Method for inputting identity identification in payment process and related device

Abstract

The application provides an input method of identity in a payment process and related equipment, which can be used in the field of payment processing. The method comprises the following steps: receiving an input request of an identity sent by a client, and generating multiple pictures and associated indexes; sending the pictures and the associated indexes to the client, receiving an input position and a value of a selected picture sent by the client; determining a picture name corresponding to the selected picture according to the value, and determining an index value corresponding to the picture name; determining each number input by the user on the client according to each index value, combining each number according to each input position to obtain the identity, and associating the identity with a transaction serial number of the transaction between the client and the client for use by a transaction processing system. In the application, the triple mapping of the user-selected picture, the index value and the array associated with the index realizes the safe input of the identity by the user, and improves the security of the payment.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of payment processing, and particularly relates to an input method of identity in a payment process and related equipment. BACKGROUND

[0002] When a user makes a payment on a client, the user needs to input an identity for verification before performing a subsequent payment operation.

[0003] In an example technology, when the user inputs the identity, the user clicks a key on a physical keyboard or a virtual keyboard of the client to input a corresponding number, so as to obtain the identity through the input number.

[0004] However, the number input by the user on the physical keyboard or the virtual keyboard is easy to be intercepted, so that the identity is easy to be stolen, and there is a problem of low payment security. SUMMARY

[0005] The present application provides an input method of identity in a payment process and related equipment, which solves the problem of low payment security.

[0006] In a first aspect, the present application provides an input method of identity in a payment process, applied to a server, and the input method of identity in the payment process comprises:

[0007] receiving an input request of identity sent by a client, and generating multiple pictures and associated indexes;

[0008] sending each picture and the associated index to the client, and receiving an input position of a selected picture and a corresponding value of the selected picture sent by the client;

[0009] determining a picture name corresponding to the selected picture according to the value, and determining an index value corresponding to the picture name, the index value being an index associated with the selected picture;

[0010] determining each number input by the user on the client according to each index value, combining each number according to each input position, obtaining an identity, and associating the identity with a transaction serial number of the client for transaction, for use by a transaction processing system.

[0011] In some embodiments, the generating multiple pictures and associated indexes comprises:

[0012] generating multiple first random numbers, and determining an index value corresponding to each first random number;

[0013] generate picture content according to the index value corresponding to the first random number and generate a picture name according to the index value corresponding to the first random number;

[0014] generate a plurality of pictures and associated indexes according to the picture content and the picture name corresponding to each of the first random numbers.

[0015] In some embodiments, the sending of the pictures and associated indexes to the client and the receiving of the input position of the picture selected by the user and the value corresponding to the selected picture sent by the client include:

[0016] obtaining a transaction serial number of a current transaction of the client and a second random number generated by the client from the input request;

[0017] generating a third random number and generating a session key according to the second random number, the third random number and the transaction serial number;

[0018] sending the third random number, the pictures and associated indexes to the client;

[0019] receiving encrypted data sent by the client and decrypting the encrypted data using the session key to obtain the input position and the value.

[0020] In some embodiments, the decrypting of the encrypted data using the session key includes:

[0021] decrypting the encrypted data using the session key to obtain a value;

[0022] in a case where the value is not a preset value, obtaining the input position from the decrypted data and storing the value and the input position.

[0023] In some embodiments, after the decrypting of the encrypted data using the session key to obtain a value, the method further includes:

[0024] in a case where the value is a preset value, determining that the user completes the identity input;

[0025] The combining of each of the numbers according to each of the input positions includes:

[0026] combining each of the numbers based on the stored input positions to obtain an identity.

[0027] In a second aspect, the application provides a method for inputting an identity in a payment process, applied to a server, the method for inputting an identity in a payment process includes:

[0028] In a case where it is detected that the transaction amount of the current transaction is inputted, an input request of the identity is sent to the server;

[0029] The pictures and the associated indexes sent by the server are received and the pictures are displayed;

[0030] An input position of a picture selected by the user is obtained and a value is generated according to the picture name of the selected picture;

[0031] The input position and the value are sent to the server.

[0032] In some embodiments, the input request of the identity sent to the server comprises:

[0033] A transaction serial number of the current transaction is obtained and a second random number is generated;

[0034] An input request of the identity is generated according to the transaction serial number and the second random number, and the input request is sent to the client;

[0035] The pictures and the associated indexes sent by the server are received, comprising:

[0036] The pictures, the associated indexes and a third random number sent by the server are received, and a session key is generated according to the second random number, the third random number and the transaction serial number;

[0037] The input position and the value are sent to the server, comprising:

[0038] The value and the input position are encrypted according to the session key to obtain encrypted data, and the encrypted data is sent to the server.

[0039] In some embodiments, after the session key is generated according to the second random number, the third random number and the transaction serial number, the method further comprises:

[0040] When a click operation of the complete button is detected, a preset value is encrypted by using the session key to send to the server, and the preset value is used to indicate that the input of the identity of the user is completed.

[0041] In a third aspect, the application provides a server, comprising:

[0042] A first receiving module is configured to receive an input request of an identity sent by a client and generate a plurality of pictures and associated indexes;

[0043] The first sending module is configured to send each of the pictures and the associated indexes to the client, and receive an input position of a selected picture and a value corresponding to the selected picture sent by the client;

[0044] The first determining module is configured to determine a picture name corresponding to the selected picture according to the value, and determine an index value corresponding to the picture name, the index value being an index associated with the selected picture;

[0045] The second determining module is configured to determine each of the numbers input by the user on the client according to each of the index values, combine each of the numbers according to each of the input positions to obtain an identity, and send the identity to the client for a payment operation.

[0046] In a fourth aspect, the present application provides a client, comprising:

[0047] The second sending module is configured to send an input request of the identity to a server when detecting that an input of a transaction amount of a current transaction is completed.

[0048] The second receiving module is configured to receive each of the pictures and the associated indexes sent by the server, and display each of the pictures.

[0049] The obtaining module is configured to obtain an input position of a selected picture, and generate a value according to a picture name of the selected picture.

[0050] The third sending module is configured to send the input position and the value to the server.

[0051] In a fifth aspect, the present application provides an electronic device, comprising a processor, and a memory and a communication interface connected with the processor in communication;

[0052] The communication interface is configured to communicate with other communication devices.

[0053] The memory is configured to store computer execution instructions.

[0054] The processor is configured to execute the computer execution instructions stored in the memory, so as to realize the input method of the identity in the payment process provided in the first aspect or the second aspect.

[0055] In a sixth aspect, the present application provides a computer readable storage medium, the computer readable storage medium storing computer execution instructions, the computer execution instructions being executed by a processor to realize the input method of the identity in the payment process provided in the first aspect or the second aspect.

[0056] In a seventh aspect, the present application provides a computer program product comprising a computer program which, when executed by a processor, implements the method for inputting identity identification in a payment process according to the first aspect or the second aspect.

[0057] The method for inputting identity identification in a payment process and the related device provided by the present application realize the secure input of the identity identification by the user through the triple mapping of the picture selected by the user, the index value and the array associated with the index, even if the user selects the picture through the physical keyboard or the virtual keyboard, it is difficult to obtain the number input by the user, which increases the difficulty of obtaining the number in the identity identification and improves the security of the payment. In addition, the numbers obtained by the triple mapping mechanism are combined through the input position of the picture, which improves the difficulty of obtaining the identity identification and further improves the security of the payment. BRIEF DESCRIPTION OF DRAWINGS

[0058] The accompanying drawings, which are incorporated herein and constitute part of the specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0059] Figure 1 The scene diagram related to the method for inputting identity identification in a payment process of the present application;

[0060] Figure 2 The step flow diagram of the method for inputting identity identification in a payment process of the server side of the present application Figure 1 ;

[0061] Figure 3 The step flow diagram of the method for inputting identity identification in a payment process of the server side of the present application Figure 2 ;

[0062] Figure 4 The step flow diagram of the method for inputting identity identification in a payment process of the server side of the present application Figure 3 ;

[0063] Figure 5 The step flow diagram of the method for inputting identity identification in a payment process of the client side of the present application Figure 1 ;

[0064] Figure 6 The step flow diagram of the method for inputting identity identification in a payment process of the client side of the present application Figure 2 ;

[0065] Figure 7 The program module diagram of a server provided in an embodiment of the present application;

[0066] Figure 8 The program module diagram of a client provided in an embodiment of the present application;

[0067] Figure 9 A hardware structure schematic diagram of an electronic device is provided for the embodiments of the present application.

[0068] The specific embodiments of the present application have been shown through the above-described drawings, and will be described in more detail hereinafter. These drawings and the written description are not intended to restrict the scope of the present application in any way, but to explain the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0069] In order to make the objectives, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, but not all the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work fall within the scope of protection of the present application. In addition, although the disclosure in the present application is introduced according to one or more examples, it should be understood that each aspect of these disclosures can also constitute a complete embodiment.

[0070] It should be noted that the brief description of the terms in the present application is only for the convenience of understanding the subsequently described embodiments, and is not intended to limit the embodiments of the present application. Unless otherwise specified, these terms should be understood according to their ordinary and general meanings.

[0071] In addition, the terms "include" and "have" and any variations thereof are intended to cover but not exclusive inclusion, for example, a product or device including a series of components does not have to be limited to those components clearly listed, but can include other components not clearly listed or inherent to these products or devices.

[0072] The term "module" used in the embodiments of the present application refers to any known or later developed hardware, software, firmware, artificial intelligence, fuzzy logic or a combination of hardware or / and software code capable of performing functions related to the element.

[0073] It should be noted that the user information (including but not limited to user equipment information, user personal information, etc.) and data (including but not limited to data for analysis, stored data, displayed data, etc.) involved in the present application are all information and data authorized by the user or authorized by all parties, and the collection, use and processing of related data need to comply with relevant laws, regulations and standards, and provide corresponding operation portal for user to choose authorization or refusal.

[0074] When a user makes a payment on a client, the user needs to input an identity identifier for verification before making a subsequent payment operation.

[0075] In an example technology, when a user inputs an identity identifier, the user clicks a key on a physical keyboard or a virtual keyboard on the client to input a corresponding number, so as to obtain the identity identifier through the input number.

[0076] The present inventors find that the number input by the user on the physical keyboard or the virtual keyboard is easy to be intercepted, so that the identity identifier is easy to be stolen, and there is a problem of low payment security.

[0077] The present inventors thus think of achieving secure input of the identity identifier by the user through triple mapping of the picture selected by the user, the index value, and the array associated with the index, that is, even if the user selects the picture through the physical keyboard or the virtual keyboard, it is also difficult to obtain the number input by the user, the difficulty of obtaining the number in the identity identifier is increased, and the payment security is improved. In addition, the number obtained through the triple mapping mechanism is combined through the input position of the picture, the difficulty of obtaining the identity identifier is improved, and the payment security is further improved.

[0078] Reference Figure 1 , Figure 1 An application scenario diagram of the input method of the identity identifier in the payment process of the present application is shown. When a user inputs a transaction amount of a current transaction in a client 100, the client 100 sends an input request of an identity identifier to a server 200. The server 200 generates multiple pictures, and sends each picture and an associated index to the client 100. The client 100 displays each picture 110. Each picture 110 displays a different number, and the user can select a picture 110 on the client 100. The client 100 obtains a picture identifier of the picture 110 selected by the user, converts the picture identifier into a numerical value, and obtains an input position of the selected picture on the client 100. The client 100 sends the numerical value and the input position to the server 200. The server 200 converts the numerical value into a picture identifier, obtains an index value of the picture identifier, and obtains a number input by the user through the index value. The input position represents the position of the number input by the user in the identity identifier, and the server 200 combines each number through each input position to obtain the identity identifier, which is obtained by combining each number input by the user. The server 200 associates the identity identifier with a transaction serial number for use by a transaction processing system. The transaction processing system is a system for the client to make a transaction.

[0079] The following is described through Figure 1The technical solutions shown in the present application will be described in detail in combination with specific embodiments. It should be noted that the following embodiments can exist independently or in combination, and the same or similar contents will not be repeatedly described in different embodiments.

[0080] Referring to Figure 2 , Figure 2 Flowchart of an input method of an identity in a payment process on a server side provided in an embodiment of the present application Figure 1 The input method of the identity in the payment process comprises the following steps.

[0081] In step S201, an input request of an identity sent by a client is received, and multiple pictures and associated indexes are generated.

[0082] In the embodiment, the execution subject is a server. When a user performs an online transaction on a client and completes the input of a transaction amount, the client needs to input an identity. The identity can be a personal identification number (PIN), which is a series of numbers set by the user in advance for identity identification.

[0083] The client can be a commercial device. For example, the user approaches a financial card to a recognition component of the commercial device through near field communication, the recognition component reads the relevant information of the financial card, and the commercial device outputs a transaction interface. The user can input the transaction amount on the transaction interface, and after completing the input of the transaction amount, the client needs to authenticate the user, i.e., requests the user to input the identity. When the client is a commercial device, the server is a background server that receives the transaction amount. In addition, the client can also be a terminal device loaded with a transaction program, such as a mobile phone, a computer, or a tablet.

[0084] The client sends an input request of the identity to the server, and the server generates multiple pictures and associated indexes. For example, the identity is a combination of numbers from 0 to 9, and the server generates ten pictures, each containing a different number. Specifically, the server generates ten index values, each associated with a number from 0 to 9. The number is the content of the picture, and the index value is the name of the picture, i.e., the index associated with the picture is the name of the picture. The name of the picture and the content of the picture constitute the picture.

[0085] In step S202, each picture and the associated index are sent to the client, and the input position of the picture selected by the user and the value corresponding to the selected picture sent by the client are received.

[0086] After generating multiple pictures, the server sends each picture and the associated index to the client. The client displays each picture.

[0087] In an example, the client displays ten pictures in a 4x3 matrix, the first three rows of the matrix display nine pictures, and the last row displays the remaining picture.

[0088] In another example, the client is provided with multiple rows of display areas, each row of the display areas displays ten pictures, and the number of rows of the display areas is the same as the number of digits in the identity. It can be the number of rows of the display area in which the second picture is located.

[0089] After the client displays each picture, each picture contains a different number, and the user can select the picture on the client. For example, the user needs to input the number 1, and selects the picture containing the number 1.

[0090] The client obtains the selected picture, obtains the picture identifier of the selected picture, and obtains the input position, which refers to the input order of the selected picture on the client. The input position can represent the order of the number of times the user selects. For example, when the user inputs the fifth number, the input position of the picture in which the fifth number is located on the client is set to 5, that is, the input position is represented by 5. For another example, the client includes multiple rows of display areas, and if the user inputs a number in the fifth row of the display area, it represents that the user inputs the fifth number, and the number of rows of the display area is used as the input position.

[0091] The client obtains the picture identifier corresponding to the selected picture, and the picture identifier is an index array. The client converts the index array and obtains the numerical value, and sends the numerical value of the picture and the input position to the server, that is, the server receives the input position of the selected picture and the numerical value corresponding to the selected picture sent by the client.

[0092] In step S203, the numerical value is used to determine the picture name corresponding to the selected picture, and the index value corresponding to the picture name is determined. The index value is the index associated with the selected picture.

[0093] After the server obtains the numerical value, the numerical value is reversed to obtain the index array, which is the picture name. The index associated with the picture array is the index value, that is, the index associated with the selected picture is the index value.

[0094] In step S204, the user inputs each number on the client according to each index value, and combines each number according to each input position to obtain an identity, and associates the identity with a transaction serial number of the client for transaction processing system.

[0095] The server determines the numbers input by the user on the client side based on the index values. For example, the server stores the numbers associated with the index values, and the server determines the numbers associated with the index values based on the picture names, i.e., the numbers input by the user on the client side.

[0096] The server combines the numbers based on the input positions. For example, if the input position is 5, the number corresponding to the index value is the fifth number in the identity, i.e., the position of the number is determined by the input position, and the numbers are combined according to the positions of the numbers to obtain the identity PIN.

[0097] The server associates the identity with the transaction serial number of the transaction between the client and the server for use by the transaction processing system. The transaction processing system refers to the system in which the client conducts transactions.

[0098] In this embodiment, the user's secure input of the identity is achieved through the triple mapping of the user-selected pictures, index values, and index-associated arrays, i.e., even if the user selects the pictures through a physical keyboard or a virtual keyboard, it is difficult to obtain the numbers input by the user, increasing the difficulty of obtaining the numbers in the identity and improving the security of payment. In addition, the numbers obtained by the triple mapping mechanism are combined through the input positions of the pictures, increasing the difficulty of obtaining the identity and further improving the security of payment.

[0099] Reference Figure 3 , Figure 3 The flowchart of the method for inputting the identity in the payment process of the server side provided in this application Figure 2 , based on Figure 2 The embodiment shown in step S201 includes:

[0100] Step S301: generating a plurality of first random numbers and determining an index value corresponding to each first random number.

[0101] In this embodiment, when the server receives the input request of the identity sent by the client, it generates a plurality of first random numbers, and the number of generated first random numbers is the same as the number of pictures to be generated. For example, there are ten numbers from 0 to 9, and the server generates ten first random numbers.

[0102] The server configures a corresponding index value DV_PIN for each first random number after generating each first random number, i.e., the first random number is used as the value of the index array to obtain the index value. In addition, the server configures a corresponding key value for each first random number, which is any one of 0 to 9, i.e., the first random number is configured with a corresponding number.

[0103] Step S302, generating picture content according to the number associated with the index value corresponding to the first random number, and generating a picture name according to the index value corresponding to the first random number.

[0104] After the service end configures the number for the first random number, the service end generates picture content based on the number, and takes the index value as the picture name. For example, if the number is 1, the service end generates picture content containing the number 1.

[0105] Step S303, generating multiple pictures and associated indexes according to the picture content and the picture name corresponding to each first random number.

[0106] After the service end obtains the picture content and the picture name, the service end can obtain the pictures by combining the picture content and the picture name. That is, each first random number and the associated number can generate a picture and an associated index.

[0107] In this embodiment, the service end generates multiple first random numbers, thereby generating corresponding pictures for each first random number, that is, the client inputs different pictures each time, avoiding the situation that the identity is leaked due to the use of fixed pictures, and improving the payment security.

[0108] Referring to Figure 4 , Figure 4 the flowchart of the input method of the identity in the payment process of the service end side provided in this application Figure 3 , based on Figure 2 or Figure 3 the embodiment shown in the figure, step S202 includes:

[0109] Step S401, obtaining the transaction serial number of the current transaction of the client and the second random number generated by the client from the input request.

[0110] In this embodiment, the data between the client and the service end is encrypted by a session key.

[0111] For example, the session key is generated based on the current transaction performed by the user. Specifically, after the user inputs the transaction amount on the client, the client obtains the transaction serial number ID TRANS of the current transaction and generates a second random number RNDc. The client generates an input request of the identity based on the transaction serial number and the second random number, and sends the input request to the service end.

[0112] After the service end obtains the input request, the service end parses the input request to obtain the transaction serial number ID TRANS and the second random number RNDc.

[0113] Step S402, generating a third random number, and generating a session key according to the second random number, the third random number and the transaction serial number.

[0114] After the server obtains the transaction serial number and the second random number RNDc, the server generates a second random number RNDs, generates a session key through the second random number, the third random number, and the transaction serial number; in addition, the server can obtain the device identifier of the service platform performing the current transaction from the service platform, and generate the session key based on the device identifier, the second random number, the third random number, and the transaction serial number, so that the session key is more difficult to be cracked.

[0115] In step S403, the third random number and each picture and the associated index are sent to the client.

[0116] After the server generates the third random number, the third random number, each picture, and the associated index are sent to the client.

[0117] After the client receives the third random number sent by the server, the session key is generated based on the second random number, the third random number, and the transaction serial number. In addition, the client can obtain the device identifier of the service platform where the current transaction is located, and generate the session key based on the device identifier, the second random number, the third random number, and the transaction identifier.

[0118] In step S404, the encrypted data sent by the client is received, and the encrypted data is decrypted using the session key to obtain the input position and the value.

[0119] After the client generates the session key, the data to be sent is encrypted based on the session key. Specifically, after the client generates the session key, the value obtained by each selected picture and the input position are encrypted to obtain encrypted data, and the encrypted data is sent to the server. The server receives the encrypted data sent by the client, and decrypts the encrypted data using the session key, so as to obtain the input position and the value.

[0120] In this embodiment, the client encrypts the value and the input position determined by the user-selected picture through the session key with the server, avoids other terminals directly intercepting the touch sequence and the target character in the process of transmitting data by the client, and further improves the payment security.

[0121] In an embodiment, when the client displays each picture, the client also displays a complete button. When the user clicks the complete button, the client encrypts the preset value using the session key to obtain encrypted data, and the value obtained by the server by parsing the encrypted data is the preset value, so it can be determined that the user has completed the input of the identity identifier.

[0122] Specifically, after obtaining the encrypted data, the server decrypts the encrypted data using the session key, and obtains the numerical value from the decrypted data. If the numerical value is not the preset numerical value, it is determined that the user has not completed the input of the identity identifier. The server obtains the input position from the decrypted data and stores the numerical value and the input position. The numerical value and the input position can be stored in an encrypted manner.

[0123] If the numerical value is the preset numerical value, it is determined that the user has completed the input of the identity identifier. The server obtains the stored input positions and numerical values, determines the numbers that have been input by the user based on the stored numerical values, and combines the numbers based on the stored input positions to obtain the identity identifier.

[0124] In this embodiment, the client sends the preset numerical value to the server to prompt the user to complete the input of the identity identifier, so that the server can obtain the identity identifier as soon as possible and improve the payment efficiency of the user.

[0125] Referring to Figure 5 , Figure 5 The flowchart of the method for inputting an identity identifier in a payment process on the client side provided in the present application Figure 1 The method for inputting an identity identifier in a payment process includes the following steps.

[0126] Step S501: In a case where it is detected that the input of the transaction amount of the current transaction is completed, an input request of an identity identifier is sent to a server.

[0127] In this embodiment, the execution subject is a client. When a user performs an online transaction on the client and completes the input of the transaction amount, the client needs to input an identity identifier. The identity identifier can be a personal identification number (PIN), which is a series of numbers set by the user in advance for identity identification.

[0128] The client can be a commercial device. For example, a user approaches a financial card to a recognition component of the commercial device through near field communication. The recognition component reads relevant information of the financial card, and the commercial device outputs a transaction interface. The user can input a transaction amount on the transaction interface. After the input of the transaction amount, the client needs to authenticate the user, i.e., requests the user to input an identity identifier. When the client is the commercial device, the server is a background server receiving the transaction amount. In addition, the client can also be a terminal device loaded with a transaction program, such as a mobile phone, a computer or a tablet. When the client detects the input of the transaction amount of the current transaction, the client sends an input request of the identity identifier to the server, and the server generates a plurality of pictures and associated indexes. For example, the identity identifier is a combination of numbers from 0 to 9. The server generates ten pictures, each of which contains different numbers. Specifically, the server generates ten index values, each of which is associated with a number from 0 to 9. The number is the content of the picture, and the index value is the name of the picture. The name of the picture and the content of the picture constitute the picture.

[0129] After generating the plurality of pictures, the server sends each picture and the associated index to the client.

[0130] In step S502, each picture and the associated index sent by the server are received, and each picture is displayed.

[0131] The client displays each picture sent by the server. In an example, the client displays ten pictures in a 4x3 matrix grid. The first three rows of the matrix grid display nine pictures, and any cell in the last row displays the remaining picture.

[0132] In another example, the client is provided with a plurality of rows of display areas. Each row of the display areas displays ten pictures, and the number of rows of the display areas is the same as the number of numbers in the identity identifier. The number of rows of the display area in which the second picture is located can be the number of numbers in the identity identifier.

[0133] In step S503, the input position of the selected picture is obtained, and a numerical value is generated according to the picture name of the selected picture.

[0134] After the client displays each picture, each picture contains different numbers, and the user can select a picture on the client. For example, the user needs to input the number 1, and selects the picture containing the number 1.

[0135] The client obtains the selected picture, obtains the picture identifier of the selected picture, and inputs the position, which refers to the input position of the selected picture on the client. The input position can represent the order of the selected times. For example, when the user inputs the fifth number, the input position of the picture on which the fifth number is located on the client is set to 5, that is, the input position is represented by 5. For another example, the client includes a plurality of display areas, and if the user inputs a number in the display area on the fifth line, it represents that the user inputs the fifth number, and the number of the line on which the display area is located is used as the input position.

[0136] The client obtains the picture identifier corresponding to the selected picture, and the picture identifier is an index array. The client converts the index array and then obtains the numerical value by rounding, and sends the numerical value of the picture and the input position to the server, that is, the server receives the input position of the selected picture and the numerical value corresponding to the selected picture sent by the client.

[0137] In step S504, the input position and the numerical value are sent to the server.

[0138] After obtaining the numerical value, the server reverses the numerical value to obtain the index array, and the index array is the picture name, and the index associated with the picture array is the index value.

[0139] After obtaining the index value corresponding to each selected picture, the server determines each number input by the user on the client based on each index value. For example, the server stores the numbers associated with the index values, and the server obtains the numbers associated with the index values based on the picture name, that is, the numbers input by the user on the client.

[0140] The server combines each number based on each input position. For example, the input position represents 5, and the number corresponding to the index value is the fifth number in the identity identifier, that is, the position of the number is determined by the input position, and the identity identifier PIN can be obtained by combining each number according to the position of each number.

[0141] The server sends the identity identifier to the client, and the client can perform subsequent payment operations after obtaining the identity identifier, that is, the transaction amount input by the user is collected.

[0142] In this embodiment, through the triple mapping of the selected picture, the index value, and the array associated with the index, the user's safe input of the identity identifier is realized. Even if the user selects the picture through the physical keyboard or the virtual keyboard, it is difficult to obtain the number input by the user, which increases the difficulty of obtaining the number in the identity identifier and improves the security of payment. In addition, the numbers obtained by the triple mapping mechanism are combined through the input position of the picture, which improves the difficulty of obtaining the identity identifier and further improves the security of payment.

[0143] Referring to Figure 6 , Figure 6 The flowchart of the input method of the identity in the payment process of the client side provided in the present application Figure 2 , based on Figure 5 The embodiment shown in the figure, step S501 includes:

[0144] Step S601, in the case of detecting the completion of the input of the transaction amount of the current transaction, obtaining the transaction serial number of the current transaction, and generating a second random number.

[0145] Step S602, generating an input request of the identity according to the transaction serial number and the second random number, and sending the input request to the client.

[0146] In the present embodiment, the data between the client and the server is encrypted by the session key.

[0147] For example, the session key is generated based on the current transaction performed by the user. Specifically, after the user inputs the transaction amount on the client, the client obtains the transaction serial number ID TRANS of the current transaction and generates a second random number RNDc. The client generates an input request of the identity based on the transaction serial number and the second random number, and sends the input request to the server.

[0148] After the server obtains the input request, the transaction serial number ID TRANS and the second random number RNDc are obtained by parsing the input request.

[0149] After the server obtains the transaction serial number and the second random number RNDc, the server generates a second random number RNDs, and generates a session key by the second random number, the third random number and the transaction serial number; In addition, the server can obtain the device identifier of the service platform performing the current transaction from the service platform, and generate a session key based on the device identifier, the second random number, the third random number and the transaction serial number, so that the session key is more difficult to be cracked.

[0150] Step S502 includes:

[0151] Step S603, receiving the third random number, each picture and the associated index sent by the server, and generating a session key according to the second random number, the third random number and the transaction serial number, and displaying each picture.

[0152] After the server generates the third random number, the third random number, each picture and the associated index are sent to the client.

[0153] After the client receives the third random number sent by the server, the client generates a session key based on the second random number, the third random number, and the transaction serial number. In addition, the client can obtain the device identifier of the device on which the transaction is located on the service platform, and generate a session key based on the device identifier, the second random number, the third random number, and the transaction identifier.

[0154] Step S504 includes:

[0155] In step S604, the value and the input position are encrypted according to the session key to obtain encrypted data, and the encrypted data is sent to the server.

[0156] After the client generates the session key, the client encrypts the data to be sent based on the session key. Specifically, after the client generates the session key, the client encrypts the value obtained from each selected picture and the input position to obtain encrypted data, and sends the encrypted data to the server. The server receives the encrypted data sent by the client, and decrypts the encrypted data using the session key to obtain the input position and the value.

[0157] In this embodiment, the client encrypts the value and the input position determined by the user from the selected pictures using the session key with the server, so that other terminals cannot directly intercept the touch sequence and the target character during the transmission of the data by the client, and the payment security is further improved.

[0158] In an embodiment, when the client displays each picture, the client also displays a complete button. When the user clicks the complete button, the client encrypts the preset value using the session key to obtain encrypted data, and the value obtained by the server by parsing the encrypted data is the preset value, so that it can be determined that the user has completed the input of the identity identifier.

[0159] Specifically, after the server obtains the encrypted data, the server decrypts the encrypted data using the session key to obtain the value from the decrypted data. When the value is not the preset value, it can be determined that the user has not completed the input of the identity identifier, the server obtains the input position from the decrypted data, and stores the value and the input position. The value and the input position can be encrypted and stored.

[0160] When the value is the preset value, it can be determined that the user has completed the input of the identity identifier, the server obtains the stored input positions and values, determines the numbers input by the user based on the stored values, and combines the numbers based on the stored input positions to obtain the identity identifier.

[0161] In this embodiment, the client sends the preset value to the server to prompt the user to complete the input of the identity identifier, so that the server can complete the acquisition of the identity identifier as soon as possible, and the payment efficiency of the user is improved.

[0162] In an embodiment, the client can be a commercial device, which is provided with a transaction application APP, a software development kit SDK and an APPlet. The client displays a running interface based on the APP for a user to perform a transaction on the APP, the APPlet provides a random number and a session key, and the SDK implements data interaction between the APP and the APPlet. Taking the identity authentication information as a PIN, a user performs a transaction operation on the APP, the client sets the APP, the SDK and the APPlet, and the input method of the identity in the payment process is briefly described as follows:

[0163] 1. The APP starts a transaction process, completes input of a transaction amount, enters a PIN input link, and the APP acquires an ID_TRANS of a current transaction;

[0164] 2. The APP calls a "PIN-input preparation-SDK" interface of the SDK, and inputs the ID_TRANS to the SDK;

[0165] 3. The SDK calls an interface of the APPlet, and inputs the ID_TRANS to the APPlet;

[0166] 4. The APPlet generates a first random number RNDc, and inputs the RNDc to the SDK;

[0167] 5. The SDK inputs the RNDc to the APP;

[0168] 6. The APP calls a "PIN-input-initialization" interface of a server, and the server sends a PIN input request carrying the RNDc and the ID_TRANS;

[0169] 7. The server generates ten random numbers as values of ten DV_PINs;

[0170] 8. The server converts each DV_PIN into a file name DV_PIN[i], and the file name is a picture identifier, i is content of the generated picture, ten first pictures are generated, and i is the above-mentioned indication identifier;

[0171] 9. The server records the ID_TRANS, generates a second random number RNDs, and generates a session key K_P_Session based on the RNDs, the RNDc and the ID_TRANS;

[0172] 10. The server sends the RNDs and the ten first pictures to the APP;

[0173] 11. The APP calls a "PIN-input start-SDK" interface of the SDK, and inputs the RNDs to the SDK;

[0174] 12、SDK calls the APPlet interface, and inputs RNDs to the APPlet;

[0175] 13、The APPlet generates a session key K_P_Session based on RNDs, RNDc and ID_TRANS, and feeds back a normal response to the APP through the SDK to prompt the APP to display the first ten pictures, so as to input the identity verification information by the user;

[0176] 14、The APP displays the ten pictures, and the APP displays a "complete" button;

[0177] 15、The APP performs the following processing when the user selects a first picture or selects the "complete" button:

[0178] 15.1、If the user clicks the first picture, the APP retrieves the picture identifier of the picture, converts the picture identifier into an integer (the converted integer is i in the file name of the first picture generated by the server), and records the integer as KI (target character). If the user clicks the first picture, KI is 0, and 0 is used as a termination character.

[0179] 15.2、The APP encrypts KI by using the session key K_P_Session of the APPlet to obtain eKI, that is, the touch order of the first picture and KI are sent to the APPlet for encryption to obtain eKI.

[0180] 15.3、The APP calls the interface of the server, and inputs eKI to the server.

[0181] 16、After the server obtains eKI, the server decrypts eKI by using the session key K_P_Session to obtain KI and the touch order. If KI is not 0, KI and the touch order are stored. If KI is 0, it indicates that the client completes the identity verification input, and all KI are arranged according to the corresponding touch order, and the following processing is performed:

[0182] 16.1、The file name corresponding to KI is determined, the corresponding DV_PIN is determined by the file name, the value of the third random number associated with the DV_PIN is the real key value, and the real key value is the parameter corresponding to KI.

[0183] 16.2、After all KI are restored to the corresponding key values, the key values are arranged according to the touch times of KI to obtain the PIN.

[0184] In this embodiment, the PIN is securely input by using the triple index mapping of "real key value -> array index -> picture"; and the information anti-theft mechanism on the client side is realized by using the dynamic index and the input position (touch order) of the picture.

[0185] Based on the content described in the above embodiments, the embodiments of the present application also provide a server, referring to Figure 7 , Figure 7 The program module diagram of the server provided in the embodiments of the present application is shown in some embodiments, and the above server 700 includes:

[0186] The first receiving module 710 is configured to receive the input request of the identity identifier sent by the client, and generate a plurality of pictures and associated indexes;

[0187] The first sending module 720 is configured to send each picture and the associated index to the client, and receive the input position of the selected picture and the corresponding value of the selected picture sent by the client;

[0188] The first determining module 730 is configured to determine the picture name corresponding to the selected picture according to the value, and determine the index value corresponding to the picture name, wherein the index value is the index associated with the selected picture;

[0189] The second determining module 740 is configured to determine each number input by the user on the client according to each index value, combine each number according to each input position to obtain the identity identifier, and associate the identity identifier with the transaction serial number of the transaction with the client, for use by the transaction processing system.

[0190] In some embodiments, the server 700 is specifically configured to:

[0191] Generate a plurality of first random numbers, and determine the index value corresponding to each first random number;

[0192] Generate picture content according to the number associated with the index value corresponding to the first random number, and generate a picture name according to the index value corresponding to the first random number;

[0193] Generate a plurality of pictures and associated indexes according to the picture content and the picture name corresponding to each first random number.

[0194] In some embodiments, the server 700 is specifically configured to:

[0195] Obtain the transaction serial number of the current transaction of the client and the second random number generated by the client from the input request;

[0196] Generate a third random number, and generate a session key according to the second random number, the third random number and the transaction serial number;

[0197] Send the third random number, each picture and the associated index to the client;

[0198] Receive the encrypted data sent by the client and decrypt it using the session key to obtain the input position and value.

[0199] In some embodiments, the server 700 is specifically configured to:

[0200] Decrypt the encrypted data using the session key to obtain a numerical value;

[0201] When the value is not a preset value, the input position is obtained from the decrypted data, and the value and the input position are stored.

[0202] In some embodiments, the server 700 is specifically configured to:

[0203] If the value is a preset value, determining that the user has completed the identity input;

[0204] According to each input position, each number is combined, including:

[0205] Based on the stored input positions, the numbers are combined to obtain an identity.

[0206] It should be noted that the various steps in the method for inputting the identity identifier during the payment process executed by the server are specifically referred to the above embodiment and will not be described in detail here.

[0207] Based on the content described in the above embodiment, a client is also provided in the embodiment of the present application. Figure 8 , Figure 8 This is a schematic diagram of a program module of a client provided in an embodiment of the present application. In some embodiments, the client 800 includes:

[0208] The second sending module 810 is configured to send an identity input request to the server upon detecting that the transaction amount of the current transaction has been input;

[0209] The second receiving module 820 is used to receive each picture and the associated index sent by the server and display each picture;

[0210] The acquisition module 830 is used to obtain the input position of the picture selected by the user and generate a numerical value according to the picture name of the selected picture;

[0211] The third sending module 840 sends the input position and value to the server.

[0212] In one embodiment, the client 800 is specifically configured to:

[0213] Obtain the transaction serial number of the current transaction and generate a second random number;

[0214] According to the transaction serial number and the second random number, an identity identification input request is generated, and the input request is sent to the client;

[0215] The server sends each picture and the associated index, including:

[0216] The server sends each picture, the associated index and the third random number, and generates a session key according to the second random number, the third random number and the transaction serial number;

[0217] The input position and the value are sent to the server, including:

[0218] According to the session key, the value and the input position are encrypted to obtain encrypted data, and the encrypted data is sent to the server.

[0219] In an embodiment, the client 800 is specifically used for:

[0220] When detecting the click operation of completing the button, the preset value is encrypted by the session key to send the server, and the preset value is used to indicate that the user completes the input of the identity identification.

[0221] It should be noted that the steps of the input method of the identity identification in the execution of the client in the payment process are specifically referred to the above-mentioned embodiments, and will not be repeated here.

[0222] Further, based on the content described in the above-mentioned embodiments, the present embodiment further provides an electronic device, which includes at least one processor, and a communication interface and a memory connected with the processor in communication; wherein the communication interface is used for communication with other communication devices, and the memory stores computer execution instructions; the above-mentioned at least one processor executes the computer execution instructions stored in the memory to realize each step of the input method of the identity identification in the payment process as described in the above-mentioned embodiments.

[0223] In order to better understand the present embodiment, refer to Figure 9 , Figure 9 A hardware structure schematic diagram of an electronic device provided in the present embodiment.

[0224] As Figure 9 shown, the electronic device 900 of the present embodiment includes a processor 901 and a memory 902, a communication interface 904; wherein:

[0225] The memory 902 is used for storing computer execution instructions;

[0226] The communication interface 904 is used for communication with other communication devices;

[0227] The processor 901 is configured to execute the computer-executable instructions stored in the memory to implement the steps in the query optimization method described in the above embodiments.

[0228] Optionally, the memory 902 can be independent or integrated with the processor 901.

[0229] When the memory 902 is independent, the device further includes a bus 903 for connecting the memory 902, the communication interface 904 and the processor 901.

[0230] The embodiment of the present application provides a computer readable storage medium, and the computer readable storage medium stores computer-executable instructions. When the processor executes the computer-executable instructions, the steps in the input method of the identity in the payment process described in the above embodiments are implemented.

[0231] The embodiment of the present application provides a computer program product, and the computer program product includes a computer program. When the computer program is executed by the processor, the steps in the input method of the identity in the payment process described in the above embodiments are implemented.

[0232] In several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other manners. For example, the above-described device embodiments are merely illustrative. For example, the division of the modules is merely a logical function division. There can be another division manner for the actual implementation. For example, a plurality of modules or features can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the displayed or discussed mutual couplings or direct couplings or communication connections can be indirect couplings or communication connections through some interfaces, devices or modules, and can be electrical, mechanical or other forms.

[0233] The modules illustrated as separate components can or can not be physically separate, and the components illustrated as modules can or can not be physical units, i.e., can be located in one place, or can be distributed on a plurality of network units. Some or all of the modules can be selected according to actual needs to achieve the purpose of the embodiment.

[0234] In addition, each functional module in each embodiment of the present application can be integrated in one processing unit, or each module can be physically present alone, or two or more modules can be integrated in one unit. The unit formed by the above modules can be realized in the form of hardware, or in the form of hardware plus software function unit.

[0235] The integrated modules realized in the form of software function modules can be stored in a computer readable storage medium. The software function modules are stored in a storage medium and include a plurality of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor to execute part of the steps of the methods of various embodiments of the present application.

[0236] It should be understood that the processor described above can be a central processing unit (CPU), and can also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), etc. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor and the like. The steps of the methods disclosed in the application can be directly embodied in the form of hardware processor execution, or a combination of hardware and software modules in the processor.

[0237] The memory can include a high-speed memory, and can also include a non-volatile storage, for example, at least one disk memory, and can also be a U disk, a mobile hard disk, a read-only memory, a magnetic disk or an optical disk, etc.

[0238] The bus can be an industry standard architecture (ISA) bus, a peripheral component (PCI) bus, or an extended industry standard architecture (EISA) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. For the convenience of representation, the bus in the drawings of the present application does not limit to only one bus or one type of bus.

[0239] The storage medium described above can be realized by any type of volatile or non-volatile storage device or their combination, such as static random access memory, electrically erasable programmable read-only memory, erasable programmable read-only memory, programmable read-only memory, read-only memory, magnetic storage, flash memory, magnetic disk or optical disk. The storage medium can be any available medium that can be accessed by a general-purpose or special-purpose computer.

[0240] Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present application, but not to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that: it can still modify the technical solutions recorded in the foregoing embodiments, or make equivalent replacement for part or all of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the scope of the technical solutions of the embodiments of the present application.

Claims

1. An input method of identity identification in a payment process, characterized by, The input method of the identity in the payment process is applied to a server and includes the following steps: receiving an input request of an identity sent by a client, and generating a plurality of pictures and associated indexes; sending the pictures and the associated indexes to the client, and receiving an input position of a selected picture and a value corresponding to the selected picture sent by the client; determining a picture name corresponding to the selected picture according to the value, and determining an index value corresponding to the picture name, the index value being an index associated with the selected picture; determining each number input by the user on the client according to each index value, combining each number according to each input position, obtaining an identity, and associating the identity with a transaction serial number of the transaction between the client and the server for use by a transaction processing system; the generation of the plurality of pictures and the associated indexes includes the following steps: generating a plurality of first random numbers, and determining an index value corresponding to each first random number; generating picture content according to a number associated with the index value corresponding to the first random number, and generating a picture name according to the index value corresponding to the first random number; generating a plurality of pictures and associated indexes according to the picture content and the picture name corresponding to each first random number; the value corresponding to the selected picture is a value generated according to the picture name of the selected picture.

2. The method of claim 1, wherein, the sending of the pictures and the associated indexes to the client, and the receiving of the input position of the selected picture and the value corresponding to the selected picture sent by the client include the following steps: obtaining a transaction serial number of a current transaction of the client and a second random number generated by the client from the input request; generating a third random number, and generating a session key according to the second random number, the third random number, and the transaction serial number; sending the third random number, the pictures, and the associated indexes to the client; receiving encrypted data sent by the client, and decrypting the encrypted data by using the session key to obtain the input position and the value.

3. The method of claim 2, wherein, the decryption of the encrypted data by using the session key includes the following steps: decrypting the encrypted data by using the session key to obtain a value; in a case where the value is not a preset value, obtaining the input position from the decrypted data, and storing the value and the input position.

4. The method of claim 3, wherein, after the decryption of the encrypted data by using the session key to obtain a value, the method further includes the following steps: in a case where the value is a preset value, determining that the user completes the input of the identity. the combination of each number according to each input position includes the following steps: combining each number according to each stored input position to obtain an identity.

5. An input method of identity identification in a payment process, characterized by, The input method of the identity in the payment process is applied to a client and includes the following steps: in a case where a transaction amount of a current transaction is detected to be input, sending an input request of an identity to a server; receiving a plurality of pictures and associated indexes sent by the server, and displaying the pictures; Obtaining an input position of a selected picture of a user, and generating a value according to a picture name of the selected picture; Sending the input position and the value to the server, so that the server determines the picture name corresponding to the selected picture according to the value, and determines an index value corresponding to the picture name, the index value being an index associated with the selected picture; according to each index value, determining each number input by the user on the client, combining each number according to each input position to obtain an identity, and associating the identity with a transaction serial number of a transaction between the client and the server, for use by a transaction processing system; The generation mode of each picture and the associated index sent by the server comprises: Generating a first random number, and determining an index value corresponding to the first random number; Generating picture content according to the number associated with the index value corresponding to the first random number, and generating a picture name according to the index value corresponding to the first random number; Generating a picture and an associated index according to the picture content and the picture name corresponding to the first random number.

6. The method of claim 5, wherein, The input request for sending the identity to the server comprises: Obtaining a transaction serial number of the current transaction, and generating a second random number; Generating an input request for the identity according to the transaction serial number and the second random number, and sending the input request to the server; The receiving of each picture and the associated index sent by the server comprises: Receiving each picture, the associated index, and a third random number sent by the server, and generating a session key according to the second random number, the third random number, and the transaction serial number; The sending of the input position and the value to the server comprises: Encrypting the value and the input position according to the session key to obtain encrypted data, and sending the encrypted data to the server.

7. The method of claim 6, wherein, After generating the session key according to the second random number, the third random number, and the transaction serial number, the method further comprises: When detecting a click operation of completing the pressing, encrypting a preset value with the session key to send to the server, the preset value being used to indicate that the user has completed the input of the identity.

8. A server, characterized by Comprise: A first receiving module is configured to receive an input request for an identity sent by a client, and generate a plurality of pictures and associated indexes; A first sending module is configured to send each picture and the associated index to the client, and receive an input position of a selected picture of a user and a value corresponding to the selected picture sent by the client; A first determining module is configured to determine a picture name corresponding to the selected picture according to the value, and determine an index value corresponding to the picture name, the index value being an index associated with the selected picture; The second determining module is configured to determine each number input by the user on the client according to each index value, combine each number according to each input position, obtain an identity, and associate the identity with a transaction serial number of a transaction of the client, for use by a transaction processing system. The generating of the multiple pictures and the associated indexes comprises: generating multiple first random numbers and determining an index value corresponding to each first random number; generating picture content according to a number associated with the index value corresponding to the first random number, and generating a picture name according to the index value corresponding to the first random number; generating the multiple pictures and the associated indexes according to the picture content and the picture name corresponding to each first random number; the value corresponding to the selected picture is a value generated according to the picture name of the selected picture.

9. A client, characterized in that, The second sending module is configured to send an input request of the identity to a server when detecting that the input of the transaction amount of the current transaction is completed. The second receiving module is configured to receive each picture and the associated index sent by the server, and display each picture. The obtaining module is configured to obtain an input position of a selected picture of the user, and generate a value according to the picture name of the selected picture. The third sending module is configured to send the input position and the value to the server, so that the server determines a picture name corresponding to the selected picture according to the value, and determines an index value corresponding to the picture name, the index value being an index associated with the selected picture; determines each number input by the user on the client according to each index value, combines each number according to each input position, obtains an identity, and associates the identity with a transaction serial number of a transaction of the client, for use by a transaction processing system. The generating manner of each picture and the associated index sent by the server comprises: generating a first random number and determining an index value corresponding to the first random number; generating picture content according to a number associated with the index value corresponding to the first random number, and generating a picture name according to the index value corresponding to the first random number; generating the multiple pictures and the associated indexes according to the picture content and the picture name corresponding to each first random number. The processor, the memory in communication connection with the processor, and the communication interface; 10. An electronic device, comprising: The communication interface is configured to communicate with other communication devices; The memory is configured to store computer execution instructions; The processor is configured to execute the computer execution instructions stored in the memory, so as to realize the input method of the identity in the payment process according to any one of claims 1-7. The computer readable storage medium stores computer execution instructions, and the computer execution instructions are executed by the processor to realize the input method of the identity in the payment process according to any one of claims 1-7. The computer program is executed by the processor to realize the input method of the identity in the payment process according to any one of claims 1-7.

11. A computer readable storage medium, characterized in that, ​ 12. A computer program product comprising a computer program, characterized in that, ​

Images