Identity identification input method in payment process and related equipment

Abstract

The invention provides an identity identification input method in a payment process and related equipment, which can be used in the field of payment processing. The method comprises the following steps: receiving an input request of an identity label sent by a client, and generating a plurality of pictures and associated indexes; sending each picture and the associated index to a client, and receiving an input position and a numerical value of a picture selected by a user and sent by the client; determining a picture name corresponding to the selected picture according to the numerical value, and determining an index value corresponding to the picture name; and determining each number input by the user at the client according to each index value, combining each number according to each input position to obtain an identity label, and associating the identity label with a transaction serial number of a transaction performed by the client so as to be used by a transaction processing system. In the application, through triple mapping of the picture selected by the user, the index value and the array associated with the index, secure input of the identity label by the user is realized, and the payment security is improved.

Description

Technical Field

[0001] The present application relates to the field of payment processing, and in particular to a method for inputting an identity mark during a payment process and related equipment. Background Art

[0002] When a user makes a payment on the client, the user is required to enter an identity for verification before subsequent payment operations can be performed.

[0003] In the exemplary technology, when a user inputs an identity, the user clicks a key on a physical keyboard or a virtual keyboard of the client to input a corresponding number, thereby obtaining the identity through the input number.

[0004] However, the numbers entered by the user on the physical keyboard or virtual keyboard can be easily intercepted, making the identity easy to be stolen, resulting in low payment security. Summary of the invention

[0005] The present application provides a method and related equipment for inputting identity identification during a payment process, which solves the problem of low payment security.

[0006] In a first aspect, the present application provides a method for inputting an identity identifier during a payment process, which is applied to a server. The method for inputting an identity identifier during a payment process includes:

[0007] Receive the identity input request sent by the client and generate multiple images and associated indexes;

[0008] Sending each of the pictures and the associated index to a client, and receiving the input position of the picture selected by the user and the value corresponding to the selected picture sent by the client;

[0009] Determine a picture name corresponding to the selected picture according to the numerical value, and determine an index value corresponding to the picture name, where the index value is an index associated with the selected picture;

[0010] The numbers input by the user at the client are determined according to the index values, and the numbers are combined according to the input positions to obtain an identity identifier, and the identity identifier is associated with the transaction serial number of the transaction conducted by the client for use by the transaction processing system.

[0011] In some embodiments, generating a plurality of images and associated indexes includes:

[0012] Generate multiple first random numbers, and determine the index value corresponding to each first random number;

[0013] Generate picture content according to a number associated with the index value corresponding to the first random number, and generate a picture name according to the index value corresponding to the first random number;

[0014] According to the picture content and picture name corresponding to each of the first random numbers, a plurality of the pictures and associated indexes are generated.

[0015] In some embodiments, sending each of the pictures and the associated index to the client, and receiving the input position of the picture selected by the user and the value corresponding to the selected picture sent by the client, includes:

[0016] Acquire the transaction serial number of the current transaction of the client and the second random number generated by the client from the input request;

[0017] Generate a third random number, and generate a session key according to the second random number, the third random number and the transaction serial number;

[0018] Sending the third random number, each of the pictures and the associated index to the client;

[0019] The encrypted data sent by the client is received, and the encrypted data is decrypted using the session key to obtain the input position and value.

[0020] In some embodiments, decrypting the encrypted data using the session key comprises:

[0021] Decrypting the encrypted data using the session key to obtain a numerical value;

[0022] In a case where the numerical value is not a preset numerical value, the input position is obtained from the decrypted data, and the numerical value and the input position are stored.

[0023] In some embodiments, after decrypting the encrypted data using the session key to obtain a value, the method further includes:

[0024] If the value is a preset value, determining that the user has completed the identity input;

[0025] Combining the numbers according to the input positions includes:

[0026] Based on the stored input positions, the numbers are combined to obtain an identity tag.

[0027] In a second aspect, the present application provides a method for inputting an identity identifier during a payment process, which is applied to a server. The method for inputting an identity identifier during a payment process includes:

[0028] When it is detected that the transaction amount of the current transaction has been input, a request for inputting the identity identifier is sent to the server;

[0029] Receive each picture and the associated index sent by the server, and display each picture;

[0030] Obtaining the input position of the picture selected by the user, and generating a numerical value according to the picture name of the selected picture;

[0031] The input position and the value are sent to the server.

[0032] In some embodiments, the step of sending an input request for an identity identifier to a server includes:

[0033] Obtaining the transaction serial number of the current transaction and generating a second random number;

[0034] Generate an input request for an identity identifier according to the transaction serial number and the second random number, and send the input request to the client;

[0035] The receiving of each picture and the associated index sent by the server includes:

[0036] receiving each of the pictures, the associated index and the third random number sent by the server, and generating a session key according to the second random number, the third random number and the transaction serial number;

[0037] The sending the input position and the value to the server includes:

[0038] The numerical value and the input position are encrypted according to the session key to obtain encrypted data, and the encrypted data is sent to the server.

[0039] In some embodiments, after generating a session key according to the second random number, the third random number and the transaction serial number, the method further includes:

[0040] When a click operation of the completion button is detected, the session key is used to encrypt a preset value to send to the server, and the preset value is used to indicate that the user has completed the input of the identity identification.

[0041] In a third aspect, the present application provides a server, including:

[0042] A first receiving module is used to receive an input request for an identity identifier sent by a client, and generate multiple images and associated indexes;

[0043] A first sending module, used to send each of the pictures and the associated index to the client, and receive the input position of the picture selected by the user and the value corresponding to the selected picture sent by the client;

[0044] A first determination module, used to determine a picture name corresponding to the selected picture according to the numerical value, and determine an index value corresponding to the picture name, wherein the index value is an index associated with the selected picture;

[0045] The second determination module is used to determine the numbers input by the user on the client according to the index values, and combine the numbers according to the input positions to obtain an identity, and send the identity to the client for the client to perform payment operations.

[0046] In a fourth aspect, the present application provides a client, including:

[0047] The second sending module is used to send an input request for the identity identifier to the server when it is detected that the transaction amount of the current transaction has been input;

[0048] A second receiving module is used to receive each picture and the associated index sent by the server, and display each picture;

[0049] An acquisition module, used to acquire the input position of the picture selected by the user, and generate a numerical value according to the picture name of the selected picture;

[0050] The third sending module is used to send the input position and the value to the server.

[0051] In a fifth aspect, the present application provides an electronic device, comprising: a processor, and a memory and a communication interface communicatively connected to the processor;

[0052] The communication interface is used to communicate with other communication devices;

[0053] The memory is used to store computer-executable instructions;

[0054] The processor is used to execute the computer-executable instructions stored in the memory to implement the method for inputting an identity during a payment process as provided in the first aspect or the second aspect.

[0055] In a sixth aspect, the present application provides a computer-readable storage medium, which stores computer execution instructions. When the computer execution instructions are executed by a processor, the method for inputting an identity identifier during a payment process as provided in the first aspect or the second aspect is implemented.

[0056] In a seventh aspect, the present application provides a computer program product, including a computer program, which, when executed by a processor, implements the method for inputting an identity identifier during a payment process as provided in the first aspect or the second aspect.

[0057] The method and related device for inputting identity identification in the payment process provided by the present application realizes the safe input of identity identification by the user through the triple mapping of the picture selected by the user, the index value and the array associated with the index. Even if the user selects the picture through a physical keyboard or a virtual keyboard, it is difficult to obtain the number input by the user, which increases the difficulty of obtaining the number in the identity identification and improves the security of payment. In addition, the numbers obtained by the triple mapping mechanism are combined according to the input position of the picture, which increases the difficulty of obtaining the identity identification and further improves the security of payment. BRIEF DESCRIPTION OF THE DRAWINGS

[0058] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0059] Figure 1 This is a schematic diagram of the scenarios involved in the method of inputting identity identification during the payment process of this application;

[0060] Figure 2 This is a schematic diagram of the steps of inputting the identity identifier during the payment process on the server side of this application. Figure 1 ;

[0061] Figure 3 This is a schematic diagram of the steps of inputting the identity identifier during the payment process on the server side of this application. Figure 2 ;

[0062] Figure 4 This is a schematic diagram of the steps of inputting the identity identifier during the payment process on the server side of this application. Figure 3 ;

[0063] Figure 5 This is a schematic diagram of the steps of the method for inputting the identity identifier during the payment process on the client side of this application. Figure 1 ;

[0064] Figure 6 This is a schematic diagram of the steps of the method for inputting the identity identifier during the payment process on the client side of this application. Figure 2 ;

[0065] Figure 7 A schematic diagram of a program module of a server provided in an embodiment of the present application;

[0066] Figure 8 A schematic diagram of a program module of a client provided in an embodiment of the present application;

[0067] Fig. 9 A schematic diagram of the hardware structure of an electronic device provided in an embodiment of the present application.

[0068] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0069] In order to make the purpose, technical scheme and advantages of the embodiments of the present application clearer, the technical scheme in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present application. In addition, although the disclosure in the present application is introduced according to one or several exemplary examples, it should be understood that each aspect of these disclosures can also constitute a complete implementation method separately.

[0070] It should be noted that the brief description of terms in this application is only for the convenience of understanding the embodiments described below, and is not intended to limit the embodiments of this application. Unless otherwise specified, these terms should be understood according to their common and usual meanings.

[0071] In addition, the terms "include" and "have" and any variations thereof are intended to cover but not exclude inclusion, for example, a product or device comprising a list of components is not necessarily limited to those components expressly listed but may include other components not expressly listed or inherent to such products or devices.

[0072] The term "module" used in the embodiments of the present application refers to any known or later developed hardware, software, firmware, artificial intelligence, fuzzy logic, or a combination of hardware and / or software code that can perform the functions associated with the element.

[0073] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0074] When a user makes a payment on the client, the user is required to enter an identity for verification before subsequent payment operations can be performed.

[0075] In the exemplary technology, when a user inputs an identity, the user clicks a key on a physical keyboard or a virtual keyboard of the client to input a corresponding number, thereby obtaining the identity through the input number.

[0076] The inventor of the present application has discovered that the numbers input by the user on the physical keyboard or virtual keyboard can be easily intercepted, making the identity easy to be stolen, resulting in a problem of low payment security.

[0077] The inventor of the present application therefore thought that through the triple mapping of the user-selected picture, the index value, and the array associated with the index, the user's secure input of the identity identification is achieved. Even if the user selects the picture through a physical keyboard or a virtual keyboard, it is difficult to obtain the number entered by the user, which increases the difficulty of obtaining the number in the identity identification and improves the security of payment. In addition, the numbers obtained by the triple mapping mechanism are combined according to the input position of the picture, which increases the difficulty of obtaining the identity identification and further improves the security of payment.

[0078] Reference Figure 1 , Figure 1 The present invention is a schematic diagram of an application scenario of the method for inputting an identity identifier in the payment process of the present application. When the user completes the input of the transaction amount of the current transaction in the client 100, the client 100 sends an input request for the identity identifier to the server 200. The server 200 generates multiple pictures, and the server 200 sends each picture and the associated index to the client 100. The client 100 displays each picture 110. Different numbers are displayed on each picture 110, and the user can select a picture 110 on the client 100. The client 100 obtains the picture identifier of the picture 110 selected by the user, converts the picture identifier into a numerical value, and obtains the input position of the selected picture on the client 100. The client 100 sends the numerical value and the input position to the server 200. The server 200 converts the numerical value into a picture identifier, and then obtains the index value of the picture identifier, and obtains the number input by the user through the index value. The input position represents the position of the number input by the user in the identity identifier. The server 200 combines each number through each input position to obtain the identity identifier, and the identity identifier is obtained by combining each number input by the user. The server 200 associates the identity with the transaction serial number for use by the transaction processing system, which is the system where the client conducts transactions.

[0079] The following Figure 1The technical solutions shown in the present application are described in detail in conjunction with specific embodiments. It should be noted that the following embodiments can exist independently or in combination with each other, and the same or similar contents will not be described repeatedly in different embodiments.

[0080] Reference Figure 2 , Figure 2 Schematic diagram of the process of inputting the identity identifier in the payment process provided by the server side in the embodiment of the present application Figure 1 , the methods for inputting identity identification during payment include:

[0081] Step S201, receiving an input request for an identity identifier sent by a client, and generating a plurality of images and associated indexes.

[0082] In this embodiment, the execution subject is the server. When the user conducts an online transaction on the client and completes the input of the transaction amount, the client needs to input an identity. The identity can be a personal identification number (PIN), which is a string of numbers set in advance by the user for identity identification.

[0083] The client can be a commercial device. For example, the user brings the financial card close to the identification component of the commercial device through near field communication. The identification component reads the relevant information of the financial card, so that the commercial device outputs a transaction interface. The user can enter the transaction amount on the transaction interface. After completing the entry of the transaction amount, the client needs to authenticate the user, that is, request the user to enter an identity. When the client is a commercial device, the server is the background server that receives the transaction amount. In addition, the client can also be a terminal device loaded with a transaction program, such as a mobile phone, a computer or a tablet.

[0084] The client sends an input request for an identity to the server, and the server generates multiple pictures and associated indexes. Exemplarily, the identity is a combination of numbers from 0 to 9, and the server generates ten pictures, each of which contains different numbers. Specifically, the server generates ten index values, each of which is associated with a number from 0 to 9. The number is used as the content of the picture, and the index value is used as the name of the picture, that is, the index associated with the picture is the picture name. The name of the picture and the content of the picture constitute the picture.

[0085] Step S202: Send each picture and the associated index to the client, and receive the input position of the picture selected by the user and the value corresponding to the selected picture sent by the client.

[0086] After generating multiple images, the server sends each image and its associated index to the client, which displays each image.

[0087] In one example, the client displays ten pictures in a 4×3 matrix grid, with the first three rows of the matrix grid displaying nine pictures, and any grid in the last row displaying the remaining pictures.

[0088] In another example, the client is provided with a plurality of rows of display areas, each row of the display area displays ten pictures, and the number of rows of the display area is the same as the number of numbers in the identity identifier, which may be the number of rows of the display area where the second picture is located.

[0089] After the client displays each picture, each picture contains a different number, and the user can select the picture on the client. For example, if the user needs to enter the number 1, the picture containing the number 1 is selected.

[0090] The client obtains the image selected by the user, obtains the image identifier of the selected image, and the input position. The input position refers to the input order of the images selected by the user, and the input position can represent the order of the number of times the user has selected. For example, when the user enters the fifth number, the input position of the image where the fifth number is located is set to 5 on the client, that is, the input position is represented by 5. For another example, the client includes a multi-line display area. If the user enters a number in the display area of ​​the fifth line, the representation is that the user enters the fifth number, and the line number of the display area is used as the input position.

[0091] The client obtains the image identifier corresponding to the selected image, and the image identifier is an index array. The client converts the index array and rounds it to get a numerical value, and sends the numerical value and input position of the image to the server. That is, the server receives the input position of the user-selected image sent by the client and the numerical value corresponding to the selected image.

[0092] Step S203, determining the picture name corresponding to the selected picture according to the numerical value, and determining the index value corresponding to the picture name, where the index value is the index associated with the selected picture.

[0093] After obtaining the numerical value, the server reverses the numerical value to obtain an index array. The index array is the image name, and the index associated with the image array is the index value, that is, the index associated with the selected image is the index value.

[0094] Step S204, determine the numbers input by the user at the client according to the index values, combine the numbers according to the input positions, obtain an identity, and associate the identity with the transaction serial number of the client for use by the transaction processing system.

[0095] After obtaining the index values ​​corresponding to the selected images, the server determines the numbers entered by the user on the client based on the index values. For example, the server stores the numbers associated with the index values, and obtains the numbers associated with the index values ​​based on the image names, which are the numbers entered by the user on the client.

[0096] The server combines the numbers based on the input positions. For example, if the input position represents 5, the number corresponding to the index value is the fifth number in the identity identifier, that is, the position of the number is determined by the input position, and the identity identifier PIN is obtained by combining the numbers according to the positions of the numbers.

[0097] The server associates the identity with the transaction serial number of the client for use by the transaction processing system. The transaction processing system refers to the system where the client conducts transactions.

[0098] In this embodiment, the user's secure input of the identity is achieved through the triple mapping of the image selected by the user, the index value, and the array associated with the index. Even if the user selects the image through a physical keyboard or a virtual keyboard, it is difficult to obtain the number entered by the user, which increases the difficulty of obtaining the number in the identity and improves the security of payment. In addition, the numbers obtained by the triple mapping mechanism are combined according to the input position of the image, which increases the difficulty of obtaining the identity and further improves the security of payment.

[0099] Reference Figure 3 , Figure 3 Schematic diagram of the process of inputting identity identification in the payment process on the server side provided by this application Figure 2 ,based on Figure 2 In the illustrated embodiment, step S201 includes:

[0100] Step S301, generate multiple first random numbers, and determine the index value corresponding to each first random number.

[0101] In this embodiment, when the server receives the input request of the identity identifier sent by the client, it generates multiple first random numbers, and the number of the generated first random numbers is the same as the number of pictures to be generated. For example, there are ten numbers from 0 to 9, and the server generates ten first random numbers.

[0102] After generating each first random number, the server configures a corresponding index value DV_PIN for each first random number, that is, the first random number is used as the value of the index array to obtain the index value. In addition, the server configures a corresponding key value for each first random number, and the key value is any one of 0 to 9, that is, the corresponding number is configured for the first random number.

[0103] Step S302, generating picture content according to a number associated with the index value corresponding to the first random number, and generating a picture name according to the index value corresponding to the first random number.

[0104] After configuring the first random number with a number, the server generates picture content based on the number and uses the index value as the picture name. For example, if the number is 1, the picture content containing the number 1 is generated.

[0105] Step S303: Generate multiple pictures and associated indexes according to the picture content and picture name corresponding to each first random number.

[0106] After obtaining the image content and the image name, the server combines the image content and the image name to obtain the image. That is, each first random number and the associated number can generate a picture and an associated index.

[0107] In this embodiment, the server generates multiple first random numbers, thereby generating a corresponding image for each first random number, that is, configuring a different image for each input by the client, avoiding the situation where identity leakage occurs due to the use of fixed images, and improving payment security.

[0108] Reference Figure 4 , Figure 4 Schematic diagram of the process of inputting identity identification in the payment process on the server side provided by this application Figure 3 ,based on Figure 2 or Figure 3 In the illustrated embodiment, step S202 includes:

[0109] Step S401, obtaining the transaction serial number of the current transaction of the client and the second random number generated by the client from the input request.

[0110] In this embodiment, the data between the client and the server is encrypted using a session key.

[0111] Exemplarily, the session key is generated based on the current transaction conducted by the user. Specifically, after the user enters the transaction amount in the client, the client obtains the transaction serial number ID_TRANS of the current transaction and generates a second random number RNDc. The client generates an input request for the identity based on the transaction serial number and the second random number, and sends the input request to the server.

[0112] After receiving the input request, the server parses the input request to obtain the transaction serial number ID_TRANS and the second random number RNDc.

[0113] Step S402, generate a third random number, and generate a session key according to the second random number, the third random number and the transaction serial number.

[0114] After the server obtains the transaction serial number and the second random number RNDc, the server generates a second random number RNDs, and generates a session key through the second random number, the third random number and the transaction serial number; in addition, the server can obtain the device identification of the service platform from the service platform that executes the current transaction, and generate a session key based on the device identification, the second random number, the third random number and the transaction serial number, thereby making the session key more difficult to crack.

[0115] Step S403: Send the third random number, each picture and the associated index to the client.

[0116] After the server generates the third random number, it sends the third random number, each picture, and the associated index to the client.

[0117] After receiving the third random number sent by the server, the client generates a session key based on the second random number, the third random number and the transaction serial number. In addition, the client can obtain the device identification of the current transaction on the service platform, and generate a session key based on the device identification, the second random number, the third random number and the transaction identification.

[0118] Step S404, receiving the encrypted data sent by the client, and decrypting the encrypted data using the session key to obtain the input position and value.

[0119] When the client generates a session key, it will encrypt the data to be sent based on the session key. Specifically, after generating the session key, the client encrypts the value and input position obtained for each selected image to obtain encrypted data, and sends the encrypted data to the server. The server receives the encrypted data sent by the client and decrypts the encrypted data using the session key to obtain the input position and value.

[0120] In this embodiment, the client encrypts the value and input position determined by the image selected by the user through the session key with the server, preventing other terminals from directly intercepting the touch sequence and target characters during the client's data transmission process, thereby further improving payment security.

[0121] In one embodiment, the client will also display a completion button when displaying each picture. When the user clicks the completion button, the client will use the session key to encrypt the preset value to obtain encrypted data, and if the value obtained by the server parsing the encrypted data is the preset value, it can be determined that the user has completed the input of the identity.

[0122] Specifically, after obtaining the encrypted data, the server uses the session key to decrypt the encrypted data and first obtains the value from the decrypted data. When the value is not the preset value, it can be determined that the user has not completed the input of the identity identification. The server obtains the input position from the decrypted data and stores the value and the input position. The value and the input position can be encrypted and stored.

[0123] When the value is a preset value, it can be determined that the user has completed the input of the identity identification. The server obtains the stored input positions and values, determines the numbers entered by the user based on the stored values, and combines the numbers based on the stored input positions to obtain the identity identification.

[0124] In this embodiment, the client sends a preset value to the server to prompt the user to complete the identity input, so that the server can complete the acquisition of the identity as soon as possible, thereby improving the user's payment efficiency.

[0125] Reference Figure 5 , Figure 5 Schematic diagram of the process of inputting identity identification in the payment process provided by the client side Figure 1 , the methods for inputting identity identification during payment include:

[0126] Step S501, when it is detected that the transaction amount of the current transaction has been input, an input request for an identity identifier is sent to the server.

[0127] In this embodiment, the execution subject is the client. When the user conducts an online transaction on the client and completes the input of the transaction amount, the client needs to input an identity. The identity can be a personal identification number (PIN), which is a string of numbers set in advance by the user for identity identification.

[0128] The client can be a commercial device. For example, the user brings the financial card close to the identification component of the commercial device through near field communication. The identification component reads the relevant information of the financial card, so that the commercial device outputs a transaction interface. The user can enter the transaction amount on the transaction interface. After completing the input of the transaction amount, the client needs to authenticate the user, that is, request the user to enter the identity. When the client is a commercial device, the server is a background server that receives the transaction amount. In addition, the client can also be a terminal device loaded with a transaction program, and the terminal device is, for example, a mobile phone, a computer or a tablet. When the client detects the input of the transaction amount of the current transaction, the client sends an input request for the identity to the server, and the server generates multiple pictures and associated indexes. Exemplarily, the identity is obtained by combining numbers from 0 to 9, and the server generates ten pictures, each of which contains different numbers. Specifically, the server generates ten index values, each of which is associated with a number from 0 to 9, the number is used as the content of the picture, and the index value is used as the name of the picture. The name of the picture and the content of the picture constitute the picture.

[0129] After generating multiple images, the server sends each image and the associated index to the client.

[0130] Step S502, receiving each picture and the associated index sent by the server, and displaying each picture.

[0131] The client displays each picture sent by the server. In one example, the client displays ten pictures in a 4×3 matrix grid, with nine pictures displayed in the first three rows of the matrix grid and the remaining pictures displayed in any grid in the last row.

[0132] In another example, the client is provided with a plurality of rows of display areas, each row of the display area displays ten pictures, and the number of rows of the display area is the same as the number of numbers in the identity identifier, which may be the number of rows of the display area where the second picture is located.

[0133] Step S503, obtaining the input position of the picture selected by the user, and generating a numerical value according to the picture name of the selected picture.

[0134] After the client displays each picture, each picture contains a different number, and the user can select the picture on the client. For example, if the user needs to enter the number 1, the picture containing the number 1 is selected.

[0135] The client obtains the image selected by the user, obtains the image identifier of the selected image, and the input position, where the input position refers to the input position of the selected image on the client. The input position can represent the order of the number of times the user has selected. For example, when the user enters the fifth number, the input position of the image where the fifth number is located on the client is set to 5, that is, the input position is represented by 5. For another example, the client includes a multi-line display area. If the user enters a number in the display area of ​​the fifth line, the representation is that the user enters the fifth number, and the line number of the display area is used as the input position.

[0136] The client obtains the image identifier corresponding to the selected image, and the image identifier is an index array. The client converts the index array and rounds it to get a numerical value, and sends the numerical value and input position of the image to the server. That is, the server receives the input position of the user-selected image sent by the client and the numerical value corresponding to the selected image.

[0137] Step S504, sending the input position and value to the server.

[0138] After obtaining the numerical value, the server reverses the numerical value to obtain the index array. The index array is the image name, and the index associated with the image array is the index value.

[0139] After obtaining the index values ​​corresponding to the selected images, the server determines the numbers entered by the user on the client based on the index values. For example, the server stores the numbers associated with the index values, and obtains the numbers associated with the index values ​​based on the image names, which are the numbers entered by the user on the client.

[0140] The server combines the numbers based on the input positions. For example, if the input position represents 5, the number corresponding to the index value is the fifth number in the identity identifier, that is, the position of the number is determined by the input position, and the identity identifier PIN is obtained by combining the numbers according to the positions of the numbers.

[0141] The server sends the identity to the client. After obtaining the identity, the client can perform subsequent payment operations, that is, collect the transaction amount entered by the user.

[0142] In this embodiment, the user's secure input of the identity is achieved through the triple mapping of the image selected by the user, the index value, and the array associated with the index. Even if the user selects the image through a physical keyboard or a virtual keyboard, it is difficult to obtain the number entered by the user, which increases the difficulty of obtaining the number in the identity and improves the security of payment. In addition, the numbers obtained by the triple mapping mechanism are combined according to the input position of the image, which increases the difficulty of obtaining the identity and further improves the security of payment.

[0143] Reference Figure 6 , Figure 6 Schematic diagram of the process of inputting identity identification in the payment process provided by the client side Figure 2 ,based on Figure 5 In the illustrated embodiment, step S501 includes:

[0144] Step S601, when it is detected that the transaction amount of the current transaction has been input, the transaction serial number of the current transaction is obtained and a second random number is generated.

[0145] Step S602: Generate an input request for the identity identifier according to the transaction serial number and the second random number, and send the input request to the client.

[0146] In this embodiment, the data between the client and the server is encrypted using a session key.

[0147] Exemplarily, the session key is generated based on the current transaction conducted by the user. Specifically, after the user enters the transaction amount in the client, the client obtains the transaction serial number ID_TRANS of the current transaction and generates a second random number RNDc. The client generates an input request for the identity based on the transaction serial number and the second random number, and sends the input request to the server.

[0148] After receiving the input request, the server parses the input request to obtain the transaction serial number ID_TRANS and the second random number RNDc.

[0149] After the server obtains the transaction serial number and the second random number RNDc, the server generates a second random number RNDs, and generates a session key through the second random number, the third random number and the transaction serial number; in addition, the server can obtain the device identification of the service platform from the service platform that executes the current transaction, and generate a session key based on the device identification, the second random number, the third random number and the transaction serial number, thereby making the session key more difficult to crack.

[0150] Step S502 includes:

[0151] Step S603, receiving each picture, the associated index and the third random number sent by the server, generating a session key according to the second random number, the third random number and the transaction serial number, and displaying each picture.

[0152] After the server generates the third random number, it sends the third random number, each picture, and the associated index to the client.

[0153] After receiving the third random number sent by the server, the client generates a session key based on the second random number, the third random number and the transaction serial number. In addition, the client can obtain the device identification of the current transaction on the service platform, and generate a session key based on the device identification, the second random number, the third random number and the transaction identification.

[0154] Step S504 includes:

[0155] Step S604, encrypt the value and the input position according to the session key to obtain encrypted data, and send the encrypted data to the server.

[0156] When the client generates a session key, it will encrypt the data to be sent based on the session key. Specifically, after generating the session key, the client encrypts the value and input position obtained for each selected image to obtain encrypted data, and sends the encrypted data to the server. The server receives the encrypted data sent by the client and decrypts the encrypted data using the session key to obtain the input position and value.

[0157] In this embodiment, the client encrypts the value and input position determined by the image selected by the user through the session key with the server, preventing other terminals from directly intercepting the touch sequence and target characters during the client's data transmission process, thereby further improving payment security.

[0158] In one embodiment, the client will also display a completion button when displaying each picture. When the user clicks the completion button, the client will use the session key to encrypt the preset value to obtain encrypted data, and if the value obtained by the server parsing the encrypted data is the preset value, it can be determined that the user has completed the input of the identity.

[0159] Specifically, after obtaining the encrypted data, the server uses the session key to decrypt the encrypted data and first obtains the value from the decrypted data. When the value is not the preset value, it can be determined that the user has not completed the input of the identity identification. The server obtains the input position from the decrypted data and stores the value and the input position. The value and the input position can be encrypted and stored.

[0160] When the value is a preset value, it can be determined that the user has completed the input of the identity identification. The server obtains the stored input positions and values, determines the numbers entered by the user based on the stored values, and combines the numbers based on the stored input positions to obtain the identity identification.

[0161] In this embodiment, the client sends a preset value to the server to prompt the user to complete the identity input, so that the server can complete the acquisition of the identity as soon as possible, thereby improving the user's payment efficiency.

[0162] In one embodiment, the client may be a commercial device, which is provided with a transaction application APP, a software development kit SDK, and a small program APPlet. The client displays an operation interface based on the APP for users to conduct transactions on the APP, the APPlet provides random numbers and session keys, and the SDK implements data interaction between the APP and the APPlet. With the identity authentication information as the PIN, the user performs transaction operations on the APP, and the client sets the APP, SDK, and APPlet, a brief description of the input method of the identity identification during the payment process is given as follows:

[0163] 1. The APP starts the transaction processing, completes the input of the transaction amount, enters the PIN input stage, and the APP obtains the serial number ID_TRANS of the current transaction;

[0164] 2. The APP calls the SDK's "PIN-Input Preparation-SDK" interface and inputs ID_TRANS to the SDK;

[0165] 3. SDK calls the APPlet interface and inputs ID_TRANS to the APPlet;

[0166] 4. APPlet generates a first random number RNDc and inputs RNDc to SDK;

[0167] 5. SDK inputs RNDc into APP;

[0168] 6. The APP calls the "PIN-Input-Initialization" interface of the server, and the server sends a PIN input request carrying RNDc and ID_TRANS;

[0169] 7. The server generates 10 random numbers as the values ​​of 10 DV_PINs;

[0170] 8. The server converts each DV_PIN into a file name DV_PIN[i], where the file name is the picture identifier and i is the content of the generated picture. Ten first pictures are generated, where i is the above-mentioned indicator identifier;

[0171] 9. The server records ID_TRANS, generates a second random number RNDs, and generates a session key K_P_Session based on RNDs, RNDc, and ID_TRANS;

[0172] 10. The server sends RNDs and ten first pictures to the APP;

[0173] 11. The APP calls the SDK's "PIN-Input Start-SDK" interface and inputs RNDs to the SDK;

[0174] 12. SDK calls the APPlet interface and inputs RNDs to the APPlet;

[0175] 13. APPlet generates a session key K_P_Session based on RNDs, RNDc, and ID_TRANS, and feeds back a normal response to APP through SDK to prompt APP to display ten first pictures for users to enter identity authentication information;

[0176] 14. The APP will display 10 pictures and the APP will display the "Done" button;

[0177] 15. Every time the user selects a first picture or selects the "Done" button, the APP will perform the following processing:

[0178] 15.1. If the user clicks on the first picture, the APP retrieves the picture ID of the picture and converts the picture ID into an integer (the converted integer is the i in the file name of the first picture generated by the server), recorded as KI (target character). If the user clicks on the first picture, KI is 0, and 0 is used as the termination character;

[0179] 15.2. APP calls the session key K_P_Session of APPlet through SDK, encrypts KI to obtain eKI, that is, sends the touch order of the first picture and KI to APPlet to encrypt and obtain eKI;

[0180] 15.3. The APP calls the server's interface and inputs eKI to the server;

[0181] 16. After the server obtains the eKI, it uses the session key K_P_Session to decrypt the eKI to obtain the KI and the touch order. If the KI is not 0, the KI and the touch order are stored; if the KI is 0, indicating that the client has completed the identity authentication input, all the saved KIs are arranged according to the corresponding touch order, and the following processing is performed:

[0182] 16.1. Determine the file name corresponding to KI, and determine the corresponding DV_PIN through the file name. The value configured by the third random number associated with DV_PIN is the real key value, and the real key value is the parameter corresponding to KI;

[0183] 16.2. After all KIs are restored to their corresponding key values, the key values ​​are arranged according to the number of touches of KI to obtain the PIN.

[0184] In this embodiment, the secure input of PIN is achieved through the triple index mapping of "real key value->array index->image"; and the information theft prevention mechanism on the client side is achieved through the dynamic index and the input position of the image (touch order).

[0185] Based on the contents described in the above embodiments, a server is also provided in the embodiments of the present application. Figure 7 , Figure 7 This is a schematic diagram of a program module of a server provided in an embodiment of the present application. In some implementations, the server 700 includes:

[0186] The first receiving module 710 is used to receive an input request for an identity identifier sent by a client, and generate multiple images and associated indexes;

[0187] The first sending module 720 is used to send each picture and the associated index to the client, and receive the input position of the picture selected by the user and the value corresponding to the selected picture sent by the client;

[0188] A first determination module 730, configured to determine a picture name corresponding to the selected picture according to the numerical value, and determine an index value corresponding to the picture name, wherein the index value is an index associated with the selected picture;

[0189] The second determination module 740 is used to determine the numbers input by the user on the client according to the index values, and combine the numbers according to the input positions to obtain an identity, and associate the identity with the transaction serial number of the client for use by the transaction processing system.

[0190] In some embodiments, the server 700 is specifically used for:

[0191] Generate multiple first random numbers, and determine the index value corresponding to each first random number;

[0192] Generate picture content according to a number associated with the index value corresponding to the first random number, and generate a picture name according to the index value corresponding to the first random number;

[0193] According to the picture content and picture name corresponding to each first random number, multiple pictures and associated indexes are generated.

[0194] In some embodiments, the server 700 is specifically used for:

[0195] Obtaining the transaction serial number of the client's current transaction and a second random number generated by the client from the input request;

[0196] Generate a third random number, and generate a session key according to the second random number, the third random number and the transaction serial number;

[0197] Sending the third random number, each picture, and the associated index to the client;

[0198] Receive the encrypted data sent by the client, and use the session key to decrypt the encrypted data to obtain the input position and value.

[0199] In some embodiments, the server 700 is specifically used for:

[0200] Decrypt the encrypted data using the session key to obtain a numerical value;

[0201] When the value is not a preset value, the input position is obtained from the decrypted data, and the value and the input position are stored.

[0202] In some embodiments, the server 700 is specifically used for:

[0203] If the value is a preset value, determining that the user has completed the identity input;

[0204] According to the input position, the numbers are combined, including:

[0205] Based on the stored input positions, the numbers are combined to obtain an identity tag.

[0206] It should be noted that the various steps in the method for inputting the identity identification during the payment process executed by the server are specifically referred to the above embodiment and will not be described in detail here.

[0207] Based on the contents described in the above embodiments, a client is also provided in the embodiments of the present application. Figure 8 , Figure 8 This is a schematic diagram of a program module of a client provided in an embodiment of the present application. In some implementations, the client 800 includes:

[0208] The second sending module 810 is used to send an input request for an identity identifier to the server when it is detected that the transaction amount of the current transaction has been input;

[0209] The second receiving module 820 is used to receive each picture and the associated index sent by the server, and display each picture;

[0210] The acquisition module 830 is used to acquire the input position of the picture selected by the user and generate a numerical value according to the picture name of the selected picture;

[0211] The third sending module 840 sends the input position and value to the server.

[0212] In one embodiment, the client 800 is specifically used for:

[0213] Obtain the transaction serial number of the current transaction and generate a second random number;

[0214] Generate an input request for the identity identifier according to the transaction serial number and the second random number, and send the input request to the client;

[0215] Receive each image and associated index sent by the server, including:

[0216] Receive each picture, the associated index and the third random number sent by the server, and generate a session key according to the second random number, the third random number and the transaction serial number;

[0217] Send the input position and value to the server, including:

[0218] The value and input position are encrypted according to the session key to obtain encrypted data, and the encrypted data is sent to the server.

[0219] In one embodiment, the client 800 is specifically used for:

[0220] When a click operation of the completion button is detected, a preset value is encrypted using a session key to send to the server, and the preset value is used to indicate that the user has completed the input of the identity identification.

[0221] It should be noted that the various steps in the method for inputting the identity identification during the payment process executed by the client refer to the above embodiment for details and will not be described in detail here.

[0222] Furthermore, based on the contents described in the above embodiments, an electronic device is also provided in an embodiment of the present application, which includes at least one processor, and a communication interface and a memory to which the processor is communicatively connected; wherein the communication interface is used to communicate with other communication devices, and the memory stores computer-executable instructions; the above at least one processor executes the computer-executable instructions stored in the memory to implement each step in the method for inputting an identity identifier during the payment process as described in the above embodiments.

[0223] In order to better understand the embodiments of the present application, refer to Fig. 9 , Fig. 9 A schematic diagram of the hardware structure of an electronic device provided in an embodiment of the present application.

[0224] like Fig. 9 As shown, the electronic device 900 of this embodiment includes: a processor 901, a memory 902, and a communication interface 904; wherein:

[0225] Memory 902, used to store computer-executable instructions;

[0226] The communication interface 904 is used to communicate with other communication devices;

[0227] The processor 901 is used to execute the computer-executable instructions stored in the memory to implement the various steps in the query optimization method described in the above embodiment.

[0228] Optionally, the memory 902 may be independent or integrated with the processor 901 .

[0229] When the memory 902 is independently provided, the device further includes a bus 903 for connecting the memory 902 , the communication interface 904 and the processor 901 .

[0230] An embodiment of the present application provides a computer-readable storage medium, which stores computer-executable instructions. When a processor executes the computer-executable instructions, each step of the method for inputting an identity identifier during a payment process as described in the above embodiment is implemented.

[0231] An embodiment of the present application provides a computer program product, including a computer program. When the computer program is executed by a processor, the computer program implements the various steps of the method for inputting an identity identifier during the payment process described in the above embodiment.

[0232] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of modules is only a logical function division, and there may be other division methods in actual implementation, such as multiple modules can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or modules, which can be electrical, mechanical or other forms.

[0233] The modules described as separate components may or may not be physically separated, and the components shown as modules may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0234] In addition, each functional module in each embodiment of the present application can be integrated into one processing unit, or each module can exist physically separately, or two or more modules can be integrated into one unit. The above-mentioned module-composed unit can be implemented in the form of hardware or in the form of hardware plus software functional units.

[0235] The above-mentioned integrated module implemented in the form of a software function module can be stored in a computer-readable storage medium. The above-mentioned software function module is stored in a storage medium, including a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor to perform some steps of the methods of various embodiments of the present application.

[0236] It should be understood that the processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), etc. A general-purpose processor may be a microprocessor or any conventional processor, etc. The steps of the method disclosed in the application may be directly implemented as being executed by a hardware processor, or may be executed by a combination of hardware and software modules in the processor.

[0237] The memory may include high-speed memory, and may also include non-volatile storage, such as at least one disk memory, and may also be a USB flash drive, a mobile hard disk, a read-only memory, a magnetic disk or an optical disk, etc.

[0238] The bus may be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, the bus in the drawings of the present application is not limited to only one bus or one type of bus.

[0239] The storage medium may be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory, electrically erasable programmable read-only memory, erasable programmable read-only memory, programmable read-only memory, read-only memory, magnetic memory, flash memory, magnetic disk or optical disk. The storage medium may be any available medium that can be accessed by a general or special purpose computer.

[0240] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit it. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present application.

Claims

1. A method for inputting identity identification during payment, characterized in that: Applied to the server, the method for inputting the identity during the payment process includes: Receive the identity input request sent by the client and generate multiple images and associated indexes; Sending each of the pictures and the associated index to a client, and receiving the input position of the picture selected by the user and the value corresponding to the selected picture sent by the client; Determine a picture name corresponding to the selected picture according to the numerical value, and determine an index value corresponding to the picture name, where the index value is an index associated with the selected picture; The numbers input by the user at the client are determined according to the index values, and the numbers are combined according to the input positions to obtain an identity identifier, and the identity identifier is associated with the transaction serial number of the transaction conducted by the client for use by the transaction processing system.

2. The method according to claim 1, characterized in that The generating of multiple pictures and associated indexes includes: Generate multiple first random numbers, and determine the index value corresponding to each first random number; Generate picture content according to a number associated with the index value corresponding to the first random number, and generate a picture name according to the index value corresponding to the first random number; According to the picture content and picture name corresponding to each of the first random numbers, a plurality of the pictures and associated indexes are generated.

3. The method according to claim 1, characterized in that The sending of each of the pictures and the associated index to the client, and receiving the input position of the picture selected by the user and the value corresponding to the selected picture sent by the client, includes: Acquire the transaction serial number of the current transaction of the client and the second random number generated by the client from the input request; Generate a third random number, and generate a session key according to the second random number, the third random number and the transaction serial number; Sending the third random number, each of the pictures and the associated index to the client; The encrypted data sent by the client is received, and the encrypted data is decrypted using the session key to obtain the input position and value.

4. The method according to 3, characterized in that: Decrypting the encrypted data using the session key includes: Decrypting the encrypted data using the session key to obtain a numerical value; In a case where the numerical value is not a preset numerical value, the input position is obtained from the decrypted data, and the numerical value and the input position are stored.

5. The method according to claim 4, characterized in that After the encrypted data is decrypted using the session key to obtain a value, the method further includes: If the value is a preset value, determining that the user has completed the identity input; Combining the numbers according to the input positions includes: Based on the stored input positions, the numbers are combined to obtain an identity tag.

6. A method for inputting identity identification during payment, characterized in that: Applied to the client, the method for inputting the identity identifier during the payment process includes: When it is detected that the transaction amount of the current transaction has been input, a request for inputting the identity identifier is sent to the server; Receive each picture and the associated index sent by the server, and display each picture; Obtaining the input position of the picture selected by the user, and generating a numerical value according to the picture name of the selected picture; The input position and the value are sent to the server.

7. The method according to claim 6, characterized in that The step of sending an input request for an identity identifier to a server includes: Obtaining the transaction serial number of the current transaction and generating a second random number; Generate an input request for an identity identifier according to the transaction serial number and the second random number, and send the input request to the client; The receiving of each picture and the associated index sent by the server includes: receiving each of the pictures, the associated index and the third random number sent by the server, and generating a session key according to the second random number, the third random number and the transaction serial number; The sending the input position and the value to the server includes: The numerical value and the input position are encrypted according to the session key to obtain encrypted data, and the encrypted data is sent to the server.

8. The method according to claim 6, characterized in that After the session key is generated according to the second random number, the third random number and the transaction serial number, the method further includes: When a click operation of the completion button is detected, the session key is used to encrypt a preset value to send to the server, and the preset value is used to indicate that the user has completed the input of the identity identification.

9. A server, characterized in that: include: A first receiving module is used to receive an input request for an identity identifier sent by a client, and generate multiple images and associated indexes; A first sending module, used to send each of the pictures and the associated index to the client, and receive the input position of the picture selected by the user and the value corresponding to the selected picture sent by the client; A first determination module, used to determine a picture name corresponding to the selected picture according to the numerical value, and determine an index value corresponding to the picture name, wherein the index value is an index associated with the selected picture; The second determination module is used to determine the numbers input by the user on the client according to the index values, and combine the numbers according to the input positions to obtain an identity, and send the identity to the client for the client to perform payment operations.

10. A client, characterized in that: include: The second sending module is used to send an input request for the identity identifier to the server when it is detected that the transaction amount of the current transaction has been input; A second receiving module is used to receive each picture and the associated index sent by the server, and display each picture; An acquisition module, used to acquire the input position of the picture selected by the user, and generate a numerical value according to the picture name of the selected picture; The third sending module is used to send the input position and the value to the server.

11. An electronic device, characterized in that: include: A processor, and a memory and a communication interface communicatively connected to the processor; The communication interface is used to communicate with other communication devices; The memory is used to store computer-executable instructions; The processor is used to execute the computer-executable instructions stored in the memory to implement the method for inputting an identity identifier during a payment process as described in any one of claims 1 to 8.

12. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, and when the computer-executable instructions are executed by a processor, the method for inputting an identity identifier during a payment process as described in any one of claims 1 to 8 is implemented.

13. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the method for inputting an identity identifier during a payment process as described in any one of claims 1 to 8 is implemented.

Images