Transaction authentication method, server, transaction authentication system and storage medium

Abstract

The embodiment of the invention provides a transaction authentication method, a server, a transaction authentication system and a storage medium, and belongs to the field of mobile payment. The method comprises the following steps: when a transaction authentication request is obtained, initiating a first video call to a first terminal device according to the transaction authentication request; establishing a first video call between a server and the first terminal device under the condition that the first terminal device is determined to have answered the first video call; verifying the identity of the transaction initiator based on a first face video of the transaction initiator in the first video call; and under the condition that the identity of the transaction initiator passes verification, executing a corresponding transaction operation according to the transaction authentication request, and ending the first video call. According to the method, the transaction security of mobile payment is improved.

Description

Technical Field

[0001] The present invention relates to the field of mobile payment technology, and in particular to a transaction authentication method, a server, a transaction authentication system and a storage medium. Background Art

[0002] As the scale of mobile payment grows, mobile payment or mobile transfer has gradually become the most commonly used transaction method. At present, the security authentication of mobile payment mainly verifies the identity information of the payer, but the identity information of the payer is easy to be stolen or forged, which poses a risk of account theft and cannot guarantee the security of mobile payment. Summary of the invention

[0003] The embodiments of the present invention provide a transaction authentication method, a server, a transaction authentication system and a storage medium, aiming to improve the security of mobile payment.

[0004] In a first aspect, an embodiment of the present invention provides a transaction authentication method, which is applied to a server, and the method includes:

[0005] When the transaction authentication request is obtained, initiating a first video call to the first terminal device according to the transaction authentication request;

[0006] In a case where it is determined that the first terminal device has answered the first video call, establishing a first video call between the server and the first terminal device;

[0007] Verifying the identity of the transaction initiator based on the first facial video of the transaction initiator in the first video call;

[0008] When the identity of the transaction initiator is verified, a corresponding transaction operation is performed according to the transaction authentication request, and the first video call is ended.

[0009] In a second aspect, an embodiment of the present invention further provides a transaction authentication method, which is applied to a transaction authentication system, wherein the transaction authentication system includes a first terminal device, a first server, and a second server, and the method includes:

[0010] The first terminal device responds to the transaction operation of the transaction initiator and sends a transaction authentication request to the second server according to the first account, transaction amount, transaction password of the transaction initiator and the second account of the transaction recipient;

[0011] The second server authenticates the transaction password in the transaction authentication request, and sends the transaction authentication request to the first server when the transaction password passes the authentication;

[0012] When the first server obtains the transaction authentication request, the first server initiates a first video call to the first terminal device according to the transaction authentication request;

[0013] The first terminal device establishes a first video call between the first server and the first terminal device in response to the transaction initiator's answering operation to the first video call;

[0014] The first server sends a first identity authentication request of the transaction initiator to the second server based on the first face video of the transaction initiator in the first video call;

[0015] When receiving the first identity authentication request, the second server verifies the identity of the transaction initiator according to the first identity authentication request;

[0016] When determining that the identity of the transaction initiator has been verified, the second server performs a corresponding transaction operation according to the transaction authentication request and sends transaction completion indication information to the first server;

[0017] When the first server obtains the transaction completion indication information, it ends the first video call.

[0018] In a third aspect, an embodiment of the present invention further provides a server, comprising a processor, a memory, a computer program stored in the memory and executable by the processor, and a data bus for realizing a connection and communication between the processor and the memory, wherein when the computer program is executed by the processor, the transaction authentication method as described in the first aspect is implemented.

[0019] In a fourth aspect, an embodiment of the present invention further provides a transaction authentication system, the transaction authentication system comprising a first terminal device, a first server and a second server, the first server being communicatively connected with the second server, wherein:

[0020] The first terminal device is used to respond to the transaction operation of the transaction initiator and send a transaction authentication request to the second server according to the first account, transaction amount, transaction password of the transaction initiator and the second account of the transaction recipient;

[0021] The second server is configured to authenticate the transaction password in the transaction authentication request, and send the transaction authentication request to the first server when the transaction password passes the authentication;

[0022] The first server is configured to initiate a first video call to the first terminal device according to the transaction authentication request when the transaction authentication request is obtained;

[0023] The first terminal device is further configured to establish a first video call between the first server and the first terminal device in response to a response operation of the transaction initiator to the first video call;

[0024] The first server is further configured to send a first identity authentication request of the transaction initiator to the second server based on the first face video of the transaction initiator in the first video call;

[0025] The second server is further configured to verify the identity of the transaction initiator according to the first identity authentication request when receiving the first identity authentication request;

[0026] The second server is further configured to, when it is determined that the identity of the transaction initiator has been verified, perform a corresponding transaction operation according to the transaction authentication request and send transaction completion indication information to the first server;

[0027] The first server is further configured to terminate the first video call upon obtaining the transaction completion indication information.

[0028] In a fifth aspect, an embodiment of the present invention further provides a storage medium for computer-readable storage, wherein the storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement any transaction authentication method provided in the specification of the present invention.

[0029] The embodiment of the present invention provides a transaction authentication method, a server, a transaction authentication system and a storage medium. The technical solution provided by the embodiment of the present invention establishes a video call between the server and the terminal device held by the transaction initiator when the transaction initiator makes a mobile payment, and then verifies the identity of the transaction initiator based on the facial video of the transaction initiator in the video call, and executes the transaction operation when the identity of the transaction initiator is verified, which can prevent the occurrence of non-personal transactions such as password theft, and effectively improve the transaction security of mobile payment. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0031] Figure 1 This is a schematic diagram of a scenario for implementing the transaction authentication method provided by an embodiment of the present invention;

[0032] Figure 2 is another schematic diagram of a scenario for implementing the transaction authentication method provided by an embodiment of the present invention;

[0033] Figure 3 It is another schematic diagram of a scenario for implementing the transaction authentication method provided by an embodiment of the present invention;

[0034] Figure 4 It is a flowchart of a transaction authentication method provided by an embodiment of the present invention;

[0035] Figure 5 yes Figure 4 A schematic diagram of a sub-step flow chart of a transaction authentication method in;

[0036] Figure 6 is a schematic diagram of a video call interface in an embodiment of the present invention;

[0037] Figure 7 yes Figure 4 A flowchart of another sub-step of the transaction authentication method;

[0038] Figure 8 It is a flowchart of another transaction authentication method provided by an embodiment of the present invention;

[0039] Fig. 9 It is a flowchart of another transaction authentication method provided by an embodiment of the present invention;

[0040] Fig.10 It is a flowchart of another transaction authentication method provided by an embodiment of the present invention;

[0041] Fig.11 is a schematic block diagram of the structure of a server provided by an embodiment of the present invention;

[0042] Fig.12 is a schematic block diagram of the structure of a transaction authentication system provided by an embodiment of the present invention;

[0043] Fig.13 It is a schematic block diagram of the structure of another transaction authentication system provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0044] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0045] The flowcharts shown in the accompanying drawings are only examples and do not necessarily include all the contents and operations / steps, nor must they be executed in the order described. For example, some operations / steps may also be decomposed, combined or partially merged, so the actual execution order may change according to actual conditions.

[0046] It should be understood that the terms used in this specification of the present invention are only for the purpose of describing specific embodiments and are not intended to limit the present invention. As used in the specification of the present invention and the appended claims, unless the context clearly indicates otherwise, the singular forms "a", "an" and "the" are intended to include plural forms.

[0047] As the scale of mobile payment grows, mobile payment or mobile transfer has gradually become the most commonly used transaction method. At present, the security authentication of mobile payment mainly verifies the identity information of the payer, but the identity information of the payer is easy to be stolen or forged, which poses a risk of account theft and cannot guarantee the security of mobile payment.

[0048] To solve the above problems, the embodiments of the present invention provide a transaction authentication method, a server, a transaction authentication system and a storage medium. The method establishes a video call between the server and the terminal device held by the transaction initiator when the transaction initiator makes a mobile payment, and then verifies the identity of the transaction initiator based on the face video of the transaction initiator in the video call, and executes the transaction operation when the identity of the transaction initiator is verified, so as to prevent the occurrence of non-personal transactions such as password theft, and effectively improve the transaction security of mobile payment.

[0049] Some embodiments of the present invention are described in detail below in conjunction with the accompanying drawings. In the absence of conflict, the following embodiments and features in the embodiments can be combined with each other.

[0050] Figure 1 It is a schematic diagram of a scenario for implementing the transaction authentication method provided by an embodiment of the present invention.

[0051] like Figure 1As shown, the first terminal device 200 is in communication connection with the first server 100. When executing the transaction authentication method provided by the embodiment of the present invention, the first terminal 200 responds to the transaction operation of the transaction initiator and sends a transaction authentication request to the first server 100 according to the first account, transaction amount, transaction password of the transaction initiator and the second account of the transaction recipient; when the first server 100 receives the transaction authentication request, it initiates a first video call to the first terminal device 200 according to the transaction authentication request; the first terminal device 200 responds to the transaction initiator's answer operation to the first video call and sends a response message to the first server 100; when the first server 100 receives the response message, it establishes a first video call between the first server 100 and the first terminal device 200; the first server 100 verifies the identity of the transaction initiator based on the first face video of the transaction initiator in the first video call; when the identity of the transaction initiator is verified, the first server 100 performs the corresponding transaction operation according to the transaction authentication request and ends the first video call.

[0052] In this embodiment, transaction authentication can be achieved only through the first server 100, which reduces the system complexity of transaction authentication. The first server 100 verifies the identity of the transaction initiator based on the facial video of the transaction initiator in the video call, and executes the transaction operation when the identity of the transaction initiator is verified. This can prevent the occurrence of non-personal transactions such as password theft, and effectively improve the transaction security of mobile payment.

[0053] In some embodiments, Figure 2As shown, the first server 100 is also connected to the second terminal device 300. When executing the transaction authentication method provided in the embodiment of the present invention, if the transaction initiator believes that there is a risk in the transaction and needs to verify the identity of the transaction recipient, the first terminal device 200 responds to the transaction recipient's identity authentication operation triggered by the transaction initiator, and sends the transaction recipient's identity authentication instruction to the first server 100 through the data channel between the first terminal device 200 and the first server 100; when the first server 100 receives the identity authentication instruction, it initiates a second video call to the second terminal device 300 according to the identity authentication instruction; and the second terminal device 300 responds to the transaction recipient's answer operation to the second video call, and sends the transaction recipient's identity authentication instruction to the first server 100. 100 sends a response message; when receiving the response message, the first server 100 establishes a second video call with the second terminal device 300; the first server 100 verifies the identity of the transaction recipient based on the second facial video of the transaction initiator in the second video call; if the identity of the transaction recipient is verified, the first server 100 verifies the identity of the transaction initiator based on the first facial video of the transaction initiator in the first video call, and ends the second video call; if the identity of the transaction initiator is verified, the first server 100 executes the corresponding transaction operation according to the transaction authentication request, and ends the first video call.

[0054] This embodiment establishes a second video call with the transaction recipient, and verifies the identity of the transaction recipient based on the facial video of the transaction recipient in the second video call. Then, when the identity of the transaction recipient is verified, the identity of the transaction initiator is verified based on the facial video of the transaction initiator in the first video call. When the identity of the transaction initiator is verified, the transaction operation is performed. This not only can identify fraudsters using other people's accounts to conduct transactions, making it impossible for fraudsters to hide their identities and reducing the probability of being defrauded, but also can prevent the occurrence of non-personal transactions such as password theft, thereby effectively improving the transaction security of mobile payments.

[0055] In some embodiments, Figure 3As shown, the first terminal device 200 and the first server 100 are also respectively connected to the second server 400 for communication. When executing the transaction authentication method provided in the embodiment of the present invention, the first terminal device 200 responds to the transaction operation of the transaction initiator and sends a transaction authentication request to the second server 400 according to the first account, transaction amount, transaction password of the transaction initiator and the second account of the transaction recipient; the second server 400 authenticates the transaction password in the transaction authentication request, and when the transaction password passes the authentication, sends the transaction authentication request to the first server 100; when the first server 100 obtains the transaction authentication request, it initiates a first video call to the first terminal device 200 according to the transaction authentication request; the first terminal device 200 responds to the transaction initiator’s response to the first video call. The first server 100 establishes a first video call with the first terminal device 200 through a response operation of the call; the first server 100 sends a first identity authentication request of the transaction initiator to the second server 400 based on the first face video of the transaction initiator in the first video call; when the second server 400 receives the first identity authentication request, it verifies the identity of the transaction initiator according to the first identity authentication request; when the second server determines that the identity of the transaction initiator has passed the verification, it executes the corresponding transaction operation according to the transaction authentication request and sends the transaction completion indication information to the first server; when the first server obtains the transaction completion indication information, it ends the first video call.

[0056] In this embodiment, the second server 400 first authenticates the transaction password in the transaction authentication request (preliminary authentication), and after the transaction password is authenticated, the first server 100 establishes a video call with the first terminal device 200, and based on the facial video of the transaction initiator in the video call, sends the first identity authentication request of the transaction initiator to the second server 400, so that the second server 400 verifies the identity of the transaction initiator (advanced authentication), and executes the transaction operation when the identity of the transaction initiator is verified. Performing two authentications in this way can effectively prevent the occurrence of non-personal transactions such as password theft, and effectively improve the transaction security of mobile payment.

[0057] In the embodiment of the present invention, the first server 100 and the second server 400 may be independent servers, or a server cluster composed of multiple servers, or cloud servers providing basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, content delivery networks (CDN), and big data and artificial intelligence platforms. The first terminal device 200 and the second terminal device 300 may be a smart phone, a tablet computer, a laptop computer, or a personal computer.

[0058] The following will be combined Figure 1 , Figure 2 or Figure 3 The transaction authentication method provided by the embodiment of the present invention is described in detail in the scenario in FIG. Figure 1 , Figure 2 or Figure 3 The scenarios are only used to explain the transaction authentication method provided in the embodiment of the present invention, but do not constitute a limitation on the application scenarios of the transaction authentication method provided in the embodiment of the present invention.

[0059] See also Figure 4 , Figure 4 is a flow chart of a transaction authentication method provided by an embodiment of the present invention. The transaction authentication method can be applied to a server to improve the security of mobile payment. The server can be Figure 1 , Figure 2 or Figure 3 The first server 100 in.

[0060] like Figure 4 As shown, the transaction authentication method includes steps S101 to S104.

[0061] Step S101: When a transaction authentication request is obtained, a first video call is initiated to a first terminal device according to the transaction authentication request.

[0062] In this embodiment, the transaction authentication request may include the first account of the transaction initiator, the transaction amount, the transaction password, and the second account of the transaction recipient. For example, the first terminal device responds to the transaction operation of the transaction initiator and sends a transaction authentication request to the server according to the first account of the transaction initiator, the transaction amount, the transaction password, and the second account of the transaction recipient. For example, when the transaction initiator needs to initiate a transaction, the transaction initiator can enter the transaction amount, the second account of the transaction recipient, and the transaction password in the transaction interface displayed by the first terminal device, and then click the confirmation button in the transaction interface, so that the first terminal device obtains the first account of the transaction initiator, and generates a transaction authentication request according to the input transaction amount, the second account of the transaction recipient, and the transaction password, and sends the transaction authentication request to the server for authentication.

[0063] In some embodiments, initiating a first video call to a first terminal device according to a transaction authentication request may include: obtaining a first mobile phone number of a transaction initiator from the transaction authentication request, and initiating a first video call to the first terminal device according to the first mobile phone number. The first video call is a video call based on an IP Multimedia Subsystem (IMS) type such as VoNR (Voice over NewRadio) or VoLTE (Voice over Long Term Evolution). The mobile phone number of the transaction initiator can accurately initiate a video call to a terminal device using the mobile phone number of the transaction initiator.

[0064] In some embodiments, when a transaction authentication request is obtained, initiating a first video call to the first terminal device according to the transaction authentication request may include: when the transaction authentication request is obtained, obtaining transaction password information and the first account of the transaction initiator from the transaction authentication request, and obtaining the preset transaction password information corresponding to the first account; when the transaction password information is the same as the preset transaction password information corresponding to the first account, initiating the first video call to the first terminal device according to the transaction authentication request. The transaction password information may include at least one of a digital password, a fingerprint password, and a facial feature. This embodiment can further improve the security of mobile payment by first authenticating the transaction password in the transaction authentication request (preliminary authentication), and then performing subsequent advanced authentication after the transaction password passes the authentication.

[0065] In some embodiments, when a transaction authentication request is obtained, initiating a first video call to a first terminal device according to the transaction authentication request may include: when the transaction authentication request is obtained, determining whether the transaction amount in the transaction authentication request exceeds a preset first limit threshold; when the transaction amount in the transaction authentication request exceeds the first limit threshold, initiating a first video call to the first terminal device according to the transaction authentication request; when the transaction amount in the transaction authentication request does not exceed the first limit threshold, obtaining the first account of the transaction initiator from the transaction authentication request, and obtaining the cumulative transaction amount of the first account on that day; when the cumulative transaction amount of the first account exceeds a preset second limit threshold, initiating a first video call to the first terminal device according to the transaction authentication request; when the cumulative transaction amount of the first account does not exceed the second limit threshold, obtaining transaction password information from the transaction authentication request, and obtaining the preset transaction password information corresponding to the first account; when the transaction password information is the same as the preset transaction password information corresponding to the first account, performing the corresponding transaction operation according to the transaction authentication request. This embodiment can reduce the number of video call initiations and improve user payment convenience by initiating a first video call to the first terminal device based on a transaction authentication request when a single transaction amount exceeds a first limit threshold or the cumulative transaction amount on the day exceeds a second limit threshold.

[0066] Step S102: When it is determined that the first terminal device has answered the first video call, establish a first video call between the server and the first terminal device.

[0067] In this embodiment, the first terminal device responds to the transaction initiator's answer operation on the first video call and sends the first video call answer information to the server; when the server receives the answer information, it determines that the first terminal device has answered the first video call and establishes the first video call between the server and the first terminal device. The first video call can be a video call based on VoNR or VoLTE, which is not specifically limited in the embodiment of the present invention.

[0068] In some embodiments, the first terminal device responds to the transaction initiator's response operation on the first video call, and sends the first video call response information to the server, which may include: the first terminal device responds to the first video call initiated by the server, displays a video call interface, and the video call interface includes an answer button and a reject button; responds to the transaction initiator's triggering operation on the answer button in the video call interface, and sends the first video call response information to the server. In which, the first terminal device responds to the transaction initiator's triggering operation on the reject button in the video call interface, displays the desktop interface, and sends the call unanswered indication information to the server.

[0069] Step S103: verifying the identity of the transaction initiator based on the first facial video of the transaction initiator in the first video call.

[0070] In this embodiment, after establishing the first video call between the server and the first terminal device, the server can send video recording indication information to the first terminal device for output, so as to instruct the transaction initiator to record the facial video in the video call interface according to the video recording indication information, so that the server can obtain the facial video of the transaction initiator through the first video call, and then verify the identity of the transaction initiator based on the facial video of the transaction initiator.

[0071] In some embodiments, based on the first facial video of the transaction initiator in the first video call, verifying the identity of the transaction initiator may include: obtaining the first facial video of the transaction initiator from the first video call; generating a first key based on the facial features and / or voiceprint features in the first facial video; determining that the identity of the transaction initiator has been verified if the first key is the same as the first preset key corresponding to the transaction initiator, and determining that the identity of the transaction initiator has not been verified if the first key is different from the first preset key corresponding to the transaction initiator. The first preset key corresponding to the transaction initiator is generated in advance based on the facial features and / or voiceprint features of the transaction initiator. This embodiment can generate a key that uniquely identifies the identity by using the facial features and / or voiceprint features in the facial video, and compare the generated key with the preset key, which can effectively verify the identity of the transaction initiator, thereby preventing the occurrence of non-personal transactions such as password theft, and improving transaction security.

[0072] In some embodiments, generating a first key based on facial features and / or voiceprint features in the first facial video may include: extracting facial features and / or voiceprint features from the first facial video, and using the extracted facial features and / or voiceprint features as the first key or using a preset key generation algorithm to generate the first key based on the extracted facial features and / or voiceprint features. Among them, the first preset key corresponding to the transaction initiator is pre-generated using the same key generation algorithm based on the facial features and / or voiceprint features of the transaction initiator. The preset key generation algorithm can be set based on actual conditions, and the embodiment of the present invention does not specifically limit this. For example, the preset key generation algorithm is a DES algorithm, an AES algorithm, or a SHA-256 algorithm, etc.

[0073] For example, when customer A opens an account at a bank, the bank service system enters customer A's facial features / or voiceprint features, generates customer A's identity key based on customer A's facial features / or voiceprint features, and then stores customer A's identity key as the preset key corresponding to customer A. When customer A uses a mobile phone or computer to transfer money, the intelligent customer service system establishes a video call with customer A, extracts customer A's facial video from the video call, and then generates customer A's first key based on the facial features / or voiceprint features in customer A's facial video, and sends a key authentication request carrying the first key to the bank service system. When receiving the key authentication request, the bank service system compares the first key in the key authentication request with the preset key corresponding to customer A.

[0074] Step S104: When the identity of the transaction initiator is verified, the corresponding transaction operation is performed according to the transaction authentication request, and the first video call is ended.

[0075] In this embodiment, if the identity of the transaction initiator is verified, it can be determined that the transaction is initiated by the person himself, and if the identity of the transaction initiator is not verified, it can be determined that the transaction is most likely not initiated by the person himself. Therefore, if the identity of the transaction initiator is verified, the transaction operation is executed and the first video call is ended, and if the identity of the transaction initiator is not verified, the transaction is stopped and the first video call is ended, which can prevent the occurrence of non-personal transactions such as password theft, and effectively improve the transaction security of mobile payment.

[0076] In some embodiments, executing the corresponding transaction operation according to the transaction authentication request may include: obtaining the first account of the transaction initiator, the transaction amount and the second account of the transaction recipient from the transaction authentication request, and transferring the transaction amount in the first account to the second account. For example, customer A needs to transfer 1,000 yuan to customer B, and the bank service system transfers 1,000 yuan from customer A's bank account to customer B's bank account to complete the transfer.

[0077] In some embodiments, as shown in 5, step S103 includes: sub-steps S1031 to S1033.

[0078] Sub-step S1031, establishing a data channel between the server and the first terminal device, and obtaining a risk assessment report corresponding to the transaction authentication request.

[0079] In this embodiment, the data channel between the server and the first terminal device can be an IMS data channel (IMS Data Channel, IMSDC). The IMS data channel is used to synchronously transmit multimedia information based on the video call. The multimedia information may include at least one of text information, voice information, image information and video information.

[0080] In some embodiments, a data channel between the server and the first terminal device may be established while the first video call is established, or after the first video call is established, the data channel between the server and the first terminal device may be established, which is not specifically limited in the embodiments of the present invention.

[0081] In some embodiments, the risk assessment report corresponding to the transaction authentication request includes the transaction risk level and risk point information corresponding to the transaction authentication request. The higher the transaction risk level, the lower the security of the transaction, and the lower the transaction risk level, the better the security of the transaction. The risk point information is used to describe the risk of the transaction, for example, the risk point information is "the account of the transaction recipient is an overseas account".

[0082] In some embodiments, the risk assessment report corresponding to the transaction authentication request may be determined before the first video call is established, or the risk assessment report corresponding to the transaction authentication request may be generated after the first video call is established. For example, when the transaction authentication request is obtained, the risk assessment report corresponding to the transaction authentication request is determined, and the first video call is initiated to the first terminal device according to the transaction authentication request. Alternatively, when the transaction authentication request is obtained, the transaction password information and the first account of the transaction initiator are obtained from the transaction authentication request, and the preset transaction password information corresponding to the first account is obtained; when the transaction password information is the same as the preset transaction password information corresponding to the first account, a risk assessment report corresponding to the transaction authentication request is generated, and the first video call is initiated to the first terminal device according to the transaction authentication request.

[0083] In some embodiments, the transaction authentication request includes a first account of the transaction initiator and a second account of the transaction recipient. The transaction authentication method provided in this embodiment also includes: the server obtains first account opening information corresponding to the first account, second account opening information corresponding to the second account, and transaction record data associated with the second account; according to the first account opening information, the second account opening information, and the transaction record data, the social relationship between the transaction initiator and the transaction recipient is determined, and the account type of the second account is determined according to the second account opening information; according to the transaction record data, multiple payer accounts associated with the second account are determined, and the registration location and account type of each payer account are determined; according to the social relationship, the account type of the second account, and the registration location and account type of each payer account, a risk assessment report is generated. This embodiment can accurately generate a risk assessment report for describing the risk of this transaction through the account opening information of the transaction parties and the transaction record data of the transaction recipient.

[0084] In some embodiments, the first account opening information includes the account opening address and work unit of the transaction initiator, and the second account opening information includes the account opening address and work unit of the transaction recipient. Determining the social relationship between the transaction initiator and the transaction recipient based on the first account opening information, the second account opening information and the transaction record data may include: judging whether the city where the account opening address of the transaction initiator is located is the same as the city where the account opening address of the transaction recipient is located, and obtaining a city determination result; judging whether the work unit of the transaction initiator is the same as the work unit of the transaction recipient, and obtaining a unit determination result; judging whether there is a transaction record containing the first account and the second account in the transaction record data associated with the second account, and obtaining a transaction record determination result; determining the city determination result, the unit determination result and the transaction record determination result as the social relationship between the transaction initiator and the transaction recipient.

[0085] Among them, the city determination result includes whether the city where the account opening address of the transaction initiator is located is the same as or different from the city where the account opening address of the transaction recipient is located, the unit determination result includes whether the work unit of the transaction initiator is the same as or different from the work unit of the transaction recipient, and the transaction record determination result includes whether the transaction record data associated with the second account contains transaction records of the first account and the second account. For example, the social relationship between the transaction initiator and the transaction recipient is that the city where the account opening address of the transaction initiator is located is the same as the city where the account opening address of the transaction recipient is located, the work unit of the transaction initiator is the same as the work unit of the transaction recipient, and the transaction record data associated with the second account does not contain transaction records of the first account and the second account.

[0086] In some embodiments, the account type of the second account may be a domestic account or an overseas account. Determining the account type of the second account may include: determining whether the second account hits the identification rule corresponding to the domestic account or the identification rule corresponding to the overseas account; if the second account hits the identification rule corresponding to the domestic account, the account type of the second account may be determined to be a domestic account; if the second account hits the identification rule corresponding to the overseas account, the account type of the second account may be determined to be an overseas account. Among them, the identification rules corresponding to the domestic account and the identification rules corresponding to the overseas account may be set based on actual conditions, and the embodiments of the present invention do not specifically limit this.

[0087] In some embodiments, generating a risk assessment report based on social relationships, the account type of the second account, and the registration location and account type of each payer account may include: determining the registration city of each payer account based on the registration location of each payer account; comparing the registration cities of each payer account with each other, and counting the number of registration cities based on the comparison results; determining whether there is an overseas account in the account type of each payer account, and obtaining an account determination result; determining the transaction risk level and risk point based on the social relationship, the account type of the second account, the number of registration cities, and the account determination result; obtaining a preset report generation template, and filling the account type of the second account, the number of registration cities, the account determination result, the transaction risk level, and the risk point into the corresponding position in the report generation template to generate a corresponding risk assessment report. Among them, the preset report generation template can be set based on actual conditions, and the embodiments of the present invention do not specifically limit this.

[0088] Sub-step S1032: sending the risk assessment report to the first terminal device through the data channel.

[0089] In this embodiment, when the first terminal device receives the risk assessment report sent by the server, it displays the risk assessment report in the video call interface for the transaction initiator to read; if the transaction initiator believes that the transaction is safe after reading the risk assessment report, the first terminal device can be operated to instruct the server to continue the transaction. For example, in response to the transaction continuation operation triggered by the transaction initiator reading the risk assessment report, the first terminal device sends transaction security indication information to the server through the data channel. The transaction security indication information is used to indicate to the server that the transaction is safe and the transaction can continue.

[0090] In some embodiments, the first terminal device displays a first virtual button, a second virtual button, and a third virtual button while displaying a risk assessment report in the video call interface; in response to the transaction initiator's triggering operation on the first virtual button, the first terminal device sends transaction security indication information to the server through the data channel; or in response to the transaction initiator's triggering operation on the second virtual button, the first terminal device sends transaction termination indication information to the server through the data channel, and the transaction termination indication information is used to instruct the server to terminate the transaction; or in response to the transaction initiator's triggering operation on the third virtual button, the first terminal device sends the transaction recipient's identity authentication instruction to the server through the data channel, and the identity authentication instruction is used to instruct the server to verify the identity of the transaction recipient.

[0091] It is understandable that the styles of the first virtual key, the second virtual key and the third virtual key can be set based on actual conditions, and the embodiment of the present invention does not specifically limit this. Figure 6 As shown, the first terminal device displays a video call interface 10, and the video call interface 10 displays a risk assessment report 11, a continue button 12, a stop button 13, and a transaction recipient identity verification button 14. For example, in response to the transaction initiator clicking the continue button 12, transaction security indication information is sent to the server through the data channel; or in response to the transaction initiator clicking the stop button 13, transaction termination indication information is sent to the server through the data channel; or in response to the transaction initiator clicking the transaction recipient identity verification button 14, the transaction recipient identity verification instruction is sent to the server through the data channel.

[0092] Sub-step S1033: when the transaction security indication information is obtained, the identity of the transaction initiator is verified based on the first facial video of the transaction initiator in the first video call.

[0093] In this embodiment, the server sends a risk assessment report to the first terminal device for display via a data channel between the server and the first terminal device, so that the transaction initiator can read the risk assessment report and thus know the risks of the transaction. In this way, the transaction initiator can choose to continue the transaction, terminate the transaction, or verify the identity of the transaction recipient based on the risks of the transaction, which can greatly improve the transaction security.

[0094] In some embodiments, when the transaction security indication information is obtained, video recording indication information is sent to the first terminal device through the data channel, so that the first terminal device can output the video recording indication information, and the video recording indication information is used to instruct the transaction initiator to record a facial video according to the video recording indication information; the transaction initiator in the first video call is authenticated based on the first facial video recorded by the video recording indication information. The first terminal device outputting the video recording indication information may include displaying and / or broadcasting the video recording indication information. By outputting the video recording indication information, the transaction initiator can be instructed to record a facial video according to the video recording indication information, thereby improving the user experience.

[0095] In some embodiments, Figure 7 As shown, after sub-step S1032, step S103 further includes sub-steps S1034 to S1037.

[0096] Sub-step S1034: upon obtaining the identity authentication instruction of the transaction recipient sent by the first terminal device through the data channel, initiating a second video call to the second terminal device according to the identity authentication instruction.

[0097] In this embodiment, the first terminal device responds to the transaction recipient's identity authentication operation triggered by the transaction initiator after reading the risk assessment report, and sends the transaction recipient's identity authentication instruction to the first server through the data channel. For example, the first terminal device responds to the transaction initiator's triggering operation of the third virtual button in the video call interface, and sends the transaction recipient's identity authentication instruction to the first server through the data channel. For example, Figure 6 As shown, in response to the transaction initiator clicking the button 14 for verifying the identity of the transaction recipient, an identity verification instruction of the transaction recipient is sent to the server through the data channel.

[0098] In some embodiments, the identity authentication instruction includes a second account of the transaction recipient, and initiating a second video call to the second terminal device according to the identity authentication instruction may include: obtaining a second mobile phone number associated with the second account, and initiating a second video call to the second terminal device according to the second mobile phone number. The second video call is a video call based on an IP Multimedia Subsystem (IMS) type such as VoNR or VoLTE.

[0099] Sub-step S1035: When it is determined that the second terminal device has answered the second video call, establish a second video call between the server and the second terminal device.

[0100] In this embodiment, the second terminal device responds to the transaction recipient's answering operation on the second video call and sends the second video call answering information to the server; when the server receives the answering information, it determines that the second terminal device has answered the second video call and establishes the first video call between the server and the second terminal device. The second video call can be a video call based on VoNR or VoLTE, which is not specifically limited in the embodiment of the present invention.

[0101] In some embodiments, the second terminal device displays a video call interface in response to the second video call initiated by the server, and the video call interface includes an answer button and a reject button; the second terminal device sends answer information of the second video call to the server in response to the transaction recipient triggering the answer button in the video call interface. In response to the transaction recipient triggering the reject button in the video call interface, the second terminal device displays a desktop interface and sends an indication of call unanswered to the server.

[0102] Sub-step S1036: verifying the identity of the transaction recipient based on the second facial video of the transaction initiator in the second video call.

[0103] In this embodiment, after establishing the first video call between the server and the second terminal device, the server can send video recording instruction information to the second terminal device for output, so as to instruct the transaction recipient to record the facial video in the video call interface according to the video recording instruction information, so that the server can obtain the facial video of the transaction recipient through the second video call, and then verify the identity of the transaction recipient based on the facial video of the transaction recipient.

[0104] In some embodiments, based on the second facial video of the transaction initiator in the second video call, verifying the identity of the transaction recipient may include: obtaining the second facial video of the transaction recipient from the second video call; generating a second key based on the facial features and / or voiceprint features in the second facial video; determining that the identity of the transaction recipient has been verified if the second key is the same as the second preset key corresponding to the transaction recipient, and determining that the identity of the transaction recipient has not been verified if the second key is different from the second preset key corresponding to the transaction initiator. The second preset key corresponding to the transaction recipient is generated in advance based on the facial features and / or voiceprint features of the transaction recipient.

[0105] In some embodiments, generating a second key based on facial features and / or voiceprint features in the second facial video may include: extracting facial features and / or voiceprint features from the second facial video, and using the facial features and / or voiceprint features extracted from the second facial video as the second key or using a preset key generation algorithm to generate a second key based on the facial features and / or voiceprint features extracted from the second facial video. Among them, the second preset key corresponding to the transaction recipient is pre-generated using the same key generation algorithm based on the facial features and / or voiceprint features of the transaction recipient. The preset key generation algorithm can be set based on actual conditions, and the embodiments of the present invention do not specifically limit this. For example, the preset key generation algorithm is a DES algorithm, an AES algorithm, or a SHA-256 algorithm, etc.

[0106] For example, when customer B opens an account at a bank, the bank service system records customer B's facial features / or voiceprint features, generates customer B's identity key based on customer B's facial features / or voiceprint features, and then stores customer B's identity key as the preset key corresponding to customer B. When customer A uses a mobile phone or computer to transfer money to customer B, and needs to verify customer B's identity, the intelligent customer service system establishes a video call with customer B, extracts customer B's facial video from the video call, and then generates customer B's second key based on the facial features / or voiceprint features in customer B's facial video, and sends a key authentication request carrying the second key to the bank service system. When receiving the key authentication request, the bank service system compares the second key in the key authentication request with the preset key corresponding to customer B.

[0107] Sub-step S1037: When the identity of the transaction recipient is verified, the identity of the transaction initiator is verified based on the first facial video of the transaction initiator in the first video call.

[0108] In this embodiment, if the identity of the transaction recipient is verified, it can be determined that the transaction recipient of this transaction is the person himself, and if the identity of the transaction recipient is not verified, it can be determined that the transaction recipient of this transaction is not the person himself. Therefore, if the identity of the transaction recipient is verified, the identity of the transaction initiator is verified, and if the identity of the transaction recipient is not verified, the transaction is stopped and the first video call and the second video call are ended. This can not only prevent the occurrence of non-personal transactions such as password theft, but also identify fraudsters using other people's accounts to conduct transactions, so that fraudsters cannot hide their identities, reduce the probability of being defrauded, and effectively improve the transaction security of mobile payments.

[0109] See also Figure 8 , Figure 8It is a flowchart of another transaction authentication method provided by an embodiment of the present invention.

[0110] like Figure 8 As shown, the transaction authentication method includes steps S201 to S208.

[0111] Step S201: In response to a transaction operation by a transaction initiator, the first terminal device sends a transaction authentication request to a second server according to the first account, transaction amount, transaction password of the transaction initiator and the second account of the transaction recipient.

[0112] In this embodiment, when the transaction initiator needs to initiate a transaction, the transaction initiator can enter the transaction amount, the second account of the transaction recipient and the transaction password in the transaction interface displayed by the first terminal device, and then click the confirmation button in the transaction interface, so that the first terminal device obtains the first account of the transaction initiator, and generates a transaction authentication request based on the input transaction amount, the second account of the transaction recipient and the transaction password, and sends the transaction authentication request to the second server.

[0113] Step S202: The second server authenticates the transaction password in the transaction authentication request, and sends a transaction authentication request to the first server when the transaction password passes the authentication.

[0114] In this embodiment, when the second server receives the transaction authentication request sent by the first terminal device, it compares the transaction password in the transaction authentication request with the preset transaction password corresponding to the first account of the transaction initiator; when the transaction password in the transaction authentication request is the same as the preset transaction password corresponding to the first account of the transaction initiator, it is determined that the transaction password has passed the authentication; when the transaction password in the transaction authentication request is different from the preset transaction password corresponding to the first account of the transaction initiator, it is determined that the transaction password has not passed the authentication. The transaction password may include at least one of a numeric password, a fingerprint password and a facial feature, and the preset transaction password corresponding to the first account may include at least one of a numeric password, a fingerprint password and a facial feature.

[0115] Step S203: When the first server obtains the transaction authentication request, it initiates a first video call to the first terminal device according to the transaction authentication request.

[0116] In this embodiment, when the first server receives the transaction authentication request sent by the second server, it obtains the first mobile phone number of the transaction initiator from the transaction authentication request, and initiates a first video call to the first terminal device according to the first mobile phone number. The first video call is a video call based on an IP Multimedia Subsystem (IMS) type such as VoNR or VoLTE.

[0117] Step S204: The first terminal device establishes a first video call between the first server and the first terminal device in response to the transaction initiator's answering operation to the first video call.

[0118] In this embodiment, the first terminal device responds to the first video call initiated by the server and displays a video call interface, where the video call interface includes an answer button and a reject button; in response to the transaction initiator triggering the answer button in the video call interface, a first video call is established between the first server and the first terminal device, and a response message is sent to the first server; when the first server receives the response message, the first video call is established with the first terminal device.

[0119] Step S205: The first server sends a first identity authentication request of the transaction initiator to the second server based on the first facial video of the transaction initiator in the first video call.

[0120] In this embodiment, after establishing the first video call between the first server and the first terminal device, the first server can send video recording indication information to the first terminal device for output, so as to instruct the transaction initiator to record the facial video in the video call interface according to the video recording indication information, so that the first server can obtain the facial video of the transaction initiator through the first video call, and then obtain the facial video of the transaction initiator, and send the transaction initiator's identity authentication request to the second server.

[0121] In some embodiments, the first server sending the first identity authentication request of the transaction initiator to the second server based on the first face video of the transaction initiator in the first video call may include: the first server obtaining the first face video of the transaction initiator from the first video call; generating a first key according to the face features and / or voiceprint features in the first face video; generating the first identity authentication request of the transaction initiator according to the first key, and sending the first identity authentication request to the second server. The first identity authentication request includes the first key.

[0122] In some embodiments, the first server sending the first identity authentication request of the transaction initiator to the second server based on the first face video of the transaction initiator in the first video call may include: the first server obtaining the first face video of the transaction initiator from the first video call, extracting the face features and / or voiceprint features of the transaction initiator from the first face video; generating the first identity authentication request of the transaction initiator according to the face features and / or voiceprint features of the transaction initiator, and sending the first identity authentication request to the second server. The first identity authentication request includes the face features and / or voiceprint features of the transaction initiator.

[0123] Step S206: When the second server receives the first identity verification request, it verifies the identity of the transaction initiator according to the first identity verification request.

[0124] In this embodiment, the first identity authentication request includes the facial features and / or voiceprint features of the transaction initiator or a first key generated based on the facial features and / or voiceprint features of the transaction initiator.

[0125] In some embodiments, the second server may verify the identity of the transaction initiator based on the first identity authentication request, which may include: generating a first key based on the facial features and / or voiceprint features of the transaction initiator in the first identity authentication request, when the first identity authentication request includes the facial features and / or voiceprint features of the transaction initiator; comparing the first key with a first preset key corresponding to the transaction initiator; determining that the identity of the transaction initiator has been verified if the first key is the same as the first preset key corresponding to the transaction initiator, and determining that the identity of the transaction initiator has not been verified if the first key is different from the first preset key corresponding to the transaction initiator.

[0126] In some embodiments, the second server may verify the identity of the transaction initiator based on the first identity authentication request, which may include: when the first identity authentication request includes a first key, comparing the first key in the first identity authentication request with a first preset key corresponding to the transaction initiator; when the first key is the same as the first preset key corresponding to the transaction initiator, determining that the identity of the transaction initiator has been verified, and when the first key is different from the first preset key corresponding to the transaction initiator, determining that the identity of the transaction initiator has not been verified.

[0127] Step S207: When determining that the identity of the transaction initiator has been verified, the second server executes the corresponding transaction operation according to the transaction authentication request and sends transaction completion indication information to the first server.

[0128] In this embodiment, when the second server determines that the identity of the transaction initiator has been verified, it obtains the first account of the transaction initiator, the transaction amount and the second account of the transaction recipient from the transaction authentication request, and transfers the transaction amount in the first account to the second account to complete the transaction.

[0129] In some embodiments, when the second server determines that the identity of the transaction initiator has not been verified, it sends verification failure indication information to the first server; when the first server receives the verification failure indication information, it sends transaction failure prompt information to the first terminal device and ends the first video call. When the first terminal device receives the transaction failure prompt information, it outputs the transaction failure prompt information to prompt the transaction initiator that the transaction has failed.

[0130] Step S208: When the first server obtains the transaction completion indication information, it ends the first video call.

[0131] In this embodiment, when the first server obtains the transaction completion indication information, it sends a transaction completion prompt information to the first terminal device and ends the first video call. When the first terminal device receives the transaction completion prompt information, it outputs the transaction completion prompt information to prompt the transaction initiator that the transaction has been completed.

[0132] In some embodiments, Fig. 9 As shown, after step S204, the following steps are also included:

[0133] Step S209: After establishing the first video call, the first server establishes a data channel with the first terminal device, and sends a risk assessment report corresponding to the transaction authentication request to the first terminal device through the data channel.

[0134] In this embodiment, the first server may also establish a data channel with the first terminal device while establishing the first video call. The data channel between the first server and the first terminal device may be an IMS data channel, which is used to synchronously transmit multimedia information based on the video call, and the multimedia information may include at least one of text information, voice information, image information and video information.

[0135] In some embodiments, the first server may determine the risk assessment report corresponding to the transaction authentication request before establishing the first video call, or may generate the risk assessment report corresponding to the transaction authentication request after establishing the first video call. Exemplarily, the first server obtains the first account opening information corresponding to the first account, the second account opening information corresponding to the second account, and the transaction record data associated with the second account from the second server; determines the social relationship between the transaction initiator and the transaction recipient based on the first account opening information, the second account opening information, and the transaction record data, and determines the account type of the second account based on the second account opening information; determines multiple payer accounts associated with the second account based on the transaction record data, and determines the registration location and account type of each payer account; generates a risk assessment report based on the social relationship, the account type of the second account, and the registration location and account type of each payer account.

[0136] Step S210: When the first terminal device obtains the risk assessment report, it displays the risk assessment report in the video call interface.

[0137] In this embodiment, the video call interface further includes a first virtual button, a second virtual button, and a third virtual button. It is understandable that the styles of the first virtual button, the second virtual button, and the third virtual button can be set based on actual conditions, and the embodiment of the present invention does not specifically limit this. Figure 6 As shown, the first terminal device displays a video call interface 10, in which a risk assessment report 11, a continue button 12 (first virtual button), a terminate button 13 (second virtual button) and a transaction recipient identity verification button 14 (third virtual button) are displayed.

[0138] Step S211: In response to the transaction continuation operation triggered by the transaction initiator reading the risk assessment report, the first terminal device sends transaction security indication information to the first server through the data channel.

[0139] In this embodiment, in response to the transaction continuation operation triggered by the transaction initiator after reading the risk assessment report, sending the transaction security indication information to the first server through the data channel may include sending the transaction security indication information to the first server through the data channel in response to the transaction initiator's triggering operation on the first virtual key. Wherein, when the first server obtains the transaction security indication information, it returns to execute steps S205 to S208.

[0140] In some embodiments, Fig.10 As shown, after step S210, the following steps are further included:

[0141] Step S212: In response to the identity verification operation of the transaction recipient triggered by the transaction initiator reading the risk assessment report, the first terminal device sends an identity verification instruction of the transaction recipient to the first server through the data channel.

[0142] In this embodiment, the first terminal device sends the identity authentication instruction of the transaction recipient to the first server through the data channel in response to the identity authentication operation of the transaction recipient triggered by the transaction initiator after reading the risk assessment report, which may include: sending the identity authentication instruction of the transaction recipient to the first server through the data channel in response to the triggering operation of the third virtual key by the transaction initiator.

[0143] Step S213: When the first server receives the identity authentication instruction, it initiates a second video call to the second terminal device according to the identity authentication instruction.

[0144] In this embodiment, the identity authentication instruction includes the second account of the transaction recipient. According to the identity authentication instruction, initiating a second video call to the second terminal device may include: the first server obtains a second mobile phone number associated with the second account, and initiating a second video call to the second terminal device based on the second mobile phone number.

[0145] Step S214: The second terminal device establishes a second video call between the first server and the second terminal device in response to the transaction recipient's answering operation to the second video call.

[0146] In this embodiment, the second terminal device establishes the second video call between the first server and the second terminal device in response to the transaction recipient's answering operation to the second video call, which may include: the second terminal device displays a video call interface in response to the second video call initiated by the first server, and the video call interface includes an answer button and a reject button; the second terminal device establishes the second video call between the first server and the second terminal device in response to the transaction recipient triggering the answer button in the video call interface.

[0147] Step S215: The first server sends a second identity authentication request of the transaction recipient to the second server based on the second facial video of the transaction initiator in the second video call.

[0148] In this embodiment, after establishing a first video call between the first server and the second terminal device, the first server can send video recording instruction information to the second terminal device for output, so as to instruct the transaction recipient to record the facial video in the video call interface according to the video recording instruction information, so that the server can obtain the facial video of the transaction recipient through the second video call, and then verify the identity of the transaction recipient based on the facial video of the transaction recipient.

[0149] In some embodiments, the first server sending the second identity authentication request of the transaction recipient to the second server based on the second face video of the transaction initiator in the second video call may include: the first server obtaining the second face video of the transaction recipient from the second video call; generating a second key according to the face features and / or voiceprint features in the second face video; generating the second identity authentication request of the transaction initiator according to the second key, and sending the second identity authentication request to the second server. The second identity authentication request includes the second key.

[0150] In some embodiments, the first server sending the second identity authentication request of the transaction recipient to the second server based on the second facial video of the transaction initiator in the second video call may include: the first server obtaining the second facial video of the transaction recipient from the second video call, extracting the facial features and / or voiceprint features of the transaction recipient from the second facial video; generating the second identity authentication request of the transaction initiator according to the facial features and / or voiceprint features of the transaction recipient, and sending the second identity authentication request to the second server. The second identity authentication request includes the facial features and / or voiceprint features of the transaction recipient.

[0151] Step S216: The second server verifies the identity of the transaction recipient according to the second identity verification request, and sends verification success indication information to the first server when it is determined that the identity of the transaction recipient has passed the verification.

[0152] In this embodiment, the second identity authentication request includes the facial features and / or voiceprint features of the transaction recipient or a second key generated based on the facial features and / or voiceprint features of the transaction recipient. Upon receiving the verification pass indication information, the first server returns to execute steps S205 to S208. The verification pass indication information is used to indicate that the identity of the transaction recipient has been verified.

[0153] In some embodiments, the second server verifying the identity of the transaction recipient based on the second identity authentication request may include: generating a second key based on the facial features and / or voiceprint features of the transaction recipient in the second identity authentication request when the second identity authentication request includes the facial features and / or voiceprint features of the transaction recipient; comparing the second key with a second preset key corresponding to the transaction recipient; determining that the identity of the transaction recipient has been verified when the second key is the same as the second preset key corresponding to the transaction recipient, and determining that the identity of the transaction recipient has not been verified when the second key is different from the second preset key corresponding to the transaction recipient.

[0154] In some embodiments, the second server verifying the identity of the transaction recipient based on the second identity authentication request may include: when the second identity authentication request includes a second key, comparing the second key in the second identity authentication request with a second preset key corresponding to the transaction recipient; when the second key is the same as the second preset key corresponding to the transaction recipient, determining that the identity of the transaction recipient has been verified, and when the second key is different from the second preset key corresponding to the transaction recipient, determining that the identity of the transaction recipient has not been verified.

[0155] See also Fig.11 , Fig.11 It is a schematic block diagram of the structure of a server provided by an embodiment of the present invention.

[0156] like Fig.11 As shown, the server 10 includes a processor 11 and a memory 12, and the processor 11 and the memory 12 are connected via a bus 13, such as an I2C (Inter-integrated Circuit) bus.

[0157] Specifically, the processor 11 is used to provide computing and control capabilities to support the operation of the entire server. The processor 11 can be a central processing unit (CPU), and the processor 11 can also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. Among them, the general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc.

[0158] Specifically, the memory 12 may be a Flash chip, a read-only memory (ROM) disk, an optical disk, a USB flash drive, or a mobile hard disk.

[0159] Those skilled in the art will understand that Fig.11 The structure shown in the figure is only a block diagram of a partial structure related to the embodiment of the present invention, and does not constitute a limitation on the server to which the embodiment of the present invention is applied. The specific server may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0160] The processor 11 is used to run the computer program stored in the memory 12, and implement any one of the transaction authentication methods provided by the embodiments of the present invention when executing the computer program.

[0161] In one embodiment, the processor 11 is used to run a computer program stored in the memory, and implement the following steps when executing the computer program:

[0162] When the transaction authentication request is obtained, initiating a first video call to the first terminal device according to the transaction authentication request;

[0163] In a case where it is determined that the first terminal device has answered the first video call, establishing a first video call between the server and the first terminal device;

[0164] Verifying the identity of the transaction initiator based on the first facial video of the transaction initiator in the first video call;

[0165] When the identity of the transaction initiator is verified, a corresponding transaction operation is performed according to the transaction authentication request, and the first video call is ended.

[0166] In some embodiments, when the processor 11 verifies the identity of the transaction initiator based on the first face video of the transaction initiator in the first video call, it is configured to implement:

[0167] Establishing a data channel between the server and the first terminal device, and obtaining a risk assessment report corresponding to the transaction authentication request;

[0168] sending the risk assessment report to the first terminal device through the data channel, wherein the first terminal device displays the risk assessment report in a video call interface, and in response to a transaction continuation operation triggered by the transaction initiator reading the risk assessment report, sends transaction security indication information to the server through the data channel;

[0169] When the transaction security indication information is obtained, the identity of the transaction initiator is verified based on the first facial video of the transaction initiator in the first video call.

[0170] In some embodiments, the transaction authentication request includes a first account of the transaction initiator and a second account of the transaction recipient, and the processor 11 is further configured to implement:

[0171] Acquire first account opening information corresponding to the first account, second account opening information corresponding to the second account, and transaction record data associated with the second account;

[0172] Determining the social relationship between the transaction initiator and the transaction recipient, and determining the account type of the second account according to the first account opening information, the second account opening information and the transaction record data;

[0173] Determining, based on the transaction record data, multiple payer accounts associated with the second account, and determining a registration location and an account type of each of the payer accounts;

[0174] The risk assessment report is generated based on the social relationship, the account type of the second account, and the registration location and account type of each of the payer accounts.

[0175] In some embodiments, after sending the risk assessment report to the first terminal device through the data channel, the processor 11 is further configured to implement:

[0176] When an identity authentication instruction of the transaction recipient sent by the first terminal device through the data channel is obtained, initiating a second video call to the second terminal device according to the identity authentication instruction;

[0177] When it is determined that the second terminal device has answered the second video call, establishing a second video call between the server and the second terminal device;

[0178] Verifying the identity of the transaction recipient based on the second facial video of the transaction initiator in the second video call;

[0179] In a case where the identity of the transaction recipient is verified, the identity of the transaction initiator is verified based on the first facial video of the transaction initiator in the first video call.

[0180] In some embodiments, when the processor 11 verifies the identity of the transaction initiator based on the first face video of the transaction initiator in the first video call when the transaction security indication information is obtained, it is configured to implement:

[0181] In the case of obtaining the transaction security instruction information, sending video recording instruction information to the first terminal device through the data channel, so that the first terminal device outputs the video recording instruction information, and the video recording instruction information is used to instruct the transaction initiator to record a face video according to the video recording instruction information;

[0182] The transaction initiator in the first video call is authenticated based on the first facial video recorded by the video recording instruction information.

[0183] In some embodiments, when the processor 11 acquires the transaction authentication request and initiates the first video call to the first terminal device according to the transaction authentication request, it is configured to implement:

[0184] When a transaction authentication request is obtained, obtaining transaction password information and a first account of the transaction initiator from the transaction authentication request, and obtaining preset transaction password information corresponding to the first account;

[0185] When the transaction password information is the same as the preset transaction password information, a first video call is initiated to the first terminal device according to the transaction authentication request.

[0186] In some embodiments, when the processor 11 initiates the first video call to the first terminal device according to the transaction authentication request, it is configured to implement:

[0187] The first mobile phone number of the transaction initiator is obtained from the transaction authentication request, and a first video call is initiated to the first terminal device according to the first mobile phone number.

[0188] In some embodiments, when the processor 11 verifies the identity of the transaction initiator based on the first face video of the transaction initiator in the first video call, it is configured to implement:

[0189] Acquire a first facial video of the transaction initiator from the first video call;

[0190] Generate a first key according to facial features and / or voiceprint features in the first facial video;

[0191] When the first key is identical to the first preset key corresponding to the transaction initiator, it is determined that the identity of the transaction initiator is verified.

[0192] It should be noted that those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the server described above can refer to the corresponding process in the aforementioned transaction authentication method embodiment, and will not be repeated here.

[0193] See also Fig.12 , Fig.12 It is a schematic block diagram of the structure of a transaction authentication system provided by an embodiment of the present invention.

[0194] like Fig.12 As shown, the transaction authentication system 20 includes a first server 100, a first terminal device 200 and a second server 400, and the first server 100 is in communication connection with the second server 400, wherein:

[0195] The first terminal device 200 is used to respond to the transaction operation of the transaction initiator and send a transaction authentication request to the second server 400 according to the first account, transaction amount, transaction password of the transaction initiator and the second account of the transaction recipient;

[0196] The second server 400 is used to authenticate the transaction password in the transaction authentication request, and send the transaction authentication request to the first server 100 when the transaction password passes the authentication;

[0197] The first server 100 is configured to initiate a first video call to the first terminal device 200 according to the transaction authentication request when the transaction authentication request is obtained;

[0198] The first terminal device 200 is further configured to establish a first video call between the first server 100 and the first terminal device in response to the transaction initiator's answering operation to the first video call;

[0199] The first server 100 is further configured to send a first identity authentication request of the transaction initiator to the second server 400 based on the first face video of the transaction initiator in the first video call;

[0200] The second server 400 is further configured to verify the identity of the transaction initiator according to the first identity authentication request when receiving the first identity authentication request;

[0201] The second server 400 is further configured to, when it is determined that the identity of the transaction initiator has been verified, perform a corresponding transaction operation according to the transaction authentication request and send transaction completion indication information to the first server 100;

[0202] The first server 100 is further configured to terminate the first video call when the transaction completion indication information is obtained.

[0203] In some embodiments, the first server 100 is further configured to establish a data channel with the first terminal device after establishing the first video call, and send the risk assessment report corresponding to the transaction authentication request to the first terminal device 200 through the data channel;

[0204] The first terminal device 200 is further configured to display the risk assessment report in the video call interface when the risk assessment report is obtained;

[0205] The first terminal device 200 is further configured to send transaction security indication information to the first server 100 through the data channel in response to a transaction continuation operation triggered by the transaction initiator after reading the risk assessment report;

[0206] The first server 100 is further configured to, upon obtaining the transaction security indication information, send a first identity authentication request of the transaction initiator to the second server 400 based on the first facial video of the transaction initiator in the first video call.

[0207] In some embodiments, the first server 100 is further configured to:

[0208] Acquire first account opening information corresponding to the first account, second account opening information corresponding to the second account, and transaction record data associated with the second account;

[0209] Determining the social relationship between the transaction initiator and the transaction recipient according to the first account opening information, the second account opening information and the transaction record data, and determining the account type of the second account according to the second account opening information;

[0210] Determining, based on the transaction record data, multiple payer accounts associated with the second account, and determining a registration location and an account type of each of the payer accounts;

[0211] The risk assessment report is generated based on the social relationship, the account type of the second account, and the registration location and account type of each of the payer accounts.

[0212] In some embodiments, Fig.13 As shown, the transaction authentication system 20 further includes a second terminal device 300, wherein:

[0213] The first terminal device 200 is further configured to send an identity authentication instruction of the transaction recipient to the first server 100 through the data channel in response to an identity authentication operation of the transaction recipient triggered by the transaction initiator reading the risk assessment report;

[0214] The first server 100 is further configured to initiate a second video call to the second terminal device 300 according to the identity authentication instruction when receiving the identity authentication instruction;

[0215] The second terminal device 300 is further configured to establish a second video call between the first server 100 and the second terminal device 300 in response to a response operation of the transaction recipient to the second video call;

[0216] The first server 100 is further configured to send a second identity authentication request of the transaction recipient to the second server 400 based on the second facial video of the transaction initiator in the second video call;

[0217] The second server 400 is further configured to verify the identity of the transaction recipient according to the second identity authentication request, and send verification pass indication information to the first server 100 when it is determined that the identity of the transaction recipient has passed the verification;

[0218] The first server 100 is further configured to, upon receiving the verification pass indication information, send a first identity authentication request of the transaction initiator to the second server 400 based on the first facial video of the transaction initiator in the first video call.

[0219] It should be noted that those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the transaction authentication system described above can refer to the corresponding process in the aforementioned transaction authentication method embodiment, and will not be repeated here.

[0220] An embodiment of the present invention further provides a storage medium for computer-readable storage, wherein the storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement any transaction authentication method provided in the description of the embodiment of the present invention.

[0221] The storage medium may be an internal storage unit of the server described in the foregoing embodiment, such as a hard disk or memory of the server. The storage medium may also be an external storage device of the server, such as a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), etc., equipped on the server.

[0222] It will be appreciated by those skilled in the art that all or some of the steps, systems, and functional modules / units in the methods disclosed above may be implemented as software, firmware, hardware, and appropriate combinations thereof. In a hardware embodiment, the division between the functional modules / units mentioned in the above description does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed by several physical components in cooperation. Some or all physical components may be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or implemented as hardware, or implemented as an integrated circuit, such as an application-specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium (or non-transitory medium) and a communication medium (or temporary medium). As known to those skilled in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data). Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer. In addition, it is well known to those of ordinary skill in the art that communication media typically contain computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.

[0223] It should be understood that the term "and / or" used in the present specification and the appended claims refers to any combination of one or more of the associated listed items and all possible combinations, including these combinations. It should be noted that, in this article, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or system including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or system. In the absence of further restrictions, an element defined by the sentence "including a..." does not exclude the presence of other identical elements in the process, method, article or system including the element.

[0224] The serial numbers of the embodiments of the present invention are only for description and do not represent the advantages and disadvantages of the embodiments. The above description is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed by the present invention, and these modifications or replacements should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention shall be based on the protection scope of the claims.

Claims

1. A transaction authentication method, characterized in that: Applied to a server, the method comprises: When the transaction authentication request is obtained, initiating a first video call to the first terminal device according to the transaction authentication request; In a case where it is determined that the first terminal device has answered the first video call, establishing a first video call between the server and the first terminal device; Verifying the identity of the transaction initiator based on the first facial video of the transaction initiator in the first video call; When the identity of the transaction initiator is verified, a corresponding transaction operation is performed according to the transaction authentication request, and the first video call is ended.

2. The transaction authentication method according to claim 1, characterized in that: The verifying the identity of the transaction initiator based on the first face video of the transaction initiator in the first video call includes: Establishing a data channel between the server and the first terminal device, and obtaining a risk assessment report corresponding to the transaction authentication request; sending the risk assessment report to the first terminal device through the data channel, wherein the first terminal device displays the risk assessment report in a video call interface, and in response to a transaction continuation operation triggered by the transaction initiator reading the risk assessment report, sends transaction security indication information to the server through the data channel; When the transaction security indication information is obtained, the identity of the transaction initiator is verified based on the first facial video of the transaction initiator in the first video call.

3. The transaction authentication method according to claim 2, characterized in that: The transaction authentication request includes a first account of a transaction initiator and a second account of a transaction recipient, and the method further includes: Acquire first account opening information corresponding to the first account, second account opening information corresponding to the second account, and transaction record data associated with the second account; Determining the social relationship between the transaction initiator and the transaction recipient, and determining the account type of the second account according to the first account opening information, the second account opening information and the transaction record data; Determining, based on the transaction record data, multiple payer accounts associated with the second account, and determining a registration location and an account type of each of the payer accounts; The risk assessment report is generated based on the social relationship, the account type of the second account, and the registration location and account type of each of the payer accounts.

4. The transaction authentication method according to claim 2, characterized in that: After sending the risk assessment report to the first terminal device through the data channel, the method further includes: When an identity authentication instruction of the transaction recipient sent by the first terminal device through the data channel is obtained, initiating a second video call to the second terminal device according to the identity authentication instruction; When it is determined that the second terminal device has answered the second video call, establishing a second video call between the server and the second terminal device; Verifying the identity of the transaction recipient based on the second facial video of the transaction initiator in the second video call; In a case where the identity of the transaction recipient is verified, the identity of the transaction initiator is verified based on the first facial video of the transaction initiator in the first video call.

5. The transaction authentication method according to claim 2, characterized in that: The step of, upon obtaining the transaction security indication information, verifying the identity of the transaction initiator based on the first face video of the transaction initiator in the first video call, includes: In the case of obtaining the transaction security instruction information, sending video recording instruction information to the first terminal device through the data channel, so that the first terminal device outputs the video recording instruction information, and the video recording instruction information is used to instruct the transaction initiator to record a face video according to the video recording instruction information; The transaction initiator in the first video call is authenticated based on the first facial video recorded by the video recording instruction information.

6. The transaction authentication method according to claim 1, characterized in that: When the transaction authentication request is obtained, initiating a first video call to the first terminal device according to the transaction authentication request includes: When a transaction authentication request is obtained, obtaining transaction password information and a first account of the transaction initiator from the transaction authentication request, and obtaining preset transaction password information corresponding to the first account; When the transaction password information is the same as the preset transaction password information, a first video call is initiated to the first terminal device according to the transaction authentication request.

7. The transaction authentication method according to any one of claims 1 to 6, characterized in that: The initiating a first video call to the first terminal device according to the transaction authentication request includes: The first mobile phone number of the transaction initiator is obtained from the transaction authentication request, and a first video call is initiated to the first terminal device according to the first mobile phone number.

8. The transaction authentication method according to any one of claims 1 to 6, characterized in that: The verifying the identity of the transaction initiator based on the first face video of the transaction initiator in the first video call includes: Acquire a first facial video of the transaction initiator from the first video call; Generate a first key according to facial features and / or voiceprint features in the first facial video; When the first key is identical to the first preset key corresponding to the transaction initiator, it is determined that the identity of the transaction initiator is verified.

9. A transaction authentication method, characterized in that: Applied to a transaction authentication system, the transaction authentication system includes a first terminal device, a first server and a second server, and the method includes: The first terminal device responds to the transaction operation of the transaction initiator and sends a transaction authentication request to the second server according to the first account, transaction amount, transaction password of the transaction initiator and the second account of the transaction recipient; The second server authenticates the transaction password in the transaction authentication request, and sends the transaction authentication request to the first server when the transaction password passes the authentication; When the first server obtains the transaction authentication request, the first server initiates a first video call to the first terminal device according to the transaction authentication request; The first terminal device establishes a first video call between the first server and the first terminal device in response to the transaction initiator's answering operation to the first video call; The first server sends a first identity authentication request of the transaction initiator to the second server based on the first face video of the transaction initiator in the first video call; When receiving the first identity authentication request, the second server verifies the identity of the transaction initiator according to the first identity authentication request; When determining that the identity of the transaction initiator has been verified, the second server performs a corresponding transaction operation according to the transaction authentication request and sends transaction completion indication information to the first server; When the first server obtains the transaction completion indication information, it ends the first video call.

10. The transaction authentication method according to claim 9, characterized in that: The method further comprises: After establishing the first video call, the first server establishes a data channel with the first terminal device, and sends the risk assessment report corresponding to the transaction authentication request to the first terminal device through the data channel; When the first terminal device obtains the risk assessment report, the risk assessment report is displayed in the video call interface; The first terminal device sends transaction security indication information to the first server through the data channel in response to the transaction continuation operation triggered by the transaction initiator after reading the risk assessment report; When the first server obtains the transaction security indication information, based on the first facial video of the transaction initiator in the first video call, it sends a first identity authentication request of the transaction initiator to the second server.

11. The transaction authentication method according to claim 10, characterized in that: The transaction authentication request includes a first account of a transaction initiator and a second account of a transaction recipient, and the method further includes: The first server obtains first account opening information corresponding to the first account, second account opening information corresponding to the second account, and transaction record data associated with the second account; Determining the social relationship between the transaction initiator and the transaction recipient according to the first account opening information, the second account opening information and the transaction record data, and determining the account type of the second account according to the second account opening information; Determining, based on the transaction record data, multiple payer accounts associated with the second account, and determining a registration location and an account type of each of the payer accounts; The risk assessment report is generated based on the social relationship, the account type of the second account, and the registration location and account type of each of the payer accounts.

12. The transaction authentication method according to claim 10, characterized in that: The method further comprises: The first terminal device sends an identity authentication instruction of the transaction recipient to the first server through the data channel in response to the identity authentication operation of the transaction recipient triggered by the transaction initiator reading the risk assessment report; When receiving the identity authentication instruction, the first server initiates a second video call to the second terminal device according to the identity authentication instruction; The second terminal device establishes a second video call between the first server and the second terminal device in response to the transaction recipient's answering operation to the second video call; The first server sends a second identity authentication request of the transaction recipient to the second server based on the second facial video of the transaction initiator in the second video call; The second server verifies the identity of the transaction recipient according to the second identity authentication request, and sends verification passing indication information to the first server when it is determined that the identity of the transaction recipient passes the verification; When receiving the verification pass indication information, the first server sends a first identity authentication request of the transaction initiator to the second server based on the first facial video of the transaction initiator in the first video call.

13. A server, characterized in that: The server includes a processor, a memory, a computer program stored in the memory and executable by the processor, and a data bus for realizing connection and communication between the processor and the memory, wherein when the computer program is executed by the processor, the transaction authentication method according to any one of claims 1 to 8 is realized.

14. A transaction authentication system, characterized in that: The transaction authentication system comprises a first terminal device, a first server and a second server, wherein the first server is communicatively connected with the second server, wherein: The first terminal device is used to respond to the transaction operation of the transaction initiator and send a transaction authentication request to the second server according to the first account, transaction amount, transaction password of the transaction initiator and the second account of the transaction recipient; The second server is configured to authenticate the transaction password in the transaction authentication request, and send the transaction authentication request to the first server when the transaction password passes the authentication; The first server is configured to initiate a first video call to the first terminal device according to the transaction authentication request when the transaction authentication request is obtained; The first terminal device is further configured to establish a first video call between the first server and the first terminal device in response to a response operation of the transaction initiator to the first video call; The first server is further configured to send a first identity authentication request of the transaction initiator to the second server based on the first face video of the transaction initiator in the first video call; The second server is further configured to verify the identity of the transaction initiator according to the first identity authentication request when receiving the first identity authentication request; The second server is further configured to, when it is determined that the identity of the transaction initiator has been verified, perform a corresponding transaction operation according to the transaction authentication request and send transaction completion indication information to the first server; The first server is further configured to terminate the first video call upon obtaining the transaction completion indication information.

15. A storage medium for computer-readable storage, characterized in that: The storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the transaction authentication method according to any one of claims 1 to 8.

Images