Payment method, device, equipment, system, medium and program product

Abstract

The invention discloses a payment method, device, equipment, system, medium and program product, and relates to the technical field of payment. The method can obtain a transaction order; according to the connection state of the user payment device and the user device POS, payment information is determined, and the payment information comprises payment card information used for paying the transaction order and user identity information; and payment information is transmitted to the user equipment POS, the payment information is used for the user equipment POS to verify the user identity information, and when the verification is passed, the transaction order is settled through the payment card information. Thus, an identity verification process such as payment password input is transferred to the user payment device of the consumer from a process of manually inputting the payment password on the user device POS, user information is prevented from being tampered, user information leakage and device counterfeit are effectively prevented, and payment safety is improved.

Description

Technical Field

[0001] The present application belongs to the field of payment technology, and in particular, relates to a payment method, device, equipment, system, medium and program product. Background Art

[0002] As self-service cash registers, tablet computers for ordering and collecting payment, and other payment tools become increasingly popular in supermarkets, restaurants, and other industries, payment tools are showing a trend of shifting from point of sale (POS) terminals to lightweight acceptance terminals that integrate sales and payment. Among them, user equipment POS, as a representative of lightweight acceptance terminals, can run payment collection applications on devices with Near Field Communication (NFC) functions to realize electronic fund transactions.

[0003] In the related art, consumers can place their payment devices close to the merchant's POS device and manually enter the payment password on the POS device to complete the transaction. However, the POS device does not have an external password keyboard, so the payment password input process needs to be completed on the POS device, which results in the consumer's user information being limited by the security of the POS device itself, making it easy to leak user information and reduce payment security. Summary of the invention

[0004] The embodiments of the present application provide a payment method, device, equipment, system, medium and program product, which can solve the problem in the related art that the user equipment POS is easy to leak the user information of consumers and reduce the payment security.

[0005] In a first aspect, an embodiment of the present application provides a payment method, which is applied to a user payment device. The method may include:

[0006] Get transaction orders;

[0007] Determine payment information based on the connection status between the user payment device and the user device POS, where the payment information includes payment card information and user identity information used to pay for the transaction order;

[0008] The payment information is transmitted to the user device POS, and the payment information is used by the user device POS to verify the user's identity information. When the verification is successful, the transaction order is settled through the payment card information.

[0009] In a second aspect, an embodiment of the present application provides a payment method, which is applied to a user device POS. The method may include:

[0010] In the case of initiating a transaction order, obtaining payment information transmitted by the user's payment device, the payment information includes payment card information and user identity information used to pay the transaction order, and the payment information is determined by the connection status between the user's payment device and the user's device POS;

[0011] Verify user identity information based on payment information;

[0012] Once the user's identity information is verified, the transaction order is settled using the payment card information.

[0013] In a third aspect, an embodiment of the present application provides a payment device, which is applied to a user payment device, including:

[0014] Acquisition module, used to obtain transaction orders;

[0015] A determination module, used to determine payment information according to the connection status between the user payment device and the user device POS, the payment information including payment card information and user identity information used to pay the transaction order;

[0016] The transmission module is used to transmit payment information to the user device POS. The payment information is used by the user device POS to verify the user's identity information, and when the verification is passed, the transaction order is settled through the payment card information.

[0017] In a fourth aspect, an embodiment of the present application provides a payment device, applied to a user device POS, comprising:

[0018] An acquisition module, used to acquire payment information transmitted by a user payment device when a transaction order is initiated, wherein the payment information includes payment card information and user identity information used to pay for the transaction order, and the payment information is determined by the connection status between the user payment device and the user device POS;

[0019] A verification module, used to verify user identity information based on payment information;

[0020] The settlement module is used to settle transaction orders through payment card information when the user's identity information is verified.

[0021] In a fifth aspect, an embodiment of the present application provides a computer device, the computer device comprising: a processor and a memory storing computer program instructions;

[0022] When the processor executes the computer program instructions, it implements the payment method as shown in the first aspect, or implements the payment method as shown in the second aspect.

[0023] In a sixth aspect, an embodiment of the present application provides a computer storage medium having computer program instructions stored thereon. When the computer program instructions are executed by a processor, the payment method as shown in the first aspect or the payment method as shown in the second aspect is implemented.

[0024] In the seventh aspect, an embodiment of the present application provides a chip, the chip including a processor and a communication interface, the communication interface and the processor are coupled, and the processor is used to run programs or instructions to implement the payment method shown in the first aspect, or to implement the payment method shown in the second aspect.

[0025] In an eighth aspect, an embodiment of the present application provides a computer program product, which is stored in a storage medium and is executed by at least one processor to implement the payment method as shown in the first aspect, or to implement the payment method as shown in the second aspect.

[0026] The payment method, device, equipment, system, medium and program product of the embodiment of the present application can determine the payment information according to the connection status between the user payment device and the user device POS when obtaining the transaction order, and the payment information includes the payment card information and user identity information used to pay the transaction order; then, the payment information is transmitted to the user device POS, and the payment information is used for the user device POS to verify the user identity information, and when the verification is passed, the transaction order is settled through the payment card information. In this way, the identity authentication process such as entering the payment password can be transferred from manually entering the payment password on the user device POS to the consumer's user payment device by first entering the payment card information and user identity information in the user payment device in advance and then approaching the user device POS, or by first bringing the user payment device close to the user device POS and then entering the payment card information and user identity information in the user payment device, so as to avoid user information being tampered with, effectively prevent user information leakage and device counterfeiting, and improve the security of payment. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] In order to more clearly illustrate the technical solution of the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0028] Figure 1 A schematic diagram of the results of a payment architecture is shown;

[0029] Figure 2 A schematic diagram of a payment architecture provided in an embodiment of the present application;

[0030] Figure 3 A schematic diagram of a payment method provided in an embodiment of the present application;

[0031] Figure 4 A schematic diagram of an interactive process of random ciphertext based on a payment method provided in an embodiment of the present application;

[0032] Figure 5 A schematic diagram of a payment method provided in an embodiment of the present application;

[0033] Figure 6 An interactive schematic diagram of a payment method based on a payment architecture provided in an embodiment of the present application;

[0034] Figure 7 A schematic diagram of the structure of a payment device provided in an embodiment of the present application;

[0035] Figure 8 A schematic diagram of the structure of a payment device provided in an embodiment of the present application;

[0036] Fig. 9 It is a schematic diagram of the structure of a computer device provided by an embodiment of the present application. DETAILED DESCRIPTION

[0037] The features and exemplary embodiments of various aspects of the present application will be described in detail below. In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain the present application, rather than to limit the present application. For those skilled in the art, the present application can be implemented without the need for some of these specific details. The following description of the embodiments is only to provide a better understanding of the present application by illustrating the examples of the present application.

[0038] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "include..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0039] The acquisition, storage, use, and processing of data (including but not limited to the features and information in the text) in the technical solution of this application comply with the relevant provisions of national laws and regulations.

[0040] In related payment technologies, consumers can place their own user payment devices close to the merchant's user device POS and manually enter the payment password on the user device POS to complete the transaction. Figure 1 As shown, the merchant and / or acquiring application (Application, APP) in the user device POS of the merchant side initiates a payment request and detects NFC communication with the user device of the consumer. At this time, if the consumer brings the user payment device close to the user device POS, the user device POS can read the payment card information in the payment application in the user payment device through NFC communication, such as the payment card information in the mobile phone PAY. After reading the payment card information, the user device POS can display a password keyboard to prompt the consumer to enter the payment password of the payment card in the user device POS. The merchant and / or acquiring APP calls the POS software development kit (Software Development Kit, SDK) in the user device POS to encrypt the payment card information, payment password and transaction order, and transmits the encrypted payment card information, payment password and transaction order to the merchant and / or acquiring backend to complete the transaction after identity verification.

[0041] However, in the process of manually entering the payment card password on the user device POS, consumers need to enter the payment card password in the merchant's user device POS. Consumers are usually less willing to enter the payment password in an electronic device that is not their own, and the user device POS is easily implanted with viruses, which may record the transaction process, steal payment card information, payment password and other user information, leak user information, and reduce payment security.

[0042] Although, the user device POS can be connected to an external device to obtain the payment password entered by the user through the external device. For example, during the payment process, the merchant connects the pre-prepared external information collection device to the user device POS. If identity authentication is required, the consumer can enter the password in the external device to complete the payment. However, this solution is no different from the traditional POS in form. Both require consumers to operate on the collection device when paying, making the payment process cumbersome, and the merchant cashier needs to carry the external device with him, which makes payment difficult.

[0043] Based on this, in order to solve the problems in the above-mentioned related technologies, the embodiments of the present application transfer the identity authentication process such as inputting the payment password from manually inputting the payment password on the user device POS to the consumer's user payment device by inputting the payment password in advance in the mobile phone PAY of the user payment device and then approaching the user device POS, or by first bringing the mobile phone PAY close to the user device POS and then inputting the payment password in the mobile phone PAY, thereby avoiding user information from being tampered with, effectively preventing user information leakage and device counterfeiting, and improving payment security. It should be noted that these embodiments are not intended to limit the scope of the disclosure of this application.

[0044] The following will be combined with the attached Figures 2 to 5 , describe in detail the payment method, apparatus, system, computer equipment, storage medium and computer program product of the embodiments of the present application.

[0045] First, combine Figure 2 The payment architecture provided in the embodiment of the present application is described in detail as follows.

[0046] like Figure 2 As shown, the payment architecture in the embodiment of the present application includes a user device POS at the merchant end and a user payment device of the consumer.

[0047] The user equipment POS of the merchant end in the embodiment of the present application can be an electronic device that provides a wireless communication function and has a payment function, and the user payment device can be an electronic device that provides a wireless communication function and has a payment function. Among them, the electronic device includes but is not limited to a terminal, and can also be other devices other than a terminal. Exemplarily, the electronic device can be a mobile phone, a tablet computer, a laptop computer, a palm computer, a car electronic device, a mobile Internet device (Mobile Internet Device, MID), an augmented reality (augmented reality, AR) / virtual reality (virtual reality, VR) device, a robot, a wearable device, an ultra-mobile personal computer (ultra-mobile personal computer, UMPC), a netbook or a personal digital assistant (personal digital assistant, PDA), etc., and can also be a server, a network attached storage (Network Attached Storage, NAS), a personal computer (personal computer, PC), a television (television, TV), a teller machine or a self-service machine, etc., which is not specifically limited in the embodiment of the present application.

[0048] In the embodiment of the present application, the user device POS is provided with a POSSDK, a card reading module, a connection module and a key management applet.

[0049] Specifically, POSSDK is used to encrypt the card production life cycle (CPLC), merchant number, institution number, terminal number, terminal unique serial number (TUSN), transaction time, and the last 6 digits of the payment card number during the payment process. Among them, CPLC includes digital numbers related to the production process of smart cards, and smart cards can include payment cards in the embodiments of the present application. CPLC data objects can include the BIN data of the payment card issuer, such as the serial number of the card, operating system or Internet Content Creation (ICC) manufacturer information, etc., which helps to track the source of the smart card, the production process, and the relevant information of the issuer.

[0050] The card reader module is used to read the payment card information and user identity information in the mobile phone PAY of the consumer's user payment device through NFC connection using Application Protocol Data Unit (APDU) instructions.

[0051] The connection module is used to detect the connection availability between the user's payment device, the mobile phone PAY, and the user's device POS and establish a connection. After completing the identity authentication and obtaining the payment card password, the connection module can receive the payment information transmitted by the user's device POS.

[0052] The key management applet is used to manage the preset second dynamic key factor in the user device POS. The applet in the user device POS is downloaded to the security domain of the secure element (SecureElement, SE) in the user device POS when the user device POS is activated. The secure element is used to store security data information such as the second dynamic key factor. In the field of mobile payment, SE is used as a security component of the mobile payment client to securely store and calculate key transaction data.

[0053] In an embodiment of the present application, the user payment device may be provided with an identity authentication module, a key management Applet and a card reading Applet.

[0054] Specifically, the identity authentication module is used to verify payment card passwords and biometric data such as fingerprints and faces.

[0055] The key management applet is used to manage the first dynamic key factor and the first session key in the user's payment device. The applet in the user's payment device is downloaded to the security domain of the SE when the mobile PAY card data is downloaded. The first session key is dynamically generated during the transaction.

[0056] The card reading Applet is used to read the payment card information in the mobile phone PAY in the user's payment device. The payment card information may include the card data in the payment card and the payment password of the payment card. The Applet is downloaded to the security domain in the SE when the mobile phone PAY is activated to download the card data.

[0057] Based on the above payment architecture, the embodiment of the present application can solve the security and convenience problems existing in the existing technical solutions by migrating the password input process from the user device POS to the mobile phone PAY, so as to ensure the security of the communication link during the interaction between the user device POS and the mobile phone PAY in the user payment device, prevent user identity and device counterfeiting, and provide a good payment experience.

[0058] Specifically, the merchant cashier initiates a payment transaction in the merchant and / or acquiring APP, and the consumer opens the mobile PAY in the user payment device and attempts to establish a connection with the user device POS through near-field communication methods such as wifi and Bluetooth. If the connection is unavailable, the user payment device may prompt the consumer to verify the user identity by verifying the fingerprint or face in the mobile PAY. After the verification is successful, the password keyboard is displayed, and the consumer enters the password and brings the user payment device close to the user device POS. The user device POS reads the card information and password information; if the connection is available, the consumer brings the user payment device close to the user device POS, and the user device POS reads the payment information and requests to verify the payment card password. The consumer moves the mobile PAY away from the user device POS, verifies the fingerprint or face, and enters the payment card password. The payment information such as the payment card password and payment card information can be transmitted to the user device POS through wireless transmission methods such as wifi and Bluetooth. The user device POS sends the payment information to the background, and the payment is completed after the background verification is successful.

[0059] Therefore, the embodiment of the present application can transfer the identity authentication link, by inputting the payment card password in advance through the mobile phone PAY in the user payment device or by inputting the password in the mobile phone PAY after the mobile phone PAY in the user payment device is close to the user device POS. In addition, in order to ensure the security of the data link and prevent counterfeiting, when the user payment device is close to the user device POS, the two parties negotiate the session key and use the session key to encrypt the transaction data, ensuring that only the mobile phone PAY that has been negotiated can trade with the user device POS, and its payment card password can be encrypted using the preset session key and identity authentication private key, ensuring that the mobile phone PAY can only obtain the password and signature information after the user successfully completes the identity authentication, and the password can only be used after the background signature verification is passed, thereby increasing the encryption complexity of the payment information and improving the payment security.

[0060] It should be noted that the payment method provided in the embodiment of the present application can be applied to scenarios where a payment password needs to be entered, such as POS payment collection on an electronic device.

[0061] Combine the following Figure 3 The payment method executed by the user payment device in the above payment architecture is described in detail.

[0062] Figure 3 A flow chart of a payment method provided in an embodiment of the present application.

[0063] like Figure 3 As shown, this payment method can be applied to Figure 2 The user payment device in the payment architecture shown, the payment method may specifically include the following steps:

[0064] Step 310, obtaining the transaction order; Step 320, determining the payment information according to the connection status between the user payment device and the user device POS, the payment information including the payment card information and the user identity information used to pay the transaction order; Step 330, transmitting the payment information to the user device POS, the payment information is used by the user device POS to verify the user identity information, and when the verification is passed, the transaction order is settled through the payment card information.

[0065] Therefore, the identity authentication process such as entering the payment password can be transferred from manually entering the payment password on the user device POS to the consumer's user payment device, by first entering the payment card information and user identity information in the user payment device in advance and then bringing it close to the user device POS, or by first bringing the user payment device close to the user device POS and then entering the payment card information and user identity information in the user payment device, thereby avoiding user information tampering, effectively preventing user information leakage and device counterfeiting, and improving payment security.

[0066] The above steps are described in detail below, as shown below.

[0067] Involving step 310, in the embodiment of the present application, the transaction order generated by the user device POS can be obtained through the key management Applet in the user payment device; the transaction order generated and transmitted by the user device POS can also be obtained through wireless communication technology.

[0068] Regarding step 320, in some embodiments of the present application, the connection status includes a first connection status for indicating that the user payment device is connected to the user device POS. Based on this, step 320 may specifically include steps 3201 to 3203.

[0069] Step 3201: According to the first connection state, perform key negotiation with the user equipment POS to determine a first session key.

[0070] Step 3202, when the payment user corresponding to the user payment device passes the identity authentication, obtain the user identity information in the user payment device; and when the payment password of the payment card input by the payment user is obtained, encrypt the payment password to obtain the payment card information.

[0071] It should be noted that the payment information involved in step 3202 may be a PINBLOCK. PINBLOCK is a data block after the payment password of the payment card is encrypted, and it complies with the ANSI X9.8 specification and is used in the encrypted transmission process of the payment password of the payment card. Encrypting the payment password to obtain the payment card information may specifically include the following preprocessing operation, XOR operation and encryption operation steps, as shown below: First, the preprocessing operation process is to remove the check digit from the card number of the payment card and take the 12 digits on the right, and then splice 4 or 6 0s in the front, and fill F in the back when it is less than 16 digits, and at the same time, splice the input password to fill 16 digits. In the XOR operation process, the card number after the preprocessing operation and the payment password can be XORed to obtain the XOR result. In the encryption operation process, the XOR result can be encrypted using the symmetric encryption (3DES) algorithm to generate the PINBLOCK.

[0072] In this way, the security of the payment card password during transmission can be ensured. By encrypting the payment card password, the payment card password can be prevented from being intercepted or tampered with during transmission, thereby protecting the user's account security.

[0073] Step 3203, determining payment information based on the first session key, the identity authentication private key and the payment card information.

[0074] Furthermore, the user identity information in the embodiment of the present application includes an identity authentication private key. Based on this, the above step 3203 may specifically include step 32031 and step 32032.

[0075] Step 32031, the payment card information is signed using the identity authentication private key to obtain the first signed payment card encrypted data.

[0076] Step 32032, encrypt the first signature payment card encryption data using the first session key to obtain payment information.

[0077] In some other embodiments of the present application, the connection status includes a second connection status for indicating that the user payment device is not connected to the user device POS. Based on this, step 320 may specifically include steps 3204 to 3208.

[0078] Step 3204: Display identity authentication prompt information according to the second connection state.

[0079] Step 3205, when the payment user corresponding to the user payment device passes the identity authentication, obtain the user identity information in the user payment device; and when the payment password of the payment card input by the payment user is obtained, encrypt the payment password to obtain the payment card information.

[0080] Step 3206: Sign the payment information using the user identity information to obtain first signed payment card encrypted data.

[0081] Step 3207: Perform key negotiation with the user equipment POS to determine the first session key.

[0082] Step 3208: Encrypt the first signature payment card encryption data using the first session key to obtain payment information.

[0083] Exemplarily, the above steps 3204 to 3208 can be described in detail through the following example. If the connection is unavailable, that is, the user payment device and the user device POS are not connected, the mobile phone PAY prompts the consumer to perform identity authentication in advance. After the consumer confirms, the fingerprint or face verification interface pops up. After the consumer successfully verifies the fingerprint or face, the identity authentication private key preset in the mobile phone system is initialized. The private key can only be used after the fingerprint or face is verified. The mobile phone PAY pops up the password keyboard, the consumer enters the password, the mobile phone PAY calculates the pinblock, and uses the preset identity authentication private key to sign the pinblock. Bring the mobile phone PAY close to the user device POS to negotiate the secret key. The negotiation process is the same as the steps of available connection. The mobile phone PAY encrypts the pinblock and pinblock signature using the negotiated sessionkey. The user device POS reads the card data and encryption result through the APDU instruction. The subsequent process is the same as the steps of available connection. In this scenario, since the identity authentication and password input are completed in advance, when the mobile phone PAY is close to the user device POS, the card data, pinblock and signature can be transmitted in one NFC interaction, which reduces the interaction frequency and optimizes the user experience. The above is the complete interaction process between the user device POS and the mobile phone PAY. Among them, in addition to Bluetooth and WiFi, in operating systems such as HarmonyOS NEXT, the distributed device communication function of the operating system can also be used as a data interaction channel.

[0084] It should be noted that, in some embodiments of the present application, the user payment device in the embodiments of the present application includes a security unit, and the security unit is used to store the first dynamic key factor used by the user payment device. Based on this, the step of negotiating the key with the user device POS and determining the first session key involved in the above step 3201 or step 3207 may specifically include steps 3401 and 3402.

[0085] Step 3401, obtain a random number provided by the user device POS.

[0086] Step 3402: Determine a first session key based on the random number and the first dynamic key factor of the user's payment device. The obfuscation method includes but is not limited to encryption, splicing, etc.

[0087] In some embodiments, the security unit in the embodiments of the present application is also used to store a secret key negotiated with the user device POS. Based on this, before step 3401, the payment method may also include steps 3403 and 3404.

[0088] Step 3403, receiving the random ciphertext transmitted from the user device POS.

[0089] Step 3404, decrypt the random ciphertext using the secret key in the security unit to obtain a random number.

[0090] The contents involved in the above steps 3201 to 3203 and 3401 to 3404 are described in detail below with reference to the following examples, as shown below.

[0091] The user payment device can establish a connection with the user device POS through Bluetooth, WiFi, and the distributed device communication function of the operating system to obtain the transaction order generated by the user device POS. Based on this, when the user payment device is connected to the user device POS, the user payment device can be brought close to the user device POS and the secret key negotiation can be performed through the mobile phone PAY in the user payment device. The specific process is as follows:

[0092] like Figure 4 As shown, the user device POS can use mobile POS, and the mobile phone PAY in the user payment device can use mobile phone PAY for explanation.

[0093] In step (1), the user equipment POS generates a random number random.

[0094] Step (2) encrypts random using the secret key preset in SE.

[0095] Step (3) sends the random ciphertext and identity authentication request to the mobile phone PAY via APDU instruction.

[0096] Step (4) Mobile PAY uses the secret key preset in SE to decrypt random.

[0097] Step (5) generates a first session key sessionkey using random and a pre-downloaded first dynamic key factor factor.

[0098] Step (6) Mobile PAY displays biometric collection prompt information to collect the user's fingerprint or face data. After the fingerprint or face is successfully verified, the user identity information preset in the user payment device is initialized. The user identity information may include an identity authentication private key. The identity authentication private key can only be used after the identity authentication is successful. The user payment device displays the payment card payment password input interface through the mobile PAY to prompt the consumer to enter the payment card payment password on the user payment device. Mobile PAY calculates the pinblock and uses the preset identity authentication private key to sign the pinblock to obtain the first signature payment card encrypted data, namely the pinblock signature.

[0099] Step (7) The user payment device uses the sessionkey to encrypt the pinblock and pinblock signature to obtain the payment information, and transmits the payment information to the user device POS via Bluetooth / WiFi or other methods.

[0100] Step (8) The user device POS sends the received payment information to the background. The background queries the second dynamic key factor factor used by mobile phone PAY through the transaction information, generates a sessionkey in the same way as mobile phone PAY, uses the sessionkey to decrypt the identity authentication information, and uses the public key corresponding to the preset identity authentication private key to verify the pinblock signature. If the verification is successful, it means that the consumer has performed fingerprint or face authentication and the verification result is valid, and the payment process continues.

[0101] Among them, the secret key factor in mobile PAY is downloaded to the SE of the mobile phone when the mobile PAY is activated. After the transaction is completed, the factor becomes invalid, and the mobile PAY automatically downloads a new factor and saves it to the SE for the next transaction. Each transaction uses a different factor and generates a different sessionkey. Even if the factor or sessionkey is leaked, it only affects this transaction and has no effect on other mobile PAY transactions.

[0102] In this way, by using fingerprint / face verification and private key signature verification methods, it can be proved that the consumer has performed fingerprint or face verification and the verification is valid, preventing fake identity attacks and denial.

[0103] In some embodiments of the present application, the user payment device in the embodiments of the present application stores reference biometric data of the paying user, and the reference biometric data includes at least one of the following biometric data: facial features, iris features, fingerprint features, and voiceprint features. Based on this, the steps involved in the above step 3202 or step 3205 to determine whether the paying user has passed the identity authentication can be as follows. Based on this, before step 320, the payment method can also include steps 3501 to 3503.

[0104] Step 3501, display biometric collection prompt information.

[0105] Step 3502: collect the biometric data of the paying user through a collection strategy corresponding to the biometrics.

[0106] Step 3503: When the biometrics match the reference biometrics data, it is determined that the paying user has passed identity authentication.

[0107] Based on this, after step 3503, the payment card and the payment password of the payment card can also be determined through the following step 3504.

[0108] Step 3504: When it is determined that the paying user has passed the identity authentication, a prompt interface is displayed;

[0109] The prompt interface includes first prompt information and second prompt information. The first prompt information is used to prompt the paying user to select a payment card for paying the transaction order, and the second prompt information is used to prompt the paying user to enter the payment password of the payment card.

[0110] In some embodiments of the present application, based on the embodiments shown in the above steps 3201 to 3203, step 330 may specifically include:

[0111] The payment information is transmitted to the user's POS device through near field communication or the distributed device communication function of the operating system.

[0112] In some embodiments of the present application, based on the embodiments shown in the above steps 3204 to 3208, before step 330, the payment method may further include:

[0113] Receive the command application protocol data unit APDU instruction sent by the user equipment POS.

[0114] Based on this, step 330 may specifically include:

[0115] According to the command APDU instruction, the payment information is transmitted to the user device POS through the response APDU instruction corresponding to the command APDU instruction.

[0116] Combine the following Figure 5 The payment method executed by the user device POS in the above payment architecture is described in detail.

[0117] Figure 5 A flow chart of a payment method provided in an embodiment of the present application.

[0118] like Figure 5 As shown, this payment method can be applied to Figure 5 In the payment architecture shown, the user device POS, the payment method may specifically include the following steps:

[0119] Step 510, when initiating a transaction order, obtain the payment information transmitted by the user's payment device, the payment information includes the payment card information and user identity information used to pay the transaction order, and the payment information is determined by the connection status between the user's payment device and the user's device POS; Step 520, based on the payment information, verify the user's identity information; Step 530, when the user's identity information is verified, settle the transaction order through the payment card information.

[0120] Therefore, the identity authentication process such as entering the payment password can be transferred from manually entering the payment password on the user device POS to the consumer's user payment device, by first entering the payment card information and user identity information in the user payment device in advance and then bringing it close to the user device POS, or by first bringing the user payment device close to the user device POS and then entering the payment card information and user identity information in the user payment device, thereby avoiding user information tampering, effectively preventing user information leakage and device counterfeiting, and improving payment security.

[0121] The above steps are described in detail below, as shown below.

[0122] Regarding step 510, in some embodiments of the present application, the user device POS includes a security unit, and the security unit is used to store the second dynamic key factor of the user device POS. Based on this, before step 510, the payment method may also include steps 5401 to 5403.

[0123] Step 5401, when initiating a transaction order, determine a random number.

[0124] Step 5402, encrypt the random number using the second dynamic key factor to obtain a random ciphertext.

[0125] Step 5403: transmit a random ciphertext to the user's payment device, where the random ciphertext is used to determine the payment information.

[0126] In some embodiments of the present application, before obtaining the payment information transmitted by the user's payment device, the payment method may further include:

[0127] A command application protocol data unit APDU instruction is sent to the user payment device, where the command APDU instruction is used to instruct the user payment device to transmit payment information through a response APDU instruction corresponding to the command APDU instruction.

[0128] Based on this, the steps involved in step 510 of obtaining the payment information transmitted by the user's payment device may specifically include:

[0129] The payment information transmitted by the user's payment device through the response APDU instruction corresponding to the command APDU instruction is received.

[0130] Regarding step 520, the user identity information in the embodiment of the present application includes an identity authentication private key. Based on this, step 520 may specifically include steps 5201 to 5205.

[0131] Step 5201: Obtain a first dynamic key factor corresponding to the user's payment device based on the payment information.

[0132] Step 5202, determine the second session key based on the random number and the first dynamic key factor.

[0133] Step 5203, decrypt the payment information using the second session key to obtain the second signed payment card encrypted data.

[0134] Step 5204: Verify the encrypted data of the second signature payment card using the identity verification public key corresponding to the identity verification private key to obtain a verification result.

[0135] Step 5205: When the signature verification result indicates that the encrypted data of the second signature payment card has been verified, the user identity information is verified.

[0136] Combine the following Figure 6 The payment method based on the payment architecture provided in the embodiment of the present application is described in detail.

[0137] like Figure 6 As shown, the user device POS can be explained by using a mobile phone POS and the mobile phone PAY in the user payment device can be explained by using a mobile phone PAY. The payment method may include the following steps.

[0138] Step 601: The merchant initiates payment in the mobile POS.

[0139] In step 602, the mobile POS and the mobile PAY try to establish a connection via Bluetooth, WiFi, the distributed device communication function of the operating system, etc. If the connection is successfully established, step 603 is executed; otherwise, if the connection is not successfully established, step 606 is executed.

[0140] Step 603: If the connection is available, the mobile phone PAY approaches the mobile phone POS to negotiate the key and request identity authentication. For details, please refer to steps (1) to (6), which will not be repeated here.

[0141] Step 604: The user payment device uses the sessionkey to encrypt the pinblock and the pinblock signature to obtain payment information, and transmits the payment information to the user device POS through the connection.

[0142] Step 605, the user device POS sends the received payment information to the background, and the background queries the second dynamic key factor factor used by mobile phone PAY through the transaction information, generates a sessionkey in the same way as mobile phone PAY, uses the sessionkey to decrypt the identity authentication information, and uses the public key corresponding to the preset identity authentication private key to verify the pinblock signature. If the verification is successful, it means that the consumer has performed fingerprint or face verification and the verification result is valid, and the payment process continues to be completed.

[0143] Step 606, if the connection is unavailable, mobile PAY identity authentication, specifically, mobile PAY prompts the consumer to authenticate in advance, after the consumer confirms, the fingerprint or face verification interface pops up, after the consumer successfully verifies the fingerprint or face, the authentication private key preset in the mobile phone system is initialized, the private key can only be used after the fingerprint or face is verified. Mobile PAY pops up the password keyboard, the consumer enters the password, mobile PAY calculates the pinblock, and uses the preset authentication private key to sign the pinblock. Bring the mobile PAY close to the user device POS to negotiate the secret key, the negotiation process is the same as the steps of available connection. Mobile PAY uses the negotiated sessionkey to encrypt the pinblock and pinblock signature. The user device POS reads the card data and encryption result through APDU instructions. The subsequent process is the same as the steps of available connection.

[0144] Step 607: In this scenario, since the identity authentication and password input are completed in advance, when the mobile phone PAY is close to the user device POS, the card data, pinblock and signature can be transmitted in one NFC interaction. In this way, the interaction frequency is reduced and the user experience is optimized. The above is the complete interaction process between the user device POS and the mobile phone PAY. Among them, in addition to Bluetooth and WiFi, in an operating system such as Harmony OS NEXT, the distributed device communication function of the operating system can also be used as a data interaction channel.

[0145] Therefore, the identity authentication process such as entering the payment password can be transferred from manually entering the payment password on the user device POS to the consumer's user payment device, by first entering the payment card information and user identity information in the user payment device in advance and then bringing it close to the user device POS, or by first bringing the user payment device close to the user device POS and then entering the payment card information and user identity information in the user payment device, thereby avoiding user information tampering, effectively preventing user information leakage and device counterfeiting, and improving payment security.

[0146] The present application also provides a payment device corresponding to the above payment method, specifically in combination with Figure 7 Provide detailed explanation.

[0147] Figure 7 A schematic diagram of the structure of a payment device provided in an embodiment of the present application.

[0148] In some embodiments of the present application, Figure 7 The payment device shown can be set in the embodiment of the present application as shown in Figure 2 User payment device shown.

[0149] Based on this, Figure 7 As shown, the payment device 70 may specifically include:

[0150] The acquisition module 701 is used to acquire the transaction order;

[0151] A determination module 702, configured to determine payment information according to the connection status between the user payment device and the user device POS, wherein the payment information includes payment card information and user identity information used to pay for the transaction order;

[0152] The transmission module 703 is used to transmit payment information to the user device POS. The payment information is used by the user device POS to verify the user identity information, and when the verification is passed, the transaction order is settled through the payment card information.

[0153] The payment device 70 in the embodiment of the present application is described in detail below.

[0154] In some embodiments of the present application, the determination module 702 is further specifically used to, when the connection state includes a first connection state indicating that the user payment device is connected to the user device POS, perform key negotiation with the user device POS according to the first connection state to determine the first session key;

[0155] The acquisition module 701 may also be used to acquire user identity information in the user payment device when the payment user corresponding to the user payment device passes identity authentication;

[0156] Furthermore, in the embodiment of the present application, the payment device 70 may further include an encryption module, which is used to encrypt the payment password to obtain the payment card information when the payment password of the payment card input by the payment user is obtained;

[0157] The determination module 702 is further specifically configured to determine payment information according to the first session key, the identity authentication private key and the payment card information.

[0158] In some embodiments of the present application, the payment device 70 in the embodiment of the present application may further include a signature module, which is used to sign the payment card information by using the identity authentication private key when the user identity information includes the identity authentication private key, to obtain the first signature payment card encrypted data;

[0159] In the embodiment of the present application, the payment device 70 may further include an encryption module, which is used to encrypt the first signature payment card encryption data using the first session key to obtain payment information.

[0160] In some embodiments of the present application, the transmission module 703 may also be used to transmit payment information to the user device POS via near field communication or a distributed device communication function of the operating system.

[0161] In some embodiments of the present application, the payment device 70 in the embodiment of the present application may further include a display module, which is used to display identity authentication prompt information according to the second connection state when the connection state includes a second connection state indicating that the user payment device and the user device POS are not connected;

[0162] The acquisition module 701 may also be used to acquire user identity information in the user payment device when the payment user corresponding to the user payment device passes identity authentication;

[0163] Furthermore, in the embodiment of the present application, the payment device 70 may further include an encryption module, which is used to encrypt the payment password to obtain the payment card information when the payment password of the payment card input by the payment user is obtained;

[0164] In the embodiment of the present application, the payment device 70 may further include a signature module, which is used to sign the payment information through the user identity information to obtain the first signature payment card encrypted data;

[0165] The determination module 702 may also be used to perform key negotiation with the user equipment POS to determine the first session key;

[0166] The encryption module can also be used to encrypt the first signature payment card encryption data using the first session key to obtain payment information.

[0167] In some embodiments of the present application, the payment device 70 in the embodiment of the present application may further include a receiving module for receiving a command application protocol data unit APDU instruction sent by the user equipment POS;

[0168] The transmission module 703 may be specifically configured to transmit the payment information to the user equipment POS according to the command APDU instruction and through the response APDU instruction corresponding to the command APDU instruction.

[0169] In some embodiments of the present application, the acquisition module 701 may also be used to, when the user payment device includes a security unit, and the security unit is used to store the first dynamic key factor used by the user payment device, obtain the random number provided by the user device POS;

[0170] The determination module 702 may also be configured to determine a first session key based on a random number and a first dynamic key factor of a user payment device.

[0171] In some embodiments of the present application, the payment device 70 in the embodiment of the present application may further include a receiving module for receiving a random ciphertext transmitted from the user device POS when the security unit is also used to store a secret key negotiated with the user device POS;

[0172] In the embodiment of the present application, the payment device 70 may further include a decryption module, which is used to decrypt the random ciphertext using a secret key in the security unit to obtain a random number.

[0173] In some embodiments of the present application, the payment device 70 in the embodiment of the present application may further include a display module, which is used to store reference biometric data of the paying user in the user payment device, where the reference biometric data includes data of at least one of the following biometrics: face features, iris features, fingerprint features, and voiceprint features, and display biometric collection prompt information;

[0174] In the embodiment of the present application, the payment device 70 may further include a collection module for collecting biometric data of the payment user through a collection strategy corresponding to the biometric feature;

[0175] The determination module 702 may also be used to determine that the paying user has passed identity authentication when the biometrics matches the reference biometrics data.

[0176] In some embodiments of the present application, the payment device 70 in the embodiment of the present application may also include a display module, which is used to display a prompt interface when it is determined that the payment user has passed the identity authentication;

[0177] The prompt interface includes first prompt information and second prompt information. The first prompt information is used to prompt the paying user to select a payment card for paying the transaction order, and the second prompt information is used to prompt the paying user to enter the payment password of the payment card.

[0178] The payment device of the embodiment of the present application can determine the payment information according to the connection status between the user payment device and the user device POS when obtaining the transaction order, and the payment information includes the payment card information and user identity information used to pay the transaction order; then, the payment information is transmitted to the user device POS, and the payment information is used to verify the user identity information of the user device POS, and when the verification is passed, the transaction order is settled through the payment card information. In this way, the identity authentication process such as entering the payment password can be transferred from manually entering the payment password on the user device POS to the consumer's user payment device by first entering the payment card information and user identity information in the user payment device in advance and then approaching the user device POS, or by first bringing the user payment device close to the user device POS and then entering the payment card information and user identity information in the user payment device, so as to avoid user information being tampered with, effectively prevent user information leakage and device counterfeiting, and improve the security of payment.

[0179] The present application also provides a payment device corresponding to the above payment method, specifically in combination with Figure 8 Provide detailed explanation.

[0180] Figure 8 A schematic diagram of the structure of a payment device provided in an embodiment of the present application.

[0181] In some embodiments of the present application, Figure 8 The payment device shown can be set in the embodiment of the present application as shown in Figure 2 The user equipment POS is shown.

[0182] Based on this, Figure 8 As shown, the payment device 80 may specifically include:

[0183] The acquisition module 801 is used to acquire the payment information transmitted by the user payment device when initiating a transaction order. The payment information includes the payment card information and user identity information used to pay the transaction order. The payment information is determined by the connection status between the user payment device and the user device POS;

[0184] Verification module 802, used to verify user identity information based on payment information;

[0185] The settlement module 803 is used to settle the transaction order through the payment card information when the user identity information is verified.

[0186] The payment device 80 in the embodiment of the present application is described in detail below.

[0187] In some embodiments of the present application, the payment device 80 in the embodiment of the present application may further include a determination module for determining a random number when initiating a transaction order, when the user device POS includes a security unit, and the security unit is used to store the second dynamic key factor of the user device POS;

[0188] In the embodiment of the present application, the payment device 80 may further include an encryption module for encrypting the random number using the second dynamic key factor to obtain a random ciphertext;

[0189] In the embodiment of the present application, the payment device 80 may further include a transmission module for transmitting a random ciphertext to the user's payment device, where the random ciphertext is used to determine the payment information.

[0190] In some embodiments of the present application, the payment device 80 in the embodiment of the present application may further include a transmission module for sending a command application protocol data unit APDU instruction to the user payment device, the command APDU instruction being used to instruct the user payment device to transmit payment information via a response APDU instruction corresponding to the command APDU instruction;

[0191] The acquisition module 801 may also be used to receive payment information transmitted by the user's payment device via a response APDU instruction corresponding to the command APDU instruction.

[0192] In some embodiments of the present application, the acquisition module 801 may also be used to, when the user identity information includes an identity authentication private key, acquire a first dynamic key factor corresponding to the user's payment device according to the payment information;

[0193] In the embodiment of the present application, the payment device 80 may further include a determination module, which is used to determine the second session key according to the random number and the first dynamic key factor;

[0194] In the embodiment of the present application, the payment device 80 may further include a decryption module for decrypting the payment information using the second session key to obtain the second signature payment card encrypted data;

[0195] In the embodiment of the present application, the payment device 80 may further include a signature verification module, which is used to verify the signature of the second signature payment card encrypted data by using the identity verification public key corresponding to the identity verification private key to obtain a signature verification result;

[0196] The verification module 802 is used to verify the user identity information if the signature verification result indicates that the second signature payment card encrypted data has been verified.

[0197] In this way, the identity authentication process such as entering the payment password can be transferred from manually entering the payment password on the user device POS to the consumer's user payment device, by first entering the payment card information and user identity information in the user payment device in advance and then bringing it close to the user device POS, or by first bringing the user payment device close to the user device POS and then entering the payment card information and user identity information in the user payment device, thereby avoiding user information tampering, effectively preventing user information leakage and device counterfeiting, and improving payment security.

[0198] Based on the same inventive concept, the present application also provides a computer device. Fig. 9 Provide detailed explanation.

[0199] Fig. 9 It is a schematic diagram of the structure of a computer device provided by an embodiment of the present application.

[0200] like Fig. 9 As shown, the computer device may include at least one of the following involved in the embodiments of the present application: a user payment device, a user device POS. The computer device may include a processor 901 and a memory 902 storing computer program instructions.

[0201] Specifically, the processor 901 may include a central processing unit (CPU), or an application specific integrated circuit (Application Specific Integrated Circuit (ASTC), or may be configured to implement one or more integrated circuits of the embodiments of the present application.

[0202] The memory 902 may include a large capacity memory for data or instructions. By way of example and not limitation, the memory 902 may include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive or a combination of two or more of these. In appropriate cases, the memory 902 may include a removable or non-removable (or fixed) medium. In appropriate cases, the memory 902 may be inside or outside the integrated gateway disaster recovery device. In a specific embodiment, the memory 902 is a non-volatile solid-state memory. In a specific embodiment, the memory 902 includes a solid-state storage (ROM). In appropriate cases, the ROM may be a mask-programmed ROM, a programmable ROM (PROM), an erasable PROM (EPROM), an electrically erasable PROM (EEPROM), an electrically rewritable ROM (EAROM) or a flash memory or a combination of two or more of these.

[0203] The processor 901 implements any one of the payment methods in the above embodiments by reading and executing the computer program instructions stored in the memory 902 .

[0204] In one example, the computer device may further include a communication interface 903 and a bus 910. Fig. 9 As shown, the processor 901, the memory 902, and the communication interface 903 are connected via a bus 910 and communicate with each other.

[0205] The communication interface 903 is mainly used to implement communication between various modules, devices, units and / or equipment in the embodiments of the present application.

[0206] Bus 910 includes hardware, software or both, and the parts of flow control device are coupled to each other.For example, but not limitation, bus may include accelerated graphics port (AGP) or other graphics bus, enhanced industry standard system (ETSA) bus, front side bus (FSB), hypertransport (HT) interconnection, industry standard system (TSA) bus, infinite bandwidth interconnection, low pin count (LPC) bus, memory bus, micro channel system (MCA) bus, peripheral component interconnection (PCT) bus, PCT-Express (PCT-X) bus, serial advanced technology attachment (SATA) bus, video electronics standard association local (VLB) bus or other suitable bus or two or more of these combinations. In appropriate cases, bus 910 may include one or more buses. Although the present application embodiment describes and shows a specific bus, the application considers any suitable bus or interconnection.

[0207] The computer device can execute the payment method in the embodiment of the present application, thereby realizing the combination Figures 2 to 9 Payment methods and devices are described.

[0208] In addition, in combination with the payment method in the above embodiment, the embodiment of the present application can provide a computer-readable storage medium for implementation. The computer-readable storage medium stores computer program instructions; when the computer program instructions are executed by a processor, any one of the payment methods in the above embodiment is implemented.

[0209] It should be clear that the present application is not limited to the specific configuration and processing described above and shown in the figures. For the sake of simplicity, a detailed description of the known method is omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present application is not limited to the specific steps described and shown, and those skilled in the art can make various changes, modifications and additions, or change the order between the steps after understanding the spirit of the present application.

[0210] The functional blocks shown in the above block diagram can be implemented as hardware, software, firmware or a combination thereof. When implemented in hardware, it can be, for example, an electronic circuit, an application specific integrated circuit (ASIC), appropriate firmware, a plug-in, a function card, etc. When implemented in software, the elements of the present application are programs or code segments that are used to perform the required tasks. The program or code segment can be stored in a machine-readable medium, or transmitted on a transmission medium or a communication link by a data signal carried in a carrier wave. "Machine-readable medium" can include any medium capable of storing or transmitting information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, ROM, flash memory, erasable ROM (EROM), floppy disks, CD-ROMs, optical disks, hard disks, optical fiber media, radio frequency (RF) links, etc. The code segment can be downloaded via a computer network such as the Internet, an intranet, etc.

[0211] It should also be noted that the exemplary embodiments mentioned in this application describe some methods or systems based on a series of steps or devices. However, this application is not limited to the order of the above steps, that is, the steps can be performed in the order mentioned in the embodiment, or in a different order from the embodiment, or several steps can be performed simultaneously.

[0212] The above are only specific implementation methods of the present application. Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working processes of the systems, modules and units described above can refer to the corresponding processes in the aforementioned method embodiments, and will not be repeated here. It should be understood that the protection scope of the present application is not limited to this. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in this application, and these modifications or replacements should be included in the protection scope of this application.

Claims

1. A payment method, applied to a user payment device, comprising: Get transaction orders; Determine payment information according to the connection status between the user payment device and the user device POS, wherein the payment information includes payment card information and user identity information used to pay the transaction order; The payment information is transmitted to the user device POS, where the payment information is used by the user device POS to verify the user identity information, and when the verification is successful, the transaction order is settled using the payment card information.

2. The method according to claim 1, wherein: The connection state includes a first connection state for indicating that the user payment device is connected to the user device POS; and the payment information is determined according to the connection state between the user payment device and the user device POS, including: According to the first connection state, perform key negotiation with the user equipment POS to determine a first session key; When the payment user corresponding to the user payment device passes the identity authentication, obtaining the user identity information in the user payment device; And, in the case of obtaining the payment password of the payment card input by the payment user, encrypting the payment password to obtain the payment card information; The payment information is determined according to the first session key, the identity authentication private key and the payment card information.

3. The method according to claim 2, wherein: The user identity information includes an identity authentication private key; and determining the payment information according to the first session key, the identity authentication private key and the payment card information includes: The payment card information is signed by the identity verification private key to obtain first signed payment card encrypted data; The first signature payment card encrypted data is encrypted using the first session key to obtain the payment information.

4. The method according to any one of claims 1 to 3, wherein: The transmitting the payment information to the user equipment POS includes: The payment information is transmitted to the user device POS via near field communication or a distributed device communication function of an operating system.

5. The method according to claim 1, wherein: The connection state includes a second connection state for indicating that the user payment device is not connected to the user device POS; and the payment information is determined according to the connection state between the user payment device and the user device POS, including: According to the second connection state, displaying prompt information for identity authentication; When the payment user corresponding to the user payment device passes the identity authentication, obtaining the user identity information in the user payment device; and when the payment password of the payment card input by the payment user is obtained, encrypting the payment password to obtain the payment card information; The payment information is signed using the user identity information to obtain first signed payment card encrypted data; Perform key negotiation with the user equipment POS to determine a first session key; The first signature payment card encrypted data is encrypted using the first session key to obtain the payment information.

6. The method according to claim 5, wherein: Before transmitting the payment information to the user device POS, the method further includes: Receiving a command application protocol data unit APDU instruction sent by the user equipment POS; The transmitting the payment information to the user equipment POS includes: According to the command APDU instruction, the payment information is transmitted to the user equipment POS through a response APDU instruction corresponding to the command APDU instruction.

7. The method according to claim 2 or 5, wherein: The user payment device comprises a security unit, the security unit being used to store a first dynamic key factor used by the user payment device; The performing key negotiation with the user equipment POS to determine the first session key includes: Obtain a random number provided by the user device POS; The first session key is determined according to the random number and a first dynamic key factor of the user payment device.

8. The method according to claim 7, wherein: The security unit is further used to store a secret key negotiated with the user equipment POS; before obtaining the random number provided by the user equipment POS, the method further includes: Receiving a random ciphertext transmitted from the user device POS; The random ciphertext is decrypted using the secret key in the security unit to obtain the random number.

9. The method according to claim 2 or 5, wherein: The user payment device stores reference biometric data of the paying user, wherein the reference biometric data includes data of at least one of the following biometric features: facial features, iris features, fingerprint features, and voiceprint features; The method further comprises: Display biometric collection prompt information; Collecting biometric data of the paying user through a collection strategy corresponding to the biometric; In the case where the biometric feature matches the reference biometric feature data, it is determined that the payment user has passed the identity authentication.

10. The method according to claim 2 or 5, wherein: The method further comprises: When it is determined that the payment user has passed the identity authentication, a prompt interface is displayed; The prompt interface includes first prompt information and second prompt information, the first prompt information is used to prompt the paying user to select a payment card for paying the transaction order, and the second prompt information is used to prompt the paying user to enter a payment password of the payment card.

11. A payment method, applied to a user device POS, comprising: In the case of initiating a transaction order, obtaining payment information transmitted by a user payment device, wherein the payment information includes payment card information and user identity information used to pay the transaction order, and the payment information is determined by the connection status between the user payment device and the user device POS; Verifying the user identity information according to the payment information; When the user identity information is verified, the transaction order is settled using the payment card information.

12. The method according to claim 11, wherein: The user equipment POS includes a security unit, and the security unit is used to store a second dynamic key factor of the user equipment POS. The method also includes: In case of initiating a trading order, determine the random number; Encrypting the random number by using the second dynamic key factor to obtain a random ciphertext; The random ciphertext is transmitted to the user payment device, where the random ciphertext is used to determine the payment information.

13. The method according to claim 11, wherein: Before obtaining the payment information transmitted by the user's payment device, the method further includes: Sending a command application protocol data unit (APDU) instruction to the user payment device, where the command APDU instruction is used to instruct the user payment device to transmit the payment information through a response APDU instruction corresponding to the command APDU instruction; The obtaining of payment information transmitted by the user's payment device includes: Receive the payment information transmitted by the user payment device through a response APDU instruction corresponding to the command APDU instruction.

14. The method according to claim 12, wherein: The user identity information includes an identity authentication private key; and verifying the user identity information according to the payment information includes: Acquire, according to the payment information, a first dynamic key factor corresponding to the user payment device; Determine a second session key according to the random number and the first dynamic key factor; decrypting the payment information using the second session key to obtain second signed payment card encrypted data; Verifying the encrypted data of the second signature payment card by using the identity verification public key corresponding to the identity verification private key to obtain a signature verification result; When the signature verification result indicates that the second signature payment card encrypted data has been verified successfully, the user identity information is verified successfully.

15. A payment module, applied to a user payment device, comprising: Acquisition module, used to obtain transaction orders; A determination module, configured to determine payment information according to a connection status between the user payment device and the user device POS, wherein the payment information includes payment card information and user identity information used to pay for the transaction order; The transmission module is used to transmit the payment information to the user equipment POS, and the payment information is used by the user equipment POS to verify the user identity information, and when the verification is passed, the transaction order is settled through the payment card information.

16. A payment module, applied to a user device POS, comprising: An acquisition module, used to acquire payment information transmitted by a user payment device when a transaction order is initiated, wherein the payment information includes payment card information and user identity information used to pay the transaction order, and the payment information is determined by the connection status between the user payment device and the user device POS; A verification module, used to verify the user identity information according to the payment information; The settlement module is used to settle the transaction order through the payment card information when the user identity information is verified.

17. A computer device, comprising at least one of the following: a user payment device, a user payment device, and the computer device comprising: a processor and a memory storing computer program instructions; When the processor executes the computer program instructions, the processor implements the steps of the payment method according to any one of claims 1 to 10 or the steps of the payment method according to any one of claims 11 to 14.

18. A storage medium having computer program instructions stored thereon, wherein the computer program instructions, when executed by a processor, implement the steps of the payment method according to any one of claims 1 to 10 or implement the steps of the payment method according to any one of claims 11 to 14.

19. A computer program product, characterized in that The program product is stored in a storage medium, and the program product is executed by at least one processor to implement the steps of the payment method according to any one of claims 1 to 10 or to implement the steps of the payment method according to any one of claims 11 to 14.

Images