NFC-based transaction security discrimination method, apparatus and device, and storage medium

Abstract

The invention relates to the technical field of NFC (Near Field Communication), and particularly provides an NFC-based transaction security discrimination method, device and equipment and a storage medium, and the method is applied to an NFC controller of an intelligent terminal. The method comprises the following steps: acquiring first position information indicating a user position of an SIM card in an intelligent terminal, second position information indicating the user position of the intelligent terminal, and third position information indicating the position of card swiping equipment, and judging whether the current transaction is in a secure transaction environment according to the three pieces of position information. And the position information of multiple parties is fused on the NFC controller and is used as a security judgment basis of the transaction process, so that the asset security of the user and the operator can be effectively guaranteed.

Description

Technical Field

[0001] The present application relates to the technical field of Near Field Communication (NFC), and in particular to a transaction security determination method, device, equipment and storage medium based on NFC. Background Art

[0002] In recent years, smart terminals have more and more functions. In addition to Bluetooth calling, GPS positioning and navigation, smart terminals also have NFC functions. NFC is the integration and evolution of contactless radio frequency identification (RFID) and interconnection technology. It combines inductive card readers, inductive cards and point-to-point functions on a single chip, and can identify and exchange data with compatible devices within a short distance. Smart terminals with NFC functions can also be called NFC devices.

[0003] While NFC devices have become popular, there are still problems with information security leakage or malicious third parties snooping on personal privacy information during NFC transactions. For example, a malicious third party can obtain the transaction information of a consumer's NFC device by disguising as an NFC card swiping device at a distance from both parties of the NFC device, and then complete the subsequent transaction process based on the transaction information of the NFC device, posing a serious threat to the transaction security of users. Summary of the invention

[0004] In order to solve the above technical problems, the present application provides a transaction security determination method, device, equipment and storage medium based on NFC, which integrates the location information of multiple parties on the NFC controller and serves as the basis for security determination of the transaction process, thereby effectively protecting the asset security of users and operators.

[0005] In the first aspect, the present application provides a transaction security determination method based on NFC, which is applied to the NFC controller of a smart terminal. The method includes: in the process of executing a contactless card swiping transaction, obtaining first location information, second location information and third location information, the first location information is used to indicate the location information of a SIM card in the smart terminal, the second location information is used to indicate the location information of the smart terminal, and the third location information is used to indicate the location information of the card swiping device; based on the first location information, the second location information and the third location information, determining whether the current transaction is in a secure transaction environment.

[0006] In the second aspect, the present application provides a transaction security determination device based on NFC, which is configured in the NFC controller of the smart terminal, and the device includes: an information acquisition module, which is used to obtain first location information, second location information and third location information during the process of executing a contactless card swiping transaction, the first location information is used to indicate the location information of the SIM card in the smart terminal, the second location information is used to indicate the location information of the smart terminal, and the third location information is used to indicate the location information of the card swiping device; a security determination module is used to determine whether the current transaction is in a secure transaction environment based on the first location information, the second location information and the third location information.

[0007] In a third aspect, the present application provides an electronic device, which includes an NFC-based transaction security determination device, and the electronic device includes: one or more processors; a storage device for storing one or more programs; when the one or more programs are executed by one or more processors, the one or more processors implement the NFC-based transaction security determination method as described in the first aspect above.

[0008] In a fourth aspect, the present application provides a storage medium, which may be a computer-readable storage medium, storing a computer program thereon, which, when executed by a processor, implements the NFC-based transaction security determination method as described in the first aspect above.

[0009] In a fifth aspect, an embodiment of the present application provides a computer program product, which includes a computer program or instructions, and when the computer program or instructions are executed by a processor, implements any NFC-based transaction security determination method as described in the first aspect above.

[0010] Compared with the prior art, the technical solution provided by the embodiments of the present application has the following advantages:

[0011] The embodiment of the present application provides a transaction security determination method, device, equipment and storage medium based on NFC. The method is applied to the NFC controller of the smart terminal. During the process of performing a contactless card swiping transaction, the NFC controller obtains the first location information indicating the location of the SIM card in the smart terminal, the second location information indicating the location of the smart terminal, and the third location information indicating the location of the card swiping device, and determines whether the current transaction is in a secure transaction environment based on the above three location information. The location information of multiple parties is integrated on the NFC controller and used as the basis for security determination during the transaction process, which can effectively protect the information security of users and operators. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0013] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0014] Figure 1 A flowchart of a transaction security determination method based on NFC provided in an embodiment of the present application;

[0015] Figure 2 A schematic diagram of the process of an optimized NFC-based transaction security determination method provided in an embodiment of the present application;

[0016] Figure 3 A schematic diagram of the structure of a transaction security identification system provided in an embodiment of the present application;

[0017] Figure 4 A schematic diagram of the structure of a transaction security determination device based on NFC provided in an embodiment of the present application;

[0018] Figure 5 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0019] In order to more clearly understand the above-mentioned purposes, features and advantages of the present application, the scheme of the present application will be further described below. It should be noted that the embodiments of the present application and the features in the embodiments can be combined with each other without conflict.

[0020] In the following description, many specific details are set forth to facilitate a full understanding of the present application, but the present application may also be implemented in other ways different from those described herein; obviously, the embodiments in the specification are only part of the embodiments of the present application, rather than all of the embodiments.

[0021] The term "including" and its variations used herein are open inclusions, i.e., "including but not limited to". The term "based on" means "based at least in part on". The term "one embodiment" means "at least one embodiment"; the term "another embodiment" means "at least one additional embodiment"; the term "some embodiments" means "at least some embodiments". The relevant definitions of other terms will be given in the following description.

[0022] It should be noted that the concepts such as "first" and "second" mentioned in this application are only used to distinguish different devices, modules or units, and are not used to limit the order or interdependence of the functions performed by these devices, modules or units.

[0023] It should be noted that the modifications of "one" and "plurality" mentioned in the present application are illustrative rather than restrictive, and those skilled in the art should understand that unless otherwise clearly indicated in the context, it should be understood as "one or more".

[0024] The following is a detailed description of the NFC-based transaction security determination method provided by the present application in conjunction with the accompanying drawings and specific implementation methods.

[0025] Figure 1 This is a flow chart of a transaction security determination method based on NFC in an embodiment of the present application. This embodiment is applicable to situations where an NFC transaction environment is to be determined. The method can be executed by a transaction security determination device based on NFC. The transaction security determination device based on NFC can be implemented in software and / or hardware. The transaction security determination device based on NFC can be configured in an NFC controller of a smart terminal.

[0026] The smart terminal includes an embedded secure element (eSE) and an embedded subscriber identity module (eSIM). The eSE and eSIM can use two physically independent chips, each with its own operating system. Alternatively, the eSE and eSIM use two logically isolated virtual operating systems implemented in software code in the same chip.

[0027] eSE provides a secure environment to store sensitive information, such as encryption keys, and perform security operations related to this information. Since NFC card swiping involves user sensitive information, such as transaction passwords, etc., the relevant operations of NFC transactions are performed by eSE. In other words, the NFC-based transaction security identification method is executed by eSE in the smart terminal, that is, the NFC controller is deployed in the operating system of eSE.

[0028] eSIM is an embedded SIM card that is directly welded inside the smart terminal, rather than being physically removable like a traditional SIM card. eSIM supports remote configuration, and users can activate services by downloading the configuration file provided by the operator through the network. It is mainly used in the field of mobile communications, allowing users to switch operator services more flexibly without physically changing the SIM card.

[0029] eSE and eSIM are either two physically independent chips or two logically isolated virtual operating systems implemented with software code in the same chip. eSIM does not participate in the NFC transaction process between the NFC controller and the smart terminal operating system and the radio frequency terminal device. There is no convenient interaction channel between the smart terminal operating system representing the smart terminal manufacturer and the eSIM profile representing the mobile operator. In scenarios such as NFC card swiping and card reading, it is impossible to fully utilize and integrate the user location information controlled by both parties in the payment and mobile communication fields, and it is impossible to provide users with a smarter and safer business ecosystem. The above-mentioned smart terminals may include handheld smart terminals. Common handheld smart terminals include smartphones, tablet computers, personal digital assistants (PDAs), etc.

[0030] The NFC-based transaction security identification method provided in the embodiment of the present application is mainly applied to the NFC controller of the smart terminal, which is usually deployed in smart terminals such as smartphones and tablet computers. The NFC controller is a special hardware component integrated on the motherboard of the smart terminal to implement the NFC function.

[0031] The hardware of the NFC controller mainly includes: NFC chip, antenna and interface; the NFC chip is mainly used to handle all NFC-related communication tasks, and the above antenna is used to send and receive radio frequency signals. The NFC controller communicates with the main processor of the smart terminal through a standard interface (such as SPI, I2C) to achieve data transmission and processing.

[0032] The software support of NFC controller mainly includes: driver and application programming interface (API). The operating system of smart terminal, such as Android, iOS, etc., requires corresponding driver to support NFC function. The driver is responsible for initializing NFC controller, managing communication session and handling interrupt. The operating system of smart terminal provides NFC-related API, allowing application developers to take advantage of NFC function. For example, Android provides NfcAdapter class, which can be used to implement NFC-related functions.

[0033] In an embodiment of the present application, a group of shared interfaces for location information are deployed in the NFC controller, so that smart terminals, card swiping devices and eSIM can share and integrate their respective location information on the NFC controller through this group of shared interfaces. Ultimately, in industry applications involving identity identification such as mobile payment and smart access control, it can be used as part of the security decision-making basis for card swiping transactions, which can effectively protect the asset security of users and operators.

[0034] like Figure 1 As shown, the NFC-based transaction security determination method provided in the embodiment of the present application mainly includes steps S101-S102.

[0035] S101. In the process of performing a contactless card swiping transaction, first location information, second location information and third location information are obtained, wherein the first location information is used to indicate location information of a SIM card in a smart terminal, the second location information is used to indicate location information of the smart terminal, and the third location information is used to indicate location information of a card swiping device.

[0036] Contactless card transactions refer to a payment method in which the cardholder does not need to insert or swipe the card through the card reader during the payment process, but instead completes the transaction by placing the card with contactless communication function close to the card swiping device. Contactless card transactions are mainly implemented by NFC technology.

[0037] Contactless card transactions are mainly used in the following scenarios. Mobile payment scenario: Through NFC, users can quickly complete payments on NFC-enabled POS machines. Data transmission scenario: Users can quickly transfer small amounts of data such as contact information, URLs, and pictures between two mobile phones through NFC. Tag reading and writing scenario: NFC can read and write NFC tags, which are often used in advertising, access control, ticketing systems, etc. Device pairing scenario: NFC can simplify the pairing process of Bluetooth and wireless network communication technology (Wi-Fi) devices, and pairing can be completed with a light touch. Identity authentication scenario: NFC can be used for identity authentication and access control, such as employee cards, access control cards, etc.

[0038] The first location information is used to indicate the location information of the SIM card in the smart terminal. The location information of the SIM card includes: user location information of the SIM card. When the SIM card in the smart terminal executes a telecommunication instruction related to location, the user location information of the SIM card is obtained from the telecommunication instruction.

[0039] In the embodiment of the present application, the NFC controller establishes a first data transmission channel with the SIM card. When the NFC controller performs a contactless card swiping transaction, the user location information of the SIM card is obtained from the SIM card through the first data transmission channel as the first location information.

[0040] Among them, the second location information is used to indicate the location information of the smart terminal, and the location information of the smart terminal includes: user location information provided by the smart terminal. Furthermore, the location information of the smart terminal can be obtained in the following three ways: (1) Base station positioning: The location information of the smart terminal is determined through the communication between the smart terminal and the nearby mobile network base station. Each base station has a unique identification code. By analyzing the signal strength between the user and multiple base stations, the location information of the smart terminal can be estimated. (2) Global Positioning System (GPS) positioning: Smart terminals are usually equipped with GPS modules, which determine the location information of the smart terminal by receiving signals from multiple satellites. (3) Wi-Fi) positioning: By connecting to a nearby Wi-Fi hotspot, the smart terminal uses the geographic location database of the Wi-Fi network to determine the location information of the smart terminal.

[0041] In an embodiment of the present application, the NFC controller establishes a second data transmission channel with the processor of the smart terminal. When the NFC controller performs a contactless card transaction, it obtains the location information of the smart terminal from the processor of the smart terminal through the second data transmission channel as the second location information.

[0042] The third location information is used to indicate the location information of the card swiping device, which refers to a device that can read and write NFC tags through NFC technology, such as NFC readers, POS machines, automatic ticket machines, NFC gates, etc. The location information of the card swiping device refers to the geographical location data of the card swiping device obtained through various technologies and methods.

[0043] In a possible implementation, obtaining the third location information includes: receiving the third location information through a contactless radio frequency channel with a card swiping device.

[0044] During the NFC card swiping transaction, in addition to the standard transaction information set by the payment organization, the card swiping device also forwards its own location information received to the NFC controller through the contactless radio frequency channel. Among them, the NFC background transaction server sends the location information of each card swiping device to its corresponding card swiping device.

[0045] Specifically, the location information (such as longitude and latitude) of the card swiping device is written into the NFC tag of the card swiping device, and the location information in the NFC tag of the card swiping device is read using the NFC controller in the smart terminal.

[0046] S102: Based on the first location information, the second location information and the third location information, determine whether the current transaction is in a secure transaction environment.

[0047] The distance between any two location information among the first location information, the second location information and the third location information, if all the distances are less than the set distance threshold, then it is judged that the current transaction is in a safe transaction environment; if any one of the distances is less than the set distance threshold, then it is judged that the current transaction is in an unsafe transaction environment.

[0048] Specifically, if the distance between the first location information and the second location information, the distance between the first location information and the third location information, and the distance between the second location information and the third location information are all less than the set distance threshold, then the current transaction is judged to be in a safe transaction environment; if any one of the three distances is less than the set distance threshold, then the current transaction is judged to be in an unsafe transaction environment. The set distance threshold can be set according to actual conditions, for example: the set distance threshold is 1 km.

[0049] In one possible implementation, based on the first location information, the second location information and the third location information, determining whether the current transaction is in a secure transaction environment includes: receiving a transaction security requirement corresponding to the card swiping device; determining whether the distance between the first location information, the second location information and the third location information is less than a distance threshold in the transaction security requirement; if so, determining that the current transaction is in a secure transaction environment; if not, determining that the current transaction is in an unsecure transaction environment, and interrupting the current transaction.

[0050] Among them, transaction security requirements refer to the conditions for judging whether the current transaction environment is safe based on location information. The transaction security requirements are sent by the NFC background transaction server to the card swiping device, and the card swiping device writes the transaction security requirements into the NFC tag. The NFC controller in the smart terminal reads the transaction security requirements in the NFC tag of the card swiping device.

[0051] Furthermore, the transaction security requirement carries a distance threshold, which is used to determine whether the positional relationship between the first location information, the second location information, and the third location information is safe for the current transaction environment. The distance threshold should not be set too large or too small to avoid misjudgment of the current transaction environment. Optionally, the distance threshold is 1 km.

[0052] For example, if the distance between the first location information and the second location information, the distance between the first location information and the third location information, and the distance between the second location information and the third location information are all less than 1 km, then the current transaction is judged to be in a safe transaction environment, and the contactless card transaction process continues. If any of the three distances is less than 1 km, then the current transaction is judged to be in an unsafe transaction environment, and the current transaction is interrupted to avoid leakage of sensitive information.

[0053] After interrupting the current transaction, the NFC controller sends an exception report to the smart terminal through the second data transmission channel, and the NFC controller sends an exception report to the card swiping device through the contactless radio frequency channel. The exception report is used to indicate that the current transaction environment of the smart terminal and the card swiping device is unsafe. In order to avoid leakage of sensitive information, the current transaction has been interrupted.

[0054] The embodiment of the present application provides a transaction security determination method based on NFC, which is applied to the NFC controller of the smart terminal. During the process of performing a contactless card swiping transaction, the NFC controller obtains the first location information indicating the location of the SIM card in the smart terminal, the second location information indicating the location of the smart terminal, and the third location information indicating the location of the card swiping device, and determines whether the current transaction is in a secure transaction environment based on the above three location information. The location information of multiple parties is integrated on the NFC controller and used as the basis for security determination during the transaction process, which can effectively protect the information security of users and operators.

[0055] On the basis of the above embodiments, the embodiments of the present application further optimize the transaction security determination method based on NFC, such as Figure 3 As shown, the optimized NFC-based transaction security identification method mainly includes the following steps:

[0056] S201. During an NFCEE discovery process, receive capability declaration information sent by a SIM card in a smart terminal, wherein the capability declaration information includes a capability declaration field of SIM location information.

[0057] When executing the NFCEE Discovery process specified by the NFC industry standard, the NFC controller can obtain the extended "eSIM Profile Location Information" capability declaration field attached to the eSIM response, and determine whether the SIM supports the "eSIM Profile Location Information" publishing service through this capability declaration field.

[0058] S202: When the capability declaration field of the SIM location information indicates that the SIM card supports the SIM location information publishing service, establish a first data transmission channel with the SIM card in the smart terminal.

[0059] The first data transmission channel is used to obtain first location information.

[0060] If the SIM supports the "eSIM Profile location information" publishing service, a dedicated first data transmission channel is established with the SIM, and the first data transmission channel is used to receive the "eSIM Profile location information" sent by the SIM. After the establishment is successful, the smart terminal is notified that there is currently an eSIM that can provide eSIM Profile location information.

[0061] In a possible implementation, the location information of the SIM card in the smart terminal is obtained by the application in the SIM card when the service object executes the 7816 telecommunications instruction related to the location service, and the service object is obtained when the application requests the SIM location information publishing service.

[0062] The eSIM operating system running on the eSIM has a built-in eSIM Profile location information publishing service. The mini-application (Applet) contained in the eSIM Profile obtains the service object by requesting the eSIM Profile location information publishing service, and calls the corresponding method of the service object (such as eSIMLocationPub.prepareAndSendLocationEvent()) when executing the 7816 telecommunications instruction related to the location service, and transmits the corresponding location information to the NFC controller through the information transmission channel agreed between the eSIM COS and the NFC controller.

[0063] S203: Receive verification information provided by the SIM card through the first data transmission channel.

[0064] To further enhance the security of sensitive information and prevent the location information of all parties from being counterfeited or tampered with, the eSIM operating system running on the eSIM optionally includes an "eSIM Profile Location Information Publishing Service", which, in addition to transmitting the user location information provided by the Applet, may also include verification information preset by the Profile provider at the factory, and transmit the verification information to the NFC controller through the first data transmission channel.

[0065] S204. During the NFCEE discovery process, receive capability declaration information of the smart terminal, wherein the capability declaration information includes a capability declaration field of the terminal location information.

[0066] When executing the NFCEE Discovery process specified by the NFC industry standard, the NFC controller receives the extended "Terminal Location Information" capability declaration field attached to the NFCEE-Smart Terminal response message to determine whether the NFCEE-DH supports the "Terminal Location Information" publishing service.

[0067] S205: When the capability declaration field of the terminal location information indicates that the terminal supports the terminal location information publishing service, establish a second data transmission channel with the smart terminal, where the second data transmission channel is used to obtain the first location information.

[0068] The capability declaration field of the terminal location information indicates that the terminal supports the "terminal location information" publishing service, and then a dedicated second data transmission channel is further established with the smart terminal to receive the location information of the smart terminal.

[0069] S206: Receive third location information through a contactless radio frequency channel with the card swiping device.

[0070] During the NFC card swiping transaction, in addition to the standard transaction information set by the payment organization, the card swiping device also forwards its own location information received to the NFC controller through the contactless radio frequency channel. Among them, the NFC background transaction server sends the location information of each card swiping device to its corresponding card swiping device.

[0071] S207. Perform integrity verification on the first location information, the second location information, and the third location information based on the verification information; if the verification passes, execute S208; if the verification fails, execute S209.

[0072] To further enhance the security of sensitive information and prevent the location information of all parties from being counterfeited or tampered with, the NFC controller uses the verification information provided by the NFCEE-eSIM to perform integrity verification on the second location information and security transaction requirements from the smart terminal and the second location information from the SIM.

[0073] S208. Determine whether the current transaction is in a secure transaction environment based on the first location information, the second location information, and the third location information.

[0074] S208 provided in the embodiment of the present application is the same as the process of S102 in the above embodiment. For details, please refer to the description in the above embodiment, which will not be repeated in the embodiment of the present application.

[0075] S209: Determine that the current transaction is in a non-safe transaction environment, and interrupt the current transaction.

[0076] If the integrity of any of the second location information and the security transaction requirement from the smart terminal and the second location information from the SIM card is destroyed, the NFC card transaction is terminated.

[0077] The NFC-based transaction security determination method provided in this application integrates the location information of multiple parties on the NFC controller and uses it as the basis for security determination of the transaction process, which can effectively protect the information security of users and operators.

[0078] Based on the above embodiments, the present application embodiment provides an interactive process for transaction security identification based on NFC, such as Figure 3As shown, the interactive method for transaction security identification based on NFC is mainly applied to the NFC card swiping transaction system, which mainly includes: NFC controller 31, card swiping device 32, background server 33, smart terminal 34, SIM card 35 and baseband processor 36. Among them, the NFC controller 31 and eSIM card 35 are deployed in the smart terminal 34, and the smart terminal 34 is composed of a processor corresponding to the operating system.

[0079] The card swiping device 32 may include a POS machine, a gate machine, etc., and the smart terminal 34 may include a mobile phone. The eSIM COS is installed and running with a Profile. The backend server 33 is a remote backend transaction server that manages the card swiping device.

[0080] The backend server 33 and the card swiping device 32 can be connected via Wi-Fi. The backend server 33 is responsible for verifying and pushing the location information of the card swiping device 32 and the security transaction requirements of the location information to each card swiping device 32 that it is responsible for managing. During the NFC card swiping transaction process, in addition to the standard transaction information formulated by the payment organization, the card swiping device 32 also forwards its own location information and the security transaction requirements of the location information it receives to the NFC controller 31 through a contactless transmission channel.

[0081] The processor of the smart terminal 34 with NFC radio frequency transaction function also supports its own location information obtained through Wifi, Bluetooth, GPS, etc. The processor of the smart terminal 34 updates and sends it to the NFC controller 31 through the pre-established first data transmission channel. The first data transmission channel may include an IIC interface.

[0082] The Profile installed and running in the COS of the SIM card 35 can send the location information obtained in the telecommunication instruction interacting with the baseband processor 36 to the NFC controller 31 through the first data transmission channel when necessary by requesting the eSIM location information publishing service provided by the eSIM COS. The first data transmission channel may include an internal interface.

[0083] In the NFC card transaction process, in addition to completing the routing and forwarding tasks according to the normal transaction process, the NFC controller 31 also makes a decision based on the location information of the card swiping device 32 and the location information of the eSIM Profile it receives, and the security transaction requirements of the location information provided by the remote background transaction server. If the security transaction requirements are not met, the NFC card transaction is interrupted and a notification is reported to the smart terminal 34 and the card swiping device 32. If the transaction requirements are met, the routing and forwarding tasks are still completed according to the normal transaction process.

[0084] Figure 4FIG. 1 is a schematic diagram of a structure of a transaction security identification device based on NFC in an embodiment of the present application. Figure 4 As shown, the NFC-based transaction security determination device 40 provided in the embodiment of the present application mainly includes: an information acquisition module 41 and a security determination module 42. The NFC-based transaction security determination device 40 is configured in the NFC controller of the smart terminal.

[0085] Among them, the information acquisition module 41 is used to obtain the first location information, the second location information, and the third location information during the process of executing a contactless card swiping transaction. The first location information is used to indicate the location information of the SIM card identified by the user in the smart terminal, the second location information is used to indicate the location information of the smart terminal, and the third location information is used to indicate the location information of the card swiping device; the security judgment module 42 is used to judge whether the current transaction is in a secure transaction environment based on the first location information, the second location information, and the third location information.

[0086] The embodiment of the present application provides a transaction security identification device based on NFC, which is configured in the NFC controller of the smart terminal. During the process of performing contactless card swiping transactions, the NFC controller obtains the first location information indicating the location of the user identifying the SIM card in the smart terminal, the second location information indicating the location of the smart terminal, and the third location information indicating the location of the card swiping device, and determines whether the current transaction is in a secure transaction environment based on the above three location information. The location information of multiple parties is integrated on the NFC controller and used as the basis for security judgment in the transaction process, which can effectively protect the asset security of users and operators.

[0087] In one possible implementation, the security judgment module 42 is specifically used to receive the transaction security requirements corresponding to the card swiping device; determine whether the distance between the first location information, the second location information, and the third location information is less than the distance threshold in the transaction security requirements; if so, determine that the current transaction is in a secure transaction environment; if not, determine that the current transaction is in an unsecure transaction environment, and interrupt the current transaction.

[0088] In a possible implementation, it also includes: a first data transmission channel establishing module, which is used to receive capability declaration information sent by the SIM card in the smart terminal before acquiring the first location information during the NFC embedded security element EE discovery process, wherein the capability declaration information includes a capability declaration field of the SIM location information; when the capability declaration field of the SIM location information indicates that the SIM card supports the SIM location information publishing service, establish a first data transmission channel with the SIM card in the smart terminal, and the first data transmission channel is used to acquire the first location information.

[0089] In a possible implementation, the location information of the SIM card in the smart terminal is obtained by the application in the SIM card when the service object executes the 7816 telecommunications instruction related to the location service, and the service object is obtained when the application requests the SIM location information publishing service.

[0090] In one possible implementation, the information verification module is used to receive verification information provided by the SIM through a first data transmission channel; perform integrity verification on the first location information, the second location information, and the third location information based on the verification information; if the verification passes, determine whether the current transaction is in a secure transaction environment based on the first location information, the second location information, and the third location information; if the verification fails, determine that the current transaction is in an unsecure transaction environment, and interrupt the current transaction.

[0091] In a possible implementation, it also includes: a second data transmission channel establishing module, which is used to receive smart terminal capability declaration information during the NFCEE discovery process before acquiring the second location information, wherein the capability declaration information includes a capability declaration field of the terminal location information; when the capability declaration field of the terminal location information indicates that the terminal supports the terminal location information publishing service, establish a second data transmission channel with the smart terminal, and the second data transmission channel is used to acquire the first location information.

[0092] In a possible implementation, the information acquisition module 41 is specifically configured to receive the third location information through a non-contact radio frequency channel with the card swiping device; and receive the transaction security requirement through a non-contact radio frequency channel with the card swiping device.

[0093] The NFC-based transaction security determination device provided in the embodiment of the present application can execute the NFC-based transaction security determination method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0094] Figure 5 is a schematic diagram of the structure of an electronic device provided in this embodiment. The electronic device may include a transaction security identification device based on NFC, such as Figure 5 As shown, the electronic device 500 includes a processor 510, a memory 520, an input device 530, and an output device 540; the number of the processor 510 in the electronic device can be one or more. Figure 5 A processor 510 is taken as an example; the processor 510, the memory 520, the input device 530 and the output device 540 in the electronic device can be connected via a bus or other means. Figure 5 The example of connecting through bus is taken in the following.

[0095] The memory 520, as a computer-readable storage medium, can be used to store software programs, computer executable programs and modules, such as program instructions / modules corresponding to the NFC-based transaction security identification method in the embodiment of the present invention. The processor 510 executes various functional applications and data processing of the electronic device by running the software programs, instructions and modules stored in the memory 520, that is, the NFC-based transaction security identification method provided in the embodiment of the present invention is implemented.

[0096] The memory 520 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system and at least one application required for a function; the data storage area may store data created according to the use of the terminal, etc. In addition, the memory 520 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. In some instances, the memory 520 may further include a memory remotely arranged relative to the processor 510, and these remote memories may be connected to the electronic device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0097] The input device 530 may be used to receive input digital or character information and generate key signal input related to user settings and function control of the electronic device, and may include a keyboard, a mouse, etc. The output device 540 may include a display device such as a display screen.

[0098] This embodiment also provides a storage medium containing computer executable instructions, which, when executed by a computer processor, are used to implement the NFC-based transaction security determination method provided in the embodiment of the present invention.

[0099] Of course, the storage medium containing computer executable instructions provided in an embodiment of the present invention is not limited to the above method operations, and the computer executable instructions can also execute related operations in the NFC-based transaction security determination method provided in any embodiment of the present invention.

[0100] Through the above description of the implementation mode, the technicians in the relevant field can clearly understand that the present invention can be implemented by means of software and necessary general hardware, and of course it can also be implemented by hardware, but in many cases the former is a better implementation mode. Based on such an understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as a computer floppy disk, read-only memory (ROM), random access memory (RAM), flash memory (FLASH), hard disk or optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods of various embodiments of the present invention.

[0101] It is worth noting that in the above-mentioned embodiment of the NFC-based transaction security identification device, the various units and modules included are only divided according to functional logic, but are not limited to the above-mentioned division, as long as the corresponding functions can be achieved; in addition, the specific names of the functional units are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of the present invention.

[0102] It should be noted that, in this article, relational terms such as "first" and "second" are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0103] The above is only a specific implementation of the present application, so that those skilled in the art can understand or implement the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein can be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to these embodiments herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A transaction security determination method based on NFC, characterized in that: The method is applied to an NFC controller of a smart terminal, and the method comprises: In the process of performing a contactless card swiping transaction, first location information, second location information, and third location information are obtained, wherein the first location information is used to indicate location information of a user identifying a SIM card in a smart terminal, the second location information is used to indicate location information of the smart terminal, and the third location information is used to indicate location information of a card swiping device; Based on the first location information, the second location information and the third location information, it is determined whether the current transaction is in a secure transaction environment.

2. The method according to claim 1, characterized in that Based on the first location information, the second location information, and the third location information, determining whether the current transaction is in a secure transaction environment includes: Receiving transaction security requirements corresponding to the card swiping device; Determine whether the distances between the first location information, the second location information and the third location information are less than a distance threshold in the transaction security requirement; If so, determining that the current transaction is in a secure transaction environment; If not, it is determined that the current transaction is in a non-safe transaction environment and the current transaction is terminated.

3. The method according to claim 2, characterized in that Before obtaining the first location information, the method further includes: In the process of performing NFC embedded security element EE discovery, receiving capability declaration information sent by the SIM card in the smart terminal, wherein the capability declaration information includes a capability declaration field of the SIM location information; In a case where the capability declaration field of the SIM location information indicates that the SIM card supports the SIM location information publishing service, a first data transmission channel is established with the SIM card in the smart terminal, where the first data transmission channel is used to obtain the first location information.

4. The method according to claim 3, characterized in that The location information of the SIM card in the smart terminal is obtained by the application in the SIM card when the service object executes the 7816 telecommunication instruction related to the location service, and the service object is obtained when the application requests the SIM location information publishing service.

5. The method according to claim 3, characterized in that: Also includes: receiving verification information provided by the SIM through the first data transmission channel; Performing integrity verification on the first location information, the second location information, and the third location information based on the verification information; If the verification is passed, judging whether the current transaction is in a safe transaction environment based on the first location information, the second location information and the third location information; If the verification fails, it is determined that the current transaction is in a non-secure transaction environment and the current transaction is terminated.

6. The method according to claim 2, characterized in that Before obtaining the second location information, the method further includes: In the NFCEE discovery process, receiving capability declaration information of the smart terminal, wherein the capability declaration information of the smart terminal includes a capability declaration field of the terminal location information; In a case where the capability declaration field of the terminal location information indicates that the smart terminal supports the terminal location information publishing service, a second data transmission channel is established with the smart terminal, where the second data transmission channel is used to obtain the first location information.

7. The method according to claim 2, characterized in that: Obtain third-party location information, including: receiving third location information through a contactless radio frequency channel with the card swiping device; Receiving the transaction security requirement corresponding to the card swiping device, including: The transaction security request is received through a contactless radio frequency channel with the card swiping device.

8. A transaction security identification device based on NFC, characterized in that: The device is configured in the NFC controller of the smart terminal, and the device includes: An information acquisition module, used to acquire first location information, second location information and third location information during the process of performing a contactless card swiping transaction, wherein the first location information is used to indicate location information of a user identifying a SIM card in a smart terminal, the second location information is used to indicate location information of the smart terminal, and the third location information is used to indicate location information of a card swiping device; A security judgment module is used to judge whether the current transaction is in a secure transaction environment based on the first location information, the second location information and the third location information.

9. An electronic device, characterized in that the device include: one or more processors; A storage device for storing one or more programs; When one or more programs are executed by one or more processors, the one or more processors implement the NFC-based transaction security determination method as claimed in any one of claims 1 to 7.

10. A storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the NFC-based transaction security determination method as claimed in any one of claims 1 to 7 is implemented.

Images