PIN code updating method and device based on terminal NFC and storage medium

Abstract

The invention provides a terminal NFC (Near Field Communication)-based PIN (Personal Identification Number) code updating method and device and a storage medium, and relates to financial science and technology or other related fields. According to the method, a communication channel is established between an application program and a chip card in terminal equipment through an NFC function on the card-holding user terminal equipment, after safety verification is carried out on a card-holding user, the card-holding user inputs a new PIN code in the application program and safely transmits the new PIN code to a core server side, the core server side calls a key management platform, and the key management platform carries out key management on the chip card. And generating an instruction message encrypted by the security key, and sending the instruction message to the chip card through the communication channel so as to update the off-line PIN of the chip card. Therefore, compared with an existing offline PIN updating scheme, the offline PIN updating method has the advantages that the situation that the user needs to reset and update the offline PIN code from an offline site to a card issuing bank outlet is avoided, so that the safety is guaranteed, the process is reduced, the consumed time is shortened, and the convenience and the service experience of the user are improved.

Description

Technical Field

[0001] The present application relates to financial technology or other related fields, and in particular to a PIN code updating method, device and storage medium based on terminal NFC. Background Art

[0002] When updating the PIN code of an existing chip card, the PIN code of the chip card is usually updated by relying on a fixed hardware device.

[0003] Fixed hardware devices are usually installed at bank counters or designated ATM machines. When users update the PIN code of their chip cards, they also need to bring all the required information to the counter during the bank branch's business hours to reset and update the PIN code.

[0004] Therefore, the existing chip card PIN code update solution has a poor service experience for users due to the cumbersome and time-consuming PIN code update process. Summary of the invention

[0005] The present application provides a PIN code update method, device and storage medium based on terminal NFC, which are used to solve the technical problem that the user's service experience is poor due to the cumbersome and time-consuming PIN code update process of the existing chip card PIN code update solution.

[0006] In a first aspect, the present application provides a PIN code update method based on terminal NFC, comprising:

[0007] The application running on the terminal device calls the NFC function of the terminal device to read the chip card identifier from the chip card, so as to establish a communication channel between the application and the chip card according to the chip card identifier;

[0008] The application performs a verification operation to obtain a verification result, and when the verification result is successful verification, receives an updated PIN code input by the current user in the application, the verification operation comprising at least one of the following: chip card verification and / or user identity verification;

[0009] The application generates a transaction message according to the updated PIN code, and sends the transaction message to the core server corresponding to the application, and the core server is used to generate a PIN code update instruction according to the transaction message;

[0010] The application receives the PIN code update instruction sent by the core server, and updates the pre-update PIN code in the chip card to the post-update PIN code through the communication channel.

[0011] In a second aspect, the present application provides a PIN code update method, comprising:

[0012] The core server receives the transaction message sent by the application;

[0013] The core server performs message verification on the transaction message to obtain a message verification result;

[0014] When the message verification result is successful, the core server calls the key management platform to generate a PIN code update instruction corresponding to the transaction message, and sends the PIN code update instruction to the application. The message verification includes at least one of the following: chip card identification verification and message content verification.

[0015] In a third aspect, the present application provides a PIN code update device based on terminal NFC, comprising:

[0016] A first acquisition module is used for an application running on a terminal device to call the NFC function of the terminal device and read the chip card identifier from the chip card to establish a communication channel between the application and the chip card according to the chip card identifier;

[0017] A first processing module is configured to cause the application to perform a verification operation to obtain a verification result, and when the verification result is successful, receive an updated PIN code input by the current user in the application, wherein the verification operation includes at least one of the following: chip card verification and / or user identity verification;

[0018] A first control module, configured for the application to generate a transaction message according to the updated PIN code, so as to send the transaction message to a core server corresponding to the application, wherein the core server is configured to generate a PIN code update instruction according to the transaction message;

[0019] The first execution module is used for the application to receive the PIN code update instruction sent by the core server, and update the pre-update PIN code in the chip card to the post-update PIN code through the communication channel.

[0020] In a fourth aspect, the present application provides a PIN code updating device, comprising:

[0021] The second acquisition module is used for the core server to receive the transaction message sent by the application;

[0022] A second processing module is used for the core server to perform message verification on the transaction message to obtain a message verification result;

[0023] The second execution module is used for the core server to call the key management platform to generate a PIN code update instruction corresponding to the transaction message when the message verification result is successful, and send the PIN code update instruction to the application, and the message verification includes at least one of the following: chip card identification verification, message content verification.

[0024] In a fifth aspect, the present application provides an electronic device, comprising: a processor, and a memory communicatively connected to the processor;

[0025] The memory stores computer-executable instructions;

[0026] The processor executes the computer-executable instructions stored in the memory to perform the above method.

[0027] In a sixth aspect, the present application provides a PIN code update system based on terminal NFC, including: a terminal device and a core system, wherein the terminal device is used to execute the PIN code update method based on terminal NFC, and the core system is used to execute the PIN code update method.

[0028] In a seventh aspect, the present application provides a computer-readable storage medium, characterized in that the computer-readable storage medium stores computer execution instructions, and the computer execution instructions are used to implement the above-mentioned method when executed by a processor.

[0029] In an eighth aspect, the present application provides a computer program product, characterized in that it includes a computer program, and the computer program implements the above method when executed by a processor.

[0030] The terminal NFC-based PIN code update method, device and storage medium provided in the present application establish a communication channel between the application in the terminal device and the chip card through the NFC function on the cardholder's terminal device, and after the cardholder is securely verified, the cardholder enters a new PIN code in the application and securely transmits the new PIN code to the core server. The core server calls the key management platform to generate a command message encrypted by a security key and sends it to the chip card through the communication channel to update the offline PIN of the chip card. Therefore, compared with the existing offline PIN update solution, the present application solution avoids the need for users to reset and update the offline PIN code at the issuing bank branch offline, thereby reducing the process and time while ensuring security, and improving convenience and user service experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0032] Figure 1 A schematic diagram of a PIN code update scenario provided in an embodiment of the present application.

[0033] Figure 2 Schematic diagram of the process of updating the PIN code based on terminal NFC provided in the embodiment of the present application Figure 1 .

[0034] Figure 3 Schematic diagram of the process of updating the PIN code based on terminal NFC provided in the embodiment of the present application Figure 2 .

[0035] Figure 4 A flowchart of a PIN code update method provided in an embodiment of the present application.

[0036] Figure 5 A schematic diagram of the structure of a PIN code updating device based on terminal NFC provided in an embodiment of the present application.

[0037] Figure 6 A schematic diagram of the structure of a PIN code updating device provided in an embodiment of the present application.

[0038] Figure 7 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application.

[0039] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0040] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0041] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of the relevant data comply with the relevant laws, regulations and standards of the relevant countries and regions, take necessary confidentiality measures, do not violate public order and good morals, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0042] In addition, this application involves conducting big data analysis of user information (including but not limited to personal biometrics, identity data, consumption data, asset data, electronic terminal operation data, etc.), and using artificial intelligence technology to make automated decisions, and making technical solutions that have a significant impact on personal rights and interests based on the results of automated decisions. The application provides users with corresponding operation entrances for them to choose to agree or reject the results of automated decisions; if the user chooses to reject, the expert decision-making process will be entered.

[0043] It should be noted that the PIN code update method, device and storage medium based on terminal NFC provided in the present application can be used in the field of financial technology, and can also be used in any field other than the field of financial technology. The application field of the PIN code update method, device and storage medium based on terminal NFC in the present application is not limited.

[0044] First, the terms involved in this application are explained:

[0045] Chip card: Also known as IC card (Integrated Circuit Card), as a card embedded with an integrated circuit chip, it is widely used in the financial field.

[0046] Offline PIN (Personal Identification Number): The password used by users when using chip cards for offline transactions.

[0047] NFC (Near Field Communication): is a short-range, high-frequency wireless communication technology that allows contactless point-to-point data transmission between electronic devices.

[0048] The chip cards issued by banks in various regions usually have an offline PIN function, which allows users to verify transactions by entering the offline PIN of the chip card into the POS terminal when offline. Since the offline PIN is stored in the chip of the chip card, the update of the offline PIN usually depends on the corresponding hardware equipment of the issuing bank, such as the card reader on the counter or ATM machine.

[0049] The existing offline PIN update solution for chip cards reads the chip card information through a card reader, and establishes a communication link with the issuing bank's back-end server based on the chip card information to update the password, that is, to achieve the offline PIN reset and update of the chip card. Therefore, the existing offline PIN update channels for chip cards are mainly at the issuing bank counter and designated ATM machines.

[0050] The working process of the existing offline PIN update solution is analyzed. When a user needs to reset or update the offline PIN of a chip card, the user also needs to confirm the business hours of the issuing bank branch and the required information, and bring the prepared required information to the issuing bank branch during the business hours to handle the offline PIN reset and update of the chip card at the issuing bank branch counter; for the way to reset the offline PIN through an ATM machine, when the user forgets the old password, that is, the offline PIN, it is also impossible to reset the password on the ATM machine. Therefore, the offline PIN reset and update of the chip card through the issuing bank counter and the designated ATM machine is cumbersome and time-consuming for the user, resulting in a poor service experience for the user.

[0051] The present application provides a PIN code update method, device and storage medium based on terminal NFC, aiming to solve the above technical problems in the prior art.

[0052] In order to better understand the solution of the embodiment of the present application, an application scenario involved in the embodiment of the present application is first introduced below.

[0053] like Figure 1 As shown, Figure 1 The schematic diagram of the PIN code update scenario provided in the embodiment of the present application, through the NFC function on the terminal device of the cardholder, a secure channel is established between the PIN code update application on the terminal device and the chip card, and connected to the mobile banking system. After the background service end of the mobile banking system calls the biometric identification system to complete the security authentication of the cardholder, the cardholder enters the new PIN code in the application, and the new PIN code is securely transmitted to the core service end corresponding to the core system through the mobile banking system. The core service end generates a command message encrypted by the security key by calling the key management platform, and forwards it to the chip card through the mobile banking system of the terminal device to update the offline PIN of the chip card, thereby avoiding the need for the user to reset and update the offline PIN code at the issuing bank branch offline, reducing the process and time consumption, while ensuring the security of password reset and update, improving convenience and user service experience.

[0054] The technical solution of the present application and how the technical solution of the present application solves the above-mentioned technical problems are described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0055] Figure 2 Schematic diagram of the process of updating the PIN code based on terminal NFC provided in the embodiment of the present application Figure 1 , applied to terminal equipment, combined with Figure 1and Figure 2 As shown, the method includes: S101. An application program running on a terminal device calls an NFC function of the terminal device to read a chip card identifier from a chip card, so as to establish a communication channel between the application program and the chip card according to the chip card identifier.

[0056] Specifically, when the cardholder needs to update and reset the PIN code of the chip card, the cardholder calls the NFC function of the terminal device through the application of the terminal device, and reads the chip card ATR (Automatic Teller Recognition) through the NFC function, that is, establishes a communication channel to read the chip card identification.

[0057] Among them, when establishing a communication channel, other short-range data transmission and data writing solutions can also be used, but solutions that only realize data transmission, such as Bluetooth transmission technology, are not used. Although Bluetooth transmission is a short-range wireless communication technology and a common function on terminal devices such as mobile phones, it can realize information interaction between different terminals, but Bluetooth can only transmit information and cannot write data. The NFC function on the mobile phone can realize information transmission and data writing, so as to provide support for the PIN code update of the chip card.

[0058] S102, the application performs a verification operation to obtain a verification result, and when the verification result is successful, receives an updated PIN code entered by the current user in the application, the verification operation comprising at least one of the following: chip card verification and / or user identity verification.

[0059] Specifically, after the communication channel between the application and the chip card is established, the chip card is connected to the backend server of the issuing bank through the application, that is, the mobile banking system is connected. After the cardholder's biometric information and chip card ID are collected through the terminal device, the collected biometric information and chip card ID are sent to the connected backend server.

[0060] Furthermore, based on the cardholder's characteristic information pre-stored in the background server and the corresponding chip card information, the collected biometric information and chip card identification are verified. After the verification is passed, the updated PIN code entered by the cardholder is obtained through the application on the terminal device.

[0061] S103: The application generates a transaction message according to the updated PIN code, and sends the transaction message to a core server corresponding to the application. The core server is used to generate a PIN code update instruction according to the transaction message.

[0062] Specifically, after the application on the terminal device obtains the updated PIN code, the updated PIN code is encrypted by the application to obtain the PIN code ciphertext, and then a transaction message is generated based on the PIN code ciphertext and the chip card identifier, and the transaction message is sent to the core server of the bank's core system.

[0063] Furthermore, the core server can extract the chip card identifier in the transaction message, and perform online verification on the chip card based on the tag names in the chip card identifier. After the online verification is passed, the PIN code ciphertext in the transaction message is extracted. The PIN code ciphertext is decrypted by calling the key management platform to obtain the updated PIN code, and then the updated PIN code is encrypted by the preset key to generate the corresponding PIN code update instruction, which is sent to the application on the terminal device.

[0064] S104, the application receives the PIN code update instruction sent by the core server, and updates the pre-update PIN code in the chip card to the post-update PIN code through the communication channel.

[0065] Specifically, after receiving the PIN code update instruction sent by the core server, the application on the terminal device writes the PIN code update instruction to the chip card based on the communication channel established by the NFC function of the terminal device. After receiving the PIN code update instruction sent by the terminal device, the chip in the chip card decrypts the PIN code update instruction through the preset key in the chip to obtain the updated PIN code as the PIN code of the current chip card, thereby realizing the offline PIN code update of the chip card.

[0066] The PIN code update method based on terminal NFC provided in this embodiment establishes a secure communication channel between the PIN code update application on the terminal device and the chip card through the NFC function on the terminal device of the cardholder user, and connects to the mobile banking system. After the biometric identification system in the mobile banking system completes the security authentication of the cardholder, the new PIN code is entered in the PIN code update application, and the new PIN code is securely transmitted to the core system through the mobile banking system. The key management platform is called through the core service end of the core system to generate a command message encrypted by the security key and send it to the chip card to update the offline PIN of the chip card. Therefore, compared with the existing offline PIN update solution, the present application solution avoids the need for users to reset and update the offline PIN code at the issuing bank branch offline, reduces the process and time, and improves the convenience and user service experience while ensuring the security of password reset and update.

[0067] Figure 3 Schematic diagram of the process of updating the PIN code based on terminal NFC provided in the embodiment of the present application Figure 2, applied to terminal devices such as Figure 3 As shown, based on Figure 2 In an embodiment, the method comprises: S201. An application program running on a terminal device calls an NFC function of the terminal device to read a chip card identifier from a chip card, so as to establish a communication channel between the application program and the chip card according to the chip card identifier.

[0068] Specifically, the content of this step is the same as that of step S101, and will not be repeated here.

[0069] S202: The application program reads chip card information from the chip card through the communication channel to perform chip card verification according to the chip card information.

[0070] Specifically, based on the communication channel established by the NFC function of the terminal device, the application on the terminal device reads and collects the chip card information, and based on the chip card information, performs DDA / CDA chip card verification on the chip card to verify whether the current chip card is a counterfeit card. If the current chip card verification passes, the cardholder's identity is authenticated; if the current chip card verification fails, it returns to the application and prompts the cardholder that the verification failed.

[0071] Among them, the DDA (Dynamic Data Authentication) / CDA (Combined Dynamic Data Authentication) provided in this embodiment requires the terminal device to obtain the dynamic signature in the chip card information. The dynamic signature is generated by the chip card private key signing the dynamic transaction data. The dynamic transaction data is the only data generated by the terminal device and the chip card for the current transaction. The terminal device verifies the dynamic signature by obtaining the chip card public key from the chip card information; CDA chip card verification combines the dynamic signature generation with the chip card application ciphertext to ensure that the application ciphertext returned during the card behavior analysis comes from a valid chip card. If the verification is successful, it is confirmed that the current chip card is not a counterfeit card.

[0072] S203, obtaining biometric information of the current user of the application, and calling the background server of the application to authenticate the identity of the user using the biometric information and preset biometrics in the biometric recognition system.

[0073] Specifically, after completing chip card verification based on the collected chip card information and passing the chip card verification, the application obtains the current cardholder's biometric features such as face data and fingerprint data by calling the camera or fingerprint collector on the terminal device, and generates corresponding biometric information based on the obtained biometric features.

[0074] Among them, the application sends the biometric information to the issuing bank server corresponding to the mobile banking system, that is, the background service end, and the biometric information is compared and matched with the preset biometrics in the biometric recognition system through the background service end. After the match is successful, the current cardholder's biometric identity authentication is passed, thereby ensuring the use of the chip card by everyone and improving security.

[0075] S204, calling the background server to send a text message verification code to a preset terminal corresponding to the chip card, and performing identity authentication according to the text message verification code.

[0076] Specifically, after the identity authentication of the current cardholder is passed based on the current user's biometric information, the background server retrieves the corresponding contact information such as mobile phone number in the contact database based on the successfully matched biometric information, and sends a text message verification code to the preset terminal corresponding to the mobile phone number.

[0077] Furthermore, the contact database stores the biometric information and contact information of different users in advance. The received SMS verification code is input into the application on the terminal device. If the SMS verification codes are the same, the SMS identity verification of the current cardholder is passed.

[0078] Furthermore, of course, the background server can also receive the pre-update PIN code entered by the current user in the application, and call the background server to perform identity authentication based on the pre-update PIN code, thereby further improving security through multiple identity authentication of the cardholder.

[0079] S205. When the verification result is successful, receiving the updated PIN code input by the current user in the application, and the application encrypts the updated PIN code to obtain an encrypted PIN code.

[0080] Specifically, when both the chip card verification and the user identity verification are verified, the application on the terminal device obtains the new PIN code entered by the user, that is, the updated PIN code, and the application encrypts the updated PIN code with a preset key to obtain the encrypted PIN code. When the user enters the updated PIN code, it is entered through the security keyboard, and the digital positions on the security keyboard are randomly generated to improve the security of the input password, thereby ensuring the use of the chip card by all users and improving security.

[0081] S206: The application generates the transaction message according to the chip card identifier and the encrypted PIN code, and sends the transaction message to the core server corresponding to the application.

[0082] Specifically, after the application completes encryption of the updated PIN code and obtains the corresponding encrypted PIN code, the chip card information is generated according to the obtained chip card identifier, and a transaction message is generated according to the chip card information and the encrypted PIN code, wherein the chip card information includes the card tag to be verified, and the card tag information in the chip card information is as shown in the following table:

[0083]

[0084] Furthermore, after receiving the transaction message sent by the application, the core server of the core system extracts the chip card information in the transaction message, and calculates through a preset algorithm based on the data corresponding to each tag in the chip card information to obtain the corresponding calculation result. If the calculation result is consistent with the preset calculation result, the online verification passes.

[0085] Furthermore, after the online verification is passed, the core server extracts the PIN code ciphertext, that is, the encrypted PIN code, in the transaction message. The core server decrypts the encrypted PIN code by calling the key of the key management platform to obtain the updated PIN code, generates an update script according to the updated PIN code, and encrypts the update script with the MAC key to obtain an encrypted update script, wherein the encrypted update script includes the PIN code update instruction, and sends the encrypted update script to the application on the terminal device.

[0086] S207: The application receives the encrypted update script, and decrypts the encrypted update script according to the MAC key to obtain an update script, wherein the update script includes the PIN code update instruction.

[0087] Specifically, after the application on the terminal device receives the encrypted update script forwarded by the core server through the mobile banking system, the application encrypts the update script with the corresponding MAC key and decrypts it to obtain the PIN code update instruction in the update script, where the PIN code update instruction is used to indicate the PIN UNBLOCK command message encoding. The PINUNBLOCK command message encoding is shown in the following table:

[0088]

[0089] Furthermore, the application decrypts the ciphertext again through the MAC key, so that the obtained PIN code update instruction can improve the convenience of PIN code update while ensuring the security of password and process information.

[0090] S208. Execute the update script on the chip card through the communication channel to update the pre-update PIN code in the chip card to the post-update PIN code.

[0091] Specifically, after the application of the terminal device obtains the PIN code update instruction in the update script, the update script is transmitted to the chip of the chip card through the communication channel established by the NFC function of the terminal device, so that when the chip executes the update script corresponding to the issuing bank, the update script is decrypted by the MAC key in the chip card to update the offline PIN of the chip card, that is, to update the PIN code before the update in the chip card to the PIN code after the update.

[0092] The PIN code update method based on terminal NFC provided in this embodiment establishes a secure channel between the application in the terminal device and the chip card through the NFC function on the terminal device of the cardholder user, and connects to the core server. After the application calls the biometric recognition system to authenticate the cardholder user, the user enters a new PIN code in the application and transmits the new PIN code securely to the core server. The core server calls the key management platform to generate a command message encrypted by the security key and sends it to the chip card to update the offline PIN of the chip card. Therefore, compared with the existing offline PIN update solution, the present application solution avoids the need for users to reset and update the offline PIN code at the issuing bank branch offline, thereby reducing the process and time while ensuring security, and improving convenience and user service experience.

[0093] Figure 4 A flowchart of a PIN code update method provided in an embodiment of the present application is applied to a core server, such as Figure 4 As shown, based on Figure 3 In an embodiment, the method comprises: S301. The core server receives a transaction message sent by an application program, and performs message verification on the transaction message to obtain a message verification result.

[0094] Specifically, after the application generates a transaction message based on the chip card identifier and encrypted PIN code, and sends the transaction message to the core server of the bank's core system corresponding to the application, the core server extracts the chip card identifier in the transaction message, and based on the data corresponding to the chip card identifier, performs calculations through the preset algorithm in the core server to obtain the corresponding calculation results, that is, message verification includes chip card identifier verification and message content verification.

[0095] Among them, if the calculation result is consistent with the preset calculation result, the online verification is passed through the message verification result indication; if the calculation result is inconsistent with the preset calculation result, the online verification fails through the message verification result indication, and returns to the application of the terminal device to remind the cardholder that the verification failed.

[0096] S302. When the message verification result is successful, the core server calls the key management platform to generate an encryption update script corresponding to the transaction message, and sends the encryption update script to the application.

[0097] Specifically, when the calculation result is consistent with the preset calculation result and the message verification result indicates that the online verification is passed, the core server extracts the encrypted PIN code in the transaction message, and the core server decrypts the encrypted PIN code by calling the key of the key management platform to obtain the updated PIN code.

[0098] Furthermore, a PIN code update instruction is generated according to the updated PIN code, an update script is generated according to the PIN code update instruction, and the update script is encrypted by the MAC key to obtain an encrypted update script, wherein the encrypted update script includes the PIN code update instruction, and the encrypted update script is forwarded to the application on the terminal device through the mobile banking system.

[0099] S303. When the core server receives the PIN code update success information sent by the application, it calls the key management platform to decrypt the encrypted PIN code in the transaction message to obtain the updated PIN code.

[0100] Specifically, after the application receives the encrypted update script sent by the core server, the application decrypts the encrypted update script according to the MAC key, obtains the PIN code update instruction in the update script, and sends the update script to the chip card through the communication channel, so that the chip card can execute the update script to update the pre-update PIN code in the chip card to the post-update PIN code. After that, the chip card feeds back an update success signal to the application through the communication channel, and the application generates PIN code update success information based on the update success signal and sends it to the core server.

[0101] Furthermore, when the core server receives the PIN code update success information, the core server decrypts the encrypted PIN code based on the extracted encrypted PIN code in the transaction message by calling the key of the key management platform to obtain the updated PIN code.

[0102] S304: The core server updates the locally stored PIN code before update to the PIN code after update.

[0103] Specifically, after the core server obtains the updated PIN code, it searches the local database for the same card identifier according to the extracted chip card identifier, obtains the corresponding PIN code according to the same card identifier, and replaces the obtained corresponding PIN code with the updated PIN code to update the local database in the core server, so that in the process of updating the PIN code, the convenience is improved while ensuring security. Among them, the local database pre-stores the card identifiers and corresponding PIN codes of different users.

[0104] The PIN code update method provided in this embodiment receives the transaction message sent by the application of the device terminal through the core server, and when the transaction message is successfully verified by the core server, the core server calls the key management platform to generate an instruction message encrypted by the security key, that is, the PIN code update instruction, and sends it to the chip card through the device terminal to update the offline PIN of the chip card. Therefore, compared with the existing offline PIN update solution, the present application solution avoids the need for users to reset and update the offline PIN code at the issuing bank branch offline, thereby reducing the process and time while ensuring security, and improving convenience and user service experience.

[0105] Figure 5 This is a schematic diagram of the structure of the PIN code update device based on terminal NFC provided in the embodiment of the present application. Figure 5 As shown, the PIN code update device 50 based on terminal NFC may include: a first acquisition module 501, a first processing module 502, a first control module 503 and a first execution module 504, wherein:

[0106] A first acquisition module 501 is used for an application running on a terminal device to call the NFC function of the terminal device and read the chip card identifier from the chip card to establish a communication channel between the application and the chip card according to the chip card identifier;

[0107] A first processing module 502 is configured for the application to perform a verification operation to obtain a verification result, and when the verification result is successful, receive an updated PIN code input by the current user in the application, wherein the verification operation includes at least one of the following: chip card verification and / or user identity verification;

[0108] A first control module 503, configured for the application to generate a transaction message according to the updated PIN code, so as to send the transaction message to a core server corresponding to the application, wherein the core server is configured to generate a PIN code update instruction according to the transaction message;

[0109] The first execution module 504 is used for the application to receive the PIN code update instruction sent by the core server, and update the pre-update PIN code in the chip card to the post-update PIN code through the communication channel.

[0110] Optionally, the first control module 503 is specifically configured for the application to encrypt the updated PIN code to obtain an encrypted PIN code;

[0111] The application generates a transaction message according to the encrypted PIN code.

[0112] Optionally, the first control module 503 is specifically configured for the application to generate the transaction message according to the chip card identifier and the encrypted PIN code.

[0113] Optionally, a first execution module 504 is specifically configured for the application to receive the encrypted update script;

[0114] The application program decrypts the encrypted update script according to the MAC key to obtain an update script, wherein the update script includes the PIN code update instruction;

[0115] The update script is executed on the chip card via the communication channel.

[0116] Optionally, the first processing module 502 is specifically configured for the application to read chip card information from the chip card through the communication channel, so as to perform chip card verification according to the chip card information.

[0117] Optionally, the first processing module 502 is specifically used to obtain biometric information of the current user of the application, and call the background server of the application to authenticate the identity of the user with the biometric information and the preset biometrics in the biometric recognition system;

[0118] and / or, receiving a pre-update PIN code entered by the current user in the application, and calling the background server to perform identity authentication according to the pre-update PIN code;

[0119] And / or, calling the background service end to send a text message verification code to a preset terminal corresponding to the chip card, and performing identity authentication according to the text message verification code.

[0120] Figure 6 This is a schematic diagram of the structure of the PIN code update device provided in the embodiment of the present application. Figure 6 As shown, the PIN code updating device 60 may include: a second acquisition module 601, a second processing module 602 and a second execution module 603, wherein:

[0121] The second acquisition module 601 is used for the core server to receive the transaction message sent by the application.

[0122] The second processing module 602 is used for the core server to perform message verification on the transaction message to obtain a message verification result.

[0123] The second execution module 603 is used for the core server to call the key management platform to generate a PIN code update instruction corresponding to the transaction message when the message verification result is successful, and send the PIN code update instruction to the application, and the message verification includes at least one of the following: chip card identification verification, message content verification.

[0124] Optionally, the second execution module 60 is specifically configured to call the key management platform to generate an encryption update script corresponding to the transaction message, and send the encryption update script to the application;

[0125] The generation process of the encrypted update script includes:

[0126] Decrypting the encrypted PIN code in the transaction message to obtain an updated PIN code, and generating a PIN code update instruction according to the updated PIN code;

[0127] An update script is generated according to the PIN code update instruction, and the update script is encrypted by a MAC key to obtain the encrypted update script.

[0128] Optionally, the second execution module 60 is further configured to, when the core server receives the PIN code update success information sent by the application, call the key management platform to decrypt the encrypted PIN code in the transaction message to obtain the updated PIN code;

[0129] The core server updates the locally stored pre-update PIN code to the post-update PIN code.

[0130] The present application also provides a PIN code update system based on terminal NFC, including: a terminal device and a core system, the terminal device is used to perform the above Figure 2 Examples and Figure 3 The method described in the embodiment, the core system is used to execute the above Figure 4 The method described in the embodiment.

[0131] Figure 7 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application. Figure 7 As shown, the electronic device may include: a transceiver 701 , a processor 702 and a memory 703 .

[0132] The processor 702 executes the computer-executable instructions stored in the memory, so that the processor 702 executes the solution in the above embodiment. The processor 702 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), or other programmable logic devices, discrete gates or transistor logic devices, and discrete hardware components.

[0133] The memory 703 is connected to the processor 702 via a system bus and completes communication between them. The memory 703 is used to store computer program instructions.

[0134] The transceiver 701 may be used to obtain tasks to be executed and configuration information of the tasks to be executed.

[0135] The system bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, the bus in the drawings of the present application is not limited to only one bus or one type of bus. The system bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus. The transceiver is used to realize the communication between the database access device and other computers (such as clients, read-write libraries, and read-only libraries).

[0136] The memory may include random access memory (RAM) and may also include non-volatile memory (VNM).

[0137] The embodiment of the present application also provides a computer-readable storage medium, in which computer instructions are stored. When the computer instructions are executed on a computer, the computer executes the technical solution of the above-mentioned PIN code update method based on terminal NFC.

[0138] An embodiment of the present application also provides a computer program product, which includes a computer program stored in a computer-readable storage medium. At least one processor can read the computer program from the computer-readable storage medium. When the at least one processor executes the computer program, the technical solution of the PIN code update method based on terminal NFC in the above embodiment can be implemented.

[0139] It should be noted that, for the aforementioned method embodiments, for the sake of simplicity, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the described order of actions, because according to the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all optional embodiments, and the actions and modules involved are not necessarily required by the present application.

[0140] It should be further noted that, although the various steps in the flowchart are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless there is a clear description in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a portion of the steps in the flowchart may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these sub-steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a portion of the sub-steps or stages of other steps.

[0141] It should be understood that the above-mentioned device embodiments are only illustrative, and the device of the present application can also be implemented in other ways. For example, the division of units / modules in the above-mentioned embodiments is only a logical function division, and there may be other division methods in actual implementation. For example, multiple units, modules or components can be combined, or can be integrated into another system, or some features can be ignored or not executed.

[0142] In addition, unless otherwise specified, each functional unit / module in each embodiment of the present application may be integrated into one unit / module, each unit / module may exist physically separately, or two or more units / modules may be integrated together. The above-mentioned integrated unit / module may be implemented in the form of hardware or in the form of a software program module.

[0143] If the integrated unit / module is implemented in the form of hardware, the hardware may be a digital circuit, an analog circuit, etc. The physical implementation of the hardware structure includes but is not limited to transistors, memristors, etc. Unless otherwise specified, the processor may be any appropriate hardware processor, such as a CPU, a GPU, an FPGA, a DSP, an ASIC, etc. Unless otherwise specified, the storage unit may be any appropriate magnetic storage medium or magneto-optical storage medium, such as a resistive random access memory (RRAM), a dynamic random access memory (DRAM), a static random access memory (SRAM), an enhanced dynamic random access memory (EDRAM), a high-bandwidth memory (HBM), a hybrid memory cube (HMC), etc.

[0144] If the integrated unit / module is implemented in the form of a software program module and sold or used as an independent product, it can be stored in a computer-readable memory. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a memory, including a number of instructions to enable a computer device (which can be a personal computer, server or network device, etc.) to execute all or part of the steps of the various embodiments of the present application. The aforementioned memory includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, disk or optical disk and other media that can store program codes.

[0145] In the above embodiments, the description of each embodiment has its own emphasis. For the part not described in detail in a certain embodiment, please refer to the relevant description of other embodiments. The technical features of the above embodiments can be combined arbitrarily. In order to make the description concise, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0146] Those skilled in the art will readily appreciate other embodiments of the present application after considering the specification and practicing the invention disclosed herein. The present application is intended to cover any modification, use or adaptation of the present application, which follows the general principles of the present application and includes common knowledge or customary techniques in the art that are not disclosed in the present application. The specification and examples are intended to be exemplary only, and the true scope and spirit of the present application are indicated by the following claims.

[0147] It should be understood that the present application is not limited to the precise structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present application is limited only by the appended claims.

Claims

1. A PIN code update method based on terminal NFC, characterized in that: include: The application running on the terminal device calls the NFC function of the terminal device to read the chip card identifier from the chip card, so as to establish a communication channel between the application and the chip card according to the chip card identifier; The application performs a verification operation to obtain a verification result, and when the verification result is successful verification, receives an updated PIN code input by the current user in the application, the verification operation comprising at least one of the following: chip card verification and / or user identity verification; The application generates a transaction message according to the updated PIN code, and sends the transaction message to the core server corresponding to the application, and the core server is used to generate a PIN code update instruction according to the transaction message; The application receives the PIN code update instruction sent by the core server, and updates the pre-update PIN code in the chip card to the post-update PIN code through the communication channel.

2. The method according to claim 1, characterized in that: The application generates a transaction message according to the updated PIN code, including: The application encrypts the updated PIN code to obtain an encrypted PIN code; The application generates a transaction message according to the encrypted PIN code.

3. The method according to claim 2, characterized in that The application generates a transaction message according to the encrypted PIN code, including: The application generates the transaction message according to the chip card identifier and the encrypted PIN code.

4. The method according to claim 2, characterized in that: The application receives a PIN code update instruction sent by the core server, including: The application receives the encrypted update script; The application program decrypts the encrypted update script according to the MAC key to obtain an update script, wherein the update script includes the PIN code update instruction; The update script is executed on the chip card via the communication channel.

5. The method according to any one of claims 1 to 4, characterized in that The chip card verification comprises: The application reads chip card information from the chip card through the communication channel to perform chip card verification according to the chip card information.

6. The method according to any one of claims 1 to 4, characterized in that The identity verification includes: Obtaining biometric information of the current user of the application, and calling the background server of the application to authenticate the identity of the user by using the biometric information and the preset biometrics in the biometric recognition system; and / or, receiving a pre-update PIN code entered by the current user in the application, and calling the background server to perform identity authentication according to the pre-update PIN code; And / or, calling the background service end to send a text message verification code to a preset terminal corresponding to the chip card, and performing identity authentication according to the text message verification code.

7. A PIN code updating method, characterized in that: include: The core server receives the transaction message sent by the application; The core server performs message verification on the transaction message to obtain a message verification result; When the message verification result is successful, the core server calls the key management platform to generate a PIN code update instruction corresponding to the transaction message, and sends the PIN code update instruction to the application. The message verification includes at least one of the following: chip card identification verification and message content verification.

8. The method according to claim 7, characterized in that The calling of the key management platform to generate a PIN code update instruction corresponding to the transaction message, and sending the PIN code update instruction to the application program, includes: Calling the key management platform to generate an encryption update script corresponding to the transaction message, and sending the encryption update script to the application; The generation process of the encrypted update script includes: Decrypting the encrypted PIN code in the transaction message to obtain an updated PIN code, and generating a PIN code update instruction according to the updated PIN code; An update script is generated according to the PIN code update instruction, and the update script is encrypted by a MAC key to obtain the encrypted update script.

9. The method according to claim 7 or 8, characterized in that: Also includes: When the core server receives the PIN code update success information sent by the application, it calls the key management platform to decrypt the encrypted PIN code in the transaction message to obtain the updated PIN code; The core server updates the locally stored pre-update PIN code to the post-update PIN code.

10. A PIN code updating device based on terminal NFC, characterized in that: include: A first acquisition module is used for an application running on a terminal device to call the NFC function of the terminal device and read the chip card identifier from the chip card to establish a communication channel between the application and the chip card according to the chip card identifier; A first processing module is configured to cause the application to perform a verification operation to obtain a verification result, and when the verification result is successful, receive an updated PIN code input by the current user in the application, wherein the verification operation includes at least one of the following: chip card verification and / or user identity verification; A first control module, configured for the application to generate a transaction message according to the updated PIN code, so as to send the transaction message to a core server corresponding to the application, wherein the core server is configured to generate a PIN code update instruction according to the transaction message; The first execution module is used for the application to receive the PIN code update instruction sent by the core server, and update the pre-update PIN code in the chip card to the post-update PIN code through the communication channel.

11. A PIN code updating device, characterized in that: include: The second acquisition module is used for the core server to receive the transaction message sent by the application; The second processing module is used for the core server to perform message verification on the transaction message to obtain a message verification result; The second execution module is used for the core server to call the key management platform to generate a PIN code update instruction corresponding to the transaction message when the message verification result is successful, and send the PIN code update instruction to the application, and the message verification includes at least one of the following: chip card identification verification, message content verification.

12. An electronic device, characterized in that: include: A processor, and a memory communicatively connected to the processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to execute the method of any one of claims 1 to 6, or executes the method of any one of claims 7 to 9.

13. A PIN code update system based on terminal NFC, characterized in that: include: A terminal device and a core system, wherein the terminal device is used to execute the method described in any one of claims 1 to 6, and the core system is used to execute the method described in any one of claims 7 to 9.

14. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, which are used to implement the method according to any one of claims 1 to 9 when executed by a processor.

15. A computer program product, characterized in that The invention comprises a computer program, which, when executed by a processor, implements the method according to any one of claims 1 to 6, or executes the method according to any one of claims 7 to 9.

Images