Electronic payment method and system based on quantum key

Abstract

According to the electronic payment method and system based on the quantum key, user fingerprint information is encrypted through the quantum key and stored in a cloud platform, fingerprint universality can be achieved, repeated input and use of personal local equipment are not needed, payment convenience and safety can be greatly improved, and the user experience is improved. According to the technical scheme, the fingerprint information of the user is effectively prevented from being stolen by attacking the third-party payment equipment, safety accidents in the payment process are effectively prevented, seamless identity authentication is allowed to be achieved in various different equipment and systems, and great convenience is brought to the user. In addition, only the user passing the identity authentication can obtain the plaintext of the fingerprint information, so that an efficient and safe identity authentication mode can be provided. In addition, encryption processing of the data is realized by means of the quantum key, and the data security can be effectively improved.

Description

Technical Field

[0001] The present invention relates to the field of electronic security payment, and in particular to an electronic payment method and system based on quantum key. Background Art

[0002] In modern society, with the development of science and technology, electronic payment has been widely used in payment systems due to its convenience and efficiency. In the process of electronic payment, in order to ensure the security of the payment process, the user's identity needs to be authenticated. Compared with the authentication information such as passwords and tokens in the traditional authentication and identification system, biometrics have the advantages of not being forgotten or lost. Using biometrics as a means of identification and authentication can provide both high user ease of use and high security, so it has been used more and more widely, especially fingerprint recognition. Due to its uniqueness and stability, it is widely used in identity authentication and payment systems, and compared with face recognition, the uniqueness of fingerprints is more obvious.

[0003] The existing technology mainly collects the user's fingerprint image through a local device, extracts and encrypts the features on the local device, and then saves the encrypted fingerprint features in the local device. This solution can effectively prevent the fingerprint data from being stolen or tampered with during transmission, thereby improving security. However, when the user needs to use a non-local device or change the local device, the fingerprint payment cannot be used and needs to be re-entered, which brings inconvenience to the user. In addition, the existing technology also has certain security risks. First, since the fingerprint data is stored in the local device, when the local device is attacked or damaged, the fingerprint data may be leaked or stolen. Secondly, the existing fingerprint recognition technology is mainly based on traditional encryption algorithms. Although these algorithms can guarantee the security of data to a certain extent, with the continuous improvement of computing power, these algorithms may be cracked, resulting in data leakage. Therefore, how to achieve the universality of fingerprint information and improve the convenience and security of fingerprint recognition is an important issue facing the current technology. Summary of the invention

[0004] In view of the above-mentioned problems existing in the prior art, the present invention proposes an electronic payment method and system based on quantum key, which can be widely used in the fields of electronic payment systems, identity authentication systems, and data security. Among them, by encrypting the user's fingerprint information with a quantum key and storing it in a cloud platform, fingerprint universality can be achieved, without the need for repeated entry and use of personal local devices, which can greatly improve the convenience and security of payment, effectively prevent the occurrence of stealing user fingerprint information by attacking third-party payment devices, effectively prevent security accidents in the payment process, and allow seamless identity authentication in various devices and systems, bringing great convenience to users. In addition, since only users who have passed the identity authentication can obtain the plaintext of fingerprint information, an efficient and secure identity authentication method can be provided. In addition, the encryption processing of data with the help of quantum keys can effectively improve data security.

[0005] Specifically, the first aspect of the present invention relates to an electronic payment method based on quantum key, which includes a fingerprint database establishment step, an identity authentication request step, an identity authentication step and an electronic payment step;

[0006] The fingerprint database establishment step is used to establish a user fingerprint database in the cloud platform, which stores the user's identity information and its encrypted fingerprint information;

[0007] The identity authentication request step is used by the third-party payment device to respond to the payment request and send an identity authentication request and user identity information to the cloud platform;

[0008] The identity verification step is for the cloud platform to respond to the identity verification request and send encrypted fingerprint information corresponding to the user identity information to the third-party payment device; and the third-party payment device decrypts the encrypted fingerprint information to generate fingerprint information, and compares it with the fingerprint information input by the user to verify the user identity;

[0009] The electronic payment step is used by the bank to make electronic payments after identity verification.

[0010] Furthermore, the fingerprint database establishment step includes the following steps:

[0011] Collect user's fingerprint information and identity information;

[0012] Encrypting the fingerprint information using the first quantum key K1 to generate encrypted fingerprint information, wherein the first quantum key K1 is a shared quantum key between the user and the third-party payment device; and,

[0013] The user's encrypted fingerprint information and identity information are uploaded and stored in the cloud platform to form a user fingerprint library.

[0014] Preferably, the first quantum key K1 is generated by quantum key distribution and is periodically changed.

[0015] Furthermore, the identity authentication request step includes the following steps:

[0016] The user enters identity information into the third-party payment device after confirming that the payment request is correct, wherein the payment request includes at least one of commodity information and payment information; and

[0017] The third-party payment device sends an identity authentication request and user identity information to the cloud platform.

[0018] Further, the identity verification step includes the following steps:

[0019] In response to the identity authentication request, the cloud platform obtains the corresponding encrypted fingerprint information from the user fingerprint database according to the user identity information and sends it to the third-party payment device;

[0020] The third-party payment device uses the first quantum key K1 to decrypt the encrypted fingerprint information to obtain the fingerprint information, so as to allow the user to compare the fingerprint information on the third-party payment device and pass the identity authentication when the fingerprint information is successfully compared.

[0021] Furthermore, the electronic payment step includes the following steps:

[0022] After the identity authentication is passed, the third-party payment device uses the second quantum key K2 to encrypt the user identity information and payment information to generate encrypted user identity information and payment information, and sends it to the bank, where the second quantum key K2 is a shared quantum key between the third-party payment device and the bank;

[0023] The cloud platform uses the third quantum key K3 to encrypt the user identity information to generate encrypted user identity information and sends it to the bank, where the third quantum key K3 is a shared quantum key between the cloud platform and the bank;

[0024] The bank uses the second quantum key K2 to decrypt the encrypted user identity information and payment information to generate the user identity information and payment information sent by the third-party payment device, and uses the third quantum key K3 to decrypt the encrypted user identity information to generate the user identity information sent by the cloud platform. The bank compares the user identity information sent by the third-party payment device with the user identity information sent by the cloud platform, and sends the transfer information to the third-party payment device after the verification is correct.

[0025] After confirming that the transfer information is correct, the user enters the fingerprint information again into the third-party payment device, allowing the user to use the fingerprint information for comparison on the third-party payment device, and sending payment confirmation information to the bank when the fingerprint information comparison is successful;

[0026] After receiving the payment confirmation information, the bank will transfer the payment according to the payment information.

[0027] Furthermore, the electronic payment step includes the following steps:

[0028] The cloud platform sends the user’s identity information to the bank in an encrypted manner;

[0029] The third-party payment device encrypts the fourth quantum key K A , user identity information and payment information are sent to the bank, where the fourth quantum key K A A shared quantum key between the cloud platform and third-party payment devices;

[0030] The bank encrypted the fifth quantum key K B Sent to a third-party payment device, where the fifth quantum key K B For the shared quantum key between the cloud platform and the bank;

[0031] The third-party payment device is based on user identity information and the fourth quantum key K A and the fifth quantum key K B generating a first signature;

[0032] Bank based on fifth quantum key K B , user identity information and the fourth quantum key K A generating a second signature;

[0033] The bank communicates with the third-party payment device to compare the first signature and the second signature, and performs a transfer payment according to the payment information when the first signature and the second signature are successfully compared.

[0034] Preferably, the signature is generated based on a hash function.

[0035] Furthermore, a payment request is generated by the merchant and sent to a third-party payment device.

[0036] A second aspect of the present invention relates to an electronic payment system based on quantum keys, which includes a cloud platform, a bank and a third-party payment device, and is configured to perform electronic payment according to the above-mentioned electronic payment method; wherein,

[0037] Third-party payment devices include fingerprint collection devices;

[0038] Cloud platforms, banks and third-party payment devices are all connected to the quantum key distribution system. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] The specific implementation modes of the present invention are further described in detail below in conjunction with the accompanying drawings.

[0040] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. It is obvious that the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0041] Figure 1 An example of a quantum key-based electronic payment system according to the present invention is schematically shown;

[0042] Figure 2 The basic process of the electronic payment method based on quantum key according to the present invention is schematically shown;

[0043] Figure 3 An example of an electronic payment method based on quantum key according to the present invention is shown;

[0044] Figure 4 Another example of a quantum key-based electronic payment method according to the present invention is shown. DETAILED DESCRIPTION

[0045] Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. The following embodiments are provided by way of example so as to fully convey the spirit of the present invention to those skilled in the art to which the present invention belongs. Therefore, the present invention is not limited to the embodiments disclosed herein.

[0046] Figure 1 An example of a quantum key-based electronic payment system according to the present invention is schematically shown.

[0047] like Figure 1 As shown, the electronic payment system of the present invention may include a cloud platform, a bank and a third-party payment device, for implementing electronic payment between users (buyers) and merchants.

[0048] In the electronic payment system of the present invention, each component can be connected to the quantum key distribution (QKD) system as needed, so that the quantum key shared by both parties can be distributed through QKD between users and third-party payment devices, between the cloud platform and the bank, and between the third-party payment device and the bank, thereby allowing the security of electronic payment to be guaranteed with the help of quantum keys.

[0049] See also Figure 1 and Figure 2 In order to make electronic payments without being restricted by local devices, the electronic payment system of the present invention first needs to use the fingerprint library establishment step to establish a user fingerprint library storing user identity information and fingerprint information in the cloud platform.

[0050] In the fingerprint database establishment step of the present invention, the fingerprint image can be collected from the user's finger with the help of the user's mobile phone or a fingerprint collection device (such as a fingerprint sensor).

[0051] Subsequently, the collected fingerprint image can be preprocessed by denoising, contrast enhancement, binarization, etc., and feature values ​​(such as ridges, valleys, etc.) with uniqueness and stability can be extracted from the preprocessed fingerprint image and used as fingerprint information for identity authentication.

[0052] Those skilled in the art will appreciate that the collected fingerprint image should have high resolution and clarity to ensure the accuracy of subsequent processing.

[0053] As an example, the denoising process may be implemented with the help of a median filtering algorithm.

[0054] As an example, the contrast enhancement process may be implemented with the help of a histogram equalization algorithm.

[0055] As an example, the binarization process may be implemented with the aid of the Otsu algorithm.

[0056] After obtaining the user's fingerprint information, the user can use the first quantum key K1 distributed and shared between the user and the third-party payment device with the help of QKD to encrypt the fingerprint information to generate encrypted fingerprint information, and then upload and store the encrypted fingerprint information and the corresponding user identity information in the cloud platform to form a user fingerprint library.

[0057] As an example, the generation of encrypted fingerprint information can be achieved with the help of quantum encryption algorithms (such as quantum random code books, quantum one-time pads, etc.), thereby ensuring the security of user fingerprint information during data transmission and storage.

[0058] To ensure the freshness of the quantum key, the first quantum key K1 used for fingerprint information encryption can be replaced regularly.

[0059] Furthermore, for the data stored in the fingerprint database, the cloud platform can also perform secondary encryption on it, for example, using the AES-256 encryption algorithm to improve the security of data storage.

[0060] Based on the above-mentioned fingerprint database established in the cloud platform, users are allowed to authenticate their identities without being restricted by local devices when conducting transactions with merchants, thereby safely completing the electronic payment process.

[0061] To this end, a third-party payment device with a default security rating can be set up at the shopping place to allow the steps of identity verification request, identity verification and electronic payment to be completed with its help. The third-party payment device can be provided with a fingerprint collection device so that the user can provide his fingerprint information on the spot at the shopping place. As an example, an FPS100 fingerprint sensor can be used, which can generally provide a fingerprint image resolution of 500dpi.

[0062] When a user purchases goods at a merchant, the merchant will correspondingly send a payment request to a third-party payment device, which may include, for example, information such as product information and payment information.

[0063] At this point, the third-party payment device can send an authentication request to the cloud platform with the help of the authentication request step.

[0064] See also Figure 1 and Figure 3 ,After the user selects the goods from the merchant, the merchant generates the ,corresponding payment request and sends it to the third-party payment ,device.

[0065] After the user confirms that information such as product information and payment information is correct on the third-party payment device, the user can enter his or her identity information on the third-party payment device, for example, by scanning his or her face or entering his or her ID number.

[0066] At this point, the third-party payment device can generate an identity authentication request and send it to the cloud platform together with the identity information entered by the user to request verification of the user's identity through fingerprint information.

[0067] In response to the identity authentication request, the user identity information may be verified at the third-party payment device through an identity authentication step.

[0068] Continue to see Figure 1 and Figure 3 ,In the identity authentication step, when the cloud platform receives the ,identification authentication request and user identity information from the ,third-party payment device, it can retrieve the encrypted fingerprint information from its ,user fingerprint library based on the authentication request and the user identity information, and send it to the ,third-party payment device.

[0069] When the third-party payment device receives the encrypted fingerprint information, it can use the first quantum key K1 to decrypt it and obtain the plain text of the fingerprint information.

[0070] At this time, the third-party payment device can verify the user's identity information by asking the user to enter his or her fingerprint information on site and comparing the user's fingerprint information collected on site with the user's fingerprint information obtained from the cloud platform. If the comparison is successful, the identity verification is passed and the subsequent electronic payment steps can continue. Otherwise, the transaction will be terminated.

[0071] Figure 1 and Figure 3 An example of the electronic payment steps of the present invention is shown.

[0072] As shown in the figure, after the user identity authentication is passed, the third-party payment device is allowed to use the second quantum key K2 shared between it and the bank to encrypt the user identity information and payment information it receives, generate encrypted user identity information and payment information and send it to the bank; at the same time, the cloud platform can use the third quantum key K3 shared between it and the bank to encrypt the user identity information it stores, generate encrypted user identity information and send it to the bank.

[0073] In the present invention, the second quantum key K2 shared between the bank and the third-party payment device, and the third quantum key K3 shared between the cloud platform and the bank, can both be achieved with the help of quantum key distribution.

[0074] Furthermore, when the bank receives the encrypted user identity information and payment information from the third-party payment device and the encrypted user identity information from the cloud platform respectively, it can first use the second quantum key K2 to decrypt the encrypted user identity information and payment information from the third-party payment device to obtain the user identity information and payment information provided by the third-party payment device, and use the third quantum key K3 to decrypt the encrypted user identity information from the cloud platform to obtain the user identity information provided by the cloud platform.

[0075] At this time, the bank can verify the user identity information provided by the third-party payment device with the user identity information provided by the cloud platform, and after the verification is correct, send the corresponding transfer information to the third-party payment device according to the payment information.

[0076] After receiving the above transfer information, the third-party payment device can first be confirmed by the user, and after the user confirms that it is correct, the user can re-enter his fingerprint information in the third-party payment device, so that the user can confirm the payment by comparing the re-entered fingerprint information with the fingerprint information provided by the cloud platform.

[0077] When the fingerprint information is successfully matched (i.e. the user confirms payment via fingerprint), the third-party payment device sends payment confirmation information to the bank.

[0078] When the bank receives the payment confirmation information, it can transfer the payment based on the payment information, thereby completing the required electronic payment.

[0079] Figure 4 Another example of the electronic payment steps of the present invention is adaptively shown.

[0080] As shown in the figure, in this example, the fourth quantum key K can be distributed and generated between the cloud platform and the third-party payment device with the help of quantum key distribution. A , and distribute the shared fifth quantum key K between the cloud platform and the bank B .

[0081] After the user's identity is verified with the help of the identity verification step, in the electronic payment step, the cloud platform can send its user identity information to the bank in an encrypted manner.

[0082] The third-party payment device can encrypt the fourth quantum key K it holds. A , user identity information and payment information are sent to the bank.

[0083] At the same time, the bank can encrypt the fifth quantum key K it holds. B Sent to a third-party payment device.

[0084] Furthermore, the third-party payment device uses the user identity information C and the fourth quantum key K it has A and the received fifth quantum key K B Generate the first signature; at the same time, the bank uses the fifth quantum key K B and the received user identity information and the fourth quantum key K A Generate a second signature.

[0085] The bank and the third-party payment device then communicate the signature verification result through, for example, a traditional channel, such as comparing the first signature with the second signature, and confirming that the signature verification is successful after the first signature and the second signature are successfully compared. At this point, the bank can, for example, after confirmation by the user, transfer the payment to the merchant based on the payment information, thereby completing the required electronic payment.

[0086] As a preferred example, the first / second signature can be obtained by using a hash function Sig=Hash(C,K A , K B ) to achieve it.

[0087] In the quantum key-based electronic payment method of the present invention, preferably after the electronic payment step, that is, after the transfer payment is completed, the user fingerprint information and quantum key data used on the third-party payment device can be automatically deleted with the help of an information deletion step.

[0088] Based on the above description, it can be seen that compared with the prior art, the electronic payment system and method of the present invention have the advantages of fingerprint universality, high security, good compatibility and easy management.

[0089] The present invention encrypts and stores fingerprint information in a cloud server (cloud platform), and retrieves it from the cloud after identity verification when in use, so that fingerprints can be universal without repeated entry. When making payments, fingerprints can be retrieved on a third-party device for fingerprint payment without using a personal local device. This can solve the problem of repeatedly entering fingerprint information in the prior art, which not only improves the security of fingerprint data, but also improves the convenience and versatility of fingerprint recognition, providing a higher level of protection for information security.

[0090] The present invention uses quantum keys to encrypt the extracted fingerprint information, which can ensure the security of the fingerprint information during transmission and storage. Compared with the existing fingerprint recognition technology based on traditional encryption algorithms, quantum encryption algorithms have higher security and can effectively prevent data from being cracked, thereby improving the security of fingerprint recognition.

[0091] The present invention uses quantum keys to encrypt fingerprint information and store it in a cloud server. Even if the cloud server is attacked, the attacker cannot obtain valid fingerprint data, thereby further improving security and solving the leakage problem of storing fingerprint data in local devices in the prior art.

[0092] At the same time, because the fingerprint information is stored in the cloud server, it is convenient for centralized management and maintenance, and there is no need to perform complex management and maintenance work on each local device, which improves the manageability of the system. It can be implemented on any device with a fingerprint collection device, not limited to a specific local device, which greatly improves the system compatibility and can achieve seamless identity authentication in a variety of different devices and systems, bringing great convenience to users.

[0093] Although the present invention has been described above through specific embodiments in conjunction with the accompanying drawings, those skilled in the art will readily recognize that the above embodiments are merely exemplary and are used to illustrate the principles of the present invention, and do not limit the scope of the present invention. Those skilled in the art may make various combinations, modifications and equivalent substitutions to the above embodiments without departing from the spirit and scope of the present invention.

Claims

1. An electronic payment method based on quantum key, which includes a fingerprint database establishment step, an identity authentication request step, an identity authentication step and an electronic payment step; The fingerprint database establishment step is used to establish a user fingerprint database in the cloud platform, which stores the user's identity information and its encrypted fingerprint information; The identity authentication request step is used by the third-party payment device to respond to the payment request and send an identity authentication request and user identity information to the cloud platform; The identity verification step is used by the cloud platform to respond to the identity verification request and send encrypted fingerprint information corresponding to the user identity information to the third-party payment device; and, the third-party payment device decrypts the encrypted fingerprint information to generate fingerprint information, and compares it with the fingerprint information input by the user to verify the user's identity; The electronic payment step is used by the bank to make electronic payments after identity verification.

2. The electronic payment method according to claim 1, wherein: The fingerprint database establishment process includes the following steps: Collect user's fingerprint information and identity information; Encrypting the fingerprint information using the first quantum key K1 to generate encrypted fingerprint information, wherein the first quantum key K1 is a shared quantum key between the user and the third-party payment device; and, The user's encrypted fingerprint information and identity information are uploaded and stored in the cloud platform to form a user fingerprint library.

3. The electronic payment method according to claim 2, wherein: The first quantum key K1 is generated through quantum key distribution and is periodically changed.

4. The electronic payment method according to claim 1, wherein: The authentication request step includes the following steps: The user enters identity information into the third-party payment device after confirming that the payment request is correct, wherein the payment request includes at least one of commodity information and payment information; and The third-party payment device sends an identity authentication request and user identity information to the cloud platform.

5. The electronic payment method according to claim 1, wherein: The authentication step consists of the following steps: In response to the identity authentication request, the cloud platform obtains the corresponding encrypted fingerprint information from the user fingerprint database according to the user identity information and sends it to the third-party payment device; The third-party payment device uses the first quantum key K1 to decrypt the encrypted fingerprint information to obtain the fingerprint information, so as to allow the user to compare the fingerprint information on the third-party payment device and pass the identity authentication when the fingerprint information is successfully compared.

6. The electronic payment method according to claim 1, wherein: The electronic payment process includes the following steps: After the identity authentication is passed, the third-party payment device uses the second quantum key K2 to encrypt the user identity information and payment information to generate encrypted user identity information and payment information, and sends it to the bank, where the second quantum key K2 is a shared quantum key between the third-party payment device and the bank; The cloud platform uses the third quantum key K3 to encrypt the user identity information to generate encrypted user identity information and sends it to the bank, where the third quantum key K3 is a shared quantum key between the cloud platform and the bank; The bank uses the second quantum key K2 to decrypt the encrypted user identity information and payment information to generate the user identity information and payment information sent by the third-party payment device, and uses the third quantum key K3 to decrypt the encrypted user identity information to generate the user identity information sent by the cloud platform. The bank compares the user identity information sent by the third-party payment device with the user identity information sent by the cloud platform, and sends the transfer information to the third-party payment device after the verification is correct. After confirming that the transfer information is correct, the user enters the fingerprint information again into the third-party payment device, allowing the user to use the fingerprint information for comparison on the third-party payment device, and sending payment confirmation information to the bank when the fingerprint information comparison is successful; After receiving the payment confirmation information, the bank will transfer the payment according to the payment information.

7. The electronic payment method according to claim 1, wherein: The electronic payment process includes the following steps: The cloud platform sends the user’s identity information to the bank in an encrypted manner; The third-party payment device encrypts the fourth quantum key K A , user identity information and payment information are sent to the bank, where the fourth quantum key K A A shared quantum key between the cloud platform and third-party payment devices; The bank encrypted the fifth quantum key K B Sent to a third-party payment device, where the fifth quantum key K B For the shared quantum key between the cloud platform and the bank; The third-party payment device is based on user identity information and the fourth quantum key K A and the fifth quantum key K B generating a first signature; Bank based on fifth quantum key K B , user identity information and the fourth quantum key K A generating a second signature; The bank communicates with the third-party payment device to compare the first signature and the second signature, and performs a transfer payment according to the payment information when the first signature and the second signature are successfully compared.

8. The electronic payment method according to claim 7, wherein: The signature is generated based on a hash function.

9. The electronic payment method according to claim 1, wherein: The payment request is generated by the merchant and sent to the third-party payment device.

10. An electronic payment system based on quantum key, comprising a cloud platform, a bank and a third-party payment device, and configured to perform electronic payment according to an electronic payment method as described in any one of claims 1 to 9; wherein: Third-party payment devices include fingerprint collection devices; Cloud platforms, banks and third-party payment devices are all connected to the quantum key distribution system.

Images