Financial transaction method and device based on smart card, equipment and medium

Abstract

The invention relates to the technical field of finance, and relates to a financial transaction method and device based on an intelligent card, computer equipment and a storage medium, and the method comprises the steps: carrying out the function screening of the intelligent card through an intelligent terminal, and obtaining response function data; the intelligent terminal performs off-line authentication on the intelligent card according to the response function data to obtain a dynamic application ciphertext; the intelligent terminal obtains the identity of the intelligent card according to the dynamic application ciphertext to obtain response identity information; the intelligent terminal performs behavior analysis on the intelligent card according to the response identity information to obtain a transaction behavior risk; and the intelligent terminal performs authorized transaction on the intelligent card according to the transaction behavior risk to obtain a transaction result. The efficiency of financial transactions can be improved.

Description

Technical Field

[0001] The present invention relates to the field of financial technology, and in particular to a smart card-based financial transaction method, device, equipment and medium. Background Art

[0002] A smart card is a portable card embedded with a microprocessor or memory chip. It usually looks similar to an ordinary credit card, but has more powerful functions and security. Smart cards have built-in security chips and encryption algorithms that can protect transaction data and prevent theft or forgery. Therefore, they are widely used in the field of financial transactions.

[0003] Most of the existing smart card transaction methods are based on simple data matching, that is, extracting identity information from the smart card and using the smart terminal to connect to the Internet for verification and transaction. In actual application, the transaction method based on simple data matching is less efficient in an unstable network or offline environment, and there is a situation where the identity information package name is artificially modified, resulting in software mismatching. Moreover, after the iterative version, the package name matching program needs to be modified each time, which may lead to low efficiency in microcontroller program upgrade verification, and thus low financial transaction efficiency. Summary of the invention

[0004] The present invention provides an artificial intelligence-based smart card financial transaction method, device, computer equipment and medium to solve the technical problems that the existing smart card financial transaction method cannot be used in an offline network environment, the transaction matching efficiency is low, and the program version matching efficiency is low, resulting in low financial transaction efficiency.

[0005] In a first aspect, a smart card-based financial transaction method is provided, comprising: The smart terminal performs function screening on the smart card and obtains response function data; The smart terminal performs offline authentication on the smart card according to the response function data to obtain a dynamic application ciphertext; The smart terminal acquires the identity of the smart card according to the dynamic application ciphertext to obtain response identity information; The smart terminal performs a behavior analysis on the smart card according to the response identity information to obtain a transaction behavior risk; The smart terminal authorizes the smart card for transaction according to the transaction behavior risk to obtain a transaction result.

[0006] In a second aspect, a smart card-based financial transaction device is provided, comprising a smart card and a smart terminal: The smart card is configured to: send response function data to the smart terminal; send response identity information to the smart terminal; perform behavior analysis to obtain transaction behavior risks; perform authorized transactions to obtain transaction results; The smart terminal is configured as follows: performing function screening on the smart card to obtain response data; performing offline authentication on the smart card according to the response function data to obtain dynamic application ciphertext; performing identity acquisition on the smart card according to the dynamic application ciphertext to obtain response identity information; performing behavior analysis on the smart card according to the response identity information to obtain transaction behavior risk; and authorizing the transaction on the smart card according to the transaction behavior risk to obtain a transaction result.

[0007] In a third aspect, a computer device is provided, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the above-mentioned smart card-based financial transaction method when executing the computer program.

[0008] In a fourth aspect, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the above-mentioned smart card-based financial transaction method are implemented.

[0009] In the scheme implemented by the above-mentioned smart card-based financial transaction method, device, computer equipment and storage medium, the smart card can be functionally screened through the smart terminal to obtain response function data, and the application data required for the financial transaction can be extracted from the smart card, thereby improving the efficiency of the financial transaction. By performing offline authentication on the smart card according to the response function data, the random number and dynamic key can be combined to ensure that the ciphertext is unique and cannot be forged, thereby enhancing the transaction security. Through ciphertext verification, it can be ensured that the transaction is indeed initiated by a legitimate card to prevent card forgery, and it can support offline environment, thereby improving transaction efficiency. By obtaining the identity of the smart card according to the dynamic application ciphertext, the identity of the cardholder of the smart card can be determined, thereby verifying the identity of the cardholder and the legitimacy of the transaction, and improving the security of the transaction.

[0010] By analyzing the behavior of the smart card according to the response identity information, the transaction behavior risk is obtained, and the risk detection of the transaction can be realized according to the security of the smart card and the smart terminal, thereby improving the security and efficiency of financial transactions. By authorizing the transaction according to the transaction behavior risk, the transaction result is obtained, and the authenticity and integrity of the transaction can be ensured, thereby improving the transaction security and transaction efficiency. Therefore, the financial transaction method, device, computer equipment and storage medium based on the smart card proposed in the present invention can solve the problem of low efficiency in product testing. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments of the present invention will be briefly introduced below. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative labor.

[0012] Figure 1 is a flow chart of a smart card-based financial transaction method in one embodiment of the present invention; Figure 2 yes Figure 1 A schematic flow chart of a specific implementation of step S2; Figure 3 yes Figure 1 A schematic flow chart of a specific implementation of step S3; Figure 4 is a schematic diagram of a structure of a smart card-based financial transaction device in one embodiment of the present invention; Figure 5 is a schematic diagram of a structure of a computer device in one embodiment of the present invention; DETAILED DESCRIPTION The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0013] See also Figure 1 As shown, Figure 1 A flowchart of a smart card-based financial transaction method provided by an embodiment of the present invention includes the following steps: S1. The smart terminal performs function screening on the smart card and obtains response function data.

[0014] In detail, the smart terminal refers to a device terminal used to complete payment, identity authentication, data processing and other operations and is responsible for interacting with a smart card. The smart terminal can be a point of sale (POS) terminal, an automated teller machine (ATM) or a mobile payment terminal.

[0015] Specifically, the smart card is a portable card embedded with a microprocessor or memory chip. It usually looks similar to an ordinary credit card, but has more powerful functions and security. The smart card has a built-in security chip and encryption algorithm to protect transaction data from being stolen or forged, and supports multiple authentication mechanisms, such as dynamic key generation, offline authentication (DDA, CDA), etc., to ensure the legitimacy of transactions.

[0016] In the embodiment of the present invention, the smart terminal performs function screening on the smart card to obtain response function data, including: The smart terminal sends an application display command to the smart card; The smart card generates an application list according to the application display command; The smart terminal performs application screening on the application list to obtain a target application name; The smart terminal generates an application read command according to the target application name; The smart terminal reads data from the smart card according to the application read command to obtain response function data.

[0017] In detail, the application display command refers to a command for controlling the smart card to display a list of all functional applications stored inside the smart card, wherein the application list stores the names of all functional applications in the smart card.

[0018] Specifically, the functional application refers to the corresponding application name of the function that the smart card can realize, such as an electronic wallet application that supports small payments and fast offline transactions, a debit card application that supports core bank card functions such as balance inquiry, transfer, withdrawal and online payment, and an identity authentication application that stores cardholder identity information and supports identity authentication through PIN code or biometrics.

[0019] In detail, the application screening can be performed by using a keyword matching method or a cosine similarity algorithm matching method, that is, the application names in the application list that are close to the keywords of the functions that the smart terminal wants to implement are screened out as target application names.

[0020] Specifically, an application read command, such as a SELECT command or a READ RECORD command, may be generated using an application protocol data unit (APDU for short) command format.

[0021] In detail, the data reading refers to reading the data related to the target application name stored in the smart card as the response function data, such as the usage record of the target application name and the previously recorded application cache data.

[0022] In the embodiment of the present invention, the smart terminal performs function screening on the smart card to obtain response function data, and can extract application data required for financial transactions from the smart card, thereby improving the efficiency of financial transactions.

[0023] S2. The smart terminal performs offline authentication on the smart card according to the response function data to obtain a dynamic application ciphertext.

[0024] In detail, the offline authentication is a security mechanism in smart card financial transactions, which is used to verify whether the smart card is a real and non-forged card without an Internet connection. The offline authentication mainly ensures the authenticity of the smart card through the digital signature of the smart card and the verification logic of the terminal to prevent the use of forged smart cards.

[0025] In the embodiment of the present invention, referring to Figure 2 As shown, the smart terminal performs offline authentication on the smart card according to the response function data to obtain a dynamic application ciphertext, including: S21, the intelligent terminal initializes the transaction application according to the response function data; S22, the intelligent terminal extracts transaction parameter items from the transaction application; S23, the intelligent terminal generates a dynamic random ciphertext according to the transaction parameter item; S24. The smart card generates a dynamic application ciphertext according to the dynamic random ciphertext, and sends the dynamic application ciphertext to the smart terminal.

[0026] In detail, the transaction application refers to the application corresponding to the target application name for subsequent financial transactions, and initializing the transaction application according to the response data refers to extracting application functions from the response function data, and selecting corresponding application templates from a preset application template library according to the application functions to form a transaction application.

[0027] Specifically, the application template library includes a plurality of component templates that can realize various application functions, such as limiting the transaction amount, whether to perform personal identification number (PIN) verification, and setting the maximum number of attempts after a transaction fails.

[0028] In detail, the transaction parameter item refers to the type of transaction data required for financial transactions, such as transaction amount, transaction mode, and currency type.

[0029] Specifically, the intelligent terminal generates a dynamic random ciphertext according to the transaction parameter item, including: The smart terminal initializes a dynamic random check code; The intelligent terminal generates a dynamic random ciphertext according to the transaction parameter item and the dynamic random check code.

[0030] In detail, a dynamic random check code can be initialized using a random number algorithm or a pseudo-random number algorithm. The dynamic random check code is a random number of a check code. Generating a dynamic random ciphertext based on the transaction parameter item and the dynamic random check code means splicing the dynamic random check code to the transaction parameter item to obtain the dynamic random ciphertext.

[0031] Specifically, the smart card generates a dynamic application ciphertext according to the dynamic random ciphertext, including: The smart card extracts a dynamic random check code and a transaction parameter item from the dynamic random ciphertext; The smart card performs parameter matching on the transaction parameter items to obtain smart card transaction parameters; The smart card generates application dynamic data according to the smart card transaction parameters and the dynamic random check code; The smart card performs private key encryption on the application dynamic data to obtain dynamic application ciphertext.

[0032] In detail, the parameter matching refers to matching the application transaction data corresponding to the transaction parameter item from the storage data of the smart card as the smart card transaction data, and the application dynamic data is spliced ​​by the smart card transaction parameter and the dynamic random check code.

[0033] Specifically, the smart card performs private key encryption on the application dynamic data to obtain dynamic application ciphertext, including: The smart card extracts a built-in private key; The smart card generates round keys for the built-in private key to obtain a private key round key set; The smart card performs plaintext grouping of the application dynamic data according to the private key round key set to obtain left-half dynamic data and right-half dynamic data; The smart card selects the private round keys in the private round key set one by one as the target private round key, and uses the target private round key to perform round encryption on the right half dynamic data to obtain the target encrypted dynamic data; The smart card performs an XOR operation on the left half dynamic data using the target encrypted dynamic data to obtain target XOR dynamic data; The smart card updates the left-half dynamic data using the right-half dynamic data, and updates the right-half dynamic data using the target XOR dynamic data, and returns to the step of the smart card selecting the private round keys in the private round key set one by one as the target private round key; Until the target private key round key is the last private key round key in the private key round key set, the smart card splices the left half dynamic data and the right half dynamic data corresponding to the target private key round key into a dynamic application ciphertext.

[0034] In detail, the built-in private key is a private key built into the smart card, and the round key generation refers to iterative circular left shift, XOR operation and AND operation on the built-in private key, so as to obtain a private key round key set consisting of multiple private key round keys, wherein the total number of the private key round key set can be 32, and the round encryption includes the steps of circular bitwise left shift, bitwise operation and bitwise XOR operation.

[0035] In an embodiment of the present invention, by performing offline authentication on the smart card according to the response function data, it is possible to combine random numbers and dynamic keys to ensure that the ciphertext is unique and cannot be forged, thereby enhancing transaction security. By verifying the ciphertext, it is ensured that the transaction is indeed initiated by a legitimate card, preventing card forgery, and supporting offline environments, thereby improving transaction efficiency.

[0036] S3. The smart terminal acquires the identity of the smart card according to the dynamic application ciphertext to obtain response identity information.

[0037] In detail, the response identity information refers to the personal identification number (PIN) information in the smart card.

[0038] In the embodiment of the present invention, referring to Figure 3 As shown, the smart terminal obtains the identity of the smart card according to the dynamic application ciphertext to obtain response identity information, including: S31, the intelligent terminal decrypts the dynamic application ciphertext to obtain a decrypted application ciphertext; S32, the intelligent terminal dynamically verifies the decrypted application ciphertext according to the dynamic random verification code to obtain a dynamic verification result; S33, the smart terminal extracts smart card transaction parameters from the decrypted application ciphertext according to the dynamic verification result; S34, the smart terminal sends an identity acquisition command to the smart card according to the dynamic verification result; S35. The smart card matches the response identity information according to the identity acquisition command, and sends the response identity information to the smart terminal.

[0039] In detail, the ciphertext decryption refers to decrypting the dynamic application ciphertext using the decryption key of the smart terminal. The decryption algorithm of the ciphertext decryption is opposite to the algorithm of the private key encryption, that is, the smart terminal splits the dynamic application ciphertext into left-half dynamic data and right-half dynamic data, and the smart terminal selects the private key round keys in the private key round key set one by one as the target private key round key, and the smart terminal uses the target private key round key to perform round decryption on the left-half dynamic data to obtain the target decrypted dynamic data; the smart terminal uses the target decrypted dynamic data to decrypt the left-half dynamic data. The right-half dynamic data is XORed to obtain secondary XOR dynamic data; the smart terminal updates the right-half dynamic data using the left-half dynamic data, and updates the left-half dynamic data using the secondary XOR dynamic data, and returns to the step of the smart terminal selecting the private round keys in the private round key set one by one as the target private round key; until the target private round key is the last private round key in the private round key set, the smart terminal splices the left-half dynamic data and the right-half dynamic data corresponding to the target private round key into a dynamic application ciphertext.

[0040] In detail, the dynamic verification refers to determining whether the decrypted application ciphertext contains the dynamic random verification code. If so, the dynamic verification result is a successful verification. If not, the dynamic verification result is a failed verification, and the financial transaction is terminated.

[0041] Specifically, the smart terminal extracts the smart card transaction parameters from the decrypted application ciphertext according to the dynamic verification result, which means that when the dynamic verification result is successful, the data in the decrypted application ciphertext except the dynamic random verification code is used as the smart card transaction parameters.

[0042] In detail, the smart terminal sends an identity acquisition command to the smart card according to the dynamic verification result, which means that the smart terminal sends an identity acquisition command to the smart card when the dynamic verification result is successful. The identity acquisition command is a command for obtaining a PIN code, which can be a GET DATA command or a VERIFY command.

[0043] In the embodiment of the present invention, by acquiring the identity of the smart card according to the dynamic application ciphertext, the identity of the holder of the smart card can be determined, thereby verifying the identity of the holder and the legitimacy of the transaction, thereby improving the security of the transaction.

[0044] S4. The smart terminal performs a behavior analysis on the smart card according to the response identity information to obtain a transaction behavior risk.

[0045] In detail, the terminal behavior risk refers to the risk level of the smart terminal when performing this financial transaction.

[0046] In the embodiment of the present invention, the smart terminal performs behavior analysis on the smart card according to the response identity information to obtain transaction behavior risk, including: The intelligent terminal performs identity verification on the response identity information to obtain an identity verification result; The intelligent terminal performs a hardware integrity check to obtain a hardware check result; The smart terminal generates a terminal behavior risk according to the identity verification result and the hardware verification result; The smart card reads the transaction counter to obtain the transaction number; The smart card generates a card behavior risk according to the transaction times and a preset transaction times limit; The smart terminal generates a transaction behavior risk according to the card behavior risk and the terminal behavior risk.

[0047] In detail, the identity verification refers to determining whether the response identity information matches the identity information in the database of the smart terminal. If so, the identity verification result is a successful verification; if not, the identity verification result is a failed verification.

[0048] Specifically, the hardware integrity check refers to obtaining a hardware list and determining whether the hardware list of the smart terminal is complete. If it is complete, the hardware check result is a successful check; if it is incomplete, the hardware check result is a failed check.

[0049] In detail, the intelligent terminal generates the terminal behavior risk according to the identity verification result and the hardware verification result, which means that when the identity verification result and the hardware verification result are both verified successfully, the terminal behavior risk is risk-free, otherwise, it is risky.

[0050] Specifically, the GET DATA command can be used to read the transaction counter, the transaction number refers to the transaction data recorded in the transaction counter (ATC), and the card behavior risk generated according to the transaction number and the preset transaction number limit means that when the transaction number is less than or equal to the transaction number limit, the card behavior risk is risk-free, and when the transaction number is greater than the transaction number limit, the card behavior risk is risky.

[0051] In detail, generating the transaction behavior risk according to the card behavior risk and the terminal behavior risk means that when both the card behavior risk and the terminal behavior risk are risk-free, the transaction behavior risk is risk-free, otherwise, the transaction behavior risk is risky.

[0052] In the embodiment of the present invention, by performing behavior analysis on the smart card according to the response identity information, the transaction behavior risk is obtained, and the risk detection of the transaction can be implemented according to the security of the smart card and the smart terminal, thereby improving the security and efficiency of financial transactions.

[0053] S5. The smart terminal authorizes the smart card to perform a transaction according to the transaction behavior risk and obtains a transaction result.

[0054] In detail, the transaction result refers to the status of the transaction and the final output content, such as transaction identification information, transaction timestamp and other information.

[0055] In the embodiment of the present invention, the smart terminal authorizes the smart card to conduct a transaction according to the transaction behavior risk, and obtains a transaction result, including: Determine whether the transaction risk is risk-free; If not, the financial transaction is terminated, and the transaction result is a transaction failure; If yes, the smart terminal matches the authorization response ciphertext and sends the authorization response ciphertext to the smart card; The smart card decrypts the authorization corresponding ciphertext to obtain authorization response data; The smart card determines whether the authorization response data matches the preset authorization data; If not, the financial transaction is terminated, and the transaction result is a transaction failure; If yes, the smart terminal generates an online transaction application according to the transaction application and the smart card transaction parameters; The smart terminal performs an online transaction on the smart card according to the online transaction application to obtain a transaction result.

[0056] In detail, the Authorization Response Cryptogram (ARPC) is a dynamic ciphertext generated by the issuing bank and is used to send to the smart terminal to respond to and verify the transaction request sent by the transaction terminal. The authorization data refers to the authorization response ciphertext stored in the smart card.

[0057] Specifically, the online transaction refers to transmitting transaction data with the online transaction application in the smart terminal according to the transaction script in the transaction card, thereby generating a transaction result.

[0058] In the embodiment of the present invention, by authorizing the smart card for a transaction according to the transaction behavior risk and obtaining a transaction result, the authenticity and integrity of the transaction can be ensured, and the transaction security and efficiency can be improved.

[0059] It can be seen that in the above scheme, the smart card is functionally screened through the smart terminal to obtain response function data, and the application data required for financial transactions can be extracted from the smart card, thereby improving the efficiency of financial transactions. By performing offline authentication on the smart card according to the response function data, it is possible to combine random numbers and dynamic keys to ensure that the ciphertext is unique and cannot be forged, thereby enhancing transaction security. Through ciphertext verification, it is ensured that the transaction is indeed initiated by a legitimate card to prevent card forgery, and it can support offline environments, thereby improving transaction efficiency. By acquiring the identity of the smart card according to the dynamic application ciphertext, the identity of the cardholder of the smart card can be determined, thereby verifying the identity of the cardholder and the legitimacy of the transaction, thereby improving the security of the transaction.

[0060] By analyzing the behavior of the smart card according to the response identity information, the transaction behavior risk is obtained, and the risk detection of the transaction can be realized according to the security of the smart card and the smart terminal, thereby improving the security and efficiency of financial transactions. By authorizing the transaction according to the transaction behavior risk, the transaction result is obtained, and the authenticity and integrity of the transaction can be ensured, thereby improving the transaction security and transaction efficiency. Therefore, the financial transaction method based on the smart card proposed in the present invention can solve the problem of low efficiency in product testing.

[0061] It should be understood that the order of execution of the steps in the above embodiment does not necessarily mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiment of the present invention.

[0062] In one embodiment, a smart card-based financial transaction device is provided, and the smart card-based financial transaction device corresponds one-to-one with the smart card-based financial transaction method in the above embodiment. Figure 4 As shown, the smart card-based financial transaction device includes a smart card 101 and a smart terminal 102: The smart card 101 is configured to: send response function data to the smart terminal; send response identity information to the smart terminal; perform behavior analysis to obtain transaction behavior risks; perform authorized transactions to obtain transaction results; The smart terminal 102 is configured to: perform function screening on the smart card to obtain response data; perform offline authentication on the smart card based on the response function data to obtain dynamic application ciphertext; obtain the identity of the smart card based on the dynamic application ciphertext to obtain response identity information; perform behavior analysis on the smart card based on the response identity information to obtain transaction behavior risk; and authorize the transaction on the smart card based on the transaction behavior risk to obtain a transaction result.

[0063] In one embodiment, when the smart terminal 102 performs function screening on the smart card and obtains the response function data, it is used to: Sending an application display command to a smart card, and obtaining an application list generated by the smart card in response to the application display command; Perform application screening on the application list to obtain a target application name; Generate an application read command according to the target application name; Data is read from the smart card according to the application read command to obtain response function data.

[0064] In one embodiment, when the smart terminal 102 performs offline authentication on the smart card according to the response function data to obtain the dynamic application ciphertext, it is used to: Initialize the transaction application according to the response function data; Extracting transaction parameter items from the transaction application; Generate a dynamic random ciphertext according to the transaction parameter item; The dynamic random ciphertext is sent to the smart card, and the dynamic application ciphertext returned by the smart card according to the dynamic random ciphertext is obtained.

[0065] For the specific definition of the smart card-based financial transaction device, please refer to the definition of the smart card-based financial transaction method above, which will not be repeated here. Each module in the above-mentioned smart card-based financial transaction device can be implemented in whole or in part by software, hardware and their combination. The above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

[0066] In one embodiment, a computer device is provided, wherein the internal structure diagram of the computer device can be as follows: Figure 5 As shown. The computer device includes a processor, a memory, a network interface, a display screen and an input device connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The network interface of the computer device is used to communicate with an external server through a network connection. When the computer program is executed by the processor, the functions or steps of a financial transaction method based on a smart card are implemented.

[0067] In one embodiment, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the following steps are implemented: The smart terminal performs function screening on the smart card and obtains response function data; The smart terminal performs offline authentication on the smart card according to the response function data to obtain a dynamic application ciphertext; The smart terminal acquires the identity of the smart card according to the dynamic application ciphertext to obtain response identity information; The smart terminal performs a behavior analysis on the smart card according to the response identity information to obtain a transaction behavior risk; The smart terminal authorizes the smart card for transaction according to the transaction behavior risk to obtain a transaction result.

[0068] In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented: The smart terminal performs function screening on the smart card and obtains response function data; The smart terminal performs offline authentication on the smart card according to the response function data to obtain a dynamic application ciphertext; The smart terminal acquires the identity of the smart card according to the dynamic application ciphertext to obtain response identity information; The smart terminal performs a behavior analysis on the smart card according to the response identity information to obtain a transaction behavior risk; The smart terminal authorizes the smart card for transaction according to the transaction behavior risk to obtain a transaction result.

[0069] It should be noted that the above functions or steps that can be implemented by the computer-readable storage medium or computer device can refer to the relevant description in the aforementioned method embodiment. In order to avoid repetition, they will not be described one by one here.

[0070] Those of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be implemented by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application may include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

[0071] Those skilled in the art can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example. In actual applications, the above-mentioned functions can be distributed and completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above.

[0072] The above-described embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit them; although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some of the technical features therein by equivalents; and these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the various embodiments of the present invention, and should be included in the protection scope of the present invention. It should be noted that if software tools or components other than those of the company appear in the embodiments of this application, they are only used for example introduction and do not represent actual use.

Claims

1. A financial transaction method based on a smart card, characterized in that: The method comprises: The smart terminal performs function screening on the smart card and obtains response function data; The smart terminal performs offline authentication on the smart card according to the response function data to obtain a dynamic application ciphertext; The smart terminal acquires the identity of the smart card according to the dynamic application ciphertext to obtain response identity information; The smart terminal performs a behavior analysis on the smart card according to the response identity information to obtain a transaction behavior risk; The smart terminal authorizes the smart card for transaction according to the transaction behavior risk to obtain a transaction result.

2. The smart card-based financial transaction method according to claim 1, characterized in that: The smart terminal performs function screening on the smart card to obtain response function data, including: The smart terminal sends an application display command to the smart card; The smart card generates an application list according to the application display command; The smart terminal performs application screening on the application list to obtain a target application name; The smart terminal generates an application read command according to the target application name; The smart terminal reads data from the smart card according to the application read command to obtain response function data.

3. The smart card-based financial transaction method according to claim 1, characterized in that: The smart terminal performs offline authentication on the smart card according to the response function data to obtain a dynamic application ciphertext, including: The intelligent terminal initializes the transaction application according to the response function data; The intelligent terminal extracts transaction parameter items from the transaction application; The intelligent terminal generates a dynamic random ciphertext according to the transaction parameter item; The smart card generates a dynamic application ciphertext according to the dynamic random ciphertext, and sends the dynamic application ciphertext to the smart terminal.

4. The smart card-based financial transaction method as claimed in claim 3, characterized in that: The smart card generates a dynamic application ciphertext according to the dynamic random ciphertext, including: The smart card extracts a dynamic random check code and a transaction parameter item from the dynamic random ciphertext; The smart card performs parameter matching on the transaction parameter items to obtain smart card transaction parameters; The smart card generates application dynamic data according to the smart card transaction parameters and the dynamic random check code; The smart card performs private key encryption on the application dynamic data to obtain dynamic application ciphertext.

5. The smart card-based financial transaction method as claimed in claim 4, characterized in that: The smart terminal acquires the identity of the smart card according to the dynamic application ciphertext to obtain response identity information, including: The intelligent terminal decrypts the dynamic application ciphertext to obtain a decrypted application ciphertext; The intelligent terminal dynamically verifies the decrypted application ciphertext according to the dynamic random verification code to obtain a dynamic verification result; The smart terminal extracts smart card transaction parameters from the decrypted application ciphertext according to the dynamic verification result; The smart terminal sends an identity acquisition command to the smart card according to the dynamic verification result; The smart card matches the response identity information according to the identity acquisition command, and sends the response identity information to the smart terminal.

6. The smart card-based financial transaction method according to claim 1, characterized in that: The smart terminal performs a behavior analysis on the smart card according to the response identity information to obtain a transaction behavior risk, including: The intelligent terminal performs identity verification on the response identity information to obtain an identity verification result; The intelligent terminal performs a hardware integrity check to obtain a hardware check result; The smart terminal generates a terminal behavior risk according to the identity verification result and the hardware verification result; The smart card reads the transaction counter to obtain the transaction number; The smart card generates a card behavior risk according to the transaction times and a preset transaction times limit; The smart terminal generates a transaction behavior risk according to the card behavior risk and the terminal behavior risk.

7. The smart card-based financial transaction method according to claim 4, characterized in that: The smart terminal authorizes the smart card to conduct a transaction according to the transaction behavior risk, and obtains a transaction result, including: Determine whether the transaction risk is risk-free; If not, the financial transaction is terminated, and the transaction result is a transaction failure; If yes, the smart terminal matches the authorization response ciphertext and sends the authorization response ciphertext to the smart card; The smart card decrypts the authorization corresponding ciphertext to obtain authorization response data; The smart card determines whether the authorization response data matches the preset authorization data; If not, the financial transaction is terminated, and the transaction result is a transaction failure; If yes, the smart terminal generates an online transaction application according to the transaction application and the smart card transaction parameters; The smart terminal performs an online transaction on the smart card according to the online transaction application to obtain a transaction result.

8. A smart card-based financial transaction device, characterized in that: Including smart cards and smart terminals: The smart card is configured to: send response function data to the smart terminal; send response identity information to the smart terminal; perform behavior analysis to obtain transaction behavior risks; perform authorized transactions to obtain transaction results; The smart terminal is configured to: perform function screening on the smart card to obtain response data; The smart card is offline authenticated according to the response function data to obtain a dynamic application ciphertext; the identity of the smart card is acquired according to the dynamic application ciphertext to obtain response identity information; the behavior of the smart card is analyzed according to the response identity information to obtain transaction behavior risks; the smart card is authorized to trade according to the transaction behavior risks to obtain transaction results.

9. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the steps of the smart card-based financial transaction method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the steps of the smart card-based financial transaction method according to any one of claims 1 to 7 are implemented.

Images