Information processing method

Abstract

The embodiment of the invention discloses an information processing method. The information processing method is applied to an SIM card of a first terminal, and comprises the following steps: in response to a target transaction instruction, generating a target random number corresponding to the target transaction instruction; the target random number is sent to an authentication platform, a preset public key and authentication information are pre-stored in the authentication platform, and the authentication information comprises a user identity information identification code and a security environment identifier corresponding to the SIM card of the first terminal; encrypting the target random number by using a preset public key to obtain a target key; encrypting the user identity information identification code and the security environment identifier by using a target key to obtain character verification code prototype information; and sending the character verification code prototype information to the first terminal, so that the first terminal displays a first character verification code corresponding to the character verification code prototype information. According to the embodiment of the invention, the security of code swiping authentication can be improved.

Description

Technical Field

[0001] The present application belongs to the field of secure communication technology, and in particular, relates to an information processing method. Background Art

[0002] With the development of smart phones, more and more people use applications (APPs) on smart phones to scan barcodes for transactions and authentication, such as payment codes on payment platforms and membership codes on supermarket applications. In the current barcode-scanning transaction and authentication solutions, most of them use the QR code provided by the APP to perform identity authentication. When transaction authentication is required, the APP generates a QR code and displays it on the user terminal. The scanning terminal can scan the QR code displayed by the user terminal APP for authentication.

[0003] However, in the case of social engineering attacks, QR codes can be easily intercepted by third parties maliciously. For example, third parties can obtain the QR code displayed by the user's terminal APP through network monitoring, packet capture, etc., and then use the QR code to impersonate the user's identity, conduct identity authorization or payment transactions, etc., endangering the user's property safety. Therefore, it is urgent to strengthen the security of code scanning authentication. Summary of the invention

[0004] The embodiments of the present application provide an information processing method, apparatus, device, computer storage medium and computer program product, which can improve the security of code scanning authentication.

[0005] In a first aspect, an embodiment of the present application provides an information processing method, which is applied to a subscriber identity module (SIM) card of a first terminal, and the method includes:

[0006] In response to the target transaction instruction, generating a target random number corresponding to the target transaction instruction;

[0007] Sending a target random number to an authentication platform, wherein the authentication platform pre-stores a preset public key and authentication information, the authentication information including a user identity information identification code and a security environment identifier corresponding to the SIM card of the first terminal;

[0008] Use the preset public key to encrypt the target random number to obtain the target key;

[0009] The target key is used to encrypt the user identity information identification code and the security environment identifier to obtain the character verification code prototype information;

[0010] The character verification code prototype information is sent to the first terminal, so that the first terminal displays a first character verification code corresponding to the character verification code prototype information.

[0011] In an optional implementation, before encrypting the user identity information identification code and the security environment identifier using the target key to obtain the character verification code prototype information, the method further includes:

[0012] The preset identity information is encrypted using the session key to obtain a user identity information identification code, wherein the preset identity information includes a security environment identifier and / or biometric identification information.

[0013] In an optional implementation, sending a target random number to an authentication platform includes:

[0014] The target random number encrypted by the preset public key is sent to the authentication platform, so that the authentication platform uses the preset private key to decrypt the target random number encrypted by the preset public key to obtain the target random number.

[0015] In an optional implementation, before sending the target random number to the authentication platform, the method further includes:

[0016] The preset public key, the preset private key corresponding to the preset public key, and the user identity information identification code are sent to the authentication platform so that the authentication platform can store the preset public key, the preset private key, and the user identity information identification code.

[0017] In an optional implementation, after sending the character verification code prototype information to the first terminal so that the first terminal displays the first character verification code corresponding to the character verification code prototype information, the method further includes:

[0018] Receiving a verification result sent by the authentication platform, the verification result is a verification result obtained by the authentication platform receiving a second character verification code sent by the second terminal and verifying character verification code prototype information in the second character verification code; the second character verification code is obtained by the second terminal scanning the first character verification code displayed by the first terminal;

[0019] Delete the target random number.

[0020] In an optional implementation, after receiving the verification result of the character verification code prototype information from the authentication platform, the method further includes:

[0021] The verification result is sent to the first terminal, so that the first terminal displays characters corresponding to the verification result.

[0022] In an optional implementation, before generating a target random number corresponding to the transaction instruction, the method further includes:

[0023] Obtaining a personal identification code input by the user at the first terminal;

[0024] Verify the personal identification code;

[0025] When the personal identification code is verified, a target random number corresponding to the transaction instruction is generated.

[0026] In a second aspect, an embodiment of the present application provides an information processing method, which is applied to an authentication platform, including:

[0027] Receiving a target random number sent by a SIM card of the first terminal, where the target random number is generated by the first terminal in response to a target transaction instruction;

[0028] Receive a second character verification code sent by the second terminal, where the second character verification code is generated by the second terminal scanning the first character verification code displayed on the first terminal, where the first character verification code corresponds to character verification code prototype information, where the character verification code prototype information is obtained by the first terminal encrypting the user identity information identification code and the security environment identifier based on a target key, where the target key is obtained by encrypting a target random number using a preset public key, and the second character verification code includes the character verification code prototype information;

[0029] Encrypt the target random number using a pre-stored preset public key to obtain a target key;

[0030] Use the target key to decrypt the character verification code prototype information to obtain the user identity information identification code and the security environment identifier;

[0031] The user identity information identification code and the security environment identifier are verified according to the pre-stored authentication information to obtain a verification result, wherein the authentication information includes the user identity information identification code and the security environment identifier corresponding to the SIM card of the first terminal.

[0032] In an optional implementation, the user identity information identification code and the security environment identifier are verified according to the pre-stored authentication information to obtain a verification result, including:

[0033] Compare the user identity information identification code and the security environment identifier with the user identity information identification code and the security environment identifier in the authentication information;

[0034] If the user identity information identification code and the security environment identifier are consistent with the user identity information identification code and the security environment identifier in the authentication information, it is determined that the verification is successful;

[0035] When the user identity information identification code and the security environment identifier are inconsistent with the user identity information identification code and the security environment identifier in the authentication information, it is determined that the verification fails.

[0036] In an optional implementation, after verifying the user identity information identification code and the security environment identifier according to the pre-stored authentication information and obtaining the verification result, the method further includes:

[0037] Sending verification results to the second terminal and the SIM card of the first terminal respectively;

[0038] Delete the target random number.

[0039] In a third aspect, an embodiment of the present application provides an information processing device, applied to a SIM card of a first terminal, the device comprising:

[0040] A generating module, for generating a target random number corresponding to the target trading instruction in response to the target trading instruction;

[0041] A sending module, used to send a target random number to an authentication platform, wherein the authentication platform pre-stores a preset public key and authentication information, and the authentication information includes a user identity information identification code and a security environment identifier corresponding to the SIM card of the first terminal;

[0042] An encryption module, used to encrypt the target random number using a preset public key to obtain a target key;

[0043] The encryption module is also used to encrypt the user identity information identification code and the security environment identifier using the target key to obtain the character verification code prototype information;

[0044] The sending module is further used to send the character verification code prototype information to the first terminal, so that the first terminal displays the first character verification code corresponding to the character verification code prototype information.

[0045] In a fourth aspect, an embodiment of the present application provides an information processing device, which is applied to an authentication platform, and the device includes:

[0046] A receiving module, used for receiving a target random number sent by a SIM card of a first terminal, where the target random number is generated by the first terminal in response to a target transaction instruction;

[0047] The receiving module is further used to receive a second character verification code sent by the second terminal, the second character verification code is generated by the second terminal scanning the first character verification code displayed by the first terminal, the first character verification code corresponds to the character verification code prototype information, the character verification code prototype information is obtained by the first terminal encrypting the user identity information identification code and the security environment identifier based on the target key, the target key is obtained by encrypting the target random number using a preset public key, and the second character verification code includes the character verification code prototype information;

[0048] The encryption module is used to encrypt the target random number using the pre-stored preset public key to obtain the target key;

[0049] A decryption module is used to decrypt the character verification code prototype information using the target key to obtain the user identity information identification code and the security environment identifier;

[0050] The verification module is used to verify the user identity information identification code and the security environment identifier according to the pre-stored authentication information to obtain a verification result, wherein the authentication information includes the user identity information identification code and the security environment identifier corresponding to the SIM card of the first terminal.

[0051] In a fifth aspect, an embodiment of the present application provides an electronic device, the device comprising: a processor and a memory storing computer program instructions;

[0052] When the processor executes the computer program instructions, it implements the information processing method of any optional implementation manner of the first aspect of the present application, or the information processing method of any optional implementation manner of the second aspect of the present application.

[0053] In a sixth aspect, an embodiment of the present application provides a computer-readable storage medium, on which computer program instructions are stored. When the computer program instructions are executed by a processor, an information processing method such as any optional implementation scheme of the first aspect of the present application is implemented, or an information processing method such as any optional implementation scheme of the second aspect of the present application is implemented.

[0054] In the seventh aspect, an embodiment of the present application provides a computer program product. When the instructions in the computer program product are executed by a processor of an electronic device, the electronic device executes an information processing method such as any optional implementation method of the first aspect of the present application, or an information processing method such as any optional implementation method of the second aspect of the present application.

[0055] The information processing method, device, equipment, computer storage medium and computer program product of the embodiment of the present application are applied to the SIM card of the first terminal, and can generate a target random number corresponding to the target transaction instruction in response to the target transaction instruction, and send the target random number to the authentication platform, wherein the authentication platform pre-stores a preset public key and authentication information, and the authentication information includes the user identity information identification code and the security environment identifier corresponding to the SIM card of the first terminal. Then, the target random number is encrypted using the preset public key to obtain the target key. In this way, a target key uniquely corresponding to the single transaction can be generated for a single transaction. Correspondingly, the authentication platform can also generate the target key through the pre-stored preset public key and the received target random number for subsequent authentication. In this way, the encryption key corresponding to each transaction can be different. Even if the encryption key corresponding to a transaction is cracked, it is impossible to obtain the encryption key of other transactions through the cracked key, thereby improving the security of authentication. Then, the user identity information identification code and the security environment identifier can be encrypted using the target key to obtain the character verification code prototype information. The character verification code prototype information contains authentication information of multiple dimensions, has a high degree of credibility, and can improve the effectiveness of user identity authentication. Next, the character verification code prototype information can be sent to the first terminal, so that the first terminal can display the first character verification code corresponding to the character verification code prototype information. In this way, when the SIM card cannot generate a traditional QR code, the character verification code prototype information can be generated by the SIM card, and then the character verification code can be displayed by the terminal where the SIM card is located. The code scanning terminal can scan the character verification code and send the character verification code to the authentication platform, so that the authentication platform can verify the character verification code prototype information. In this way, the code swiping authentication can be realized through the interaction of the SIM card, the terminal and the platform, reducing the risk of verification code leakage, thereby further improving the security of the code swiping authentication. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] In order to more clearly illustrate the technical solution of the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0057] Figure 1 It is a flowchart of an information processing method provided by an embodiment of the present application;

[0058] Figure 2 is a flowchart of an information processing method provided by another embodiment of the present application;

[0059] Figure 3 is a flowchart of an information processing method provided by another embodiment of the present application;

[0060] Figure 4 is a flowchart of an information processing method provided by yet another embodiment of the present application;

[0061] Figure 5 is a schematic diagram of a character verification code provided in yet another embodiment of the present application;

[0062] Figure 6 is a flowchart of an information processing method provided by yet another embodiment of the present application;

[0063] Figure 7 is a structural diagram of an information processing device provided by yet another embodiment of the present application;

[0064] Figure 8 is a structural diagram of an information processing device provided by yet another embodiment of the present application;

[0065] Fig. 9 It is a structural schematic diagram of an electronic device provided in yet another embodiment of the present application. DETAILED DESCRIPTION

[0066] The features and exemplary embodiments of various aspects of the present application will be described in detail below. In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain the present application, rather than to limit the present application. For those skilled in the art, the present application can be implemented without the need for some of these specific details. The following description of the embodiments is only to provide a better understanding of the present application by illustrating the examples of the present application.

[0067] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "include..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0068] With the development of smart phones, more and more people use applications (APPs) on smart phones to scan barcodes for transactions and authentication, such as payment codes on payment platforms and membership codes on supermarket applications. In the current barcode-scanning transaction and authentication solutions, most of them use the QR code provided by the APP to perform identity authentication. When transaction authentication is required, the APP generates a QR code and displays it on the user terminal. The scanning terminal can scan the QR code displayed by the user terminal APP for authentication.

[0069] However, in the case of social engineering attacks, QR codes can be easily intercepted by third parties maliciously. For example, third parties can obtain the QR code displayed by the user's terminal APP through network monitoring, packet capture, etc., and then use the QR code to impersonate the user's identity, conduct identity authorization or payment transactions, etc., endangering the user's property safety.

[0070] In addition, since the QR code is generated based on the APP, different APPs need to be used for code scanning authentication in different transaction scenarios. As a result, the user terminal needs to download multiple APPs, resulting in excessive memory usage. Not only that, the authentication method based on the APP-generated QR code also relies on the data network. If the user terminal is in a location with poor network signal such as an underground garage or supermarket, it is difficult to complete the transaction and authentication.

[0071] In view of this, the inventor, after in-depth thinking, cleverly proposed an information processing method, device, equipment, computer storage medium and computer program product.

[0072] In the embodiment of the present application, the information processing method can be implemented based on an information processing system. The following first briefly introduces the information processing system.

[0073] The information processing system may include a first terminal, a SIM card, a second terminal and an authentication platform.

[0074] The first terminal may be a user terminal, for example, a mobile terminal such as a mobile phone, etc. The first terminal may be used to receive and display data transmitted by a SIM card.

[0075] The SIM card can be installed in the first terminal. In one embodiment, the SIM card can be a super SIM card. The SIM card can execute application protocol data unit (APDU) instructions and can also store data through the card application of the SIM card. The SIM card can pre-store a security environment identifier (SEID). In one embodiment, after the card application is installed, the SIM card can generate a pair of public and private key pairs and a user identity information identification code. Among them, the public and private key pairs can be used for encryption and decryption when transmitting data, and the user identity information identification code can be used for transaction authentication.

[0076] The second terminal may be a code scanning terminal. In the embodiment of the present application, the second terminal may scan the character verification code and send the character verification code to the authentication platform so that the authentication platform can verify the character verification code.

[0077] The authentication platform may be a server end for determining the transaction authentication result. In an embodiment of the present application, the authentication platform may verify the character verification code to obtain a verification result.

[0078] Exemplarily, the SIM card can generate character verification code prototype information based on SEID and user identity information identification code. The first terminal can convert the character verification code prototype information into a meaningless character verification code through the display text (DISPLAY TEXT, DT) module. Correspondingly, the second terminal can scan the character verification code displayed by the first terminal and send the character verification code to the authentication platform. The authentication platform can verify the character verification code prototype information carried by the character verification code to obtain a verification result. In this way, in view of the defect that the SIM card cannot generate a QR code, the information processing system of an embodiment of the present application can generate a character verification code through the functions of the SIM card and the first terminal, scan the character verification code through the second terminal, and verify the character verification code scanned by the second terminal through the authentication platform. In this way, the verification code generated by the SIM card can be used for code swiping authentication.

[0079] The following is an introduction to the information processing method provided by the embodiment of the present application through specific embodiments and their application scenarios in conjunction with the accompanying drawings. The information processing method provided by the embodiment of the present application, the device that executes the sending may be an information processing device, or a partial module in the information processing device for executing the information processing method. In the embodiment of the present application, the information processing method provided by the embodiment of the present application is described in detail by taking the information processing device executing the information processing method as an example.

[0080] The following is combined with Figure 1 The information processing method provided in the embodiments of the present application is described in detail.

[0081] Figure 1 FIG. 1 is a flow chart showing an information processing method provided by an embodiment of the present application. Figure 1 As shown, the information processing method may specifically include the following steps S101 to S111.

[0082] S101: A SIM card of a first terminal generates a target random number corresponding to a target transaction instruction in response to the target transaction instruction.

[0083] In step S101, the target transaction instruction may be a transaction instruction generated based on the selection input by the user at the first terminal. The target random number may be generated by a method known in the art, for example, by a SecureRandom class. Exemplarily, the target random number may be a 16-byte random number. After the SIM card of the first terminal generates the target random number, the target random number may be stored in the card application for subsequent encryption operations.

[0084] S102, the SIM card of the first terminal sends a target random number to the authentication platform, wherein the authentication platform pre-stores a preset public key and authentication information, and the authentication information includes a user identity information identification code and a security environment identifier corresponding to the SIM card of the first terminal.

[0085] In step S102, the preset public key may include a public key generated by a card application of the SIM card. The user identity information identification code may include an identification code generated by the identity information corresponding to the user. In some embodiments, the authentication information may be stored in the authentication platform when the information processing system is initialized. For example, the authentication platform may authenticate the transaction authentication results of multiple first terminals. When the information processing system is initialized, each first terminal may process its corresponding authentication information to the authentication platform, so that the authentication platform can store the authentication information corresponding to each first terminal.

[0086] Accordingly, the authentication platform may receive the target random number sent by the SIM card of the first terminal.

[0087] Exemplarily, after receiving the target random number, the authentication platform may store the target random number for subsequent decryption operations.

[0088] S103: The SIM card of the first terminal encrypts the target random number using a preset public key to obtain a target key.

[0089] S104, the SIM card of the first terminal uses the target key to encrypt the user identity information identification code and the security environment identifier to obtain character verification code prototype information.

[0090] S105: The SIM card of the first terminal sends character verification code prototype information to the first terminal, so that the first terminal displays a first character verification code corresponding to the character verification code prototype information.

[0091] Accordingly, the first terminal may receive character verification code prototype information.

[0092] The first terminal may also convert the character verification code prototype information into a first character verification code according to the display rule.

[0093] In one example, the first character verification code may be a Chinese verification code, which can effectively compress the display length.

[0094] It is understandable that each time the first terminal initiates a transaction instruction, the SIM card will generate a corresponding target random number, and each target random number is only valid for the corresponding transaction instruction. The target key generated by the target random number is used to encrypt the user identity information identification code and the security environment identifier to generate the character verification code prototype information. In this way, the first character verification code corresponding to each transaction instruction can be different, thereby improving the security of transaction authentication.

[0095] S106: The first terminal displays a first character verification code corresponding to the character verification code prototype information.

[0096] Exemplarily, after the first terminal generates and displays the first character verification code, the user can display the first terminal interface to the corresponding second terminal.

[0097] S107: The second terminal scans the first character verification code displayed by the first terminal to generate a second character verification code, where the second character verification code includes character verification code prototype information.

[0098] S108, the second terminal sends a second character verification code to the authentication platform.

[0099] Correspondingly, the authentication platform may receive the second character verification code sent by the second terminal.

[0100] S109, the authentication platform uses the pre-stored preset public key to encrypt the target random number to obtain a target key.

[0101] S110, the authentication platform uses the target key to decrypt the character verification code prototype information to obtain the user identity information identification code and the security environment identifier.

[0102] S111, the authentication platform verifies the user identity information identification code and the security environment identifier according to the pre-stored authentication information to obtain a verification result.

[0103] In the information processing method of the embodiment of the present application, the SIM card of the first terminal can respond to the target transaction instruction, generate the target random number corresponding to the target transaction instruction, and send the target random number to the authentication platform, wherein the authentication platform pre-stores a preset public key and authentication information, and the authentication information includes the user identity information identification code and the security environment identifier corresponding to the SIM card of the first terminal. Then the target random number is encrypted using the preset public key to obtain the target key. In this way, a target key uniquely corresponding to the single transaction can be generated for a single transaction. Correspondingly, the authentication platform can also generate the target key through the pre-stored preset public key and the received target random number for subsequent authentication. In this way, the encryption key corresponding to each transaction can be different. Even if the encryption key corresponding to a transaction is cracked, it is impossible to obtain the encryption key of other transactions through the cracked key, thereby improving the security of authentication. Then, the SIM card of the first terminal can use the target key to encrypt the user identity information identification code and the security environment identifier to obtain the character verification code prototype information. The character verification code prototype information contains authentication information of multiple dimensions, has a high degree of credibility, and can improve the effectiveness of user identity authentication. Then, the character verification code prototype information can be sent to the first terminal, so that the first terminal can display the first character verification code corresponding to the character verification code prototype information. Accordingly, the first terminal can display the first character verification code corresponding to the character verification code prototype information. In this way, when the SIM card cannot generate a traditional QR code, the character verification code prototype information can be generated by the SIM card, and then the character verification code can be displayed by the terminal where the SIM card is located.

[0104] In an embodiment of the present application, the second terminal can scan the first character verification code, generate a second character verification code, and send the second character verification code to the authentication platform for the authentication platform to verify the character verification code prototype information. The authentication platform can use a pre-stored preset public key to encrypt the target random number to obtain a target key, and then use the target key to decrypt the character verification code prototype information to obtain a user identity information identification code and a security environment identifier. Subsequently, the authentication platform can verify the user identity information identification code and the security environment identifier based on the pre-stored authentication information to obtain a verification result. In this way, code swiping authentication can be achieved through the interaction of the SIM card, terminal and platform, reducing the risk of verification code leakage, thereby further improving the security of code swiping authentication.

[0105] In addition, according to the information processing method of the embodiment of the present application, the SIM card of the first terminal can interact with the software development kit (SDK) through the machine-card channel, and then communicate with the first terminal, and the SIM card of the first terminal and the authentication platform, and the second terminal and the authentication platform can communicate through the communication network. Compared with the authentication method based on APP to generate a QR code in the related art, the embodiment of the present application does not need to rely on the data network, has higher stability, and can meet the code scanning authentication needs in various environments.

[0106] The embodiment of the present application does not impose any specific restrictions on the encryption and decryption methods of the character verification code prototype information, and a suitable encryption algorithm can be selected according to actual needs. Exemplarily, the SIM card of the first terminal can use the target key to encrypt the user identity information identification code and the security environment identifier through the Triple Data Encryption Algorithm (3DES) to obtain the character verification code prototype information. Correspondingly, the authentication platform can use the target key to decrypt the character verification code prototype information through the 3DES algorithm to obtain the user identity information identification code and the security environment identifier. Exemplarily, the encryption algorithm can also be a private algorithm, and a message authentication code (Message Authentication Code, MAC) of the private algorithm can also be added for encryption and decryption authentication.

[0107] In one embodiment, the SIM card of the first terminal uses the target key to encrypt the user identity information identification code and the security environment identifier to obtain character verification code prototype information, which may specifically include:

[0108] The SIM card of the first terminal adds corresponding identification tags to the user identity information identification code and the security environment identifier respectively to obtain original data.

[0109] The SIM card of the first terminal encrypts the original data using the target key to obtain character verification code prototype information.

[0110] Accordingly, in one embodiment, the authentication platform uses the target key to decrypt the character verification code prototype information to obtain the user identity information identification code and the security environment identifier, which may specifically include:

[0111] The authentication platform uses the target key to decrypt the character verification code prototype information to obtain the original data.

[0112] The original data is split according to the identification tags of the user identity information identification code and the security environment identification to obtain the user identity information identification code and the security environment identification.

[0113] According to the above implementation, adding corresponding identification tags to the user identity information identification code and the security environment identification is conducive to the authentication platform to quickly extract the user identity information identification code and the security environment identification from the character verification code prototype information during the verification process. This is conducive to improving the efficiency of code scanning authentication.

[0114] In one embodiment, the SIM card of the first terminal uses the target key to encrypt the user identity information identification code and the security environment identifier, and before obtaining the character verification code prototype information, the method may further include:

[0115] The SIM card of the first terminal encrypts the preset identity information using the session key to obtain a user identity information identification code, where the preset identity information includes a security environment identifier and / or biometric identification information.

[0116] In the above implementation, the use of the session key to encrypt the preset identity information can be implemented by methods known in the art. Exemplarily, the preset identity information can be encrypted by encSessionKey of the secure copy protocol (scp02).

[0117] In the above implementation, the biometric information may include but is not limited to face authentication information or fingerprint authentication information.

[0118] According to the above implementation, the user identification code is obtained by encrypting the preset identity information using the session key, which can reduce the risk of the user identification code being tampered with, making the user identity information identification code unique, thereby improving the security of code scanning authentication. In addition, SEID can be used as a unique identifier for the SIM card, and the biometric information directly corresponds to the user's biological characteristics. By using SEID and / or biometric information as the preset identity information, the encrypted user identification code has a high degree of credibility and is used to identify the user identity in transaction authentication, which can improve the effectiveness of user identity authentication. In this way, the security of code scanning authentication and transactions can be improved.

[0119] In one embodiment, the SIM card of the first terminal sends the target random number to the authentication platform, which may specifically include:

[0120] The SIM card of the first terminal sends the target random number encrypted by the preset public key to the authentication platform, so that the authentication platform uses the preset private key to decrypt the target random number encrypted by the preset public key to obtain the target random number.

[0121] Accordingly, in one embodiment, the authentication platform receives the target random number sent by the SIM card of the first terminal, which may specifically include:

[0122] The authentication platform receives a target random number sent by the SIM card of the first terminal and encrypted by a preset public key.

[0123] After the authentication platform receives the target random number sent by the SIM card of the first terminal, the method may further include:

[0124] The authentication platform uses the pre-stored preset private key to decrypt the target random number encrypted by the preset public key to obtain the target random number.

[0125] The authentication platform stores the target random number.

[0126] In the above implementation, the preset private key may be a private key corresponding to the preset public key.

[0127] According to the above implementation, after the SIM card of the first terminal generates the target random number corresponding to the target transaction instruction, it can be encrypted with a preset public key and then sent to the authentication platform. Correspondingly, after the authentication platform receives the target random number encrypted with the preset public key, it can be decrypted with a preset private key and store the target random number. In this way, the risk of the target random number being stolen during transmission can be reduced, thereby improving the security of the target key. This is conducive to improving the security of code scanning authentication.

[0128] In one embodiment, before the SIM card of the first terminal sends the target random number to the authentication platform, the method may further include:

[0129] The SIM card of the first terminal sends a preset public key, a preset private key corresponding to the preset public key, and a user identity information identification code to the authentication platform, so that the authentication platform stores the preset public key, the preset private key, and the user identity information identification code.

[0130] Accordingly, in one embodiment, before the authentication platform receives the target random number sent by the SIM card of the first terminal, the method may further include:

[0131] The authentication platform receives a preset public key, a preset private key and a user identity information identification code sent by the SIM card of the first terminal.

[0132] The authentication platform stores preset public keys, preset private keys, and user identity information identification codes.

[0133] In the above implementation, the preset public key and the preset private key may be a public-private key pair generated by the SIM card of the first terminal during the card application initialization process. The authentication platform may synchronize the SEID of the SIM card in advance.

[0134] According to the above implementation, the SIM card of the first terminal can send the preset public key, preset private key and user identity information identification code to the authentication platform for storage by the platform. The preset public key and preset private key are public-private key pairs generated by the card application, which have high privacy and can be used when the SIM card of the first terminal and the authentication platform are transmitting data, thereby improving the security of the interaction between the SIM card of the first terminal and the authentication platform. The user identity information identification code is generated by encrypting the preset identity information with the session key, and has high reliability. After synchronizing it to the authentication platform, the authentication platform can verify the character verification code prototype information based on the user identity information identification code. In this way, the security and effectiveness of code swiping authentication can be improved.

[0135] As an example, after the card application is installed, the SIM card can generate a public-private key pair and store the public key in the card application. The SIM card can also read the preset identity information in the card, encrypt it with the session key to obtain the user identity information identification code of the SIM card, and store it in the card application. The SIM card can send the public-private key pair and the user identity information identification code to the authentication platform for the platform to store. In this way, the public key, SEID and the user identity information identification code are all stored in the SIM card instead of in the first terminal. Even if the user loses the first terminal, the SIM card can be invalidated by reporting the loss of the SIM card. In this way, the risk of leakage of the key, SEID and the user identity information identification code caused by the first terminal being attacked or stolen can be reduced, thereby improving the security of authentication. In an example, the SIM card can send the public-private key pair and the user identity information identification code to the authentication platform by encrypted transmission. In this way, the risk of leakage of the public-private key pair and the user identity information identification code can be reduced, thereby further improving the security of authentication.

[0136] In one embodiment, the authentication platform verifies the user identity information identification code and the security environment identifier according to the pre-stored authentication information. After obtaining the verification result, the method may further include:

[0137] The authentication platform sends the verification result to the second terminal and the SIM card of the first terminal respectively.

[0138] The authentication platform deletes the target random number.

[0139] According to the above implementation, after obtaining the verification result, the authentication platform can notify the scanning terminal and the SIM card of the first terminal respectively, so that both parties can obtain the authentication result in time. In this way, the efficiency of authentication and transaction can be improved, thereby improving the user experience. After the transaction authentication is completed, the authentication platform clears the target random number in time, so that the random number generated each time is only used for a single transaction, thereby improving the security of the code scanning authentication.

[0140] In one embodiment, after the SIM card of the first terminal sends character verification code prototype information to the first terminal so that the first terminal displays the first character verification code corresponding to the character verification code prototype information, the method may further include:

[0141] The SIM card of the first terminal receives the verification result sent by the authentication platform, and the verification result is that the authentication platform receives the second character verification code sent by the second terminal, and verifies the character verification code prototype information in the second character verification code; the second character verification code is obtained by the second terminal scanning the first character verification code displayed on the first terminal.

[0142] The SIM card of the first terminal deletes the target random number.

[0143] According to the above implementation, after receiving the verification result, the SIM card of the first terminal can clear the random number in time, so that the random number used in each transaction authentication is different, and then the character verification code generated each time is only valid for a single transaction. In addition, clearing the random number in time after each authentication is completed can also reduce the risk of malicious use of the character verification code after being photographed. In this way, the security of code scanning authentication can be improved.

[0144] In one embodiment, after the SIM card of the first terminal receives the verification result of the character verification code prototype information by the authentication platform, the method may further include:

[0145] The SIM card of the first terminal sends the verification result to the first terminal, so that the first terminal displays characters corresponding to the verification result.

[0146] Exemplarily, after receiving the verification result, the SIM card of the first terminal may send a DISPLAY TXT command to the first terminal, carrying the verification result. The first terminal may convert the verification result into characters through a DISPLAY TXT module and display the characters.

[0147] According to the above implementation, the verification result can be displayed through the first terminal, so that the user can directly obtain the verification result through the screen of the first terminal, thereby improving the user experience.

[0148] In one embodiment, before the SIM card of the first terminal generates a target random number corresponding to the transaction instruction, the method may further include:

[0149] The SIM card of the first terminal obtains the personal identification code input by the user at the first terminal.

[0150] The SIM card of the first terminal verifies the personal identity code.

[0151] When the personal identity code verification is passed, the SIM card of the first terminal generates a target random number corresponding to the transaction instruction.

[0152] The personal identification code (PIN code) can be used to confirm the correctness of the user and to authenticate the user of the SIM card. In the embodiment of the present application, the user information related to the authentication is stored in the SIM card. Before the transaction authentication is performed, the user is authenticated by the PIN code first, which can protect the data of the SIM card and reduce the risk of the information in the SIM card being misused. In this way, it is conducive to improving the security of the code swiping authentication.

[0153] In one embodiment, the authentication platform verifies the user identity information identification code and the security environment identifier according to the pre-stored authentication information to obtain a verification result, which may specifically include:

[0154] The authentication platform compares the user identity information identification code and security environment identifier in the character verification code prototype information with the user identity information identification code and security environment identifier in the authentication information.

[0155] The authentication platform determines that the authentication is successful when the user identity information identification code and the security environment identifier in the character verification code prototype information are consistent with the user identity information identification code and the security environment identifier in the authentication information.

[0156] When the user identity information identification code and the security environment identifier in the character verification code prototype information are inconsistent with the user identity information identification code and the security environment identifier in the authentication information, the authentication platform determines that the authentication fails.

[0157] According to the above implementation, the corresponding verification result can be determined based on the comparison result between the user identity information identification code and the security environment identifier in the character verification code prototype information and the authentication information, thereby reducing the risk of user identity being impersonated and improving the security of code scanning authentication.

[0158] In conjunction with the accompanying drawings, the information processing method provided by the embodiment of the present application is introduced through specific embodiments and their application scenarios. The information processing method provided by the embodiment of the present application, the device that performs the receiving may be an information processing device, or a partial module in the information processing device for performing the information processing method. In the embodiment of the present application, the information processing method provided by the embodiment of the present application is described in detail by taking the information processing device performing the information processing method as an example.

[0159] In the above implementation, the PIN code can be used to authenticate the user's identity.

[0160] In order to better describe the entire solution, based on the above embodiments, a specific example is given to illustrate the information processing method and information processing method of the embodiment of the present application. This is explained in detail below. It should be noted that the following examples are only for explaining the embodiment of the present application, and do not constitute a limitation on the embodiment of the present application.

[0161] Exemplarily, the information processing method of the embodiment of the present application can be implemented based on an information processing system. The following is a detailed description of an example of the information processing method in conjunction with the accompanying drawings.

[0162] Exemplarily, the information processing method may include steps S210 to S260.

[0163] S210, the SIM card of the first terminal generates a public-private key pair and a user identity information identification code through a card application, and synchronizes them to the authentication platform.

[0164] In step S210, after the card application is installed, the SIM card of the first terminal can generate a pair of public and private keys and a user identity information identification code, store the public key and the user identity information identification code in the card application, and send the public and private key pair and the user identity information identification code to the platform. The public and private key pair is used for encryption and decryption when transmitting data later, and the user identity information identification code is used for transaction authentication.

[0165] In one example, if Figure 2 As shown, step S210 may specifically include the following steps S211 to S214.

[0166] S211, the SIM card of the first terminal generates a public-private key pair through a card application, and stores the public key in the card application.

[0167] S212, the SIM card of the first terminal reads the SEID value in the card, encrypts the SEID by using the encSessionKey of scp02, and uses the encrypted value as the user identity information identification code of the SIM card of the first terminal.

[0168] S213: The SIM card of the first terminal stores the public key and the user identity information identification code in the public-private key pair through a card application.

[0169] S214, the SIM card of the first terminal sends the public-private key pair and the user identity information identification code to the authentication platform, so that the platform stores the public-private key pair and the user identity information identification code.

[0170] Accordingly, the authentication platform can receive and store the public-private key pair and the user identity information identification code. It is understandable that the authentication platform can pre-synchronize the SEID of the SIM card, so when the card application is initialized, there is no need to send the SEID to the authentication platform.

[0171] According to steps S211 to S214, a public-private key pair is generated when the card application is initialized, so that the public-private key pair has a high degree of privacy in the subsequent transmission process. In addition, the user identity information identification code does not directly use SEID, but uses the value encrypted by SEID using encSessionKey as the identity information identification code, which can make the user identity information identification code unique and highly secure.

[0172] S220: Each time a transaction authentication requirement is triggered, a card application of the SIM card of the first terminal generates a random number and sends it to the authentication platform.

[0173] In step S220, when the first terminal sends a transaction authentication request to the SIM card, the card application can generate and store a 16-byte random number, and then send the random number to the authentication platform to generate a target key for the encryption operation of this transaction.

[0174] In one example, if Figure 3 As shown, step S220 may include the following S221 to S226.

[0175] S221, the SIM card of the first terminal generates a 16-byte random number through a card application.

[0176] S222: The SIM card of the first terminal stores the random number in a card application.

[0177] S223: The SIM card of the first terminal encrypts the random number using the public key generated when the card application is initialized.

[0178] S224, the SIM card of the first terminal sends the encrypted random number to the authentication platform.

[0179] S225, after receiving the encrypted random number, the authentication platform uses the stored private key to decrypt it.

[0180] S226, the authentication platform stores the decrypted random number.

[0181] According to the above steps S221 to S226, the identity information identification code is not directly encrypted and displayed using the public and private keys. Instead, a random number is generated each time a transaction is initiated. Each random number is only valid for that transaction, and the random number is used to encrypt and generate a character verification code. This ensures the inconsistency of the character verification code for each transaction, further ensuring the security of transaction authentication.

[0182] S230: The SIM card of the first terminal generates character verification code prototype information through a card application, and sends the character verification code prototype information to the first terminal.

[0183] In step S230, the user can initiate a transaction at the first terminal. After receiving the transaction instruction, the SIM card needs to generate character verification code prototype information and send it to the first terminal.

[0184] In one example, if Figure 4 As shown, step S230 may include the following S231 to S235.

[0185] S231, the SIM card of the first terminal uses the public key generated when the card application is initialized to encrypt the random number to obtain a target key.

[0186] S232, the SIM card of the first terminal adds identification tags to the user identity information identification code and SEID respectively to obtain original data.

[0187] Exemplarily, the tag of the user identity information identification code may be "41", and the tag of the SEID may be "42".

[0188] S233, the SIM card of the first terminal uses the target key to encrypt the original data through the 3DES algorithm to obtain character verification code prototype information.

[0189] S234, the SIM card of the first terminal sends character verification code prototype information to the first terminal.

[0190] S235: The first terminal displays the character verification code prototype information as a character verification code according to the display rule.

[0191] In one example, the character verification code prototype information may be a hexadecimal number. The character verification code may be a Chinese verification code, and a specific example thereof may be as follows: Figure 5 shown.

[0192] The first terminal is usually a mobile terminal, such as a mobile phone. Taking the mobile phone screen as an example, the information that can be displayed is limited. Converting the hexadecimal returned by the SIM card into Chinese can effectively compress the display length. In addition, random numbers are used in the process of encrypting the user identity information identification code and SEID, which can make the Chinese verification code prototype generated during each transaction authentication different, thereby improving the security of transaction authentication.

[0193] S240: The second terminal scans the character verification code and sends the recognized information to the authentication platform.

[0194] Specifically, after receiving the Chinese character verification code on the first terminal, the user can show it to the verification party, and the verification party can scan the character verification code through the second terminal and send the recognized character verification code to the authentication platform.

[0195] S250, after receiving the Chinese verification code, the authentication platform performs verification and sends the verification result to the SIM card.

[0196] In one example, if Figure 6 As shown, step S250 may include the following S251 to S258.

[0197] S251, the authentication platform converts the received character verification code into a hexadecimal number.

[0198] S252, the public key pre-stored in the authentication platform is used to encrypt the random number to obtain the target key.

[0199] S253, the authentication platform uses the target key to decrypt the hexadecimal number converted from the character verification code through the 3Des algorithm to obtain the original data.

[0200] S254, the authentication platform splits the original data according to the tag of the user identity information identification code and the tag of the SEID to obtain the user identity information identification code and the SEID.

[0201] For example, the tag of the user identity information identification code may be "41", and the tag of the SEID may be "42". The user identity information identification code and the SEID may be obtained by splitting the "41" and "42" tags.

[0202] S255, the authentication platform compares the split user identity information identification code and SEID with the user identity information identification code and SEID stored on the platform. If they are the same, the authentication passes; if they are different, the authentication fails.

[0203] S256, the authentication platform sends the verification result to the SIM card of the first terminal.

[0204] S257, the authentication platform clears the random number for this transaction authentication.

[0205] S258, the SIM card of the first terminal clears the random number for this transaction authentication.

[0206] In this way, the random number can be valid only for a single transaction, and clearing the random number after each transaction can also prevent the character verification code from being used maliciously after being photographed.

[0207] S260: The SIM card of the first terminal sends the received verification result to the first terminal for display.

[0208] In step S260, after receiving the verification result, the SIM card of the first terminal may send a DISPLAYTXT command to the first terminal, and the first terminal converts the generated verification result into Chinese and displays it to the user.

[0209] Based on the same inventive concept as the information processing method, an embodiment of the present application further provides an information processing device, which is applied to a SIM card of a first terminal.

[0210] like Figure 7 As shown, the information processing device 300 may include a generating module 301 , a sending module 302 and an encrypting module 303 .

[0211] The generating module 301 is used to generate a target random number corresponding to the target trading instruction in response to the target trading instruction.

[0212] The sending module 302 is used to send a target random number to the authentication platform, wherein the authentication platform pre-stores a preset public key and authentication information, and the authentication information includes a user identity information identification code and a security environment identifier corresponding to the SIM card of the first terminal.

[0213] The encryption module 303 is used to encrypt the target random number using a preset public key to obtain a target key.

[0214] The encryption module 303 is further used to encrypt the user identity information identification code and the security environment identifier using the target key to obtain character verification code prototype information.

[0215] The sending module 302 is further configured to send the character verification code prototype information to the first terminal, so that the first terminal displays the first character verification code corresponding to the character verification code prototype information.

[0216] The information processing device of the embodiment of the present application is applied to the SIM card of the first terminal, and can respond to the target transaction instruction, generate the target random number corresponding to the target transaction instruction, and send the target random number to the authentication platform, wherein the authentication platform pre-stores a preset public key and authentication information, and the authentication information includes the user identity information identification code and the security environment identifier corresponding to the SIM card of the first terminal. Then the target random number is encrypted using the preset public key to obtain the target key. In this way, a target key uniquely corresponding to the single transaction can be generated for a single transaction. Correspondingly, the authentication platform can also generate the target key through the pre-stored preset public key and the received target random number for subsequent authentication. In this way, the encryption key corresponding to each transaction can be different. Even if the encryption key corresponding to a certain transaction is cracked, it is impossible to obtain the encryption key of other transactions through the cracked key, thereby improving the security of authentication. Then, the user identity information identification code and the security environment identifier can be encrypted using the target key to obtain the character verification code prototype information. The character verification code prototype information contains authentication information of multiple dimensions, has a high degree of credibility, and can improve the effectiveness of user identity authentication. Next, the character verification code prototype information can be sent to the first terminal, so that the first terminal can display the first character verification code corresponding to the character verification code prototype information. In this way, when the SIM card cannot generate a traditional QR code, the character verification code prototype information can be generated by the SIM card, and then the character verification code can be displayed by the terminal where the SIM card is located. The code scanning terminal can scan the character verification code and send the character verification code to the authentication platform, so that the authentication platform can verify the character verification code prototype information. In this way, the code swiping authentication can be realized through the interaction of the SIM card, the terminal and the platform, reducing the risk of verification code leakage, thereby further improving the security of the code swiping authentication.

[0217] In one embodiment, the encryption module can also be used to encrypt the preset identity information using the session key to obtain the user identity information identification code and the security environment identifier before using the target key to obtain the character verification code prototype information, and obtain the user identity information identification code, wherein the preset identity information includes the security environment identifier and / or biometric information.

[0218] In one embodiment, the sending module may be specifically used for:

[0219] The target random number encrypted by the preset public key is sent to the authentication platform, so that the authentication platform uses the preset private key to decrypt the target random number encrypted by the preset public key to obtain the target random number.

[0220] In one embodiment, the sending module can also be used to send a preset public key, a preset private key corresponding to the preset public key, and a user identity information identification code to the authentication platform before sending the target random number to the authentication platform, so that the authentication platform can store the preset public key, the preset private key, and the user identity information identification code.

[0221] In one embodiment, the apparatus may further include:

[0222] A receiving module is used to receive a verification result sent by an authentication platform after sending character verification code prototype information to a first terminal so that the first terminal displays a first character verification code corresponding to the character verification code prototype information. The verification result is that the authentication platform receives a second character verification code sent by a second terminal and verifies the character verification code prototype information in the second character verification code; the second character verification code is obtained by the second terminal scanning the first character verification code displayed by the first terminal.

[0223] The deletion module is used to delete the target random number.

[0224] In one embodiment, the sending module may also be used to send the verification result to the first terminal after receiving the verification result of the character verification code prototype information from the authentication platform, so that the first terminal displays the characters corresponding to the verification result.

[0225] In one embodiment, the apparatus may further include:

[0226] The acquisition module is used to acquire a personal identification code input by a user at the first terminal before generating a target random number corresponding to a transaction instruction.

[0227] The verification module is used to verify the personal identification code.

[0228] The generation module is used to generate a target random number corresponding to the transaction instruction when the personal identity identification code is verified.

[0229] The information processing device provided in the embodiment of the present application can realize Figure 1 To avoid repetition, the various processes implemented by the method embodiment are not described here.

[0230] Based on the same inventive concept as the information processing method, an embodiment of the present application also provides an information processing device, which is applied to an authentication platform.

[0231] like Figure 8 As shown, the information processing device 400 may include a receiving module 401 , an encryption module 402 , a decryption module 403 and a verification module 404 .

[0232] The receiving module 401 is used to receive a target random number sent by a SIM card of a first terminal, where the target random number is generated by the first terminal in response to a target transaction instruction.

[0233] The receiving module 401 is also used to receive a second character verification code sent by the second terminal. The second character verification code is generated by the second terminal scanning the first character verification code displayed on the first terminal. The first character verification code corresponds to the character verification code prototype information. The character verification code prototype information is obtained by the first terminal encrypting the user identity information identification code and the security environment identifier based on the target key. The target key is obtained by encrypting the target random number using a preset public key. The second character verification code includes the character verification code prototype information.

[0234] The encryption module 402 is used to encrypt the target random number using a pre-stored preset public key to obtain a target key.

[0235] The decryption module 403 is used to decrypt the character verification code prototype information using the target key to obtain the user identity information identification code and the security environment identifier;

[0236] The verification module 404 is used to verify the user identity information identification code and the security environment identifier according to the pre-stored authentication information to obtain a verification result. The authentication information includes the user identity information identification code and the security environment identifier corresponding to the SIM card of the first terminal.

[0237] The information processing device of the embodiment of the present application is applied to the authentication platform, and can receive the target random number sent by the SIM card of the first terminal, and the target random number is generated by the first terminal in response to the target transaction instruction. Then, the second character verification code sent by the second terminal can be received, and the second character verification code is generated by the second terminal scanning the first character verification code displayed by the first terminal, and the first character verification code corresponds to the character verification code prototype information, and the character verification code prototype information is obtained by the first terminal encrypting the user identity information identification code and the security environment identifier based on the target key, and the target key is obtained by encrypting the target random number using the preset public key, and the second character verification code includes the character verification code prototype information. The character verification code prototype information contains authentication information of multiple dimensions, has a high degree of credibility, and can improve the effectiveness of user identity authentication. Subsequently, the authentication platform can encrypt the target random number using the pre-stored preset public key to obtain the target key. In this way, a target key uniquely corresponding to a single transaction can be generated for a single transaction. In this way, the encryption key corresponding to each transaction can be different. Even if the encryption key corresponding to a transaction is cracked, it is impossible to obtain the encryption key of other transactions through the cracked key, thereby improving the security of authentication. Then, the target key can be used to decrypt the character verification code prototype information to obtain the user identity information identification code and the security environment identifier. The user identity information identification code and the security environment identifier are verified according to the pre-stored authentication information to obtain the verification result. The authentication information includes the user identity information identification code and the security environment identifier corresponding to the SIM card of the first terminal. In this way, the code swipe authentication can be realized through the interaction of the SIM card, the terminal and the platform, reducing the risk of verification code leakage, thereby further improving the security of the code swipe authentication.

[0238] In one embodiment, the verification module may be specifically used to:

[0239] The user identity information identification code and security environment identifier are compared with the user identity information identification code and security environment identifier in the authentication information.

[0240] When the user identity information identification code and the security environment identifier are consistent with the user identity information identification code and the security environment identifier in the authentication information, it is determined that the verification is successful.

[0241] When the user identity information identification code and the security environment identifier are inconsistent with the user identity information identification code and the security environment identifier in the authentication information, it is determined that the verification fails.

[0242] In one embodiment, the apparatus may further include:

[0243] The sending module is used to verify the user identity information identification code and the security environment identifier according to the pre-stored authentication information, and after obtaining the verification result, send the verification result to the second terminal and the SIM card of the first terminal respectively.

[0244] The deletion module is used to delete the target random number.

[0245] The information processing device provided in the embodiment of the present application can realize Figure 1 To avoid repetition, the various processes implemented by the method embodiment are not described here.

[0246] Fig. 9 A schematic diagram of the hardware structure of an electronic device provided in an embodiment of the present application is shown.

[0247] The electronic device may include a processor 501 and a memory 502 storing computer program instructions.

[0248] Specifically, the processor 501 may include a central processing unit (CPU), or an application specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present application.

[0249] The memory 502 may include a large capacity memory for data or instructions. By way of example and not limitation, the memory 502 may include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive or a combination of two or more of these. In appropriate cases, the memory 502 may include a removable or non-removable (or fixed) medium. In appropriate cases, the memory 502 may be inside or outside the integrated gateway disaster recovery device. In a specific embodiment, the memory 502 is a non-volatile solid-state memory.

[0250] The memory may include read-only memory (ROM), random access memory (RAM), magnetic disk storage media devices, optical storage media devices, flash memory devices, electrical, optical or other physical / tangible memory storage devices. Thus, typically, the memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., memory devices) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the method according to an aspect of the present disclosure.

[0251] The processor 501 implements any one of the information processing or information processing methods in the above embodiments by reading and executing computer program instructions stored in the memory 502 .

[0252] As an example, the electronic device may further include a communication interface 503 and a bus 510. Fig. 9 As shown, the processor 501, the memory 502, and the communication interface 503 are connected via a bus 510 and communicate with each other.

[0253] The communication interface 503 is mainly used to implement communication between various modules, devices, units and / or equipment in the embodiments of the present application.

[0254] Bus 510 includes hardware, software or both, and will be coupled to each other in the parts of information processing equipment.For example, but not limitation, bus may include accelerated graphics port (AGP) or other graphics bus, enhanced industrial standard architecture (EISA) bus, front side bus (FSB), hypertransport (HT) interconnection, industrial standard architecture (ISA) bus, infinite bandwidth interconnection, low pin count (LPC) bus, memory bus, micro channel architecture (MCA) bus, peripheral component interconnection (PCI) bus, PCI-Express (PCI-X) bus, serial advanced technology attachment (SATA) bus, video electronics standard association local (VLB) bus or other suitable bus or two or more of these combinations. In appropriate cases, bus 510 may include one or more buses. Although the present application embodiment describes and shows a specific bus, the present application considers any suitable bus or interconnection.

[0255] The electronic device can execute the information processing method in the embodiment of the present application, thereby realizing the combination Figure 1 and Figure 7-8 Described information processing method and device.

[0256] In addition, in combination with the information processing method in the above embodiments, the embodiments of the present application may provide a computer storage medium for implementation. The computer storage medium stores computer program instructions; when the computer program instructions are executed by a processor, any one of the information processing methods in the above embodiments is implemented.

[0257] It should be clear that the present application is not limited to the specific configuration and processing described above and shown in the figures. For the sake of simplicity, a detailed description of the known method is omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present application is not limited to the specific steps described and shown, and those skilled in the art can make various changes, modifications and additions, or change the order between the steps after understanding the spirit of the present application.

[0258] The functional blocks shown in the above-described block diagram can be implemented as hardware, software, firmware or a combination thereof. When implemented in hardware, it can be, for example, an electronic circuit, an application specific integrated circuit (ASIC), appropriate firmware, a plug-in, a function card, etc. When implemented in software, the elements of the present application are programs or code segments that are used to perform the required tasks. The program or code segment can be stored in a machine-readable medium, or transmitted on a transmission medium or a communication link by a data signal carried in a carrier wave. "Machine-readable medium" can include any medium capable of storing or transmitting information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, ROM, flash memory, erasable ROM (EROM), floppy disks, CD-ROMs, optical disks, hard disks, optical fiber media, radio frequency (RF) links, etc. The code segment can be downloaded via a computer network such as the Internet, an intranet, etc.

[0259] It should also be noted that the exemplary embodiments mentioned in this application describe some methods or systems based on a series of steps or devices. However, this application is not limited to the order of the above steps, that is, the steps can be performed in the order mentioned in the embodiment, or in a different order from the embodiment, or several steps can be performed simultaneously.

[0260] Aspects of the present disclosure are described above with reference to the flowchart and / or block diagram of the method, device (system) and computer program product according to the embodiment of the present disclosure. It should be understood that each box in the flowchart and / or block diagram and the combination of each box in the flowchart and / or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device to produce a machine so that these instructions executed by the processor of the computer or other programmable data processing device enable the implementation of the function / action specified in one or more boxes of the flowchart and / or block diagram. Such a processor can be, but is not limited to, a general-purpose processor, a special-purpose processor, a special application processor, or a field programmable logic circuit. It can also be understood that each box in the block diagram and / or flowchart and the combination of boxes in the block diagram and / or flowchart can also be implemented by dedicated hardware that performs a specified function or action, or can be implemented by a combination of dedicated hardware and computer instructions.

[0261] The above is only a specific implementation of the present application. Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working processes of the systems, modules and units described above can refer to the corresponding processes in the aforementioned method embodiments, and will not be repeated here. It should be understood that the protection scope of the present application is not limited to this. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in this application, and these modifications or replacements should be included in the protection scope of this application.

Claims

1. An information processing method, characterized in that: A user identification SIM card applied to a first terminal, the method comprising: In response to a target transaction instruction, generating a target random number corresponding to the target transaction instruction; Sending the target random number to an authentication platform, wherein the authentication platform pre-stores a preset public key and authentication information, and the authentication information includes a user identity information identification code and a security environment identifier corresponding to the SIM card of the first terminal; The target random number is encrypted using a preset public key to obtain a target key; The target key is used to encrypt the user identity information identification code and the security environment identifier to obtain character verification code prototype information; The character verification code prototype information is sent to the first terminal, so that the first terminal displays a first character verification code corresponding to the character verification code prototype information.

2. The method according to claim 1, characterized in that Before using the target key to encrypt the user identity information identification code and the security environment identifier to obtain the character verification code prototype information, the method further includes: The preset identity information is encrypted using a session key to obtain the user identity information identification code, wherein the preset identity information includes a security environment identifier and / or biometric identification information.

3. The method according to claim 1 or 2, characterized in that: The sending the target random number to the authentication platform includes: The target random number encrypted by the preset public key is sent to the authentication platform, so that the authentication platform uses the preset private key to decrypt the target random number encrypted by the preset public key to obtain the target random number.

4. The method according to claim 1, characterized in that: Before sending the target random number to the authentication platform, the method further includes: The preset public key, the preset private key corresponding to the preset public key, and the user identity information identification code are sent to the authentication platform so that the authentication platform stores the preset public key, the preset private key, and the user identity information identification code.

5. The method according to claim 1, characterized in that After sending the character verification code prototype information to the first terminal so that the first terminal displays the first character verification code corresponding to the character verification code prototype information, the method further includes: Receiving a verification result sent by the authentication platform, wherein the verification result is a verification result obtained by the authentication platform receiving a second character verification code sent by a second terminal and verifying character verification code prototype information in the second character verification code; the second character verification code is obtained by the second terminal scanning the first character verification code displayed by the first terminal; Delete the target random number.

6. The method according to claim 5, characterized in that After receiving the verification result of the character verification code prototype information by the authentication platform, the method further includes: The verification result is sent to the first terminal, so that the first terminal displays characters corresponding to the verification result.

7. The method according to claim 1, characterized in that Before generating the target random number corresponding to the transaction instruction, the method further includes: Obtaining a personal identification code input by the user at the first terminal; Verifying the personal identification code; When the personal identification code is verified, a target random number corresponding to the transaction instruction is generated.

8. An information processing method, characterized in that: Applied to an authentication platform, the method comprises: Receiving a target random number sent by a SIM card of a first terminal, where the target random number is generated by the first terminal in response to a target transaction instruction; receiving a second character verification code sent by a second terminal, where the second character verification code is generated by the second terminal scanning a first character verification code displayed on the first terminal, where the first character verification code corresponds to character verification code prototype information, where the character verification code prototype information is obtained by the first terminal encrypting a user identity information identification code and a security environment identifier based on a target key, where the target key is obtained by encrypting the target random number using a preset public key, and where the second character verification code includes the character verification code prototype information; Encrypting the target random number using the pre-stored preset public key to obtain the target key; Decrypt the character verification code prototype information using the target key to obtain the user identity information identification code and the security environment identifier; The user identity information identification code and the security environment identifier are verified according to pre-stored authentication information to obtain a verification result, wherein the authentication information includes the user identity information identification code and the security environment identifier corresponding to the SIM card of the first terminal.

9. The method according to claim 8, characterized in that The user identity information identification code and the security environment identifier are verified according to the pre-stored authentication information to obtain a verification result, including: Compare the user identity information identification code and the security environment identifier with the user identity information identification code and the security environment identifier in the authentication information; If the user identity information identification code and the security environment identifier are consistent with the user identity information identification code and the security environment identifier in the authentication information, determining that the verification is successful; In the case where the user identity information identification code and the security environment identifier are inconsistent with the user identity information identification code and the security environment identifier in the authentication information, it is determined that the verification fails.

10. The method according to claim 8 or 9, characterized in that: After verifying the user identity information identification code and the security environment identifier according to the pre-stored authentication information and obtaining the verification result, the method further includes: Sending the verification result to the second terminal and the SIM card of the first terminal respectively; Delete the target random number.

Images