Transaction monitoring method, device and system based on voice broadcast equipment

Abstract

This application discloses a transaction monitoring method, apparatus, and system based on a voice broadcast device. Relating to the field of fintech, the method includes: receiving a transaction success notification transmitted by a mobile payment device; if the transaction amount exceeds the verification code broadcast limit, encrypting the current transaction time and amount using a transaction symmetric key to obtain a transaction verification code; pushing the transaction verification code to a voice monitoring device bound to a merchant account; the voice monitoring device listening to and analyzing the live audio from the voice broadcast device; verifying the transaction verification code; and if the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is inconsistent with the transaction verification code obtained from analyzing the live audio, issuing an alarm notification to the target merchant indicated by the merchant account. This application solves the problem of low security and potential for merchant fund loss when using voice broadcast speaker technology for payment collection in related technologies.

Description

Technical Field

[0001] This application relates to the field of financial technology or other related technical fields, specifically to a transaction monitoring method, apparatus and system based on a voice broadcast device. Background Technology

[0002] In the current electronic payment field, especially for payment scenarios of small and micro merchants such as convenience stores, restaurants, and mobile vendors, voice-announcement speakers have been widely used as auxiliary terminals for barcode payment. These devices allow customers to scan and pay using mobile payment apps by displaying the merchant's QR code. After a successful payment, the voice-announcement speaker announces the payment confirmation in real time, such as "*Received 1000 yuan via WeChat," to help merchants confirm the transaction status, simplifying the checkout process and improving payment efficiency.

[0003] Voice-activated speakers connect to the payment backend, typically via mobile networks, Wi-Fi, or wired networks, to receive payment information pushed by the backend in real time. Upon receiving a successful payment notification, the speaker immediately broadcasts a voice message indicating the amount received. This method has played a crucial role in the popularization of cashless transactions, but it has also exposed some security vulnerabilities.

[0004] While voice-activated speakers offer convenience, their security mechanisms have significant flaws. Due to the non-uniqueness and replicability of voice information, malicious actors exploit this vulnerability for fraudulent activities, specifically in the following two ways:

[0005] On-site fake audio: Criminals can play pre-recorded voice messages confirming successful payment, misleading merchants into believing that the payment has been completed, when in fact the funds have not actually been received.

[0006] Counterfeit payment devices: Criminals carry the same voice broadcast device used by merchants, scan their own payment QR code to make payments, and then deceive merchants by playing genuine payment voice messages, thus covering up the error of the actual payment recipient.

[0007] The aforementioned methods exploit security vulnerabilities in voice-announcement speakers, making it difficult for merchants to distinguish between genuine and fake payment notifications, thus resulting in financial losses. Therefore, the security of voice-announcement speaker technology in this area needs improvement, and a method to effectively prevent such fraudulent activities is needed to ensure the accuracy and security of transactions.

[0008] There is currently no effective solution to the problem that using voice broadcast speaker technology for payment collection can easily lead to the loss of funds for merchants and has low security. Summary of the Invention

[0009] The main purpose of this application is to provide a transaction monitoring method, device and system based on voice broadcasting equipment, so as to solve the problem that the use of voice broadcasting speaker technology for payment collection in related technologies can easily lead to the loss of merchant funds and low security.

[0010] To achieve the above objectives, according to one aspect of this application, a transaction monitoring method based on a voice broadcasting device is provided, applied to a transaction processing server of an acquiring institution, comprising: receiving a transaction success notification transmitted by a mobile payment device, wherein the transaction success notification carries: transaction amount, merchant number, payment method, and current transaction time; if the transaction amount exceeds the verification code broadcasting limit, encrypting the current transaction time and the transaction amount using a transaction symmetric key of a target merchant bound to the merchant number to obtain a transaction verification code; pushing the transaction verification code to a voice monitoring device bound to the merchant number, wherein the voice monitoring device monitors the live voice of the voice broadcasting device, parses the live voice to obtain the transaction amount and the transaction verification code, and verifies the transaction verification code; if the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is inconsistent with the transaction verification code obtained by parsing the live voice, issuing an alarm prompt to the target merchant indicated by the merchant number.

[0011] Optionally, the transaction monitoring method based on the voice broadcasting device further includes: receiving a merchant public key randomly generated by the target merchant, wherein the target merchant, after randomly generating a public-private key pair based on the current timestamp, loads the merchant public key into the acquiring institution's transaction processing server and loads the merchant private key into the voice monitoring device; and using the merchant public key to decrypt the symmetric key encryption packet to obtain the transaction symmetric key randomly generated by the target merchant.

[0012] Optionally, the step of encrypting the current transaction time and the transaction amount using the transaction symmetric key of the target merchant bound to the merchant number to obtain a transaction verification code includes: converting the current transaction time into an integer number of minutes; encrypting the integer number of minutes and the transaction amount using the transaction symmetric key, converting the encryption result into an integer number, dividing the converted integer number by a predetermined value and taking the modulus to obtain the transaction verification code.

[0013] Optionally, after obtaining the transaction verification code, the transaction monitoring method based on the voice broadcasting device further includes: pushing payment information containing the payment method, the transaction amount, and the transaction verification code to the voice broadcasting device bound to the merchant number, wherein the voice broadcasting device converts the payment information into voice broadcast.

[0014] Optionally, the transaction monitoring method based on the voice broadcasting device further includes: constructing a hardware serial number mapping table and a public key mapping table; storing the binding relationship between the merchant number and the hardware serial number of the voice broadcasting device in the hardware serial number mapping table; storing the binding relationship between the merchant number and the hardware serial number of the voice monitoring device in the hardware serial number mapping table; and storing the binding relationship between the merchant number and the merchant's public key in the public key mapping table.

[0015] Optionally, after receiving a transaction success notification transmitted by a mobile payment device, the transaction monitoring method based on a voice broadcasting device further includes: receiving a symmetric key synchronization request initiated by the voice monitoring device; responding to the symmetric key synchronization request by transmitting a key encryption packet to the voice monitoring device, wherein the voice monitoring device uses the merchant's private key to decrypt the key encryption packet to obtain the target merchant's transaction symmetric key.

[0016] Optionally, before receiving the transaction success notification transmitted by the mobile payment device, the transaction monitoring method based on the voice broadcast device further includes: the mobile payment device scanning the merchant payment graphic code on the voice broadcast device; after being redirected to the institution's cashier by the merchant payment graphic code, the mobile payment device inputs the transaction amount and payment method; and after successful payment, the mobile payment device sends the transaction success notification to the acquiring institution's transaction processing server.

[0017] Optionally, the step of the voice monitoring device verifying the transaction verification code includes: the voice monitoring device parsing the on-site voice to obtain the transaction amount; the voice monitoring device converting the current device time into an integer number of minutes, encrypting the string containing the integer number of minutes and the transaction amount using the transaction symmetric key, converting the encrypted result into an integer number, dividing it by a predetermined value and taking the modulus to obtain the transaction verification code corresponding to the on-site voice; the voice monitoring device performing a consistency check between the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the acquiring institution's transaction processing server to obtain a verification result; if the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is consistent with the transaction verification code obtained by parsing the on-site voice, the voice monitoring device confirms successful verification and ends the verification process.

[0018] Optionally, after the voice monitoring device performs a consistency check between the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the acquiring institution's transaction processing server, and obtains the check result, the method further includes: if the check result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is inconsistent with the transaction verification code obtained by parsing the on-site voice, the voice monitoring device increments or decrements the current device time by a predetermined number of minutes to obtain an updated device time, converts the updated device time into an integer number of minutes, encrypts the string containing the integer number of minutes and the transaction amount using the transaction symmetric key, and converts the encryption result into an integer. Divide the number by a predetermined value and take the modulus to obtain the transaction verification code corresponding to the on-site voice; perform a consistency check between the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the acquiring institution's transaction processing server to obtain a new verification result; if the new verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server matches the transaction verification code obtained by parsing the on-site voice, the voice monitoring device confirms successful verification and ends the verification process; if the new verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server matches the transaction verification code obtained by parsing the on-site voice, the voice monitoring device issues a price quote prompt.

[0019] To achieve the above objectives, according to another aspect of this application, a transaction monitoring device based on a voice broadcasting device is provided, applied to a transaction processing server of an acquiring institution. The device includes: a notification receiving unit for receiving a transaction success notification transmitted by a mobile payment device, wherein the transaction success notification carries: transaction amount, merchant number, payment method, and current transaction time; an encryption unit for encrypting the current transaction time and transaction amount using a transaction symmetric key of a target merchant bound to the merchant number, when the transaction amount exceeds the verification code broadcasting limit, to obtain a transaction verification code; and a verification code pushing unit for pushing the transaction verification code to a voice monitoring device bound to the merchant number, wherein the voice monitoring device monitors the live voice of the voice broadcasting device, parses the live voice to obtain the transaction amount and transaction verification code, and verifies the transaction verification code. If the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is inconsistent with the transaction verification code obtained from parsing the live voice, an alarm prompt is issued to the target merchant indicated by the merchant number.

[0020] Optionally, the transaction monitoring device based on the voice broadcasting device further includes: a public key receiving module, used to receive a merchant public key randomly generated by the target merchant, wherein the target merchant, after randomly generating a public-private key pair based on the current timestamp, loads the merchant public key into the acquiring institution's transaction processing server and loads the merchant private key into the voice monitoring device; and a key decryption module, used to decrypt the symmetric key encryption packet using the merchant public key to obtain the transaction symmetric key randomly generated by the target merchant.

[0021] Optionally, the encryption unit includes: a time conversion module, used to convert the current transaction time into an integer number of minutes; and a verification code generation module, used to encrypt the integer number of minutes and the transaction amount using the transaction symmetric key, convert the encryption result into an integer number, divide the converted integer number by a predetermined value and take the modulus to obtain the transaction verification code.

[0022] Optionally, the transaction monitoring device based on the voice broadcasting device further includes: a payment information push module, used to push payment information including the payment method, the transaction amount and the transaction verification code to the voice broadcasting device bound to the merchant number after obtaining the transaction verification code, wherein the voice broadcasting device converts the payment information into voice broadcast.

[0023] Optionally, the transaction monitoring device based on the voice broadcasting device further includes: a mapping table construction module, used to construct a hardware serial number mapping table and a public key mapping table; storing the binding relationship between the merchant number and the hardware serial number of the voice broadcasting device in the hardware serial number mapping table; a serial number binding module, used to store the binding relationship between the merchant number and the hardware serial number of the voice monitoring device in the hardware serial number mapping table; and a public key binding module, used to store the binding relationship between the merchant number and the merchant's public key in the public key mapping table.

[0024] Optionally, the transaction monitoring device based on the voice broadcasting device further includes: a key synchronization request receiving module, used to receive a symmetric key synchronization request initiated by the voice monitoring device after receiving a transaction success notification transmitted by the mobile payment device; and a key synchronization response module, used to respond to the symmetric key synchronization request and transmit a key encryption packet to the voice monitoring device, wherein the voice monitoring device uses the merchant's private key to decrypt the key encryption packet to obtain the target merchant's transaction symmetric key.

[0025] Optionally, the transaction monitoring device based on the voice broadcasting device further includes: a graphic code scanning module, used by the mobile payment device to scan the merchant's payment graphic code on the voice broadcasting device before receiving a transaction success notification transmitted by the mobile payment device; a transaction input module, used by the mobile payment device to input the transaction amount and payment method after being redirected to the institution's cashier by the merchant's payment graphic code; and a transaction notification module, used by the mobile payment device to send the transaction success notification to the acquiring institution's transaction processing server after successful payment.

[0026] Optionally, when the voice monitoring device verifies the transaction verification code, it includes: a live voice parsing module, used by the voice monitoring device to parse the live voice to obtain the transaction amount; a verification code comparison module, used by the voice monitoring device to convert the current device time into an integer number of minutes, encrypt the string containing the integer number of minutes and the transaction amount using the transaction symmetric key, convert the encrypted result into an integer number, divide it by a predetermined value and take the modulus to obtain the transaction verification code corresponding to the live voice; a verification code verification module, used by the voice monitoring device to perform consistency verification between the transaction verification code corresponding to the live voice and the transaction verification code pushed by the acquiring institution's transaction processing server, and obtain a verification result; and a verification success confirmation module, used by the voice monitoring device to confirm the verification success and end the verification process when the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is consistent with the transaction verification code obtained by parsing the live voice.

[0027] Optionally, after the voice monitoring device performs a consistency check between the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the acquiring institution's transaction processing server, and obtains the check result, it further includes: a time correction module, used by the voice monitoring device to increase or decrease the current device time by a predetermined number of minutes when the check result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is inconsistent with the transaction verification code obtained by parsing the on-site voice, to obtain an updated device time; and an updated verification code generation module, used to convert the updated device time into an integer number of minutes, encrypt the string containing the integer number of minutes and the transaction amount using the transaction symmetric key, convert the encrypted result into an integer number, and divide it by... A predetermined value is calculated and its modulus is taken to obtain a transaction verification code corresponding to the on-site voice. A new verification code verification module is used to perform a consistency verification between the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the acquiring institution's transaction processing server to obtain a new verification result. A verification success confirmation module is used by the voice monitoring device to confirm successful verification and end the verification process when the new verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is consistent with the transaction verification code obtained by parsing the on-site voice. An alarm prompt module is used by the voice monitoring device to issue a price quote prompt when the new verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is consistent with the transaction verification code obtained by parsing the on-site voice.

[0028] To achieve the above objectives, according to another aspect of this application, a transaction monitoring system based on a voice broadcasting device is provided, comprising: a mobile payment device that scans a merchant's payment graphic code, and after being redirected to the institution's cashier by the merchant's payment graphic code, inputs the transaction amount and payment method; after successful payment, the mobile payment device sends a transaction success notification to the acquiring institution's transaction processing server; a voice broadcasting device that establishes a network connection with the acquiring institution's transaction processing server, transmits the hardware serial number of the voice broadcasting device to the acquiring institution's transaction processing server for message subscription, and receives payment information pushed by the acquiring institution's transaction processing server in real time, converts the payment information into voice information, and plays the voice information, wherein the payment information includes the payment method, payment amount, and transaction verification code; a voice monitoring device that monitors the voice of the target merchant and the mobile payment device during the financial transaction and the voice information played by the voice broadcasting device, and issues an alarm to the target merchant if the transaction verification code verification is inconsistent; and the acquiring institution's transaction processing server that executes the transaction monitoring method based on the voice broadcasting device described above.

[0029] To achieve the above objectives, according to another aspect of this application, an electronic device is provided, comprising: a memory storing an executable program; and a processor for running the program, wherein the program, when running, executes the transaction monitoring method based on a voice broadcasting device as described in any one of the preceding claims.

[0030] To achieve the above objectives, according to another aspect of this application, a computer program product is provided, including computer instructions that, when executed by a processor, implement the steps of the transaction monitoring method based on a voice broadcasting device as described in any one of the above claims.

[0031] In this embodiment, by using dynamically generated transaction verification codes and symmetric key encryption, the leakage and tampering of payment information are effectively prevented, enhancing the security of the payment process. Furthermore, based on the existing voice broadcast speaker for announcing payment information, transaction amount threshold verification and transaction verification code announcement are added. Simultaneously, a voice monitoring device listens to, parses, and verifies the on-site voice. If the verification code fails, an alarm sound is emitted to remind the merchant, thereby reducing the possibility of criminals forging voice messages to deceive merchants on-site. This further improves the transaction security of the voice broadcast speaker, increases the convenience and success rate of transactions, and solves the problem of low security and potential for merchant fund loss when using voice broadcast speaker technology for payment collection in related technologies. Attached Figure Description

[0032] The accompanying drawings, which form part of this application, are used to provide a further understanding of this application. The illustrative embodiments and descriptions of this application are used to explain this application and do not constitute an undue limitation of this application. In the drawings:

[0033] Figure 1 A hardware structure block diagram of a computer terminal for implementing a transaction monitoring method based on a voice broadcasting device is shown.

[0034] Figure 2 This is a flowchart of a transaction monitoring method based on a voice broadcasting device provided in an embodiment of this application;

[0035] Figure 3 This is a schematic diagram of a transaction monitoring system based on a voice broadcasting device according to an embodiment of this application;

[0036] Figure 4 This is a schematic diagram of a transaction monitoring device based on a voice broadcasting device according to an embodiment of this application;

[0037] Figure 5 This is a structural block diagram of an electronic device according to an embodiment of this application. Detailed Implementation

[0038] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort should fall within the scope of protection of the present application.

[0039] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0040] First, some nouns or terms that appear in the description of the embodiments of this application shall be interpreted as follows:

[0041] Voice broadcast speaker: A barcode payment auxiliary terminal, mainly used to broadcast a voice message in real time after a customer scans the merchant's QR code to make a payment.

[0042] The acquiring institution's transaction processing server is responsible for processing payment requests from mobile payment devices, verifying the legality of transaction information, interacting with payment platforms (such as Alipay, WeChat Pay, etc.) to confirm payment status, and maintaining merchant information and transaction records. In this invention, the acquiring institution's transaction processing server also undertakes the task of generating and synchronizing transaction verification codes to ensure the accuracy and security of payment information. Furthermore, the acquiring institution's transaction processing server is also responsible for establishing communication connections with voice broadcasting and voice monitoring devices, pushing payment notifications and transaction verification codes in real time, and synchronizing keys and parameters to relevant devices to ensure the stable operation of the entire payment monitoring system.

[0043] Transaction verification code: A security verification tool used to prevent messages broadcast by voice broadcast devices from being illegally forged or tampered with. After successful payment, it is generated in real time and sent along with payment information to both the voice broadcast device and the voice monitoring device. The voice monitoring device listens to the broadcast content, parses and verifies the transaction verification code, thereby ensuring the authenticity of the transaction.

[0044] Voice broadcast device: A payment assistance tool primarily used by small and micro-merchants such as convenience stores, restaurants, and mobile vendors. The device displays or affixes the merchant's payment graphic code (such as a barcode or QR code), which is scanned for payment. After successful payment, the acquiring institution's transaction processing server pushes payment information, including the payment method, transaction amount, and transaction verification code (if the transaction amount exceeds the broadcast limit), to the voice broadcast device. Upon receiving this information, the device converts the text into speech, for example, broadcasting "*Xin payment 1000 yuan, verification code 903," to inform the merchant that the payment has been completed and provides specific verification information. The voice broadcast device maintains real-time communication with the acquiring institution's transaction processing server via the network to ensure timely broadcast of payment information.

[0045] It should be noted that the information collected in this application (including but not limited to user device information, user personal information, user payment information, transaction information, etc.) and data (including but not limited to data used for display, data used for analysis, etc.) are information and data authorized by the user or fully authorized by all parties. Furthermore, the collection, storage, use, processing, transmission, provision, disclosure, and application of related data all comply with relevant laws, regulations, and standards, necessary confidentiality measures have been taken, and they do not violate public order and good morals. Corresponding operation entry points are provided for users to choose to authorize or refuse. For example, interfaces are set up between this system and relevant users or institutions, providing users with corresponding operation entry points for them to choose to agree to or refuse automated decision results; if the user chooses to refuse, the process proceeds to the expert decision-making stage.

[0046] Example 1

[0047] According to an embodiment of this application, a method embodiment for transaction monitoring based on a voice broadcasting device is also provided. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Furthermore, although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in a different order than that shown here.

[0048] The method embodiment provided in Embodiment 1 of this application can be executed on a mobile terminal, computer terminal, or similar computing device. Figure 1 A hardware block diagram of a computer terminal (or mobile device) for implementing a transaction monitoring method based on a voice broadcast device is shown. Figure 1As shown, the computer terminal 10 (or mobile device) may include one or more processors 102 (shown as 102a, 102b, ..., 102n in the figure) 102 (processor 102 may include, but is not limited to, a microprocessor MCU or a programmable logic device FPGA, etc.), a memory 104 for storing data, and a transmission device 106 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of a BUS bus), a network interface, a power supply, and / or a camera. Those skilled in the art will understand that... Figure 1 The structure shown is for illustrative purposes only and does not limit the structure of the aforementioned electronic device. For example, computer terminal 10 may also include... Figure 1 The more or fewer components shown, or having the same Figure 1 The different configurations shown.

[0049] It should be noted that the aforementioned one or more processors 102 and / or other data processing circuits are generally referred to herein as "data processing circuits". These data processing circuits may be embodied, in whole or in part, in software, hardware, firmware, or any other combination thereof. Furthermore, the data processing circuits may be a single, independent processing module, or may be integrated, in whole or in part, into any other element within the computer terminal 10 (or mobile device). As involved in the embodiments of this application, the data processing circuits serve as a processor control mechanism (e.g., selection of a variable resistor termination path connected to an interface).

[0050] The memory 104 can be used to store software programs and modules of application software, such as the program instructions / data storage device corresponding to the transaction monitoring method based on the voice broadcasting device in this embodiment of the application. The processor 102 executes various functional applications and data processing by running the software programs and modules stored in the memory 104, thereby realizing the above-mentioned transaction monitoring method based on the voice broadcasting device. The memory 104 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include memory remotely located relative to the processor 102, and these remote memories can be connected to the computer terminal 10 via a network. Examples of the above-mentioned networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0051] The transmission device 106 is used to receive or send data via a network. Specific examples of the network described above may include a wireless network provided by the communication provider of the computer terminal 10. In one example, the transmission device 106 includes a Network Interface Controller (NIC), which can connect to other network devices via a base station to communicate with the Internet. In one embodiment, the transmission device 106 may be a Radio Frequency (RF) module for wireless communication with the Internet.

[0052] The display can be, for example, a touchscreen liquid crystal display (LCD) that allows the user to interact with the user interface of the computer terminal 10 (or mobile device).

[0053] It should be noted that the transaction monitoring method based on voice broadcasting equipment provided in this embodiment can improve the security and efficiency of the payment process and is applicable to various scenarios that require fast and secure payment, such as supermarkets, restaurants, and retail stores.

[0054] Under the aforementioned operating environment, this application provides the following: Figure 2 The transaction monitoring method based on voice broadcasting equipment shown is applied to the transaction processing server of the acquiring institution. Figure 2 This is a flowchart of a transaction monitoring method based on a voice broadcasting device according to Embodiment 1 of this application, as shown below. Figure 2 As shown, the transaction monitoring method includes:

[0055] It should be noted that, in this embodiment, before receiving the transaction success notification transmitted by the mobile payment device, the mobile payment device scans the merchant's payment graphic code on the voice broadcast device; after being redirected from the merchant's payment graphic code to the institution's cashier, the mobile payment device enters the transaction amount and payment method; after the payment is successful, the mobile payment device sends a transaction success notification to the acquiring institution's transaction processing server.

[0056] In the above scenario, the payment application (such as Alipay, WeChat Pay, etc.) running on the mobile payment device (usually the customer's / consumer's smartphone, iPad, tablet, computer, etc.) will activate its built-in scanning function. The customer then scans the merchant's payment graphic code (e.g., barcode, QR code, etc.) on the voice-announced device. This merchant's payment graphic code contains the merchant's unique identification information, such as the merchant number or merchant ID, and possibly encrypted information. After scanning, the payment application on the mobile payment device immediately recognizes the content of the payment graphic code and redirects the customer to the payment gateway page provided by the acquiring institution (e.g., an H5 payment gateway, typically a webpage loaded within the payment application for subsequent payment operations).

[0057] After the mobile payment device redirects the customer from the merchant's QR code to the institution's cashier, the customer enters the transaction amount and payment method. The H5 cashier page displays merchant information and preliminary payment details, such as the merchant's name or logo. The customer then enters the specific transaction amount and selects a payment method, such as Alipay, WeChat Pay, or UnionPay QuickPass. At this step, the customer can also confirm or enter other payment information, such as discount codes or points redemption, which may affect the final payment amount. After selecting a payment method, the customer needs to confirm the payment, which typically involves entering a payment password or passing security verification measures such as biometrics (fingerprint or facial recognition).

[0058] After a successful payment, the mobile payment device sends a transaction success notification to the acquiring institution's transaction processing server. Upon successful payment, the mobile payment device generates a notification containing all necessary transaction information (such as merchant ID, transaction amount, payment method, and transaction time). This notification is sent to the acquiring institution's transaction processing server via the mobile payment device's network connection (usually mobile data or Wi-Fi). Upon receiving the notification, the acquiring institution's transaction processing server immediately verifies the legality of the transaction information. If correct, it pushes the corresponding payment information and transaction verification code to the voice broadcasting and voice monitoring devices (if the transaction amount exceeds a preset verification code broadcast limit).

[0059] The above steps ensure the transparency and security of payment information from customers to merchants. With the intervention of the acquiring institution's transaction processing server, the entire payment process is not only convenient, but also effectively prevents fraud through real-time broadcasting by voice broadcasting devices and verification code verification by voice monitoring devices, thereby improving the payment security and transaction efficiency of micro and small merchants.

[0060] Additionally, it should be noted that in the transaction monitoring method based on voice broadcasting devices, in order to improve transaction security, it is necessary to use keys for data transmission encryption and decryption. Optionally, the transaction monitoring method based on voice broadcasting devices may also include: receiving a merchant public key randomly generated by the target merchant, wherein the target merchant, after randomly generating a public-private key pair based on the current timestamp, loads the merchant public key into the acquiring institution's transaction processing server and loads the merchant private key into the voice monitoring device; and using the merchant public key to decrypt the symmetric key encryption packet to obtain the transaction symmetric key randomly generated by the target merchant.

[0061] Specifically, each target merchant (i.e., a micro-merchant using a voice broadcast device for assisted payment collection) needs to generate a public-private key pair, which will serve as the basis for subsequent secure communication. The target merchant operates through its voice monitoring device, generating a random public-private key pair based on the current timestamp. The public key will be used for subsequent public communication and encrypted transmission of the symmetric key, while the private key remains on the voice monitoring device and is used to decrypt received encrypted information, thereby ensuring the privacy and integrity of transaction information.

[0062] After generating the public-private key pair, the target merchant uploads the public key to the acquiring institution's transaction processing server. This upload process can be completed via a secure network connection, ensuring that the public key is not stolen or tampered with during transmission. Simultaneously, the acquiring institution's transaction processing server binds the merchant's public key to the merchant ID and stores it in the system database for subsequent verification and decryption operations when processing transaction information.

[0063] The acquiring institution's transaction processing server generates a random, unique symmetric key for each target merchant, used to encrypt and decrypt sensitive information such as transaction verification codes. This symmetric key is encrypted into a symmetric key encryption packet. The encryption packet is then encrypted using the public key uploaded by the target merchant to ensure that only a voice monitoring device with the corresponding private key can decrypt and obtain the transaction symmetric key. The acquiring institution's transaction processing server transmits the key encryption packet over the network to the target merchant's voice monitoring device. Upon receiving the key encryption packet, the voice monitoring device decrypts it using the merchant's private key pre-loaded into it. Upon successful decryption, the voice monitoring device obtains the transaction symmetric key, which is used for subsequent secure communication operations such as transaction verification code checks.

[0064] After the transaction symmetric key is securely decrypted on the voice monitoring device, it will be used to verify the transaction verification code broadcast in real time from the voice broadcast device. Meanwhile, the acquiring institution's transaction processing server will periodically update the transaction symmetric key to prevent security risks caused by the long-term use of the key. After each update, the voice monitoring device needs to re-initiate a key synchronization request to obtain the latest transaction symmetric key, ensuring the continued effectiveness of the transaction monitoring method.

[0065] Through the aforementioned technical features, the transaction monitoring method based on voice broadcasting devices can effectively utilize the combination of public and private key pairs and transaction symmetric keys to improve the security and reliability of transaction verification.

[0066] Step S101: Receive a transaction success notification transmitted by the mobile payment device. The transaction success notification includes: transaction amount, merchant number, payment method, and current transaction time.

[0067] Optionally, in the transaction monitoring method based on a voice broadcasting device provided in this application embodiment, after receiving the transaction success notification transmitted by the mobile payment device, the method further includes: receiving a symmetric key synchronization request initiated by a voice monitoring device; responding to the symmetric key synchronization request and transmitting a key encryption packet to the voice monitoring device, wherein the voice monitoring device uses the merchant's private key to decrypt the key encryption packet to obtain the target merchant's transaction symmetric key.

[0068] During initial connection or periodic synchronization, the voice monitoring device proactively initiates a symmetric key synchronization request. This request is initiated after establishing communication with the acquiring institution's transaction processing server via an internet connection, mobile network, Wi-Fi, or wired network. Its purpose is to obtain the latest transaction symmetric key to ensure accurate verification of CAPTCHAs in subsequent transactions, thereby enhancing transaction security. Upon receiving the symmetric key synchronization request from the voice monitoring device, the acquiring institution's transaction processing server generates a key encryption packet containing the target merchant's transaction symmetric key. To ensure secure key transmission, the server encrypts the transaction symmetric key using the merchant's public key, forming the key encryption packet. This encryption process ensures that even if the key encryption packet is intercepted during transmission, a third party cannot decrypt it to obtain the true transaction symmetric key. The encrypted key encryption packet is then transmitted to the voice monitoring device through a secure network channel. Communication between the server and the device should employ encryption protocols to further protect the security of transmitted data.

[0069] After receiving the encrypted key packet, the voice monitoring device decrypts it using a pre-loaded merchant private key. Since the encrypted key packet is encrypted using the corresponding merchant public key, only devices with the correct private key can successfully decrypt it and obtain the true transaction symmetric key. This decryption process is a crucial step in secure transaction communication, ensuring the privacy and security of the transaction symmetric key. Once decryption is successful, the voice monitoring device saves the transaction symmetric key for subsequent verification of transaction verification codes. During the payment process, when the voice broadcast device broadcasts a voice message containing the transaction verification code, the voice monitoring device uses the transaction symmetric key to encrypt the transaction amount and time parsed from the on-site voice, and compares it with the transaction verification code pushed by the acquiring institution's transaction processing server to verify the authenticity of the transaction information.

[0070] To address potential security threats, such as key breaches or device hacking, voice monitoring devices and acquiring institution transaction processing servers should regularly perform symmetric key synchronization and updates. This may include periodically changing the transaction symmetric key and immediately updating the key upon discovering a security vulnerability. A periodic key synchronization mechanism should be established between the device and the server to ensure that the transaction symmetric key used is always up-to-date and secure.

[0071] By implementing the aforementioned technical features, the transaction monitoring method based on a voice broadcast device provided in this application enables secure communication between the voice monitoring device and the transaction processing server of the acquiring institution, ensuring the confidential transmission and correct use of the transaction symmetric key. This mechanism strengthens security protection in micro-merchant payment scenarios, effectively preventing dangerous behaviors conducted through voice broadcast devices, and providing merchants and customers with a safer and more reliable payment experience.

[0072] Step S102: If the transaction amount exceeds the verification code broadcast limit, use the transaction symmetric key of the target merchant bound to the merchant ID to encrypt the current transaction time and transaction amount to obtain the transaction verification code.

[0073] Optionally, in the transaction monitoring method based on a voice broadcasting device provided in this application embodiment, the step of encrypting the current transaction time and transaction amount using the transaction symmetric key of the target merchant bound to the merchant number to obtain a transaction verification code includes: converting the current transaction time into an integer number of minutes; encrypting the integer number of minutes and the transaction amount using the transaction symmetric key, converting the encryption result into an integer number, dividing the converted integer number by a predetermined value and taking the modulus to obtain the transaction verification code.

[0074] After a payment is successful, the acquiring institution's transaction processing server obtains the current transaction time. Since timestamps can contain numerous details (such as seconds and milliseconds), to simplify the encryption process and ensure the consistency of the verification code, the server converts the current transaction time into an integer number of minutes. For example, if the current time is 14:32:15, then the converted integer number of minutes is 14 * 60 + 32 = 872. This conversion method eliminates subtle time differences, allowing verification codes generated using the same symmetric key on different devices to remain consistent within a certain time frame.

[0075] It should also be noted that the transaction symmetric key mentioned in this embodiment is generated by the acquiring institution's transaction processing server for each target merchant. It is bound to the merchant ID and used to encrypt key data in the transaction information. When generating the transaction verification code, the server uses the transaction symmetric key to encrypt the converted integer minutes and transaction amount. After encryption, the result is typically a series of complex characters or binary data. To facilitate the generation and recognition of the transaction verification code, the server converts the encrypted result into an integer. This integer is then divided by a predetermined value and moduloed. The selection of the predetermined value should consider the length and range of the verification code to ensure that the generated transaction verification code has both a certain degree of randomness and security, while also being easy to announce and verify. For example, if the predetermined value is 999, the transaction verification code will be an integer between 0 and 998. This range provides sufficient security without being overly complex, making it easy to announce and recognize.

[0076] Through the above steps, the acquiring institution's transaction processing server will obtain an integer representing the encrypted combination of transaction time and amount. Finally, this integer is divided by a predetermined value and the modulus is taken to obtain the transaction verification code. The generation of the transaction verification code ensures that it is closely related to a specific transaction time, amount, and the merchant's transaction symmetric key, thereby effectively preventing losses to merchants caused by forged voice broadcast messages, and thus improving the security of small and micro merchants in payment scenarios.

[0077] Optionally, in the transaction monitoring method based on a voice broadcasting device provided in this application embodiment, after obtaining the transaction verification code, the transaction monitoring method based on a voice broadcasting device further includes: pushing payment information including payment method, transaction amount and transaction verification code to a voice broadcasting device bound to the merchant number, wherein the voice broadcasting device converts the payment information into voice broadcast.

[0078] Once the acquiring institution's transaction processing server receives a successful transaction notification, it immediately constructs payment information. This information includes detailed transaction information such as the payment method, transaction amount, and the transaction verification code generated during the aforementioned encryption process. If the transaction amount exceeds the merchant's set verification code broadcast limit, the server ensures that all information, including the transaction verification code, is accurately constructed. Once the payment information is complete, the acquiring institution's transaction processing server pushes this information through its communication interface to the voice broadcast device bound to the merchant's account. The push process is completed via the internet, such as mobile networks, Wi-Fi, or wired networks, ensuring the real-time nature and security of the information. A stable message subscription relationship exists between the server and the voice broadcast device, enabling the server to accurately and promptly deliver payment information to the corresponding voice broadcast device.

[0079] After receiving payment information, the voice broadcasting device will process the payment message, converting it into speech. The device's built-in speech synthesis module will convert the received payment method, transaction amount, and transaction verification code (if present) into a speech message. Finally, the voice broadcasting device will announce the payment information in speech form through its built-in speaker or audio output interface. For example, if the payment information is "*Xin received 1000 yuan, verification code 903", the voice broadcasting device will announce "*Xin received 1000 yuan, verification code 903", clearly informing the merchant of the specific transaction method, amount, and security verification information. By broadcasting complete payment information, including the transaction verification code, in real time, merchants can not only immediately confirm the payment status, but also prevent potential dangerous behaviors, such as unauthorized copying or tampering with the voice broadcast message, through the additional security measure of the transaction verification code. Merchants can verify the validity of the verification code based on the broadcast payment method and amount, and simultaneously through the voice monitoring device, thereby ensuring that every transaction is genuine.

[0080] It should be noted that in this embodiment, merchants can customize the verification code broadcast limit, and this setting is stored in the acquiring institution's transaction processing server. If the transaction amount exceeds this limit, the server will return a transaction verification code; otherwise, no verification code will be returned. The voice broadcast device processes the information returned by the server: when it receives payment information containing a transaction verification code, it will broadcast the verification code; when it receives payment information not containing a transaction verification code, it will only broadcast the payment method and transaction amount.

[0081] Step S103: The transaction verification code is pushed to the voice monitoring device bound to the merchant account. The voice monitoring device listens to the live voice of the voice broadcasting device, parses the live voice, obtains the transaction amount and the transaction verification code, and verifies the transaction verification code. If the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is inconsistent with the transaction verification code obtained by parsing the live voice, an alarm prompt is sent to the target merchant indicated by the merchant account.

[0082] Once the acquiring institution's transaction processing server generates a transaction verification code, it pushes the verification code, along with payment information, to the voice monitoring device bound to the merchant's account via a pre-established communication channel. This push process is real-time, ensuring the immediate availability of the transaction verification code. Simultaneously, the voice monitoring device receives the merchant's transaction symmetric key and verification code broadcast limit parameters; these parameters are used for subsequent verification code generation and verification. The voice monitoring device can listen to all voice information broadcast live by the voice broadcasting device. When a transaction is completed and broadcast, the device captures the voice broadcast containing the transaction amount and verification code. The device's internal speech recognition module converts the received voice signal into text information. This process involves preprocessing the voice signal, feature extraction, and pattern recognition, with the ultimate goal of accurately deciphering the broadcast transaction amount and verification code. After parsing the transaction amount and transaction verification code, the voice monitoring device uses the merchant's transaction symmetric key stored locally to encrypt and calculate the current device time (converted to integer minutes) and transaction amount, generating an actual transaction verification code for comparison. The device compares the parsed transaction verification code with the transaction verification code pushed by the server. If they match, it means that the transaction information is genuine and valid; if they do not match, it may mean that the transaction information has been tampered with or that there is fraudulent behavior.

[0083] Optionally, in the transaction monitoring method based on a voice broadcasting device provided in this application embodiment, the step of the voice monitoring device verifying the transaction verification code includes: the voice monitoring device parsing the on-site voice to obtain the transaction amount; the voice monitoring device converting the current device time into integer minutes, encrypting the string containing the integer minutes and the transaction amount using a transaction symmetric key, converting the encrypted result into an integer number, dividing it by a predetermined value and taking the modulus to obtain the transaction verification code corresponding to the on-site voice; the voice monitoring device performing a consistency check between the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the acquiring institution's transaction processing server to obtain a verification result; if the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is consistent with the transaction verification code obtained by parsing the on-site voice, the voice monitoring device confirms successful verification and ends the verification process.

[0084] Once a transaction is completed and announced by the voice broadcasting device, the voice monitoring device first captures and parses the broadcast audio. Built-in speech recognition technology quickly converts the audio signal into text information. The device then identifies the transaction amount from the parsed text for subsequent transaction verification. The voice monitoring device converts the current device time into integer minutes, taking into account the accuracy of the device's internal clock to ensure synchronization with the acquiring institution's transaction processing server or within an acceptable time error range. Next, the device uses a locally stored transaction symmetric key to encrypt a string containing the integer minutes and transaction amount. This encryption process may employ symmetric encryption algorithms such as AES or DES to ensure that the generated transaction verification code is based on the same time and amount information as the verification code generated by the acquiring institution's transaction processing server, but is encrypted using a different device. After converting the encrypted result into an integer, the device divides it by a predetermined value and takes the modulus, ultimately obtaining a transaction verification code corresponding to the broadcast audio. The selection of the predetermined value (e.g., 999) should consider the length and security requirements of the verification code, ensuring that the generated verification code is easy to broadcast and recognize, while also possessing a degree of randomness and security.

[0085] The voice monitoring device then compares the locally generated transaction verification code with the transaction verification code pushed by the acquiring institution's transaction processing server. This verification process ensures the integrity and authenticity of the transaction information. If they match, the device confirms successful verification, meaning the transaction process is secure. This confirmation can be recorded internally by the device or sent via the network to the acquiring institution's transaction processing server, indicating that the voice broadcast content for the transaction has undergone security verification. If the consistency check shows that the transaction verification code pushed by the acquiring institution's transaction processing server matches the transaction verification code obtained by the voice monitoring device from parsing the live voice, the voice monitoring device immediately ends the verification process. This means the transaction information has been effectively verified and can be considered a genuine transaction event, requiring no additional security measures or alarms. Merchants can then confidently accept payments based on this confirmation information.

[0086] Optionally, the voice monitoring device performs a consistency check between the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the acquiring institution's transaction processing server. After obtaining the verification result, the process further includes: if the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is inconsistent with the transaction verification code obtained from parsing the on-site voice, the voice monitoring device adds or subtracts a predetermined number of minutes to the current device time to obtain an updated device time; converts the updated device time into an integer number of minutes; encrypts the string containing the integer number of minutes and the transaction amount using a transaction symmetric key; converts the encrypted result into an integer number, divides it by a predetermined value, and takes the modulus to obtain the transaction verification code corresponding to the on-site voice; performs a consistency check between the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the acquiring institution's transaction processing server to obtain a new verification result; if the new verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is consistent with the transaction verification code obtained from parsing the on-site voice, the voice monitoring device confirms successful verification and ends the verification process; if the new verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is consistent with the transaction verification code obtained from parsing the on-site voice, the voice monitoring device issues a price quote notification.

[0087] When the transaction verification code obtained by the voice monitoring device from the initial parsing of the live audio is inconsistent with the transaction verification code pushed by the acquiring institution's transaction processing server, it indicates potential issues such as time synchronization errors, device clock deviations, or third-party interference. To ensure the accuracy of the verification results and avoid false alarms, the device performs a further verification process. After the initial verification fails, the voice monitoring device attempts to adjust its current time by adding or subtracting a predetermined number of minutes to obtain an updated device time. This fine-tuning takes into account the possible time difference between the device and the server; for example, due to network latency, device clock deviations, etc., the broadcast time of the live audio may differ from the time recorded by the server by a few seconds to a few minutes. After updating the device time, the device converts the updated time back into an integer number of minutes and encrypts the string containing the integer number of minutes and the transaction amount using the transaction symmetric key. After converting the encrypted result into an integer, the device divides it by a predetermined value (such as 999) and takes the modulus to generate a new transaction verification code. The device then compares this newly generated transaction verification code with the transaction verification code pushed by the acquiring institution's transaction processing server to obtain a new verification result. This repeated verification process ensures that even with time discrepancies, the transaction verification code can be correctly verified by adjusting the time. If the new verification result shows that the time-adjusted transaction verification code matches the one pushed by the server, the voice monitoring device will confirm successful verification and end the verification process. This means that even after time adjustment, the transaction information can still be correctly verified, and the transaction process can be considered secure.

[0088] To avoid unnecessary alarms, the voice monitoring device will not issue an alarm when the verification result ultimately indicates that the transaction verification code matches. This strategy ensures that the alarm mechanism is only triggered when the transaction verification codes are indeed inconsistent, indicating potential fraud, thus avoiding false alarms caused by time errors or device synchronization problems. Conversely, if the time-adjusted transaction verification code still does not match the verification code pushed by the server, this usually indicates a serious time synchronization problem or potential fraud. In this case, the voice monitoring device will immediately activate the alarm mechanism, issuing a clear alarm signal to warn the merchant of potential transaction security issues. The alarm can be a local device alarm sound, a flashing warning light, or an emergency notification sent to the merchant's mobile device via the network, ensuring that the merchant can immediately detect the anomaly and take necessary countermeasures.

[0089] By implementing the aforementioned technical features, the voice monitoring device can effectively handle time synchronization errors and perform multiple verifications of transaction verification codes to ensure the accuracy and security of transaction information. This mechanism not only enhances the security protection of micro and small merchants in payment scenarios but also reduces the possibility of false alarms through intelligent processing, creating a more stable and reliable transaction environment for merchants while alleviating their burden in payment security monitoring.

[0090] It should be noted that in this embodiment, if the transaction verification code fails to be verified—that is, if the transaction verification code generated by the voice monitoring device is inconsistent with the transaction verification code parsed from the on-site voice—the device will immediately activate an alarm mechanism. The alarm mechanism mentioned in this embodiment may include an alarm sound emitted locally by the device, and an alarm signal sent via the network to the acquiring institution's transaction processing server, notifying the server of a potential security issue. Upon receiving the alarm signal, the acquiring institution's transaction processing server can further verify the transaction information, suspend or cancel the transaction if necessary, and simultaneously send an alarm notification to the target merchant indicated by the merchant number (i.e., the micro-merchant served by the voice broadcast device) so that the merchant can take timely countermeasures. Through this technical feature, the voice monitoring device not only enhances the security of the transaction process but also protects the funds of micro-merchants.

[0091] The transaction monitoring method based on a voice broadcast device provided in this application effectively prevents the leakage and tampering of payment information by using dynamically generated transaction verification codes and symmetric key encryption, thus enhancing the security of the payment process. Furthermore, based on existing voice broadcast speakers that broadcast payment information, this method adds transaction amount threshold verification and the broadcast of transaction verification codes. Simultaneously, a voice monitoring device listens to, parses, and verifies the on-site voice. If the verification code fails, an alarm sound is emitted to remind the merchant, thereby reducing the possibility of criminals forging voice messages to deceive merchants on-site. This further improves the transaction security of the voice broadcast speaker, increases the convenience and success rate of transactions, and solves the problem of low security and potential for merchant fund loss when using voice broadcast speaker technology for payment collection in related technologies.

[0092] In the transaction monitoring method based on a voice broadcasting device provided in this application embodiment, the method further includes: constructing a hardware serial number mapping table and a public key mapping table; storing the binding relationship between the merchant number and the hardware serial number of the voice broadcasting device in the hardware serial number mapping table; storing the binding relationship between the merchant number and the hardware serial number of the voice monitoring device in the hardware serial number mapping table; and storing the binding relationship between the merchant number and the merchant's public key in the public key mapping table.

[0093] In this embodiment, the hardware serial number mapping table stores the binding relationship between the hardware serial numbers of voice broadcasting devices and voice monitoring devices and merchant IDs, ensuring the uniqueness of each device and the accuracy of its corresponding merchant information. When constructing this mapping table, each voice broadcasting device and voice monitoring device is assigned a unique hardware serial number during production or deployment. This serial number can be the device's internal IMEI number, MAC address, or other unique identifier. When the acquiring institution's transaction processing server establishes a connection with the voice broadcasting devices and voice monitoring devices, it obtains their hardware serial numbers. The server binds the merchant ID to the hardware serial number of each device and stores these binding relationships in the hardware serial number mapping table. In this way, the server can find the corresponding voice broadcasting device and voice monitoring device based on the merchant ID by querying the mapping table, achieving accurate message push and security verification.

[0094] The binding relationships between merchant IDs and the hardware serial numbers of voice broadcasting devices, as well as between merchant IDs and the hardware serial numbers of voice monitoring devices, are stored in a hardware serial number mapping table. This storage process is dynamic; when a new device is bound or an existing device binding relationship changes, the server updates the mapping table to ensure the timeliness and accuracy of the information.

[0095] Additionally, it's important to note that the public key mapping table stores the binding relationship between merchant IDs and merchant public keys. This is crucial for enabling secure communication based on public-private key symmetric encryption algorithms. When a merchant registers or a device initializes, the acquiring institution's transaction processing server generates a public-private key pair for the merchant. The private key is stored in the voice monitoring device, while the public key, along with the merchant ID, is stored in the public key mapping table. This table ensures that the acquiring institution's transaction processing server can use the correct public key to encrypt transaction information, guaranteeing secure data transmission. Simultaneously, the voice monitoring device can use its stored private key to decrypt this information, enabling security verification.

[0096] Hardware serial number mapping tables and public key mapping tables need to be updated and synchronized regularly to accommodate device replacements or changes in merchant information. The acquiring institution's transaction processing server provides corresponding interfaces that allow voice monitoring and voice broadcasting devices to call and obtain the latest merchant information and key parameters. During initial device connection or periodic communication, these interface calls enable the device to obtain the latest hardware serial number mapping table and public key mapping table information, ensuring the proper functioning of subsequent secure communication and verification mechanisms.

[0097] It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases the steps shown or described may be executed in a different order than that shown here.

[0098] Example 2

[0099] It should be noted that, in implementing the transaction monitoring method based on a voice broadcasting device in Embodiment 1 above, this embodiment provides a transaction monitoring system based on a voice broadcasting device.

[0100] Figure 3 This is a schematic diagram of a transaction monitoring system based on a voice broadcasting device according to an embodiment of this application, such as... Figure 3 As shown, the system includes: an acquiring institution transaction processing server 301, a mobile payment device 302 (corresponding to a mobile payment device), a voice broadcasting device 303, and a voice monitoring device 304.

[0101] The acquiring institution's transaction processing server 301 is primarily used to process payment requests from mobile payment devices 302, push merchant payment information to voice broadcasting devices 303, and synchronize merchant transaction symmetric keys and verification code broadcasting limit parameters to voice monitoring devices 304. Specifically, this includes: maintaining the binding relationship between the merchant ID and the hardware serial number of the voice broadcasting device 303; maintaining the binding relationship between the merchant ID and the hardware serial number of the voice monitoring device 304; generating a random, unique public-private key pair for each merchant. The public key is maintained in the acquiring institution's transaction processing server 301, and the private key is loaded into the voice monitoring device 304; maintaining the binding relationship between the merchant ID and the merchant's public key; and providing an interface for synchronizing verification code broadcasting limit parameters to the voice monitoring device 304. Each merchant generates a random, unique transaction symmetric key for the generation and verification of verification codes. This key is ultimately stored in the acquiring institution's transaction processing server 301 and the voice monitoring device 304, respectively. A transaction symmetric key synchronization interface is provided to the voice monitoring device 304, where the transaction symmetric key is encrypted using the merchant's public key. A message subscription interface is provided to the voice broadcasting device 303. The acquiring institution's transaction processing server 301 receives payment requests from mobile payment devices 302 and pushes a message to the voice broadcasting device 303 upon successful payment. When pushing a message, if the transaction amount is greater than the verification code broadcasting limit, the transaction verification code is calculated by encrypting the current transaction time and transaction amount using the transaction symmetric key, and the acquiring institution's transaction processing server 301 synchronously pushes the transaction verification code to the voice broadcasting device 303. When pushing a message, if the transaction amount is less than or equal to the verification code broadcasting limit, no transaction verification code is generated.

[0102] Optionally, the transaction verification code can be generated using the following method: First, convert the current transaction time into an integer number of minutes, then encrypt the string "number of minutes + transaction amount" using the transaction symmetric key. After converting the encrypted result into an integer, divide it by 999 and take the modulo, which is the transaction verification code.

[0103] The mobile payment device 302 is mainly used to scan the merchant's QR code on the voice broadcast device 303 to complete the payment. Specifically, the mobile payment device 302 scans the merchant's QR code on the voice broadcast device 303 and redirects to the acquiring institution's H5 cashier; after entering the transaction amount on the H5 cashier, the user selects a payment method, such as WeChat Pay, Alipay, or UnionPay QuickPass, and clicks to confirm the payment; after successful payment, the mobile payment device 302 sends a transaction result notification to the acquiring institution's transaction processing server 301, including information such as merchant number, transaction amount, payment method, and transaction time.

[0104] The voice broadcasting device 303 is mainly used to receive and broadcast merchant payment information pushed from the backend in real time. Specifically, the voice broadcasting device 303 displays the merchant's payment QR code for the mobile payment device 302 to scan and pay; the voice broadcasting device 303 establishes a connection with the acquiring institution's transaction processing server 301 via the Internet, such as mobile network, WIFI, or wired network, and subscribes to messages by sending the voice broadcasting speaker hardware serial number to the acquiring institution's transaction processing server 301; after subscription, the voice broadcasting device 303 receives payment information pushed from the acquiring institution's transaction processing server 301 in real time. The payment information includes payment method (such as WeChat Pay, Alipay, UnionPay QR code, digital RMB), payment amount, payment verification code, etc., converts the received payment text information into voice information, and finally plays it through sound.

[0105] Optionally, merchants can customize the verification code broadcast limit. If the transaction amount exceeds the verification code broadcast limit, the payment verification code must be broadcast via voice message; if the transaction amount is less than or equal to the limit, the payment verification code will not be broadcast. This limit can be maintained on the acquiring institution's transaction processing server 301. If the transaction amount exceeds the verification code broadcast limit, the payment verification code will be returned; if the transaction amount is less than or equal to the limit, the payment verification code will not be returned. The voice broadcast device 303 processes the data based on whether the acquiring institution's transaction processing server 301 has returned a payment verification code. If a payment verification code has been returned, it broadcasts "<Payment Method>Received <Amount> Yuan, Verification Code <Verification Code Value>", such as "*Xin Payment 1000 Yuan, Verification Code 903"; if no payment verification code has been returned, it broadcasts "<Payment Method>Received <Amount> Yuan", such as "*Xin Payment 500 Yuan".

[0106] The voice monitoring device 304 is mainly used for monitoring, parsing, and verifying on-site voice. If the verification code fails, an alarm sound is emitted to remind the merchant. Specifically, the voice monitoring device 304 establishes a connection with the acquiring institution's transaction processing server 301 via mobile network, WIFI, wired network, or other internet methods; the merchant generates a public-private key pair, where the private key is stored in the voice monitoring device 304, and the public key, merchant number, and voice monitoring device 304 hardware serial number are manually maintained in the acquiring institution's transaction processing server 301; the voice monitoring device 304 periodically initiates merchant transaction symmetric key synchronization with the acquiring institution's transaction processing server 301, obtaining the merchant transaction symmetric key through local private key decryption; the voice monitoring device 304 periodically sends data to the acquiring institution's transaction processing server 301. 1. Initiate verification code broadcast limit synchronization by uploading the hardware serial number of the voice monitoring device 304 to obtain the verification code broadcast limit maintained by the acquiring institution's transaction processing server 301; by monitoring the on-site voice, converting the voice into text, and further parsing to obtain information such as transaction amount and transaction verification code; based on the parsed transaction amount, if the transaction amount is greater than the verification code broadcast limit but the verification code is empty, an alarm sound is issued to remind the merchant; if the transaction amount is greater than the verification code broadcast limit and the verification code is not empty, the actual verification code is calculated based on the current device transaction symmetric key, the current device time, and the transaction amount, and compared; if the compared verification codes are inconsistent, an alarm sound is issued to remind the merchant; if the transaction amount is less than or equal to the verification code broadcast limit, no verification code verification is required.

[0107] Optionally, the following method can be used for 304 verification code verification by the voice monitoring device: First, convert the current device time into an integer number of minutes. Then, encrypt the string "minutes + transaction amount" using the transaction symmetric key. After converting the encrypted result into an integer, divide it by 999 and take the modulo to obtain transaction verification code 1. If transaction verification code 1 matches, the verification is considered successful, and the verification process ends. If transaction verification code 1 fails to verify, increment the current device time by 1 in minutes, and encrypt the string "minutes after increment + transaction amount" using the transaction symmetric key. The encrypted result is then converted into an integer. The transaction verification code 2 is obtained by dividing by 999 and taking the modulo. If the transaction verification code 2 matches, the verification is considered successful and the verification process ends. If the transaction verification code 2 fails to verify, the current device time in minutes is decremented by 1, and the string "minus 1 + transaction amount" is encrypted using the transaction symmetric key. The encrypted result is converted to an integer and then divided by 999 and taken modulo to obtain the transaction verification code 3. If the transaction verification code 3 matches, the verification is considered successful and the verification process ends. If the transaction verification codes 1, 2, and 3 all fail to match, the verification is considered to have ultimately failed. (This mainly considers the possibility of a certain error between the device time and the server time.)

[0108] This invention improves transaction security by adding a transaction verification code to the existing voice broadcast speaker that broadcasts payment information. Simultaneously, a voice monitoring device verifies the verification code; if the verification fails, an alarm sound is emitted to alert the merchant. This ensures that criminals cannot deceive merchants by forging voice messages on-site.

[0109] Example 2

[0110] This application also provides a transaction monitoring device based on a voice broadcasting device. It should be noted that this transaction monitoring device can be used to execute the transaction monitoring method based on a voice broadcasting device provided in this application. The following describes the transaction monitoring device based on a voice broadcasting device provided in this application.

[0111] According to an embodiment of this application, an apparatus for implementing the above-described transaction monitoring method based on a voice broadcasting device is also provided, such as... Figure 4 As shown, the device includes: a notification receiving unit 41, an encryption unit 42, and a verification code pushing unit 43.

[0112] The notification receiving unit 41 is used to receive a transaction success notification transmitted by the mobile payment device. The transaction success notification carries the following information: transaction amount, merchant number, payment method, and current transaction time.

[0113] The encryption unit 42 is used to encrypt the current transaction time and transaction amount using the transaction symmetric key of the target merchant bound to the merchant number when the transaction amount exceeds the verification code broadcast limit, so as to obtain the transaction verification code.

[0114] The verification code push unit 43 is used to push the transaction verification code to the voice monitoring device bound to the merchant number. The voice monitoring device listens to the on-site voice of the voice broadcasting device, parses the on-site voice, obtains the transaction amount and the transaction verification code, and verifies the transaction verification code. If the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is inconsistent with the transaction verification code obtained by parsing the on-site voice, an alarm prompt is sent to the target merchant indicated by the merchant number.

[0115] The transaction monitoring device based on a voice broadcasting device provided in this application embodiment effectively prevents the leakage and tampering of payment information by using dynamically generated transaction verification codes and symmetric key encryption, thus enhancing the security of the payment process. Furthermore, in addition to the existing voice broadcasting system for receiving payment information, it adds transaction amount threshold verification and the broadcasting of transaction verification codes. Simultaneously, it uses a voice monitoring device to listen to, analyze, and verify the on-site voice. If the verification code fails, an alarm sound is issued to remind the merchant, thereby reducing the possibility of criminals forging voice messages to deceive merchants on-site. This further improves the transaction security of the voice broadcasting system, increases the convenience and success rate of transactions, and solves the problem of low security and potential financial losses for merchants when using voice broadcasting system technology for payment collection in related technologies.

[0116] Optionally, the transaction monitoring device based on the voice broadcasting device provided in this application embodiment further includes: a public key receiving module, used to receive a merchant public key randomly generated by the target merchant, wherein the target merchant loads the merchant public key into the acquiring institution's transaction processing server and loads the merchant private key into the voice monitoring device after randomly generating a public-private key pair based on the current timestamp; and a key decryption module, used to decrypt the symmetric key encryption packet using the merchant public key to obtain the transaction symmetric key randomly generated by the target merchant.

[0117] Optionally, in the transaction monitoring device based on the voice broadcasting device provided in this application embodiment, the encryption unit includes: a time conversion module, used to convert the current transaction time into an integer number of minutes; and a verification code generation module, used to encrypt the integer number of minutes and the transaction amount using a transaction symmetric key, convert the encryption result into an integer number, divide the converted integer number by a predetermined value and take the modulus to obtain a transaction verification code.

[0118] Optionally, the transaction monitoring device based on the voice broadcasting device provided in this application embodiment further includes: a payment information push module, which, after obtaining the transaction verification code, pushes payment information including the payment method, transaction amount and transaction verification code to the voice broadcasting device bound to the merchant number, wherein the voice broadcasting device converts the payment information into voice broadcast.

[0119] Optionally, the transaction monitoring device based on the voice broadcasting device provided in this application embodiment further includes: a mapping table construction module, used to construct a hardware serial number mapping table and a public key mapping table; storing the binding relationship between the merchant number and the hardware serial number of the voice broadcasting device in the hardware serial number mapping table; a serial number binding module, used to store the binding relationship between the merchant number and the hardware serial number of the voice monitoring device in the hardware serial number mapping table; and a public key binding module, used to store the binding relationship between the merchant number and the merchant's public key in the public key mapping table.

[0120] Optionally, the transaction monitoring device based on the voice broadcasting device provided in this application embodiment further includes: a key synchronization request receiving module, used to receive a symmetric key synchronization request initiated by the voice monitoring device after receiving a transaction success notification transmitted by the mobile payment device; and a key synchronization response module, used to respond to the symmetric key synchronization request and transmit a key encryption package to the voice monitoring device, wherein the voice monitoring device uses the merchant's private key to decrypt the key encryption package to obtain the target merchant's transaction symmetric key.

[0121] Optionally, the transaction monitoring device based on the voice broadcasting device provided in this application embodiment further includes: a graphic code scanning module, used for the mobile payment device to scan the merchant's payment graphic code on the voice broadcasting device before receiving the transaction success notification transmitted by the mobile payment device; a transaction input module, used for the mobile payment device to input the transaction amount and payment method after being redirected from the merchant's payment graphic code to the institution's cashier; and a transaction notification module, used for the mobile payment device to send a transaction success notification to the acquiring institution's transaction processing server after successful payment.

[0122] Optionally, in the transaction monitoring device based on a voice broadcasting device provided in this application embodiment, when the voice monitoring device verifies the transaction verification code, it includes: a live voice parsing module, used by the voice monitoring device to parse the live voice to obtain the transaction amount; a verification code comparison module, used by the voice monitoring device to convert the current device time into an integer number of minutes, encrypt the string containing the integer number of minutes and the transaction amount using a transaction symmetric key, convert the encrypted result into an integer number, divide it by a predetermined value and take the modulus to obtain the transaction verification code corresponding to the live voice; a verification code verification module, used by the voice monitoring device to perform consistency verification between the transaction verification code corresponding to the live voice and the transaction verification code pushed by the acquiring institution's transaction processing server, and obtain a verification result; and a verification success confirmation module, used by the voice monitoring device to confirm the verification success and end the verification process when the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is consistent with the transaction verification code obtained by parsing the live voice.

[0123] Optionally, in the transaction monitoring device based on the voice broadcasting device provided in this application embodiment, the voice monitoring device performs a consistency check between the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the acquiring institution's transaction processing server. After obtaining the check result, it further includes: a time correction module, used to increase or decrease the current device time by a predetermined number of minutes if the check result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is inconsistent with the transaction verification code obtained by parsing the on-site voice, to obtain an updated device time; and an updated verification code generation module, used to convert the updated device time into an integer number of minutes, and encrypt the string containing the integer number of minutes and the transaction amount using a transaction symmetric key. The encrypted result is converted into an integer, divided by a predetermined value, and the modulus is taken to obtain the transaction verification code corresponding to the on-site voice. A new verification code verification module is used to verify the consistency between the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the acquiring institution's transaction processing server, obtaining a new verification result. A verification success confirmation module is used by the voice monitoring device to confirm successful verification and end the verification process when the new verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server matches the transaction verification code obtained from parsing the on-site voice. An alarm notification module is used by the voice monitoring device to issue a price quote notification when the new verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server matches the transaction verification code obtained from parsing the on-site voice.

[0124] It should be noted that the notification receiving unit 41, encryption unit 42, and verification code push unit 43 mentioned above correspond to steps S101 to S103 in Embodiment 1. The two modules and the corresponding steps implement the same instances and application scenarios, but are not limited to the content disclosed in Embodiment 1.

[0125] Example 3

[0126] Embodiments of this application may provide an electronic device. Figure 5 This is a structural block diagram of an electronic device according to an embodiment of this application. Figure 5 As shown, the electronic device may include: one or more ( Figure 5 Only one of the components is shown: processor 502, memory 504, memory controller, and peripheral interface, wherein the peripheral interface is connected to the radio frequency module, audio module, and display.

[0127] The memory can be used to store software programs and modules, such as the program instructions / modules corresponding to the methods and apparatus in the embodiments of this application. The processor executes various functional applications and data processing by running the software programs and modules stored in the memory, thereby implementing the above-described methods. The memory may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory may further include memory remotely located relative to the processor, and these remote memories can be connected to the terminal via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0128] The processor can access information and applications stored in the memory via a transmission device to perform the following steps: receiving a transaction success notification transmitted by a mobile payment device, wherein the transaction success notification carries: transaction amount, merchant number, payment method, and current transaction time; if the transaction amount exceeds the verification code broadcast limit, encrypting the current transaction time and transaction amount using the transaction symmetric key of the target merchant bound to the merchant number to obtain a transaction verification code; pushing the transaction verification code to a voice monitoring device bound to the merchant number, wherein the voice monitoring device listens to the live voice of the voice broadcast device, parses the live voice to obtain the transaction amount and transaction verification code, and verifies the transaction verification code; if the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is inconsistent with the transaction verification code obtained from parsing the live voice, issuing an alarm prompt to the target merchant indicated by the merchant number.

[0129] The processor can also call the information and application stored in the memory through the transmission device to perform the following steps: receiving the merchant public key randomly generated by the target merchant, wherein the target merchant loads the merchant public key into the acquiring institution's transaction processing server after randomly generating a public-private key pair based on the current timestamp, and loads the merchant private key into the voice monitoring device; decrypting the symmetric key encryption packet using the merchant public key to obtain the transaction symmetric key randomly generated by the target merchant.

[0130] The processor can also call the information and application stored in the memory through the transmission device to perform the following steps: convert the current transaction time into an integer number of minutes; encrypt the integer number of minutes and the transaction amount using the transaction symmetric key, convert the encryption result into an integer number, divide the converted integer number by a predetermined value and take the modulus to obtain the transaction verification code.

[0131] The processor can also call the information and application stored in the memory through the transmission device to perform the following steps: after obtaining the transaction verification code, the payment information including the payment method, transaction amount and transaction verification code is pushed to the voice broadcasting device bound to the merchant number, wherein the voice broadcasting device converts the payment information into voice broadcast.

[0132] The processor can also access information and applications stored in the memory via a transmission device to perform the following steps: constructing a hardware serial number mapping table and a public key mapping table; storing the binding relationship between the merchant number and the hardware serial number of the voice broadcasting device in the hardware serial number mapping table; storing the binding relationship between the merchant number and the hardware serial number of the voice monitoring device in the hardware serial number mapping table; and storing the binding relationship between the merchant number and the merchant's public key in the public key mapping table.

[0133] The processor can also call the information and application stored in the memory through the transmission device to perform the following steps: after receiving the transaction success notification transmitted by the mobile payment device, receive the symmetric key synchronization request initiated by the voice monitoring device; in response to the symmetric key synchronization request, transmit the key encryption package to the voice monitoring device, wherein the voice monitoring device uses the merchant's private key to decrypt the key encryption package to obtain the target merchant's transaction symmetric key.

[0134] The processor can also access information and applications stored in the memory via the transmission device to perform the following steps: before receiving a transaction success notification from the mobile payment device, the mobile payment device scans the merchant's payment graphic code on the voice broadcast device; after being redirected to the institution's cashier by the merchant's payment graphic code, the mobile payment device enters the transaction amount and payment method; after successful payment, the mobile payment device sends a transaction success notification to the acquiring institution's transaction processing server.

[0135] The processor can also access information and applications stored in the memory via a transmission device to execute the following steps: the step of the voice monitoring device verifying the transaction verification code includes: the voice monitoring device parsing the on-site voice to obtain the transaction amount; the voice monitoring device converting the current device time into an integer number of minutes, encrypting the string containing the integer number of minutes and the transaction amount using a transaction symmetric key, converting the encrypted result into an integer number, dividing it by a predetermined value and taking the modulus to obtain the transaction verification code corresponding to the on-site voice; the voice monitoring device performing a consistency check between the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the acquiring institution's transaction processing server to obtain a verification result; if the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is consistent with the transaction verification code obtained by parsing the on-site voice, the voice monitoring device confirms successful verification and ends the verification process.

[0136] The processor can also access information and applications stored in the memory via the transmission device to execute the following steps: The voice monitoring device performs a consistency check between the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the acquiring institution's transaction processing server. After obtaining the verification result, if the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is inconsistent with the transaction verification code obtained by parsing the on-site voice, the voice monitoring device increments or decrements the current device time by a predetermined number of minutes to obtain the updated device time. The updated device time is then converted into an integer number of minutes, and the string containing the integer number of minutes and the transaction amount is encrypted using the transaction symmetric key. The encryption process involves converting the encrypted result into an integer, dividing it by a predetermined value, and taking the modulus to obtain a transaction verification code corresponding to the on-site voice message. This transaction verification code is then compared with the transaction verification code pushed by the acquiring institution's transaction processing server to obtain a new verification result. If the new verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server matches the transaction verification code obtained from parsing the on-site voice message, the voice monitoring device confirms successful verification and ends the verification process. Finally, if the new verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server matches the transaction verification code obtained from parsing the on-site voice message, the voice monitoring device issues a price quote notification.

[0137] Those skilled in the art will understand that Figure 5 The structure shown is for illustrative purposes only. Electronic devices can also be smartphones (such as Android phones, iOS phones, etc.), tablets, PDAs, mobile internet devices (MIDs), PADs, and other terminal devices. Figure 5 This does not limit the structure of the aforementioned electronic device. For example, electronic devices may also include components that are more... Figure 5 The more or fewer components shown (such as network interfaces, display devices, etc.), or having the same Figure 5 The different configurations shown.

[0138] Those skilled in the art will understand that all or part of the steps in the various methods of the above embodiments can be implemented by a program instructing the hardware related to the terminal device. The program can be stored in a computer-readable storage medium, which may include: flash drive, read-only memory (ROM), random access memory (RAM), magnetic disk or optical disk, etc.

[0139] Example 4

[0140] Embodiments of this application also provide a storage medium. Optionally, in this embodiment, the storage medium can be used to store the program code executed by the transaction monitoring method based on a voice broadcasting device provided in Embodiment 1.

[0141] Optionally, in this embodiment, the storage medium may be located in any computer terminal in a group of computer terminals in a computer network, or in any mobile terminal in a group of mobile terminals.

[0142] To achieve the above objectives, according to another aspect of this application, a computer program product is provided, including computer instructions that, when executed by a processor, implement the steps of the transaction monitoring method based on a voice broadcasting device described above.

[0143] The sequence numbers of the embodiments in this application are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0144] In the above embodiments of this application, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0145] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. The device embodiments described above are merely illustrative; for example, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the displayed or discussed mutual coupling, direct coupling, or communication connection may be through some interfaces; the indirect coupling or communication connection between units or modules may be electrical or other forms.

[0146] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.

[0147] In addition, the functional units in the various embodiments of the present application may be integrated into a single processing unit, or each unit may exist physically separately, or two or more units may be integrated into a single unit. The aforementioned integrated units may be implemented in the form of hardware or software functional units.

[0148] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as a USB flash drive, read-only memory (ROM), random access memory (RAM), portable hard drive, magnetic disk, or optical disk.

[0149] The above description is only a preferred embodiment of this application. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the principle of this application, and these improvements and modifications should also be considered within the scope of protection of this application.

Claims

1. A transaction monitoring method based on a voice broadcasting device, characterized in that, Applications to transaction processing servers used by acquiring institutions include: Receive a transaction success notification transmitted by a mobile payment device, wherein the transaction success notification carries: transaction amount, merchant number, payment method and current transaction time; If the transaction amount exceeds the verification code broadcast limit, the current transaction time and the transaction amount are encrypted using the transaction symmetric key of the target merchant bound to the merchant number to obtain the transaction verification code; The transaction verification code is pushed to the voice monitoring device bound to the merchant ID. The voice monitoring device listens to the live voice of the voice broadcasting device, parses the live voice to obtain the transaction amount and the transaction verification code, and verifies the transaction verification code. If the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is inconsistent with the transaction verification code obtained by parsing the live voice, an alarm prompt is issued to the target merchant indicated by the merchant ID.

2. The transaction monitoring method according to claim 1, characterized in that, Also includes: The system receives a merchant public key randomly generated by the target merchant. After the target merchant randomly generates a public-private key pair based on the current timestamp, it loads the merchant public key into the acquiring institution's transaction processing server and loads the merchant private key into the voice monitoring device. The symmetric key encryption packet is decrypted using the merchant's public key to obtain the transaction symmetric key randomly generated by the target merchant.

3. The transaction monitoring method according to claim 1, characterized in that, The steps of encrypting the current transaction time and the transaction amount using the transaction symmetric key of the target merchant bound to the merchant ID to obtain a transaction verification code include: Convert the current transaction time into an integer number of minutes; The integer minutes and the transaction amount are encrypted using the transaction symmetric key, and the encryption result is converted into an integer. The converted integer is then divided by a predetermined value and the modulus is taken to obtain the transaction verification code.

4. The transaction monitoring method according to claim 1, characterized in that, After receiving the transaction verification code, the following is also included: The payment information, including the payment method, the transaction amount, and the transaction verification code, is pushed to a voice broadcasting device bound to the merchant account, wherein the voice broadcasting device converts the payment information into voice broadcast.

5. The transaction monitoring method according to claim 1, characterized in that, Also includes: Construct a hardware serial number mapping table and a public key mapping table; The binding relationship between the merchant number and the hardware serial number of the voice broadcasting device is stored in the hardware serial number mapping table; The binding relationship between the merchant number and the hardware serial number of the voice monitoring device is stored in the hardware serial number mapping table; The binding relationship between the merchant ID and the merchant public key is stored in the public key mapping table.

6. The transaction monitoring method according to claim 1, characterized in that, After receiving the transaction success notification transmitted by the mobile payment device, it also includes: Receive the symmetric key synchronization request initiated by the voice monitoring device; In response to the symmetric key synchronization request, the key encryption packet is transmitted to the voice monitoring device, wherein the voice monitoring device uses the merchant's private key to decrypt the key encryption packet to obtain the target merchant's transaction symmetric key.

7. The transaction monitoring method according to claim 1, characterized in that, Before receiving the transaction success notification transmitted by the mobile payment device, it also includes: The mobile payment device scans the merchant's payment graphic code on the voice broadcast device; After the mobile payment device redirects the user from the merchant's payment QR code to the institution's cashier, the user enters the transaction amount and payment method. After a successful payment, the mobile payment device sends a transaction success notification to the acquiring institution's transaction processing server.

8. The transaction monitoring method according to claim 1, characterized in that, The steps for the voice monitoring device to verify the transaction verification code include: The voice monitoring device analyzes the on-site voice to obtain the transaction amount; The voice monitoring device converts the current device time into an integer number of minutes, uses the transaction symmetric key to encrypt the string containing the integer number of minutes and the transaction amount, converts the encryption result into an integer number, divides it by a predetermined value and takes the modulus to obtain the transaction verification code corresponding to the on-site voice. The voice monitoring device performs a consistency check between the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the acquiring institution's transaction processing server, and obtains the verification result. If the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server matches the transaction verification code obtained by parsing the on-site voice, the voice monitoring device confirms successful verification and ends the verification process.

9. The transaction monitoring method according to claim 8, characterized in that, The voice monitoring device performs a consistency check between the transaction verification code corresponding to the on-site voice and the transaction verification code pushed by the acquiring institution's transaction processing server. After obtaining the verification result, it further includes: When the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is inconsistent with the transaction verification code obtained by parsing the on-site voice, the voice monitoring device adds or subtracts a predetermined number of minutes to the current device time to obtain an updated device time. The updated device time is converted into an integer number of minutes. The string containing the integer number of minutes and the transaction amount is encrypted using the transaction symmetric key. The encrypted result is converted into an integer number, divided by a predetermined number, and the modulus is taken to obtain the transaction verification code corresponding to the on-site voice. The transaction verification code corresponding to the on-site voice is compared with the transaction verification code pushed by the acquiring institution's transaction processing server to obtain a new verification result; When the new verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is consistent with the transaction verification code obtained by parsing the on-site voice, the voice monitoring device confirms the verification is successful and ends the verification process. When the new verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server matches the transaction verification code obtained by parsing the on-site voice, the voice monitoring device issues a quote prompt.

10. A transaction monitoring device based on a voice broadcasting equipment, characterized in that, Applications to transaction processing servers used by acquiring institutions include: The notification receiving unit is used to receive a transaction success notification transmitted by the mobile payment device, wherein the transaction success notification carries: transaction amount, merchant number, payment method and current transaction time; An encryption unit is used to encrypt the current transaction time and the transaction amount using the transaction symmetric key of the target merchant bound to the merchant number when the transaction amount exceeds the verification code broadcast limit, so as to obtain a transaction verification code; The verification code push unit is used to push the transaction verification code to a voice monitoring device bound to the merchant ID. The voice monitoring device listens to the live voice of the voice broadcasting device, parses the live voice to obtain the transaction amount and the transaction verification code, and verifies the transaction verification code. If the verification result indicates that the transaction verification code pushed by the acquiring institution's transaction processing server is inconsistent with the transaction verification code obtained by parsing the live voice, an alarm prompt is issued to the target merchant indicated by the merchant ID.

11. A transaction monitoring system based on a voice broadcasting device, characterized in that, include: The mobile payment device scans the merchant's payment graphic code. After being redirected to the institution's cashier by the merchant's payment graphic code, the user enters the transaction amount and payment method. After the payment is successful, the mobile payment device sends a transaction success notification to the acquiring institution's transaction processing server. The voice broadcasting device establishes a network connection with the acquiring institution's transaction processing server, transmits the hardware serial number of the voice broadcasting device to the acquiring institution's transaction processing server for message subscription, and receives payment information pushed by the acquiring institution's transaction processing server in real time, converts the payment information into voice information, and plays the voice information, wherein the payment information includes payment method, payment amount, and transaction verification code; The voice monitoring device listens to the voice of the target merchant and the mobile payment device during the financial transaction, as well as the voice information played by the voice broadcasting device, and issues an alarm to the target merchant if the transaction verification code is inconsistent. The acquiring institution's transaction processing server executes the transaction monitoring method based on a voice broadcasting device as described in any one of claims 1 to 9.

12. An electronic device, characterized in that, include: Memory, which stores executable programs; A processor for running the program, wherein the program executes the transaction monitoring method based on a voice broadcasting device as described in any one of claims 1 to 9.

13. A computer program product comprising computer instructions, characterized in that, When the computer instructions are executed by the processor, they implement the steps of the transaction monitoring method based on a voice broadcasting device as described in any one of claims 1 to 9.

Images