Transaction monitoring method, device and system based on voice broadcast equipment

Abstract

The invention discloses a transaction monitoring method, device and system based on voice broadcast equipment. The method comprises the following steps: receiving a transaction success notification transmitted by a mobile payment device, and when the transaction amount is greater than the verification code broadcasting limit, encrypting the current transaction time and transaction amount by using a transaction symmetric key to obtain a transaction verification code, and sending the transaction verification code to the mobile payment device; the transaction verification code is pushed to a voice monitoring device bound with the merchant number, and the voice monitoring device monitors on-site voice of the voice broadcast device, analyzes the on-site voice, verifies the transaction verification code, and sends the verification code to the merchant number; and when the verification result indicates that the transaction verification code pushed by the acquirer transaction processing server is inconsistent with the transaction verification code obtained by analyzing the on-site voice, sending an alarm prompt to a target merchant indicated by the merchant number. According to the invention, the problem that money loss of merchants and low safety are easily caused when collection is carried out by adopting a voice broadcast sound box technology in the related technology is solved.

Description

Technical Field

[0001] The present application relates to the field of financial technology or other related technical fields, and specifically, to a transaction monitoring method, device and system based on a voice broadcast device. Background Art

[0002] In the current electronic payment field, especially for small and micro businesses such as convenience stores, restaurants, and mobile vendors, voice broadcast speakers have been widely used as barcode payment auxiliary acceptance terminals. This device allows customers to scan and pay using mobile payment software by posting the merchant's payment QR code. After the payment is successful, the voice broadcast speaker helps the merchant confirm the transaction status by broadcasting the successful payment message in real time, such as "*Received 1,000 yuan via email", which simplifies the checkout process and improves payment efficiency.

[0003] The voice broadcast speaker establishes a connection with the payment backend, usually through mobile networks, WIFI or wired networks, and receives payment information pushed by the payment backend in real time. When receiving payment success information, the speaker will immediately broadcast a voice message indicating the amount of payment. This method has played an important role in the popularization of cashless transactions, but it has also exposed some security vulnerabilities.

[0004] Although voice broadcast speakers bring convenience, their security mechanisms have obvious flaws. Due to the non-uniqueness and reproducibility of voice information, criminals use this loophole to commit fraud, including the following two methods:

[0005] Forged sound on the spot: Criminals can play a pre-recorded voice message of successful payment to mislead merchants into thinking that the payment has been completed, when in fact the money has not actually been received.

[0006] Fake payment devices: Criminals carry the same voice broadcasting device as the merchant uses, and scan their own payment QR code to make payments. They then deceive the merchant by playing the real payment voice, covering up the error of the actual payment object.

[0007] The above methods take advantage of the security loopholes of the voice broadcast speaker, making it difficult for merchants to distinguish between true and false payment notifications, thereby causing financial losses. Therefore, there is room for improvement in the security of the voice broadcast speaker technology in the related art, and a method that can effectively prevent such fraudulent behavior is needed to ensure the accuracy and security of transactions.

[0008] There is currently no effective solution to the problem that the use of voice broadcast speaker technology to collect payments can easily lead to capital loss for merchants and low security. Summary of the invention

[0009] The main purpose of this application is to provide a transaction monitoring method, device and system based on a voice broadcast device to solve the problem that the relevant technology uses voice broadcast speaker technology to collect payments, which easily causes merchant capital loss and low security.

[0010] In order to achieve the above-mentioned purpose, according to one aspect of the present application, a transaction monitoring method based on a voice broadcast device is provided, which is applied to a transaction processing server of an acquiring institution, comprising: receiving a transaction success notification transmitted by a mobile payment device, wherein the transaction success notification carries: transaction amount, merchant number, payment method and current transaction time; when the transaction amount is greater than the verification code broadcast limit, encrypting the current transaction time and the transaction amount using the transaction symmetric key of the target merchant bound to the merchant number to obtain a transaction verification code; pushing the transaction verification code to a voice monitoring device bound to the merchant number, wherein the voice monitoring device monitors the on-site voice of the voice broadcast device, parses the on-site voice, obtains the transaction amount and the transaction verification code, and verifies the transaction verification code; when the verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is inconsistent with the transaction verification code obtained by parsing the on-site voice, an alarm prompt is issued to the target merchant indicated by the merchant number.

[0011] Optionally, the transaction monitoring method based on the voice broadcast device also includes: receiving a merchant public key randomly generated by the target merchant, wherein, after the target merchant randomly generates a public-private key pair based on the current timestamp, the merchant public key is loaded into the acquirer transaction processing server, and the merchant private key is loaded into the voice monitoring device; the merchant public key is used to decrypt the symmetric key encryption package to obtain the transaction symmetric key randomly generated by the target merchant.

[0012] Optionally, the step of encrypting the current transaction time and the transaction amount using the transaction symmetric key of the target merchant bound to the merchant number to obtain a transaction verification code includes: converting the current transaction time into an integer number of minutes; encrypting the integer number of minutes and the transaction amount using the transaction symmetric key, converting the encryption result into an integer number, dividing the converted integer number by a predetermined value and taking the modulus to obtain the transaction verification code.

[0013] Optionally, after obtaining the transaction verification code, the transaction monitoring method based on the voice broadcast device also includes: pushing the payment information including the payment method, the transaction amount and the transaction verification code to the voice broadcast device bound to the merchant number, wherein the voice broadcast device converts the payment information into voice broadcast.

[0014] Optionally, the transaction monitoring method based on the voice broadcast device also includes: constructing a hardware serial number mapping table and a public key mapping table; storing the binding relationship between the merchant number and the hardware serial number of the voice broadcast device in the hardware serial number mapping table; storing the binding relationship between the merchant number and the hardware serial number of the voice monitoring device in the hardware serial number mapping table; storing the binding relationship between the merchant number and the merchant public key in the public key mapping table.

[0015] Optionally, after receiving the transaction success notification transmitted by the mobile payment device, the transaction monitoring method based on the voice broadcasting device also includes: receiving a symmetric key synchronization request initiated by the voice monitoring device; responding to the symmetric key synchronization request, transmitting the key encryption package to the voice monitoring device, wherein the voice monitoring device uses the merchant's private key to decrypt the key encryption package to obtain the transaction symmetric key of the target merchant.

[0016] Optionally, before receiving the transaction success notification transmitted by the mobile payment device, the transaction monitoring method based on the voice broadcast device also includes: the mobile payment device scans the merchant payment collection graphic code on the voice broadcast device; after the mobile payment device jumps to the institution's cash register from the merchant payment collection graphic code, the mobile payment device enters the transaction amount and payment method; after the payment is successful, the mobile payment device sends the transaction success notification to the acquiring institution's transaction processing server.

[0017] Optionally, the step of the voice monitoring device verifying the transaction verification code includes: the voice monitoring device parses the on-site voice to obtain the transaction amount; the voice monitoring device converts the current device time into an integer minute, uses the transaction symmetric key to encrypt the character string containing the integer minute and the transaction amount, converts the encryption result into an integer number, divides it by a predetermined value and takes the modulus to obtain a transaction verification code corresponding to the on-site voice; the voice monitoring device performs a consistency check on the transaction verification code corresponding to the on-site voice with the transaction verification code pushed by the transaction processing server of the acquiring institution to obtain a verification result; the voice monitoring device confirms that the verification is successful and ends the verification process when the verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is consistent with the transaction verification code obtained by parsing the on-site voice.

[0018] Optionally, the voice monitoring device performs a consistency check between the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the transaction processing server of the acquiring institution, and after obtaining the verification result, further includes: when the verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is inconsistent with the transaction verification code obtained by parsing the on-site voice, the voice monitoring increases the current device time by a predetermined minute value or decreases the predetermined minute value to obtain an updated device time, converts the updated device time into an integer number of minutes, uses the transaction symmetric key to encrypt the character string containing the integer number of minutes and the transaction amount, and converts the encryption result into an integer number of minutes. The number is divided by a predetermined value and the modulus is taken to obtain a transaction verification code corresponding to the on-site voice; the transaction verification code corresponding to the on-site voice is checked for consistency with the transaction verification code pushed by the transaction processing server of the acquiring institution to obtain a new verification result; the voice monitoring device confirms that the verification is successful and ends the verification process when the new verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is consistent with the transaction verification code obtained by parsing the on-site voice; the voice monitoring device issues a quotation prompt when the new verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is consistent with the transaction verification code obtained by parsing the on-site voice.

[0019] In order to achieve the above-mentioned purpose, according to another aspect of the present application, a transaction monitoring device based on a voice broadcast device is provided, which is applied to a transaction processing server of an acquiring institution, and the device includes: a notification receiving unit, which is used to receive a transaction success notification transmitted by a mobile payment device, wherein the transaction success notification carries: transaction amount, merchant number, payment method and current transaction time; an encryption unit, which is used to encrypt the current transaction time and the transaction amount using the transaction symmetric key of the target merchant bound to the merchant number to obtain a transaction verification code when the transaction amount is greater than the verification code broadcast limit; a verification code pushing unit, which is used to push the transaction verification code to a voice monitoring device bound to the merchant number, wherein the voice monitoring device monitors the on-site voice of the voice broadcast device, analyzes the on-site voice, obtains the transaction amount and the transaction verification code, and verifies the transaction verification code. When the verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is inconsistent with the transaction verification code obtained by parsing the on-site voice, an alarm prompt is issued to the target merchant indicated by the merchant number.

[0020] Optionally, the transaction monitoring device based on the voice broadcast device also includes: a public key receiving module, used to receive the merchant public key randomly generated by the target merchant, wherein the target merchant loads the merchant public key to the acquirer transaction processing server and loads the merchant private key to the voice monitoring device after randomly generating a public-private key pair based on the current timestamp; a key decryption module, used to use the merchant public key to decrypt the symmetric key encryption package to obtain the transaction symmetric key randomly generated by the target merchant.

[0021] Optionally, the encryption unit includes: a time conversion module, used to convert the current transaction time into an integer number of minutes; a verification code generation module, used to use the transaction symmetric key to encrypt the integer number of minutes and the transaction amount, and convert the encryption result into an integer number, divide the converted integer number by a predetermined value and take the modulus to obtain the transaction verification code.

[0022] Optionally, the transaction monitoring device based on the voice broadcast device also includes: a payment information push module, which is used to push the payment information including the payment method, the transaction amount and the transaction verification code to the voice broadcast device bound to the merchant number after obtaining the transaction verification code, wherein the voice broadcast device converts the payment information into voice broadcast.

[0023] Optionally, the transaction monitoring device based on the voice broadcast device also includes: a mapping table construction module, used to construct a hardware serial number mapping table and a public key mapping table; storing the binding relationship between the merchant number and the hardware serial number of the voice broadcast device in the hardware serial number mapping table; a serial number binding module, used to store the binding relationship between the merchant number and the hardware serial number of the voice monitoring device in the hardware serial number mapping table; a public key binding module, used to store the binding relationship between the merchant number and the merchant public key in the public key mapping table.

[0024] Optionally, the transaction monitoring device based on the voice broadcast device also includes: a key synchronization request receiving module, which is used to receive a symmetric key synchronization request initiated by the voice monitoring device after receiving the transaction success notification transmitted by the mobile payment device; a key synchronization response module, which is used to respond to the symmetric key synchronization request and transmit the key encryption package to the voice monitoring device, wherein the voice monitoring device uses the merchant private key to decrypt the key encryption package to obtain the transaction symmetric key of the target merchant.

[0025] Optionally, the transaction monitoring device based on the voice broadcast device also includes: a graphic code scanning module, which is used for the mobile payment device to scan the merchant payment collection graphic code on the voice broadcast device before receiving the transaction success notification transmitted by the mobile payment device; a transaction input module, which is used for the mobile payment device to enter the transaction amount and payment method after jumping from the merchant payment collection graphic code to the institution's cash register; and a transaction notification module, which is used for the mobile payment device to send the transaction success notification to the acquiring institution's transaction processing server after the payment is successful.

[0026] Optionally, when the voice monitoring device verifies the transaction verification code, it includes: an on-site voice analysis module, which is used by the voice monitoring device to parse the on-site voice to obtain the transaction amount; a verification code comparison module, which is used by the voice monitoring device to convert the current device time into an integer minute, use the transaction symmetric key to encrypt the character string containing the integer minute and the transaction amount, convert the encryption result into an integer, divide it by a predetermined value and take the modulus, so as to obtain the transaction verification code corresponding to the on-site voice; a verification code verification module, which is used by the voice monitoring device to perform consistency verification on the transaction verification code corresponding to the on-site voice with the transaction verification code pushed by the transaction processing server of the acquiring institution to obtain a verification result; a verification success confirmation module, which is used by the voice monitoring device to confirm that the verification is successful and end the verification process when the verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is consistent with the transaction verification code obtained by parsing the on-site voice.

[0027] Optionally, the voice monitoring device performs consistency verification on the transaction verification code corresponding to the on-site voice with the transaction verification code pushed by the transaction processing server of the acquiring institution, and after obtaining the verification result, further includes: a time correction module, which is used for the voice monitoring to increase or decrease the current device time by a predetermined minute value or a predetermined minute value to obtain an updated device time when the verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is inconsistent with the transaction verification code obtained by parsing the on-site voice, and an updated verification code generation module, which is used to convert the updated device time into an integer number of minutes, encrypt the character string containing the integer number of minutes and the transaction amount using the transaction symmetric key, convert the encryption result into an integer number and divide it by A predetermined value is taken and modulo is obtained to obtain a transaction verification code corresponding to the on-site voice; a new verification code verification module is used to perform consistency verification on the transaction verification code corresponding to the on-site voice with the transaction verification code pushed by the transaction processing server of the acquiring institution to obtain a new verification result; a verification success confirmation module is used for the voice monitoring device to confirm that the verification is successful and end the verification process when the new verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is consistent with the transaction verification code obtained by parsing the on-site voice; an alarm prompt module is used for the voice monitoring device to issue a quotation prompt when the new verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is consistent with the transaction verification code obtained by parsing the on-site voice.

[0028] In order to achieve the above-mentioned purpose, according to another aspect of the present application, a transaction monitoring system based on a voice broadcast device is provided, comprising: a mobile payment device, which scans a merchant payment collection graphic code, and after being redirected to the institution's cash register by the merchant payment collection graphic code, enters the transaction amount and payment method, and after the payment is successfully made, the mobile payment device sends a transaction success notification to the acquirer transaction processing server; a voice broadcast device, which establishes a network connection with the acquirer transaction processing server, transmits the hardware serial number of the voice broadcast device to the acquirer transaction processing server for message subscription, and receives the payment information pushed by the acquirer transaction processing server in real time, converts the payment information into voice information, and plays the voice information, wherein the payment information includes the payment method, payment amount, and transaction verification code; a voice monitoring device, which monitors the voice when the target merchant conducts financial transactions with the mobile payment device and the voice information played by the voice broadcast device, and when the transaction verification code verification is inconsistent, issues an alarm prompt to the target merchant; the acquirer transaction processing server executes any one of the transaction monitoring methods based on the voice broadcast device described above.

[0029] In order to achieve the above-mentioned purpose, according to another aspect of the present application, an electronic device is provided, comprising: a memory storing an executable program; and a processor for running the program, wherein when the program is running, any one of the transaction monitoring methods based on a voice broadcast device as described above is executed.

[0030] In order to achieve the above-mentioned purpose, according to another aspect of the present application, a computer program product is provided, including computer instructions, which, when executed by a processor, implement the steps of any one of the above-mentioned transaction monitoring methods based on a voice broadcast device.

[0031] In the embodiment of the present application, the dynamically generated transaction verification code and symmetric key encryption are used to effectively prevent the leakage and tampering of payment information, thereby enhancing the security of the payment process. At the same time, on the basis of the existing voice broadcast speaker broadcasting the payment information, the transaction amount threshold verification is added and the broadcast transaction verification code is added. At the same time, the on-site voice is monitored, parsed and verified through the voice monitoring device. If the verification code verification fails, an alarm sound is issued to remind the merchant, thereby reducing the number of criminals forging voice messages on site to deceive merchants, so as to further improve the transaction security of the voice broadcast speaker, improve the convenience and success rate of the transaction, thereby solving the problem of using voice broadcast speaker technology to collect payments in related technologies, which is easy to cause merchant capital loss and low security. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] The drawings constituting a part of the present application are used to provide a further understanding of the present application. The illustrative embodiments and descriptions of the present application are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0033] Figure 1 A hardware structure block diagram of a computer terminal for implementing a transaction monitoring method based on a voice broadcast device is shown;

[0034] Figure 2 It is a flow chart of a transaction monitoring method based on a voice broadcast device provided in an embodiment of the present application;

[0035] Figure 3 is a schematic diagram of a transaction monitoring system based on a voice broadcast device according to an embodiment of the present application;

[0036] Figure 4 is a schematic diagram of a transaction monitoring device based on a voice broadcast device provided according to an embodiment of the present application;

[0037] Figure 5 It is a structural block diagram of an electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0038] To enable those skilled in the art to better understand the solution of this application, the technical solutions in the embodiments of this application will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of this application. Obviously, the described embodiments are only a part of the embodiments of this application, rather than all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of this application.

[0039] It should be noted that the terms "first", "second", etc. in the specification and claims of this application and the above-mentioned drawings are used to distinguish similar objects, and do not necessarily need to be used to describe a specific order or sequence. It should be understood that such data can be interchanged under appropriate circumstances so that the embodiments of this application described here can be implemented in an order other than those illustrated or described here. In addition, the terms "comprising" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device that includes a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or are inherent to these processes, methods, products, or devices.

[0040] First, some nouns or terms that appear during the description of the embodiments of this application are applicable to the following explanations:

[0041] Voice broadcast speaker: A barcode payment auxiliary acceptance terminal, mainly used to broadcast the voice message of successful receipt in real time after the customer's mobile phone scans the merchant's collection QR code and the payment is successful.

[0042] Acquiring institution transaction processing server: Responsible for processing payment requests from mobile payment devices, verifying the legality of transaction information, interacting with payment platforms (such as *Xin, *Bao, etc.) to confirm the payment status, and maintaining merchant information and transaction records. In the present invention, the acquiring institution transaction processing server also undertakes the task of generating and synchronizing transaction verification codes to ensure the accuracy and security of payment information. In addition, in the present invention, the acquiring institution transaction processing server is also responsible for establishing communication connections with voice broadcast devices and voice monitoring devices, pushing payment notifications and transaction verification codes in real time, and synchronizing keys and parameters to relevant devices to ensure the stable operation of the entire payment monitoring system.

[0043] Transaction verification code: A security verification tool used to prevent the messages broadcast by voice broadcast devices from being illegally forged or tampered with. After the payment is successful, it is generated in real time and sent to the voice broadcast device and the voice monitoring device together with the payment information. The voice monitoring device will monitor the broadcast content of the voice broadcast device, parse and verify the transaction verification code, so as to ensure the authenticity of the transaction.

[0044] Voice broadcast device: an auxiliary payment collection tool, mainly used in small and micro businesses such as convenience stores, restaurants, and mobile vendors. The merchant's payment collection graphic code (such as one-dimensional code, two-dimensional code) will be displayed or posted on the voice broadcast device, and payment is made by scanning this payment collection graphic code. After the payment is successful, the acquirer's transaction processing server will push the payment information including the payment method, transaction amount and transaction verification code (if the transaction amount exceeds the broadcast limit) to the voice broadcast device. After receiving this information, the device will convert the text information into voice, such as broadcasting "* letter collection 1000 yuan, verification code 903", to inform the merchant that the payment has been completed and the specific verification information of the transaction. The voice broadcast device maintains real-time communication with the acquirer's transaction processing server through the network to ensure the timely broadcast of payment information.

[0045] It should be noted that the collected information (including but not limited to user device information, user personal information, user payment information, transaction information, etc.) and data (including but not limited to data for display, data for analysis, etc.) involved in this application are information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of relevant data are in compliance with relevant laws, regulations and standards, necessary confidentiality measures are taken, and public order and good customs are not violated, and corresponding operation entrances are provided for users to choose to authorize or refuse. For example, an interface is set up between this system and relevant users or institutions to provide users with corresponding operation entrances for users to choose to agree or refuse the results of automated decision-making; if the user chooses to refuse, the expert decision-making process will be entered.

[0046] Example 1

[0047] According to an embodiment of the present application, a method embodiment of transaction monitoring based on a voice broadcast device is also provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although the logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0048] The method embodiment provided in the first embodiment of the present application can be executed in a mobile terminal, a computer terminal or a similar computing device. Figure 1 The hardware structure block diagram of a computer terminal (or mobile device) for implementing a transaction monitoring method based on a voice broadcast device is shown. Figure 1As shown, the computer terminal 10 (or mobile device) may include one or more (102a, 102b, ..., 102n are used to illustrate) processors 102 (the processor 102 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA), a memory 104 for storing data, and a transmission device 106 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of the BUS bus), a network interface, a power supply and / or a camera. It can be understood by those skilled in the art that Figure 1 The structure shown is only for illustration and does not limit the structure of the above electronic device. Figure 1 More or fewer components as shown, or with Figure 1 Different configurations are shown.

[0049] It should be noted that the one or more processors 102 and / or other data processing circuits described above may generally be referred to herein as "data processing circuits". The data processing circuits may be embodied in whole or in part as software, hardware, firmware, or any other combination thereof. In addition, the data processing circuit may be a single independent processing module, or may be incorporated in whole or in part into any of the other components in the computer terminal 10 (or mobile device). As described in the embodiments of the present application, the data processing circuit acts as a processor control (e.g., selection of a variable resistor terminal path connected to an interface).

[0050] The memory 104 can be used to store software programs and modules of application software, such as the program instructions / data storage device corresponding to the transaction monitoring method based on the voice broadcast device in the embodiment of the present application. The processor 102 executes various functional applications and data processing by running the software programs and modules stored in the memory 104, that is, the above-mentioned transaction monitoring method based on the voice broadcast device is realized. The memory 104 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include a memory remotely arranged relative to the processor 102, and these remote memories may be connected to the computer terminal 10 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and a combination thereof.

[0051] The transmission device 106 is used to receive or send data via a network. Specific examples of the above network may include a wireless network provided by the communication provider of the computer terminal 10. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one embodiment, the transmission device 106 can be a Radio Frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0052] The display can be, for example, a touch-screen liquid crystal display (LCD), which enables users to interact with the user interface of the computer terminal 10 (or mobile device).

[0053] It should be noted that the transaction monitoring method based on the voice broadcast device provided in this embodiment can improve the security and efficiency of the payment process and is applicable to various scenarios that require fast and secure payment, such as supermarkets, restaurants, retail stores, etc.

[0054] Under the above operating environment, this application provides a Figure 2 transaction monitoring method based on a voice broadcast device as shown, which is applied to the transaction processing server of the acquirer. Figure 2 is a flowchart of a transaction monitoring method based on a voice broadcast device according to Embodiment 1 of this application, as Figure 2 shown, and the transaction monitoring method includes:

[0055] It should be noted that before receiving the transaction success notification transmitted by the mobile payment device in this embodiment, the mobile payment device scans the merchant collection graphic code on the voice broadcast device; after the mobile payment device jumps to the institutional cashier desk from the merchant collection graphic code, it inputs the transaction amount and payment method; after the payment is successful, the mobile payment device sends a transaction success notification to the transaction processing server of the acquirer.

[0056] In the above content, the payment application (such as *Xin, *Bao, etc.) running on the mobile payment device (usually the customer / consumer's smart phone, IPAD, tablet, computer, etc.) will activate its built-in scanning function. Then the customer aims the mobile payment device at the merchant collection graphic code (such as, one-dimensional code, two-dimensional code, etc.) on the voice broadcast device for scanning. This merchant collection graphic code contains the unique identification information of the merchant, such as the merchant number or merchant ID, and possible encrypted information. After scanning, the payment application on the mobile payment device will immediately identify the content of the collection graphic code and jump to the cashier desk page provided by the acquirer (such as, H5 cashier desk, usually a web page interface loaded inside the payment application for subsequent payment operations).

[0057] After the mobile payment device jumps from the merchant's payment graphic code to the institution's cashier, enter the transaction amount and payment method: the H5 cashier page will display the merchant information and preliminary payment details, such as the name or logo of the merchant receiving the payment. The customer enters the specific transaction amount on the H5 cashier and selects the payment method, such as *XinPay, *BaoPay, UnionPay Cloud QuickPass, etc. At this step, the customer can also confirm or enter other payment information, such as discount codes, points deductions, etc., which may affect the final payment amount. After selecting the payment method, the customer needs to confirm the payment, which usually involves entering a payment password or passing security verification measures such as biometrics (such as fingerprints, facial recognition).

[0058] After the payment is successful, the mobile payment device sends a transaction success notification to the acquirer's transaction processing server: After the payment is successful, the mobile payment device will generate a transaction success notification containing all necessary transaction information (such as merchant number, transaction amount, payment method, transaction time, etc.). This transaction success notification is sent to the acquirer's transaction processing server through the mobile payment device's network connection (usually mobile data or WIFI network). After receiving the transaction success notification, the acquirer's transaction processing server will immediately verify the legitimacy of the transaction information, and after confirmation, push the corresponding payment information and transaction verification code to the voice broadcast device and voice monitoring device (if the transaction amount exceeds the preset verification code broadcast limit).

[0059] The above steps ensure the transparency and security of payment information from customers to merchants. Through the intervention of the acquiring institution's transaction processing server, the entire payment process is not only convenient, but also can effectively prevent the occurrence of fraud through real-time broadcasting of voice broadcasting equipment and verification code verification of voice monitoring equipment, thereby improving the payment security and transaction efficiency of small and micro merchants.

[0060] It should also be noted that, in the transaction monitoring method based on the voice broadcast device, in order to improve transaction security, it is necessary to use a key for data transmission encryption and decryption. Optionally, the transaction monitoring method based on the voice broadcast device also includes: receiving a merchant public key randomly generated by the target merchant, wherein the target merchant loads the merchant public key to the acquirer transaction processing server after randomly generating a public-private key pair based on the current timestamp, and loads the merchant private key to the voice monitoring device; uses the merchant public key to decrypt the symmetric key encryption package to obtain the transaction symmetric key randomly generated by the target merchant.

[0061] Specifically, each target merchant (i.e., small and micro merchants using voice broadcasting devices to assist in payment collection) needs to generate a pair of public and private keys, which will serve as the basis for subsequent secure communications. The target merchant operates through its voice monitoring device and generates a random public and private key pair based on the current timestamp. The public key will be used for subsequent public communications and encrypted transmission of symmetric keys, while the private key is kept on the voice monitoring device and is used to decrypt the received encrypted information, thereby ensuring the privacy and integrity of transaction information.

[0062] After generating the public-private key pair, the target merchant uploads the public key to the acquirer's transaction processing server. This upload process can be completed through a secure network connection to ensure that the public key will not be stolen or tampered with during the transmission process. At the same time, the acquirer's transaction processing server binds the merchant's public key to the merchant number and stores it in the system database for subsequent verification and decryption operations when processing transaction information.

[0063] The acquirer's transaction processing server generates a random, unique transaction symmetric key for each target merchant, which is used to encrypt and decrypt sensitive information such as transaction verification codes. This transaction symmetric key will be encrypted to form a symmetric key encryption package. The encryption package is encrypted using the public key uploaded by the target merchant to ensure that only the voice monitoring device with the corresponding private key can decrypt and obtain the transaction symmetric key. The acquirer's transaction processing server will transmit the key encryption package to the target merchant's voice monitoring device through the network. After receiving the key encryption package, the voice monitoring device uses the merchant's private key pre-installed in it to decrypt the encryption package. After successful decryption, the voice monitoring device will obtain the transaction symmetric key for subsequent secure communication operations such as transaction verification code verification.

[0064] After the transaction symmetric key is securely decrypted on the voice monitoring device, it will be used to verify the transaction verification code broadcast in real time from the voice broadcast device. At the same time, the acquirer's transaction processing server will regularly update the transaction symmetric key to prevent security risks caused by long-term use of the key. After each update, the voice monitoring device needs to re-initiate a key synchronization request to obtain the latest transaction symmetric key to ensure the continued effectiveness of the transaction monitoring method.

[0065] Through the above-mentioned technical features, the transaction monitoring method based on the voice broadcast device can effectively utilize the combination of public and private key pairs and transaction symmetric keys to improve the security and reliability of transaction verification.

[0066] Step S101, receiving a transaction success notification transmitted by a mobile payment device, wherein the transaction success notification carries: transaction amount, merchant number, payment method and current transaction time.

[0067] Optionally, in the transaction monitoring method based on the voice broadcast device provided in the embodiment of the present application, after receiving the transaction success notification transmitted by the mobile payment device, it also includes: receiving a symmetric key synchronization request initiated by the voice monitoring device; responding to the symmetric key synchronization request, transmitting the key encryption package to the voice monitoring device, wherein the voice monitoring device uses the merchant's private key to decrypt the key encryption package to obtain the transaction symmetric key of the target merchant.

[0068] During the first connection or regular synchronization, the voice monitoring device will actively initiate a symmetric key synchronization request. This request is initiated after establishing communication with the acquirer's transaction processing server through an Internet connection, using a mobile network, WIFI or a wired network, etc. The purpose is to obtain the latest transaction symmetric key to ensure that the verification code in subsequent transactions can be correctly verified and enhance transaction security. When the acquirer's transaction processing server receives the symmetric key synchronization request from the voice monitoring device, it will generate a key encryption package containing the target merchant's transaction symmetric key. In order to ensure the security of key transmission, the server uses the merchant's public key to encrypt the transaction symmetric key to form a key encryption package. This encryption process ensures that even if the key encryption package is intercepted during transmission, a third party cannot decrypt and obtain the real transaction symmetric key. The encrypted key encryption package will be transmitted to the voice monitoring device through a secure network channel. The communication between the server and the device should use an encryption protocol to further protect the security of the transmitted data.

[0069] After receiving the key encryption package, the voice monitoring device uses the pre-installed merchant private key to decrypt the key encryption package. Since the key encryption package is encrypted using the corresponding merchant public key, only the device with the correct private key can successfully decrypt and obtain the real transaction symmetric key. This decryption process is a key link in transaction security communication, ensuring the privacy and security of the transaction symmetric key. Once the decryption is successful, the voice monitoring device will save the transaction symmetric key for subsequent verification of the transaction verification code. During the payment process, when the voice broadcast device broadcasts a voice message containing a transaction verification code, the voice monitoring device will use the transaction symmetric key to encrypt the transaction amount and time parsed from the on-site voice, and compare it with the transaction verification code pushed by the acquirer's transaction processing server to verify the authenticity of the transaction information.

[0070] In order to deal with potential security threats, such as key leakage or device cracking, voice monitoring devices and acquirer transaction processing servers should regularly perform symmetric key synchronization and update processes. This may include regular replacement of transaction symmetric keys and immediate key updates when security vulnerabilities are discovered. A periodic key synchronization mechanism should be established between the device and the server to ensure that the transaction symmetric keys used are always up-to-date and secure.

[0071] Through the implementation of the above technical features, the transaction monitoring method based on the voice broadcast device provided by this application can realize the secure communication between the voice monitoring device and the transaction processing server of the acquiring institution, ensuring the private transmission and correct use of the transaction symmetric key. This mechanism strengthens the security protection in the payment scenario of small and micro merchants, effectively prevents dangerous behaviors through voice broadcast devices, and provides merchants and customers with a safer and more reliable payment experience.

[0072] Step S102, when the transaction amount is greater than the verification code broadcast limit, the current transaction time and transaction amount are encrypted using the target merchant's transaction symmetric key bound to the merchant number to obtain a transaction verification code.

[0073] Optionally, in the transaction monitoring method based on the voice broadcast device provided in the embodiment of the present application, the current transaction time and transaction amount are encrypted using the transaction symmetric key of the target merchant bound to the merchant number to obtain a transaction verification code, including: converting the current transaction time into an integer number of minutes; encrypting the integer number of minutes and the transaction amount using the transaction symmetric key, and converting the encryption result into an integer number, dividing the converted integer number by a predetermined value and taking the modulus to obtain the transaction verification code.

[0074] After the payment is successful, the acquirer's transaction processing server will obtain the current transaction time. Since the timestamp may contain a lot of details (such as seconds and milliseconds), in order to simplify the encryption process and ensure the consistency of the verification code, the server converts the current transaction time into an integer number of minutes. For example, if the current time is 14:32:15, the converted integer number of minutes is 14*60+32=872. This conversion method eliminates the slight difference in time, so that the verification code generated by the same symmetric key on different devices can be consistent within a certain time range.

[0075] It should also be noted that the transaction symmetric key mentioned in this embodiment is generated by the acquirer transaction processing server for each target merchant. It is bound to the merchant number and is used to encrypt key data in the transaction information. When generating a transaction verification code, the server uses the transaction symmetric key to encrypt the converted integer minutes and transaction amount. After the encryption process is completed, the encryption result is usually a series of complex characters or binary data. In order to facilitate the generation and identification of the transaction verification code, the server will convert the encryption result into an integer number, and then the integer number will be divided by a predetermined value and the modulus will be calculated. The selection of the predetermined value should take into account the length and range of the verification code to ensure that the generated transaction verification code has a certain degree of randomness and security, and can be easily broadcast and verified. For example, if the predetermined value is 999, the transaction verification code will be an integer between 0 and 998, which is sufficient to provide sufficient security, while not being too complex and easy to broadcast and identify.

[0076] Through the above steps, the acquirer's transaction processing server will obtain an integer number, which represents the encrypted combination of transaction time and amount. Finally, this integer number is divided by a predetermined value and the modulus is taken, and the result is the transaction verification code. The generation of the transaction verification code ensures that it is closely related to the specific transaction time, amount and merchant's transaction symmetric key, thereby effectively preventing the merchant from losing money through forged voice broadcast messages, thereby improving the security of small and micro merchants in payment scenarios.

[0077] Optionally, in the transaction monitoring method based on the voice broadcast device provided in the embodiment of the present application, after obtaining the transaction verification code, the transaction monitoring method based on the voice broadcast device also includes: pushing the payment information including the payment method, transaction amount and transaction verification code to the voice broadcast device bound to the merchant number, wherein the voice broadcast device converts the payment information into voice broadcast.

[0078] When the acquirer's transaction processing server receives notification of a successful transaction, it will immediately construct the payment information, which may include specific details of the collected transaction, such as payment method, transaction amount, and the transaction verification code generated in the above encryption process. If the transaction amount exceeds the verification code broadcast limit set by the merchant, the server will ensure that all information including the transaction verification code is accurately constructed. Once the payment information is constructed, the acquirer's transaction processing server will push this information to the voice broadcast device bound to the merchant number through its communication interface. The push process is completed through the Internet such as mobile networks, WIFI or wired networks to ensure the real-time and security of the information. There is a stable message subscription relationship between the server and the voice broadcast device, which enables the server to accurately and promptly deliver the payment information to the corresponding voice broadcast device.

[0079] After receiving the payment information, the voice broadcast device will start processing the payment message and convert the payment message into voice. The built-in voice synthesis module of the device will convert the received payment method, transaction amount and transaction verification code (if any) into a voice message. Finally, the voice broadcast device will broadcast the payment information in voice form through its built-in speaker or audio output interface. For example, if the payment information content is "* letter received 1000 yuan, verification code 903", then the voice broadcast device will broadcast "* letter received 1000 yuan, verification code 903", clearly informing the merchant of the specific transaction method, amount and security verification information. By broadcasting the complete payment information including the transaction verification code in real time, not only can the merchant confirm the payment status immediately, but also through the transaction verification code as an additional security measure, it prevents potential dangerous behaviors, such as illegal copying or tampering with the voice broadcast message. Merchants can confirm the validity of the verification code based on the broadcast payment method and amount, thereby ensuring that every transaction is real.

[0080] It should be noted that in this embodiment, the merchant can customize the verification code broadcast limit, and this setting is stored in the acquirer's transaction processing server. If the transaction amount exceeds this limit, the server will return a transaction verification code; otherwise, no verification code will be returned. The voice broadcast device processes according to the information returned by the server: when receiving payment information containing a transaction verification code, the verification code will be included in the broadcast; when receiving payment information that does not contain a transaction verification code, only the payment method and transaction amount will be broadcast.

[0081] Step S103, push the transaction verification code to the voice monitoring device bound to the merchant number, wherein the voice monitoring device monitors the on-site voice of the voice broadcasting device, analyzes the on-site voice, obtains the transaction amount and the transaction verification code, and verifies the transaction verification code. When the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is inconsistent with the transaction verification code obtained by analyzing the on-site voice, an alarm prompt is issued to the target merchant indicated by the merchant number.

[0082] When the acquirer's transaction processing server generates a transaction verification code, it will push the transaction verification code together with the payment information to the voice monitoring device bound to the merchant number through a pre-established communication channel. This push process is real-time, ensuring the immediate availability of the transaction verification code. While receiving the transaction verification code, the voice monitoring device also needs to synchronously receive the merchant's transaction symmetric key and verification code broadcast limit parameters, which will be used in the subsequent verification code generation and verification process. The voice monitoring device can monitor all voice information broadcasted by the voice broadcast device on site in real time. When a transaction is completed and broadcast, the voice monitoring device will capture the voice broadcast containing the transaction amount and transaction verification code. The voice recognition module inside the device converts the received voice signal into text information. This process involves preprocessing, feature extraction and pattern recognition of voice signals, and the ultimate goal is to accurately parse the broadcasted transaction amount and transaction verification code. After parsing the transaction amount and transaction verification code, the voice monitoring device uses the locally stored merchant transaction symmetric key to encrypt and calculate the current device time (converted into integer minutes) and the transaction amount, and generates an actual transaction verification code for comparison. The device compares the parsed transaction verification code with the transaction verification code pushed by the server. If the two are consistent, it means that the transaction information is authentic and valid; if the two are inconsistent, this may mean that the transaction information has been tampered with or there is fraud.

[0083] Optionally, in the transaction monitoring method based on the voice broadcasting device provided in the embodiment of the present application, the step of the voice monitoring device verifying the transaction verification code includes: the voice monitoring device parses the on-site voice to obtain the transaction amount; the voice monitoring device converts the current device time into an integer minute, uses the transaction symmetric key to encrypt the character string containing the integer minute and the transaction amount, converts the encryption result into an integer number, divides it by a predetermined value and takes the modulus to obtain a transaction verification code corresponding to the on-site voice; the voice monitoring device performs consistency verification on the transaction verification code corresponding to the on-site voice with the transaction verification code pushed by the transaction processing server of the acquiring institution to obtain a verification result; when the verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is consistent with the transaction verification code obtained by parsing the on-site voice, the voice monitoring device confirms that the verification is successful and ends the verification process.

[0084] When the transaction is completed and announced by the voice broadcast device, the voice monitoring device first captures and analyzes the live voice broadcast. The built-in voice recognition technology can quickly convert the voice signal into text information. Subsequently, the device will identify the transaction amount from the parsed text for the subsequent transaction verification code verification process. The voice monitoring device converts the current device time into an integer minute. This conversion takes into account the accuracy of the device's internal clock to ensure that it is synchronized with the time of the acquirer's transaction processing server or within an acceptable time error range. Then, the device uses the locally stored transaction symmetric key to encrypt the string containing the integer minute and transaction amount. This encryption process may use symmetric encryption algorithms such as AES and DES to ensure that the generated transaction verification code is based on the same time and amount information as the verification code generated by the acquirer's transaction processing server, but is encrypted by different devices. After the encryption result is converted to an integer, the device will divide it by a predetermined value and take the modulus operation, and finally obtain a transaction verification code corresponding to the live voice. The selection of the predetermined value (such as 999) should take into account the length and security requirements of the verification code to ensure that the generated verification code is easy to broadcast and identify, and has a certain degree of randomness and security.

[0085] The voice monitoring device then compares the locally generated transaction verification code with the transaction verification code pushed by the acquirer's transaction processing server. This verification process ensures the integrity and authenticity of the transaction information. If the two are consistent, the device confirms that the verification is successful, which means that the transaction process is safe. The confirmation of successful verification can be a record inside the device, or a confirmation message sent to the acquirer's transaction processing server through the network, indicating that the voice broadcast content of the transaction has been security verified. If the consistency check shows that the transaction verification code pushed by the acquirer's transaction processing server is consistent with the transaction verification code obtained by the voice monitoring device parsing the on-site voice, the voice monitoring device will immediately end the verification process. This means that the transaction information has been effectively verified and can be considered a real transaction event without taking additional security measures or alarms. Merchants can accept payment with peace of mind based on this confirmation information.

[0086] Optionally, the voice monitoring device performs a consistency check between the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the transaction processing server of the acquiring institution, and after obtaining the verification result, further includes: when the voice monitoring verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is inconsistent with the transaction verification code obtained by parsing the on-site voice, the current device time is increased by a predetermined minute value or decreased by a predetermined minute value to obtain an updated device time, the updated device time is converted into an integer number of minutes, a character string containing the integer number of minutes and the transaction amount is encrypted using a transaction symmetric key, the encryption result is converted into an integer number and then divided by a predetermined value and modulus is taken to obtain the transaction verification code corresponding to the on-site voice; the transaction verification code corresponding to the on-site voice is checked for consistency with the transaction verification code pushed by the transaction processing server of the acquiring institution to obtain a new verification result; when the new verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is consistent with the transaction verification code obtained by parsing the on-site voice, the voice monitoring device confirms that the verification is successful and ends the verification process; when the new verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is consistent with the transaction verification code obtained by parsing the on-site voice, the voice monitoring device issues a quotation prompt.

[0087] When the transaction verification code obtained by the voice monitoring device after the first analysis of the on-site voice is inconsistent with the transaction verification code pushed by the acquirer's transaction processing server, this means that there may be problems such as time synchronization error, device clock deviation or third-party interference. In order to ensure the accuracy of the verification result and avoid false positives, the device will perform further verification procedures. After the initial verification fails, the voice monitoring device will try to adjust the current device time. The specific operation is to increase or decrease the current time by a predetermined minute value to obtain the updated device time. This fine-tuning takes into account the possible time difference between the device and the server. For example, due to factors such as network delay and device clock deviation, the broadcast time of the on-site voice may have an error of several seconds to several minutes from the time recorded by the server. After updating the device time, the device converts the updated time into an integer number of minutes again, and uses the transaction symmetric key to encrypt the string containing the integer number of minutes and the transaction amount. After the encryption result is converted to an integer number, the device performs a division by a predetermined value (such as 999) and takes the modulus operation to generate a new transaction verification code. Then, the device compares the transaction verification code generated again with the transaction verification code pushed by the acquirer's transaction processing server to obtain a new verification result. This repeated verification process ensures that even if there is a time error, the correct transaction verification code can be verified by adjusting the time. If the new verification result shows that the transaction verification code after the time adjustment is consistent with the transaction verification code pushed by the server, the voice monitoring device will confirm that the verification is successful and end the verification process. This means that even after the time adjustment, the transaction information can still be correctly verified and the transaction process can be considered safe.

[0088] In order to avoid unnecessary alarm prompts, the voice monitoring device will not sound an alarm when the verification result finally indicates that the transaction verification code is consistent. This strategy ensures that the alarm mechanism will only be triggered when the transaction verification code is indeed inconsistent, that is, there is potential fraud, avoiding false alarms caused by time errors or device synchronization problems. On the contrary, if the transaction verification code after time adjustment is still inconsistent with the verification code pushed by the server, this usually indicates a serious time synchronization problem or potential fraud. At this time, the voice monitoring device will immediately activate the alarm mechanism and send out an obvious alarm prompt signal to warn the merchant of possible transaction security issues. The alarm prompt can be a local alarm sound of the device, a flashing warning light, or an emergency notification sent to the merchant's mobile device through the network, ensuring that the merchant can immediately detect abnormalities and take necessary countermeasures.

[0089] Through the implementation of the above technical features, the voice monitoring device can effectively handle time synchronization errors and perform multiple verifications on the transaction verification code to ensure the accuracy and security of transaction information. This mechanism not only enhances the security protection of small and micro merchants in payment scenarios, but also reduces the possibility of false alarms through intelligent processing procedures, creating a more stable and reliable transaction environment for merchants, while reducing the burden on merchants in payment security monitoring.

[0090] It should be noted that in this embodiment, when the transaction verification code verification fails, that is, the transaction verification code generated by the voice monitoring device is inconsistent with the transaction verification code parsed from the on-site voice, the device will immediately activate the alarm mechanism. The alarm mechanism mentioned in this embodiment may include an alarm sound emitted locally by the device, and an alarm signal sent to the acquirer transaction processing server through the network to notify the server of potential security issues. After receiving the alarm signal, the acquirer transaction processing server can further verify the transaction information, suspend or cancel the transaction if necessary, and send an alarm prompt to the target merchant indicated by the merchant number (that is, the small and micro merchants served by the voice broadcasting device) so that the merchant can take countermeasures in time. Through this technical feature, the voice monitoring device not only enhances the security during the transaction process, but also protects the financial security of small and micro merchants.

[0091] Through the transaction monitoring method based on the voice broadcast device provided in the embodiment of the present application, the dynamically generated transaction verification code and symmetric key encryption effectively prevent the leakage and tampering of payment information, and enhance the security of the payment process. At the same time, on the basis of the existing voice broadcast speaker broadcasting the payment information, the transaction amount threshold verification is added and the broadcast transaction verification code is added. At the same time, the on-site voice is monitored, analyzed and verified by the voice monitoring device. If the verification code verification fails, an alarm sound is issued to remind the merchant, thereby reducing the criminals forging voice messages on site to deceive merchants, so as to further improve the transaction security of the voice broadcast speaker, improve the convenience and success rate of the transaction, and solve the problem of using voice broadcast speaker technology to collect money in related technologies, which is easy to cause the loss of merchant funds and low security.

[0092] In the transaction monitoring method based on the voice broadcast device provided in the embodiment of the present application, the transaction monitoring method based on the voice broadcast device also includes: constructing a hardware serial number mapping table and a public key mapping table; storing the binding relationship between the merchant number and the hardware serial number of the voice broadcast device in the hardware serial number mapping table; storing the binding relationship between the merchant number and the hardware serial number of the voice monitoring device in the hardware serial number mapping table; storing the binding relationship between the merchant number and the merchant public key in the public key mapping table.

[0093] Among them, the hardware serial number mapping table mentioned in this embodiment is used to store the binding relationship between the hardware serial number of the voice broadcast device and the voice monitoring device and the merchant number, ensuring the uniqueness of each device and the accuracy of its corresponding merchant information. When constructing this mapping table, each voice broadcast device and voice monitoring device is assigned a unique hardware serial number when it is produced or deployed. This serial number can be the IMEI number, MAC address or other unique identifier inside the device. When the acquiring institution's transaction processing server establishes a connection with the voice broadcast device and the voice monitoring device, it will obtain their hardware serial numbers. The server binds the merchant number to the hardware serial number of each device and stores these binding relationships in the hardware serial number mapping table. In this way, the server can find the corresponding voice broadcast device and voice monitoring device according to the merchant number by querying the mapping table, and realize accurate message push and security verification.

[0094] The binding relationship between the merchant number and the hardware serial number of the voice broadcast device, and the binding relationship between the merchant number and the hardware serial number of the voice monitoring device will be stored in the hardware serial number mapping table. This storage process is dynamic. When there is a new device binding or the binding relationship of an existing device changes, the server will update the mapping table to ensure the timeliness and accuracy of the information.

[0095] It should also be noted that the public key mapping table is used to store the binding relationship between the merchant number and the merchant public key, which is the key to achieving secure communication based on the public-private key symmetric encryption algorithm. When the merchant registers or the device is initialized, the acquirer transaction processing server generates a public-private key pair for the merchant, where the private key is stored in the voice monitoring device, and the public key is stored together with the merchant number in the public key mapping table. The public key mapping table ensures that the acquirer transaction processing server can use the correct public key to encrypt the transaction information and ensure the secure transmission of data. At the same time, the voice monitoring device can use its stored private key to decrypt this information to achieve security verification.

[0096] The hardware serial number mapping table and public key mapping table need to be updated and synchronized regularly to cope with device replacement or merchant information changes. The acquirer transaction processing server provides corresponding interfaces, allowing voice monitoring devices and voice broadcast devices to call these interfaces to obtain the latest merchant information and key parameters. When the device is connected for the first time or communicates regularly, through the call of these interfaces, the device can obtain the latest hardware serial number mapping table and public key mapping table information to ensure that the subsequent security communication and verification mechanism can operate normally.

[0097] It should be noted that the steps shown in the flowcharts of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and that, although a logical order is shown in the flowcharts, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0098] Example 2

[0099] It should be noted that, in the process of implementing the transaction monitoring method based on the voice broadcast device in the above-mentioned embodiment 1, this embodiment provides a transaction monitoring system based on the voice broadcast device.

[0100] Figure 3 is a schematic diagram of a transaction monitoring system based on a voice broadcast device according to an embodiment of the present application, such as Figure 3 As shown, the system includes: an acquiring institution transaction processing server 301, a mobile payment device 302 (corresponding to a mobile payment device), a voice broadcasting device 303, and a voice monitoring device 304.

[0101] The acquirer transaction processing server 301 is mainly used to process payment requests from the mobile payment device 302, push merchant collection information to the voice broadcast device 303, and synchronize the merchant transaction symmetric key and verification code broadcast limit parameters to the voice monitoring device 304. Specifically, it includes: maintaining the binding relationship between the merchant number and the hardware serial number of the voice broadcast device 303; maintaining the binding relationship between the merchant number and the hardware serial number of the voice monitoring device 304; generating a random and unique public-private key pair for each merchant. The public key is maintained in the acquirer transaction processing server 301, and the private key is loaded into the voice monitoring device 304; maintaining the binding relationship between the merchant number and the merchant public key; providing a verification code broadcast limit parameter synchronization interface for the voice monitoring device 304 to call. For each merchant, a random and unique transaction symmetric key is generated for the generation and verification of the verification code, and this key is finally stored in the acquirer transaction processing server 301 and the voice monitoring device 304 respectively; providing a transaction symmetric key synchronization interface for the voice monitoring device 304 to call, where the transaction symmetric key is encrypted and transmitted using the merchant public key; providing a message subscription interface for the voice broadcast device 303 to call; receiving payment requests from the mobile payment device 302 and pushing messages to the voice broadcast device 303 after successful payment; when pushing messages, if the transaction amount is greater than the verification code broadcast limit, the current transaction time and transaction amount are encrypted and calculated using the transaction symmetric key to obtain the transaction verification code, and the acquirer transaction processing server 301 synchronously pushes this transaction verification code to the voice broadcast device 303; when pushing messages, if the transaction amount is less than or equal to the verification code broadcast limit, no transaction verification code is generated.

[0102] Optionally, the following method can be used to generate the transaction verification code: first convert the current transaction time into integer minutes, encrypt the string "minutes + transaction amount" using the transaction symmetric key, and after converting the encryption result into an integer number, take the modulus by 999, which is the transaction verification code.

[0103] The mobile payment device 302 is mainly used to scan the merchant collection QR code on the voice broadcast device 303 to complete the payment. Specifically, it includes: the mobile payment device 302 scans the merchant collection QR code on the voice broadcast device 303 and jumps to the acquirer H5 cashier desk; after entering the transaction amount on the H5 cashier desk, select the payment method, such as *Xin, *Bao, Cloud QuickPass, etc., and click to confirm the payment; after successful payment, the mobile payment device 302 sends a transaction result notification to the acquirer transaction processing server 301, including information such as the merchant number, transaction amount, payment method, and transaction time.

[0104] The voice broadcast device 303 is mainly used to receive merchant payment collection information pushed by the background and broadcast it in real time, specifically including: the voice broadcast device 303 posts a merchant payment QR code for the mobile payment device 302 to scan and pay; the voice broadcast device 303 establishes a connection with the acquirer transaction processing server 301 through Internet methods such as mobile network, WIFI, and wired network, and subscribes to messages by sending the hardware serial number of the voice broadcast speaker online to the acquirer transaction processing server 301; after subscribing, the voice broadcast device 303 receives the payment information pushed by the acquirer transaction processing server 301 in real time. The payment information includes payment methods (such as *Xin, *Bao, UnionPay QR code, digital RMB), payment amount, payment verification code, etc. The received payment text information is converted into voice information and finally played through sound.

[0105] Optionally, the merchant can customize the verification code broadcast limit. If the transaction amount exceeds the verification code broadcast limit, the voice message needs to broadcast the payment verification code. If the transaction amount is less than or equal to the limit, the payment verification code is not broadcast. This limit can be maintained on the acquirer transaction processing server 301. If the transaction amount exceeds the verification code broadcast limit, the payment verification code is returned. If the transaction amount is less than or equal to the limit, the payment verification code is not returned. The voice broadcast device 303 processes separately according to whether the acquirer transaction processing server 301 returns the payment verification code. If the payment verification code is returned, it broadcasts "<Payment method> received <Amount> yuan, verification code <Verification code value>", such as "*Xin received 1000 yuan, verification code 903"; if the payment verification code is not returned, it broadcasts "<Payment method> received <Amount> yuan", such as "*Xin received 500 yuan".

[0106] The voice monitoring device 304 is mainly used to monitor, analyze and verify the on-site voice. If the verification code verification fails, an alarm sound is issued to remind the merchant. Specifically, the voice monitoring device 304 establishes a connection with the acquirer transaction processing server 301 through the Internet such as mobile network, WIFI, wired network, etc.; the merchant generates a public-private key pair, in which the private key is stored in the voice monitoring device 304, and the public key, merchant number, and voice monitoring device 304 hardware serial number are manually maintained on the acquirer transaction processing server 301 by the business; the voice monitoring device 304 periodically initiates merchant transaction symmetric key synchronization to the acquirer transaction processing server 301, and obtains the merchant transaction symmetric key through local private key decryption; the voice monitoring device 304 periodically sends a merchant transaction processing server 301 to the acquirer transaction processing server 301 1. Initiate verification code broadcast limit synchronization, obtain the verification code broadcast limit maintained by the acquirer transaction processing server 301 by sending the hardware serial number of the voice monitoring device 304; monitor the on-site voice, convert the voice into text, and further parse to obtain information such as the transaction amount and transaction verification code; make a judgment based on the parsed transaction amount, if the transaction amount is greater than the verification code broadcast limit but the verification code is empty, issue an alarm to remind the merchant; if the transaction amount is greater than the verification code broadcast limit and the verification code is not empty, compare the actual verification code calculated by the current device transaction symmetric key with the current device time and transaction amount; if the compared verification codes are inconsistent, issue an alarm to remind the merchant; if the transaction amount is less than or equal to the verification code broadcast limit, no verification code verification is required.

[0107] Optionally, the following method can be used for verification of the voice monitoring device 304 verification code: first convert the current device time into an integer number of minutes, use the transaction symmetric key to encrypt the string "number of minutes + transaction amount", convert the encryption result into an integer number and divide it by 999 to obtain the transaction verification code 1. If the transaction verification code 1 is consistent, the verification is considered successful and the verification process ends; if the transaction verification code 1 verification fails, add 1 to the minute number of the current device time, use the transaction symmetric key to encrypt the string "number of minutes after adding 1 + transaction amount", and convert the encryption result into an integer number. Then divide by 999 and take the modulus to get transaction verification code 2. If transaction verification code 2 is consistent, the verification is considered successful and the verification process ends; if transaction verification code 2 fails to verify, the minute of the current device time is reduced by 1, and the string "minutes after 1 + transaction amount" is encrypted using the transaction symmetric key. The encrypted result is converted to an integer and then divided by 999 and taken the modulus to get transaction verification code 3. If transaction verification code 3 is consistent, the verification is considered successful and the verification process ends; if transaction verification code 1, transaction verification code 2, and transaction verification code 3 all fail to compare, the verification is considered to have failed in the end. (Here, the main consideration is that there is a certain error between the device time and the server time).

[0108] The embodiment of the present invention adds the broadcast of transaction verification code on the basis of the existing voice broadcast speaker broadcasting payment information, and verifies the verification code through a voice monitoring device at the same time. If the verification is inconsistent, an alarm sound is issued to remind the merchant, thereby ensuring that criminals cannot deceive merchants by forging voice messages on site, so as to further improve the transaction security of the voice broadcast speaker.

[0109] Example 2

[0110] The embodiment of the present application also provides a transaction monitoring device based on a voice broadcast device. It should be noted that the transaction monitoring device based on a voice broadcast device in the embodiment of the present application can be used to execute the transaction monitoring method based on a voice broadcast device provided in the embodiment of the present application. The transaction monitoring device based on a voice broadcast device provided in the embodiment of the present application is introduced below.

[0111] According to an embodiment of the present application, a device for implementing the above-mentioned transaction monitoring method based on a voice broadcast device is also provided, such as Figure 4 As shown, the device includes: a notification receiving unit 41, an encryption unit 42, and a verification code pushing unit 43.

[0112] The notification receiving unit 41 is used to receive a transaction success notification transmitted by a mobile payment device, wherein the transaction success notification carries: transaction amount, merchant number, payment method and current transaction time.

[0113] The encryption unit 42 is used to encrypt the current transaction time and transaction amount using the target merchant's transaction symmetric key bound to the merchant number to obtain a transaction verification code when the transaction amount is greater than the verification code broadcast limit.

[0114] The verification code push unit 43 is used to push the transaction verification code to the voice monitoring device bound to the merchant number, wherein the voice monitoring device monitors the on-site voice of the voice broadcasting device, analyzes the on-site voice, obtains the transaction amount and the transaction verification code, and verifies the transaction verification code. When the verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is inconsistent with the transaction verification code obtained by analyzing the on-site voice, an alarm prompt is issued to the target merchant indicated by the merchant number.

[0115] Through the transaction monitoring device based on the voice broadcast device provided in the embodiment of the present application, the leakage and tampering of payment information are effectively prevented through the dynamically generated transaction verification code and symmetric key encryption, and the security of the payment process is enhanced. At the same time, on the basis of the existing voice broadcast speaker broadcasting the collection information, the transaction amount threshold verification and the broadcast transaction verification code are added. At the same time, the on-site voice is monitored, analyzed and verified through the voice monitoring device. If the verification code verification fails, an alarm sound is issued to remind the merchant, thereby reducing the criminals from forging voice messages on the spot to deceive merchants, so as to further improve the transaction security of the voice broadcast speaker, improve the convenience and success rate of the transaction, thereby solving the problem of using voice broadcast speaker technology to collect money in the related technology, which is easy to cause the loss of merchants' funds and low security.

[0116] Optionally, the transaction monitoring device based on the voice broadcasting device provided in the embodiment of the present application also includes: a public key receiving module, used to receive a merchant public key randomly generated by the target merchant, wherein the target merchant loads the merchant public key to the acquiring institution's transaction processing server and loads the merchant private key to the voice monitoring device after randomly generating a public-private key pair based on the current timestamp; a key decryption module, used to use the merchant public key to decrypt the symmetric key encryption package to obtain the transaction symmetric key randomly generated by the target merchant.

[0117] Optionally, in the transaction monitoring device based on the voice broadcast device provided in the embodiment of the present application, the encryption unit includes: a time conversion module, used to convert the current transaction time into an integer number of minutes; a verification code generation module, used to use the transaction symmetric key to encrypt the integer number of minutes and the transaction amount, and convert the encryption result into an integer number, divide the converted integer number by a predetermined value and take the modulus to obtain a transaction verification code.

[0118] Optionally, the transaction monitoring device based on the voice broadcast device provided in the embodiment of the present application also includes: a payment information push module, which is used to push the payment information including the payment method, transaction amount and transaction verification code to the voice broadcast device bound to the merchant number after obtaining the transaction verification code, wherein the voice broadcast device converts the payment information into voice broadcast.

[0119] Optionally, the transaction monitoring device based on the voice broadcast device provided in the embodiment of the present application also includes: a mapping table construction module, used to construct a hardware serial number mapping table and a public key mapping table; storing the binding relationship between the merchant number and the hardware serial number of the voice broadcast device in the hardware serial number mapping table; a serial number binding module, used to store the binding relationship between the merchant number and the hardware serial number of the voice monitoring device in the hardware serial number mapping table; a public key binding module, used to store the binding relationship between the merchant number and the merchant public key in the public key mapping table.

[0120] Optionally, the transaction monitoring device based on the voice broadcasting device provided in the embodiment of the present application also includes: a key synchronization request receiving module, which is used to receive a symmetric key synchronization request initiated by the voice monitoring device after receiving the transaction success notification transmitted by the mobile payment device; a key synchronization response module, which is used to respond to the symmetric key synchronization request and transmit the key encryption package to the voice monitoring device, wherein the voice monitoring device uses the merchant's private key to decrypt the key encryption package to obtain the transaction symmetric key of the target merchant.

[0121] Optionally, the transaction monitoring device based on the voice broadcast device provided in the embodiment of the present application also includes: a graphic code scanning module, which is used for the mobile payment device to scan the merchant payment collection graphic code on the voice broadcast device before receiving the transaction success notification transmitted by the mobile payment device; a transaction input module, which is used for the mobile payment device to enter the transaction amount and payment method after jumping from the merchant payment collection graphic code to the institution's cash register; a transaction notification module, which is used for the mobile payment device to send a transaction success notification to the acquiring institution's transaction processing server after the payment is successful.

[0122] Optionally, in the transaction monitoring device based on the voice broadcasting device provided in the embodiment of the present application, when the voice monitoring device verifies the transaction verification code, it includes: an on-site voice analysis module, which is used for the voice monitoring device to analyze the on-site voice to obtain the transaction amount; a verification code comparison module, which is used for the voice monitoring device to convert the current device time into an integer minute, use the transaction symmetric key to encrypt the character string containing the integer minute and the transaction amount, convert the encryption result into an integer number, divide it by a predetermined value and take the modulus, and obtain the transaction verification code corresponding to the on-site voice; a verification code verification module, which is used for the voice monitoring device to perform consistency verification between the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the transaction processing server of the acquiring institution to obtain a verification result; a verification success confirmation module, which is used for the voice monitoring device to confirm that the verification is successful and end the verification process when the verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is consistent with the transaction verification code obtained by parsing the on-site voice.

[0123] Optionally, in the transaction monitoring device based on the voice broadcasting device provided in the embodiment of the present application, the voice monitoring device performs consistency verification on the transaction verification code corresponding to the on-site voice with the transaction verification code pushed by the transaction processing server of the acquiring institution, and after obtaining the verification result, it also includes: a time correction module, which is used for voice monitoring to increase or decrease the current device time by a predetermined minute value or a predetermined minute value to obtain an updated device time when the verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is inconsistent with the transaction verification code obtained by parsing the on-site voice; an updated verification code generation module, which is used to convert the updated device time into an integer number of minutes, and use the transaction symmetric key to encrypt the character string containing the integer number of minutes and the transaction amount, and convert The encryption result is converted into an integer and then divided by a predetermined value and the modulus is taken to obtain a transaction verification code corresponding to the on-site voice; a new verification code verification module is used to perform consistency verification on the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the transaction processing server of the acquiring institution to obtain a new verification result; a verification success confirmation module is used for the voice monitoring device to confirm that the verification is successful and end the verification process when the new verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is consistent with the transaction verification code obtained by parsing the on-site voice; an alarm prompt module is used for the voice monitoring device to issue a quotation prompt when the new verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is consistent with the transaction verification code obtained by parsing the on-site voice.

[0124] It should be noted here that the above-mentioned notification receiving unit 41, encryption unit 42, and verification code pushing unit 43 correspond to steps S101 to S103 in Example 1, and the instances and application scenarios implemented by the two modules and the corresponding steps are the same, but are not limited to the contents disclosed in the above-mentioned Example 1.

[0125] Example 3

[0126] An embodiment of the present application may provide an electronic device, Figure 5 is a structural block diagram of an electronic device according to an embodiment of the present application. Figure 5 As shown, the electronic device may include: one or more ( Figure 5 (only one is shown) processor 502, memory 504, storage controller, and peripheral interface, wherein the peripheral interface is connected to the radio frequency module, audio module and display.

[0127] Among them, the memory can be used to store software programs and modules, such as program instructions / modules corresponding to the methods and devices in the embodiments of the present application, and the processor executes various functional applications and data processing by running the software programs and modules stored in the memory, that is, realizing the above-mentioned method. The memory may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory may further include a memory remotely arranged relative to the processor, and these remote memories may be connected to the terminal via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0128] The processor can call the information and application stored in the memory through the transmission device to perform the following steps: receive a transaction success notification transmitted by the mobile payment device, wherein the transaction success notification carries: transaction amount, merchant number, payment method and current transaction time; when the transaction amount is greater than the verification code broadcast limit, use the transaction symmetric key of the target merchant bound to the merchant number to encrypt the current transaction time and transaction amount to obtain a transaction verification code; push the transaction verification code to the voice monitoring device bound to the merchant number, wherein the voice monitoring device monitors the on-site voice of the voice broadcast device, analyzes the on-site voice, obtains the transaction amount and the transaction verification code, and verifies the transaction verification code. When the verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is inconsistent with the transaction verification code obtained by parsing the on-site voice, an alarm prompt is issued to the target merchant indicated by the merchant number.

[0129] The processor can also call the information and application stored in the memory through the transmission device to perform the following steps: receiving the merchant public key randomly generated by the target merchant, wherein the target merchant loads the merchant public key to the acquirer transaction processing server after randomly generating a public-private key pair based on the current timestamp, and loads the merchant private key to the voice monitoring device; and uses the merchant public key to decrypt the symmetric key encryption package to obtain the transaction symmetric key randomly generated by the target merchant.

[0130] The processor can also call the information and application stored in the memory through the transmission device to perform the following steps: convert the current transaction time into an integer number of minutes; use the transaction symmetric key to encrypt the integer number of minutes and the transaction amount, and convert the encryption result into an integer number, divide the converted integer number by a predetermined value and take the modulus to obtain a transaction verification code.

[0131] The processor can also call the information and application stored in the memory through the transmission device to perform the following steps: after obtaining the transaction verification code, push the payment information including the payment method, transaction amount and transaction verification code to the voice broadcast device bound to the merchant number, wherein the voice broadcast device converts the payment information into voice broadcast.

[0132] The processor can also call the information and application programs stored in the memory through the transmission device to perform the following steps: construct a hardware serial number mapping table and a public key mapping table; store the binding relationship between the merchant number and the hardware serial number of the voice broadcast device in the hardware serial number mapping table; store the binding relationship between the merchant number and the hardware serial number of the voice monitoring device in the hardware serial number mapping table; store the binding relationship between the merchant number and the merchant public key in the public key mapping table.

[0133] The processor can also call the information and applications stored in the memory through the transmission device to perform the following steps: after receiving the transaction success notification transmitted by the mobile payment device, receive a symmetric key synchronization request initiated by the voice monitoring device; respond to the symmetric key synchronization request, and transmit the key encryption package to the voice monitoring device, wherein the voice monitoring device uses the merchant's private key to decrypt the key encryption package to obtain the transaction symmetric key of the target merchant.

[0134] The processor can also call the information and application stored in the memory through the transmission device to perform the following steps: before receiving the transaction success notification transmitted by the mobile payment device, the mobile payment device scans the merchant payment collection graphic code on the voice broadcast device; after the mobile payment device jumps to the institution's cash register from the merchant payment collection graphic code, it enters the transaction amount and payment method; after the payment is successful, the mobile payment device sends a transaction success notification to the acquiring institution's transaction processing server.

[0135] The processor can also call the information and application stored in the memory through the transmission device to perform the following steps: the step of the voice monitoring device verifying the transaction verification code, including: the voice monitoring device analyzes the on-site voice to obtain the transaction amount; the voice monitoring device converts the current device time into an integer minute, uses the transaction symmetric key to encrypt the character string containing the integer minute and the transaction amount, converts the encryption result into an integer number, divides it by a predetermined value and takes the modulus to obtain a transaction verification code corresponding to the on-site voice; the voice monitoring device performs consistency verification on the transaction verification code corresponding to the on-site voice with the transaction verification code pushed by the transaction processing server of the acquiring institution to obtain a verification result; when the verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is consistent with the transaction verification code obtained by analyzing the on-site voice, the voice monitoring device confirms that the verification is successful and ends the verification process.

[0136] The processor can also call the information and application stored in the memory through the transmission device to perform the following steps: the voice monitoring device performs consistency verification on the transaction verification code corresponding to the on-site voice with the transaction verification code pushed by the transaction processing server of the acquiring institution. After obtaining the verification result, if the verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is inconsistent with the transaction verification code obtained by parsing the on-site voice, the voice monitoring increases the current device time by a predetermined minute value or decreases the predetermined minute value to obtain the updated device time, converts the updated device time into an integer number of minutes, and uses the transaction symmetric key to verify the consistency of the character string containing the integer number of minutes and the transaction amount. Encryption processing, convert the encryption result into an integer, divide it by a predetermined value and take the modulus to obtain a transaction verification code corresponding to the on-site voice; perform consistency verification on the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the acquiring institution's transaction processing server to obtain a new verification result; when the new verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is consistent with the transaction verification code obtained by parsing the on-site voice, the voice monitoring device confirms that the verification is successful and ends the verification process; when the new verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is consistent with the transaction verification code obtained by parsing the on-site voice, the voice monitoring device issues a quotation prompt.

[0137] It can be understood by those skilled in the art that Figure 5 The structure shown is for illustration only, and the electronic device may also be a smart phone (such as an Android phone, an iOS phone, etc.), a tablet computer, a PDA, a mobile Internet device (Mobile Internet Devices, MID), a PAD, or other terminal devices. Figure 5 The structure of the electronic device is not limited. Figure 5 More or fewer components (such as network interfaces, display devices, etc.) shown in, or having Figure 5 Different configurations are shown.

[0138] A person of ordinary skill in the art can understand that all or part of the steps in the various methods of the above embodiments can be completed by instructing the hardware related to the terminal device through a program, and the program can be stored in a computer-readable storage medium, and the storage medium may include: a flash drive, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0139] Example 4

[0140] The embodiment of the present application further provides a storage medium. Optionally, in this embodiment, the storage medium can be used to store the program code executed by the transaction monitoring method based on the voice broadcast device provided in the first embodiment.

[0141] Optionally, in this embodiment, the above storage medium may be located in any computer terminal in a computer terminal group in a computer network, or in any mobile terminal in a mobile terminal group.

[0142] In order to achieve the above-mentioned purpose, according to another aspect of the present application, a computer program product is provided, including computer instructions, which, when executed by a processor, implement the steps of any one of the above-mentioned transaction monitoring methods based on a voice broadcast device.

[0143] The serial numbers of the above-mentioned embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0144] In the above embodiments of the present application, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.

[0145] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0146] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0147] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0148] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, in essence, or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, disk or optical disk and other media that can store program codes.

[0149] The above is only a preferred implementation of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A transaction monitoring method based on a voice broadcast device, characterized in that: Applied to acquirer transaction processing servers, including: Receive a transaction success notification transmitted by a mobile payment device, wherein the transaction success notification carries: transaction amount, merchant number, payment method and current transaction time; When the transaction amount is greater than the verification code broadcast limit, the current transaction time and the transaction amount are encrypted using the target merchant's transaction symmetric key bound to the merchant number to obtain a transaction verification code; The transaction verification code is pushed to a voice monitoring device bound to the merchant number, wherein the voice monitoring device monitors the on-site voice of the voice broadcasting device, analyzes the on-site voice, obtains the transaction amount and the transaction verification code, and verifies the transaction verification code. When the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is inconsistent with the transaction verification code obtained by analyzing the on-site voice, an alarm prompt is issued to the target merchant indicated by the merchant number.

2. The transaction monitoring method according to claim 1, characterized in that: Also includes: Receiving a merchant public key randomly generated by the target merchant, wherein the target merchant, after randomly generating a public-private key pair based on the current timestamp, loads the merchant public key to the acquirer transaction processing server, and loads the merchant private key to the voice monitoring device; The symmetric key encryption package is decrypted using the merchant public key to obtain the transaction symmetric key randomly generated by the target merchant.

3. The transaction monitoring method according to claim 1, characterized in that: The step of encrypting the current transaction time and the transaction amount using the target merchant's transaction symmetric key bound to the merchant number to obtain a transaction verification code comprises: Convert the current trading time to an integer number of minutes; The integer number of minutes and the transaction amount are encrypted using the transaction symmetric key, and the encryption result is converted into an integer number, the converted integer number is divided by a predetermined value and the modulus is taken to obtain the transaction verification code.

4. The transaction monitoring method according to claim 1, characterized in that: After getting the transaction verification code, it also includes: The payment information including the payment method, the transaction amount and the transaction verification code is pushed to a voice broadcast device bound to the merchant number, wherein the voice broadcast device converts the payment information into a voice broadcast.

5. The transaction monitoring method according to claim 1, characterized in that: Also includes: Construct hardware serial number mapping table and public key mapping table; Storing the binding relationship between the merchant number and the hardware serial number of the voice broadcast device in the hardware serial number mapping table; Storing the binding relationship between the merchant number and the hardware serial number of the voice monitoring device in the hardware serial number mapping table; The binding relationship between the merchant number and the merchant public key is stored in the public key mapping table.

6. The transaction monitoring method according to claim 1, characterized in that: After receiving the transaction success notification transmitted by the mobile payment device, it also includes: Receiving a symmetric key synchronization request initiated by the voice monitoring device; In response to the symmetric key synchronization request, the key encryption package is transmitted to the voice monitoring device, wherein the voice monitoring device uses the merchant's private key to decrypt the key encryption package to obtain the transaction symmetric key of the target merchant.

7. The transaction monitoring method according to claim 1, characterized in that: Before receiving the transaction success notification transmitted by the mobile payment device, it also includes: The mobile payment device scans the merchant payment graphic code on the voice broadcast device; After the mobile payment device is redirected to the cashier counter of the institution by the merchant payment graphic code, the transaction amount and payment method are entered; After the payment is successful, the mobile payment device sends the transaction success notification to the transaction processing server of the acquiring institution.

8. The transaction monitoring method according to claim 1, characterized in that: The step of the voice monitoring device verifying the transaction verification code includes: The voice monitoring device analyzes the on-site voice to obtain the transaction amount; The voice monitoring device converts the current device time into an integer number of minutes, uses the transaction symmetric key to encrypt a character string containing the integer number of minutes and the transaction amount, converts the encryption result into an integer number, divides it by a predetermined value, and takes the modulus to obtain a transaction verification code corresponding to the on-site voice; The voice monitoring device performs consistency verification on the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the acquirer transaction processing server to obtain a verification result; When the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is consistent with the transaction verification code obtained by parsing the on-site voice, the voice monitoring device confirms that the verification is successful and ends the verification process.

9. The transaction monitoring method according to claim 8, characterized in that: The voice monitoring device performs consistency verification on the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the acquirer transaction processing server, and after obtaining the verification result, it also includes: When the verification result indicates that the transaction verification code pushed by the acquirer's transaction processing server is inconsistent with the transaction verification code obtained by parsing the on-site voice, the voice monitoring device increases the current device time by a predetermined minute value or decreases the predetermined minute value to obtain an updated device time, converts the updated device time into an integer number of minutes, uses the transaction symmetric key to encrypt a character string containing the integer number of minutes and the transaction amount, converts the encryption result into an integer number, divides it by a predetermined value and takes the modulus, and obtains a transaction verification code corresponding to the on-site voice; Perform consistency check on the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the acquirer transaction processing server to obtain a new verification result; The voice monitoring device confirms that the verification is successful and ends the verification process when the new verification result indicates that the transaction verification code pushed by the acquirer's transaction processing server is consistent with the transaction verification code obtained by parsing the on-site voice; The voice monitoring device issues a quotation prompt when the new verification result indicates that the transaction verification code pushed by the acquirer's transaction processing server is consistent with the transaction verification code obtained by parsing the on-site voice.

10. A transaction monitoring device based on a voice broadcast device, characterized in that: Applied to acquirer transaction processing servers, including: A notification receiving unit, configured to receive a transaction success notification transmitted by a mobile payment device, wherein the transaction success notification carries: transaction amount, merchant number, payment method and current transaction time; An encryption unit, configured to encrypt the current transaction time and the transaction amount using a transaction symmetric key of a target merchant bound to the merchant number to obtain a transaction verification code when the transaction amount is greater than the verification code broadcast limit; The verification code pushing unit is used to push the transaction verification code to the voice monitoring device bound to the merchant number, wherein the voice monitoring device monitors the on-site voice of the voice broadcasting device, analyzes the on-site voice, obtains the transaction amount and the transaction verification code, and verifies the transaction verification code. When the verification result indicates that the transaction verification code pushed by the transaction processing server of the acquiring institution is inconsistent with the transaction verification code obtained by analyzing the on-site voice, an alarm prompt is issued to the target merchant indicated by the merchant number.

11. A transaction monitoring system based on voice broadcasting equipment, characterized in that: include: The mobile payment device scans the merchant's payment graphic code, and after being redirected to the institution's cashier counter by the merchant's payment graphic code, the transaction amount and payment method are entered. After the payment is successful, the mobile payment device sends a transaction success notification to the acquirer's transaction processing server; The voice broadcast device establishes a network connection with the acquirer transaction processing server, transmits the hardware serial number of the voice broadcast device to the acquirer transaction processing server for message subscription, receives the payment information pushed by the acquirer transaction processing server in real time, converts the payment information into voice information, and plays the voice information, wherein the payment information includes the payment method, payment amount, and transaction verification code; A voice monitoring device monitors the voice when the target merchant conducts financial transactions with the mobile payment device and the voice information played by the voice broadcasting device, and issues an alarm to the target merchant when the transaction verification code verification is inconsistent; The acquiring institution transaction processing server executes the transaction monitoring method based on the voice broadcast device as described in any one of claims 1 to 9.

12. An electronic device, characterized in that: include: A memory storing an executable program; A processor is used to run the program, wherein the program, when running, executes the transaction monitoring method based on the voice broadcast device as described in any one of claims 1 to 9.

13. A computer program product comprising computer instructions, characterized in that: When the computer instructions are executed by the processor, the steps of the transaction monitoring method based on the voice broadcast device described in any one of claims 1 to 9 are implemented.

Images