Multiplexing acquisition method, device, equipment, medium and program product

Abstract

The invention provides a multiplexing acquiring method which can be applied to the technical field of Internet of Things. The multiplexing acquiring method comprises the following steps: in response to an acquiring request of an acquiring system, generating an order two-dimensional code containing a unique transaction identifier based on a service serial number; the sales terminal is utilized to scan the order two-dimensional code, service information and order receiving information are obtained, and the order receiving information comprises a receiving amount, a receiving bank, a receiving user name, a receiving account and a payment code; service information and acquiring information are confirmed through the sales terminal, and acquiring operation is executed; wherein the point-of-sale terminal is associated with a plurality of receiving banks, a plurality of receiving housenames and a plurality of receiving accounts in advance, and supports dynamic switching of the associated accounts in the receiving operation. The invention further provides a multiplexing acquisition device and equipment, a storage medium and a program product.

Description

Technical Field

[0001] The present application relates to the field of Internet of Things technology, and more specifically to a multiplexing acquiring method, apparatus, device, medium, and program product. Background Art

[0002] With the rapid development of electronic payment technology, point-of-sale (POS) terminals, as versatile, intelligent payment processing devices, have been widely used in various commercial scenarios and have become an indispensable payment tool in modern economic activities. By integrating wired or wireless network communication technologies, POS terminals enable automatic electronic fund transfers. They not only support traditional bank card transactions but also are compatible with emerging payment methods such as QR code payments, greatly improving the convenience, security, and efficiency of payments.

[0003] POS terminals are typically equipped with a card reader or an integrated circuit card (IC card) reader, which can quickly read the magnetic stripe or chip information on bank cards. The terminal also allows the operator to enter the transaction amount and guide the cardholder to enter personal identification information (such as a password) to complete the identity acquisition process. The transaction information is then uploaded to the issuing bank's system through the UnionPay center or related payment network for real-time processing. The issuing bank, based on pre-set POS files, accurately transfers the customer payment amount to the merchant account associated with the POS terminal, ensuring transparent and secure fund flows.

[0004] In the field of QR code payment, POS terminals have further expanded their payment capabilities, supporting both primary scanning and scanned modes, and are compatible with various electronic payment methods such as bank aggregation payment, WeChat Pay, and Alipay. This diversified payment support not only meets the diverse payment needs of consumers, but also promotes seamless connections between merchants and consumers, improving transaction efficiency and customer satisfaction.

[0005] While POS terminals have achieved significant success in the commercial sector, the traditional one-account, one-terminal acquiring model has exposed numerous shortcomings in scenarios involving acquiring transactions across multiple banks and dedicated accounts. Under the traditional model, each bank and each account requires a separate POS terminal. This not only leads to redundant POS equipment purchases and wastes resources, but also increases the burden on acquiring operators. In practice, acquiring personnel must precisely select and switch between numerous POS terminals based on customer payment needs. This process is cumbersome and error-prone, easily leading to discrepancies between the intended and intended accounts, potentially leading to fund transfer errors, customer complaints, and even legal disputes.

[0006] Faced with the unique demands of acquiring transactions across multiple banks and dedicated accounts, optimizing the POS acquiring model to enable a single POS terminal to support multiple banks and multiple dedicated accounts has become a critical challenge in the current payment technology landscape. This requires not only enhanced data processing and routing capabilities but also deep integration with back-end services such as banking systems and payment networks to ensure accurate transmission of transaction information and efficient and secure capital flows. Furthermore, optimizing the user experience is crucial. By streamlining operational processes and providing intuitive interface prompts, the operator's operational complexity and error rates can be reduced, thereby improving overall service efficiency and quality. Summary of the Invention

[0007] In view of the above problems, the present application provides a multiplexing acquiring method, apparatus, device, medium and program product.

[0008] According to the first aspect of the present application, a multiplexed acquiring method is provided, comprising: in response to an acquiring request from an acquiring system, generating an order QR code containing a unique transaction identifier based on a business serial number; utilizing a sales terminal to scan the order QR code to obtain business information and acquiring information, wherein the acquiring information includes the deposit amount, deposit bank, deposit account name, deposit account number, and payment code; confirming the business information and acquiring information through the sales terminal, and executing an acquiring operation; wherein the sales terminal pre-associates multiple deposit banks, multiple deposit account names, and multiple deposit account numbers, and supports dynamic switching of associated accounts during the acquiring operation.

[0009] In some exemplary embodiments, before generating an order QR code based on the business serial number in response to the acquiring request, the method also includes: collecting device information of the sales terminal and storing it in a server database, the device information including the device number, device model, communication address and communication key; logging into the acquiring system through the sales terminal to complete two-way authentication and system check-in based on the encrypted communication key.

[0010] In some exemplary embodiments, the method further includes: pushing the acquiring result to the acquiring system to update the transaction status flag and the corresponding deposit account details.

[0011] In some exemplary embodiments, generating an order QR code containing a unique transaction identifier based on the business serial number includes: combining the business serial number with the terminal number and the timestamp to generate a unique transaction identifier; generating a QR code based on the unique transaction identifier, and embedding the encrypted payment information to obtain the order QR code.

[0012] In some exemplary embodiments, the payment methods for the acquiring operation include: card payment, which reads bank card information and completes the deduction through magnetic card swiping and integrated circuit card recognition; main scan payment, which generates a payment QR code for the customer's mobile device to scan and pay; and scan payment, which scans the payment code of the customer's mobile device to complete the payment; wherein, the payment result can be displayed in real time on the sales terminal and an encrypted transaction log is recorded.

[0013] In some exemplary embodiments, the sales terminal stores information of multiple deposit accounts via a local database or configuration file; and supports dynamic switching between the multiple deposit accounts.

[0014] In some exemplary embodiments, completing two-way authentication and system sign-in based on an encrypted communication key includes: generating a dynamic session key pair through the point-of-sale (POS) terminal's hardware security module and signing the public key in the dynamic session key pair; verifying the signature of the public key in the dynamic session key pair using a pre-stored public key on the server and generating a shared key pair; and using the shared key, the POS terminal and the server perform end-to-end encryption on transmitted data, performing data integrity and certificate verification to ensure identity authenticity.

[0015] The second aspect of the present application provides a multiplexed acquiring device, comprising: a generation module for generating an order QR code containing a unique transaction identifier based on a business serial number in response to an acquiring request from an acquiring system; an acquisition module for scanning the order QR code using a sales terminal to obtain business information and acquiring information, wherein the acquiring information includes the deposit amount, deposit bank, deposit account name, deposit account number and payment code; an acquiring module for confirming the business information and acquiring information through the sales terminal and performing an acquiring operation; wherein the sales terminal pre-associates multiple deposit banks, multiple deposit account names and multiple deposit account numbers, and supports dynamic switching of associated accounts during the acquiring operation.

[0016] The third aspect of the present application provides an electronic device, comprising: one or more processors; a memory for storing one or more computer programs, wherein the one or more processors execute the one or more computer programs to implement the steps of the above method.

[0017] The fourth aspect of the present application further provides a computer-readable storage medium having a computer program or instructions stored thereon, which implements the steps of the above method when the computer program or instructions are executed by a processor.

[0018] The fifth aspect of the present application further provides a computer program product, comprising a computer program or instructions, which implement the steps of the above method when executed by a processor. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] The above contents and other objects, features and advantages of the present application will become more apparent through the following description of the embodiments of the present application with reference to the accompanying drawings, in which:

[0020] Figure 1 Schematically illustrates an application scenario diagram of the multiplexing acquiring method, apparatus, device, medium, and program product according to an embodiment of the present application;

[0021] Figure 2 The following schematically shows a flow chart of a multiplexing acquiring method according to an embodiment of the present application;

[0022] Figure 3 A flowchart of another multiplexing acquiring method according to an embodiment of the present application is schematically shown;

[0023] Figure 4 Schematically shows a structural block diagram of a multiplexing acquiring device according to an embodiment of the present application; and

[0024] Figure 5 A block diagram of an electronic device suitable for implementing a multiplexing acquiring method according to an embodiment of the present application is schematically shown. DETAILED DESCRIPTION

[0025] Hereinafter, embodiments of the present application will be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the present application. In the detailed description below, for ease of explanation, many specific details are set forth to provide a comprehensive understanding of the embodiments of the present application. However, it is apparent that one or more embodiments may also be implemented without these specific details. In addition, in the following description, descriptions of known structures and technologies are omitted to avoid unnecessarily confusing the concepts of the present application.

[0026] The terms used herein are only for describing specific embodiments and are not intended to limit the present application. The terms "comprise," "include," etc. used herein indicate the presence of features, steps, operations, and / or components, but do not exclude the presence or addition of one or more other features, steps, operations, or components.

[0027] All terms used herein (including technical and scientific terms) have the meanings commonly understood by those skilled in the art unless otherwise defined. It should be noted that the terms used herein should be interpreted as having a meaning consistent with the context of this specification and should not be interpreted in an idealized or overly rigid manner.

[0028] When expressions such as "at least one of A, B, and C, etc." are used, they should generally be interpreted in accordance with the meaning commonly understood by those skilled in the art (for example, "a system having at least one of A, B, and C" should include but is not limited to a system having A alone, B alone, C alone, A and B, A and C, B and C, and / or A, B, C, etc.).

[0029] Traditional POS acquiring systems have long relied on a three-tiered architecture: terminal-acquiring bank-card scheme. Its core logic relies on hardware binding to achieve a strong coupling between the terminal and a specific acquiring bank. Under this architecture, each POS terminal must directly connect to the clearing system of a single acquiring bank via a dedicated physical line (such as PSTN dial-up or a dedicated network), forming a closed, one-to-one channel. This design results in highly rigid terminal functionality, limiting each POS terminal to a single bank's clearing channel and preventing dynamic switching or compatibility with payment services from other banks. For example, if a customer needs to access acquiring services from both Bank A and Bank B, they must deploy two separate terminals, each bound to the dedicated network of a different bank.

[0030] The drawbacks of this architecture are particularly pronounced in multi-bank acquiring scenarios. Merchants must configure separate terminals for each acquiring bank, resulting in redundant equipment, large space requirements, and high maintenance costs. Account switching relies on manual operations (such as changing terminals and manually entering parameters), which is not only time-consuming (each switch takes an average of 3-5 minutes) but also prone to operational errors leading to transaction failures or fund mismatches. The acquiring system and merchant point-of-sale terminals (such as cash registers) are not deeply integrated. Order information (such as product names and amounts) must be manually entered or imported and exported using USB flash drives, which poses the risk of data re-entry errors and makes it difficult to synchronize transaction records with order data in real time. Static QR codes (such as those posted on merchants' walls) are easily tampered with or replaced, potentially allowing consumers to have their funds hijacked after scanning them. Furthermore, traditional terminals often use plaintext or simple encryption to transmit sensitive information (such as bank account numbers and transaction amounts), posing a data leakage risk. If the dedicated network is attacked, the security of merchant and consumer funds is compromised. The above problems jointly restrict the efficiency and security of traditional POS acquiring systems, making it difficult to adapt to the high requirements of modern business for multi-account management, data interconnection and payment security.

[0031] To address the aforementioned issues, embodiments of the present application propose a multiplexed acquiring method that incorporates intelligent acquiring business identification and dynamic interaction mechanisms into the traditional POS acquiring process. By reconfiguring the interaction logic between the terminal and backend systems, a single POS terminal enables seamless switching and accurate acquiring in multi-bank, multi-account scenarios. Specifically, a multi-level acquiring and depositing account relationship is preconfigured at the point of sale terminal (e.g., a merchant's cash register system), supporting the association of the same merchant with different bank accounts (e.g., a primary account at Bank A and a backup account at Bank B) or different sub-merchant accounts (e.g., accounts at chain stores). The terminal automatically matches the target account based on transaction characteristics (e.g., order amount, payment channel), or enables millisecond-level account switching through merchant-initiated selection, completely replacing traditional manual terminal switching or account entry. The terminal integrates three payment modes: swipe, scan, and scanned. Consumers can freely choose to complete payment by inserting or waving their card, presenting a payment code, or scanning the merchant's dynamic QR code. Merchants can meet the needs of their entire customer base without deploying multiple devices. A unique transaction identifier (TID) is generated based on the transaction serial number and runs through the entire process from order generation, payment processing, and result feedback, ensuring order traceability and reconciliation. Acquisition results are pushed to the acquiring system in real time, synchronously updating the transaction status (e.g., "Payment Successful" or "Transaction Cancelled") and triggering subsequent accounting processing, forming a closed-loop "payment-clearing-settlement" process and mitigating financial risks. Through these optimizations, this approach significantly improves the automation and user experience of acquiring operations while providing merchants with a low-cost, highly flexible account management solution.

[0032] An embodiment of the present application provides a multiplexed acquiring method, comprising: generating an order QR code containing a unique transaction identifier based on a business serial number in response to an acquiring request from an acquiring system; scanning the order QR code using a sales terminal to obtain business information and acquiring information, wherein the acquiring information includes the deposit amount, deposit bank, deposit account name, deposit account number, and payment code; confirming the business information and acquiring information through the sales terminal, and executing an acquiring operation; wherein the sales terminal pre-associates multiple deposit banks, multiple deposit account names, and multiple deposit account numbers, and supports dynamic switching of associated accounts during the acquiring operation.

[0033] like Figure 1 As shown, the application scenario 100 according to this embodiment may include a first terminal device 101, a second terminal device 102, a third terminal device 103, a network 104, and a server 105. The network 104 is used as a medium for providing a communication link between the first terminal device 101, the second terminal device 102, the third terminal device 103, and the server 105. The network 104 may include various connection types, such as wired or wireless communication links or optical fiber cables.

[0034] A user may use a first terminal device 101, a second terminal device 102, or a third terminal device 103 to interact with a server 105 via a network 104 to receive or send messages, etc. Various communication client applications may be installed on the first terminal device 101, the second terminal device 102, or the third terminal device 103, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, etc. (for example only).

[0035] The first terminal device 101 , the second terminal device 102 , and the third terminal device 103 may be various electronic devices having display screens and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, and the like.

[0036] The server 105 may be a server that provides various services, such as a background management server (for example only) that supports websites browsed by users using the first terminal device 101, the second terminal device 102, and the third terminal device 103. The background management server may analyze and process received data such as user requests, and feed back processing results (e.g., web pages, information, or data obtained or generated based on user requests) to the terminal devices.

[0037] It should be noted that the multiplexing acquiring method provided in the embodiment of the present application can generally be executed by the server 105. Accordingly, the multiplexing acquiring device provided in the embodiment of the present application can generally be set in the server 105. The multiplexing acquiring method provided in the embodiment of the present application can also be executed by a server or server cluster that is different from the server 105 and can communicate with the first terminal device 101, the second terminal device 102, the third terminal device 103 and / or the server 105. Accordingly, the multiplexing acquiring device provided in the embodiment of the present application can also be set in a server or server cluster that is different from the server 105 and can communicate with the first terminal device 101, the second terminal device 102, the third terminal device 103 and / or the server 105.

[0038] It should be understood that Figure 1 The number of terminal devices, networks and servers in the embodiment is merely illustrative. Any number of terminal devices, networks and servers may be provided as required.

[0039] The following will be based on Figure 1 The scene described by Figure 2~Figure 3 The multiplexing acquiring method of the embodiment of the present application is described in detail.

[0040] Figure 2 The flowchart of the first multiplexing acquiring method according to an embodiment of the present application is schematically shown.

[0041] like Figure 2 As shown, the multiplexing acquiring method of this embodiment includes operations S210 to S230.

[0042] In operation S210, in response to an acquiring request from the acquiring system, an order QR code including a unique transaction identifier is generated based on the business serial number.

[0043] In some exemplary embodiments, operation S210 includes operations S211 and S212.

[0044] In operation S211 , the business serial number is combined with the terminal number and the timestamp to generate a unique transaction identifier.

[0045] In practice, the transaction serial number can take the form of "ORD" + year, month, and day + a four-digit serial number, such as ORD202310010001. The terminal number can be a fixed number assigned to the device at the factory, such as DEV001. The timestamp is accurate to the second and formatted in YYYYMMDDHHMMSS, such as 20231001120000. This information is concatenated with an underscore to form the final unique transaction identifier: ORD202310010001_DEV001_20231001120000. This method combines the transaction serial number, terminal number, and timestamp to generate a globally unique transaction identifier. To ensure core data security, encrypted acquiring information is embedded in the identifier. This multi-field combination ensures unique identifiers for each transaction, preventing order conflicts. Furthermore, the inclusion of the transaction serial number and timestamp in the identifier facilitates subsequent auditing and traceability. Furthermore, the inclusion of the timestamp allows the identifier to change over time, further reducing the risk of duplication.

[0046] In operation S212, a QR code is generated based on the unique transaction identifier and the encrypted acquiring information is embedded therein to obtain an order QR code.

[0047] In the embodiments of the present application, acquiring information includes, but is not limited to, the following fields: deposit amount, including the transaction amount, such as 100.00 yuan; deposit bank, including the target bank name, such as "ICBC"; deposit account name, including the account holder's name, such as "Zhang San"; deposit account number, including the bank account number; and payment code, an optional field used in specific business scenarios. The encryption process can use symmetric encryption (such as Advanced Encryption Standard-256 bit, AES-256) or asymmetric encryption (such as RSA). Taking the AES-256 encryption algorithm as an example, the specific steps are as follows: converting the acquiring information into JSON (JavaScript Object Notation, a lightweight data exchange format); encrypting the JSON string using a pre-assigned Advanced Encryption Standard (AES) key (32 bytes) and a randomly generated initialization vector (IV, 16 bytes); converting the encrypted binary data into a Base64 (based on 64 printable characters) encoded string; and combining the Base64 string with the transaction identifier to generate the final QR code content. This encryption method ensures the security of the payment information. Even if the QR code is illegally obtained, the sensitive information in it cannot be directly read.

[0048] Furthermore, to ensure the security and traceability of the transaction and the legitimacy of the access to the acquiring system, it is necessary to complete the device registration and security authentication of the sales terminal. Before step S210, the method further includes operations S310-S320, see Figure 3 .

[0049] In operation S310, the device information of the sales terminal is collected and stored in the server database. The device information includes the device number, device model, communication address and communication key.

[0050] In an embodiment of the present application, the device information is encrypted and stored in the server database, and the key is protected by symmetric encryption or asymmetric encryption. The device number is a serial number that uniquely identifies the sales terminal (such as DEV001), which is used to ensure the uniqueness of the sales terminal and avoid duplicate registration. The device model is the hardware model of the sales terminal (such as POS-X100). Recording the device model facilitates hardware maintenance, compatibility testing, and batch upgrades. The communication address is the network address of the sales terminal (such as 192.168.1.100 or MAC address 00:1A:2B:3C:4D:5E). By recording the communication address, the device network location can be located and abnormal access behavior can be monitored. The communication key is used as a key for subsequent two-way authentication (such as a 32-bit random string of AES-256 keys). By storing the communication key, it is used for encrypted communication between the device and the server to prevent data leakage or tampering.

[0051] The solution of the embodiment of the present application realizes unified and standardized management of device information through structured storage, and supports flexible expansion of fields to adapt to dynamic changes in business; at the same time, it adopts AES-256 encryption technology to store communication keys, and combines HTTPS / TLS protocol to ensure data transmission security, which can effectively resist security risks TLS, HTTPS (Hypertext Transfer Protocol Secure) and TLS (Transport Layer Security Protocol) are core technologies to ensure network communication security. The two work closely together to achieve data encryption, authentication and integrity protection; in addition, the solution of the embodiment of the present application supports batch operation and real-time monitoring functions, which greatly reduces manual intervention and enables users to grasp the operating status of the device in real time; and by fully recording the information change history and strictly restricting the access rights of sensitive data, it ensures compliance with the compliance audit requirements of the financial, medical and other industries.

[0052] In operation S320, the acquiring system is logged in through the sales terminal to complete the two-way authentication and system sign-in based on the encrypted communication key.

[0053] In an embodiment of the present application, the sales terminal verifies the legitimacy of the digital certificate of the acquiring system through a preset root certificate or public key library to ensure that the communication object is a real system and prevent forgery by middlemen. The acquiring system confirms that the terminal identity is legal and has not been tampered with through the device's unique identification (such as serial number, certificate fingerprint) and dynamic signature verification (such as device private key signature) to prevent forged terminal access. When the terminal accesses for the first time, it registers the device information (such as IP, location) with the acquiring system after two-way authentication. The system assigns a unique terminal number and records the status. During the sign-in process, the acquiring system issues parameters such as merchant number, key index, transaction limit, etc., and the terminal locally stores and activates business functions. Through the three-step process of authentication-registration-authorization, it ensures that only legal devices are connected and only authorized devices are allowed to conduct business. At the same time, through the dynamic key and status synchronization mechanism, secure and trusted communication between the sales terminal and the acquiring system is achieved, meeting the high security and high availability requirements of financial payment scenarios.

[0054] In some exemplary embodiments, operation S320 includes operations S321 to S323.

[0055] In operation S321, a dynamic session key pair is generated by the hardware security module of the sales terminal, and the public key in the dynamic session key pair is signed.

[0056] In an embodiment of the present application, a sales terminal has a built-in HSM chip. By calling the key generation interface of the HSM chip, a temporary key pair is generated based on the elliptic curve algorithm. The generated temporary key includes a private key and a public key. The temporary key pair has the characteristics of temporary and security. A new key pair is generated for each session to avoid the risk of long-term key leakage. The HSM can also provide protection against physical attacks, making the private key impossible to extract.

[0057] In operation S322, the signature of the public key in the dynamic session key pair is verified based on the server's pre-stored public key, and a shared key pair is generated. The ECC public key (PubKey_ECC) generated based on the Elliptic Curve Cryptography (ECC) algorithm, typically used for key negotiation or data encryption) is signed using a preset RSA private key (a private key generated based on the RSA algorithm (PrivKey_RSA), used to sign data and ensure the authenticity of the signer's identity). The signed ECC public key is sent to the server. After the server verifies the signature, it generates its own ECC key pair. The two parties negotiate a shared key as the session key using the Elliptic Curve Diffie-Hellman (ECDH) key exchange algorithm. ECDH is a key agreement protocol based on elliptic curve cryptography that allows two parties to generate a shared key by exchanging public keys without directly transmitting the key itself. Combining signature verification with ECDH key agreement ensures the identities of both communicating parties are authentic and the key agreement process has not been tampered with.

[0058] In operation S323, the sales terminal and the server use a shared key to perform end-to-end encryption on the transmitted data, and perform data integrity and certificate verification to ensure identity authenticity.

[0059] In the embodiment of the present application, the two parties perform end-to-end encryption of the transmitted data using the Advanced Encryption Standard based on the negotiated shared key, verify data integrity through digital signatures, ensure identity authenticity through certificate verification, and prevent replay attacks through timestamps and random number mechanisms, thereby establishing a complete secure communication channel. By establishing a secure channel, the confidentiality, integrity, and replay resistance of data transmission are ensured. By strongly associating the acquiring device number (such as the POS terminal ID or the IoT device serial number) with the encryption key, illegal device access is prevented. Through key reuse and updates, key management efficiency is optimized while ensuring security, avoiding frequent re-authentication.

[0060] Secure communication channels ensure the security of data transmission through a multi-layered mechanism. Confidentiality is ensured through end-to-end encryption using high-strength encryption algorithms (such as AES). This encryption process covers the entire data generation and reception process, ensuring that only authorized parties with valid keys can decrypt the data, effectively defending against network eavesdropping and traffic analysis attacks. Even if an attacker intercepts the ciphertext, they cannot decrypt it within a reasonable timeframe. Integrity verification uses a message authentication code (HMAC-SHA256) or digital signature (RSA / ECDSA) to generate a data checksum. The recipient verifies that the data has not been tampered with by recalculating the checksum and comparing it with the transmitted value. This mechanism detects modifications at any bit level and ensures the data source is trustworthy, preventing intermediaries from tampering with sensitive information such as transaction amounts and instruction parameters. Identity authentication uses digital certificates or asymmetric signatures to verify the authenticity of both communicating parties, preventing forgery and man-in-the-middle attacks. Clients verify the certificate validity period, revocation status, and signature chain to ensure they are communicating with the authentic server, preventing phishing attacks or forged servers from hijacking sessions. Anti-replay attacks are implemented by embedding timestamps, random numbers, or increasing sequence numbers in messages. Receivers can reject duplicate or expired messages by verifying a time window (e.g., ±5 minutes) or sequence number uniqueness. For example, if the timestamp in a payment request exceeds its validity period, the system will discard the request, preventing attackers from intercepting and resubmitting old messages. Forward secrecy uses a temporary key exchange (e.g., ECDHE) to generate short-term session keys. Each session generates a unique short-term session key, and the long-term key is used only for identity authentication, not data encryption. Even if the server's private key is compromised, the session key is destroyed at the end of the session, preventing attackers from decrypting past communication records. Dynamic defense proactively protects against threats through regular key rotation (e.g., every 15 minutes) and monitoring for unusual behavior (e.g., analyzing patterns such as traffic spikes and off-hours access). The system blocks suspicious requests in real time and dynamically adjusts protection strategies based on threat intelligence, forming an in-depth defense system covering the entire transmission process. This combination of mechanisms, encompassing encryption, authentication, verification, and dynamic defense, creates a fully closed-loop security system from data generation to reception, effectively addressing the most common attack vectors in today's network environments.

[0061] return Figure 2 In operation S220, the sales terminal is used to scan the order QR code to obtain business information and payment information. The payment information includes the deposit amount, deposit bank, deposit account name, deposit account number and payment code.

[0062] In an embodiment of the present application, a point-of-sale terminal pre-links multiple deposit banks, multiple deposit account names, and multiple deposit account numbers, and supports dynamic switching of linked accounts during acquiring operations. Preferably, the point-of-sale terminal stores information for multiple deposit accounts in a local database or configuration file. The point-of-sale terminal scans the order QR code to obtain business and acquiring information. The specific process is as follows: the terminal's camera scans the QR code to read the raw data, parses the transaction identifier and encrypted acquiring information, decrypts the acquiring information using a stored decryption key, verifies the validity of the transaction identifier (e.g., checks whether the timestamp is within the validity period), and finally displays the decrypted acquiring information on the terminal interface. During this process, the system supports merchants dynamically switching between multiple pre-stored bank accounts. The point-of-sale terminal interface displays the currently selected bank account information, a list of other available accounts, and an account switching button. Account information is stored in the terminal's encrypted database. Each account record includes information such as the bank name, account type, encrypted account number, account holder, bank information, and last used time. Merchants can switch between different accounts using a simple interface, and the system updates the target account information for the transaction in real time.

[0063] The sales terminal pre-links multiple collecting banks, account names and account numbers, making account linkage flexible and diverse, able to meet the needs of acquiring in different scenarios and enhance business processing flexibility; it supports dynamic account switching during acquiring operations, which is convenient and efficient, without the need for tedious settings, and improves user experience; information acquisition goes through multiple links to ensure the accuracy and security of information, and at the same time prevents information leakage through encrypted storage; the interface design is intuitive and easy to use, making it easy for merchants to understand account status and switch; account information management is complete, and detailed transaction target account information is stored and updated in real time to ensure that transactions are accurate and traceable.

[0064] In operation S230, the business information and the payment information are confirmed through the sales terminal, and the payment operation is performed.

[0065] In some exemplary embodiments, the payment methods for the acquiring operation include: card payment, which reads bank card information and completes deductions through magnetic card swiping and integrated circuit card recognition, and is applicable to bank cards with magnetic stripes or chips; main scan payment, which generates a payment QR code for the customer's mobile device to scan and pay; and scan payment, which completes payment by scanning the payment code of the customer's mobile device, wherein the payment result can be displayed in real time on the sales terminal and an encrypted transaction log is recorded.

[0066] For example, a certain chain restaurant supports three modes: card payment, main scan payment (generating merchant QR code) and scanned payment (scanning customer payment code). It can dynamically switch payment methods according to customer needs, and ensure real-time feedback of payment results and secure storage of transaction logs.

[0067] Merchants select payment modes on the point-of-sale (POS) interface, including: swipe payment, where the customer inserts or taps their bank card (magnetic stripe / chip card), and the terminal reads the card information and verifies its validity; primary scan payment, where the terminal dynamically generates a payment QR code (including merchant ID, order number, and amount), which the customer scans using WeChat / Alipay to complete payment; and passive scan payment, where the terminal scans the payment code displayed on the customer's mobile device and decodes the encrypted payment instructions. The POS also displays transaction information (order amount, item details) and acquiring information (payment method, destination account). Merchant confirmation triggers the payment request. The payment result is returned to the terminal in real time via the bank / third-party payment platform, indicating "payment successful" or a failure reason (e.g., insufficient balance, abnormal card status). The terminal encrypts transaction data and stores it in a local database (AES-256 encryption), generating an encrypted transaction log. The log fields include: order number, payment method, transaction time, payment result, destination account, device ID, and sensitive merchant operator information (e.g., the last four digits of the bank card number and the payment code fragment), which is de-identified (e.g., ****1234).

[0068] The solution according to the embodiment of the present invention can support multi-mode payment to meet different customer preferences, and improve order processing efficiency by 40% during peak periods. At the same time, encrypted logs support queries by order number and time range to meet regulatory audit requirements.

[0069] exist Figure 2 and Figure 3 On the basis of the multiplexed acquiring method shown, in order to obtain the information of the receiving account in real time, the method may further include: pushing the acquiring result to the acquiring system to update the transaction status flag and the corresponding receiving account details.

[0070] For example, traditional reconciliation requires manual export of terminal transaction data for comparison with the acquiring system, which is time-consuming and prone to errors. Upon successful payment at the point of sale, the results are immediately pushed to the acquiring system. The acquiring system automatically matches orders and updates status, effectively improving reconciliation efficiency. Cross-border transactions often have uncertain arrival times, making it difficult for merchants to track their funds in real time. The acquiring system, upon receiving push notifications, notifies merchants of the arrival information via SMS or email, allowing them to view their account balances and transaction details in real time.

[0071] In Example 1, a teaching institution offers three courses: physical education, literature, and art. Customers can pay tuition for different courses using a unified order QR code. The institution needs to dynamically match the corresponding acquiring account based on the course selected by the customer (for example, physical education courses should be paid to Bank Account A, literature courses should be paid to Bank Account B, and art courses should be paid to Bank Account C) and record the payment code for subsequent reconciliation.

[0072] The mapping relationship between courses and accounts stored in the local encrypted database of the sales terminal:

[0073] Physical Education Course → Bank Account A (Account Number: ENC_XXXX1)

[0074] Literature Course → Bank Account B (Account Number: ENC_XXXX2)

[0075] Art Course → C Bank Account (Account Number: ENC_XXXX3)

[0076] Account information is stored encrypted (e.g. AES-256) and can only be modified by authorized administrators.

[0077] The customer presents the order QR code, which is scanned by the point-of-sale (POS) camera and decoded to reveal the following: business information, including the course name (encrypted), order number (ORDER20231001-001); acquiring information, including the deposit amount (¥5,000), deposit bank (encrypted), deposit account number (encrypted), and payment code (PAY20231001-ABC). The POS queries the mapping table based on the course name "Sports" and automatically selects Bank A's account. Using the pre-stored decryption key for Bank A's account, the bank name, account number, and account name in the acquiring information are decrypted. The POS displays the decrypted acquiring information (Bank A, Account Number: 6228*1234, Account Name: XX Institution). Payment is completed after the institution confirms the information. The POS's encrypted database records transaction details, including the order number, course name, destination account, payment code, transaction time, and the last time the account was used.

[0078] The following will be based on Figure 2~Figure 3 The multiplexing acquiring method described herein provides a modularly designed reusable acquiring POS terminal capable of implementing the multiplexing acquiring method, and describes the terminal in detail.

[0079] The present invention provides a modular, highly reusable intelligent POS terminal. Through hardware and software collaborative design, it enables seamless switching and efficient payment collection across multiple banks and accounts. The POS terminal includes an image acquisition and recognition module, a card swipe and IC card recognition module, an information display module, an information processing and storage module, and a communication module.

[0080] The image acquisition and recognition module can support optical signal recognition and dual modes of main scanning and being scanned. Among them, optical signal recognition is based on a high-resolution camera and image processing algorithm, supporting the rapid parsing of barcodes / QR codes; in the main scanning mode, the merchant scans the payment code presented by the consumer through the terminal; and in the being scanned mode, the terminal dynamically generates the merchant payment code (including the amount and order number) for consumers to scan and pay.

[0081] The card swiping and IC card recognition modules support magnetic stripe cards, IC cards and NFC contactless payments, while using hardware encryption modules (such as HSM) to encrypt sensitive information such as card numbers and expiration dates in real time.

[0082] The information display module is capable of multi-interface interaction, including: displaying operation menus such as collection, refund, and reconciliation; dynamically displaying key information such as transaction amount, payment method, merchant name, etc.; generating encrypted payment codes in real time based on order information, and supporting custom validity periods (such as 1 minute).

[0083] The information processing and storage module can process image recognition, card transactions, network communications and other tasks in parallel, store real-time transaction data and temporary files, and save transaction logs, merchant configurations and encryption keys.

[0084] The communication module is used for communication between the terminal device and the remote background system.

[0085] The POS terminal according to the embodiment of the present application can provide basic data processing, data storage, and data communication functions, complete the entire process of acquiring terminal operation, realize seamless switching between different banks and different accounts, ensure accurate and convenient acquiring operations, realize the reuse of POS terminals in multiple accounts, effectively reduce the procurement and maintenance costs of POS terminals, quickly collect and accurately process payment information, shorten transaction time, improve consumers' payment experience, and ensure the safety of customer funds.

[0086] For example, a supermarket chain with 2,000 stores nationwide needed to configure POS terminals from different banks for each store, which was complex and costly to manage. After deploying the POS terminal of the present invention, each store's account is uniformly configured through the management backend. The terminal automatically switches to the corresponding bank account based on the store ID, achieving "one device for multiple uses." Hardware procurement costs were reduced by 62%, operation and maintenance efficiency increased by 75%, and consumer complaint rates decreased by 40%. Through modular design, multi-account reuse, and secure encryption technology, the POS terminal achieves efficiency, cost-effectiveness, and security.

[0087] Based on the above multiplexing acquiring method, the embodiment of the present application also provides a multiplexing acquiring device. Figure 4 The device is described in detail.

[0088] Figure 4 The structural block diagram of the multiplexing acquiring device according to an embodiment of the present application is schematically shown.

[0089] like Figure 4 As shown, the multiplexing acquiring device 800 of this embodiment includes a generating module 810 , an acquiring module 820 and an acquiring module 830 .

[0090] The generating module 810 is configured to generate an order QR code containing a unique transaction identifier based on the business serial number in response to the acquiring request of the acquiring system. In one embodiment, the generating module 810 can be configured to perform the operation S210 described above, which will not be described in detail here.

[0091] Acquisition module 820 is configured to scan the order QR code using the point of sale terminal to obtain business information and acquiring information. Acquisition information includes the deposit amount, deposit bank, deposit account name, deposit account number, and payment code. The point of sale terminal may be pre-associated with multiple deposit banks, multiple deposit account names, and multiple deposit account numbers, and supports dynamic switching of associated accounts during acquiring operations. In one embodiment, acquisition module 820 may be configured to perform operation S220 described above and will not be further described here.

[0092] The acquiring module 830 is used to confirm the business information and the acquiring information through the sales terminal and perform the acquiring operation. In one embodiment, the acquiring module 830 can be used to perform the operation S230 described above, which will not be repeated here.

[0093] According to an embodiment of the present application, the multiplexing acquiring device 800 may further include a collection module 840 and an authentication module 850 .

[0094] The acquisition module 840 is used to collect the device information of the sales terminal and store it in the server database. The device information includes the device number, device model, communication address and communication key. In one embodiment, the acquisition module 840 can be used to perform the operation S310 described above, which will not be repeated here.

[0095] The authentication module 850 is used to log in to the acquiring system through the sales terminal and complete the two-way authentication based on the encrypted communication key and the system sign-in. In one embodiment, the authentication module 850 can be used to perform the operation S320 described above, which will not be repeated here.

[0096] According to embodiments of the present application, any multiple modules among the generation module 810, acquisition module 820, and acquiring module 830 may be combined into a single module, or any one of these modules may be split into multiple modules. Alternatively, at least part of the functionality of one or more of these modules may be combined with at least part of the functionality of other modules and implemented in a single module. According to embodiments of the present application, at least one of the generation module 810, acquisition module 820, and acquiring module 830 may be at least partially implemented as a hardware circuit, such as a field programmable gate array (FPGA), a programmable logic array (PLA), a system on a chip, a system on a substrate, a system on a package, an application-specific integrated circuit (ASIC), or may be implemented in hardware or firmware through any other suitable means of circuit integration or packaging, or may be implemented in any one of software, hardware, and firmware, or any suitable combination of these. Alternatively, at least one of the generation module 810, acquisition module 820, and acquiring module 830 may be at least partially implemented as a computer program module that, when executed, performs the corresponding functionality.

[0097] Figure 5 A block diagram of an electronic device suitable for implementing a multiplexing acquiring method according to an embodiment of the present application is schematically shown.

[0098] like Figure 5 As shown, an electronic device 900 according to an embodiment of the present application includes a processor 901, which can perform various appropriate actions and processes based on programs stored in a read-only memory (ROM) 902 or programs loaded from a storage unit 908 into a random access memory (RAM) 903. The processor 901 may include, for example, a general-purpose microprocessor (e.g., a CPU), an instruction set processor and / or related chipsets and / or a dedicated microprocessor (e.g., an application-specific integrated circuit (ASIC)), etc. The processor 901 may also include onboard memory for caching purposes. The processor 901 may include a single processing unit or multiple processing units for performing different actions of the method flow according to the embodiment of the present application.

[0099] Various programs and data required for the operation of the electronic device 900 are stored in the RAM 903. The processor 901, the ROM 902, and the RAM 903 are connected to each other via a bus 904. The processor 901 performs various operations of the method flow according to the embodiment of the present application by executing the programs in the ROM 902 and / or the RAM 903. It should be noted that the program can also be stored in one or more memories other than the ROM 902 and the RAM 903. The processor 901 can also perform various operations of the method flow according to the embodiment of the present application by executing the programs stored in the one or more memories.

[0100] According to an embodiment of the present application, electronic device 900 may further include an input / output (I / O) interface 905, which is also connected to bus 904. Electronic device 900 may also include one or more of the following components connected to I / O interface 905: an input section 906 including a keyboard, mouse, etc.; an output section 907 including devices such as a cathode ray tube (CRT), liquid crystal display (LCD), and speakers; a storage section 908 including a hard disk; and a communication section 909 including a network interface card such as a LAN card or modem. Communication section 909 performs communication processing via a network such as the Internet. A drive 910 is also connected to I / O interface 905 as needed. Removable media 911, such as a magnetic disk, optical disk, magneto-optical disk, semiconductor memory, etc., is installed in drive 910 as needed, so that computer programs read from the removable media can be installed into storage section 908 as needed.

[0101] This application also provides a computer-readable storage medium, which may be included in the device / apparatus / system described in the above embodiments, or may exist independently and not be incorporated into the device / apparatus / system. The computer-readable storage medium carries one or more programs, and when the one or more programs are executed, the method according to the embodiments of this application is implemented.

[0102] According to an embodiment of the present application, a computer-readable storage medium may be a non-volatile computer-readable storage medium, and may include, for example, but not limited to: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present application, a computer-readable storage medium may be any tangible medium that contains or stores a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. For example, according to an embodiment of the present application, a computer-readable storage medium may include the ROM 902 and / or RAM 903 described above and / or one or more memories other than ROM 902 and RAM 903.

[0103] The embodiments of the present application also include a computer program product, which includes a computer program containing program code for executing the method shown in the flowchart. When the computer program product is executed in a computer system, the program code is used to enable the computer system to implement the multiplexing acquiring method provided in the embodiments of the present application.

[0104] The computer program executes the above functions defined in the system / device of the embodiment of the present application when the processor 901 executes the computer program. According to the embodiment of the present application, the system, device, module, unit, etc. described above can be implemented by a computer program module.

[0105] In one embodiment, the computer program may be stored on a tangible storage medium such as an optical storage device or a magnetic storage device. In another embodiment, the computer program may be transmitted and distributed in the form of a signal on a network medium, downloaded and installed via the communication portion 909, and / or installed from a removable medium 911. The program code contained in the computer program may be transmitted using any appropriate network medium, including but not limited to wireless, wired, or any suitable combination thereof.

[0106] In such an embodiment, the computer program can be downloaded and installed from a network via the communication section 909, and / or installed from a removable medium 911. When the computer program is executed by the processor 901, the above-mentioned functions defined in the system of the embodiment of the present application are performed. According to the embodiment of the present application, the systems, devices, means, modules, units, etc. described above can be implemented by computer program modules.

[0107] According to an embodiment of the present application, the program code for executing the computer program provided by the embodiment of the present application can be written in any combination of one or more programming languages. Specifically, these computer programs can be implemented using high-level procedural and / or object-oriented programming languages, and / or assembly / machine languages. Programming languages ​​include, but are not limited to, languages ​​such as Java, C++, Python, "C" or similar programming languages. The program code can be executed entirely on the user computing device, partially on the user device, partially on a remote computing device, or entirely on a remote computing device or server. In the case of a remote computing device, the remote computing device can be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computing device (for example, using an Internet service provider to connect via the Internet).

[0108] The flowcharts and block diagrams in the accompanying drawings illustrate the possible implementation architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present application. In this regard, each box in the flowchart or block diagram can represent a module, program segment, or a part of code, and the above-mentioned module, program segment, or a part of code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in an order different from that marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flowchart, and the combination of the boxes in the block diagram or flowchart, can be implemented with a dedicated hardware-based system that performs the specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0109] Those skilled in the art will appreciate that the features described in the various embodiments of this application may be combined and / or coupled in various ways, even if such combinations or couplings are not explicitly described in this application. In particular, the features described in the various embodiments of this application may be combined and / or coupled in various ways without departing from the spirit and teachings of this application. All such combinations and / or couplings fall within the scope of this application.

[0110] The embodiments of the present application have been described above. However, these embodiments are for illustrative purposes only and are not intended to limit the scope of the present application. Although each embodiment has been described separately above, this does not mean that the measures in each embodiment cannot be advantageously used in combination. Without departing from the scope of the present application, those skilled in the art may make various substitutions and modifications, and these substitutions and modifications should all fall within the scope of the present application.

Claims

1. A multiplexing acquiring method, characterized in that: The method comprises: In response to the acquiring system's acquiring request, generate an order QR code containing a unique transaction identifier based on the business serial number; Scan the order QR code using a sales terminal to obtain business information and payment information, including the deposit amount, deposit bank, deposit account name, deposit account number, and payment code; Confirm the business information and the acquiring information through the sales terminal and perform the acquiring operation; The sales terminal is pre-associated with multiple deposit banks, multiple deposit account names, and multiple deposit account numbers, and supports dynamic switching of associated accounts during the acquiring operation.

2. The method according to claim 1, characterized in that Before generating an order QR code based on the business serial number in response to the acquiring request, the method further includes: Collect the device information of the sales terminal and store it in the server database. The device information includes the device number, device model, communication address and communication key; Log in to the acquiring system through the sales terminal to complete two-way authentication and system sign-in based on the encrypted communication key.

3. The method according to claim 1 or 2, characterized in that The method further comprises: The acquiring result is pushed to the acquiring system to update the transaction status flag and the corresponding acquiring account details.

4. The method according to claim 1, wherein The generating of an order QR code containing a unique transaction identifier based on the business serial number includes: Combining the business serial number with the terminal number and timestamp to generate a unique transaction identifier; A QR code is generated based on the unique transaction identifier and the encrypted acquiring information is embedded therein to obtain an order QR code.

5. The method according to claim 1, wherein The payment methods for the acquiring operation include: Card payment: through magnetic card swipe and integrated circuit card recognition, bank card information is read and payment is completed; Main Scan Payment, which generates a payment QR code for customers to scan with their mobile devices; and Scan to pay, scan the payment code of the customer's mobile device to complete the payment; The payment result can be displayed in real time on the sales terminal and an encrypted transaction log can be recorded.

6. The method according to claim 1, characterized in that The sales terminal stores multiple deposit account information via a local database or configuration file; and Dynamic switching is supported between multiple collection and storage accounts.

7. The method according to claim 2, characterized in that The completion of the two-way authentication and system sign-in based on the encrypted communication key includes: Generate a dynamic session key pair through the hardware security module of the sales terminal, and sign the public key in the dynamic session key pair; Verify the signature of the public key in the dynamic session key pair based on the public key pre-stored on the server, and generate a shared key pair; The sales terminal and the server use the shared key to perform end-to-end encryption on the transmitted data, and perform data integrity and certificate verification to ensure identity authenticity.

8. A multiplexing acquiring device, characterized in that: The device comprises: A generating module, configured to generate an order QR code containing a unique transaction identifier based on the business serial number in response to an acquiring request from the acquiring system; An acquisition module is used to scan the order QR code using a sales terminal to obtain business information and acquiring information, wherein the acquiring information includes the deposit amount, deposit bank, deposit account name, deposit account number, and payment code; The acquiring module is used to confirm the business information and the acquiring information through the sales terminal and perform the acquiring operation; The sales terminal is pre-associated with multiple deposit banks, multiple deposit account names, and multiple deposit account numbers, and supports dynamic switching of associated accounts during the acquiring operation.

9. An electronic device comprising: one or more processors; a memory for storing one or more computer programs, It is characterized in that the one or more processors execute the one or more computer programs to implement the steps of the method according to any one of claims 1 to 7.

10. A computer-readable storage medium having a computer program or instruction stored thereon, characterized in that: When the computer program or instruction is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

11. A computer program product comprising a computer program or instructions, characterized in that When the computer program or instruction is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images