Transaction processing method, communication method applied to transaction processing and security authentication equipment

Abstract

The embodiment of the invention provides a transaction processing method, a communication method applied to transaction processing and security authentication equipment, and relates to the technical field of security authentication, the method comprises the following steps: sending stored identification information to terminal equipment based on NFC connection established with the terminal equipment, so that the terminal equipment starts a target client according to the identification information; the identification information comprises starting entry information used for identifying the target client; and based on the Bluetooth connection established with the terminal device, sending authentication information to the terminal device, so that the terminal device uses the authentication information to authenticate a target transaction initiated by the target client, and displays a transaction result according to an authentication result. According to the embodiment of the invention, the starting entry information of the target client is sent to the terminal equipment through the NFC connection, so that the terminal equipment can quickly call out the target client and open the interface of the target client, thereby omitting the tedious step of manually searching the target client by a user, simplifying the transaction operation process, and shortening the transaction operation execution time.

Description

Technical Field

[0001] The present application relates to the field of security authentication technology, and in particular to a transaction processing method, a communication method applied to transaction processing, and a security authentication device. Background Art

[0002] Smartphones have become an indispensable tool in daily life, and users can perform transactions such as payment through smartphones. However, users usually have a large number of applications installed on their phones, which requires users to manually find and open specific applications, such as bank clients, payment clients, etc., when performing operations or transactions in online banking. This process is not only time-consuming, but also has a poor user experience. Users need to find the target application among many applications, which not only increases the complexity of the operation, but may also prevent users from completing transactions quickly in emergency situations. Summary of the invention

[0003] The embodiments of the present application provide a transaction processing method, a communication method applied to transaction processing, and a security authentication device to alleviate or solve one or more technical problems existing in the prior art.

[0004] In a first aspect, an embodiment of the present application provides a transaction processing method, which is applied to a terminal device, and the method includes:

[0005] Based on the NFC connection established with the security authentication device, reading the identification information stored in the security authentication device; the identification information includes the startup entry information for identifying the target client;

[0006] Starting the target client according to the identification information;

[0007] Initiate a target transaction through the target client;

[0008] Based on the Bluetooth connection established with the security authentication device, obtaining authentication information sent by the security authentication device;

[0009] The target transaction is authenticated using the authentication information, and a transaction result is displayed according to the authentication result.

[0010] In some implementations, the identification information further includes download entry information for identifying the target client; and starting the target client according to the identification information includes:

[0011] Searching for the target client among the clients installed on the terminal device according to the startup entry information;

[0012] If the target client is not installed in the terminal device, downloading the target client according to the download entry information;

[0013] Install and start the target client.

[0014] In some implementations, after starting the target client according to the identification information, the method further includes:

[0015] Sending a target request to the security authentication device to request the security authentication device to read the ciphertext data from the external smart NFC chip and forward it to the terminal device;

[0016] Receiving the ciphertext data forwarded by the security authentication device;

[0017] Obtaining account information obtained by decrypting the ciphertext data;

[0018] The account information is filled in the target client.

[0019] In some implementations, the identification information further includes account identification information for identifying a transaction account; and initiating a target transaction through the target client includes:

[0020] Receiving a trigger operation for initiating the target transaction;

[0021] In response to the trigger operation, setting transaction information of the target transaction according to the account identification information;

[0022] Initiate the target transaction to the server according to the transaction information.

[0023] In a second aspect, an embodiment of the present application provides a communication method for transaction processing, which is applied to a security authentication device, and the method includes:

[0024] Based on the NFC connection established with the terminal device, sending the stored identification information to the terminal device, so that the terminal device starts the target client according to the identification information; the identification information includes startup entry information for identifying the target client;

[0025] Based on the Bluetooth connection established with the terminal device, authentication information is sent to the terminal device, so that the terminal device uses the authentication information to authenticate the target transaction initiated by the target client, and displays the transaction result according to the authentication result.

[0026] In some embodiments, after sending the stored identification information to the terminal device based on the NFC connection established with the terminal device, the method further includes:

[0027] In response to the target request of the terminal device, enabling the NFC card reading module of the security authentication device;

[0028] Read the ciphertext data in the smart NFC chip outside the security authentication device through the NFC card reader module;

[0029] The ciphertext data is forwarded to the terminal device, so that the terminal device fills in the account information in the target client based on the ciphertext data.

[0030] In some implementations, the sending authentication information to the terminal device based on the Bluetooth connection established with the terminal device includes:

[0031] In response to determining that the NFC connection has been established, establishing the Bluetooth connection with the terminal device;

[0032] Based on the Bluetooth connection, the authentication information is sent to the terminal device.

[0033] In some implementations, the identification information further includes download entry information for identifying the target client, so that the terminal device can download the target client according to the download entry information when the target client is not installed.

[0034] In a third aspect, an embodiment of the present application provides a security authentication device, including:

[0035] An NFC module, used to establish an NFC connection with a terminal device, and send identification information stored in the NFC module to the terminal device, so that the terminal device starts a target client according to the identification information; the identification information includes startup entry information for identifying the target client;

[0036] A Bluetooth module, used to establish a Bluetooth connection with the terminal device and send authentication information to the terminal device, so that the terminal device uses the authentication information to authenticate the target transaction initiated by the target client, and displays the transaction result according to the authentication result;

[0037] A processor is connected to the Bluetooth module and is used to generate the authentication information.

[0038] In some embodiments, the security authentication device further includes at least one of the following:

[0039] A display module, connected to the processor, and used to display the display information sent by the processor;

[0040] A key module, connected to the processor, for receiving a key operation to input operation information corresponding to the key operation to the processor;

[0041] A power module and a charging interface module, wherein the power module is used to supply power to the modules in the security authentication device that require power, and the charging interface module is used to connect an external charging device to charge the power module;

[0042] An NFC card reader module in the NFC module, the NFC card reader module is used to read the ciphertext data in the smart NFC chip outside the security authentication device;

[0043] The NFC tag in the NFC module is used to store the identification information.

[0044] In a fourth aspect, an embodiment of the present application provides an electronic device, including a memory, a processor, and a computer program stored in the memory, and the processor implements any method of the embodiment of the present application when executing the computer program.

[0045] In a fifth aspect, an embodiment of the present application provides a computer-readable storage medium, in which a computer program is stored. When the computer program is executed by a processor, the method of any one of the embodiments of the present application is implemented.

[0046] In a sixth aspect, an embodiment of the present application provides a computer program product, including a computer program, which implements any method of the embodiments of the present application when executed by a processor.

[0047] Based on the above transaction processing method, communication method applied to transaction processing, and security authentication device, the present application has at least the following beneficial effects or advantages:

[0048] Based on the NFC connection established between the security authentication device and the terminal device, the security authentication device sends the stored identification information to the terminal device, wherein the identification information includes the startup entry information for identifying the target client, so that the terminal device starts the target client according to the identification information, and based on the Bluetooth connection established between the security authentication device and the terminal device, the security authentication device sends the authentication information to the terminal device, so that the terminal device uses the authentication information to authenticate the target transaction initiated by the target client, and displays the transaction result according to the authentication result. The embodiment of the present application sends the startup entry information of the target client to the terminal device through the NFC connection, so that the terminal device can quickly call out the target client and open the interface of the target client, thereby eliminating the tedious steps of the user manually searching for the target client, simplifying the process of transaction operations, and shortening the time for executing transaction operations.

[0049] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] In the accompanying drawings, unless otherwise specified, the same reference numerals throughout the multiple drawings represent the same or similar parts or elements. These drawings are not necessarily drawn to scale. It should be understood that these drawings only depict some embodiments according to the present application and should not be regarded as limiting the scope of the present application.

[0051] Figure 1 The process of a transaction processing method provided by the embodiment of the present application is shown Figure 1 ;

[0052] Figure 2 A flow chart of a communication method applied to transaction processing provided by an embodiment of the present application is shown;

[0053] Figure 3 A schematic diagram of a security authentication device provided in an embodiment of the present application is shown Figure 1 ;

[0054] Figure 4 The process of a transaction processing method provided by the embodiment of the present application is shown Figure 2 ;

[0055] Figure 5 A schematic diagram of a security authentication device provided in an embodiment of the present application is shown Figure 2 ;

[0056] Figure 6 A schematic diagram of a security authentication device provided in an embodiment of the present application is shown Figure 3 ;

[0057] Figure 7 A schematic diagram of a security authentication device provided in an embodiment of the present application is shown Figure 4 ;

[0058] Figure 8 A schematic diagram of a security authentication device provided in an embodiment of the present application is shown Figure 5 ;

[0059] Fig. 9 A schematic diagram of a security authentication device provided in an embodiment of the present application is shown Figure 6 ;

[0060] Fig.10 A schematic diagram of a security authentication device provided in an embodiment of the present application is shown Figure 7 ;

[0061] Fig.11 A block diagram of an electronic device provided in an embodiment of the present application is shown. DETAILED DESCRIPTION

[0062] In the following, only some exemplary embodiments are briefly described. As those skilled in the art will appreciate, the described embodiments may be modified in various ways without departing from the concept or scope of the present application. Therefore, the drawings and descriptions are considered to be exemplary in nature and not restrictive.

[0063] To facilitate understanding of the technical solutions of the embodiments of the present application, the following describes the related technologies of the embodiments of the present application. The following related technologies can be combined with the technical solutions of the embodiments of the present application as optional solutions, and they all belong to the protection scope of the embodiments of the present application.

[0064] It should be noted that the application scenarios or application examples provided in this application are for ease of understanding, and the application of the technical solution is not specifically limited in the embodiments of this application. In addition, the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data need to comply with the relevant laws, regulations and standards of relevant countries and regions, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0065] Some technical terms described in the embodiments of the present application are explained below.

[0066] NFC: Near Field Communication, translated into Chinese as near field communication, NFC is a short-range high-frequency wireless communication technology that allows electronic devices to exchange data when they are close to each other. NFC technology is evolved from the integration of contactless radio frequency identification (RFID) and interconnection technology.

[0067] The technical solution of the present application and how the technical solution of the present application solves the above-mentioned technical problems are described in detail below with specific embodiments. The several specific embodiments listed can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described in detail below with reference to the accompanying drawings.

[0068] The terminal devices described in the embodiments of the present application include, but are not limited to: mobile phones, tablet computers, PDAs, personal computers, etc., and the terminal devices are equipped with Bluetooth modules and NFC modules. The security authentication devices described in the embodiments of the present application include, but are not limited to: smart password keys, U shields, etc., and the security authentication devices are equipped with Bluetooth modules and NFC modules. The specific implementation of the target client includes, but is not limited to: applications, software, applets in applications, browsers, cloud applications, etc.

[0069] refer to Figure 1 , is a flow chart of a transaction processing method provided in an embodiment of the present application. The method is applied to a terminal device and specifically includes steps 101 to 105.

[0070] Step 101: Based on the NFC connection established with the security authentication device, read the identification information stored in the security authentication device.

[0071] Step 102: start the target client according to the identification information.

[0072] Step 103: Initiate a target transaction through the target client.

[0073] Step 104: Based on the Bluetooth connection established with the security authentication device, the authentication information sent by the security authentication device is obtained.

[0074] Step 105: Use the authentication information to authenticate the target transaction, and display the transaction result according to the authentication result.

[0075] When the terminal device is close to the security authentication device, the NFC module in the security authentication device is activated by the radio frequency signal emitted by the terminal device, and the terminal device and the security authentication device establish an NFC connection. Based on the established NFC connection, the terminal device can read the identification information stored in the security authentication device. In some application scenarios, the user can enable the NFC function in the terminal device settings in advance to automatically establish a connection and obtain identification information after approaching the security authentication device.

[0076] The identification information includes startup entry information for identifying the target client. Specifically, the startup entry information may be the URL of the target client. Optionally, the startup entry information may be the URL of the homepage or main interface of the target client, or the URL of a specific page in the target client, for example, the URL of a specific page such as a payment page, a mini program page, or a transfer page in the target client. The specific page indicated by the startup entry information may be pre-configured according to actual needs.

[0077] Optionally, the identification information can be stored in an NFC module of the security authentication device. For example, the NFC module may include an NFC tag, in which the startup entry information of the target client is pre-written. Alternatively, the identification information can also be stored in other storage modules of the security authentication device, for example, in a security MCU (Microcontroller Unit) chip with a card emulation function. Through data interaction between the NFC module and the storage module of the security authentication device, the identification information is read from the storage module of the security authentication device and forwarded to the terminal device based on the established NFC connection.

[0078] After obtaining the identification information sent by the security authentication device based on the NFC connection, the target client is started on the terminal device according to the startup entry information of the target client. Specifically, the specified page of the target client can be opened, such as the homepage or main interface, or it can also be a subordinate sub-interface of the target client, such as the transfer interface. After starting the target client, a trigger operation for initiating a target transaction can be received to initiate the target transaction to the server. The trigger operation includes but is not limited to: using the scan function to scan the payment QR code, calling up the payment QR code, manually entering / selecting the other party's account information and / or transaction amount, using the transfer function to transfer money, and calling up the payment page through the NFC touch function with the payment device. Based on the trigger operation and / or the transaction information input operation after the trigger operation, the specific transaction information of the target transaction can be obtained, including but not limited to: the account information of the transaction counterparty, the transaction amount, the transaction time, etc.

[0079] After initiating the target transaction, based on the Bluetooth connection established with the security authentication device, the authentication information sent by the security authentication device is obtained. The security authentication device in the embodiment of the present application transmits the authentication information via the Bluetooth connection. The authentication information is used to provide the verification agency with the authentication information after initiating the target transaction as the credential information for the verification agency to verify the user's identity. The authentication information includes but is not limited to: digital signature, security password, digital certificate, key information, random number one-time password, etc.

[0080] The terminal device uses the authentication information to authenticate the target transaction to verify whether the transaction can be executed. Optionally, the terminal device can authenticate the authentication information locally on the terminal device, or the terminal device can also send the authentication information to the server, which performs the verification, or the terminal device can process the authentication information locally, for example, encrypt or decrypt, and send the processed data to the server. Based on the authentication result, the transaction result is displayed as success or failure. For example, the terminal device sends the user signature information (authentication information) sent by the security authentication device to the server, and the server returns the authentication result of the successful transaction. The terminal device displays a successful transaction page to prompt the user that the transaction has been successful.

[0081] The transaction processing method applied to a terminal device provided in the embodiment of the present application establishes an NFC connection with a security authentication device, reads identification information stored in the security authentication device, starts a target client according to the identification information, initiates a target transaction through the target client, obtains authentication information sent by the security authentication device based on a Bluetooth connection established with the security authentication device, uses the authentication information to authenticate the target transaction, and displays the transaction result according to the authentication result, so that the terminal device can quickly start the target client and open the interface of the target client by touching it with NFC, thereby eliminating the tedious steps of the user manually searching for the target client, simplifying the transaction operation process, and shortening the time to execute the transaction operation.

[0082] In order to prevent the target client from being installed in the terminal device, the embodiment of the present application also provides some implementation methods, and the identification information may also include download entry information for identifying the target client. Accordingly, step 102 starts the target client according to the identification information, which may specifically include executing the following steps: searching for the target client according to the start entry information in the clients installed in the terminal device, and if the target client is not installed in the terminal device, downloading the target client according to the download entry information, installing and starting the target client.

[0083] Taking a mobile phone (terminal device) and a smart Bluetooth key (security authentication device) as an example, the user can bring the smart Bluetooth key and the mobile phone close together, and the mobile phone reads the identification information stored in the NFC tag in the smart Bluetooth key through the NFC connection. The identification information includes the above-mentioned startup URL (startup entry information) and download URL (download entry information) of the target client. The mobile phone tries to start the target client according to the startup URL. If the target client is not installed in the mobile phone, the startup fails. The mobile phone automatically starts the browser and opens the download URL to guide the user to download and install the target client. After the download is completed and installed, the target client is started.

[0084] By storing the target client's startup entry information and download entry information in the security authentication device at the same time, the target client can be successfully started even if it is not installed in the terminal device, which can reduce the user's operations during the transaction and improve the user's efficiency in executing the transaction process.

[0085] In some embodiments, after executing step 102 to start the target client according to the identification information, the following steps can also be performed: sending a target request to the security authentication device to request the security authentication device to read the ciphertext data from the external smart NFC chip and forward it to the terminal device, receiving the ciphertext data forwarded by the security authentication device, obtaining the account information obtained by decrypting the ciphertext data, and filling the account information in the target client.

[0086] The target request is used to request the security authentication device to forward the data read by the security authentication device from the external tool. The terminal device can send the target request via Bluetooth connection, or it can also send the target request via other short-range communication technologies.

[0087] In the application scenario of this embodiment, the security authentication device has an NFC card reading function and can read data from an external smart NFC chip. When the security authentication device is close to the smart NFC chip, the ciphertext data in the smart NFC chip is read. Smart NFC chips include but are not limited to: bank cards, identity cards, etc., or the smart NFC chip can also be in a device equipped with a smart NFC chip, which is not limited in this embodiment of the present application. The ciphertext data is transmitted by the smart NFC chip through the NFC connection between the security authentication device and the smart NFC chip. The security authentication device reads the ciphertext data in the smart NFC chip through the NFC card reading function and then forwards it to the terminal device. Since the data is ciphertext, the security of data transmission is guaranteed.

[0088] In some embodiments, after obtaining the ciphertext data, the terminal device can decrypt the ciphertext data locally. For example, a bank card can store bank account information, etc. The target client is the bank's APP. While ensuring data security, the bank APP can perform decryption locally on the terminal device to obtain the bank account information. In other embodiments, after obtaining the ciphertext data, the terminal device can send the ciphertext data to the server, and the server obtains the account information obtained after decrypting the ciphertext data, such as the bank card number, ID card number, etc. It is understandable that the server can perform decryption locally on the server, or it can perform decryption based on a third-party service or cloud service, and the embodiments of the present application do not limit this.

[0089] In a specific example, after the mobile phone is close to the smart Bluetooth key, an NFC connection is established, the stored target client URL is read, and the target client is started according to the URL. In the target client, the user clicks on the input box where the ID number needs to be entered, and sends a target request to the smart Bluetooth key. In response to the target request, the smart Bluetooth key determines to turn on the NFC card reading function, and then the user puts the ID card close to the smart Bluetooth key again, so that the smart Bluetooth key acts as an NFC card reader to read the ID card number information. The smart Bluetooth key forwards the ciphertext data of the ID number to the mobile phone through the NFC connection or the pre-established Bluetooth connection, and the mobile phone sends it to the server, which decrypts the ID number and automatically fills it into the ID number input box to reduce the information that the user needs to enter manually and reduce the number of manual input errors.

[0090] By obtaining the ciphertext data forwarded by the security authentication device and automatically filling the decrypted account information in the target client, the need for users to manually enter information can be significantly reduced, thereby greatly improving the convenience and flexibility of transaction information input. Users do not need to enter cumbersome account information character by character, avoiding the risk of transaction failure or information leakage caused by manual input errors. In addition, this automatic filling mechanism also effectively reduces the user's operational burden during the transaction process, allowing users to complete the transaction process more easily and efficiently, allowing users to enjoy secure transactions while improving the overall user experience.

[0091] In some embodiments, the identification information stored in the security authentication device may also include account identification information used to identify the transaction account. Specifically, the account identification information may be divided into ciphertext data and plaintext data. For example, ciphertext data may include the user's own login account, bank account opening information, and other information. Plaintext data may include non-sensitive information such as corporate card numbers and commonly used counterpart transaction accounts.

[0092] Accordingly, step 103 initiates the target transaction through the target client, which may specifically include executing the following steps: receiving a trigger operation for initiating the target transaction, in response to the trigger operation, setting transaction information of the target transaction according to the account identification information, and initiating the target transaction to the server according to the transaction information.

[0093] That is, in the above implementation, the target client can fill in the transaction information in the target client according to the account identification information stored in the security authentication device, so as to reduce the process of the user initiating the target transaction. For example, the trigger operation can be to open the transfer page, and then the mobile phone selects or fills in its own account number and the other party's account according to the account identification information in the identification information provided by the security authentication device, and the user manually enters the transfer amount and clicks OK to initiate the target transaction.

[0094] The auto-fill function reduces the risk of transaction failure due to manual input errors and ensures the accuracy of transaction information. Users do not need to manually enter cumbersome account information, which reduces the number of operation steps and improves transaction efficiency.

[0095] The present application also provides a communication method for transaction processing, which is applied to a security authentication device, referring to Figure 2 , the method specifically includes steps 201 to 202. It can be understood that the communication method for transaction processing provided in the embodiment of the present application corresponds to the transaction processing method for terminal equipment provided in the embodiment of the present application, and the parts not described in detail in the communication method for transaction processing provided in the embodiment of the present application, such as the specific implementation methods or beneficial effects of the steps, can be referenced to the corresponding steps in the transaction processing method for terminal equipment.

[0096] Step 201: Based on the NFC connection established with the terminal device, the stored identification information is sent to the terminal device, so that the terminal device starts the target client according to the identification information.

[0097] Step 202, based on the Bluetooth connection established with the terminal device, authentication information is sent to the terminal device, so that the terminal device uses the authentication information to authenticate the target transaction initiated by the target client, and displays the transaction result according to the authentication result.

[0098] The security authentication device includes an NFC module. After the security authentication device is close to the terminal device, the security authentication device establishes an NFC connection with the terminal device, and the security authentication device sends the stored identification information to the terminal device. The identification information includes the startup entry information for identifying the target client, so that the terminal device starts the target client according to the startup entry information.

[0099] The communication method for transaction processing provided by the embodiment of the present application is based on the NFC connection established between the security authentication device and the terminal device, the security authentication device sends the stored identification information to the terminal device, wherein the identification information includes the startup entry information for identifying the target client, so that the terminal device starts the target client according to the identification information, and based on the Bluetooth connection established between the security authentication device and the terminal device, the security authentication device sends the authentication information to the terminal device, so that the terminal device uses the authentication information to authenticate the target transaction initiated by the target client, and displays the transaction result according to the authentication result. The embodiment of the present application sends the startup entry information of the target client to the terminal device through the NFC connection, so that the terminal device can quickly call out the target client and open the interface of the target client, thereby eliminating the tedious steps of the user manually searching for the target client, simplifying the process of transaction operations, and shortening the time to perform transaction operations.

[0100] In some embodiments, after sending the stored identification information to the terminal device based on the NFC connection established with the terminal device, the NFC card reader module of the security authentication device can also be enabled in response to the target request of the terminal device. After reading the ciphertext data in the smart NFC chip outside the security authentication device through the NFC card reader module, the ciphertext data is forwarded to the terminal device based on a communication connection method such as Bluetooth connection or NFC connection, so that the terminal device fills in the account information in the target client based on the ciphertext data.

[0101] For example, after the mobile phone opens the target client, it opens the interface for creating an electronic banking account, clicks on the input box where the bank card number needs to be entered, and sends a target request to the smart Bluetooth key. In response to the target request, the smart Bluetooth key determines to turn on the NFC card reading function, and then the user brings the bank card close to the smart Bluetooth key again, so that the smart Bluetooth key acts as an NFC card reader, reads the ciphertext data of the bank card number, and forwards it to the mobile phone, so that the mobile phone fills in the bank card number. The user then clicks on the input box where the ID card number needs to be entered, switches to bringing the ID card close to the smart Bluetooth key, and reads the ciphertext ID card number information and sends it to the mobile phone, so that the mobile phone fills in the ID card number.

[0102] By reading the encrypted data through the security authentication device and forwarding it to the terminal device, the terminal device can automatically fill in the decrypted account information in the target client, which can significantly reduce the need for users to manually enter information, thereby improving the convenience and accuracy of transaction information input.

[0103] In some embodiments, the above-mentioned step of sending authentication information to the terminal device based on the Bluetooth connection established with the terminal device may specifically include executing the following steps: in response to determining that an NFC connection has been established, establishing a Bluetooth connection with the terminal device, and sending authentication information to the terminal device based on the Bluetooth connection.

[0104] After determining that the NFC connection is established, the NFC module can communicate with the processor of the security authentication device and send a signal indicating that the NFC connection has been established. The processor determines that the NFC connection has been established based on the signal, controls the Bluetooth module to turn on, and searches for nearby Bluetooth devices. In some embodiments, the security authentication device can have established a pairing relationship with the terminal device in advance, so that the processor can directly control the Bluetooth module to automatically establish a Bluetooth connection with the paired terminal device. After the Bluetooth connection is established, the authentication information is transmitted to the terminal device via the Bluetooth connection. In some other embodiments, the security authentication device can obtain the identifier of the Bluetooth device (such as the device name, etc.) through the NFC module. When the processor determines that the identifier matches the preset rules, it can establish a pairing relationship, thereby eliminating the search and selection process, saving pairing time and achieving accurate selection.

[0105] Since NFC establishes a connection very quickly, usually within a fraction of a second, the user only needs to bring the terminal device close to the security authentication device to establish an NFC connection. The security authentication device automatically establishes a Bluetooth connection after determining to establish an NFC connection, which can reduce the operation steps for the user to actively establish a Bluetooth connection. In some embodiments, the authentication information may be variable and not suitable for storage in the NFC module. Transmission through a Bluetooth connection can achieve transmission of variable authentication information, which increases the stability, transmission speed and transmission distance of the transmission. After determining to establish an NFC connection, establishing a Bluetooth connection can effectively reduce the standby time of the Bluetooth module, thereby extending the standby time of the security authentication device. In this way, the Bluetooth module is only turned on when data transmission is required, avoiding long-term standby power consumption. This not only improves the energy efficiency of the device, but also enhances its endurance in actual use, ensuring that users can continue to use the security authentication device for a longer period of time without frequent charging, thereby improving the user experience and the practicality of the device.

[0106] In some implementations, the NFC information stored in the security authentication device also includes download entry information for identifying the target client, so that the terminal device can download the target client according to the download entry information when the target client is not installed. The specific implementation and beneficial effects of this technical solution can refer to the relevant technical solutions in the transaction processing method provided in the embodiment of the present application, which will not be repeated here.

[0107] The present application embodiment also provides a security authentication device that can execute the communication method for transaction processing provided in the present application embodiment, referring to Figure 3 , the security authentication device 30 specifically includes: an NFC module 301, a Bluetooth module 302 and a processor module 303. It can be understood that the security authentication device provided in the embodiment of the present application can be used to execute the communication method for transaction processing provided in the embodiment of the present application. Therefore, the parts not described in detail in the security authentication device provided in the embodiment of the present application, such as the specific implementation methods or beneficial effects of the steps, can be referenced to the corresponding steps in the transaction processing method applied to the terminal device.

[0108] refer to Figure 3, the NFC module 301 is used to establish an NFC connection with the terminal device 31, and send the identification information stored in the NFC module 301 to the terminal device 31, so that the terminal device 31 starts the target client according to the identification information, and the identification information includes the startup entry information for identifying the target client. Optionally, it can also include download entry information and account identification information. The Bluetooth module 302 is used to establish a Bluetooth connection with the terminal device 31, and send authentication information to the terminal device 31, so that the terminal device 31 uses the authentication information to authenticate the target transaction initiated by the target client, and displays the transaction result according to the authentication result. The processor 303 is connected to the Bluetooth module 302 and is used to generate authentication information.

[0109] refer to Figure 3 In some implementations, the security authentication device 30 may further include at least one of the following modules:

[0110] The display module 304 is connected to the processor 303 and is used to display the display information sent by the processor 303 .

[0111] The key module 305 is connected to the processor 303 and is used to receive key operations to input operation information corresponding to the key operations to the processor 303 .

[0112] The power module 306 and the charging interface module 307 , the power module 306 is used to supply power to the modules in the security authentication device 30 that require power, and the charging interface module 307 is used to connect an external charging device to charge the power module 306 .

[0113] The NFC card reader module 3011 in the NFC module 301 is used to read the ciphertext data in the smart NFC chip 3012 outside the security authentication device 30 .

[0114] The NFC tag 3013 in the NFC module is used to store identification information.

[0115] The following provides some example implementation methods for specific application scenarios in combination with the above-mentioned technical solutions in the embodiments of the present application.

[0116] In the related art, the smart password key integrates Bluetooth wireless communication technology on the basis of the traditional USB interface to form a Bluetooth smart password key to meet the usage needs of more scenarios. The Bluetooth smart password key can be used not only on the personal computer (PC) side, but also on the mobile side. The Bluetooth smart password key in the related art is to build a Bluetooth chip into the smart password key, and connect the Bluetooth chip with the Bluetooth antenna and the MCU chip of the smart password key. In the financial field, the Bluetooth smart password key includes scenarios such as online banking and mobile payment. When the user makes a mobile payment, the APP (application) communicates with the Bluetooth smart password key through the Bluetooth connection to perform identity authentication, transaction information confirmation and other operations through the Bluetooth smart password key.

[0117] In actual use, because each bank has its own unique financial Bluetooth smart password key product and corresponding APP, users not only need to have the corresponding smart password key product, but also need to download and find the corresponding APP to perform related operations. There are a large number of APPs on the mobile phone. When users want to use a bank APP for online banking operations or transactions, they need to manually find the APP, which takes a long time to find and has a poor user experience. When there is no APP of the bank on the mobile phone, it is also necessary to download the relevant APP in the application download software. The basic information of the user's commonly used accounts is cached in the personal account of the mobile phone APP. When the user wants to query the account card number, he needs to log in before using it. If there is no bank APP in the mobile phone, it needs to be downloaded, installed, and logged in to the APP before it can be obtained under the submenu option in the APP, or the physical bank card needs to be found to view it. When users handle business at the counter or on the mobile terminal, they need to use a dedicated card reader to read the information of the bank card and ID card.

[0118] In order to solve the above problems, an example security authentication device provided in an embodiment of the present application adds an NFC tag (TAG) function to an existing Bluetooth smart password key, and writes identification information such as the home page URL of the bank APP or the transaction interface address of the bank APP in the NFC tag. When the user needs to use the security authentication device to perform online banking operations or transactions, the user only needs to simply touch the security authentication device with the terminal device to call up the corresponding APP or transaction interface, thereby improving the user experience.

[0119] refer to Figure 4 , which is a flow chart of an example transaction processing method.

[0120] Step 4011: The terminal device 31 and the security authentication device 30 establish an NFC connection through NFC touch.

[0121] Step 4012: The terminal device 31 and the security authentication device 30 establish a Bluetooth connection.

[0122] It is understandable that in some embodiments, step 4011 and step 4012 may be relatively independent and executed in no particular order, and in other embodiments, there may be a sequence, for example, step 4011 is executed first, and then step 4012 is executed, for example, after determining to establish an NFC connection, a Bluetooth connection is established.

[0123] Step 402: After establishing the NFC connection, the security authentication device 30 sends identification information to the terminal device 31 based on the NFC connection.

[0124] Step 403: the terminal device 31 opens the home page or transaction page of the target client according to the identification information.

[0125] Step 404, the terminal device 31 receives input operations such as inputting the transaction amount, sets the transaction information, and clicks confirm to confirm the set transaction information and initiate the transaction.

[0126] Step 405, the security authentication device 30 sends authentication information to the terminal device 31 via the Bluetooth connection. Both parties can complete the authentication of the initiated transaction through the communication of the Bluetooth connection. Finally, after obtaining the authentication result, the terminal device 31 displays the transaction result according to the authentication result.

[0127] refer to Figures 5 to 10 , providing several optional implementations of the security authentication device 30 of the embodiment of the present application.

[0128] refer to Figure 5 , the security authentication device 30 includes: a Bluetooth smart password key 51 and an NFC tag 3013, and the identification information such as the homepage address or transaction interface address of the bank APP (target client) is written into the NFC tag. When a user uses a mobile phone with NFC function to perform transaction operations such as online bank transfer, the user can touch the security authentication device 30 with the mobile phone to read the identification information in the NFC tag to quickly call out the target client and jump to the required interface without the user having to manually search in a large number of mobile phone APPs. When there is no corresponding APP in the mobile phone, a download link can also pop up to facilitate the user to quickly download and install. As mentioned above, the Bluetooth smart password key and the NFC tag are two relatively independent modules. The NFC tag 3013 may include: an NFC chip and an NFC antenna. Optionally, the antenna of the NFC tag can be increased according to the actual effect requirements, ferrite covering materials, etc., to reduce the impact of the internal circuit board and battery on the performance. The NFC tag can also be used to store the necessary plain text information for the user to set up the account, such as the public card number information. After the bank APP reads the information in the NFC tag, the content in the plain text information can be filled into the corresponding input box to help the user quickly enter information and improve the user experience.

[0129] It is understandable that in some implementations, the NFC tag can be used as an independent hardware and directly placed in the shell of the Bluetooth smart password key 51 product, without limiting its assembly form. In other implementations, the chip of the NFC tag can be set on the same PCB (Printed Circuit Board) as the internal circuit of the Bluetooth smart password key 51, and the antenna of the NFC tag is set independently. The antenna can be connected to the PCB through welding or a connector and connected to the chip of the NFC tag. In some other implementations, the chip and antenna of the NFC tag can be integrated on the PCB of the Bluetooth smart password key 51. Through the above implementation, the application scenarios of the Bluetooth smart password key in the relevant technology can be expanded, and the reusability of the Bluetooth smart password key product can be improved.

[0130] refer to Figure 6 The security authentication device 30 includes: a Bluetooth smart password key 51 and an NFC card reader module 3011, which is equivalent to adding the function of an NFC card reader on the basis of the Bluetooth smart password key 51. The user can use the security authentication device 30 to approach the bank card or ID card, and the NFC card reader module 3011 of the security authentication device 30 will send the read information to the bank APP, and enter / display the bank card number or ID card information in the bank APP, which is convenient for handling business. Figure 7 , the components in the Bluetooth smart password key 51 include but are not limited to: security MCU 601 (processor module), USB interface 602, key module 305, screen 603 (display module), Bluetooth module 302, star flash module 604, power management module 605 (including power module and charging interface module), etc. The NFC card reader module 3011 includes: NFC contactless chip, matching circuit, antenna.

[0131] refer to Figure 7 , the security authentication device 30 includes: a Bluetooth smart password key 51, an NFC card reader module 3011 and an NFC tag 3013. The user can put the security authentication device 30 on the mobile phone, quickly pop up the bank APP, and read the account identification information in the NFC tag, and can further use the security authentication device 30 to read the bank card number or ID card information, fill in and / or display it in the bank APP. The components in the Bluetooth smart password key 51 include but are not limited to: a security MCU 601, a USB interface 602, a button module 305, a screen 603, a Bluetooth module 302, a star flash module 604, a power management module 605, etc. The NFC card reader module 3011 includes: an NFC contactless chip, a matching circuit, and an antenna.

[0132] It should be noted that, in addition to the chip and the antenna, the NFC tag 3013 is also equipped with a switch module 606 controlled by the security MCU 601. Figure 7 The switch module 606 is used to turn on the chip and antenna of the NFC tag 3013 when the NFC card reader module 3011 is not working, so as to keep the antenna function of the NFC tag 3013 available, and to disconnect the chip and antenna of the NFC tag 3013 when the NFC card reader module 3011 is working. In some implementations, the switch module 606 can use a radio frequency switch, and it is understandable that the specific implementation of the switch module 606 is not limited to the type of radio frequency switch.

[0133] refer to Figure 8 The security authentication device 30 includes: a Bluetooth smart password key 51, an NFC module 301. The NFC module 301 includes: an NFC card reader module and an NFC tag. The NFC card reader module and the NFC tag share an NFC antenna. The NFC card reader module also includes: an NFC contactless chip and a matching circuit. The NFC tag also includes: an NFC tag chip. Figure 7 As shown, the switch module 606 is controlled by the security MCU 601. When the NFC card reader function is used, the antenna is connected to the NFC contactless chip and matching circuit of the NFC card reader module. In the default state or when the NFC tag function is used, the antenna is connected to the NFC tag chip.

[0134] refer to Fig. 9 The security MCU601 in the security authentication device 30 uses a security chip that supports the card emulation function, so that the NFC tag chip can be omitted and the security MCU601 is used to implement the function of the NFC tag protocol.

[0135] In some other embodiments, the security authentication device 30 may also use a security MCU 601 that supports card emulation and card reading modes, or an NFC module 301 that supports card emulation and card reading modes, see Fig.10 , is a schematic block diagram of an NFC module 301 supporting card emulation and card reading modes. It can be understood that the combination and variation of the above technical solutions are all within the protection scope of this application.

[0136] Fig.11 FIG. 1 is a block diagram of an electronic device used to implement an embodiment of the present application. Fig.11 As shown, the electronic device includes: a memory 1101 and a processor 1102, and the memory 1101 stores a computer program that can be run on the processor 1102. When the processor 1102 executes the computer program, the method in the above embodiment is implemented. The number of the memory 1101 and the processor 1102 can be one or more. In a specific implementation, the electronic device may also include a communication interface 1103 for communicating with external devices and performing data exchange transmission.

[0137] In specific implementation, if the memory 1101, the processor 1102 and the communication interface 1103 are implemented independently, the memory 1101, the processor 1102 and the communication interface 1103 can be connected to each other through a bus and communicate with each other. The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Fig.11 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0138] Optionally, in a specific implementation, if the memory 1101, the processor 1102 and the communication interface 1103 are integrated on a chip, the memory 1101, the processor 1102 and the communication interface 1103 can communicate with each other through an internal interface.

[0139] An embodiment of the present application provides a computer-readable storage medium storing a computer program, which implements the method provided in the embodiment of the present application when the program is executed by a processor.

[0140] An embodiment of the present application provides a computer program product, including a computer program, which implements the method provided in the embodiment of the present application when executed by a processor.

[0141] An embodiment of the present application also provides a chip, which includes a processor for calling and executing instructions stored in the memory from the memory, so that a communication device equipped with the chip executes the method provided by the embodiment of the present application.

[0142] An embodiment of the present application also provides a chip, including: an input interface, an output interface, a processor and a memory, wherein the input interface, the output interface, the processor and the memory are connected via an internal connection path, and the processor is used to execute the code in the memory. When the code is executed, the processor is used to execute the method provided in the embodiment of the application.

[0143] It should be understood that the processor may be a CPU (Central Processing Unit), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc. It is worth noting that the processor may be a processor supporting the Advanced RISC Machines (ARM) architecture.

[0144] Further, optionally, the above-mentioned memory may include a read-only memory and a random access memory. The memory may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memory. Among them, the non-volatile memory may include a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may include a random access memory (RAM), which is used as an external cache. By way of exemplary but not limiting description, many forms of RAM are available. For example, static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM) and direct memory bus random access memory (DR RAM).

[0145] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function according to the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium.

[0146] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present application. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine different embodiments or examples described in this specification and the features of different embodiments or examples, unless they are contradictory.

[0147] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Therefore, a feature defined as "first" or "second" may explicitly or implicitly include at least one of the features. In the description of this application, the meaning of "plurality" is two or more, unless otherwise clearly and specifically defined.

[0148] Any process or method described in the flow chart or otherwise described herein can be understood as a module, fragment or portion of a code representing one or more executable instructions for implementing the steps of a specific logical function or process. And the scope of the preferred embodiment of the present application includes other implementations, in which the functions may not be performed in the order shown or discussed, including in a substantially simultaneous manner or in a reverse order according to the functions involved.

[0149] The logic and / or steps described in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, which can be specifically implemented in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or used in combination with these instruction execution systems, devices or apparatuses.

[0150] It should be understood that the various parts of the present application can be implemented with hardware, software, firmware or a combination thereof. In the above embodiments, multiple steps or methods can be implemented with software or firmware stored in a memory and executed by a suitable instruction execution system. All or part of the steps of the above embodiment method can be completed by instructing the relevant hardware through a program, which can be stored in a computer-readable storage medium, and when the program is executed, it includes one of the steps of the method embodiment or a combination thereof.

[0151] In addition, each functional unit in each embodiment of the present application can be integrated into a processing module, or each unit can exist physically separately, or two or more units can be integrated into one module. The above-mentioned integrated module can be implemented in the form of hardware or in the form of a software functional module. If the above-mentioned integrated module is implemented in the form of a software functional module and sold or used as an independent product, it can also be stored in a computer-readable storage medium. The storage medium can be a read-only memory, a disk or an optical disk, etc.

[0152] The above is only an exemplary embodiment of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of various changes or substitutions within the technical scope recorded in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application shall be based on the protection scope of the claims.

Claims

1. A transaction processing method, characterized in that: Applied to a terminal device, the method comprises: Based on the NFC connection established with the security authentication device, reading the identification information stored in the security authentication device; the identification information includes the startup entry information for identifying the target client; Starting the target client according to the identification information; Initiate a target transaction through the target client; Based on the Bluetooth connection established with the security authentication device, obtaining authentication information sent by the security authentication device; The target transaction is authenticated using the authentication information, and a transaction result is displayed according to the authentication result.

2. The method according to claim 1, characterized in that The identification information also includes download entry information for identifying the target client; and starting the target client according to the identification information includes: Searching for the target client among the clients installed on the terminal device according to the startup entry information; If the target client is not installed in the terminal device, downloading the target client according to the download entry information; Install and start the target client.

3. The method according to claim 1, characterized in that: After starting the target client according to the identification information, the method further includes: Sending a target request to the security authentication device to request the security authentication device to read the ciphertext data from the external smart NFC chip and forward it to the terminal device; Receiving the ciphertext data forwarded by the security authentication device; Obtaining account information obtained by decrypting the ciphertext data; The account information is filled in the target client.

4. The method according to claim 1, characterized in that: The identification information also includes account identification information for identifying a transaction account; and initiating a target transaction through the target client includes: Receiving a trigger operation for initiating the target transaction; In response to the trigger operation, setting transaction information of the target transaction according to the account identification information; Initiate the target transaction to the server according to the transaction information.

5. A communication method applied to transaction processing, characterized in that: Applied to a security authentication device, the method comprises: Based on the NFC connection established with the terminal device, sending the stored identification information to the terminal device, so that the terminal device starts the target client according to the identification information; the identification information includes startup entry information for identifying the target client; Based on the Bluetooth connection established with the terminal device, authentication information is sent to the terminal device, so that the terminal device uses the authentication information to authenticate the target transaction initiated by the target client, and displays the transaction result according to the authentication result.

6. The method according to claim 5, characterized in that After sending the stored identification information to the terminal device based on the NFC connection established with the terminal device, the method further includes: In response to the target request of the terminal device, enabling the NFC card reading module of the security authentication device; Read the encrypted data in the smart NFC chip outside the security authentication device through the NFC card reader module; The ciphertext data is forwarded to the terminal device, so that the terminal device fills in the account information in the target client based on the ciphertext data.

7. The method according to claim 5, characterized in that The sending authentication information to the terminal device based on the Bluetooth connection established with the terminal device includes: In response to determining that the NFC connection has been established, establishing the Bluetooth connection with the terminal device; Based on the Bluetooth connection, the authentication information is sent to the terminal device.

8. The method according to claim 5, characterized in that The identification information also includes download entry information for identifying the target client, so that the terminal device can download the target client according to the download entry information when the target client is not installed.

9. A security authentication device, comprising: An NFC module, used to establish an NFC connection with a terminal device, and send identification information stored in the NFC module to the terminal device, so that the terminal device starts a target client according to the identification information; The identification information includes startup entry information for identifying the target client; A Bluetooth module, used to establish a Bluetooth connection with the terminal device and send authentication information to the terminal device, so that the terminal device uses the authentication information to authenticate the target transaction initiated by the target client, and displays the transaction result according to the authentication result; A processor is connected to the Bluetooth module and is used to generate the authentication information.

10. The security authentication device according to claim 9, characterized in that: The security authentication device further includes at least one of the following: A display module, connected to the processor, and used to display the display information sent by the processor; A key module, connected to the processor, for receiving a key operation to input operation information corresponding to the key operation to the processor; A power module and a charging interface module, wherein the power module is used to supply power to the modules in the security authentication device that require power, and the charging interface module is used to connect an external charging device to charge the power module; An NFC card reader module in the NFC module, the NFC card reader module is used to read the ciphertext data in the smart NFC chip outside the security authentication device; The NFC tag in the NFC module is used to store the identification information.

Images