POS key processing method, bank terminal, POS terminal and system
By maintaining the relevant relationships on the bank side and generating a unique identifier, the POS key is not recycled and issuing, solving the problems of high difficulty in operation and maintenance, low efficiency and security in the existing technology, and improving the efficiency and security of key issuance.
Patent Information
- Application Number
- CN202411869641.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-18
- Publication Date
- 2025-04-01
- Estimated Expiration
- 2044-12-18
AI Technical Summary
The existing POS key download method requires the POS terminal to be recycled to the bank and then connected to the computer to fill the key, which makes it difficult to operate and maintain, low efficiency and security.
By maintaining the relevant relationships on the bank side, generating a merchant contract, POS master key and a unique identifier of the POS terminal, and binding them, the key issuance can be done without recycling the POS terminal.
It reduces the difficulty of operation and maintenance, improves the efficiency and security of POS key issuance, and avoids the cumbersome process of recycling and connection.
Smart Images

Figure CN119743301A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of Internet of Things, and in particular to a POS key processing method, a bank terminal, a POS terminal and a system. Background Art
[0002] This section is intended to provide a background or context to the embodiments of the invention recited in the claims. No admission is made that the description herein is prior art by inclusion in this section.
[0003] In the commercial bank acquiring system, when a commercial bank with an operating license issued by a regulatory agency conducts acquiring business, business personnel will distribute smart POS terminals (POS machines) to merchants. After installing the cash register application, the POS also needs to download the POS master key generated by the bank acquiring system. Only with the master key can the POS machine perform operations such as sign-in. Otherwise, transactions sent by a POS machine without a master key will be rejected by the acquiring system, resulting in failed sign-in and inability to conduct subsequent transactions.
[0004] In general, POS business personnel need to first develop offline merchants, contact willing merchants to carry out marketing activities, and collect relevant merchant information, open merchant contracts and terminal contracts on the merchant management end. After the terminal contract is in place, the merchant can distribute POS machines. After the business personnel maintain the relevant merchant information, deduction rate and other parameters, the merchant management end will report the relevant merchant information to UnionPay to meet regulatory requirements. At the same time, the merchant management end pushes the relevant merchant information to POSp, and POSp (acquiring management system) will generate the POS installation master key based on the data pushed by the merchant management end. After the POS key is generated, it is downloaded through the merchant management page, and then loaded into the POS machine through the download tool provided by the manufacturer to complete the key loading of the POS machine.
[0005] The existing POS key download method is mainly that after the POS terminal is distributed to the merchant, the business personnel will recycle the POS terminal to the bank and download the master key through the computer connection software. The smart POS is connected to the computer through a data cable, the corresponding manufacturer driver is installed, and the download software provided by the manufacturer is installed to download the merchant key file from the merchant system. The bank employee's office computer is installed with a security client, and the file cannot be copied directly. It is necessary to go through the internal approval process to take the merchant key file out of the internal system. After these conditions are prepared, the POS master key can be downloaded to the POS machine through the download software. After signing in, the POS machine can be used normally to send transactions.
[0006] Therefore, the existing POS machines need to be returned to the bank and the keys need to be re-installed through software, which has the problems of difficult maintenance, low efficiency and low security. Summary of the invention
[0007] The embodiment of the present invention provides a method for processing a POS key, which is applied to a bank side, and is used to download and fill a master key by connecting a computer to software without distributing a POS terminal to a merchant and then returning it to the bank. The POS terminal can be distributed to the merchant for use by maintaining a relevant relationship through the bank side before distribution. The method includes:
[0008] Receive merchant information and smart POS terminal information;
[0009] Generate a merchant contract, a POS master key and a unique identifier of the POS terminal according to the merchant information and the smart POS terminal information;
[0010] Binding the POS master key to the unique identifier of the POS terminal to obtain the relationship between the POS master key and the unique identifier of the POS terminal; binding the merchant contract to the unique identifier of the POS terminal to obtain the relationship between the merchant contract and the unique identifier of the POS terminal;
[0011] The current POS master key is obtained according to the unique identifier of the current POS terminal and the relationship between the POS master key and the unique identifier of the POS terminal; the unique identifier of the current POS terminal is included in the key issuance request and is sent by the intelligent POS terminal;
[0012] Verify the unique identifier of the current POS terminal according to the relationship between the merchant contract and the unique identifier of the POS terminal;
[0013] After the verification is passed, the current POS master key is sent to the intelligent POS terminal.
[0014] The embodiment of the present invention also provides a method for processing a POS key, which is applied to an intelligent POS terminal, and is used to download and fill a master key by connecting a computer to a software without distributing the POS terminal to a merchant and then returning it to a bank. The POS terminal can be distributed to the merchant for use by maintaining a relevant relationship on the bank side before distribution. The method includes:
[0015] The merchant information and the smart POS terminal information are sent to the bank end; the bank end is used to generate a merchant contract, a POS master key and a unique identifier of the POS terminal according to the merchant information and the smart POS terminal information; the POS master key is bound to the unique identifier of the POS terminal to obtain the relationship between the POS master key and the unique identifier of the POS terminal; the merchant contract is bound to the unique identifier of the POS terminal to obtain the relationship between the merchant contract and the unique identifier of the POS terminal;
[0016] Get the unique ID of the current POS terminal;
[0017] Generate a key issuance request based on the unique identifier of the current POS terminal;
[0018] The key issuance request is sent to the bank end; the bank end is also used to obtain the current POS master key according to the unique identification of the current POS terminal and the relationship between the POS master key and the unique identification of the POS terminal; the unique identification of the current POS terminal is verified according to the relationship between the merchant contract and the unique identification of the POS terminal; after the verification is passed, the current POS master key is sent to the smart POS terminal.
[0019] The embodiment of the present invention also provides a POS key processing bank end, which is used to download and fill the master key through a computer connection software method without distributing the POS terminal to the merchant and then returning it to the bank. It only needs to maintain the relevant relationship through the bank end before distribution, and the POS terminal can be distributed to the merchant for use. The bank end includes:
[0020] A receiving unit, used for receiving merchant information and intelligent POS terminal information;
[0021] A first generating unit, configured to generate a merchant contract, a POS master key and a unique identifier of the POS terminal according to the merchant information and the intelligent POS terminal information;
[0022] A relationship establishing unit, used to bind the POS master key with the unique identifier of the POS terminal to obtain the relationship between the POS master key and the unique identifier of the POS terminal; bind the merchant contract with the unique identifier of the POS terminal to obtain the relationship between the merchant contract and the unique identifier of the POS terminal;
[0023] A master key determination unit, configured to obtain a current POS master key according to a unique identifier of a current POS terminal and a relationship between the POS master key and the unique identifier of the POS terminal; the unique identifier of the current POS terminal is included in a key issuance request and is sent by the intelligent POS terminal;
[0024] A verification unit, used to verify the unique identifier of the current POS terminal according to the relationship between the merchant contract and the unique identifier of the POS terminal;
[0025] The sending unit is used to send the current POS master key to the intelligent POS terminal after the verification is passed.
[0026] The embodiment of the present invention also provides a POS key processing method, which is applied to an intelligent POS terminal, and is used to download and fill the master key by connecting the computer software to the bank without distributing the POS terminal to the merchant and then recovering it. The POS terminal can be distributed to the merchant for use only by maintaining the relevant relationship through the bank before distribution. The intelligent POS terminal includes:
[0027] The sending unit is used to send the merchant information and the intelligent POS terminal information to the bank end; the bank end is used to generate a merchant contract, a POS master key and a unique identifier of the POS terminal according to the merchant information and the intelligent POS terminal information; the POS master key is bound to the unique identifier of the POS terminal to obtain a relationship between the POS master key and the unique identifier of the POS terminal; the merchant contract is bound to the unique identifier of the POS terminal to obtain a relationship between the merchant contract and the unique identifier of the POS terminal;
[0028] An acquisition unit, used to acquire a unique identifier of the current POS terminal;
[0029] The second generating unit is used to generate a key issuing request according to the unique identifier of the current POS terminal;
[0030] The initiating unit is used to send a key issuance request to the bank end; the bank end is also used to obtain the current POS master key according to the unique identification of the current POS terminal and the relationship between the POS master key and the unique identification of the POS terminal; verify the unique identification of the current POS terminal according to the relationship between the merchant contract and the unique identification of the POS terminal; after the verification is passed, send the current POS master key to the smart POS terminal.
[0031] The embodiment of the present invention also provides a POS key processing method, which is applied to a system, and is used to download and fill the master key by connecting the computer software to the bank without distributing the POS terminal to the merchant and then recovering it. The POS terminal can be distributed to the merchant for use only by maintaining the relevant relationship through the bank before distribution. The system includes:
[0032] The bank side of the POS key processing as described above, and the smart POS terminal of the POS key processing as described above.
[0033] An embodiment of the present invention further provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the above-mentioned POS key processing method when executing the computer program.
[0034] The embodiment of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the above-mentioned POS key processing method is implemented.
[0035] An embodiment of the present invention further provides a computer program product, the computer program product comprising a computer program, and the computer program implements the above-mentioned POS key processing method when executed by a processor.
[0036] Compared with the technical solution in the prior art that requires the POS terminal to be distributed to the merchant and then recovered to the bank for downloading and filling the master key through computer connection software, which has great difficulty in operation and maintenance and low efficiency and security of POS key distribution, the POS key processing solution provided by the embodiment of the present invention has the beneficial technical effect of: there is no need to distribute the POS terminal to the merchant and then recover it to the bank for downloading and filling the master key through computer connection software. It only needs to maintain the relevant relationship through the bank before distribution, and the POS terminal can be distributed to the merchant for use, which reduces the difficulty of operation and maintenance and improves the efficiency and security of POS key distribution. BRIEF DESCRIPTION OF THE DRAWINGS
[0037] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the prior art descriptions. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. In the drawings:
[0038] Figure 1 The figure is a flow chart of a method for processing a POS key applied to a bank side in an embodiment of the present invention;
[0039] Figure 2 A schematic flow chart of a method for processing a POS key in another embodiment of the present invention;
[0040] Figure 3 A schematic flow chart of a method for processing a POS key in another embodiment of the present invention;
[0041] Figure 4 The present invention is a flowchart of a method for processing a POS key applied to an intelligent POS terminal in an embodiment of the present invention;
[0042] Figure 5 This is a schematic diagram of the structure of the bank end for processing the POS key in an embodiment of the present invention;
[0043] Figure 6 It is a structural schematic diagram of an intelligent POS terminal for processing POS keys in an embodiment of the present invention;
[0044] Figure 7 Schematic diagram of the structure of the POS key processing system in an embodiment of the present invention;
[0045] Figure 8 It is a schematic diagram of the structure of a POS key processing system in another embodiment of the present invention. DETAILED DESCRIPTION
[0046] To make the purpose, technical solution and advantages of the embodiments of the present invention more clear, the embodiments of the present invention are further described in detail below in conjunction with the accompanying drawings. Here, the exemplary embodiments of the present invention and their descriptions are used to explain the present invention, but are not intended to limit the present invention.
[0047] The acquisition, transmission, storage, use, and processing of data in the technical solution of this application comply with the relevant provisions of laws and regulations.
[0048] It should be noted that in the embodiments of the present application, certain software, components, models and other existing solutions in the industry may be mentioned, and they should be regarded as exemplary. Their purpose is only to illustrate the feasibility of implementing the technical solution of the present application, but it does not mean that the applicant has or will necessarily use the solution.
[0049] Figure 1 FIG. 1 is a flow chart of a method for processing a POS key applied to a bank in an embodiment of the present invention. Figure 1 As shown, the method comprises the following steps:
[0050] Step 201: receiving merchant information and smart POS terminal information;
[0051] Step 202: Generate a merchant contract, a POS master key and a unique identifier of the POS terminal according to the merchant information and the smart POS terminal information;
[0052] Step 203: Bind the POS master key to the unique identifier of the POS terminal to obtain the relationship between the POS master key and the unique identifier of the POS terminal; bind the merchant contract to the unique identifier of the POS terminal to obtain the relationship between the merchant contract and the unique identifier of the POS terminal;
[0053] Step 204: obtaining the current POS master key according to the unique identifier of the current POS terminal and the relationship between the POS master key and the unique identifier of the POS terminal; the unique identifier of the current POS terminal is included in the key issuance request and is sent by the intelligent POS terminal;
[0054] Step 205: verifying the unique identifier of the current POS terminal according to the relationship between the merchant contract and the unique identifier of the POS terminal;
[0055] Step 206: After verification, the current POS master key is sent to the smart POS terminal.
[0056] Compared with the technical solution in the prior art that requires the POS terminal to be distributed to the merchant and then recovered to the bank for downloading and filling the master key through computer connection software, which has great difficulty in operation and maintenance and low efficiency and security of POS key distribution, the POS key processing solution provided by the embodiment of the present invention has the beneficial technical effect of: there is no need to distribute the POS terminal to the merchant and then recover it to the bank for downloading and filling the master key through computer connection software. It only needs to maintain the relevant relationship through the bank before distribution, and the POS terminal can be distributed to the merchant for use, which reduces the difficulty of operation and maintenance and improves the efficiency and security of POS key distribution.
[0057] The embodiment of the present invention provides a method for distributing POS master keys in a different way from the traditional installation method. When business personnel install POS machines for merchants, they do not need to recycle the POS machines and re-install the keys through software. Instead, they only need to maintain the relevant contractual relationship in the management background of the bank's system, and then they can re-issue the POS machines to merchants for use. Figures 1 to 8 Provide a detailed introduction.
[0058] Point of Sales (POS): Point of Sales. It refers to the equipment placed at the merchant's cash register that can accept bank cards and scan code transactions.
[0059] In order to facilitate understanding of how to implement the embodiment of the present invention, the overall architecture of the POS key processing system provided by the embodiment of the present invention is first introduced. Figure 8 As shown:
[0060] 1. The cashier application (cashier app) is installed on the smart POS terminal 01 (the smart POS terminal 01 is used to execute Figure 4 The cash register application is a client application installed on the smart POS machine, which is used to initiate transactions such as check-in, card swiping, and scanning.
[0061] 2. The transaction is sent to the bank system via the Internet (bank terminal 02, which is used to execute Figure 1 POSp of the relevant steps shown).
[0062] 3. POSp is responsible for managing the key generation, downloading and updating of POS terminals, as well as transaction legitimacy detection and filtering, transaction monitoring and diversion. It plays the role of security protection and firewall for the backend accounting system. The access of POS transactions and the forwarding of transaction messages are also handled here. That is, POSp: POSProxy, that is, POS front-end system, is mainly used to manage the front-end POS machines and transaction forwarding. Key and download management of POS machines, transaction access, transaction legitimacy detection and filtering, transaction message conversion, etc.
[0063] 4. Merchant management (merchant management terminal) is responsible for managing merchant-related data, including merchant information, business license, merchant contract, etc. Merchants first register as legal merchants in merchant management, open related businesses, and maintain relevant information, including deduction rate, MCC type, collection limit, etc.
[0064] 5. The branch provides the smart POS terminal to the merchant according to the agreement. The branch will store and release the equipment in the equipment management. When signing in at the smart POS terminal, POSp will provide the equipment status and information to the equipment management, and the equipment management will update the equipment status information at the same time.
[0065] 6. Merchant management and equipment management (equipment management side) are responsible for processing merchant information reporting and equipment information reporting in regulatory reporting respectively.
[0066] 7. POSp sends the transaction-related messages to the acquiring component and then to the debit card component or payment settlement. The payment settlement connects to UnionPay via a dedicated line.
[0067] 8. The debit card component is responsible for processing transactions within the bank, while transactions involving other banks are handled by payment settlement through a dedicated line to UnionPay.
[0068] The following describes the detailed steps of processing the POS key in the embodiment of the present invention. In order to facilitate understanding of how the present invention is implemented, the present embodiment also describes the method applied to the intelligent POS terminal in the entire system, that is, executing the following steps: Figure 8 The method in the smart POS terminal is shown.
[0069] In the embodiment of the present invention, the master key is used to encrypt related messages when signing in to obtain the working key. The signed-in transaction message will be sent with the 19-digit POS number generated by the merchant management and the 8-digit terminal number (which needs to be reported to UnionPay), both of which are unique identifiers of this terminal (uniquely assigned by the bank's POS acquiring merchant system). POSp can uniquely identify the POS terminal under the merchant based on the 19-digit POS number and the 8-digit terminal number, and call the relevant encryption machine function for decryption and verification.
[0070] In one embodiment, the unique identifier of the POS terminal includes: a merchant terminal number (the above-mentioned 19-digit POS number) or a POS terminal number (the above-mentioned 8-digit terminal number, and the TUS terminal number mentioned below); the intelligent POS terminal is used to initiate a key issuance request to the bank by receiving the current merchant terminal number input by the user, or to obtain the current POS terminal number by receiving a trigger instruction to initiate a key issuance request to the bank.
[0071] In specific implementation, the two preferred solutions of "initiating a key sending request to the bank by receiving the current merchant terminal number input by the user or obtaining the current POS terminal number by receiving a trigger instruction" can improve the processing flexibility and efficiency of the POS key.
[0072] The two preferred solutions are introduced in detail below.
[0073] The first method: by receiving the trigger instruction to obtain the current POS terminal number, a key distribution request is initiated to the bank. The relationship between the POS machine and the merchant contract is maintained in the background. After the corresponding relationship is maintained, the POS machine will carry the terminal number (tusn) of the machine in the request message sent up. POSp will match the contract relationship according to the tusn number. A tusn number is matched and associated with a merchant contract, and they correspond to each other one by one. Only after the contract is associated will the POS machine be allowed to proceed to the next transaction. After verifying the tusn number and matching the terminal machine with the terminal contract, the next step is to issue the relevant terminal master key. About TUSN number: terminal hardware serial number (UnionPay only), composed of 6-digit manufacturer code + 2-digit terminal type + custom product S / N, is generally printed on the upper or lower part of the back of the POS machine. The TUSN number of each machine is different. A POS machine can be uniquely identified by the TUSN number.
[0074] The second method: Initiate a key distribution request to the bank by receiving the current merchant terminal number input by the user. In addition to directly sending the tusn terminal number to download the master key, the POS cash register application also provides a method of manually entering the merchant terminal number to download the master key. After the business personnel establish a good merchant contract, they send the merchant terminal number to the merchant. After the merchant gets the POS, open the cash register application, and an input box for entering the merchant terminal number will pop up. After entering the merchant terminal number on the cash register application, the POS cash register application will send the merchant number to POSp. POSp will find the corresponding terminal contract file based on the sent merchant terminal number and determine whether the sent information is consistent with the background configuration, such as verifying the validity of the merchant contract, verifying whether the tusn number is consistent with the background registration, and verifying whether the longitude and latitude information is consistent with the settings of the business personnel in the background, etc. In specific implementation, the implementation plan for verifying longitude and latitude is: the longitude and latitude information is the GPS information of the current device obtained by the smart POS through the map sdk, such as latitude 23.124120, longitude 113.372820, and sent to POSp through the transaction message. The business personnel will enter an initial longitude and latitude of the smart POS terminal in the merchant management system, as well as a radius range, such as 5 kilometers or 10 kilometers. POSp will calculate and compare the longitude and latitude sent and the longitude and latitude set by the system, calculate the actual distance between the two locations, and determine whether it is within the set radius. An error message will be returned if the transaction range is exceeded. After all judgments are completed, POSp will send the previously generated POS master key to the POS terminal. The POS cashier application uses the modified key to complete subsequent sign-in, obtain work keys and consumption transactions.
[0075] The following will introduce Figure 2 and Figure 3 The overall steps of initiating a key distribution request to the bank by receiving the current merchant terminal number input by the user, or obtaining the current POS terminal number by receiving a trigger instruction are introduced in detail.
[0076] 1. Key distribution process: Figure 2 As shown, the specific implementation method of distribution by inputting the merchant terminal number is as follows.
[0077] 1. The distribution process of POS keys involves the coordination of multiple bank intranet systems. First, the collected merchant information needs to be entered into the merchant management, that is, the above step 201, receiving merchant information and smart POS terminal information, such as Figure 2 As shown in: "Business personnel enter the merchant network in merchant management", "Business personnel enter terminal information in equipment management". In the above step 202, a merchant contract, a POS master key and a unique identifier of the POS terminal can be generated according to the merchant information and the smart POS terminal information, such as Figure 2The "POSp obtains the merchant information managed by the merchant and generates the POS master key" shown in the figure can of course also include generating the merchant contract and the unique identifier of the POS terminal. In the above step 203, the POS master key is bound to the unique identifier of the POS terminal to obtain the relationship between the POS master key and the unique identifier of the POS terminal; the merchant contract is bound to the unique identifier of the POS terminal to obtain the relationship between the merchant contract and the unique identifier of the POS terminal, such as Figure 2 The "binding of merchant contract and terminal tusn number in equipment management" shown can of course also include the binding of POS master key and unique identification of POS terminal. After generating merchant contract and binding various relationships, it is necessary to push data to POSp, generate POS master key, and the relationship between POS master key and unique identification of POS terminal, and store them for use, that is, POSp stores the generated POS master key, and the corresponding relationship between the merchant number (the relationship between POS master key and unique identification of POS terminal), and the relationship between merchant contract and unique identification of POS terminal (this relationship can also exist in equipment management, which is not limited in the embodiment of the present invention).
[0078] 2. If Figure 2 As shown in the figure, after "Business personnel install cash register application on POS machine", business personnel need to confirm whether cash register application is installed on smart POS machine, such as Figure 2 Check "Is it a brand new POS device (no cash register application installed)" as shown in the figure. If not installed, install the latest version of the cash register application. Figure 2 "Install the bank's cash register application on the POS through the tool" as shown in the . If the POS machine is a device recovered from another merchant, the cash register application has been installed and the master key has been downloaded, then check whether the cash register application is the latest version and whether there is a master key that has been downloaded, such as Figure 2 Check the cashier application version on the POS, whether it is the latest version, and whether there is a previous certificate key. If it exists, clear the master key, such as Figure 2 "Update the version, delete the previous certificate and key" as shown in the figure. After confirming that the device status is correct, you can download the new POS master key.
[0079] From the above, we can know that Figure 2 and Figure 3 It can be seen that, in one embodiment, generating a key issuance request according to the unique identifier of the current POS terminal includes:
[0080] When it is detected that the intelligent POS terminal is a brand new POS terminal and the cash register application is not installed, after the cash register application is installed, the unique identification of the current POS terminal is obtained to generate a key issuance request.
[0081] From the above, we can know that Figure 2 and Figure 3 It can be seen that, in one embodiment, generating a key issuance request according to the unique identifier of the current POS terminal includes:
[0082] When it is detected that the smart POS terminal is a terminal recovered from the merchant and the cash register application has been installed, if it is detected that there is a master key that has been downloaded, it is detected that the installed cash register application is not the latest version, the cash register application version is updated to the latest version, and after deleting the downloaded master key, the unique identifier of the current POS terminal is obtained to generate a key issuance request.
[0083] In one embodiment, in combination Figure 2 and Figure 3 It can be seen that the key issuance request is generated according to the unique identification of the current POS terminal, and also includes:
[0084] If it is detected that there is no downloaded master key, check whether the installed cash register application is the latest version, obtain the unique identifier of the current POS terminal, and generate a key issuance request.
[0085] In specific implementation, the above specific implementation method of detecting the cash register application version can further improve the processing efficiency and accuracy of the POS key.
[0086] 3. Open the cashier application on the smart POS machine, and then enter the merchant terminal number page, enter the merchant terminal number generated in the merchant management, and initiate a transaction request for the key, such as Figure 2 The "input POS terminal unique identifier generated by the merchant management" shown in the above step 204 is the unique identifier of the current POS terminal included in the key issuance request sent by the smart POS terminal. The cash register application will send the input merchant terminal number to POSp, such as Figure 2 As shown in the "Cashier application sends the input POS terminal unique identifier to POSp", POSp will find the master key based on the merchant terminal number and verify (such as Figure 2 After the "POSp verification is legal request" shown in the figure is passed, the master key will be sent to the smart POS. Figure 2 The "send the corresponding POS master key to the terminal equipment", that is, the above step 204, obtains the current POS master key according to the unique identifier of the current POS terminal and the relationship between the POS master key and the unique identifier of the POS terminal, the above step 205: verifies the unique identifier of the current POS terminal according to the relationship between the merchant contract and the unique identifier of the POS terminal, and the above step 206: after the verification is passed, sends the current POS master key to the smart POS terminal. After receiving the master key, the cash register application will write the master key into the security chip for storage. Then enter the operator number and password to initiate the certificate issuance, sign-in and consumption transactions, such as Figure 2 "Complete subsequent steps such as obtaining a permit, signing in, etc." as shown in the following figure.
[0087] 2. Key distribution process: Figure 3 As shown, the specific implementation method 2 of automatically distributing by sending a TUSN number is as follows.
[0088] 1. The previous operation process is basically the same. The distribution process of POS keys involves the coordination of multiple bank intranet systems. First, the collected merchant information needs to be entered into the merchant management, such as Figure 3 As shown in: "Business personnel do merchant network access in merchant management", "Business personnel do terminal information entry in equipment management". After generating the merchant contract, you need to push data to POSp, generate the POS master key and store it for later use, such as Figure 2 The "POSp obtains the merchant information managed by the merchant and generates the POS master key" shown in the figure can also include generating the merchant contract and the unique identifier of the POS terminal. The generated POS master key and the corresponding relationship between it and the merchant number are stored in POSp. At the same time, the binding relationship between the merchant and the POS terminal needs to be established in the equipment management, that is, the merchant contract needs to correspond one-to-one with a certain terminal, such as Figure 3 The "binding of merchant contracts and terminal TSN numbers in equipment management" shown can of course also include the binding of POS master keys and the unique identifier of POS terminals. By entering the TSN number in the equipment management system, the merchant contract is bound to the terminal equipment, that is, the merchant contract is bound to the unique identifier of the POS terminal, and the relationship between the merchant contract and the unique identifier of the POS terminal is obtained. Only subsequent requests from the terminal with the TSN number will allow the master key to be issued.
[0089] 2. If Figure 3 As shown in the figure, after "Business personnel install cash register application on POS machine", business personnel need to confirm whether cash register application is installed on smart POS machine, such as Figure 3 Check "Is it a brand new POS device (no cash register application installed)" as shown in the figure. If not installed, install the latest version of the cash register application. Figure 3 "Install the bank's cash register application on the POS through the tool" as shown in the . If the POS machine is a device recovered from another merchant, the cash register application has been installed and the master key has been downloaded, then check whether the cash register application is the latest version and whether there is a master key that has been downloaded, such as Figure 3 Check the cashier application version on the POS, whether it is the latest version, and whether there is a previous certificate key. If it exists, clear the master key, such as Figure 3 "Update the version, delete the previous certificate and key" as shown in the figure. After confirming that the device status is correct, you can download the new POS master key.
[0090] As can be seen from the above, in one embodiment, the method for processing the POS key may further include:
[0091] When the current POS terminal number is obtained by receiving the trigger instruction and a key sending request is initiated to the bank, if the current POS terminal number is verified, the merchant terminal information is retrieved from the merchant contract;
[0092] Sending a verification code to the merchant terminal according to the retrieved merchant terminal information; the smart POS terminal is also used to receive the verification code input by the user and obtained through the merchant terminal, and send the verification code to the bank end;
[0093] After the verification code is verified, the current POS master key is sent to the intelligent POS terminal.
[0094] When implementing it specifically, Figure 3 In fact, the steps of inputting the 19-digit POS number, the 8-digit terminal number, and the merchant name are omitted. After the cashier application automatically obtains the tusn of the terminal device, it is sent to the POSp (here the message will be subjected to the asymmetric encryption and decryption method mentioned in the embodiment of the present invention). There is no need for business personnel or merchants to enter additional business parameters. The back-end system is completely matched according to the tusn, and the 19-digit number, terminal number, and merchant name are not verified. Considering the additional security issues, the cashier application can do an extra interactive step. After sending the tusn to the POSp, the POSp confirms that there is no problem after querying. At this time, a text message verification code will be sent to the merchant's corresponding merchant mobile phone number (the merchant contract will have the merchant's relevant information, including the mobile phone number, and the POSp can be associated with the relevant contract content through the tusn). At the same time, the POSp returns a confirmation reply to the cashier application, and the cashier application jumps to a page for entering the verification code, which displays the merchant's mobile phone (merchant terminal) number entered in the back-end system. The mobile phone number will hide the middle part, and there is also an input box for entering the verification code. After receiving the verification code from your mobile phone, enter the verification code into the input box and click Confirm. POSp completes the verification of the verification code and sends the master key to the smart POS terminal to complete the distribution of the master key. Therefore, when the only identifier of the POS terminal is the POS terminal number, the interaction between the smart POS terminal and the bank end can be realized through the verification code, which can further improve the security of POS key processing.
[0095] 3. Open the cashier application on the smart POS machine, enter the operator number and password, and the cashier application will obtain the TSN of the terminal device through the underlying service SDK, such as Figure 3 Enter the merchant terminal number or tusn generated by the merchant management as shown in the "Enter the merchant terminal number or tusn generated by the merchant management" and then send it to POSp, such as Figure 3As shown in the "Cashier application sends the input merchant terminal number or tusn to POSp", POSp will find the master key based on the tusn number and verify (such as Figure 3 After the "POSp verifies whether the request is legal, verifies tusn, etc." shown in the figure passes, the master key will be sent to the smart POS. Figure 3 "Send the corresponding POS master key to the terminal" as shown in the figure. After receiving the master key, the cash register application will write the master key into the security chip for storage. Then you can initiate transactions such as issuing cards, signing in, and spending. Figure 3 "Complete subsequent steps such as obtaining a permit, signing in, etc." as shown in the following figure.
[0096] Further preferred embodiments of the present invention are described below.
[0097] In one embodiment, the above-mentioned method for processing the POS key may further include:
[0098] Receiving an encrypted key issuing request sent by the smart POS terminal; the smart POS terminal is further used to encrypt the key issuing request using a pre-stored public key, and send the package name, application name and version number of the smart POS terminal along with the encrypted key issuing request to the bank end;
[0099] Decrypt the encrypted key issuing request using the private key pre-stored on the bank side to obtain the decrypted key issuing request;
[0100] Compare the package name, application name and version number to see if they are consistent with the preset parameter settings;
[0101] If they are consistent, the subsequent steps of issuing the current POS master key are executed according to the decrypted key issuance request.
[0102] In specific implementation, Figure 2 or Figure 3In the step of "POSp verifies whether the request is legal": the communication message between the cash register application app installed on the smart POS and POSp is transmitted through the Internet. Based on the https protocol, there will be an asymmetric encryption and decryption step for the entire message. This encryption and decryption is different from the transaction message encryption and decryption using the master key and working key of the POS transaction message. It is an additional encryption and decryption system before sending to the public network. That is, all POS messages, whether encrypted by the master key / working key or not, will be encrypted again before being sent to POSp. The public key for encryption and decryption exists on the cash register application app, and the private key exists on POSp. At the same time, the package name, application name and version number of the cash register application need to be sent. When POSp receives the request, it decrypts the message ciphertext according to the private key, and compares the package name, application name and version number to see if they are consistent with the parameter settings. Only after the comparison is consistent will the subsequent process continue, otherwise an error will be returned to the front end. POSp will then verify the business parameters, such as whether the 19-digit POS number, 8-digit terminal number, merchant name, etc. in the message sent are consistent with the merchant contract established by the business personnel in the early stage, and then compare them with the terminal tusn number entered in the equipment management component. Only when they are completely consistent will the corresponding POS master key be sent to the terminal, and the additional encryption process described above will also be performed when it is sent. The solution of POSp verifying whether the request is legal can further improve the processing security of POS keys.
[0103] In summary, the beneficial technical effects of the POS key processing method provided by the embodiment of the present invention are:
[0104] 1. The POS key processing method provided by the embodiment of the present invention reduces the difficulty for business personnel to carry out POS acquiring business: after getting a new POS machine, business personnel only need to maintain the relevant merchant contracts, terminal configuration information, etc. in the merchant management background, manage the terminal-related information and merchant contracts, and then operate the master key download on the POS cash register, bypassing the trouble of using the manufacturer's download software to download the master key (in the prior art, computers and software are generally used for downloading, which will encounter more software and hardware problems, prone to failure problems, and difficult to troubleshoot the cause of the error). At the same time, it also reduces the difficulty of operation and maintenance for scientific and technological personnel and shortens the operation process.
[0105] 2. The POS key processing method provided by the embodiment of the present invention can improve the security of POS key processing: business personnel do not need to access the POS installation master key file, and there is no need to obtain the key from the intranet environment to the external network, and the internal approval process is omitted. The generation and issuance of the key are all controlled and verified by the program.
[0106] The embodiment of the present invention also provides a POS key processing intelligent POS terminal, as described in the following embodiment. Since the principle of solving the problem by the intelligent POS terminal is similar to the POS key processing method applied to the bank side, the implementation of the intelligent POS terminal can refer to the implementation of the POS key processing method applied to the bank side, and the repeated parts will not be repeated.
[0107] Figure 4 FIG. 1 is a flow chart of a method for processing a POS key applied to an intelligent POS terminal in an embodiment of the present invention. Figure 4 As shown, the method comprises the following steps:
[0108] Step 101: sending the merchant information and the smart POS terminal information to the bank end; the bank end is used to generate a merchant contract, a POS master key and a unique identifier of the POS terminal according to the merchant information and the smart POS terminal information; binding the POS master key with the unique identifier of the POS terminal to obtain a relationship between the POS master key and the unique identifier of the POS terminal; binding the merchant contract with the unique identifier of the POS terminal to obtain a relationship between the merchant contract and the unique identifier of the POS terminal;
[0109] Step 102: Obtain the unique identifier of the current POS terminal;
[0110] Step 103: Generate a key issuance request according to the unique identifier of the current POS terminal;
[0111] Step 104: Send the key issuance request to the bank end; the bank end is also used to obtain the current POS master key according to the unique identifier of the current POS terminal and the relationship between the POS master key and the unique identifier of the POS terminal; verify the unique identifier of the current POS terminal according to the relationship between the merchant contract and the unique identifier of the POS terminal; after the verification is passed, send the current POS master key to the smart POS terminal.
[0112] In one embodiment, the unique identifier of the POS terminal includes: a merchant terminal number or a POS terminal number;
[0113] Generate a key issuing request according to the unique identification of the current POS terminal, including: generating a key issuing request by receiving the current merchant terminal number input by the user, or generating a key issuing request by obtaining the current POS terminal number by receiving a trigger instruction.
[0114] In one embodiment, the above-mentioned method for processing the POS key may further include:
[0115] Receive the verification code input by the user and obtained through the merchant terminal, the verification code is sent by the bank end, and the bank end is also used to obtain the current POS terminal number through receiving the trigger instruction to initiate the key issuance request to the bank end. If the current POS terminal number is verified, the merchant terminal information is retrieved from the merchant contract, and the verification code is sent to the merchant terminal according to the retrieved merchant terminal information;
[0116] The verification code is sent to the bank end; the bank end is also used to send the current POS master key to the smart POS terminal after the verification code is verified.
[0117] In one embodiment, generating a key issuing request according to the unique identifier of the current POS terminal includes:
[0118] When it is detected that the intelligent POS terminal is a brand new POS terminal and the cash register application is not installed, after the cash register application is installed, the unique identification of the current POS terminal is obtained to generate a key issuance request.
[0119] In one embodiment, generating a key issuing request according to the unique identifier of the current POS terminal includes:
[0120] When it is detected that the smart POS terminal is a terminal recovered from the merchant and the cash register application has been installed, if it is detected that there is a master key that has been downloaded, it is detected that the installed cash register application is not the latest version, the cash register application version is updated to the latest version, and after deleting the downloaded master key, the unique identifier of the current POS terminal is obtained to generate a key issuance request.
[0121] In one embodiment, generating a key issuing request according to the unique identifier of the current POS terminal further includes:
[0122] If it is detected that there is no downloaded master key, check whether the installed cash register application is the latest version, obtain the unique identifier of the current POS terminal, and generate a key issuance request.
[0123] In one embodiment, the above-mentioned method for processing the POS key may further include:
[0124] Encrypting the key issuing request using a pre-stored public key;
[0125] The package name, application name and version number of the smart POS terminal are sent to the bank along with the encrypted key issuance request; the bank is also used to decrypt the key issuance request using the private key pre-stored on the bank, and compare whether the package name, application name and version number are consistent with the preset parameter settings. If they are consistent, the subsequent steps of issuing the current POS master key are executed.
[0126] The embodiment of the present invention also provides a POS key processing bank end, as described in the following embodiment. Since the principle of solving the problem by the POS key processing bank end is similar to the POS key processing method applied to the bank end, the implementation of the POS key processing bank end can refer to the implementation of the POS key processing method applied to the bank end, and the repeated parts will not be repeated.
[0127] Figure 5 FIG. 1 is a schematic diagram of the structure of the bank end for processing the POS key in an embodiment of the present invention. Figure 5 As shown, the bank side includes:
[0128] Receiving unit 021, used to receive merchant information and smart POS terminal information;
[0129] A first generating unit 022, used to generate a merchant contract, a POS master key and a unique identifier of the POS terminal according to the merchant information and the intelligent POS terminal information;
[0130] The relationship establishing unit 023 is used to bind the POS master key with the unique identifier of the POS terminal to obtain the relationship between the POS master key and the unique identifier of the POS terminal; bind the merchant contract with the unique identifier of the POS terminal to obtain the relationship between the merchant contract and the unique identifier of the POS terminal;
[0131] The master key determination unit 024 is used to obtain the current POS master key according to the unique identifier of the current POS terminal and the relationship between the POS master key and the unique identifier of the POS terminal; the unique identifier of the current POS terminal is included in the key issuance request and sent by the intelligent POS terminal;
[0132] Verification unit 025, used to verify the unique identifier of the current POS terminal according to the relationship between the merchant contract and the unique identifier of the POS terminal;
[0133] The sending unit 026 is used to send the current POS master key to the smart POS terminal after the verification is passed.
[0134] In one embodiment, the unique identifier of the POS terminal includes: a merchant terminal number or a POS terminal number; the smart POS terminal is used to initiate a key issuance request to the bank by receiving the current merchant terminal number input by the user, or to obtain the current POS terminal number by receiving a trigger instruction to initiate a key issuance request to the bank.
[0135] In one embodiment, the bank side of the POS key processing further includes:
[0136] The extraction unit is used to obtain the current POS terminal number by receiving a trigger instruction to initiate a key sending request to the bank side, and if the current POS terminal number is verified, retrieve the merchant terminal information from the merchant contract;
[0137] A verification code sending unit is used to send a verification code to the merchant terminal according to the retrieved merchant terminal information; the smart POS terminal is also used to receive the verification code input by the user and obtained through the merchant terminal, and send the verification code to the bank end;
[0138] The sending unit is specifically used to send the current POS master key to the smart POS terminal after the verification code is verified.
[0139] In one embodiment, the receiving unit is further used to receive an encrypted key issuing request sent by the smart POS terminal; the smart POS terminal is further used to encrypt the key issuing request using a pre-stored public key, and send the package name, application name and version number of the smart POS terminal along with the encrypted key issuing request to the bank end;
[0140] The bank side of the POS key processing also includes:
[0141] A decryption unit, used to decrypt the encrypted key issuing request using a private key pre-stored on the bank side to obtain a decrypted key issuing request;
[0142] A comparison unit is used to compare whether the package name, application name and version number are consistent with the preset parameter settings;
[0143] The issuing unit is specifically used to: if they are consistent, execute the subsequent step of issuing the current POS master key according to the decrypted key issuing request.
[0144] The embodiment of the present invention also provides a POS key processing intelligent POS terminal, as described in the following embodiment. Since the principle of solving the problem by the POS key processing intelligent POS terminal is similar to the POS key processing method applied to the bank side, the implementation of the POS key processing intelligent POS terminal can refer to the implementation of the POS key processing method applied to the bank side, and the repeated parts will not be repeated.
[0145] Figure 6 FIG. 1 is a schematic diagram of the structure of an intelligent POS terminal for processing POS keys in an embodiment of the present invention. Figure 6 As shown, the intelligent POS terminal includes:
[0146] The sending unit 011 is used to send the merchant information and the intelligent POS terminal information to the bank end; the bank end is used to generate a merchant contract, a POS master key and a unique identifier of the POS terminal according to the merchant information and the intelligent POS terminal information; the POS master key is bound to the unique identifier of the POS terminal to obtain a relationship between the POS master key and the unique identifier of the POS terminal; the merchant contract is bound to the unique identifier of the POS terminal to obtain a relationship between the merchant contract and the unique identifier of the POS terminal;
[0147] An acquisition unit 012 is used to acquire a unique identifier of the current POS terminal;
[0148] The second generating unit 013 is used to generate a key issuing request according to the unique identification of the current POS terminal;
[0149] The initiating unit 014 is used to send a key issuance request to the bank end; the bank end is also used to obtain the current POS master key according to the unique identifier of the current POS terminal and the relationship between the POS master key and the unique identifier of the POS terminal; verify the unique identifier of the current POS terminal according to the relationship between the merchant contract and the unique identifier of the POS terminal; after the verification is passed, send the current POS master key to the smart POS terminal.
[0150] In one embodiment, the unique identifier of the POS terminal includes: a merchant terminal number or a POS terminal number;
[0151] The second generating unit is specifically configured to: generate a key issuing request by receiving a current merchant terminal number input by a user, or generate a key issuing request by receiving a trigger instruction to obtain a current POS terminal number.
[0152] In one embodiment, the above-mentioned intelligent POS terminal for processing the POS key further comprises:
[0153] A verification code receiving unit is used to receive a verification code input by a user and obtained through a merchant terminal, wherein the verification code is sent by a bank end. The bank end is also used to obtain the current POS terminal number by receiving a trigger instruction to initiate a key sending request to the bank end. If the current POS terminal number is verified, the merchant terminal information is retrieved from the merchant contract, and a verification code is sent to the merchant terminal according to the retrieved merchant terminal information;
[0154] The verification code feedback unit is used to send the verification code to the bank end; the bank end is also used to send the current POS master key to the smart POS terminal after the verification code is verified.
[0155] In one embodiment, the second generating unit is specifically configured to:
[0156] When it is detected that the intelligent POS terminal is a brand new POS terminal and the cash register application is not installed, after the cash register application is installed, the unique identification of the current POS terminal is obtained to generate a key issuance request.
[0157] In one embodiment, the second generating unit is specifically configured to:
[0158] When it is detected that the smart POS terminal is a terminal recovered from the merchant and the cash register application has been installed, if it is detected that there is a master key that has been downloaded, it is detected that the installed cash register application is not the latest version, the cash register application version is updated to the latest version, and after deleting the downloaded master key, the unique identifier of the current POS terminal is obtained to generate a key issuance request.
[0159] In one embodiment, the second generating unit is further configured to:
[0160] If it is detected that there is no downloaded master key, check whether the installed cash register application is the latest version, obtain the unique identifier of the current POS terminal, and generate a key issuance request.
[0161] In one embodiment, the above-mentioned intelligent POS terminal for processing the POS key further comprises:
[0162] An encryption unit, used to encrypt the key issuance request using a pre-stored public key;
[0163] The sending unit is specifically used to send the package name, application name and version number of the smart POS terminal together with the encrypted key issuance request to the bank end; the bank end is also used to decrypt the key issuance request using a private key pre-stored on the bank end, and compare whether the package name, application name and version number are consistent with the preset parameter settings. If they are consistent, execute the subsequent steps of issuing the current POS master key.
[0164] The present invention also provides a POS key processing system, as described in the following embodiments. Since the principle of solving the problem by the POS key processing system is similar to the POS key processing method applied to the bank side, the implementation of the POS key processing system can refer to the implementation of the POS key processing method applied to the bank side, and the repeated parts will not be repeated.
[0165] Figure 7 FIG. 1 is a schematic diagram of the structure of a POS key processing system according to an embodiment of the present invention. Figure 7 As shown, the system includes: a bank end 02 for processing POS keys, and an intelligent POS terminal 01 for processing POS keys. Figure 8 FIG. 1 is a schematic diagram of the structure of a POS key processing system in another embodiment of the present invention. Figure 8As shown, the system includes: a bank terminal 02 for processing POS keys, an intelligent POS terminal 01 for processing POS keys, Figure 8 The specific implementation method is detailed in the description of the above embodiment.
[0166] An embodiment of the present invention further provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the above-mentioned POS key processing method when executing the computer program.
[0167] The embodiment of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the above-mentioned POS key processing method is implemented.
[0168] An embodiment of the present invention further provides a computer program product, the computer program product comprising a computer program, and the computer program implements the above-mentioned POS key processing method when executed by a processor.
[0169] Compared with the technical solution in the prior art that requires the POS terminal to be distributed to the merchant and then recovered to the bank for downloading and filling the master key through computer connection software, which has great difficulty in operation and maintenance and low efficiency and security of POS key distribution, the POS key processing solution provided by the embodiment of the present invention has the beneficial technical effect of: there is no need to distribute the POS terminal to the merchant and then recover it to the bank for downloading and filling the master key through computer connection software. It only needs to maintain the relevant relationship through the bank before distribution, and the POS terminal can be distributed to the merchant for use, which reduces the difficulty of operation and maintenance and improves the efficiency and security of POS key distribution.
[0170] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.
[0171] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.
[0172] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.
[0173] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.
[0174] The specific embodiments described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.
Claims
1. A method for processing a POS key, characterized in that: The method is applied to the bank side, and the method includes: Receive merchant information and smart POS terminal information; Generate a merchant contract, a POS master key and a unique identifier of the POS terminal according to the merchant information and the smart POS terminal information; Binding the POS master key to the unique identifier of the POS terminal to obtain the relationship between the POS master key and the unique identifier of the POS terminal; binding the merchant contract to the unique identifier of the POS terminal to obtain the relationship between the merchant contract and the unique identifier of the POS terminal; The current POS master key is obtained according to the unique identifier of the current POS terminal and the relationship between the POS master key and the unique identifier of the POS terminal; the unique identifier of the current POS terminal is included in the key issuance request and is sent by the intelligent POS terminal; Verify the unique identifier of the current POS terminal according to the relationship between the merchant contract and the unique identifier of the POS terminal; After the verification is passed, the current POS master key is sent to the intelligent POS terminal.
2. The method according to claim 1, characterized in that The unique identifier of the POS terminal includes: a merchant terminal number or a POS terminal number; the smart POS terminal is used to initiate a key issuance request to the bank by receiving the current merchant terminal number input by the user, or to obtain the current POS terminal number by receiving a trigger instruction to initiate a key issuance request to the bank.
3. The method according to claim 2, characterized in that Also includes: When the current POS terminal number is obtained by receiving the trigger instruction and a key sending request is initiated to the bank, if the current POS terminal number is verified, the merchant terminal information is retrieved from the merchant contract; Sending a verification code to the merchant terminal according to the retrieved merchant terminal information; the smart POS terminal is also used to receive the verification code input by the user and obtained through the merchant terminal, and send the verification code to the bank end; After the verification code is verified, the current POS master key is sent to the intelligent POS terminal.
4. The method according to claim 1, characterized in that Also includes: Receive the encrypted key distribution request sent by the smart POS terminal; The smart POS terminal is also used to encrypt the key issuance request using a pre-stored public key, and send the package name, application name and version number of the smart POS terminal along with the encrypted key issuance request to the bank end; Decrypt the encrypted key issuing request using the private key pre-stored on the bank side to obtain the decrypted key issuing request; Compare the package name, application name and version number to see if they are consistent with the preset parameter settings; If they are consistent, the subsequent steps of issuing the current POS master key are executed according to the decrypted key issuance request.
5. A method for processing a POS key, characterized in that: The method is applied to a smart POS terminal and comprises: The merchant information and the smart POS terminal information are sent to the bank end; the bank end is used to generate a merchant contract, a POS master key and a unique identifier of the POS terminal according to the merchant information and the smart POS terminal information; the POS master key is bound to the unique identifier of the POS terminal to obtain the relationship between the POS master key and the unique identifier of the POS terminal; the merchant contract is bound to the unique identifier of the POS terminal to obtain the relationship between the merchant contract and the unique identifier of the POS terminal; Get the unique ID of the current POS terminal; Generate a key issuance request based on the unique identifier of the current POS terminal; The key issuance request is sent to the bank end; the bank end is also used to obtain the current POS master key according to the unique identification of the current POS terminal and the relationship between the POS master key and the unique identification of the POS terminal; the unique identification of the current POS terminal is verified according to the relationship between the merchant contract and the unique identification of the POS terminal; after the verification is passed, the current POS master key is sent to the smart POS terminal.
6. The method according to claim 5, characterized in that The unique identification of the POS terminal includes: a merchant terminal number or a POS terminal number; Generate a key issuing request according to the unique identification of the current POS terminal, including: generating a key issuing request by receiving the current merchant terminal number input by the user, or generating a key issuing request by obtaining the current POS terminal number by receiving a trigger instruction.
7. The method according to claim 6, characterized in that Also includes: Receive the verification code input by the user and obtained through the merchant terminal, the verification code is sent by the bank end, and the bank end is also used to obtain the current POS terminal number through receiving the trigger instruction to initiate the key issuance request to the bank end. If the current POS terminal number is verified, the merchant terminal information is retrieved from the merchant contract, and the verification code is sent to the merchant terminal according to the retrieved merchant terminal information; The verification code is sent to the bank end; the bank end is also used to send the current POS master key to the smart POS terminal after the verification code is verified.
8. The method according to claim 5, characterized in that Generate a key distribution request based on the unique identifier of the current POS terminal, including: When it is detected that the intelligent POS terminal is a brand new POS terminal and the cash register application is not installed, after the cash register application is installed, the unique identification of the current POS terminal is obtained to generate a key issuance request.
9. The method according to claim 5, characterized in that Generate a key distribution request based on the unique identifier of the current POS terminal, including: When it is detected that the smart POS terminal is a terminal recovered from the merchant and the cash register application has been installed, if it is detected that there is a master key that has been downloaded, it is detected that the installed cash register application is not the latest version, the cash register application version is updated to the latest version, and after deleting the downloaded master key, the unique identifier of the current POS terminal is obtained to generate a key issuance request.
10. The method according to claim 9, characterized in that Generate a key issuing request based on the unique identifier of the current POS terminal, and also include: If it is detected that there is no downloaded master key, check whether the installed cash register application is the latest version, obtain the unique identifier of the current POS terminal, and generate a key issuance request.
11. The method according to claim 5, characterized in that Also includes: Encrypting the key issuing request using a pre-stored public key; Send the package name, application name and version number of the smart POS terminal along with the encrypted key distribution request to the bank; The bank end is also used to decrypt the key issuance request using a private key pre-stored in the bank end, and compare whether the package name, application name and version number are consistent with the preset parameter settings. If they are consistent, the subsequent step of issuing the current POS master key is executed.
12. A POS key processing bank end, characterized in that: include: A receiving unit, used for receiving merchant information and intelligent POS terminal information; A first generating unit, configured to generate a merchant contract, a POS master key and a unique identifier of the POS terminal according to the merchant information and the intelligent POS terminal information; A relationship establishing unit, used for binding the POS master key with the unique identifier of the POS terminal to obtain a relationship between the POS master key and the unique identifier of the POS terminal; Bind the merchant contract with the unique identifier of the POS terminal to obtain the relationship between the merchant contract and the unique identifier of the POS terminal; a master key determination unit, configured to obtain a current POS master key according to a unique identifier of a current POS terminal and a relationship between the POS master key and the unique identifier of the POS terminal; The unique identifier of the current POS terminal is included in the key issuance request and sent by the smart POS terminal; A verification unit, used to verify the unique identifier of the current POS terminal according to the relationship between the merchant contract and the unique identifier of the POS terminal; The sending unit is used to send the current POS master key to the intelligent POS terminal after the verification is passed.
13. A POS key processing intelligent POS terminal, characterized in that: include: A sending unit, used to send merchant information and smart POS terminal information to the bank; The bank terminal is used to generate a merchant contract, a POS master key and a unique identifier of the POS terminal according to the merchant information and the smart POS terminal information; Binding the POS master key to the unique identifier of the POS terminal to obtain a relationship between the POS master key and the unique identifier of the POS terminal; Bind the merchant contract with the unique identifier of the POS terminal to obtain the relationship between the merchant contract and the unique identifier of the POS terminal; An acquisition unit, used to acquire a unique identifier of the current POS terminal; The second generating unit is used to generate a key issuing request according to the unique identifier of the current POS terminal; An initiating unit, used to send a key issuance request to a bank end; The bank terminal is also used to obtain the current POS master key according to the unique identifier of the current POS terminal and the relationship between the POS master key and the unique identifier of the POS terminal; and verify the unique identifier of the current POS terminal according to the relationship between the merchant contract and the unique identifier of the POS terminal; After the verification is passed, the current POS master key is sent to the intelligent POS terminal.
14. A POS key processing system, characterized in that: include: A bank end for processing POS keys as described in claim 12, and an intelligent POS terminal for processing POS keys as described in claim 13.
15. A computer device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 1 to 11 is implemented.
16. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method according to any one of claims 1 to 11 is implemented.
17. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the method according to any one of claims 1 to 11 is implemented.
Citation Information
Patent Citations
Method for remotely issuing POS key
CN106027247A
Terminal master key setting method and apparatus
CN106571915A
POS terminal master key distribution method and POS terminal master key distribution device
CN110048831A
Derivation of a token using a transaction-specific unique key
EP3699851A1
Mobile Merchant POS Processing System, Point-of-Sale App, Analytical Methods, and Systems and Methods for Implementing the Same
US20140046786A1