Mobile payment encryption system based on data random algorithm
By adopting encryption technology based on data random algorithm in the mobile payment system, the problems of leakage and tampering during the transmission of sensitive data information in mobile payment are solved, and the secure transmission of payment data and efficient anti-attack capabilities are achieved, which improves the overall security of mobile payments.
Patent Information
- Application Number
- CN202411648778.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-18
- Publication Date
- 2025-03-25
AI Technical Summary
There is a lack of effective encryption processing for sensitive payment data information in the current mobile payment process, which leads to the easy leakage or tampering of sensitive payment data information during data transmission, causing serious economic losses to mobile payment users.
A mobile payment encryption system based on data random algorithm is adopted to realize the encrypted transmission of payment data through the connection between the mobile client, payment server and payment merchant. Specific measures include creating a secure transmission protocol between the mobile client and the payment server, using the random number generation module to generate unpredictable random numbers as the key of the encryption algorithm, and encrypting the payment data through the encryption algorithm module to ensure the security of the data during the transmission process.
It effectively guarantees the confidentiality and security of payment data, prevents data leakage and tampering, improves the security and reliability of mobile payments, and at the same time, through calculations of anti-attack capabilities, understands the security performance of the system and helps optimize system security.
Smart Images

Figure CN119692994A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of mobile payment, in particular to a mobile payment encryption system based on a data random algorithm. Background Art
[0002] Mobile payment refers to a method in which users use their mobile terminal devices to pay for purchased goods or services. Mobile payment combines the Internet, application providers, mobile terminal devices and financial institutions, and has the characteristics of both e-commerce and mobile communications, providing mobile users with financial services such as transfer, commodity payment, and service payment. With the rapid development of mobile terminal technology, compared with previous mobile terminal devices, today's mobile devices have larger memory, faster computing speed and larger screen, but these changes also require the entire process of mobile payment to consider more and broader security issues to ensure the financial security of users and merchants;
[0003] The mobile payment process involves a variety of sensitive payment data information. However, the current mobile payment process lacks effective encryption processing for sensitive payment data information, which makes sensitive payment data information easily leaked during data transmission. At the same time, sensitive payment data information is also easily tampered with due to the lack of encryption processing, causing serious economic losses to mobile payment users. Summary of the invention
[0004] The present invention provides a mobile payment encryption system based on a data random algorithm, which can effectively solve the problem raised in the above background technology that the current mobile payment process lacks effective encryption processing for sensitive payment data information, resulting in the phenomenon that sensitive payment data information is easily leaked during data transmission. At the same time, sensitive payment data information is also easily tampered with due to the lack of encryption processing, resulting in serious economic losses to mobile payment users.
[0005] To achieve the above object, the present invention provides the following technical solutions: a mobile payment encryption system based on a data random algorithm, comprising a mobile client, a payment server and a payment receiving merchant terminal, wherein the payment server establishes a payment connection between the mobile client and the payment receiving merchant terminal to realize the transmission of payment data;
[0006] The mobile client is used by mobile payment users to initiate payment requests and display the payment interface, which facilitates mobile payment users to perform mobile payment operations. The mobile client is connected to the payment server to realize the interactive transmission of payment data;
[0007] The payment server stores and processes sensitive payment data related to payment, performs encryption tasks for sensitive payment data, and processes payment requests sent by mobile clients;
[0008] The payment receiving merchant terminal is used to receive the payment transaction information sent by the payment server, and use the private key to decrypt the payment transaction information to obtain the payment amount, thereby completing the mobile payment.
[0009] According to the above technical solution, when the payment data is transmitted between the mobile client and the payment server, a secure transmission protocol is created to ensure the confidentiality and security of the payment data in an encrypted manner;
[0010] When the system is running, attackers will try to analyze the random number generation rules to crack the encryption and attack. Therefore, in order to understand the system's anti-attack capability in advance, the secure transmission protocol needs to conduct security analysis and evaluation on the random algorithm. The anti-attack capability is analyzed and calculated from four aspects: information entropy, key space, false acceptance rate, and false rejection rate.
[0011] Information entropy is an indicator to measure the uncertainty of random variables. For random number sequences generated by random algorithms, calculating their information entropy can evaluate the randomness and unpredictability of random numbers. A higher information entropy means that the distribution of random numbers is more uniform, the uncertainty is higher, and the algorithm's anti-attack ability is relatively strong. The calculation formula of information entropy H(X) is:
[0012]
[0013] Where X is a random variable;
[0014] x i is the possible value of the random variable;
[0015] n is the number of possible values;
[0016] p(x i ) is a random variable X with value x i probability;
[0017] The higher the information entropy, the higher the ability to resist attacks;
[0018] The random algorithm involves the use of keys. The larger the key space, the greater the number of possible values of the random variable, and the stronger the algorithm's anti-attack ability. The key length is m bits, and the key space size is K = 2 m ;
[0019] Key space K, the value range is 2 m1 To 2 m2 ,use Perform normalization;
[0020] Information entropy and key space jointly affect the anti-attack capability, denoted as A1, and the calculation formula is as follows:
[0021]
[0022] For the false acceptance rate and false rejection rate, in the scenarios of identity authentication and random decision-making, the false acceptance rate (the probability of misjudging an illegal user as a legitimate user) and the false rejection rate (the probability of misjudging a legitimate user as an illegal user) are important indicators for evaluating the algorithm's anti-attack ability. By simulating attack scenarios, a large amount of legitimate and illegal data is input into the algorithm, and the false acceptance and false rejection of the algorithm are counted, and the corresponding false acceptance rate and false rejection rate are calculated. A lower false acceptance rate and false rejection rate indicate that the algorithm can accurately identify legitimate and illegal data and has a stronger anti-attack ability.
[0023] The formula for the false acceptance rate FAR is as follows:
[0024]
[0025] The formula for the false rejection rate FRR is as follows:
[0026]
[0027] FAR and FRR have a comprehensive impact on the anti-attack capability, denoted as A2, and the calculation formula is as follows:
[0028]
[0029] The calculation formula of comprehensive anti-attack capability A is as follows:
[0030]
[0031] After A1 and A2 are brought in, the calculation formula for the comprehensive anti-attack capability A is written as:
[0032]
[0033] The comprehensive anti-attack capability A of the random algorithm is calculated through the above formula, the security performance of the random algorithm is quantified, and the comprehensive anti-attack capability is measured by calculating data to help understand the security of mobile encrypted payments.
[0034] According to the above technical solution, the mobile client includes a hardware device module, a data generation module, a random number generation module, an encryption algorithm module and a data verification module;
[0035] The hardware device module includes a smart phone or tablet computer, which is the port for users to perform mobile payment operations. The hardware device module uses a SIM card or SD card with an encryption chip to provide data encryption and secure storage functions;
[0036] The hardware device module also includes application software, which is a payment application installed on the hardware device and is responsible for processing user payment requests, displaying the payment interface, and communicating with the payment server.
[0037] According to the above technical solution, when verifying the user's identity information by means of data encryption, identification verification is performed by means of conventional password verification and PIN code verification;
[0038] In the process of verifying user identity information using the identity authentication mechanism, identification and verification are performed by adding biometric recognition, including fingerprint recognition and facial recognition.
[0039] According to the above technical solution, the data generation module is used to generate payment data that meets the user's needs, and the payment data includes payment amount and payment time information;
[0040] The random number generation module is used to generate a series of random numbers with good randomness and unpredictability as the key of the encryption algorithm, ensuring that a different key can be used for each encryption operation. A random number generation algorithm is usually used to generate a piece of random data, and the random data is combined with the payment amount to form encrypted data, ensuring that the generated random number has good randomness and unpredictability.
[0041] According to the above technical solution, the encryption algorithm module uses a data random algorithm to encrypt the payment data to be transmitted to ensure the security of the data during network transmission, and generates the final payment data by encrypting the encrypted data using a public key;
[0042] The data verification module is used to verify the data encrypted by the encryption algorithm module to ensure that the data has not been tampered with or lost during transmission. The verification is performed by using a digital signature, that is, by comparing and verifying before transmitting the payment data and after receiving the payment data.
[0043] According to the above technical solution, the payment server includes a database module, a decryption algorithm module, an error handling module and a security key management module;
[0044] The database module decrypts the received user request information, verifies the validity of the user identity, and can also store the mobile client information, transaction record details and sensitive data of the key. The database module is also responsible for processing the payment request information of the mobile payment user, specifically including generating payment orders, sending payment instructions and feedback of payment results;
[0045] The decryption algorithm module uses the same encryption algorithm and random number to perform decryption operations in sequence after the payment server receives the encrypted data sent by the mobile client, and restores the original mobile payment data.
[0046] According to the above technical solution, the error handling module is to detect the erroneous payment data information when an error occurs in the transmission process of the encrypted payment data, and when it is determined that the payment data contains erroneous information, retransmit the information by retransmitting;
[0047] The security key management module is responsible for the generation, storage and distribution of keys by adopting a key management protocol, thereby encrypting the encrypted data using a public key and generating the final payment data.
[0048] According to the above technical solution, the payment merchant terminal includes a data receiving module and a private key decryption module;
[0049] The data receiving module receives the encrypted payment data transmitted by the payment server, authenticates the payment data, and determines the authenticity of the payment data by introducing a timestamp judgment method, so that the payment data will not be repeated.
[0050] According to the above technical solution, the private key decryption module refers to the payment amount obtained by decrypting by using the private key on the merchant side, and the private key decryption module is connected to a bank financial institution. After decrypting the payment amount, the final payment transaction is completed by interacting with the bank financial institution, and the transaction result information is finally fed back to the mobile client.
[0051] Compared with the prior art, the present invention has the following beneficial effects:
[0052] 1. The random number generation module is used to conveniently generate a series of random numbers with good randomness and unpredictability as the key of the encryption algorithm, thereby ensuring that a different key can be used for each encryption operation. A random number generation algorithm is used to generate a piece of random data, and the actual data is obfuscated by adding random factors. The random data is combined with the payment amount to form encrypted data, ensuring that the generated random number has good randomness and unpredictability;
[0053] The encryption algorithm module uses a data random algorithm to encrypt the payment data to be transmitted to ensure the security of the data during network transmission. The data verification module is used to verify the data encrypted by the encryption algorithm module to ensure that the data has not been tampered with, stolen or lost during transmission, preventing unauthorized users from accessing or tampering with the data, ensuring the security and reliability of mobile payment data. The calculation of the system's anti-attack capability can directly understand the system's security performance and help with subsequent improvement and optimization of the system.
[0054] 2. The decryption algorithm module can perform decryption operations in sequence by using the same encryption algorithm and random numbers, thereby facilitating the restoration of the original mobile payment data. The security key management module facilitates the use of the key management protocol to be responsible for the generation, storage and distribution of keys, and realizes the encryption of encrypted data using the public key to generate the final payment data, thereby facilitating the processing of encrypted data and further facilitating the mobile payment process. The private key decryption module can complete the final payment transaction by interacting with the bank financial institution after decrypting the payment amount, thereby realizing convenient payment transactions in an encrypted environment and ensuring that the mobile payment environment has higher security.
[0055] 3. By creating a secure transmission protocol, the confidentiality and security of payment data can be protected by encryption when transmitting payment data between the mobile client and the payment server. The hardware device module of the mobile client uses a SIM card or SD card with an encryption chip to provide data encryption and secure storage functions, thereby ensuring the security of mobile payment data from a hardware perspective. In combination with the data encryption and identity authentication mechanism within the application software, the data transmission security and the authenticity of the user's identity during the payment process can be further ensured from a software perspective, ensuring the security of users' funds and privacy protection during the mobile payment process. BRIEF DESCRIPTION OF THE DRAWINGS
[0056] The accompanying drawings are used to provide further understanding of the present invention and constitute a part of the specification. They are used to explain the present invention together with the embodiments of the present invention and do not constitute a limitation of the present invention.
[0057] In the attached picture:
[0058] Figure 1 It is a structural block diagram of the mobile payment encryption system of the present invention. DETAILED DESCRIPTION
[0059] The preferred embodiments of the present invention are described below in conjunction with the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present invention, and are not used to limit the present invention.
[0060] Example: Figure 1 As shown, the present invention provides a technical solution, a mobile payment encryption system based on a data random algorithm, which improves the security and reliability of mobile payment by introducing complex randomization means, and specifically includes a mobile client, a payment server and a payment receiving merchant terminal. The payment server establishes a payment connection between the mobile client and the payment receiving merchant terminal to realize the transmission of payment data;
[0061] The mobile client is used by mobile payment users to initiate payment requests and display the payment interface, which facilitates mobile payment users to perform mobile payment operations. The mobile client is connected to the payment server to realize the interactive transmission of payment data;
[0062] The payment server stores and processes sensitive payment data related to payment, performs encryption tasks for sensitive payment data, and processes payment requests sent by mobile clients;
[0063] The merchant receiving the payment is used to receive the payment transaction information sent by the payment server, and use the private key to decrypt the payment transaction information to obtain the payment amount and complete the mobile payment.
[0064] Based on the above technical solution, when the payment data is transmitted between the mobile client and the payment server, a secure transmission protocol is created to encrypt and protect the confidentiality and security of the payment data. The secure transmission protocol specifically includes the SSL / TLS protocol and the HTTPS protocol.
[0065] Based on the above technical solution, the mobile client includes a hardware device module, a data generation module, a random number generation module, an encryption algorithm module and a data verification module;
[0066] The hardware device module includes a smart phone or tablet computer, which is the port for users to perform mobile payment operations. The hardware device module uses a SIM card or SD card with an encryption chip to provide data encryption and secure storage functions;
[0067] The hardware device module also includes application software, which is a payment application installed on the hardware device. It is responsible for processing user payment requests, displaying the payment interface, and communicating with the payment server. The application software has integrated data encryption and identity authentication mechanisms to ensure the security of data transmission and the authenticity of user identity during the payment process.
[0068] Based on the above technical solution, when verifying the user's identity information by means of data encryption, identification verification is performed by means of conventional password verification and PIN code verification;
[0069] In the process of verifying user identity information using the identity authentication mechanism, identification and verification are performed by adding biometric recognition, including fingerprint recognition and facial recognition.
[0070] Based on the above technical solution, the data generation module is used to generate payment data that meets user needs, and the payment data includes payment amount and payment time information;
[0071] The random number generation module is used to generate a series of random numbers with good randomness and unpredictability as the key of the encryption algorithm, ensuring that a different key can be used for each encryption operation. Usually, a random number generation algorithm is used to generate a piece of random data, and the random data is combined with the payment amount to form encrypted data, ensuring that the generated random number has good randomness and unpredictability.
[0072] Based on the above technical solution, the encryption algorithm module uses a data random algorithm to encrypt the payment data to be transmitted to ensure the security of the data during network transmission. The encryption algorithm includes AES and RSA. The encrypted data is encrypted using a public key to generate the final payment data.
[0073] The data verification module is used to verify the data encrypted by the encryption algorithm module to ensure that the data has not been tampered with or lost during transmission. The verification is performed by using a digital signature, that is, by comparing and verifying before transmitting the payment data and after receiving the payment data.
[0074] Based on the above technical solution, the payment server includes a database module, a decryption algorithm module, an error handling module and a security key management module;
[0075] The database module decrypts the received user request information, verifies the validity of the user identity, and can also store the mobile client information, transaction record details and sensitive data of the key. The database module is also responsible for processing the payment request information of the mobile payment user, including generating payment orders, sending payment instructions and feedback on payment results;
[0076] The decryption algorithm module uses the same encryption algorithm and random numbers to perform decryption operations in sequence after the payment server receives the encrypted data sent by the mobile client to restore the original mobile payment data.
[0077] Based on the above technical solution, the error handling module is to detect the erroneous payment data information when an error occurs in the transmission process of the encrypted payment data, and when it is determined that there is erroneous information in the payment data, the information is retransmitted by retransmission;
[0078] The security key management module is responsible for the generation, storage and distribution of keys by adopting the key management protocol, and realizes the encryption of encrypted data using the public key to generate the final payment data.
[0079] Based on the above technical solution, the payment merchant terminal includes a data receiving module and a private key decryption module;
[0080] The data receiving module receives the encrypted payment data transmitted by the payment server, authenticates the payment data, and determines the authenticity of the payment data by introducing a timestamp judgment so that the payment data will not be repeated.
[0081] Based on the above technical solution, the private key decryption module refers to the payment amount obtained by the merchant receiving the payment by using the private key, and the private key decryption module is connected to the bank financial institution. After the payment amount is decrypted, the final payment transaction is completed by interacting with the bank financial institution, and the transaction result information is finally fed back to the mobile client.
[0082] When the system is running, attackers will try to analyze the random number generation rules to crack the encryption and attack. Therefore, in order to understand the system's anti-attack capability in advance, the secure transmission protocol needs to conduct security analysis and evaluation on the random algorithm. The anti-attack capability is analyzed and calculated from four aspects: information entropy, key space, false acceptance rate, and false rejection rate.
[0083] Information entropy is an indicator to measure the uncertainty of random variables. For random number sequences generated by random algorithms, calculating their information entropy can evaluate the randomness and unpredictability of random numbers. A higher information entropy means that the distribution of random numbers is more uniform, the uncertainty is higher, and the algorithm's anti-attack ability is relatively strong. The calculation formula of information entropy H(X) is:
[0084]
[0085] Where X is a random variable;
[0086] x i is the possible value of the random variable;
[0087] n is the number of possible values;
[0088] p(x i ) is the random variable X taking value x i The probability of
[0089] The higher the information entropy, the higher the ability to resist attacks;
[0090] The random algorithm involves the use of keys. The larger the key space, the greater the number of possible values of the random variable, and the stronger the algorithm's anti-attack ability. The key length is m bits, and the key space size is K = 2 m ;
[0091] Key space K, the value range is 2 m1 To 2 m2 ,use Perform normalization;
[0092] Information entropy and key space jointly affect the anti-attack capability, denoted as A1, and the calculation formula is as follows:
[0093]
[0094] For the false acceptance rate and false rejection rate, in the scenarios of identity authentication and random decision-making, the false acceptance rate (the probability of misjudging an illegal user as a legitimate user) and the false rejection rate (the probability of misjudging a legitimate user as an illegal user) are important indicators for evaluating the algorithm's anti-attack ability. By simulating attack scenarios, a large amount of legitimate and illegal data is input into the algorithm, and the false acceptance and false rejection of the algorithm are counted, and the corresponding false acceptance rate and false rejection rate are calculated. A lower false acceptance rate and false rejection rate indicate that the algorithm can accurately identify legitimate and illegal data and has a stronger anti-attack ability.
[0095] The formula for the false acceptance rate FAR is as follows:
[0096]
[0097] The formula for the false rejection rate FRR is as follows:
[0098]
[0099] FAR and FRR have a comprehensive impact on the anti-attack capability, denoted as A2, and the calculation formula is as follows:
[0100]
[0101] The calculation formula of comprehensive anti-attack capability A is as follows:
[0102]
[0103] After A1 and A2 are brought in, the calculation formula for the comprehensive anti-attack capability A is written as:
[0104]
[0105] The comprehensive anti-attack capability A of the random algorithm is calculated by the above formula, and the security performance of the random algorithm is quantified. The comprehensive anti-attack capability is measured by calculating data, which helps to understand the security of mobile encrypted payments and help improve the security performance of the system in advance, thereby continuously improving the system security and facilitating system optimization.
[0106] Finally, it should be noted that the above description is only a preferred example of the present invention and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art can still modify the technical solutions described in the aforementioned embodiments or replace some of the technical features therein by equivalents. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.
Claims
1. A mobile payment encryption system based on a data random algorithm, characterized in that: It includes a mobile client, a payment server and a payment receiving merchant terminal. The payment server establishes a payment connection between the mobile client and the payment receiving merchant terminal to realize the transmission of payment data; The mobile client is used by mobile payment users to initiate payment requests and display the payment interface, which facilitates mobile payment users to perform mobile payment operations. The mobile client is connected to the payment server to realize the interactive transmission of payment data; The payment server stores and processes sensitive payment data related to payment, performs encryption tasks for sensitive payment data, and processes payment requests sent by mobile clients; The payment receiving merchant terminal is used to receive the payment transaction information sent by the payment server, and use the private key to decrypt the payment transaction information to obtain the payment amount, thereby completing the mobile payment.
2. A mobile payment encryption system based on a data random algorithm according to claim 1, characterized in that: When the payment data is transmitted between the mobile client and the payment server, a secure transmission protocol is created to ensure the confidentiality and security of the payment data in an encrypted manner; When the system is running, attackers will try to analyze the random number generation rules to crack the encryption and attack. Therefore, in order to understand the system's anti-attack capability in advance, the secure transmission protocol needs to conduct security analysis and evaluation on the random algorithm. The anti-attack capability is analyzed and calculated from four aspects: information entropy, key space, false acceptance rate, and false rejection rate. Information entropy is an indicator to measure the uncertainty of random variables. For random number sequences generated by random algorithms, calculating their information entropy can evaluate the randomness and unpredictability of random numbers. A higher information entropy means that the distribution of random numbers is more uniform, the uncertainty is higher, and the algorithm's anti-attack ability is relatively strong. The calculation formula of information entropy H(X) is: Where X is a random variable; x i is the possible value of the random variable; n is the number of possible values; p(x i ) is the random variable X taking value x i probability; The higher the information entropy, the higher the ability to resist attacks; The random algorithm involves the use of keys. The larger the key space, the greater the number of possible values of the random variable, and the stronger the algorithm's anti-attack ability. The key length is m bits, and the key space size is K = 2 m ; Key space K, the value range is 2 m1 To 2 m2 ,use Perform normalization; Information entropy and key space jointly affect the anti-attack capability, denoted as A1, and the calculation formula is as follows: For the false acceptance rate and false rejection rate, in the scenarios of identity authentication and random decision-making, the false acceptance rate (the probability of misjudging an illegal user as a legitimate user) and the false rejection rate (the probability of misjudging a legitimate user as an illegal user) are important indicators for evaluating the algorithm's anti-attack ability. By simulating attack scenarios, a large amount of legitimate and illegal data is input into the algorithm, and the false acceptance and false rejection of the algorithm are counted, and the corresponding false acceptance rate and false rejection rate are calculated. A lower false acceptance rate and false rejection rate indicate that the algorithm can accurately identify legitimate and illegal data and has a stronger anti-attack ability. The formula for the false acceptance rate FAR is as follows: The formula for the false rejection rate FRR is as follows: FAR and FRR have a comprehensive impact on the anti-attack capability, denoted as A2, and the calculation formula is as follows: The calculation formula of comprehensive anti-attack capability A is as follows: After A1 and A2 are brought in, the calculation formula for the comprehensive anti-attack capability A is written as: The comprehensive anti-attack capability A of the random algorithm is calculated through the above formula, the security performance of the random algorithm is quantified, and the comprehensive anti-attack capability is measured by calculating data to help understand the security of mobile encrypted payments.
3. The mobile payment encryption system based on data random algorithm according to claim 1 is characterized in that: The mobile client includes a hardware device module, a data generation module, a random number generation module, an encryption algorithm module and a data verification module; The hardware device module includes a smart phone or tablet computer, which is the port for users to perform mobile payment operations. The hardware device module uses a SIM card or SD card with an encryption chip to provide data encryption and secure storage functions; The hardware device module also includes application software, which is a payment application installed on the hardware device and is responsible for processing user payment requests, displaying the payment interface, and communicating with the payment server.
4. The mobile payment encryption system based on data random algorithm according to claim 3 is characterized in that: When verifying the user's identity information by means of data encryption, identification verification is performed by means of conventional password verification and PIN code verification; In the process of verifying user identity information using the identity authentication mechanism, identification and verification are performed by adding biometric recognition, including fingerprint recognition and facial recognition.
5. The mobile payment encryption system based on data random algorithm according to claim 3 is characterized in that: The data generation module is used to generate payment data that meets user needs, and the payment data includes payment amount and payment time information; The random number generation module is used to generate a series of random numbers with good randomness and unpredictability as the key of the encryption algorithm, ensuring that a different key can be used for each encryption operation. A random number generation algorithm is usually used to generate a piece of random data, and the random data is combined with the payment amount to form encrypted data, ensuring that the generated random number has good randomness and unpredictability.
6. The mobile payment encryption system based on data random algorithm according to claim 3 is characterized in that: The encryption algorithm module uses a data random algorithm to encrypt the payment data to be transmitted to ensure the security of the data during network transmission, and generates the final payment data by encrypting the encrypted data using a public key; The data verification module is used to verify the data encrypted by the encryption algorithm module to ensure that the data has not been tampered with or lost during transmission. The verification is performed by using a digital signature, that is, by comparing and verifying before transmitting the payment data and after receiving the payment data.
7. The mobile payment encryption system based on data random algorithm according to claim 1, characterized in that: The payment server includes a database module, a decryption algorithm module, an error handling module and a security key management module; The database module decrypts the received user request information, verifies the validity of the user identity, and can also store the mobile client information, transaction record details and sensitive data of the key. The database module is also responsible for processing the payment request information of the mobile payment user, specifically including generating payment orders, sending payment instructions and feedback of payment results; The decryption algorithm module uses the same encryption algorithm and random number to perform decryption operations in sequence after the payment server receives the encrypted data sent by the mobile client, and restores the original mobile payment data.
8. A mobile payment encryption system based on a data random algorithm according to claim 7, characterized in that: The error handling module is used to detect erroneous payment data information when an error occurs during the transmission of the encrypted payment data, and retransmit the information by retransmitting it when it is determined that there is erroneous information in the payment data; The security key management module is responsible for the generation, storage and distribution of keys by adopting a key management protocol, thereby encrypting the encrypted data using a public key and generating the final payment data.
9. The mobile payment encryption system based on data random algorithm according to claim 1, characterized in that: The payment merchant terminal includes a data receiving module and a private key decryption module; The data receiving module receives the encrypted payment data transmitted by the payment server, authenticates the payment data, and determines the authenticity of the payment data by introducing a timestamp judgment method, so that the payment data will not be repeated.
10. A mobile payment encryption system based on a data random algorithm according to claim 9, characterized in that: The private key decryption module refers to the payment amount obtained by the merchant receiving the payment by using the private key, and the private key decryption module is connected to a bank financial institution. After the payment amount is decrypted, the final payment transaction is completed by interacting with the bank financial institution, and the transaction result information is finally fed back to the mobile client.
Citation Information
Patent Citations
Cryptography method and system
CA2639649A1
Genetic automatic fuzzy clustering analysis-based templateless biological secret key generating method
CN103577738A
Biometric key generating method adapting to dynamic quantization
CN105515765A
Intelligent mobile terminal payment system and intelligent mobile terminal payment method based on safe hardware isolation
CN106327184A