Select a chaotic map, such as the Logistic map, and determine its parameters.

[0119] 2: Use a one-way hash function to hash the key into the iterative initial value of the chaotic map.

[0120] 3: Set the number of iterations and the method of using the chaotic sequence, such as starting to use it after several iterations.

[0121] 4: Map the iteratively generated chaotic sequence value to ASCII code and perform XOR operation with the plaintext data byte by byte to obtain the ciphertext. When decrypting, it is the reverse operation.

[0122] In some embodiments, the public keys of the terminal device and the first server can be uploaded to the blockchain network, the private key of the terminal device is stored by the terminal device itself, and the private key of the first server is stored by the first server itself; for example, the encryption algorithm is stored in the blockchain network. The terminal device downloads the encryption algorithm from the blockchain network and generates a pair of public-private key pairs He and Hu, where He is the private key of the terminal device and Hu is the public key of the terminal device. Hu is sent to the blockchain network and saved on the blockchain network. The first server downloads the encryption algorithm from the blockchain network and generates a pair of public-private key pairs Pe and Pu, where Pe is the private key of the first server and Pu is the public key of the first server. The public key Pu is sent to the blockchain network for storage.

[0123] According to the embodiments of the present disclosure, asymmetric encryption is used to improve the transmission security of permission data; the first server can audit the permission file, but cannot generate the permission file, which can prevent it from being hijacked and forged.

[0124] Figure 8 The flowchart of encrypted transmission according to another embodiment of the present disclosure is schematically shown.

[0125] like Figure 8 As shown, this embodiment includes:

[0126] In operation S810, the terminal device uses the private key and the public key of the first server to encrypt the transaction request, the transaction timestamp and the device information to obtain a transaction file;

[0127] In operation S820, the terminal device sends the transaction file to the first server;

[0128] In operation S830, the first server receives the transaction file sent by the terminal device;

[0129] In operation S840, the private key of the first server is called to decrypt the transaction file to obtain a transaction request.

[0130] According to the embodiments of the present disclosure, asymmetric encryption is used to improve the transmission security of permission data; the first server can review the transaction file, but cannot generate the transaction file, which can prevent it from being hijacked and forged.

[0131] In some embodiments, after calling the private key of the first server to decrypt the transaction file, the transaction timestamp and the device information of the terminal device are also obtained, and querying the user's time window based on the user information includes: querying the user's time window based on the device information and the user information, wherein the user's time window is bound to the device information and the user information.

[0132] When initiating a transaction, the user does not need to enter a transaction password, but only needs to submit a transaction request. The terminal device automatically integrates the transaction request, terminal device information and transaction timestamp, and encrypts them to generate a transaction file. Subsequently, the file is securely sent to the first server. After receiving the transaction file, the first server will parse the information therein and first determine whether the transaction meets the password-free condition. If the condition is met, the password-free payment operation is performed.

[0133] To further increase security, the information generated in the permission file also includes the device information of the terminal device. Each terminal device has a device number that is used to indicate the identity of the terminal device. By integrating the device information in the permission file, it is possible to verify whether the transaction file and the permission file are issued by the same device when verifying whether to execute a password-free transaction. After each time window is set, the time window, device information, and user information are stored together.

[0134] Existing terminal devices usually do not store fingerprint data for each verification when verifying biometric information. They only compare the acquired fingerprint information with the stored template information. If the match is successful, the user will obtain the corresponding permission; if the match fails, the permission will not be granted. The fingerprint information obtained during each verification process will not be saved for a long time, and at most only a brief log record will be generated for operation tracking. However, these log information is not detailed enough for later tracing. On the other hand, if the fingerprint information for each verification is saved in the terminal device, it will take up a lot of storage resources, which will affect the user experience.

[0135] In the actual transaction process, password-free payment is actually a service provided by a third-party information service company to users, rather than a service provided by the user's bank. Therefore, it is very likely that such third-party information service companies use user information to generate renewal permission files and transaction files, and then generate false backup files, so that the dishonest party cannot be found when a transaction dispute occurs.

[0136] In some embodiments, if the transaction timestamp of the transaction is within the time window, it also includes: calling the private key of the first server to encrypt the authority file and the transaction file to obtain a backup file; and storing the backup file in the distributed file storage system of the blockchain.

[0137] For example, the blockchain can be a consortium blockchain. In order to prevent the first server or the company of the first server from being independently responsible for all the servers of the blockchain network, many of the servers that make up the blockchain network need to be operated by banks, thus forming a relatively open blockchain network. This prevents the company where the first server is located from tampering with the content on the blockchain network.

[0138] In some embodiments, the password-free payment system 100 may further include a blockchain network. The terminal device is connected to the blockchain network and the cloud server respectively, and the cloud server is connected to the blockchain network; the password-free payment system based on blockchain technology completes the password-free payment based on the above-mentioned password-free payment method.

[0139] According to an embodiment of the present disclosure, a corresponding backup file is generated in a distributed file storage system of the blockchain, which is used to prevent the cloud server from making changes to the transaction file and the permission file at a later time, thereby achieving transaction traceability.

[0140] Based on the above-mentioned password-free payment method for the first server, the present disclosure also provides a password-free payment device for the first server. Fig. 9 The device is described in detail.

[0141] This process ensures that when the transaction is subsequently verified, complete and tamper-proof data can be downloaded from the blockchain network for comparison, greatly enhancing the security and traceability of the transaction.

[0142] Fig. 9 The structural block diagram of the password-free payment device for the first server according to an embodiment of the present disclosure is schematically shown.

[0143] like Fig. 9 As shown, the password-free payment device 900 for the first server of this embodiment includes:

[0144] The request receiving module 910 is used to receive a transaction request sent by a terminal device, wherein the transaction request includes transaction information and user information associated with the transaction, and the transaction includes a direct payment transaction from the user to the payee;

[0145] A window query module 920, configured to query a user's time window according to the user information, wherein the time window is preset according to the time when the terminal device sends payment authentication information to the first server, and the payment authentication information is used to represent the identity of the user;

[0146] A password-free payment execution module 930 is used to execute a password-free payment operation to the payee according to the transaction information if the transaction timestamp of the transaction is within the time window;

[0147] The result sending module 940 returns the execution result of the password-free payment operation to the terminal device.

[0148] Based on the above-mentioned password-free payment method for terminal devices, the present disclosure also provides a password-free payment device for terminal devices. Fig.10 The device is described in detail.

[0149] Fig.10 The structural block diagram of the password-free payment apparatus for a terminal device according to an embodiment of the present disclosure is schematically shown.

[0150] like Fig.10 As shown, the password-free payment device 1000 for a terminal device of this embodiment includes:

[0151] A request sending module 1010, configured to send a transaction request to the first server in response to a direct payment transaction from a user to a payee, wherein the transaction request includes transaction information and user information associated with the transaction;

[0152] The result receiving module 1020 is used to receive the execution result of the password-free payment operation sent by the first server.

[0153] In some embodiments, the password-free transaction system includes a password-free payment device 900 for a first server and a password-free payment device 1000 for a terminal device.

[0154] In the technical solution provided by the present disclosure, the password-free transaction system first uses the password-free transaction permission to obtain the permission to obtain the biometric information of the terminal device. In the process of using the terminal device, the user inevitably needs to input permission information to the terminal device; for example, input fingerprint information to the terminal device to unlock the screen lock of the terminal device, and also need to input fingerprint information when viewing certain permission files of the terminal device, or when opening certain specific software, it is also necessary to input fingerprint information. In this solution, the time window for opening password-free payment is obtained based on the obtained fingerprint information, thereby ensuring that the person who controls the terminal device for password-free payment is the payee himself, thereby avoiding transaction disputes caused by the inability to understand whether the password-free transaction is operated by the payee himself during the password-free transaction.

[0155] For the parts not mentioned in the device part, they can be understood with reference to the various embodiments of the above method. That is, the device part includes modules for executing the various steps of any one of the method embodiments described above. In addition, the implementation methods, technical problems solved, functions implemented, and technical effects achieved of each module / unit / subunit, etc. in the device part embodiment are respectively the same or similar to the implementation methods, technical problems solved, functions implemented, and technical effects achieved of each corresponding step in the method part embodiment, and will not be repeated here.

[0156] According to an embodiment of the present disclosure, any multiple modules in the password-free payment device 900 or the password-free payment device 1000 can be combined into one module for implementation, or any one of the modules can be split into multiple modules. Alternatively, at least part of the functions of one or more of these modules can be combined with at least part of the functions of other modules and implemented in one module.

[0157] According to an embodiment of the present disclosure, at least one of the password-free payment device 900 or the password-free payment device 1000 may be at least partially implemented as a hardware circuit, such as a field programmable gate array (FPGA), a programmable logic array (PLA), a system on a chip, a system on a substrate, a system on a package, an application-specific integrated circuit (ASIC), or may be implemented by hardware or firmware in any other reasonable manner of integrating or packaging the circuit, or in any one of the three implementation methods of software, hardware and firmware, or in an appropriate combination of any of them. Alternatively, at least one of the password-free payment device 900 or the password-free payment device 1000 may be at least partially implemented as a computer program module, and when the computer program module is run, the corresponding function may be executed.

[0158] Fig.11 A block diagram of a terminal device suitable for implementing a password-free payment method according to an embodiment of the present disclosure is schematically shown.

[0159] like Fig.11 As shown, the terminal device 1100 according to an embodiment of the present disclosure includes a processor 1101, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 1102 or a program loaded from a storage part 1108 to a random access memory (RAM) 1103. The processor 1101 may include, for example, a general-purpose microprocessor (such as a CPU), an instruction set processor and / or a related chipset and / or a dedicated microprocessor (for example, an application-specific integrated circuit (ASIC)), etc. The processor 1101 may also include an onboard memory for caching purposes. The processor 1101 may include a single processing unit or multiple processing units for performing different actions of the method flow according to an embodiment of the present disclosure.

[0160] In RAM 1103, various programs and data required for the operation of terminal device 1100 are stored. Processor 1101, ROM 1102 and RAM 1103 are connected to each other through bus 1104. Processor 1101 performs various operations of the method flow according to the embodiment of the present disclosure by executing the program in ROM 1102 and / or RAM 1103. It should be noted that the program can also be stored in one or more memories other than ROM 1102 and RAM 1103. Processor 1101 can also perform various operations of the method flow according to the embodiment of the present disclosure by executing the program stored in one or more memories.

[0161] According to an embodiment of the present disclosure, the terminal device 1100 may further include an input / output (I / O) interface 1105, which is also connected to the bus 1104. The terminal device 1100 may further include one or more of the following components connected to the I / O interface 1105: an input portion 1106 including a keyboard, a mouse, etc.; an output portion 1107 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage portion 1108 including a hard disk, etc.; and a communication portion 1109 including a network interface card such as a LAN card, a modem, etc. The communication portion 1109 performs communication processing via a network such as the Internet. A drive 1110 is also connected to the I / O interface 1105 as needed. A removable medium 1111, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 1110 as needed, so that a computer program read therefrom is installed into the storage portion 1108 as needed.

[0162] The present disclosure also provides a computer-readable storage medium, which may be included in the device / apparatus / system described in the above embodiments; or may exist independently without being assembled into the device / apparatus / system. The above computer-readable storage medium carries one or more programs, and when the above one or more programs are executed, the method according to the embodiment of the present disclosure is implemented.

[0163] According to an embodiment of the present disclosure, a computer-readable storage medium may be a non-volatile computer-readable storage medium, for example, may include but is not limited to: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system, an apparatus, or a device. For example, according to an embodiment of the present disclosure, a computer-readable storage medium may include the ROM 1102 and / or RAM 1103 described above and / or one or more memories other than ROM 1102 and RAM 1103.

[0164] The embodiment of the present disclosure also includes a computer program product, which includes a computer program, and the computer program contains program code for executing the method shown in the flowchart. When the computer program product is run in a computer system, the program code is used to enable the computer system to implement the method provided by the embodiment of the present disclosure.

[0165] The above functions defined in the system / device of the embodiment of the present disclosure are performed when the computer program is executed by the processor 1101. According to the embodiment of the present disclosure, the system, device, module, unit, etc. described above can be implemented by a computer program module.

[0166] In one embodiment, the computer program may rely on tangible storage media such as optical storage devices, magnetic storage devices, etc. In another embodiment, the computer program may also be transmitted and distributed in the form of signals on a network medium, and downloaded and installed through the communication part 1109, and / or installed from a removable medium 1111. The program code contained in the computer program may be transmitted using any appropriate network medium, including but not limited to: wireless, wired, etc., or any suitable combination of the above.

[0167] In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 1109, and / or installed from the removable medium 1111. When the computer program is executed by the processor 1101, the above functions defined in the system of the embodiment of the present disclosure are performed. According to the embodiment of the present disclosure, the system, device, means, module, unit, etc. described above can be implemented by a computer program module.

[0168] According to an embodiment of the present disclosure, the program code for executing the computer program provided by the embodiment of the present disclosure can be written in any combination of one or more programming languages. Specifically, these computing programs can be implemented using high-level process and / or object-oriented programming languages, and / or assembly / machine languages. Programming languages ​​include, but are not limited to, Java, C++, python, "C" language or similar programming languages. The program code can be executed entirely on the user computing device, partially on the user device, partially on the remote computing device, or entirely on the remote computing device or server. In the case of a remote computing device, the remote computing device can be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computing device (for example, using an Internet service provider to connect through the Internet).

[0169] The embodiments of the present disclosure are described above. However, these embodiments are only for illustrative purposes and are not intended to limit the scope of the present disclosure. Although the embodiments are described above separately, this does not mean that the measures in the various embodiments cannot be used in combination to advantage. The scope of the present disclosure is defined by the attached claims and their equivalents. Without departing from the scope of the present disclosure, those skilled in the art may make a variety of substitutions and modifications, which should all fall within the scope of the present disclosure.

Claims

1. A password-free payment method, characterized in that: For a first server, the method comprises: Receiving a transaction request sent by a terminal device, wherein the transaction request includes transaction information and user information associated with the transaction, and the transaction includes a direct payment transaction from a user to a payee; querying a time window of the user according to the user information, wherein the time window is preset according to a time when the terminal device sends payment authentication information to the first server, the payment authentication information being used to characterize the identity of the user; If the transaction timestamp of the transaction is within the time window, performing a password-free payment operation to the payee according to the transaction information; The execution result of the password-free payment operation is returned to the terminal device.

2. The method according to claim 1, characterized in that Before querying the time window of the user according to the user information, presetting the time window includes: Receiving the payment authentication information and the corresponding timestamp sent by the terminal device, wherein, with the authorization of the user, the terminal device is configured to obtain the payment authentication information and the corresponding timestamp before the transaction occurs; Comparing the payment authentication information with pre-stored authentication information to obtain a comparison result, the pre-stored authentication information being pre-sent by the terminal device to the first server; When the comparison result is passed, the time window is set based on the timestamp corresponding to the payment authentication information.

3. The method according to claim 2, characterized in that After setting the time window based on the timestamp corresponding to the payment authentication information, the method further includes: Sending the time window to the terminal device, the terminal device being configured to reacquire and send the payment authentication information and the corresponding timestamp after the time window ends; The first server is used to re-execute the operation of pre-setting the time window, wherein the time lengths of any two time windows are the same or different.

4. The method according to claim 3, characterized in that Setting the time window based on the timestamp corresponding to the payment authentication information includes: Acquire historical data of the user's password-free payment, the historical data including the user's password-free payment behavior within a specific time interval in the past and the corresponding time period; Determine the current time period to which the timestamp corresponding to the payment authentication information belongs; The time window is set according to the number of password-free payment behaviors in the current time period.

5. The method according to claim 3 or 4, characterized in that: Setting the time window based on the timestamp corresponding to the payment authentication information includes: Obtaining payment environment information sent by the terminal device; The time window is set according to the payment environment information and the timestamp corresponding to the payment authentication information.

6. The method according to claim 2, characterized in that Before comparing the payment authentication information with the pre-stored authentication information, the method further includes: Receiving the password-free transaction authority and the pre-stored authentication information sent by the terminal device; The password-free transaction authority is generated according to the password-free transaction authorization behavior of the user on the terminal device, and the pre-stored authentication information includes information representing the user identity obtained by the terminal device in response to the password-free transaction authority.

7. The method according to claim 6, characterized in that Receiving the password-free transaction authority and the pre-stored authentication information sent by the terminal device includes: Receiving a permission file sent by the terminal device, wherein the permission file is encrypted by a private key of the terminal device and a public key of the first server; The private key of the first server is called to decrypt the authority file to obtain the password-free transaction authority and the pre-stored authentication information.

8. The method according to claim 7, characterized in that The transaction request sent by the receiving terminal device includes: receiving a transaction file sent by the terminal device, wherein the transaction file is encrypted by a private key of the terminal device and a public key of the first server; The private key of the first server is called to decrypt the transaction file to obtain the transaction request.

9. The method according to claim 8, characterized in that If the transaction timestamp of the transaction is within the time window, the method further includes: Calling the private key of the first server to encrypt the authority file and the transaction file to obtain a backup file; The backup file is stored in the distributed file storage system of the blockchain.

10. A password-free payment method, characterized in that: For a terminal device, the method comprises: In response to a direct payment transaction from a user to a payee, sending a transaction request to a first server, wherein the transaction request includes transaction information and user information associated with the transaction; Receive an execution result of the password-free payment operation sent by the first server, wherein the first server is configured to execute the method according to any one of claims 1 to 9 to obtain the execution result of the password-free payment operation.

11. The method according to claim 10, characterized in that Before receiving the execution result of the password-free payment operation sent by the first server, With the authorization of the user, obtaining payment authentication information and a corresponding timestamp before the transaction occurs; The payment authentication information and the corresponding timestamp are sent to the first server, and the first server is configured to set the time window based on the timestamp corresponding to the payment authentication information after the payment authentication information is compared with the pre-stored authentication information.

12. The method according to claim 11, characterized in that After sending the payment authentication information and the corresponding timestamp to the first server, the method further includes: Receiving the time window sent by the first server; After the time window ends, the payment authentication information and the corresponding timestamp are re-acquired and sent, and the first server is used to re-execute the operation of pre-setting the time window, wherein the time lengths of any two time windows are the same or different.

13. The method according to claim 11, characterized in that Before obtaining the payment authentication information and the corresponding timestamp, the method further includes: Generate a password-free transaction permission based on the user's password-free transaction authorization behavior on the terminal device; In response to the password-free transaction authority, obtaining pre-stored authentication information representing the identity of the user; The password-free transaction authority and the pre-stored authentication information are sent to the first server.

14. A password-free transaction system, characterized in that: include: A terminal device, configured to execute the method of any one of claims 10 to 13 in response to a direct payment transaction from a user to a payee; as well as The first server is configured to receive a transaction request sent by the terminal device and execute the method according to any one of claims 1 to 9.

15. A terminal device, comprising: one or more processors; a memory for storing one or more computer programs, It is characterized in that the one or more processors execute the one or more computer programs to implement the steps of the method according to any one of claims 1 to 13.

16. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 13 are implemented.

17. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 13 are implemented.

Images