POS terminal state conversion method and system and electronic equipment

Abstract

The invention provides a POS terminal state conversion method and system and electronic device.The method is applied to a POS terminal, the POS terminal is used for being wirelessly connected with a server side, the server side comprises a service side, a registration side and a verification side, and the method comprises the steps of obtaining a conversion request, initiating a verification request to the verification side based on the conversion request, obtaining verification information, and sending the verification information to the server side; the verification information comprises verification codes sent to terminals except the POS terminal after the verification terminal confirms the verification request; sending verification information to the verification end, receiving a verification result, and establishing a secure channel based on the verification result; and communicating with the server through the secure channel, receiving the conversion instruction, and performing conversion based on the conversion instruction. According to the method and the device, remote operation of state conversion of the POS terminal is realized, authorization equipment does not need to be sent, and the convenience of state conversion of the POS terminal is improved on the premise of ensuring the safety.

Description

Technical Field

[0001] The present invention relates to the field of security control, and in particular to a POS terminal state conversion method, system and electronic equipment. Background Art

[0002] As a transaction terminal, the security of POS terminal is particularly important.

[0003] In the related art, after a POS terminal leaves the factory, if it needs to enter developer mode for maintenance, it needs to send an authorization tool, which is a very cumbersome process and cannot provide a simple and secure authorization method. Summary of the invention

[0004] The technical problem to be solved by the present invention is to provide a POS terminal state conversion method, system and electronic device to achieve convenient and highly secure POS terminal state conversion control.

[0005] In order to solve the above technical problems, a technical solution adopted by the present invention is: A POS terminal state conversion method is applied to a POS terminal, wherein the POS terminal is used to wirelessly connect to a service end, wherein the service end includes a business end, a registration end, and a verification end, and the method includes: Obtaining a conversion request, and initiating a verification request to a verification end based on the conversion request, Acquiring verification information, the verification information including a verification code sent by the verification terminal to a terminal other than a POS terminal after confirming the verification request; Sending the verification information to the verification end, receiving the verification result, and establishing a secure channel based on the verification result; Communicate with the server through the secure channel, receive conversion instructions, and perform conversion based on the conversion instructions.

[0006] In order to solve the above technical problems, another technical solution adopted by the present invention is: A POS terminal state conversion system, characterized in that it comprises a POS terminal and a server, wherein the server comprises a verification terminal; The POS terminal is used to obtain a conversion request, initiate a verification request to a verification end based on the conversion request; after receiving the verification information, send verification information to the verification end, receive a verification result, and establish a secure channel based on the verification result; communicate with the service end through the secure channel, receive a conversion instruction, and perform conversion based on the conversion instruction; The verification terminal is used to send verification information to terminals other than the POS terminal after confirming the verification request, and the verification information includes a verification code; and after receiving the verification information sent by the POS terminal, verify the verification information to obtain a verification result, and send the verification result to the POS terminal.

[0007] In order to solve the above technical problems, another technical solution adopted by the present invention is: An electronic device comprises a memory, a processor and a computer program stored in the memory and running on the processor. When the processor executes the computer program, each step in the above-mentioned POS terminal state conversion method is implemented.

[0008] The beneficial effects of the present invention are as follows: after obtaining the conversion request, the POS terminal initiates a verification request to the verification end based on the conversion request. After confirming the verification request, the verification end sends verification information to a terminal other than the POS terminal, which may be a pre-registered trusted terminal. The POS terminal continues to obtain verification information and sends verification information to the verification end. If the verification end receives the verification information sent by the POS terminal, verification is performed. The POS terminal receives the verification result and establishes a secure channel based on the verification result. If the verification result indicates that the user currently operating the POS terminal is trustworthy and the state conversion authority of the POS terminal can be opened, a secure channel is established based on the verification result to ensure the security of data during transmission. The POS terminal performs subsequent communication with the service end through the secure channel, performs conversion based on the conversion instruction after receiving the conversion instruction, opens the authority to remotely issue the conversion instruction after the POS terminal passes the identity authentication of the verification end, and implements the conversion instruction issuance process through the secure channel. On the basis of verifying whether the operation authority of the conversion instruction is possessed, the security of the conversion instruction issuance process is further guaranteed, and the remote operation of the POS terminal state conversion is realized without sending the authorization device to the remote end, thereby improving the convenience of the POS terminal state conversion under the premise of ensuring security. BRIEF DESCRIPTION OF THE DRAWINGS

[0009] Figure 1 A flowchart of a POS terminal state conversion method provided by an embodiment of the present invention; Figure 2 A system block diagram of a POS terminal state conversion method provided by an embodiment of the present invention applied in an actual scenario; Figure 3 A timing diagram of a POS terminal state conversion method provided by an embodiment of the present invention applied in an actual scenario; Figure 4 A structural diagram of a POS terminal state conversion device provided by an embodiment of the present invention; Figure 5A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0010] In order to make the technical problems, technical solutions and beneficial effects to be solved by the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0011] In the following description, specific details such as specific system structures, technologies, etc. are provided for the purpose of illustration rather than limitation, so as to provide a thorough understanding of the embodiments of the present application. However, it should be clear to those skilled in the art that the present application may also be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to prevent unnecessary details from obstructing the description of the present application.

[0012] It should be understood that when used in the present specification and the appended claims, the term "comprising" indicates the presence of described features, wholes, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, wholes, steps, operations, elements, components and / or combinations thereof.

[0013] References to "one embodiment" or "some embodiments" etc. described in the specification of this application mean that one or more embodiments of the present application include specific features, structures or characteristics described in conjunction with the embodiment. Therefore, the statements "in one embodiment", "in some embodiments", "in some other embodiments", "in some other embodiments", etc. that appear in different places in this specification do not necessarily refer to the same embodiment, but mean "one or more but not all embodiments", unless otherwise specifically emphasized in other ways. The terms "including", "comprising", "having" and their variations all mean "including but not limited to", unless otherwise specifically emphasized in other ways.

[0014] In the related art, in order to ensure the safety of POS machines, the permissions of POS machines are usually restricted in user mode, thereby limiting access to some sensitive functions. However, if the POS machine has problems or needs to be upgraded, it needs to switch from user mode to developer mode so that relevant functions can be accessed. However, according to the payment industry standard requirements, POS machines need to be in a controlled environment to switch terminal status to ensure security. Controlled environments include production, customer service maintenance and other environments. These environments, according to PCI (payment card industry) requirements, have certain security control measures, including operation through UKEY dual control, through monitoring and other means, and corresponding management systems. In contrast to the controlled environment is the open environment, which is mainly the situation where the terminal is used in an uncontrolled environment. Most of the terminal usage scenarios after leaving the factory are in an open environment. In these cases, the terminal itself has no external security control and can only be protected by the terminal and the security mechanism of the docking background. At present, there are usually three ways to enter the developer mode in the related art: the first is to enter the development mode by directly entering a command in a controlled environment; the second is to enter the development mode by downloading a configuration file in a controlled environment; the third is to enter the development mode through the UKEY+PC tool.

[0015] The input commands or configuration files of the first and second methods can be easily spread online, and there is no validity limit. The development mode can be entered at any time, and it must be carried out in a controlled environment, which requires the location of the POS machine to be moved. The third method is limited by UKEY, which needs to be sent to the location of the POS machine. If the distance between the POS machine manufacturer and the POS machine user is far, sending UKEY is time-consuming and laborious, and there is a risk of loss on the way. Therefore, in the current related technology, there is no simple and secure authorization method for the state transition of the POS terminal developer mode.

[0016] In order to solve the above problems, the present application provides a POS terminal state conversion method, system and electronic device. The following specifically introduces a POS terminal state conversion method of the present application.

[0017] The POS terminal state conversion method in this application can be used in a POS terminal, which is used to wirelessly connect to a server, which includes a business terminal, a registration terminal, and a verification terminal. The method of this application can also be used for other terminals that have security management requirements and can switch between multiple states. For example, switching of the developer mode of an Android device, etc.

[0018] The following specifically describes the POS terminal state conversion method of the present invention, with reference to the attached Figure 1 , including steps 110 to 140.

[0019] Step 110: Obtain a conversion request, and initiate a verification request to the verification end based on the conversion request.

[0020] In one embodiment of the present application, step 110 includes step 111: obtaining a conversion request, establishing a first secure channel with the verification end, and initiating a verification request to the verification end based on the conversion request, wherein the verification request includes a terminal identification of the POS terminal.

[0021] In this way, after building the first security channel, a verification request is sent through the first security channel to ensure the security of the verification request during the sending process, and the terminal identification of the POS terminal is sent. The verification end can then perform the authority verification step based on the terminal identification, thereby achieving one-to-one authority control with the terminal.

[0022] Step 120: Acquire verification information, where the verification information includes a verification code sent by the verification end to a terminal other than a POS terminal after confirming the verification request.

[0023] In one embodiment of the present application, step 120 includes step 121: obtaining verification information, where the verification information includes a verification code sent by the verification end to a terminal other than a POS terminal after the verification end confirms that the terminal identifier has been registered in the pool.

[0024] In this way, the verification end confirms whether the terminal identifier is registered in the pool based on the terminal identifier in the verification request. If the pool registration indicates that the terminal is a terminal that allows subsequent operations, such as a terminal that performs state switching, a verification code is sent to terminals other than the POS terminal. Because the verification request can be issued by holding the POS terminal, it is impossible to verify whether the operator who issues the verification request has the relevant authority. Therefore, the POS terminal is not directly converted to a state here, but the verification information is sent to terminals other than the POS terminal for another authority verification.

[0025] The terminals other than POS terminals here can be mobile phones, computers logged into email, smart devices, etc. Since the verification information sent directly to the POS terminal will be directly obtained by the person currently operating the POS terminal, it is impossible to determine whether the person currently operating the POS terminal has the corresponding authority. If the verification information is sent to other terminals other than the POS terminal, if the POS terminal can receive the input of the verification information, it means that the person currently operating the POS terminal can see the verification information and has the authority. If the verification information cannot be received, it means that the person currently operating the POS terminal cannot receive the input of the verification information and does not have the authority to operate the POS terminal, thereby preventing the POS terminal that can perform state switching from being performed by an operator who does not have the state switching authority.

[0026] In step 121, pool registration refers to the terminal entering the pool. Terminals that need to switch states require pool management. This is considered from the perspective of security management to prevent anyone who knows the method of switching states from being able to switch the state of the POS terminal at will. In other words, in addition to verifying whether the operator has the operating authority, it is also necessary to verify whether the POS terminal is allowed to be switched. The background can manage whether the terminal is allowed to switch states. If there is no management and control, then if the authority of an operator is cracked, the POS terminal used outside can be easily damaged by arbitrary switching of states, and the safety of use cannot be guaranteed.

[0027] In one embodiment of the present application, a pool registration method is also provided: through BPM (business process management, business process management) application, it is required to fill in the terminal identification of the POS terminal, such as CPUID (CPU serial number), SN (hardware serial number), etc., and the BPM application can be verified based on UKEY, mobile phone number or email to verify whether it has the corresponding authority. People without UKEY can obtain the state switching authorization code of this terminal through email. After entering the pool, the terminal identification is associated with the corresponding personnel contact information, so that in step 121, the contact information (email, mobile phone number, etc.) associated with the terminal identification can be obtained according to the pool registration, and the verification code is sent to the terminal other than the POS terminal through the contact information. If the POS terminal can receive the input verification code, it means that the person with the state switching authority is performing the state switching operation, and the subsequent steps are allowed. If it cannot be received, it means that the state switching operation is not initiated by the authorized person, and the subsequent state switching process will not be performed to ensure the safety of the terminal.

[0028] In one embodiment of the present application, the pool entry application may also correspond to the pool entry validity period. Calculated from the date of BPM application, if the state conversion operation authorized by the terminal development and debugging state is not completed within the pool entry validity period, the corresponding terminal no longer has the switching permission. Therefore, the remote loading conversion permission is only limited to a preset time period to avoid the leakage of remote control after the POS terminal is officially put into use, which affects the safety of the POS terminal. The debugging state represents a terminal state, which is equivalent to the developer mode. In this state, sensitive operations such as signature-free download of applications are supported.

[0029] Step 130: Send verification information to the verification end, receive the verification result, and establish a secure channel based on the verification result.

[0030] In one embodiment of the present application, establishing a secure channel based on the verification result in step 130 includes establishing a secure channel based on the verification result through the Transport Layer Security (TLS) protocol. It provides an encryption protocol for a confidential secure channel to ensure confidentiality for data transmission such as websites, emails, online faxes, etc. Similar protocols include the Secure Socket Layer (SSL) protocol.

[0031] In one embodiment of the present application, step 130 includes step 131 and step 132 .

[0032] Step 131: Send verification information to the verification end, instructing the verification end to verify whether the received verification information is consistent with the sent verification information, and if so, send a verification pass result.

[0033] Step 132: If the verification result is received, a secure channel is established based on the verification result. In this way, if the verification end can receive the verification information sent by the POS terminal and it is consistent with the verification information sent by the verification end, it means that the operator operating the POS terminal can obtain the verification information sent by the verification end to other terminals and has the authority to perform state conversion operations. At this time, a secure channel is established based on the verification result to perform subsequent state conversion operations, ensuring the security of the instruction transmission process.

[0034] In one embodiment of the present application, step 132 includes step 1321: if a verification result is received, a second secure channel is established with the registration end based on the verification result. In this way, after the verification is passed, a second secure channel is first established with the registration end, and the security of the communication process is ensured by interacting through the second secure channel.

[0035] In one embodiment of the present application, the verification end includes a request server and a verification server. In step 110, a conversion request is obtained, and a verification request is initiated to the request server based on the conversion request. In step 120, verification information is obtained, and the verification information includes a verification code sent by the request server to a terminal other than a POS terminal after confirming the verification request. In step 130, the verification information is sent to the verification server, and the verification result is received, and a secure channel is established based on the verification result. In this way, the request verification information and the verification of the verification information are executed in different servers, and there is no need to maintain the connection with the request server after the connection is connected. After receiving the verification information, it is sufficient to reconnect and send the verification information, thereby saving connection resources, and the division of labor and refinement of the server improve the processing efficiency of different processes.

[0036] Step 140: communicate with the server through a secure channel, receive a conversion instruction, and perform conversion based on the conversion instruction.

[0037] In one embodiment of the present application, after executing step 1321, step 140 includes steps 141-142.

[0038] Step 141: Send registration information to the registration end based on the second security channel, the registration information including the terminal identifier and the conversion instruction identifier; to instruct the registration end to verify whether there is operation authority for the conversion instruction based on the terminal identifier and the conversion instruction identifier, and if so, send authority confirmation information.

[0039] Step 142: Establish a third security channel with the business end based on the authority confirmation information, and communicate with the business end through the third security channel.

[0040] In this way, the conversion instruction is first registered through the registration end, and the registration end verifies whether the terminal corresponding to the terminal identifier has the operation authority of the conversion instruction. That is, the subsequent business end will only issue registered instructions, which further ensures the security of the instruction operation process. That is, after the verification end verifies the authority of the terminal, it is also necessary to verify the specific execution instruction through the registration end before the operation instruction is allowed. In the multiple verification method, if any link fails to pass the verification, the terminal state cannot be converted; and in the process of communicating with the business end and the registration end, it is realized through a separately constructed secure channel, which further avoids the leakage of relevant information during the transmission process.

[0041] In one embodiment of the present application, after executing steps 141-142, a conversion instruction is received in step 140, and conversion based on the conversion instruction includes step 143: receiving the conversion instruction through a third security channel, and performing conversion based on the conversion instruction. In this way, the conversion instruction sent by the service end is received and the security of the conversion instruction during transmission is guaranteed through the third security channel, and the service end will not send the conversion instruction to the POS terminal until the registration end verifies that the terminal has the authority to correspond to the conversion instruction, ensuring that the state conversion of the POS terminal is performed only when both the POS terminal itself and the terminal operator have the authority.

[0042] In one embodiment of the present application, a conversion instruction is received in step 140 , and conversion based on the conversion instruction includes steps 144 - 146 .

[0043] Step 144: Receive a conversion instruction, where the conversion instruction includes an operational validity period.

[0044] Step 145: Perform conversion based on the conversion instruction, and determine whether the conversion duration reaches the validity period.

[0045] Step 146: If yes, lock the POS terminal.

[0046] In this way, the validity period is included in the conversion instruction, which limits the duration of the state conversion. If the POS terminal is still in developer mode after the conversion time reaches the validity period, the POS terminal will be locked to prevent the developer mode from being abused.

[0047] In summary, the POS terminal initiates a verification request to the verification end in the server based on the received conversion request. The verification end authenticates the terminal and the person operating the terminal by checking whether the POS terminal is registered in the pool. The subsequent steps can only be performed if both the terminal and the operator have the corresponding permissions, that is, the terminal identification of the POS terminal must complete the pool registration, and the verification end will send the verification information to the terminal other than the POS terminal, and the sent verification information can be returned by the POS terminal, indicating that the operator with the permission can receive the verification information and input it into the POS terminal, thereby ensuring that the POS terminal and the operator have the corresponding permissions. The POS terminal receives the verification result sent by the verification end. If the verification result indicates that the POS terminal and the operator have the corresponding permissions, a secure channel is established with the server, indicating that the POS terminal can perform the state conversion operation. In addition, an operation validity period is set in the conversion instruction received by the POS terminal, and the conversion to the developer mode is only allowed within the operation validity period. After the operation validity period is reached, the machine will be locked, and the permissions of the POS terminal and the operator need to be re-verified before the mode conversion permission is reopened, further ensuring the security of entering the developer mode. In addition, during the data interaction between the POS terminal and the server, it is achieved through the established secure channel. The secure channel is based on data signature technology and TLS protocol. In addition to ensuring the security of the state switching process of the POS terminal through permission verification, it can also ensure the security of data during transmission. There is no need to send the authorization device to the remote end, and the POS terminal can remotely apply for table conversion, which improves the convenience of the POS terminal in state conversion operations while ensuring security.

[0048] Please refer to Figure 2-3 The following specifically introduces the application embodiment of the present application. The present application can apply the above solution to a POS terminal that needs to switch the developer status, including steps (1)-(10). (1) The POS terminal and the request server perform two-way authentication through digital signature technology and establish a TLS secure channel 1. For example, if the verification is performed through E-mail, the request server will be an E-mail request service.

[0049] (2) The POS terminal sends a verification request through secure channel 1. The verification request includes a terminal identifier such as CPUID, SN, etc., which can uniquely identify the terminal. Steps (1)-(2) are equivalent to the above step 110.

[0050] (3) The request service verifies whether the terminal identifier in the verification request is registered in the pool. If so, the verification information is sent to the authorized terminal corresponding to the terminal identifier in the pool registration information. The authorized terminal is a terminal other than a POS terminal. For example, if the terminal identifier in the pool registration information is associated with an email account, the E-mail request service sends the verification information to the email account so that the verification information can be obtained after logging into the email account in the authorized terminal. The verification information includes the verification code AuthCode1. If it is detected that the terminal identifier is not in the pool, the process is exited, indicating that the terminal does not have the authority to perform state transition. This is equivalent to the above step 120.

[0051] (4) The POS terminal and the verification server perform two-way authentication through digital signature technology and establish a TLS secure channel 2.

[0052] (5) The POS terminal sends verification information to the verification server through secure channel 2. The verification information includes the verification code AuthCode2.

[0053] (6) The verification server verifies whether the verification information AuthCode2 sent by the POS terminal is consistent with the verification information AuthCode1 sent by the request server. If yes, the process continues, otherwise the process exits. If the verification is performed by E-mail, the verification server is an E-mail verification service.

[0054] (7) The POS terminal and the registration terminal perform two-way authentication through digital signature technology and establish a TLS secure channel 3. Steps (4) to (7) are equivalent to the above step 130.

[0055] (8) The POS terminal sends registration information through the secure channel 3. The registration information includes CPUID, operation instructions, etc. The operation instructions here are conversion instructions. Only the registered instructions can be executed in the subsequent steps. This is equivalent to the above step 141.

[0056] (9) After the POS terminal and the business end perform two-way authentication through digital signature technology, a TLS secure channel 4 is established, wherein the business end can be a business gateway. This is equivalent to the above step 142.

[0057] (10) The POS terminal receives the conversion instruction through the secure channel 4 and performs a state transition to enter the developer mode. The business end sends a file containing the validity period of the operation to the POS terminal. The POS terminal determines the validity period of the file during operation and performs a lock operation if it expires. After the POS terminal completes the operation corresponding to the conversion instruction, it returns a confirmation character ACK or an execution result Result to inform the business terminal that the execution has been completed and the secure channel can be disconnected. This is equivalent to the above step 143.

[0058] The process of establishing and disconnecting the secure channel may refer to the process of establishing and disconnecting the secure channel 4 between the POS terminal and the business terminal in step (10), which will not be described in detail here.

[0059] Reference Figure 3 After the POS terminal sends relevant information to the request server, verification server, registration terminal and business terminal, if it returns a confirmation character ACK or a confirmation result Result after receiving the verification request, it means that the sent message has been successfully received.

[0060] In summary, when the POS terminal interacts with each functional end in the server, it establishes a secure channel through digital signature two-way authentication and TLS to ensure the security of the data transmission process. When the POS terminal sends information, it verifies itself through the terminal identifier that can uniquely identify itself, and the verification request, verification information, registration information and the final conversion instruction are all performed by different parts of the POS terminal request server. As long as one of the processes fails to pass the verification, the state of the POS terminal will not be switched, ensuring security. At the same time, for the conversion instructions issued, including the operating validity period, the POS terminal is restricted to state conversion only within the operating validity period, avoiding security incidents caused by forgetting to switch the state of the POS terminal back to user mode.

[0061] The present invention also provides a POS terminal state conversion system, comprising a POS terminal 201 and a server 202, wherein the server 202 comprises a verification terminal 2021; POS terminal 201, used for: Obtain a conversion request, and initiate a verification request to the verification end based on the conversion request; after receiving the verification information, send verification information to the verification end 2021, receive the verification result, and establish a secure channel based on the verification result; communicate with the server 202 through the secure channel, receive a conversion instruction, and perform conversion based on the conversion instruction; The verification terminal 2021 is used to send verification information including a verification code to terminals other than the POS terminal 201 after confirming the verification request; and after receiving the verification information sent by the POS terminal 201, verify the verification information to obtain a verification result, and send the verification result to the POS terminal 201.

[0062] The server 202 also includes a registration terminal 2022 and a business terminal 2023; The POS terminal 201 is further used to send registration information to the registration terminal 2022 when the verification result is verification passed; the registration information includes a terminal identification and a conversion instruction; The registration terminal 2022 is used to verify whether there is an operation permission for the conversion instruction according to the terminal identification, and if so, send permission confirmation information.

[0063] The POS terminal 201 is also used to communicate with the business terminal 2023 based on the authority confirmation information; and receive the conversion instruction, and perform conversion based on the conversion instruction; The service terminal 2023 is used to send a conversion instruction to the POS terminal after receiving the authority confirmation information sent by the POS terminal 201.

[0064] Please refer to Figure 5 The present invention also provides an electronic device 300, including a memory 301 and a processor 302, and a computer program stored in the memory 301 and running on the processor 302. When the processor 302 executes the computer program, each step in the above-mentioned POS terminal state conversion method is implemented.

[0065] The beneficial effects of the electronic device of the present invention are the same as those of the above method and will not be described in detail here.

[0066] The above are only embodiments of the present invention, and are not intended to limit the patent scope of the present invention. Any equivalent transformations made using the contents of the specification and drawings of the present invention, or directly or indirectly applied in related technical fields, are also included in the patent protection scope of the present invention.

Claims

1. A POS terminal state conversion method, characterized in that: Applied to a POS terminal, the POS terminal is used to wirelessly connect to a service end, the service end includes a business end, a registration end and a verification end, and the method includes: Obtaining a conversion request, and initiating a verification request to a verification end based on the conversion request, Acquiring verification information, the verification information including a verification code sent by the verification terminal to a terminal other than a POS terminal after confirming the verification request; Sending the verification information to the verification end, receiving the verification result, and establishing a secure channel based on the verification result; Communicate with the server through the secure channel, receive conversion instructions, and perform conversion based on the conversion instructions.

2. A POS terminal state conversion method according to claim 1, characterized in that: The obtaining of the conversion request and initiating a verification request to the verification end based on the conversion request comprises: Acquire a conversion request, establish a first secure channel with a verification terminal, and initiate a verification request to the verification terminal based on the conversion request, wherein the verification request includes a terminal identifier of the POS terminal; Acquire verification information, wherein the verification information includes a verification code sent by the verification end to a terminal other than a POS terminal after confirming the verification request, including: Acquire verification information, wherein the verification information includes a verification code sent by the verification end to a terminal other than the POS terminal after the verification end confirms that the terminal identifier has been registered in the pool.

3. A POS terminal state conversion method according to claim 1, characterized in that: The sending the verification information to the verification end, receiving the verification result, and establishing the secure channel based on the verification result includes: Send verification information to the verification end, instructing the verification end to verify whether the received verification information is consistent with the sent verification information, and if so, send a verification pass result; If a verification result is received, a secure channel is established based on the verification result.

4. A POS terminal state conversion method according to claim 3, characterized in that: If a verification result is received, establishing a secure channel based on the verification result includes: If a verification result is received, a second secure channel is established with the registration terminal based on the verification result; The communicating with the server through the secure channel includes: Sending registration information to the registration terminal based on the second security channel, the registration information including a terminal identifier and a conversion instruction identifier; instructing the registration terminal to verify whether there is an operation authority for the conversion instruction according to the terminal identifier and the conversion instruction identifier, and if so, sending authority confirmation information; A third security channel is established with the business end based on the authority confirmation information, and communication is performed with the business end through the third security channel.

5. A POS terminal state conversion method according to claim 4, characterized in that: The receiving a conversion instruction and converting based on the conversion instruction comprises: A conversion instruction is received through the third secure channel, and conversion is performed based on the conversion instruction.

6. A POS terminal state conversion method according to claim 1 or 4, characterized in that: The receiving a conversion instruction and converting based on the conversion instruction comprises: receiving a conversion instruction, wherein the conversion instruction includes an operation validity period; Performing conversion based on the conversion instruction, and determining whether the conversion duration reaches the validity period; If so, the POS terminal is locked.

7. A POS terminal state conversion method according to claim 1, characterized in that: The establishing of a secure channel based on the verification result comprises: A first secure channel is established through a transport layer security protocol based on the verification result.

8. A POS terminal state conversion system, characterized in that: It includes a POS terminal and a server, wherein the server includes a verification terminal; The POS terminal is used to obtain a conversion request, initiate a verification request to a verification terminal based on the conversion request; after receiving the verification information, send verification information to the verification terminal, receive a verification result, and establish a secure channel based on the verification result; Communicate with the server through the secure channel, receive a conversion instruction, and perform conversion based on the conversion instruction; The verification terminal is used to send verification information to terminals other than the POS terminal after confirming the verification request, and the verification information includes a verification code; and after receiving the verification information sent by the POS terminal, verify the verification information to obtain a verification result, and send the verification result to the POS terminal.

9. A POS terminal state conversion system according to claim 8, characterized in that: The server also includes a registration terminal and a service terminal; The POS terminal is further used to send registration information to the registration terminal when the verification result is verification passed; the registration information includes a terminal identifier and a conversion instruction; The registration terminal is used to verify whether there is an operation permission for the conversion instruction according to the terminal identification, and if so, send permission confirmation information; The POS terminal is also used to communicate with the business end based on the authority confirmation information; and receive a conversion instruction, and perform conversion based on the conversion instruction.

10. An electronic device, characterized in that: The method comprises a memory, a processor and a computer program stored in the memory and running on the processor, wherein the processor implements a POS terminal state conversion method as described in any one of claims 1 to 7 when executing the computer program.

Images