Smart card transaction prevention and control method, device, storage medium and computer equipment

Abstract

The present application provides a smart card transaction prevention and control method, device, storage medium and computer equipment, which is applied to visual smart cards and POS terminals, wherein the visual smart card includes a financial chip, an RFID chip and a display module, wherein the visual smart card communicates data with the financial chip through the RFID chip, and communicates contactlessly with the terminal, therefore, after the financial chip is brought close to the terminal to read the card data once, the RFID chip can be used to securely transfer transaction-related data and verification codes between the financial chip and the terminal, and further confirm the transaction information through the display module. Therefore, based on the setting of the RFID chip and the display module in the card, the transaction prevention and control method of the present application can bypass the contactless communication between the financial chip and the terminal through the RFID chip, making it impossible to take relay attacks into account, and enhance the security and controllability of the transaction through the display module, thereby improving the effectiveness of transaction prevention and control.

Description

Technical Field

[0001] The present application relates to the field of transaction security technology, and in particular to a smart card transaction prevention and control method, device, storage medium and computer equipment. Background Art

[0002] Since the birth of bank cards, transaction security has attracted much attention from card groups, banks and users. In order to improve security, bank cards have transitioned from magnetic stripe cards to widely used chip cards. Chip cards store data through built-in financial chips, and with the continuous upgrading of chip technology and the addition of anti-attack codes in software, security performance has been significantly improved, effectively reducing the risk of fraudulent use caused by leakage of magnetic stripe information.

[0003] The current transaction prevention and control methods for chip card relay attacks mainly rely on the RRP protocol. The core of this protocol is that after the GPO command is executed, the payment terminal will send an ERRD command to the card. After receiving this command, the card will perform a series of specific operations and respond. The terminal starts the timer before sending the ERRD command and stops the timer after receiving the card's response, thereby calculating the time required for the card to execute ERRD. This time is compared with the preset threshold. If it exceeds the threshold three times in a row, it is considered that there is a relay attack. The terminal will terminate the transaction or report it to the issuing bank, and the issuing bank will decide whether to continue the transaction.

[0004] However, in actual application, this transaction prevention and control method may be affected by many factors, resulting in inaccurate calculation of the timing time, and then misjudging the relay attack. For example, the distance between the card and the payment terminal and the medium between the two may extend the time for the card to perform ERRD, causing it to exceed the threshold, thereby affecting the accuracy of the relay attack judgment and reducing the effectiveness of transaction prevention and control. Summary of the invention

[0005] The purpose of this application is to solve at least one of the above-mentioned technical defects, especially the technical defect that the timing time of the transaction prevention and control method in the prior art is inaccurately calculated, thereby affecting the accuracy of the judgment of relay attacks and reducing the effectiveness of transaction prevention and control.

[0006] The present application provides a smart card transaction prevention and control method, which is applied to a prevention and control system, wherein the prevention and control system includes a visual smart card and a POS terminal, wherein the visual smart card includes a financial chip, an RFID chip, and a confirmation module; the method includes:

[0007] When it is detected that the visual smart card is close to the POS terminal for transaction, the card data of the financial chip is read by the POS terminal, and the transaction information of the transaction is generated and sent to the financial chip;

[0008] After a transaction signal carrying the transaction information is generated in the financial chip, it is sent to the POS terminal; and after a transaction confirmation verification code corresponding to the transaction information is generated, it is stored in the RFID chip;

[0009] The transaction signal is parsed by the POS terminal, and when a transaction confirmation flag is present in the parsing result, a read confirmation request is sent to the RFID chip;

[0010] When a confirmation signal sent by the user through the confirmation module is monitored based on the read confirmation request, the transaction confirmation verification code in the RFID chip is sent to the POS terminal, and the POS terminal is used to complete the transaction based on the card data, the transaction information and the transaction confirmation verification code to generate a transaction result.

[0011] Optionally, the POS terminal includes an NFC antenna;

[0012] The step of reading the card data of the financial chip through the POS terminal and generating transaction information of the transaction and returning it to the financial chip includes:

[0013] Establishing a communication channel between the POS terminal and the financial chip through the NFC antenna;

[0014] In the POS terminal, a card reading request is sent to the financial chip through the communication channel, the card data returned by the financial chip is obtained, and transaction information of the transaction is generated and sent to the financial chip through the communication channel.

[0015] Optionally, generating a transaction signal carrying the transaction information in the financial chip includes:

[0016] Confirm the transaction flag of the financial chip and the chip ID of the RFID chip;

[0017] Generate a transaction signal according to the transaction flag, the chip ID and the transaction information;

[0018] Among them, the transaction flag includes a transaction confirmation flag and a direct transaction flag; the transaction confirmation flag indicates that the transaction needs to be entered after external confirmation; the direct transaction flag indicates that the transaction can be entered directly without external confirmation.

[0019] Optionally, the POS terminal includes an RFID antenna;

[0020] The step of parsing the transaction signal by the POS terminal and sending a read confirmation request to the RFID chip when a transaction confirmation flag is present in the parsing result includes:

[0021] Parsing the transaction signal through the POS terminal to obtain a transaction flag and a chip ID, and confirming a flag type of the transaction flag;

[0022] A communication channel between the POS terminal and the RFID chip is established based on the chip ID using the RFID antenna, and when the flag type is a transaction confirmation flag, a read confirmation request is sent to the RFID chip based on the communication channel in the POS terminal.

[0023] Optionally, the method further comprises:

[0024] When the flag type is a direct transaction flag, the transaction confirmation verification code stored in the RFID chip is directly read based on the communication channel.

[0025] Optionally, the using the POS terminal to complete the transaction based on the card data, the transaction information and the transaction confirmation verification code to generate a transaction result includes:

[0026] Confirm the payment backend of the issuing bank corresponding to the card data;

[0027] The transaction information and the transaction confirmation verification code are sent to the payment backend of the card issuing bank through the POS terminal, so that the payment backend of the card issuing bank performs the transaction according to the transaction information and determines whether the transaction confirmation verification code is consistent with the pre-generated target verification code;

[0028] If they are consistent, the transaction is approved and a transaction result including a successful transaction is returned;

[0029] If they are inconsistent, the transaction is terminated and a transaction result including transaction failure is returned.

[0030] Optionally, the visual smart card further includes an energy storage capacitor and a display module; and the method further includes:

[0031] After acquiring the transaction information or transaction result sent by the POS terminal, the energy storage capacitor is used for enabling, and the transaction information or the transaction result is displayed on the display module.

[0032] The present application also provides a smart card transaction prevention and control device, which is applied to a prevention and control system, wherein the prevention and control system includes a visual smart card and a POS terminal, wherein the visual smart card includes a financial chip, an RFID chip and a confirmation module; the device includes:

[0033] An information generation module, configured to read the card data of the financial chip through the POS terminal when it is detected that the visual smart card is close to the POS terminal for transaction, and generate transaction information of the transaction and send it to the financial chip;

[0034] A verification code storage module, used to generate a transaction signal carrying the transaction information in the financial chip and send it to the POS terminal, and to generate a transaction confirmation verification code corresponding to the transaction information and store it in the RFID chip;

[0035] A signal analysis module, used to analyze the transaction signal through the POS terminal, and send a read confirmation request to the RFID chip when there is a transaction confirmation flag in the analysis result;

[0036] The transaction execution module is used to send the transaction confirmation verification code to the POS terminal through the RFID chip when monitoring the confirmation signal sent by the user through the confirmation module based on the read confirmation request, and use the POS terminal to complete the transaction based on the card data, the transaction information and the transaction confirmation verification code to generate a transaction result.

[0037] The present application also provides a storage medium, in which computer-readable instructions are stored. When the computer-readable instructions are executed by one or more processors, the one or more processors execute the steps of the smart card transaction prevention and control method as described in any of the above embodiments.

[0038] The present application also provides a computer device, characterized in that it includes: one or more processors, and a memory;

[0039] The memory stores computer-readable instructions, and when the computer-readable instructions are executed by the one or more processors, the steps of the smart card transaction prevention and control method described in any one of the above embodiments are performed.

[0040] It can be seen from the above technical solutions that the embodiments of the present application have the following advantages:

[0041] The smart card transaction prevention and control method, device, storage medium and computer equipment provided by the present application are applied to a prevention and control system composed of a visual smart card and a POS terminal, wherein the visual smart card includes a financial chip, an RFID chip and a confirmation module. Here, the present application uses an independent RFID chip in the visual smart card to communicate data with the financial chip and non-contact communication with the POS terminal. Therefore, the financial chip only needs to be close to the POS terminal once. After the card data is read, the RFID chip can be used as the second communication protocol channel to securely transmit transaction-related data and transaction confirmation verification codes between the financial chip and the POS terminal. Before the transaction is carried out, the user can further confirm the transaction information through the confirmation module, thereby improving the controllability of the transaction. Therefore, based on the setting of the RFID chip and the display module in the visual smart card, the smart card transaction prevention and control method of the present application can bypass the non-contact communication between the financial chip and the POS terminal through the RFID chip, so that relay attacks cannot be taken into account, and the security and controllability of the transaction are enhanced through the display module, thereby improving the effectiveness of transaction prevention and control. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0043] Figure 1 A schematic diagram of the structure of a prevention and control system provided in an embodiment of the present application;

[0044] Figure 2 A flowchart of a smart card transaction prevention and control method provided in an embodiment of the present application;

[0045] Figure 3 A flowchart of a transaction process performed by a POS terminal provided in an embodiment of the present application;

[0046] Figure 4 A schematic diagram of the structure of a smart card transaction prevention and control device provided in an embodiment of the present application;

[0047] Figure 5 A schematic diagram of the internal structure of a computer device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0048] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0049] Current transaction prevention and control methods may be affected by a variety of factors in actual applications, resulting in inaccurate calculation of the timing time, and thus misjudgment of relay attacks. For example, the distance between the card and the payment terminal and the medium between the two may extend the time it takes for the card to perform ERRD, causing it to exceed the threshold, thereby affecting the accuracy of the judgment of relay attacks and reducing the effectiveness of transaction prevention and control.

[0050] Based on this, this application proposes the following technical solutions, see below for details:

[0051] In one embodiment, Figure 1 As shown, Figure 1 A schematic diagram of a prevention and control system provided in an embodiment of the present application; the smart card transaction prevention and control method provided in the present application can be applied to Figure 1 In the prevention and control system shown, the prevention and control system is composed of a visual smart card and a POS terminal, wherein the visual smart card includes a financial card, an RFID chip, a storage capacitor, a confirmation module and a display module. The confirmation module here can use a button, and the display module can use an electronic paper screen, and each module performs a corresponding function; and the POS terminal can exchange data with the POS terminal through the NFC antenna and the RFID antenna.

[0052] Specifically, the independent RFID chip in the visual smart card communicates data with the financial chip and non-contacts with the POS terminal. During the transaction, the financial chip only needs to be close to the POS terminal once. After the card data is read, the RFID chip can be used as the second communication protocol channel to securely transmit transaction-related data and transaction confirmation verification codes between the financial chip and the POS terminal. Before the transaction, the user can further confirm the transaction information by pressing a button, thereby improving the controllability of the transaction. In addition, the visual smart card can also be enabled by energy storage capacitors to display data on the electronic paper screen, thereby realizing the visibility of the smart card.

[0053] Based on the above-mentioned prevention and control system, after the POS terminal initiates a transaction to the visual smart card and provides transaction information, the visual smart card can display the corresponding transaction information on the electronic paper screen and return the necessary data, so that the POS terminal continues to send and read the information of the RFID chip until the user, that is, the cardholder, confirms and approves the transaction by pressing a button. The POS terminal can upload the read information to the issuing bank's backend for the transaction and return the final result, so that a complete smart card transaction process can be completed in the prevention and control system.

[0054] In one embodiment, Figure 2 As shown, Figure 2 A flow chart of a smart card transaction prevention and control method provided in an embodiment of the present application; the present application also provides a smart card transaction prevention and control method, which is applied to Figure 1 The prevention and control system shown in the example includes the following:

[0055] S110: When it is detected that the visual smart card is close to the POS terminal for transaction, the card data of the financial chip is read by the POS terminal, and transaction information of the transaction is generated and sent to the financial chip.

[0056] In this step, in the transaction scenario, the user can hold the visual smart card close to the card reading area of ​​the POS terminal to perform a card swipe transaction. Figure 1 As shown, the transaction parties can input the transaction amount in the POS terminal in advance so that the POS terminal can initiate the transaction. At this time, the computer device can detect the surroundings through the POS terminal until the visual smart card is detected, read the card data of the visual smart card, and generate transaction information according to the transaction amount pre-entered in the POS terminal, and send the transaction information to the financial chip of the visual smart card, thereby realizing the initial connection between the POS terminal and the visual smart card, providing a data basis for the subsequent transaction process.

[0057] Among them, the visual smart card can be a bank card, which in this application can refer to a chip card with visualization function. The financial chip refers to a key smart chip embedded in the visual smart card, which is specially used to store and process financial-related data, such as card data, historical transaction information, etc. The POS terminal refers to a device used for payment transactions. It supports various payment methods such as swiping cards, NFC payment, QR code scanning, etc. by connecting to the bank backend or payment network, and completes the payment transaction by reading the data in the financial chip of the smart card.

[0058] Specifically, after the transaction party enters the transaction amount in the POS terminal to initiate the transaction, the computer device can continuously detect the surrounding cards through the POS terminal, and when a visual smart card is detected, the computer device reads the card data of the visual smart card from the financial chip, including account information, card ID, transaction key and other data. At the same time, since the POS terminal can have a built-in GPS chip, the computer device can determine the transaction location of the POS terminal through the GPS chip, and obtain the current transaction time, and then generate the transaction information of the current transaction according to the transaction amount, transaction location and transaction time, and send it to the financial chip, so that the visual smart card can store and further process the transaction information through the financial chip, so as to conduct data tracking and backtracking of the transaction information of the visual smart card later.

[0059] Furthermore, the visual smart card of the present application can implant a set of anti-tampering authentication keys in the financial chip. Whenever the financial chip conducts a financial transaction, the financial chip will first perform security verification through the anti-tampering authentication key, and perform subsequent transaction operations after the verification is passed. Once it is detected that the financial chip has been illegally disassembled, the anti-tampering authentication key in the financial chip will not be able to match the authentication key preset in the visual smart card, and then effective verification cannot be performed. Therefore, when the financial chip conducts a financial transaction again, the security verification will fail, thereby terminating the subsequent transaction.

[0060] S120: After a transaction signal carrying transaction information is generated in the financial chip, it is sent to the POS terminal, and after a transaction confirmation verification code corresponding to the transaction information is generated, it is stored in the RFID chip.

[0061] In this step, after the financial chip receives the transaction information in step S110, the computer device can generate a transaction signal carrying the transaction information in the financial chip and send the transaction signal to the POS terminal. At the same time, the computer device can also generate a transaction confirmation verification code corresponding to the transaction information and store it in the RFID chip.

[0062] Among them, the transaction confirmation verification code refers to a digital or alphabetic code used to verify the authenticity and security of a transaction. It is usually generated by a financial chip and is used to ensure the correctness of the transaction and prevent the transaction from being tampered with. It is sent to the POS terminal for verification as part of the transaction.

[0063] Specifically, during a financial transaction, when the financial chip receives transaction information from a POS terminal, it can obtain corresponding key data according to the transaction processing logic of the prevention and control system, such as a transaction flag used to determine whether additional external confirmation by the user, the chip ID of the RFID chip, and other key data. These key data are then encrypted together with the transaction information to generate a transaction signal carrying complete transaction information, and the signal is sent to the POS terminal, so that the POS terminal can implement the transaction processing logic of the prevention and control system based on the key data in the transaction information, thereby improving the security and legality of the financial transaction process.

[0064] In addition, the computer device can also encrypt the transaction information according to the encryption algorithm preset in the financial chip to generate a unique transaction confirmation verification code. The transaction confirmation verification code can be jointly generated by factors such as transaction information, encryption key and random number, and is unpredictable and unique, thereby ensuring that the verification code for each transaction is different and closely related to the transaction information. The computer device can then store the transaction confirmation verification code in the RFID chip of the visual smart card to enhance the security of the transaction.

[0065] It is understandable that the RFID chip is a storage medium that can be read and stored without physical contact; in a visual smart card, the RFID chip can communicate with the financial chip through the GPIO interface, and communicate with the POS terminal contactlessly. Therefore, after the financial chip generates a transaction signal and sends it to the POS terminal, it can leave the card reading area of ​​the POS terminal. Subsequent transaction processing can be contactlessly communicated between the RFID chip and the POS terminal. Therefore, there will be no situation where the time threshold of the RRP mechanism exceeds the risk detection range due to the card swiping distance being too far or the POS terminal field strength being too low, thereby reducing the misjudgment of relay attacks. Specifically, after the RFID chip stores the transaction confirmation verification code, it can be used as a second independent contactless protocol channel to interact with the POS terminal, bypassing the ISO14443 protocol of the financial chip, and quickly accessing it through the wireless reading function of the POS terminal during the transaction, making it impossible for relay attacks to be taken into account.

[0066] Furthermore, the RFID chip can be implanted with the same set of anti-disassembly authentication keys as the financial chip. Similar to the financial chip, the anti-disassembly authentication keys can prevent the RFID chip from being illegally disassembled, thereby ensuring the effectiveness of transaction prevention and control.

[0067] S130: The transaction signal is parsed by the POS terminal, and when a transaction confirmation flag is present in the parsing result, a read confirmation request is sent to the RFID chip.

[0068] In this step, after the transaction signal is sent to the POS terminal through step S120, the computer device can parse the transaction signal through the POS terminal to obtain the parsing result. If there is a transaction confirmation flag in the parsing result, the computer device can send a read confirmation request to the RFID chip through the POS terminal to request the transaction confirmation verification code stored in the RFID chip, thereby realizing the reverse confirmation of the transaction by the visual smart card and improving the controllability of the transaction.

[0069] The transaction confirmation flag is pre-set by the user in the financial chip to indicate that the transaction requires a reverse confirmation or additional confirmation verification step. If the transaction signal contains the transaction confirmation flag, the POS terminal will determine that the transaction requires further confirmation operations, thereby ensuring the legitimacy of the transaction and preventing potential fraudulent transactions.

[0070] Specifically, after the POS terminal receives the transaction signal, the computer device can parse the transaction signal through the POS terminal to extract key data such as the transaction information and chip ID of the transaction from the parsing result. Then, after confirming that the transaction information obtained by parsing is consistent with the transaction information initiated in the POS terminal, the computer device can further determine whether there is a transaction confirmation flag in the transaction signal. If there is, it means that the transaction needs to be reversely confirmed by the visual smart card before completion. At this time, the computer device can send a read confirmation request to the RFID chip through the POS terminal, so that the RFID chip in the visual smart card can respond quickly through the read confirmation request, and provide the transaction confirmation verification code of the transaction after it is confirmed to be correct, thereby enhancing the controllability of the transaction and improving the user's trust in the transaction process.

[0071] S140: When a confirmation signal sent by the user through the confirmation module is detected based on the read confirmation request, the transaction confirmation verification code in the RFID chip is sent to the POS terminal, and the POS terminal is used to complete the transaction based on the card data, transaction information and the transaction confirmation verification code to generate a transaction result.

[0072] In this step, when the RFID chip receives the read confirmation request sent by the POS terminal through step S130, the computer device can detect the confirmation module in the visual smart card based on the read confirmation request. After confirming that it is correct, the user can perform a confirmation operation on the confirmation module to make the confirmation module generate a confirmation signal. At this time, the computer device can send the transaction confirmation verification code in the RFID chip to the POS terminal, and use the POS terminal to complete the transaction based on the card data, transaction information and transaction confirmation verification code to generate a transaction result.

[0073] It is understandable that the user's confirmation operation in the confirmation module, such as the click operation in the button, can be regarded as a clear user authorization. Only when the user personally confirms and operates can the transaction continue. Through the confirmation module, it can not only improve the user's interactivity in the transaction process, but also add a security barrier to the transaction process to ensure the legality and correctness of the transaction. Of course, the confirmation module here can also use a fingerprint module, which is not limited here.

[0074] Furthermore, after receiving the confirmation signal sent by the user through the confirmation module, the computer device can immediately respond to the read confirmation request sent by the POS terminal and send the transaction confirmation verification code stored in the RFID chip to the POS terminal, so that the POS terminal can use it as part of the effective verification of the transaction when conducting the transaction, ensuring that the data has not been tampered with during the transaction. Specifically, after receiving the transaction confirmation verification code, the POS terminal can conduct a final verification based on the card data, transaction information and transaction confirmation verification code, and complete the transaction processing operation on this basis to generate the final transaction result, so that the authenticity and security of the transaction are fully guaranteed.

[0075] In the above embodiment, the method is applied to a prevention and control system composed of a visual smart card and a POS terminal, wherein the visual smart card includes a financial chip, an RFID chip and a confirmation module. Here, the present application uses an independent RFID chip in the visual smart card to communicate data with the financial chip and to communicate contactlessly with the POS terminal. Therefore, the financial chip only needs to be close to the POS terminal once. After the card data is read, the RFID chip can be used as the second communication protocol channel to securely transmit transaction-related data and transaction confirmation verification codes between the financial chip and the POS terminal. Before the transaction is conducted, the user can further confirm the transaction information through the display module, thereby improving the controllability of the transaction. Therefore, based on the setting of the RFID chip and the confirmation module in the visual smart card, the smart card transaction prevention and control method of the present application can bypass the contactless communication between the financial chip and the POS terminal through the RFID chip, so that relay attacks cannot be taken into account, and the security and controllability of the transaction can be enhanced through the display module, thereby improving the effectiveness of transaction prevention and control.

[0076] In one embodiment, the POS terminal may include an NFC antenna; the process of reading the card data of the financial chip through the POS terminal and generating transaction information of the transaction and returning it to the financial chip in step S110 may include:

[0077] S111: Establish a communication channel between the POS terminal and the financial chip through the NFC antenna.

[0078] S112: In the POS terminal, a card reading request is sent to the financial chip through the communication channel, the card data returned by the financial chip is obtained, and transaction information of the transaction is generated, and the transaction information is sent to the financial chip through the communication channel.

[0079] In this embodiment, Figure 1 As shown, the POS terminal includes an NFC antenna. Based on the NFC antenna, the computer device can establish a communication channel between the POS terminal and the financial chip, and then send a card reading request to the financial chip through the communication channel in the POS terminal, obtain the card data returned by the financial chip, and generate transaction information for this transaction, and send the transaction information to the financial chip through the communication channel.

[0080] It is understood that an NFC (Near Field Communication) antenna is a hardware device that supports near field communication technology, which is usually used to exchange data via short-range radio waves. In a POS terminal, an NFC antenna can establish a wireless communication channel between the POS terminal and other NFC-enabled devices, such as smart cards.

[0081] For example, the NFC antenna can receive and send radio frequency signals. When the POS terminal touches or approaches the financial chip of the visual smart card, that is, when the visual smart card is close to the card reading area of ​​the POS terminal, the NFC antenna will emit corresponding electromagnetic waves to trigger the response of the financial chip. In this way, the NFC antenna realizes data exchange with the financial chip, including sending card reading requests, receiving card data, and transmitting transaction information to the financial chip.

[0082] In one embodiment, the process of generating a transaction signal carrying transaction information in the financial chip in step S120 may include:

[0083] S121: Confirm the transaction flag of the financial chip and the chip ID of the RFID chip.

[0084] S122: Generate a transaction signal according to the transaction flag, chip ID and transaction information.

[0085] In this embodiment, after the financial chip receives the transaction information, the computer device can confirm the transaction flag of the financial chip and the chip ID of the RFID chip, and then generate a transaction signal based on the transaction flag, chip ID and transaction information, so that the subsequent POS terminal can implement the transaction processing logic of the prevention and control system based on the key data in the transaction information.

[0086] It is understandable that the transaction flag here is set by the user in the financial chip in advance, and is intended to indicate whether the transaction of the visual smart card requires the user to perform a reverse confirmation or additional confirmation verification step. Its flag type can be divided into a transaction confirmation flag and a direct transaction flag. Among them, the transaction confirmation flag indicates that the transaction can only be continued after the user performs additional confirmation externally, and the direct transaction flag indicates that the transaction can be continued directly without the user performing additional confirmation externally.

[0087] In addition, the chip ID, as an identity identifier that uniquely identifies the RFID chip, can be transmitted to the POS terminal through the transaction signal, so that the POS terminal can identify the RFID chip of the visual smart card based on the chip ID, and exchange data with the visual smart card through the RFID chip to continue to complete the transaction, thereby avoiding the risk of misjudgment of relay attacks caused by the time threshold of the RRP mechanism exceeding the risk detection range, thereby improving the effectiveness of transaction prevention and control.

[0088] Furthermore, the RFID chip of the visual smart card can also be replaced by a wireless communication module such as wireless Bluetooth, which is not limited here. If wireless Bluetooth is used in the visual smart card, when generating a transaction signal, the computer device can obtain the Bluetooth pairing information of the wireless Bluetooth and transmit it to the POS terminal along with the transaction signal.

[0089] In one embodiment, the POS terminal may further include an RFID antenna; the process of parsing the transaction signal by the POS terminal in step S130 and sending a read confirmation request to the RFID chip when a transaction confirmation flag is present in the parsing result may include:

[0090] S131: Analyze the transaction signal through the POS terminal, obtain the transaction flag and the chip ID, and confirm the flag type of the transaction flag.

[0091] S132: Using the RFID antenna to establish a communication channel between the POS terminal and the RFID chip based on the chip ID, and when the flag type is a transaction confirmation flag, sending a read confirmation request to the RFID chip based on the communication channel in the POS terminal.

[0092] In this embodiment, Figure 1 As shown, the POS terminal may also include an RFID antenna. After the POS terminal receives the transaction signal, the computer device may parse the transaction signal through the POS terminal, obtain the transaction flag and the chip ID, and confirm the flag type of the transaction flag. Then, a communication channel is established between the POS terminal and the RFID chip based on the chip ID, and when the flag type is a transaction confirmation flag, a read confirmation request is sent to the RFID chip based on the communication channel in the POS terminal.

[0093] It is understood that an RFID antenna refers to a hardware device that supports wireless communication technology, usually used for data exchange via radio frequency signals. In a POS terminal, an RFID antenna can establish a wireless communication channel between the POS terminal and other RFID-enabled devices, such as an RFID chip.

[0094] Specifically, the computer device can extract key data such as the transaction flag and chip ID by parsing the transaction signal. Here, the computer device can identify the RFID chip in the visual smart card based on the chip ID, and establish a communication channel with the identified RFID chip through the RFID antenna. Then, the computer device can further determine the subsequent operation based on the flag type of the transaction flag. For example, when the flag type is a transaction confirmation flag, it means that the user needs to make additional external confirmation when the POS terminal reads the transaction confirmation verification code from the RFID chip. Therefore, the computer device can send a read confirmation request to the RFID chip based on the communication channel in the POS terminal, so that the RFID chip can determine whether it can respond to the read confirmation request to ensure the security of the transaction.

[0095] In one embodiment, the method may further include:

[0096] S133: When the flag type is a direct transaction flag, directly read the transaction confirmation verification code stored in the RFID chip based on the communication channel.

[0097] In this embodiment, when the flag type is a direct transaction flag, it means that the POS terminal does not require the user to perform additional external confirmation when reading the transaction confirmation verification code from the RFID chip. Therefore, the computer device can directly read the transaction confirmation verification code stored in the RFID chip in the POS terminal based on the communication channel, thereby improving transaction efficiency.

[0098] It is understandable that the user can adjust the flag type of the visual smart card according to the transaction scenario, so that when the visual smart card conducts transactions with the POS terminal, it can confirm whether the user needs to make additional external confirmation of the transaction information based on the flag type, thereby improving the flexibility of smart card transaction prevention and control.

[0099] In one embodiment, Figure 3 As shown, Figure 3 A flowchart of a transaction process performed by a POS terminal provided in an embodiment of the present application; Figure 3 In step S140, the process of completing the transaction using the POS terminal based on the card data, the transaction information and the transaction confirmation verification code and generating the transaction result may include:

[0100] S141: Confirm the payment backend of the issuing bank corresponding to the card data.

[0101] S142: Send the transaction information and the transaction confirmation verification code to the payment backend of the issuing bank through the POS terminal, so that the payment backend of the issuing bank performs the transaction according to the transaction information and determines whether the transaction confirmation verification code is consistent with the pre-generated target verification code.

[0102] S143: If they are consistent, the transaction is passed and a transaction result including a successful transaction is returned.

[0103] S144: If they are inconsistent, the transaction is terminated and a transaction result including transaction failure is returned.

[0104] In this embodiment, the computer device can confirm the payment backend of the issuing bank corresponding to the card data, and then send the transaction information and the transaction confirmation verification code to the payment backend of the issuing bank through the POS terminal, so that the payment backend of the issuing bank can perform the transaction according to the transaction information, and check whether the transaction confirmation verification code is consistent with the pre-generated target verification code, and then complete the transaction according to the verification result and return the transaction result.

[0105] Specifically, the target verification code in the payment backend of the card issuing bank is generated by encrypting the transaction information using an encryption algorithm consistent with the transaction confirmation verification code. Therefore, the payment backend of the card issuing bank can compare the consistency of the two verification codes and decide whether to approve the transaction based on the verification result. Among them, when the verification result is consistent, it means that the transaction is legal. At this time, the payment backend of the card issuing bank can approve and pass the transaction, and generate a transaction result containing a successful transaction after the transaction is completed; when the verification result is inconsistent, it means that the transaction is illegal. At this time, the payment backend of the card issuing bank can terminate the transaction and generate a transaction result containing a failed transaction. Finally, the payment backend of the card issuing bank can return the transaction result to the POS terminal so that the POS terminal can feedback the transaction result to the user through the visual smart card.

[0106] In one embodiment, the visual smart card may further include an energy storage capacitor and a display module; and the method may further include:

[0107] S150: After acquiring the transaction information or transaction result sent by the POS terminal, the energy storage capacitor is used to enable and display the transaction information or transaction result on the display module.

[0108] In this embodiment, Figure 1 As shown, the visual smart card also includes an energy storage capacitor and a display module. Therefore, after the visual smart card receives the transaction information or transaction results sent by the POS terminal, the computer device can use the energy storage capacitor to enable and display the transaction information or transaction results on the display module, thereby improving the intuitiveness and security of the transaction.

[0109] Among them, in the visual smart card, the financial chip can be packaged separately and then carried on the tape, and the GPIO interface is connected to the MCU (Microcontroller Unit) so that after the financial chip receives the transaction information or transaction results, the MCU can drive the display module for display. Here, the display module of the present application can use an electronic paper screen.

[0110] It is understandable that after the visual smart card receives the transaction information or transaction results sent from the POS terminal, the computer device can start the energy storage capacitor in the visual smart card to provide the required power support for the electronic paper screen, so that the electronic paper screen can present the transaction information or transaction results to the user. Since the energy storage capacitor has efficient energy storage and release functions, it can provide enough power for the visual smart card in a short time to complete the display of transaction information and transaction results without the need for an external power supply; and the electronic paper screen can display content for a long time with low power consumption and does not require frequent charging. Therefore, the electronic paper screen of the visual smart card of the present application can work normally without a continuous power supply. In addition, the reflective display mode of the electronic paper screen enables users to easily view information in any environment, whether under strong light or in a low-light environment, the displayed content can maintain good visibility.

[0111] Furthermore, when the visual smart card is far away from the POS terminal and the radio frequency field is insufficient to drive the RFID chip to communicate, the energy storage capacitor can also provide energy to drive the RFID chip to work and transmit the transaction confirmation code to the POS terminal to complete the transaction. Of course, the energy storage capacitor in the visual smart card can also be replaced by a disposable thin film battery or a rechargeable battery, which is not limited here.

[0112] The smart card transaction prevention and control device provided in an embodiment of the present application is described below. The smart card transaction prevention and control device described below and the smart card transaction prevention and control method described above can be referenced to each other.

[0113] In one embodiment, Figure 4 As shown, Figure 4 A schematic diagram of a smart card transaction prevention and control device provided in an embodiment of the present application; the present application also provides a smart card transaction prevention and control device, which is applied to Figure 1 The control system shown in the figure may include an information generation module 210, a verification code storage module 220, a signal analysis module 230 and a transaction execution module 240, which specifically include the following:

[0114] The information generation module 210 is used to read the card data of the financial chip through the POS terminal when it is detected that the visual smart card is close to the POS terminal for transaction, and generate transaction information of the transaction and send it to the financial chip.

[0115] The verification code storage module 220 is used to generate a transaction signal carrying transaction information in the financial chip and send it to the POS terminal, and to generate a transaction confirmation verification code corresponding to the transaction information and store it in the RFID chip.

[0116] The signal analysis module 230 is used to analyze the transaction signal through the POS terminal, and send a read confirmation request to the RFID chip when there is a transaction confirmation flag in the analysis result.

[0117] The transaction execution module 240 is used to send the transaction confirmation verification code to the POS terminal through the RFID chip when it monitors the confirmation signal sent by the user through the confirmation module based on the reading confirmation request, and use the POS terminal to complete the transaction based on the card data, transaction information and transaction confirmation verification code to generate a transaction result.

[0118] In the above embodiment, the method is applied to a prevention and control system composed of a visual smart card and a POS terminal, wherein the visual smart card includes a financial chip, an RFID chip and a confirmation module. Here, the present application uses an independent RFID chip in the visual smart card to communicate data with the financial chip and to communicate contactlessly with the POS terminal. Therefore, the financial chip only needs to be close to the POS terminal once. After the card data is read, the RFID chip can be used as the second communication protocol channel to securely transmit transaction-related data and transaction confirmation verification codes between the financial chip and the POS terminal. Before the transaction is conducted, the user can further confirm the transaction information through the confirmation module, thereby improving the controllability of the transaction. Therefore, based on the setting of the RFID chip and the confirmation module in the visual smart card, the smart card transaction prevention and control method of the present application can bypass the contactless communication between the financial chip and the POS terminal through the RFID chip, so that relay attacks cannot be taken into account, and the security and controllability of the transaction can be enhanced through the display module, thereby improving the effectiveness of transaction prevention and control.

[0119] In one embodiment, the POS terminal may include an NFC antenna; the information generation module 210 may include:

[0120] The first channel establishing submodule is used to establish a communication channel between the POS terminal and the financial chip through the NFC antenna.

[0121] The data interaction submodule is used to send a card reading request to the financial chip using the communication channel, obtain the card data returned by the financial chip, generate transaction information of the transaction, and send the transaction information to the financial chip through the communication channel.

[0122] In one embodiment, the verification code storage module 220 may include:

[0123] The flag bit ID confirmation submodule is used to confirm the transaction flag bit of the financial chip and the chip ID of the RFID chip.

[0124] The signal generation submodule is used to generate a transaction signal according to the transaction flag, chip ID and transaction information.

[0125] Among them, the transaction flag includes a transaction confirmation flag and a direct transaction flag; the transaction confirmation flag indicates that the transaction needs to be entered after external confirmation; the direct transaction flag indicates that the transaction can be entered directly without external confirmation.

[0126] In one embodiment, the POS terminal may further include an RFID antenna; the signal analysis module 230 may include:

[0127] The signal analysis submodule is used to analyze the transaction signal through the POS terminal, obtain the transaction flag and the chip ID, and confirm the flag type of the transaction flag.

[0128] The second channel establishment submodule is used to establish a communication channel between the POS terminal and the RFID chip based on the chip ID, and when the flag type is a transaction confirmation flag, send a read confirmation request to the RFID chip based on the communication channel in the POS terminal.

[0129] In one embodiment, the apparatus may further include:

[0130] The direct reading submodule is used to directly read the transaction confirmation verification code stored in the RFID chip based on the communication channel when the flag type is a direct transaction flag.

[0131] In one embodiment, the transaction execution module 240 may include:

[0132] The payment backend confirmation submodule is used to confirm the payment backend of the issuing bank corresponding to the card data.

[0133] The verification code verification submodule is used to send the transaction information and transaction confirmation verification code to the payment backend of the issuing bank through the POS terminal, so that the payment backend of the issuing bank can conduct the transaction according to the transaction information and determine whether the transaction confirmation verification code is consistent with the pre-generated target verification code.

[0134] The first transaction submodule is used to approve the transaction if the transaction confirmation verification code is consistent with the pre-generated target verification code, and return a transaction result including a successful transaction.

[0135] The second transaction submodule is used to terminate the transaction and return a transaction result including transaction failure when the transaction confirmation verification code is inconsistent with the pre-generated target verification code.

[0136] In one embodiment, the visual smart card may further include an energy storage capacitor and a display module; the device may further include:

[0137] The information display module is used to obtain the transaction information or transaction results sent by the POS terminal, and then use the energy storage capacitor to enable and display the transaction information or transaction results on the display module.

[0138] In one embodiment, the present application also provides a storage medium, which stores computer-readable instructions. When the computer-readable instructions are executed by one or more processors, the one or more processors execute the steps of the smart card transaction prevention and control method as described in any of the above embodiments.

[0139] In one embodiment, the present application also provides a computer device, in which computer-readable instructions are stored. When the computer-readable instructions are executed by one or more processors, the one or more processors execute the steps of the smart card transaction prevention and control method as described in any of the above embodiments.

[0140] Indicatively, Figure 5 As shown, Figure 5 This is a schematic diagram of the internal structure of a computer device provided in an embodiment of the present application. The computer device 300 may be provided as a server. Figure 5 , the computer device 300 includes a processing component 302, which further includes one or more processors, and a memory resource represented by a memory 301, for storing instructions executable by the processing component 302, such as an application. The application stored in the memory 301 may include one or more modules, each corresponding to a set of instructions. In addition, the processing component 302 is configured to execute instructions to perform the smart card transaction prevention and control method of any of the above embodiments.

[0141] The computer device 300 may further include a power supply component 303 configured to perform power management of the computer device 300, a wired or wireless network interface 304 configured to connect the computer device 300 to a network, and an input / output (I / O) interface 305. The computer device 300 may operate based on an operating system stored in the memory 301, such as Windows Server TM, Mac OS X TM, Unix TM, Linux TM, Free BSD TM, or the like.

[0142] Those skilled in the art will understand that Figure 5The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0143] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0144] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The various embodiments can be combined as needed, and the same or similar parts can refer to each other.

[0145] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to the embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A smart card transaction prevention and control method, characterized in that: Applied to a prevention and control system, the prevention and control system includes a visual smart card and a POS terminal, the visual smart card includes a financial chip, an RFID chip and a confirmation module; the method includes: When it is detected that the visual smart card is close to the POS terminal for transaction, the card data of the financial chip is read by the POS terminal, and the transaction information of the transaction is generated and sent to the financial chip; After a transaction signal carrying the transaction information is generated in the financial chip, it is sent to the POS terminal; and after a transaction confirmation verification code corresponding to the transaction information is generated, it is stored in the RFID chip; The transaction signal is parsed by the POS terminal, and when a transaction confirmation flag is present in the parsing result, a read confirmation request is sent to the RFID chip; When a confirmation signal sent by the user through the confirmation module is monitored based on the read confirmation request, the transaction confirmation verification code in the RFID chip is sent to the POS terminal, and the POS terminal is used to complete the transaction based on the card data, the transaction information and the transaction confirmation verification code to generate a transaction result.

2. The smart card transaction prevention and control method according to claim 1, characterized in that: The POS terminal includes an NFC antenna; The step of reading the card data of the financial chip through the POS terminal and generating the transaction information of the transaction and sending it to the financial chip includes: Establishing a communication channel between the POS terminal and the financial chip through the NFC antenna; In the POS terminal, a card reading request is sent to the financial chip through the communication channel, the card data returned by the financial chip is obtained, and transaction information of the transaction is generated and sent to the financial chip through the communication channel.

3. The smart card transaction prevention and control method according to claim 1, characterized in that: Generating a transaction signal carrying the transaction information in the financial chip includes: Confirm the transaction flag of the financial chip and the chip ID of the RFID chip; Generate a transaction signal according to the transaction flag, the chip ID and the transaction information; Among them, the transaction flag includes a transaction confirmation flag and a direct transaction flag; the transaction confirmation flag indicates that the transaction needs to be entered after external confirmation; the direct transaction flag indicates that the transaction can be entered directly without external confirmation.

4. The smart card transaction prevention and control method according to claim 1, characterized in that: The POS terminal includes an RFID antenna; The transaction signal is parsed by the POS terminal, and when a transaction confirmation flag is present in the parsing result, a read confirmation request is sent to the RFID chip, including: Parsing the transaction signal through the POS terminal to obtain the transaction flag and the chip ID of the RFID chip, and confirming the flag type of the transaction flag; A communication channel between the POS terminal and the RFID chip is established based on the chip ID using the RFID antenna, and when the flag type is a transaction confirmation flag, a read confirmation request is sent to the RFID chip based on the communication channel in the POS terminal.

5. The smart card transaction prevention and control method according to claim 4, characterized in that: The method further comprises: When the flag type is a direct transaction flag, the transaction confirmation verification code stored in the RFID chip is directly read based on the communication channel.

6. The smart card transaction prevention and control method according to claim 1, characterized in that: The using the POS terminal to complete the transaction based on the card data, the transaction information and the transaction confirmation verification code to generate a transaction result includes: Confirm the payment backend of the issuing bank corresponding to the card data; The card data, the transaction information and the transaction confirmation verification code are sent to the payment backend of the issuing bank through the POS terminal, so that the payment backend of the issuing bank performs the transaction according to the transaction information and determines whether the transaction confirmation verification code is consistent with the pre-generated target verification code; If they are consistent, the transaction is approved and a transaction result including a successful transaction is returned; If they are inconsistent, the transaction is terminated and a transaction result including transaction failure is returned.

7. The smart card transaction prevention and control method according to claim 1, characterized in that: The visual smart card further includes an energy storage capacitor and a display module; the method further includes: After acquiring the transaction information or transaction result sent by the POS terminal, the energy storage capacitor is used for enabling, and the transaction information or the transaction result is displayed on the display module.

8. A smart card transaction prevention and control device, characterized in that: Applied to a prevention and control system, the prevention and control system includes a visual smart card and a POS terminal, the visual smart card includes a financial chip, an RFID chip and a confirmation module; the device includes: An information generation module, configured to read the card data of the financial chip through the POS terminal when it is detected that the visual smart card is close to the POS terminal for transaction, and generate transaction information of the transaction and send it to the financial chip; A verification code storage module, used to generate a transaction signal carrying the transaction information in the financial chip and send it to the POS terminal, and to generate a transaction confirmation verification code corresponding to the transaction information and store it in the RFID chip; A signal analysis module, used to analyze the transaction signal through the POS terminal, and send a read confirmation request to the RFID chip when there is a transaction confirmation flag in the analysis result; The transaction execution module is used to send the transaction confirmation verification code to the POS terminal through the RFID chip when monitoring the confirmation signal sent by the user through the confirmation module based on the read confirmation request, and use the POS terminal to complete the transaction based on the card data, the transaction information and the transaction confirmation verification code to generate a transaction result.

9. A storage medium, characterized in that: The storage medium stores computer-readable instructions, and when the computer-readable instructions are executed by one or more processors, the one or more processors execute the steps of the smart card transaction prevention and control method as described in any one of claims 1 to 7.

10. A computer device, characterized in that: include: one or more processors, and memory; The memory stores computer-readable instructions, and when the computer-readable instructions are executed by the one or more processors, the steps of the smart card transaction prevention and control method as described in any one of claims 1 to 7 are performed.

Images