A quantum key-based electronic payment method and system

By encrypting and storing user fingerprint information on a cloud platform and utilizing a quantum key distribution system, the inconvenience and security issues of fingerprint recognition on non-local devices are resolved, and an electronic payment method with universal fingerprint functionality, high security, and good system compatibility is realized.

CN119809634BActive Publication Date: 2025-10-14JINAN INST OF QUANTUM TECH
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202411832716.8
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2024-12-12
Publication Date
2025-10-14
Estimated Expiration
2044-12-12

AI Technical Summary

Technical Problem

In the existing technology, fingerprint recognition is inconvenient to use on non-local devices and poses security risks. In particular, fingerprint data is easily leaked when the local device is attacked or damaged, and traditional encryption algorithms are easily cracked.

Method used

User fingerprint information is encrypted with quantum keys and stored in the cloud platform. It is shared among different devices through the quantum key distribution system to achieve universal fingerprint and seamless identity authentication, and the quantum key encryption algorithm is used to ensure data security.

Benefits of technology

It achieves the convenience and security of fingerprint information, prevents theft, provides efficient identity authentication, improves system compatibility and manageability, and avoids the risk of fingerprint data leakage on local devices.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119809634B_ABST
    Figure CN119809634B_ABST
Patent Text Reader

Abstract

The application discloses an electronic payment method and system based on quantum keys, which can realize fingerprint generalization by storing user fingerprint information in a cloud platform through quantum key encryption, does not need to repeatedly input and use personal local devices, can greatly improve the convenience and security of payment, effectively prevents the occurrence of stealing user fingerprint information by attacking third-party payment devices, effectively prevents security incidents in the payment process, and allows seamless identity authentication in various different devices and systems, greatly facilitating users. In addition, since only the user who passes the identity authentication can obtain the fingerprint information plaintext, an efficient and secure identity authentication mode can be provided. In addition, the encryption processing of data can be realized by means of quantum keys, so that the data security can be effectively improved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of electronic secure payment, and in particular to an electronic payment method and system based on quantum keys. Background Art

[0002] In modern society, with the development of science and technology, electronic payment has been widely used in payment systems due to its convenience and efficiency. In the process of electronic payment, in order to ensure the security of the payment process, user identity authentication is required. Compared with the authentication information such as passwords and tokens in traditional authentication and identification systems, biometrics have the advantages of not being forgotten or lost. Using biometrics as a means of identification and authentication can simultaneously provide high user usability and high security. Therefore, it is becoming more and more widely used. Fingerprint recognition, in particular, is widely used in identity authentication and payment systems due to its uniqueness and stability. Compared with facial recognition, fingerprints are more unique.

[0003] Existing technologies primarily collect a user's fingerprint image through a local device, extract and encrypt features on the local device, and then store the encrypted fingerprint features on the local device. This solution effectively prevents fingerprint data from being stolen or tampered with during transmission, thereby improving security. However, when a user needs to use a non-local device or change the local device, fingerprint payment cannot be used and must be re-entered, causing inconvenience to the user. Furthermore, existing technologies also present certain security risks. First, because fingerprint data is stored on the local device, it may be leaked or stolen if the local device is attacked or damaged. Second, existing fingerprint recognition technology is primarily based on traditional encryption algorithms. While these algorithms can ensure data security to a certain extent, with the continuous improvement of computing power, these algorithms may be cracked, leading to data leakage. Therefore, how to achieve the universality of fingerprint information and improve the convenience and security of fingerprint recognition is a major issue facing current technology. Summary of the Invention

[0004] In response to the above-mentioned problems existing in the prior art, the present invention proposes an electronic payment method and system based on quantum keys, which can be widely used in the fields of electronic payment systems, identity authentication systems, and data security. Among them, by encrypting the user's fingerprint information with a quantum key and storing it in a cloud platform, fingerprints can be universalized, eliminating the need for repeated entry and the use of personal local devices. This can greatly improve the convenience and security of payment, effectively prevent the theft of user fingerprint information by attacking third-party payment devices, effectively prevent security incidents during the payment process, and allow seamless identity authentication in various devices and systems, bringing great convenience to users. In addition, since only users who have passed the identity authentication can obtain the plaintext fingerprint information, an efficient and secure identity authentication method can be provided. In addition, data encryption processing with the help of quantum keys can effectively improve data security.

[0005] Specifically, the first aspect of the present invention relates to an electronic payment method based on quantum key, which includes a fingerprint database establishment step, an identity authentication request step, an identity authentication step, and an electronic payment step;

[0006] The fingerprint database establishment step is used to establish a user fingerprint database in the cloud platform, which stores the user's identity information and encrypted fingerprint information;

[0007] The identity authentication request step is used by the third-party payment device to respond to the payment request and send an identity authentication request and user identity information to the cloud platform;

[0008] The identity verification step is for the cloud platform to send encrypted fingerprint information corresponding to the user's identity information to the third-party payment device in response to the identity verification request; and the third-party payment device decrypts the encrypted fingerprint information to generate fingerprint information, and compares the fingerprint information with the fingerprint information input by the user to verify the user's identity;

[0009] The electronic payment step is used by the bank to make electronic payments after identity verification is passed.

[0010] Furthermore, the fingerprint database establishment step includes the following steps:

[0011] Collect user's fingerprint information and identity information;

[0012] Encrypting the fingerprint information using a first quantum key K1 to generate encrypted fingerprint information, wherein the first quantum key K1 is a shared quantum key between the user and the third-party payment device; and

[0013] The user's encrypted fingerprint information and identity information are uploaded and stored in the cloud platform to form a user fingerprint database.

[0014] Preferably, the first quantum key K1 is generated by quantum key distribution and is periodically replaced.

[0015] Furthermore, the identity authentication request step includes the following steps:

[0016] After confirming that the payment request is correct, the user enters identity information into the third-party payment device, wherein the payment request includes at least one of product information and payment information; and

[0017] The third-party payment device sends an authentication request and user identity information to the cloud platform.

[0018] Furthermore, the identity verification step includes the following steps:

[0019] In response to the authentication request, the cloud platform obtains the corresponding encrypted fingerprint information from the user fingerprint database based on the user's identity information and sends it to the third-party payment device;

[0020] The third-party payment device uses the first quantum key K1 to decrypt the encrypted fingerprint information to obtain fingerprint information, allowing the user to use the fingerprint information for comparison on the third-party payment device, and pass the identity authentication when the fingerprint information comparison is successful.

[0021] Furthermore, the electronic payment step includes the following steps:

[0022] After identity verification is passed, the third-party payment device uses the second quantum key K2 to encrypt the user identity information and payment information to generate encrypted user identity information and payment information, and sends it to the bank. The second quantum key K2 is a shared quantum key between the third-party payment device and the bank;

[0023] The cloud platform uses the third quantum key K3 to encrypt the user identity information to generate encrypted user identity information and sends it to the bank. The third quantum key K3 is a shared quantum key between the cloud platform and the bank.

[0024] The bank uses the second quantum key K2 to decrypt the encrypted user identity information and payment information to generate the user identity information and payment information sent by the third-party payment device. The bank uses the third quantum key K3 to decrypt the encrypted user identity information to generate the user identity information sent by the cloud platform. The bank compares the user identity information sent by the third-party payment device with the user identity information sent by the cloud platform, and after verification, sends the transfer information to the third-party payment device.

[0025] After confirming that the transfer information is correct, the user enters the fingerprint information again into the third-party payment device, allowing the user to use the fingerprint information for comparison on the third-party payment device, and sends the payment confirmation information to the bank if the fingerprint information comparison is successful;

[0026] The bank performs the transfer payment according to the payment information after receiving the payment confirmation information.

[0027] Further, the electronic payment step comprises the following steps:

[0028] The cloud platform sends the user identity information to the bank in an encrypted manner;

[0029] The third-party payment device sends the fourth quantum key K A , the user identity information and the payment information to the bank in an encrypted manner, wherein the fourth quantum key K A is a shared quantum key between the cloud platform and the third-party payment device;

[0030] The bank sends the fifth quantum key K B to the third-party payment device in an encrypted manner, wherein the fifth quantum key K B is a shared quantum key between the cloud platform and the bank;

[0031] The third-party payment device generates a first signature based on the user identity information, the fourth quantum key K A and the fifth quantum key K B ;

[0032] The bank generates a second signature based on the fifth quantum key K B , the user identity information and the fourth quantum key K A ;

[0033] The bank communicates with the third-party payment device to compare the first signature and the second signature, and performs the transfer payment according to the payment information when the first signature and the second signature are compared successfully.

[0034] Preferably, the signature is generated based on a hash function.

[0035] Further, the payment request is generated by a merchant and sent to the third-party payment device.

[0036] The second aspect of the present application relates to an electronic payment system based on quantum key, which comprises a cloud platform, a bank and a third-party payment device, and is configured to perform electronic payment according to the above-mentioned electronic payment method; wherein,

[0037] The third-party payment device comprises a fingerprint collection device.

[0038] The cloud platform, the bank and the third-party payment device are all connected to a quantum key distribution system. BRIEF DESCRIPTION OF DRAWINGS

[0039] The specific embodiments of the present application will be further described in detail below with reference to the accompanying drawings.

[0040] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings needed in the embodiments or prior art description. Obviously, the drawings in the following description only constitute some embodiments of the present application, and for those skilled in the art, other drawings can also be obtained from these drawings without creative labor.

[0041] Figure 1 An example of a quantum key-based electronic payment system according to the present application is schematically shown;

[0042] Figure 2 A basic flow of a quantum key-based electronic payment method according to the present application is schematically shown;

[0043] Figure 3 An example of a quantum key-based electronic payment method according to the present application is shown;

[0044] Figure 4 Another example of a quantum key-based electronic payment method according to the present application is shown. DETAILED DESCRIPTION

[0045] In the following, exemplary embodiments of the present application will be described in detail with reference to the drawings. The following embodiments are provided by way of example in order to fully convey the spirit of the present application to those skilled in the art to which the present application pertains. Therefore, the present application is not limited to the embodiments disclosed herein.

[0046] Figure 1 An example of a quantum key-based electronic payment system according to the present application is schematically shown.

[0047] As Figure 1 shown, the electronic payment system of the present application can include a cloud platform, a bank and a third-party payment device for realizing electronic payment between a user (buyer) and a merchant.

[0048] In the electronic payment system of the present application, each component can be connected with a quantum key distribution (QKD) system as needed, whereby quantum keys shared by both the QKD distribution between the user and the third-party payment device, between the cloud platform and the bank, and between the third-party payment device and the bank, thereby allowing the security of electronic payment to be guaranteed by means of quantum keys.

[0049] Referring to Figure 1 and Figure 2 , in order to make electronic payment without being limited by local devices, the electronic payment system of the present application first needs to establish a user fingerprint library in the cloud platform by means of a fingerprint library establishment step, which stores user identity information and fingerprint information.

[0050] In the fingerprint database establishment step of the present application, a fingerprint image can be collected from a user's finger by means of a user's mobile phone or a fingerprint collection device (e.g. a fingerprint sensor).

[0051] Subsequently, the collected fingerprint image can be preprocessed by denoising, enhancing contrast, binarization, etc., and a feature value (e.g. ridge line, valley line, etc.) with uniqueness and stability can be extracted from the preprocessed fingerprint image to serve as the fingerprint information for identity verification.

[0052] Those skilled in the art can understand that the collected fingerprint image should have high resolution and clarity to ensure the accuracy of subsequent processing.

[0053] As an example, the denoising processing can be implemented by means of a median filter algorithm.

[0054] As an example, the contrast enhancement processing can be implemented by means of a histogram equalization algorithm.

[0055] As an example, the binarization processing can be implemented by means of an Otsu algorithm.

[0056] After obtaining the user's fingerprint information, the user can encrypt the fingerprint information to generate encrypted fingerprint information by means of a first quantum key K1 shared between the user and a third-party payment device by means of QKD, and then upload and store the encrypted fingerprint information and corresponding user identity information in a cloud platform to form a user fingerprint database.

[0057] As an example, the generation of encrypted fingerprint information can be implemented by means of a quantum encryption algorithm (e.g. quantum random password book, quantum one-time pad, etc.), thereby ensuring the security of the user's fingerprint information during data transmission and storage.

[0058] To ensure the freshness of the quantum key, the first quantum key K1 used for fingerprint information encryption can be replaced periodically.

[0059] Further, for the data stored in the fingerprint database, the cloud platform can further encrypt the data by means of an AES-256 encryption algorithm, for example, to improve the security of data storage.

[0060] On the basis of the establishment of the above-mentioned fingerprint database in the cloud platform, the user is allowed to perform identity verification without being restricted by a local device when generating a transaction behavior with a merchant, thereby safely completing an electronic payment process.

[0061] To this end, a third-party payment device with reliable security by default can be provided at the shopping site to allow the user to complete the identity verification request, identity verification and electronic payment steps with the help of the third-party payment device. The third-party payment device can be provided with a fingerprint collection device so that the user can provide his / her fingerprint information on site. As an example, an FPS100 fingerprint sensor can be used, which can generally provide a fingerprint image resolution of 500 dpi.

[0062] When the user selects goods at the merchant, the merchant can send a payment request to the third-party payment device, which can include, for example, goods information and payment information.

[0063] At this time, the third-party payment device can send an identity verification request to the cloud platform through the identity verification request step.

[0064] Referring to Figure 1 and Figure 3 , after the user selects goods at the merchant, the merchant generates a corresponding payment request and sends it to the third-party payment device.

[0065] After the user confirms that the information such as goods information and payment information is correct on the third-party payment device, the user can enter his / her identity information on the third-party payment device, for example, by facial recognition or by entering an ID number.

[0066] At this time, the third-party payment device can generate an identity verification request and send it to the cloud platform along with the user's input identity information to request verification of the user's identity through fingerprint information.

[0067] In response to the identity verification request, the user's identity information can be verified at the third-party payment device through the identity verification step.

[0068] Continuing to refer to Figure 1 and Figure 3 , in the identity verification step, when the cloud platform receives the identity verification request and the user's identity information from the third-party payment device, it can retrieve encrypted fingerprint information from its user fingerprint library based on the identity verification request and send it to the third-party payment device.

[0069] When the third-party payment device receives the encrypted fingerprint information, it can decrypt it using the first quantum key K1 to obtain the plaintext of the fingerprint information.

[0070] At this time, the third-party payment device can verify the user's identity information by comparing the user's fingerprint information collected on site with the user's fingerprint information obtained from the cloud platform by having the user input his / her fingerprint information on site. If the comparison is successful, the identity verification is passed and the subsequent electronic payment step can continue, otherwise the transaction is terminated.

[0071] Figure 1 and Figure 3 An example of the electronic payment steps of the present invention is shown.

[0072] As shown in the figure, after the user identity authentication is passed, the third-party payment device is allowed to use the second quantum key K2 shared between it and the bank to encrypt the user identity information and payment information it receives, generate encrypted user identity information and payment information and send it to the bank; at the same time, the cloud platform can use the third quantum key K3 shared between it and the bank to encrypt the user identity information it stores, generate encrypted user identity information and send it to the bank.

[0073] In the present invention, the second quantum key K2 shared between the bank and the third-party payment device, and the third quantum key K3 shared between the cloud platform and the bank, can both be achieved with the help of quantum key distribution.

[0074] Furthermore, when the bank receives the encrypted user identity information and payment information from the third-party payment device and the encrypted user identity information from the cloud platform respectively, it can first use the second quantum key K2 to decrypt the encrypted user identity information and payment information from the third-party payment device to obtain the user identity information and payment information provided by the third-party payment device, and use the third quantum key K3 to decrypt the encrypted user identity information from the cloud platform to obtain the user identity information provided by the cloud platform.

[0075] At this time, the bank can verify the user identity information provided by the third-party payment device with the user identity information provided by the cloud platform, and after the verification is correct, send the corresponding transfer information to the third-party payment device according to the payment information.

[0076] After receiving the above transfer information, the third-party payment device can first be confirmed by the user. After the user confirms that the information is correct, the user can re-enter his fingerprint information in the third-party payment device, so that the user can confirm the payment by comparing the re-entered fingerprint information with the fingerprint information provided by the cloud platform.

[0077] When the fingerprint information is successfully matched (i.e. the user confirms payment via fingerprint), the third-party payment device sends payment confirmation information to the bank.

[0078] When the bank receives the payment confirmation information, it can transfer the payment based on the payment information, thereby completing the required electronic payment.

[0079] Figure 4 Another example of the electronic payment steps of the present invention is adaptively shown.

[0080] As shown in the figure, in this example, the fourth quantum key K can be distributed and generated between the cloud platform and the third-party payment device with the help of quantum key distribution. A , and distribute the shared fifth quantum key K between the cloud platform and the bank B .

[0081] After the user's identity is verified through the identity verification step, in the electronic payment step, the cloud platform can send its user identity information to the bank in an encrypted manner.

[0082] The third-party payment device can encrypt the fourth quantum key K it holds. A , user identity information and payment information are sent to the bank.

[0083] At the same time, the bank can encrypt the fifth quantum key K B Sent to a third-party payment device.

[0084] Furthermore, the third-party payment device uses the user identity information C and the fourth quantum key K it has A and the received fifth quantum key K B Generate the first signature; at the same time, the bank uses the fifth quantum key K B and the received user identity information and the fourth quantum key K A Generate a second signature.

[0085] The bank and the third-party payment device then communicate the signature verification results through traditional channels, such as comparing the first and second signatures. Once the first and second signatures are successfully compared, the bank confirms the signature verification is successful. At this point, the bank can, after confirmation from the user, transfer the payment to the merchant based on the payment information, thus completing the required electronic payment.

[0086] As a preferred example, the first / second signature can be obtained by using a hash function Sig=Hash(C,K A , K B ) to achieve it.

[0087] In the quantum key-based electronic payment method of the present invention, preferably after the electronic payment step, that is, after the transfer payment is completed, the user fingerprint information and quantum key data used on the third-party payment device can be automatically deleted with the help of an information deletion step.

[0088] Based on the above description, it can be seen that compared with the existing technology, the electronic payment system and method of the present invention have the advantages of fingerprint universality, high security, good compatibility and easy management.

[0089] The present invention encrypts and stores fingerprint information in a cloud server (cloud platform), and retrieves it from the cloud after identity verification when in use. This makes fingerprints universal, eliminating the need for repeated entry. When making a payment, the fingerprint can be retrieved on a third-party device and the payment can be made with fingerprints, eliminating the need for a personal local device. This solves the problem of requiring repeated fingerprint entry in the prior art, not only improving the security of fingerprint data, but also increasing the convenience and versatility of fingerprint recognition, providing a higher level of information security.

[0090] This invention uses quantum keys to encrypt extracted fingerprint information, ensuring the security of fingerprint information during transmission and storage. Compared to existing fingerprint recognition technologies based on traditional encryption algorithms, quantum encryption algorithms offer greater security, effectively preventing data from being cracked, and thus improving the security of fingerprint recognition.

[0091] The present invention uses quantum keys to encrypt and store fingerprint information in a cloud server. Even if the cloud server is attacked, the attacker cannot obtain valid fingerprint data, thereby further improving security and solving the leakage problem of storing fingerprint data in local devices in the existing technology.

[0092] At the same time, because fingerprint information is stored in the cloud server, it is easy to centrally manage and maintain, eliminating the need for complex management and maintenance on each local device, improving the manageability of the system. Furthermore, it can be implemented on any device with a fingerprint collection device, not limited to specific local devices, greatly improving system compatibility and enabling seamless identity authentication across a variety of devices and systems, bringing great convenience to users.

[0093] Although the present invention has been described above through specific embodiments in conjunction with the accompanying drawings, it is easy for those skilled in the art to recognize that the above embodiments are merely exemplary and are used to illustrate the principles of the present invention. They do not limit the scope of the present invention. Those skilled in the art can make various combinations, modifications and equivalent substitutions to the above embodiments without departing from the spirit and scope of the present invention.

Claims

1. A quantum key-based electronic payment method, comprising a fingerprint database establishment step, an identity verification request step, an identity verification step, and an electronic payment step; The fingerprint database establishment step is used to establish a user fingerprint database in the cloud platform, which stores the user's identity information and encrypted fingerprint information; The identity authentication request step is used by the third-party payment device to respond to the payment request and send an identity authentication request and user identity information to the cloud platform; The identity verification step is for the cloud platform to respond to the identity verification request and send encrypted fingerprint information corresponding to the user's identity information to the third-party payment device; and, the third-party payment device decrypts the encrypted fingerprint information to generate fingerprint information, and compares it with the fingerprint information input by the user to verify the user's identity; The electronic payment step is used by the bank to make electronic payments after identity verification is passed; The electronic payment step includes the following steps: After identity verification is passed, the third-party payment device uses the second quantum key K2 to encrypt the user identity information and payment information to generate encrypted user identity information and payment information, and sends it to the bank. The second quantum key K2 is a shared quantum key between the third-party payment device and the bank; The cloud platform uses the third quantum key K3 to encrypt the user identity information to generate encrypted user identity information and sends it to the bank. The third quantum key K3 is a shared quantum key between the cloud platform and the bank. The bank uses the second quantum key K2 to decrypt the encrypted user identity information and payment information to generate the user identity information and payment information sent by the third-party payment device. The bank uses the third quantum key K3 to decrypt the encrypted user identity information to generate the user identity information sent by the cloud platform. The bank compares the user identity information sent by the third-party payment device with the user identity information sent by the cloud platform, and after verification, sends the transfer information to the third-party payment device. After confirming that the transfer information is correct, the user enters the fingerprint information again into the third-party payment device, allowing the user to use the fingerprint information for comparison on the third-party payment device, and sends the payment confirmation information to the bank if the fingerprint information comparison is successful; After receiving the payment confirmation information, the bank will transfer the payment according to the payment information.

2. The electronic payment method according to claim 1, wherein: The steps to establish a fingerprint database include the following steps: Collect user's fingerprint information and identity information; Encrypting the fingerprint information using a first quantum key K1 to generate encrypted fingerprint information, wherein the first quantum key K1 is a shared quantum key between the user and the third-party payment device; and The user's encrypted fingerprint information and identity information are uploaded and stored in the cloud platform to form a user fingerprint database.

3. The electronic payment method according to claim 2, wherein: The first quantum key K1 is generated through quantum key distribution and is periodically replaced.

4. The electronic payment method according to claim 1, wherein: The authentication request step includes the following steps: After confirming that the payment request is correct, the user enters identity information into the third-party payment device, wherein the payment request includes at least one of product information and payment information; and The third-party payment device sends an authentication request and user identity information to the cloud platform.

5. The electronic payment method according to claim 1, wherein: The authentication process includes the following steps: In response to the authentication request, the cloud platform obtains the corresponding encrypted fingerprint information from the user fingerprint database based on the user's identity information and sends it to the third-party payment device; The third-party payment device uses the first quantum key K1 to decrypt the encrypted fingerprint information to obtain fingerprint information, allowing the user to use the fingerprint information for comparison on the third-party payment device, and pass the identity authentication when the fingerprint information comparison is successful.

6. The electronic payment method according to claim 1, wherein: The payment request is generated by the merchant and sent to the third-party payment device.

7. A quantum key-based electronic payment method comprising a fingerprint database establishment step, an identity verification request step, an identity verification step, and an electronic payment step; The fingerprint database establishment step is used to establish a user fingerprint database in the cloud platform, which stores the user's identity information and encrypted fingerprint information; The identity authentication request step is used by the third-party payment device to respond to the payment request and send an identity authentication request and user identity information to the cloud platform; The identity verification step is for the cloud platform to respond to the identity verification request and send encrypted fingerprint information corresponding to the user's identity information to the third-party payment device; and, the third-party payment device decrypts the encrypted fingerprint information to generate fingerprint information, and compares it with the fingerprint information input by the user to verify the user's identity; The electronic payment step is used by the bank to make electronic payments after identity verification is passed; The electronic payment step includes the following steps: The cloud platform sends the user’s identity information to the bank in an encrypted manner; The third-party payment device encrypts the fourth quantum key K A , user identity information and payment information are sent to the bank, where the fourth quantum key K A A shared quantum key between the cloud platform and third-party payment devices; The bank encrypted the fifth quantum key K B Sent to a third-party payment device, where the fifth quantum key K B Shared quantum keys between cloud platforms and banks; The third-party payment device is based on user identity information and the fourth quantum key K A and the fifth quantum key K B Generate a first signature; The bank is based on the fifth quantum key K B , user identity information and the fourth quantum key K A generating a second signature; The bank communicates with the third-party payment device to compare the first signature and the second signature, and performs a transfer payment according to the payment information when the first signature and the second signature are successfully compared.

8. The electronic payment method according to claim 7, wherein: The steps to establish a fingerprint database include the following steps: Collect user's fingerprint information and identity information; Encrypting the fingerprint information using a first quantum key K1 to generate encrypted fingerprint information, wherein the first quantum key K1 is a shared quantum key between the user and the third-party payment device; and The user's encrypted fingerprint information and identity information are uploaded and stored in the cloud platform to form a user fingerprint database.

9. The electronic payment method according to claim 8, wherein: The first quantum key K1 is generated through quantum key distribution and is periodically replaced.

10. The electronic payment method according to claim 7, wherein: The authentication request step includes the following steps: After confirming that the payment request is correct, the user enters identity information into the third-party payment device, wherein the payment request includes at least one of product information and payment information; and The third-party payment device sends an authentication request and user identity information to the cloud platform.

11. The electronic payment method according to claim 7, wherein: The authentication process includes the following steps: In response to the authentication request, the cloud platform obtains the corresponding encrypted fingerprint information from the user fingerprint database based on the user's identity information and sends it to the third-party payment device; The third-party payment device uses the first quantum key K1 to decrypt the encrypted fingerprint information to obtain fingerprint information, allowing the user to use the fingerprint information for comparison on the third-party payment device, and pass the identity authentication when the fingerprint information comparison is successful.

12. The electronic payment method according to claim 7, wherein: The signature is generated based on a hash function.

13. The electronic payment method according to claim 7, wherein: The payment request is generated by the merchant and sent to the third-party payment device.

14. A quantum key-based electronic payment system comprising a cloud platform, a bank, and a third-party payment device, and configured to perform electronic payment according to the electronic payment method according to any one of claims 1 to 13; wherein: Third-party payment devices include fingerprint collection devices; Cloud platforms, banks and third-party payment devices are all connected to the quantum key distribution system.

Citation Information

Patent Citations

  • Fingerprint payment certificate server, fingerprint payment method and system thereof

    CN101901517A

  • Fingerprint authentication method based on quantum graph state

    CN107257283A