Payment system and method based on intelligent identity adaptation and monitoring cooperation

Abstract

The invention discloses a payment system and method based on intelligent identity adaptation and monitoring cooperation, and the system comprises a compliance examination engine, an identity authentication unit, an intelligent identity adaptation unit, a monitoring decision processing engine, and a payment risk control engine. The payment module is used for executing a payment process according to a matching result and a verification instruction respectively sent by the intelligent identity adaptation unit and the monitoring decision processing engine; and the encryption machine / key management module is used for providing corresponding keys for the identity authentication unit, the encrypted message push cluster and the monitoring decision processing engine. According to the method, the independent compliance rule database and the intelligent review engine are constructed, and laws and regulations which originally depend on manual interpretation are converted into structured rules which can be recognized and executed by a machine. The system can carry out real-time and automatic compliance scanning and judgment on massive transaction requests, traditional'post interception 'is changed into'pre-prevention and control', the examination efficiency is greatly improved, the examination range is greatly expanded, and the legal risk of business operation is reduced.

Description

Technical Field

[0001] This invention relates to the field of payment technology, and more particularly to the field of payment solutions based on communication systems, specifically to a payment system and method based on intelligent identity adaptation and monitoring collaboration. Background Technology

[0002] With the popularization of mobile payment technology, electronic payment has become the main means of daily transactions for the public. Traditional payment systems mainly focus on the convenience and basic security of transactions. Their risk control systems are usually built around the anti-theft, anti-fraud, and account password verification methods of the payment account itself. For example, SMS verification codes, payment passwords, and biometric identification (such as facial recognition and fingerprint recognition) are used to confirm whether the operator is the legitimate holder of the account.

[0003] However, existing payment technologies have significant limitations, particularly in handling the compliance of transaction content and the compatibility between the payment entity and the transaction behavior, lacking effective technical control measures. Specifically: 1. Lack of in-depth compliance review: Existing systems can only blacklist accounts clearly suspected of fraud, gambling, or other illegal transactions, but cannot make real-time judgments on the legality of the goods or services being traded and their compatibility with the buyer's identity. For example, the system cannot automatically identify whether a payment is for cigarettes, alcoholic beverages, adult games, or online tipping, let alone further verify whether the buyer is a legally qualified entity (such as an adult) to consume such goods. 2. Confusion between identity verification and authorization: Current technology has completed the identity verification of "whether the operator is the account holder," but has failed to address the authorization issue of "whether the account holder is qualified to conduct this transaction." For example, if a system verifies a minor's facial recognition, it allows them to make any amount of game top-ups or tipping, ignoring the limitations of their civil capacity. This has led to numerous social problems related to irrational consumption by minors and frequent family disputes. 3. Lack of Guardianship Intervention Mechanism: After identifying potentially inappropriate transactions (such as suspected minors purchasing age-inappropriate goods), existing payment systems lack a technical mechanism to introduce a third-party guardian for real-time collaborative decision-making before the transaction is completed. Typically, disputes can only be resolved afterward through customer service appeals, a lengthy process that fails to effectively recover financial losses and incurs high social costs. 4. Insufficient Information Transmission Security: Even with a guardianship notification mechanism, simple SMS notifications pose a risk of leakage when transmitting sensitive transaction information, failing to meet the confidentiality, integrity, and non-repudiation requirements of financial-grade information transmission.

[0004] Therefore, there is an urgent need in this field for a new and smarter payment system and technology solution that can not only verify the identity of the payer, but also intelligently assess the compliance and compatibility of the transaction content with the payer's identity. Furthermore, it can introduce monitoring forces for collaborative decision-making through secure, reliable, and timely technical means before high-risk transactions occur, thereby effectively curbing non-compliant and mismatched payment behaviors at the source and filling a huge gap in existing technologies. Summary of the Invention

[0005] To address the issue that existing payment technologies primarily focus on account security, particularly preventing fraud and theft, and lack technical verification or assessment of the compliance of pre-payment orders, this invention aims to resolve the problem. It employs a dual mechanism of technical matching and human oversight to minimize losses from non-compliant payment transactions. Specifically, this invention provides a payment system and method based on intelligent identity matching and collaborative monitoring, utilizing dual verification: first, verifying the legality of the transaction itself, checking for fraud, prohibited items, etc.; second, verifying the identity compatibility between the payment account holder and the purchased goods / services. This dual verification, as a prerequisite for successful transaction, significantly reduces the probability of immediate erroneous transactions caused by inducement or fraud.

[0006] To achieve the above objectives, the technical solution adopted in this application is as follows: A payment system based on intelligent identity adaptation and monitoring collaboration, including The compliance review engine is used to receive payment requests routed through the API gateway and to determine the compliance of products by calling the product attributes in the compliance rules database. The identity authentication unit is used to read and verify the identity information of the payment account holder and perform identity verification. The initiation of the identity verification is triggered by the payment request sent by the compliance review engine. The intelligent identity matching unit matches verified account information with product attributes and executes the payment process based on the matching results: Once the match is successful, the payment risk control engine executes the payment request, updates the transaction status, records the transaction details, and stores them in the transaction details database. If the match fails, the intelligent identity adaptation unit triggers the daemon and sends a notification instruction to the encrypted message push cluster. The encrypted message push cluster sends an encrypted decision request to the guardian's mobile phone through a dual channel with WebSocket as the priority and SMS as the backup. The guardianship decision processing engine is used to receive feedback information sent by the guardian's mobile phone and send verification instructions to the payment risk control engine. The verification instructions can be selected to either execute the payment or terminate the payment. The payment risk control engine is used to execute the payment process based on the matching results and verification instructions sent by the intelligent identity adaptation unit and the monitoring decision processing engine, respectively; and The encryption machine / key management module is used to provide corresponding keys to the identity authentication unit, the encrypted message push cluster, and the monitoring decision processing engine.

[0007] The present invention also provides a payment method, implemented using the above-mentioned payment system, specifically including the following steps: Step STP100, Initiation of payment request: The user selects goods on the third-party merchant application platform through the payment terminal and initiates a payment request on the merchant platform; Step STP200, Product Compliance Review: The payment request is routed to the compliance review engine via the API gateway. The compliance review engine compares the current product code (SKU) with the compliance rule database to determine the product's compliance. If the product is compliant, proceed to step STP300; if the product is non-compliant, the payment request is rejected. An SKU is the smallest unit of inventory for a product, defined based on its specific attributes. Each unique combination of attributes constitutes a unique SKU.

[0008] Step STP300, Transaction matching judgment: The intelligent identity adaptation unit compares the current user's age information with the current product's age restriction label by calling the user account database; if they match, proceed to step STP600; if they do not match, trigger the minor payment protection process and proceed to step STP400. Step STP400, the process for protecting minors' payments, specifically includes the system displaying a strong warning window to the user indicating that the current purchase behavior is inconsistent with their age. If the user chooses to continue payment within T1 time, the system will immediately send a pre-payment notification containing transaction details to the verified guardian's mobile phone linked to the current user's account via an encrypted message push cluster, proceeding to step STP500; otherwise, proceeding to step STP700. In step STP500, the guardian makes a decision. The guardian's mobile phone decrypts the encrypted message. At the same time, after the guardian's mobile phone receives the instruction "agree to payment" within T2 time, the guardianship decision processing engine proceeds to step STP600; otherwise, it proceeds to step STP700. Among them, steps STP300 to STP500 all encrypt the message and send it through the encryption machine / key management module. Step STP600: Transaction payment, payment is made after account verification, and the transaction status and transaction details are updated and stored in the transaction details database; Step STP700: Transaction terminated.

[0009] As one of the preferred embodiments of the present invention, the encryption method of the encrypted message is to bind a key pair based on the SM2 public key to each guardian through the encryption machine / key management module. When pushing a message, a random SM4 session key is encrypted with the guardian's public key, and then the message body is encrypted with the session key.

[0010] As one of the preferred embodiments of the present invention, the method for decrypting the encrypted message is for the guardian's mobile phone / terminal to decrypt the session key using their own private key, and then decrypt the message.

[0011] As one of the preferred embodiments of the present invention, in step STP500, T2=30s-60s, the guardian's mobile phone feedback command is implemented using a dual-channel redundant push method, wherein the dual channels include: Main channel: A long-lived connection channel based on WebSocket, delivering feedback commands instantly; Backup Channel: If the WebSocket channel does not receive an ACK confirmation within T3=3-5s, the backup SMS channel will be activated immediately. A plaintext SMS message containing an encrypted link will be sent, pointing to an HTTPS page. The guardian can then make decisions and provide feedback instructions through the webpage. In the communication protocol, ACK is a signal sent by the receiver to the sender to inform the sender that "the previously sent data packet has been successfully received."

[0012] As one of the preferred embodiments of the present invention, the payment method further includes a step of signing the feedback instruction. Before sending the feedback instruction, the guardian's mobile phone uses the locally stored device private key or the private key bound to the APP account to perform SM2 signing on the feedback instruction. The guardian's decision processing engine uses the corresponding public key to verify the SM2 signature and complete the confirmation of the feedback instruction.

[0013] As one of the preferred embodiments of the present invention, the data establishment method of the compliance rules database includes the steps of accessing external data interfaces, obtaining public documents, and constructing internal data; the step of constructing internal data includes manually collecting and establishing a tag library of existing commercially available products that integrates external data and public documents, and assigning multiple tags to each product SKU, the tags including product category, age restriction, compliance attributes, and prohibited attributes.

[0014] As one of the preferred embodiments of the present invention, the transaction matching judgment described in step STP300 above specifically includes: after the payment request is received, the intelligent identity adaptation unit extracts the merchant ID, product SKU, and user ID feature information contained in the payment request and matches them with the compliance rules database. First, it matches the merchant ID with the blacklist and anti-fraud risk list in the compliance rules database. If one is matched, the transaction is blocked; otherwise, it performs a product compliance judgment, matching the product SKU with the prohibited product information in the compliance rules database. If one is matched, the transaction is blocked; otherwise, it performs an identity adaptation judgment by using the user ID to determine whether it matches the current product. If it does not match, the minor payment protection process is triggered; if it matches, the transaction is allowed.

[0015] Beneficial effects: 1. This invention, by constructing an independent compliance rules database and an intelligent review engine, transforms legal and regulatory provisions that originally relied on manual interpretation into structured rules that can be recognized and executed by machines. The system can perform real-time, automatic compliance scanning and judgment on massive transaction requests, shifting from traditional "post-event interception" to "pre-event prevention," greatly improving review efficiency and scope, and reducing legal risks in business operations.

[0016] 2. This invention's pioneering "intelligent identity matching service," building upon operator identity authentication, further achieves a deep assessment of whether "payment behavior matches identity attributes." By matching user age tags with product age restriction tags in real time, it effectively solves the industry problem of minors impersonating their guardians or using their own accounts for inappropriate consumption. This is especially crucial in the current environment of rampant tipping on live streaming platforms, which can easily lead to unnecessary financial losses.

[0017] 3. This invention designs an encrypted message cluster and a guardianship decision processing engine based on dual-channel redundant push, achieving for the first time globally the introduction of real-time remote decision-making by guardians at critical paths in the payment process. This mechanism completes the entire closed loop from warning to decision within one minute, providing minors with opportunities for education and guidance while offering guardians an efficient and convenient means of intervention, fundamentally changing the passive situation of post-event appeals, and demonstrating significant social benefits.

[0018] 4. This invention innovatively applies a combination of national cryptographic algorithms (SM2 / SM4) to achieve end-to-end encryption (E2EE) of monitoring decision messages and digital signatures of instructions. This scheme effectively ensures the high confidentiality, integrity, and non-repudiation of sensitive transaction information during transmission and processing, eliminating the risks of information leakage and instruction tampering, and laying a solid security foundation for the compliance and reliability of the entire system.

[0019] 5. This system deeply integrates corporate social responsibility into core business processes through technical means, which not only avoids family disputes and financial losses caused by irrational consumption by minors, but also significantly enhances the social image and user trust of the payment platform, creating greater commercial and social value. Attached Figure Description

[0020] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0021] Figure 1 This is a system flowchart of the present invention.

[0022] Figure 2 It is a flowchart of the transaction matching and determination between users and the products they intend to purchase. Detailed Implementation

[0023] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. The components of the embodiments of this application described and shown in the accompanying drawings can generally be arranged and designed in various different configurations.

[0024] Therefore, the following detailed description of the embodiments of this application provided in the accompanying drawings is not intended to limit the scope of the claimed application, but merely to illustrate selected embodiments of the application. All other embodiments obtained by those skilled in the art based on the embodiments of this application without inventive effort are within the scope of protection of this application.

[0025] Example 1: To better illustrate the technical content of this invention and its unique technical advantages and beneficial effects compared to existing mobile payment systems, the applicant will now provide a detailed explanation through embodiments. Before proceeding with the detailed explanation, the applicant needs to emphasize and clarify that the term "goods" in this invention does not refer solely to specific, tangible items, but rather is a general term encompassing all objects of real-world transactions. Those skilled in the art should interpret it broadly, including not only real-life goods such as pots, pans, and other necessities like food, clothing, shelter, and transportation; but also services needed for daily life, such as cleaning, installation, domestic help, car washing, shopping assistance, and education; and virtual services needed for spiritual enrichment, such as gaming, human-computer interaction, and entertainment. For ease of description and consistency, this invention refers to all goods or services that can serve as objects or subjects of transactions as "goods."

[0026] This embodiment provides a payment system based on intelligent identity adaptation and monitoring collaboration. The system topology architecture is described in [reference needed]. Figure 1 As shown, including The compliance review engine receives payment requests routed through the API gateway and performs compliance checks on products by retrieving product attributes from the compliance rules database; see also Figure 1 As shown, the payment request described in this embodiment is completely consistent with the payment requests initiated in existing transactions. Both are initiated through a user payment terminal, such as a mobile phone, after biometric verification (e.g., facial recognition, fingerprint recognition, or password verification). The user then uses the payment software app on the payment terminal to access a third-party merchant application platform and initiates a payment request for the selected product. In existing technologies, after a payment request is initiated, the current payment system only checks whether the payment account balance meets the transaction amount; it does not check whether the transaction involves illegality, violations, fraud, etc. The compliance rules database stores a large amount of tag information for prohibited, licensed, and conditionally used products. If the current payment product matches any tag in the compliance rules database, the transaction will be temporarily suspended and verified by the system.

[0027] The identity authentication unit is used to read and verify the identity information of the payment account holder and perform identity verification. The initiation of the identity verification is triggered by the payment request sent by the compliance review engine. Since the matching of goods and users meets the transaction conditions, the user's information is read from the real-name account information. For example, the account information can be used to read the current user's gender, age and other basic fields for subsequent matching.

[0028] The intelligent identity matching unit matches the verified account information with the product attributes and executes the payment process according to the matching result. There are only two matching results: pass or fail. If the current product information does not belong to the prohibited, illegal, or licensed / conditional products in the compliance rules database, the matching is successful, the payment risk control engine executes the payment request and updates the transaction status, records the transaction flow, and stores it in the transaction flow database. If a match fails, the intelligent identity adaptation unit triggers a daemon and sends a notification command to the encrypted message push cluster. The encrypted message push cluster then sends an encrypted decision request to the guardian's mobile phone via a dual-channel approach, prioritizing WebSocket and using SMS as a backup. For example, if the current product is cigarettes, alcohol, or family planning drugs / supplies, which are not within the scope of purchase for minors, and the user's age field read from the account information is 15 years old, indicating a minor, then the match will fail. To accommodate more possibilities and avoid overly stringent technical controls that could reduce usability, the system will not immediately block the transaction for products with failed matches; instead, it will automatically trigger a detection and decision-making process.

[0029] The guardianship decision processing engine receives feedback information from the guardian's mobile phone and sends verification instructions to the payment risk control engine. These instructions either execute the payment or terminate it. This module's function is to "authorize" the transaction based on the guardian's self-identification ability. For example, if a parent instructs a minor to buy alcohol for them, the parent can simply click or reply with the corresponding instruction, such as "agree" or "reject," within a specified time. The system will then process the received instruction logically. The instruction could be a simple "1" for agreement and "2" for rejection; this is not limited, as long as it effectively distinguishes between agreement and rejection. Alternatively, only an "agree" instruction could be set, and any other response, including no reply or failure to reply within the specified time, would be treated as a "rejection," terminating the transaction.

[0030] The payment risk control engine executes the payment process based on the matching results and verification instructions sent by the intelligent identity adaptation unit and the monitoring decision processing engine, respectively. Once the matching and verification are complete, the regular payment process proceeds. Here, the payment risk control engine functions similarly to the existing payment accounting unit, completing the payment and recording relevant transaction data, as well as necessary tags and information summaries. The encryption machine / key management module provides corresponding keys to the identity authentication unit, the encrypted message push cluster, and the monitoring decision processing engine. This module is essential to the system and is already present in existing technology. It primarily handles encryption during data transmission to prevent information from being stolen or tampered with. In this embodiment, the default encryption method is existing technology, which will not be described in detail.

[0031] Example 2: The present invention also provides a payment method, implemented using the payment system described in Embodiment 1, specifically including the following steps: Step STP100, Initiation of payment request: The user selects goods on the third-party merchant application platform through the payment terminal and initiates a payment request on the merchant platform; Step STP200, Product Compliance Review: The payment request is routed to the compliance review engine through the API gateway. The compliance review engine compares the current product code SKU with the compliance rules database to complete the product judgment. If the product is compliant, proceed to step STP300; if the product is not compliant, the payment request is directly rejected. In this embodiment, the data establishment method of the compliance rules database includes the steps of external data interface access, public document acquisition, and internal data construction. Among them, the data accessed by the external data interface includes all existing publicly available data, including data from official systems and third-party systems, that is not applicable or recommended for minors. The internal data construction process includes manually collecting and establishing a tag library for existing commercially available products, integrating external data and publicly available documents. Each product SKU is assigned multiple tags, including product category, age restrictions, compliance attributes, and prohibited attributes. The tag field format in the compliance rules database has various settings to match the existing product tag / attribute fields as closely as possible. To improve accuracy, different tags can be assigned weights and confidence levels, with different matching methods having different weights. For example, the confidence level for SKU matching is 100%, while the confidence level for simple keyword matching is only 70%. Depending on the confidence level falling within different threshold ranges, it is processed as either "successful match" or "unsuccessful match." It's worth noting that "match" here refers to the current product matching the product tags in the compliance rules database; a successful match indicates that the currently traded product is suspected of being a prohibited or warned product. The threshold range is manually set and not specifically limited. For example, a confidence level ≥ 80% is considered a successful match; a confidence level < 80% is considered an unsuccessful match.

[0032] Step STP300, Transaction Matching Judgment: The intelligent identity adaptation unit compares the current user's age information with the current product's age restriction label by accessing the user account database; see [link / reference]. Figure 2 As shown, if a match is found, proceed to step STP600; if no match is found, the minor payment protection process is triggered, and proceed to step STP400. In this step, the transaction matching judgment specifically includes: after the payment request enters, the intelligent identity adaptation unit extracts the merchant ID, product SKU, and user ID feature information contained in the payment request and matches them with the compliance rules database. First, it matches the merchant ID with the blacklist and anti-fraud risk list in the compliance rules database. If a match is found, the transaction is blocked; otherwise, it performs a product compliance judgment, matching the product SKU with the prohibited product information in the compliance rules database. If a match is found, the transaction is blocked; if no match is found, it is treated as a non-prohibited product, and then an identity adaptation judgment is performed using the user ID to determine if it matches the current product. If no match is found, the minor payment protection process is triggered; if a match is found, the transaction is allowed.

[0033] Step STP400, the minor payment protection process, specifically includes the system popping up a strong reminder window for the user indicating that the current purchase behavior is inconsistent with the age. If the user chooses to continue payment within T1 time, the system will immediately send a pre-payment notification containing transaction details to the verified guardian's mobile phone bound to the current user's account via an encrypted message push cluster, and proceed to step STP500; otherwise, proceed to step STP700. In this embodiment, T1 can be set according to actual needs and is not a fixed value. For example, T1 = 30s. Within 30s, the user can choose to continue payment. If the user does not choose within 30s, the system will directly exit and terminate the transaction.

[0034] Step STP500: Guardian's decision. The guardian's mobile phone decrypts the encrypted message. Simultaneously, if the guardianship decision processing engine receives a "agree to payment" instruction from the guardian's mobile phone within T2 time, it proceeds to step STP600; otherwise, it proceeds to step STP700. Steps STP300 through STP500 all encrypt the message and send it via the encryption machine / key management module. T2 in this step is customizable, used to limit the validity of the guardian's feedback instruction. This design is based on offline surveys of applicants, because transactions agreed to by the guardian are most likely those assigned by the guardian and executed by the minor child. In this case, the guardian is expected to receive push notifications at any time; therefore, the T2 setting should not be too long. After randomly interviewing 300 parents, 78% of family members believed that 60-120 seconds was appropriate. This time setting has fully considered the signal latency issue. If the feedback instruction fails, the payment request will need to be re-initiated. In this embodiment, in step STP500, T2 = 30s-60s, and the guardian's mobile phone feedback command is implemented using a dual-channel redundant push method. The dual channels include: Main channel: A long-lived connection channel based on WebSocket, delivering feedback commands instantly; Backup Channel: If the WebSocket channel does not receive an ACK confirmation within T3=3-5s, the backup SMS channel is immediately activated. A plaintext SMS message containing an encrypted link is sent, pointing to an HTTPS page. The guardian can then make decision-making and feedback instructions through the webpage. To illustrate this method more concretely, an example is provided below: The following example uses WebSocket as the primary method: Transaction alert: Your child (account name: Xiaoming) is attempting a payment transaction that may be inappropriate for their age and requires your confirmation.

[0035] Transaction details: Product: XX Game Diamond Gift Pack (648 RMB) Amount: ¥648.00 Merchant: XX Games Co., Ltd. Time: 2025-09-09 15:30:22 Please make your decision carefully! According to relevant laws and regulations, please confirm whether you have granted permission for your child's spending.

[0036] [Agree to Pay] [Reject Payment] Tip: Your decision will take effect within 1 minute.

[0037] Guardians only need to click the corresponding "Agree to Payment" or "Reject Payment" button on the interface to receive feedback. Of course, to improve system redundancy and enhance the payment experience, if WebSocket communication is ineffective (e.g., the app is offline), an SMS backup channel will be activated, and the guardian will receive a short message, as shown in the example below: [XX Payment] Important! You have an pending guardianship request for a minor's payment. Transaction details: 648 RMB recharge for "XX Game". Please click the following encrypted link immediately to view details and make a decision: https: / / abcdefg.com / hijklmn / 123456789 Security Notice: This is an encrypted link, valid for 5 minutes. Do not forward it to others. If this was not you, please ignore this message.

[0038] Clicking the link will open a secure page, similar to the app pop-up in WebSocket, which also provides "Agree" and "Reject" buttons.

[0039] Simply click the corresponding button to complete the feedback. The payment method also includes a step of signing the feedback instruction. Before sending the feedback instruction, the guardian's mobile phone uses the locally stored device private key or the private key bound to the APP account to perform an SM2 signature on the feedback instruction. The guardianship decision processing engine uses the corresponding public key to verify the SM2 signature and complete the confirmation of the feedback instruction.

[0040] Step STP600: Transaction payment, payment is made after account verification, and the transaction status and transaction details are updated and stored in the transaction details database; Step STP700: Transaction terminated.

[0041] In this embodiment, the encryption method for the encrypted message is to bind a key pair based on an SM2 public key to each guardian through the encryption machine / key management module. When pushing a message, a random SM4 session key is encrypted using the guardian's public key, and then the message body is encrypted using this session key. The decryption method for the encrypted message is to decrypt the session key using the guardian's mobile phone / terminal with their own private key, and then decrypt the message.

[0042] In this embodiment, the SM4 symmetric encryption algorithm is used to encrypt the message body of push messages, achieving efficient data encryption. Specifically, it adopts CBC mode, with a key length of 128 bits. The initialization vector (IV) is a 16-byte random number used to prevent identical plaintext blocks from being encrypted into identical ciphertext blocks, thus improving security. The IV can be transmitted along with the ciphertext. The parameters of SM4 in this embodiment are explained below.

[0043] The above description is merely a preferred embodiment of this application and is not intended to limit this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the protection scope of this application.

Claims

1. A payment system based on intelligent identity adaptation and monitoring collaboration, characterized in that: include The compliance review engine is used to receive payment requests routed through the API gateway and to determine the compliance of products by calling the product attributes in the compliance rules database. The identity authentication unit is used to read and verify the identity information of the payment account holder and perform identity verification. The initiation of the identity verification is triggered by the payment request sent by the compliance review engine. The intelligent identity matching unit matches verified account information with product attributes and executes the payment process based on the matching results: Once the match is successful, the payment risk control engine executes the payment request, updates the transaction status, records the transaction details, and stores them in the transaction details database. If the match fails, the intelligent identity adaptation unit triggers the daemon and sends a notification instruction to the encrypted message push cluster. The encrypted message push cluster sends an encrypted decision request to the guardian's mobile phone through a dual channel with WebSocket as the priority and SMS as the backup. The guardianship decision processing engine is used to receive feedback information sent by the guardian's mobile phone and send verification instructions to the payment risk control engine. The verification instructions can be selected to either execute the payment or terminate the payment. The payment risk control engine is used to execute the payment process based on the matching results and verification instructions sent by the intelligent identity adaptation unit and the monitoring decision processing engine, respectively. as well as The encryption machine / key management module is used to provide corresponding keys to the identity authentication unit, the encrypted message push cluster, and the monitoring decision processing engine.

2. A payment method, implemented using the payment system described in claim 1, characterized in that, Includes the following steps: Step STP100, Initiation of payment request: The user selects goods on the third-party merchant application platform through the payment terminal and initiates a payment request on the merchant platform; Step STP200, Product Compliance Review: The payment request is routed to the compliance review engine through the API gateway. The compliance review engine compares the current product code SKU with the compliance rule database to complete the product judgment. If the product is compliant, proceed to step STP300; if the product is not compliant, the payment request is directly rejected. Step STP300, Transaction matching judgment: The intelligent identity adaptation unit compares the current user's age information with the current product's age restriction label by calling the user account database; if they match, proceed to step STP600; if they do not match, trigger the minor payment protection process and proceed to step STP400. Step STP400, the process for protecting minors' payments, specifically includes the system displaying a strong warning window to the user indicating that the current purchase behavior is inconsistent with their age. If the user chooses to continue payment within T1 time, the system will immediately send a pre-payment notification containing transaction details to the verified guardian's mobile phone linked to the current user's account via an encrypted message push cluster, proceeding to step STP500; otherwise, proceeding to step STP700. In step STP500, the guardian makes a decision. The guardian's mobile phone decrypts the encrypted message. At the same time, after the guardian's mobile phone receives the instruction "agree to payment" within T2 time, the guardianship decision processing engine proceeds to step STP600; otherwise, it proceeds to step STP700. Among them, steps STP300 to STP500 all encrypt the message and send it through the encryption machine / key management module. Step STP600: Transaction payment, payment is made after account verification, and the transaction status and transaction details are updated and stored in the transaction details database; Step STP700: Transaction terminated.

3. The payment method according to claim 2, characterized in that, The encryption method for the encrypted message is to bind a key pair based on an SM2 public key to each guardian through the encryption machine / key management module. When pushing a message, a random SM4 session key is encrypted with the guardian's public key, and then the message body is encrypted with the session key.

4. The payment method according to claim 2, characterized in that, The method for decrypting the encrypted message is for the guardian's mobile phone / terminal to use their own private key to decrypt the session key, and then decrypt the message.

5. The payment method according to claim 2, characterized in that, In step STP500, T2 = 30s-60s, and the guardian's mobile phone feedback command is implemented using a dual-channel redundant push method. The dual channels include: Main channel: A long-lived connection channel based on WebSocket, delivering feedback commands instantly; Backup channel: If the WebSocket channel does not receive an ACK confirmation within T3=3-5s, the backup SMS channel will be activated immediately. A plaintext SMS message containing an encrypted link will be sent, which will point to an HTTPS page. The guardian can then make decision-making and feedback instructions through the web page.

6. The payment method according to claim 5, characterized in that, It also includes a step of signing the feedback instruction. Before sending the feedback instruction, the guardian's mobile phone uses the locally stored device private key or the private key bound to the APP account to perform SM2 signing on the feedback instruction. The guardian's decision processing engine uses the corresponding public key to verify the SM2 signature and complete the confirmation of the feedback instruction.

7. The payment method according to claim 2, characterized in that, The data establishment method of the compliance rules database includes the steps of accessing external data interfaces, obtaining public documents, and constructing internal data. The internal data construction step includes manually collecting and establishing a tag library of existing commercially available products that integrates external data and public documents. Each product SKU is assigned multiple tags, which include product category, age restriction, compliance attributes, and prohibited attributes.

8. The payment method according to claim 2, characterized in that, The transaction matching judgment described in step STP300 specifically includes: after a payment request is received, the intelligent identity adaptation unit extracts the merchant ID, product SKU, and user ID feature information contained in the payment request and matches them with the compliance rules database. First, it matches the merchant ID with the blacklist and anti-fraud risk list in the compliance rules database. If a match is found, the transaction is blocked. Otherwise, it performs a product compliance judgment, matching the product SKU with the prohibited product information in the compliance rules database. If a match is found, the transaction is blocked. Otherwise, it performs an identity adaptation judgment using the user ID to see if it matches the current product. If they do not match, the minor payment protection process is triggered. If they match, the transaction is allowed.

Images