Terminal payment method and device, storage medium, electronic equipment and program product

Abstract

The invention discloses a terminal payment method and device, a storage medium, electronic equipment and a program product, and relates to the field of financial science and technology, and the method comprises the steps: collecting the context information of a target payment transaction through terminal equipment, encrypting the context information through a trusted execution environment in the terminal equipment, and transmitting the encrypted context information to a payment server; performing risk assessment on the target payment transaction through the payment server according to the received context information, and determining a target authentication strategy from N authentication strategies according to a risk assessment result; the terminal device collects biological characteristic information according to the target authentication strategy, encrypts the biological characteristic information in the trusted execution environment and sends the encrypted biological characteristic information to the payment server; and carrying out identity verification on the received biological characteristic information through the payment server, and confirming that the target payment transaction is completed after the identity verification is successful. The technical problem that traditional single biological feature authentication is insufficient in security in a payment scene is solved.

Description

Technical Field

[0001] This application relates to the field of financial technology, and more specifically, to a terminal payment method, device, storage medium, electronic device, and program product. Background Technology

[0002] In terminal payment systems, the payment process primarily relies on the interaction between the payment terminal and the payment server. The payment terminal is responsible for obtaining the user's payment password or facial information, while the payment server is responsible for verifying this information. Once authentication is successful, the payment terminal completes the payment transaction. This single-factor authentication method, such as password verification or facial recognition, while achieving payment functionality to a certain extent, has significant security vulnerabilities. For example, passwords are easily forgotten or leaked, and facial recognition technology may also lead to misidentification due to factors such as image quality and lighting conditions, thus posing unnecessary risks to users.

[0003] Moreover, the limitations of existing terminal payment solutions, relying solely on biometric authentication, become even more apparent when facing complex payment scenarios. Due to the reliance on only one authentication method, the system struggles to effectively defend against fraudulent activities. For example, attackers can use technical means to forge facial images or steal passwords, thereby bypassing the authentication process and threatening users' financial security. This single authentication method not only reduces the security of the payment process but also impacts user experience and the reliability of the payment system.

[0004] There is currently no effective solution to the above problems. Summary of the Invention

[0005] This application provides a terminal payment method, device, storage medium, electronic device, and program product to at least solve the technical problem of insufficient security of traditional single biometric authentication in payment scenarios.

[0006] According to one aspect of the embodiments of this application, a terminal payment method is provided, comprising: collecting context information of a target payment transaction through a terminal device, encrypting the context information through a trusted execution environment within the terminal device, and sending it to a payment server; the payment server performing a risk assessment on the target payment transaction based on the received context information, and determining a target authentication strategy from N authentication strategies based on the risk assessment results, wherein N is an integer greater than 1, the N authentication strategies correspond to N different transaction risk levels, and the higher the transaction risk level corresponding to the authentication strategy, the more authentication methods are used simultaneously by the authentication strategy; collecting biometric information through the terminal device according to the target authentication strategy, encrypting the biometric information in the trusted execution environment, and sending it to the payment server, wherein the trusted execution environment selects the encryption method for the biometric information according to the transaction risk level corresponding to the target authentication strategy; and the payment server verifying the received biometric information, and confirming the completion of the target payment transaction upon successful verification.

[0007] Optionally, the payment server verifies the received biometric information and confirms the completion of the target payment transaction upon successful verification. This includes: when the payment server sends the target authentication policy to the terminal device, the payment server determines the information management policy corresponding to the target payment transaction based on the transaction risk level corresponding to the target authentication policy. The information management policy includes the encryption and decryption methods of the biometric information. The payment server and the terminal device pre-negotiate and determine the information management policy based on the transaction risk level of the authentication policy. If the payment server successfully decrypts the received biometric information and successfully verifies the identity based on its determined information management policy corresponding to the target payment transaction, the target payment transaction is confirmed to be completed. If the payment server fails to decrypt the received biometric information or fails to verify the identity based on its determined information management policy corresponding to the target payment transaction, the target payment transaction is rejected.

[0008] Optionally, the context information of the target payment transaction is collected through the terminal device, including: during the payment initiation stage, transaction information, payment environment information, and payment device information are collected through the terminal device. The transaction information includes the transaction object identifier, transaction amount, merchant type, and product type. The payment environment information includes the location of the transaction payment, network environment, network address, and transaction time. The payment device information includes the fingerprint information and operating system information of the payment device. The transaction information, payment environment information, and payment device information collected by the terminal device are used as the context information of the target payment transaction.

[0009] Optionally, the context information is encrypted and sent to the payment server through the trusted execution environment inside the terminal device, including: encapsulating the context information into a data packet through the terminal device; performing secure isolation of the data packet by calling the trusted execution environment inside the terminal device, and encrypting the data packet using the encryption algorithm, private key and timestamp built into the terminal device; after the trusted execution environment confirms the integrity of the encrypted data packet, sending the encrypted data packet to the payment server through a pre-established secure network connection.

[0010] Optionally, the payment server performs a risk assessment on the target payment transaction based on the received context information, and determines the target authentication strategy from N authentication strategies based on the risk assessment results. This includes: after receiving the context information, the payment server uses a risk assessment model to determine the transaction risk level of the target payment transaction. The risk assessment model is a model trained using a deep learning algorithm to assess the risk of payment transactions, which uses multi-dimensional historical transaction data, including transaction amount, geographical location, time information, and device characteristics, as training features and whether the transaction is an abnormal transaction as the training label. Based on the transaction risk level of the target payment transaction, an authentication strategy is automatically matched from the preset N authentication strategies as the target authentication strategy. This includes: when the determined transaction risk level is level i, the target authentication strategy includes at least the i-th authentication method, and the number of authentication methods gradually increases as the value of i increases, where i is an integer greater than or equal to 1 and less than or equal to N.

[0011] Optionally, based on the transaction risk level of the target payment transaction, an authentication strategy is automatically matched from the N preset authentication strategies as the target authentication strategy, including: if the transaction risk level of the target payment transaction is the Nth level among the N transaction risk levels, then the target authentication strategy must use all the preset first to Nth authentication methods.

[0012] Optionally, based on the transaction risk level of the target payment transaction, an authentication strategy is automatically matched from a set of N preset authentication strategies as the target authentication strategy. This includes: when N=3, if the transaction risk level of the target payment transaction is level 1 among the N transaction risk levels, then the target authentication strategy is an authentication strategy using the first authentication method, wherein the first authentication method is facial recognition; if the transaction risk level of the target payment transaction is level 2 among the N transaction risk levels, then the target authentication strategy is an authentication strategy using both the first and second authentication methods simultaneously, wherein the second authentication method is fingerprint recognition; if the transaction risk level of the target payment transaction is level 3 among the N transaction risk levels, then the target authentication strategy is an authentication strategy using the first, second, and third authentication methods simultaneously, wherein the third authentication method is voiceprint recognition.

[0013] Optionally, biometric information is collected by the terminal device according to the target authentication policy, and the biometric information is encrypted in a trusted execution environment before being sent to the payment server. This includes: collecting the user's biometric information in a contactless or contact manner using the biometric sensor of the terminal device according to the target authentication policy; performing liveness detection on the collected biometric information within the terminal device, wherein liveness detection is used to analyze liveness features in the biometric information using deep learning algorithms to identify non-liveness transactions during the transaction payment process; performing vector integration on the biometric information that has passed liveness detection in the trusted execution environment to obtain a composite feature template; encrypting the composite feature template and generating a payment token by combining context information and a timestamp; and sending the payment token to the payment server through the terminal device.

[0014] According to another aspect of the embodiments of this application, a terminal payment device is also provided, comprising: a context information processing unit, configured to collect context information of a target payment transaction through a terminal device, and encrypt the context information through a trusted execution environment within the terminal device before sending it to a payment server; a target authentication strategy determination unit, configured to perform a risk assessment on the target payment transaction based on the received context information through the payment server, and determine a target authentication strategy from N authentication strategies based on the risk assessment results, wherein N is an integer greater than 1, the N authentication strategies correspond to N different transaction risk levels, and the higher the transaction risk level corresponding to the authentication strategy, the more authentication methods are used simultaneously by the authentication strategy; a biometric information processing unit, configured to collect biometric information through the terminal device according to the target authentication strategy, and encrypt the biometric information in the trusted execution environment before sending it to the payment server, wherein the trusted execution environment selects the encryption method for the biometric information based on the transaction risk level corresponding to the target authentication strategy; and a target payment transaction processing unit, configured to authenticate the received biometric information through the payment server, and confirm the completion of the target payment transaction after successful authentication.

[0015] According to another aspect of the embodiments of this application, a computer-readable storage medium is also provided, which stores a computer program, wherein when the computer program is executed, the device where the computer-readable storage medium is located performs the above-described terminal payment method.

[0016] According to another aspect of the embodiments of this application, an electronic device is also provided, including one or more processors and a memory, the memory being used to store one or more programs, wherein when the one or more programs are executed by one or more processors, the one or more processors cause the one or more processors to perform the terminal payment method described above.

[0017] According to another aspect of the embodiments of this application, a computer program product is also provided, including a computer program or instructions that, when executed by a processor, implement the aforementioned terminal payment method.

[0018] In this application, the terminal payment system can collect context information of the target payment transaction through the terminal device, encrypt the context information through the trusted execution environment within the terminal device, and send it to the payment server. The payment server then performs a risk assessment on the target payment transaction based on the received context information and determines a target authentication strategy from N authentication strategies based on the risk assessment results. Here, N is an integer greater than 1, and the N authentication strategies correspond to N different transaction risk levels. The higher the transaction risk level corresponding to an authentication strategy, the more authentication methods are used simultaneously by that strategy. Next, the terminal device collects biometric information according to the target authentication strategy, encrypts the biometric information in the trusted execution environment, and sends it to the payment server. The trusted execution environment selects the encryption method for the biometric information based on the transaction risk level corresponding to the target authentication strategy. Finally, the payment server verifies the identity of the received biometric information and confirms the completion of the target payment transaction upon successful identity verification.

[0019] As described above, the terminal payment system collects context information of the target payment transaction and encrypts this information using the trusted execution environment within the terminal device before sending it to the payment server. This facilitates a comprehensive risk assessment of the payment transaction. Based on the received context information, the payment server can accurately assess the risk level of the transaction and select a target authentication strategy that matches the risk level from multiple authentication strategies. Through dynamic adjustment of the multimodal authentication strategy, the terminal payment system can flexibly select appropriate authentication methods for transactions with different risk levels. For example, for high-risk transactions, the terminal payment system can simultaneously use multiple authentication methods, such as facial recognition, fingerprint recognition, and voiceprint recognition. Multi-factor authentication significantly improves the accuracy and security of identity verification and reduces the risk of fraud.

[0020] When collecting biometric information, the terminal payment system can select an appropriate encryption method to encrypt the biometric information based on the transaction risk level corresponding to the target authentication strategy. This not only ensures the confidentiality and integrity of the biometric information during transmission but also prevents information leakage and tampering through the secure isolation of a trusted execution environment. Upon receiving the encrypted biometric information, the payment server performs identity verification and confirms the completion of the target payment transaction upon successful verification. Through an end-to-end security mechanism, security is provided at every stage from information collection and encrypted transmission to identity verification, further enhancing the overall security of the payment system. The terminal payment system not only improves payment security but also enhances the user experience, making the payment process more convenient and reliable, thus solving the technical problem of insufficient security of traditional single biometric authentication in payment scenarios. Attached Figure Description

[0021] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, illustrate exemplary embodiments and are used to explain this application, but do not constitute an undue limitation of this application. In the drawings:

[0022] Figure 1 This is a schematic diagram of an optional terminal payment method according to an embodiment of this application;

[0023] Figure 2 This is a flowchart of an optional terminal payment method according to an embodiment of this application;

[0024] Figure 3 This is a schematic diagram of an optional terminal payment device according to an embodiment of this application. Detailed Implementation

[0025] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort should fall within the scope of protection of the present application.

[0026] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0027] According to an embodiment of this application, a method embodiment of a terminal payment method is provided. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Furthermore, although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in a different order than that shown here.

[0028] According to the embodiments of this application, a terminal payment system can be used as the execution subject of the terminal payment method of this application embodiment. The system can be a software system or an embedded system combining software and hardware. Of course, the method execution subject in the embodiments of this application can also be other forms of execution subject, such as devices, equipment, etc. It should be known by those skilled in the art that this application does not particularly limit the specific form of the method execution subject.

[0029] First, the main technical terms involved in this application will be explained:

[0030] Biometrics is a technology used to identify and verify individuals by utilizing their unique physiological or behavioral characteristics.

[0031] Multimodality is used to characterize methods or systems that combine multiple types of input, modalities, or sensory channels.

[0032] Feature fusion is used to characterize the deep fusion of raw data or feature vectors of two or more features at the algorithm level to generate combined features.

[0033] Trusted execution environment is used to characterize a secure region on the processor of a terminal device that guarantees the confidentiality and integrity of internally loaded data.

[0034] Figure 1 This is a terminal payment method according to an embodiment of this application, such as... Figure 1 As shown, the method includes the following steps:

[0035] Step S101: Collect the context information of the target payment transaction through the terminal device, and encrypt the context information through the trusted execution environment inside the terminal device before sending it to the payment server.

[0036] Optionally, during the terminal payment process, the terminal payment system first needs to collect contextual information related to the target payment transaction through the terminal device. This contextual information includes, but is not limited to, basic transaction information, payment environment information, and information about the payment device itself. For example, basic transaction information may include the transaction amount, merchant type, and product category; payment environment information may include geographical location, network environment, IP address, and transaction time; and information about the payment device itself may include device fingerprint and operating system version. This contextual information provides the background and environment in which the transaction occurred, helping the terminal payment system determine the authenticity and security of the transaction. Collecting this contextual information facilitates the security and reliability of the payment process and is beneficial for subsequent risk assessment and authentication strategy selection.

[0037] Optionally, the collected context information can be sent to a trusted execution environment (TEU) within the terminal device. The TEU represents a secure execution environment, facilitating the confidentiality and integrity of data. Within the TEU, the context information is encrypted to prevent data theft or tampering during transmission. The encrypted context information is then sent to the payment server via a pre-established secure network connection, ensuring the security of the context information during transmission and facilitating risk assessment and authentication strategy selection by the payment server. In this way, communication between the terminal device and the payment server is effectively protected, thereby enhancing the security of the entire payment system.

[0038] Step S102: The payment server performs a risk assessment on the target payment transaction based on the received context information, and determines the target authentication strategy from N authentication strategies based on the risk assessment results. Here, N is an integer greater than 1, and the N authentication strategies correspond to N different transaction risk levels. The higher the transaction risk level corresponding to the authentication strategy, the more authentication methods are used simultaneously by the authentication strategy.

[0039] Optionally, after receiving the encrypted context information sent by the terminal device, the payment server can first decrypt the encrypted context information to obtain the detailed context of the payment transaction. Subsequently, the payment server can use a pre-defined risk assessment model to assess the risk of the target payment transaction. For example, the risk assessment model can be trained based on multi-dimensional historical transaction data, comprehensively considering factors such as transaction amount, geographical location, time information, and device characteristics to determine whether the current transaction is abnormal or risky. Based on the risk assessment results, the payment server will determine the risk level of the transaction; the higher the risk level, the greater the risk of the transaction.

[0040] Optionally, after determining the risk level of a transaction, the payment server can select a target authentication strategy from a set of N preset authentication strategies that matches that risk level. The N authentication strategies are designed based on different risk levels, with each strategy corresponding to a specific risk level. The design principle of the authentication strategy can be that the higher the risk level, the more authentication methods are used, and these authentication methods can be used simultaneously. This ensures that in high-risk transactions, a combination of multiple authentication methods can improve the accuracy and security of identity verification. For example, low-risk transactions may only require one authentication method, while high-risk transactions may require the simultaneous use of multiple biometric authentication methods such as facial recognition and fingerprint authentication to enhance the security of the payment process.

[0041] Step S103: The terminal device collects biometric information according to the target authentication policy, and encrypts the biometric information in a trusted execution environment before sending it to the payment server. The trusted execution environment selects the encryption method for the biometric information based on the transaction risk level corresponding to the target authentication policy.

[0042] Optionally, after determining the target authentication strategy, the terminal device can collect the user's biometric information through its built-in biometric sensors according to the specific requirements of the target authentication strategy. This biometric information may include, but is not limited to, facial features, fingerprints, or voiceprints; the specific biometric features collected depend on the risk level corresponding to the target authentication strategy. For example, for low-risk transactions, only facial information may need to be collected; while for high-risk transactions, multiple biometric features such as facial features, fingerprints, and voiceprints may need to be collected simultaneously to ensure the accuracy and security of identity verification. During the collection process, the terminal device can also perform liveness detection to prevent non-liveness attacks, thus ensuring the authenticity and validity of the collected biometric information.

[0043] Optionally, the collected biometric information can then be sent to a trusted execution environment (TEU) within the terminal device. The TEU represents a secure execution environment that ensures data confidentiality and integrity. Within the TEU, an appropriate encryption method can be selected to encrypt the biometric information based on the transaction risk level corresponding to the target authentication policy. The encrypted biometric information, combined with context information and a timestamp, generates a payment token, which is then sent to the payment server via a secure network connection. Encryption ensures the security of biometric information during transmission, preventing theft or tampering, and also provides a reliable data foundation for the payment server to perform authentication.

[0044] Step S104: The received biometric information is authenticated by the payment server, and the target payment transaction is confirmed to be completed after successful authentication.

[0045] Optionally, after receiving encrypted biometric information from the terminal device, the payment server can first decrypt the encrypted biometric information according to a preset information management strategy to ensure the integrity and confidentiality of the biometric information. The decrypted biometric information will then be compared with the user's biometric template stored in the payment server to verify the authenticity of the user's identity. By utilizing biometric recognition technology combined with contextual information, the payment server performs multi-dimensional identity verification, ensuring that only legitimate users can pass the verification. This not only improves payment security but also reduces the possibility of misidentification.

[0046] For example, if authentication is successful, the payment server will confirm the completion of the target payment transaction. This means the payment server will send a confirmation message to the terminal device and simultaneously notify the relevant financial institution to transfer and settle the funds. The payment server can also record relevant information about the payment, including contextual information, risk assessment results, and authentication results, for subsequent auditing and iterative optimization of the risk model. This not only ensures payment security but also improves the reliability of the payment system and the user experience.

[0047] This application embodiment significantly improves information security and the accuracy of user authentication during the payment process by using a dynamically adjusted multimodal authentication strategy combined with risk assessment based on contextual information.

[0048] In one optional embodiment, the payment server verifies the received biometric information and confirms the completion of the target payment transaction upon successful verification. This includes: when the payment server sends the target authentication policy to the terminal device, the payment server determines the information management policy corresponding to the target payment transaction based on the transaction risk level corresponding to the target authentication policy. The information management policy includes the encryption and decryption methods for the biometric information. The payment server and the terminal device pre-negotiate and determine the information management policy based on the transaction risk level of the authentication policy. If the payment server successfully decrypts the received biometric information and successfully verifies the identity based on its determined information management policy corresponding to the target payment transaction, the target payment transaction is confirmed as complete. If the payment server fails to decrypt the received biometric information or fails to verify the identity based on its determined information management policy corresponding to the target payment transaction, the target payment transaction is rejected.

[0049] Optionally, in a terminal payment system, when the payment server sends the target authentication policy to the terminal device, it determines the information management policy for the target payment transaction based on the transaction risk level corresponding to the target authentication policy. This information management policy covers the encryption and decryption methods for biometric information, facilitating data security and confidentiality. The payment server and the terminal device pre-negotiate rules for determining the information management policy based on the transaction risk level of the authentication policy; that is, both parties can follow a consistent security protocol during the transaction process. This not only ensures the security of biometric information during collection, transmission, and verification but also improves the security and reliability of the entire payment system.

[0050] Optionally, when the payment server decrypts and authenticates the received biometric information according to its own defined information management policy, it can decide whether to complete the target payment transaction based on the results. If decryption and authentication are successful, the payment server will confirm the completion of the target payment transaction to ensure the legality and security of the transaction. However, if decryption or authentication fails, the payment server will refuse to complete the target payment transaction to prevent unauthorized transactions. This rigorous verification effectively prevents fraudulent activities and protects the user's funds and privacy.

[0051] In one optional embodiment, the context information of the target payment transaction is collected through a terminal device, including: during the payment initiation phase, the terminal payment system can collect transaction information, payment environment information, and payment device information through the terminal device. The transaction information includes the transaction object identifier, transaction amount, merchant type, and product type; the payment environment information includes the location of the transaction payment, network environment, network address, and transaction time; and the payment device information includes the fingerprint information and operating system information of the payment device. The transaction information, payment environment information, and payment device information collected by the terminal device are then used as the context information of the target payment transaction.

[0052] Optionally, during the payment initiation phase, the terminal payment system utilizes the terminal device to collect various information related to the target payment transaction, including transaction information, payment environment information, and payment device information. Transaction information covers key elements such as the transaction object identifier, transaction amount, merchant type, and product type, helping to clarify the specific content and background of the transaction. Payment environment information may include the location of the transaction payment, network environment, network address, and transaction time, reflecting the environment and conditions under which the transaction occurred. Payment device information involves the payment device's fingerprint information and operating system information, helping to identify and verify the characteristics of the payment device. By integrating transaction information, payment environment information, and payment device information, the terminal payment system can construct a relatively comprehensive contextual information framework to facilitate subsequent risk assessment and authentication strategy selection.

[0053] This application embodiment uses collected transaction information, payment environment information, and payment device information to construct the context information of the target payment transaction. This provides a data foundation for the payment system, enabling the terminal payment system to more accurately assess the risk level of the transaction and select an appropriate authentication strategy accordingly. In this way, the terminal payment system can provide a more convenient and personalized payment experience while ensuring payment security.

[0054] In one optional embodiment, the context information is encrypted and sent to the payment server through a trusted execution environment within the terminal device. This includes: the terminal payment system can encapsulate the context information into a data packet through the terminal device; then, it securely isolates the data packet by calling the trusted execution environment within the terminal device, and encrypts the data packet using the encryption algorithm, private key, and timestamp built into the terminal device; after the trusted execution environment confirms the integrity of the encrypted data packet, it sends the encrypted data packet to the payment server through a pre-established secure network connection.

[0055] Optionally, after collecting the context information of the target payment transaction, the terminal payment system can encapsulate the context information into a data packet via the terminal device. The encapsulation process represents integrating various information from the context into a structured data format for subsequent processing and transmission. Subsequently, the terminal payment system can invoke the trusted execution environment (TEE) within the terminal device. The TEE represents a region specifically designed to ensure data security. Within the TEE, the data packet is securely isolated from other applications and data on the device, preventing any unauthorized access or tampering. Next, the terminal payment system can encrypt the data packet using the terminal device's built-in encryption algorithm, private key, and timestamp. The encryption algorithm ensures data confidentiality, the private key guarantees that only authorized parties can decrypt the data, and the timestamp provides temporal verification, ensuring data freshness and integrity.

[0056] Optionally, after the integrity of the encrypted data message is confirmed in the trusted execution environment, the terminal payment system can send the encrypted data message to the payment server through a pre-established secure network connection. The secure network connection can employ encryption protocols to protect the data during transmission, preventing theft or tampering. This ensures that the transmission of context information from the terminal device to the payment server is both secure and reliable, which is beneficial for the payment server to conduct risk assessments and select authentication strategies.

[0057] In one optional embodiment, the payment server performs a risk assessment on the target payment transaction based on the received context information, and determines the target authentication strategy from N authentication strategies based on the risk assessment results. This includes: after the payment server receives the context information, the terminal payment system can use a risk assessment model to determine the transaction risk level of the target payment transaction. The risk assessment model is a model trained by a deep learning algorithm to assess the risk of payment transactions, using multi-dimensional historical transaction data including transaction amount, geographical location, time information, and device characteristics as training features and whether the transaction is an abnormal transaction as a training label. Then, based on the transaction risk level of the target payment transaction, an authentication strategy is automatically matched from the preset N authentication strategies as the target authentication strategy. This includes: when the determined transaction risk level is level i, the target authentication strategy includes at least the i-th authentication method, and as the value of i increases, the number of authentication methods gradually increases, where i is an integer greater than or equal to 1 and less than or equal to N.

[0058] Optionally, after the payment server receives context information sent by the terminal device, the terminal payment system can initiate a risk assessment process. The terminal payment system can utilize a risk assessment model trained with a deep learning algorithm to determine the risk level of the target payment transaction. This risk assessment model can be based on multi-dimensional historical transaction data, including transaction amount, geographical location, time information, and device characteristics, which are used as training features. Simultaneously, the training label for the risk assessment model is whether the transaction is abnormal, meaning the model can identify which transaction patterns are normal and which may be fraudulent or abnormal. In this way, the risk assessment model can perform a relatively comprehensive risk assessment of the current payment transaction, facilitating the provision of an accurate risk level.

[0059] Optionally, based on the transaction risk level determined by the risk assessment model, the terminal payment system can automatically select a matching authentication strategy from a variety of preset authentication strategies as the target authentication strategy. The N authentication strategies can be designed according to different risk levels, with each strategy corresponding to a specific transaction risk level. For example, if the transaction risk level is determined to be level i, the terminal payment system can select an authentication strategy that includes at least the i-th authentication method. As the transaction risk level increases, i.e., the value of i increases, the number of authentication methods included in the authentication strategy will also increase accordingly, thus ensuring that high-risk transactions receive stricter identity verification. Dynamic matching allows for flexible adjustment of authentication strength based on the specific risk of the transaction, ensuring both payment security and user experience.

[0060] In one optional embodiment, based on the transaction risk level of the target payment transaction, an authentication strategy is automatically matched from N preset authentication strategies as the target authentication strategy, including: if the transaction risk level of the target payment transaction is the Nth level among the N transaction risk levels, then the target authentication strategy needs to use all preset first to Nth authentication methods.

[0061] Optionally, when the risk level of the target payment transaction reaches the highest level, i.e., level N, the terminal payment system will trigger the most stringent authentication policy. In this case, the terminal payment system requires the use of all preset authentication methods for user identity verification. That is, the user needs to prove their identity through multiple different biometric authentication methods, such as facial recognition, fingerprints, and voiceprints. Multimodal authentication ensures that in high-risk transactions, only legitimate users who have undergone multiple verifications can complete the payment operation. In this way, the terminal payment system can maximize payment security and prevent fraudulent activities.

[0062] For example, when the transaction risk level is N, the target authentication strategy can require the user to sequentially pass all preset authentication methods. Each authentication method corresponds to a specific biometric feature, and these biometric features are independent of each other and difficult to forge simultaneously. By using all preset authentication methods from the first to the Nth, the terminal payment system can verify the user's identity from multiple perspectives, thereby facilitating the security and reliability of the payment process. This comprehensive authentication strategy not only improves payment security but also provides users with a more reliable and trustworthy payment experience.

[0063] In one optional embodiment, based on the transaction risk level of the target payment transaction, an authentication strategy is automatically matched from N preset authentication strategies as the target authentication strategy. This includes: when N=3, if the transaction risk level of the target payment transaction is level 1 among the N transaction risk levels, then the target authentication strategy is an authentication strategy using the first authentication method, wherein the first authentication method is facial recognition; if the transaction risk level of the target payment transaction is level 2 among the N transaction risk levels, then the target authentication strategy is an authentication strategy simultaneously using the first and second authentication methods, wherein the second authentication method is fingerprint authentication; if the transaction risk level of the target payment transaction is level 3 among the N transaction risk levels, then the target authentication strategy is an authentication strategy simultaneously using the first, second, and third authentication methods, wherein the third authentication method is voiceprint authentication.

[0064] Optionally, in the terminal payment system, when the preset number of authentication strategies is 3, the terminal payment system can select the corresponding authentication strategy based on the risk level of the target payment transaction. If the risk level of the transaction is Level 1, i.e., the lowest risk level, the target authentication strategy will only use the first authentication method, i.e., facial recognition. Facial recognition is a biometric technology based on user facial features. It captures the user's facial image through the terminal device's camera and compares it with the facial template stored in the terminal payment system to verify the user's identity. This single authentication method is suitable for low-risk transaction scenarios, ensuring both payment convenience and a certain level of security.

[0065] Optionally, if the transaction's risk level is Level 2, the target authentication strategy will simultaneously use both the first and second authentication methods. The first authentication method is facial recognition, and the second is fingerprint authentication. Fingerprint authentication is a biometric technology based on a user's fingerprint characteristics. It collects the user's fingerprint information through the fingerprint sensor of the terminal device and compares it with the fingerprint template stored in the terminal payment system. Combining facial recognition and fingerprint authentication effectively improves the accuracy and security of identity verification, making it suitable for medium-risk transaction scenarios. This multimodal authentication method better prevents fraudulent activities and protects users' funds.

[0066] Optionally, if the transaction's risk level is Level 3, the highest risk level, the target authentication strategy will simultaneously use the first, second, and third authentication methods. The first authentication method is facial recognition, the second is fingerprint authentication, and the third is voiceprint authentication. Voiceprint authentication is a biometric technology based on a user's voice characteristics. It collects the user's voice information through the terminal device's microphone and compares it with a template stored in the terminal payment system. This triple authentication provides the highest level of security protection and is suitable for high-risk transaction scenarios. By combining three different biometric authentication methods, the terminal payment system can verify the user's identity from multiple perspectives, facilitating the security and reliability of the payment process.

[0067] In one optional embodiment, biometric information is collected by a terminal device according to a target authentication policy, and then encrypted in a trusted execution environment before being sent to a payment server. This includes: the terminal payment system collecting user biometric information via the terminal device's biometric sensors in a contactless or contact manner according to the target authentication policy; then performing liveness detection on the collected biometric information within the terminal device, wherein liveness detection is used to analyze liveness features in the biometric information using deep learning algorithms to identify non-liveness transactions during the payment process; then, in the trusted execution environment, vector integration is performed on the biometric information obtained through liveness detection to obtain a composite feature template; the composite feature template is then encrypted, and combined with context information and a timestamp to generate a payment token; finally, the payment token is sent to the payment server via the terminal device.

[0068] Optionally, the terminal payment system can collect users' biometric information using biometric sensors on the terminal device, according to a target authentication strategy. These biometric sensors can acquire biometric data in contactless or contactless methods; for example, contactless methods could be facial recognition, and contactless methods could be fingerprint recognition. After collection, the terminal payment system can perform liveness detection on this biometric information within the terminal device. Liveness detection uses deep learning algorithms to analyze liveness features in the biometrics to identify whether non-live transactions exist during the payment process, such as preventing fraud using photos or stencils. In this way, the terminal payment system can easily ensure that the collected biometric information comes from genuine users, thereby improving payment security.

[0069] Optionally, the biometric information obtained through liveness detection can then be vector-integrated within a Trusted Execution Environment (TEE) to generate a composite feature template. The TEE provides a secure processing space, facilitating the confidentiality and integrity of the data. The generated composite feature template is encrypted and combined with contextual information and a timestamp to generate a payment token. This payment token contains all the necessary information for authentication and transaction processing on the payment server. Finally, the terminal device sends the encrypted payment token to the payment server, completing the authentication step in the payment process. This not only ensures the authenticity of the user's identity but also protects the user's privacy and the security of the transaction through encryption and secure transmission mechanisms.

[0070] See Figure 2For example, when a user initiates a payment on a terminal device, the terminal payment system collects the context information of the current transaction, including transaction information, environment information, and device information. The terminal payment system can send this context information to the terminal's internal trusted execution environment, which encrypts the context information before sending it to the payment server. The payment server assesses the payment risk based on preset rules and a risk model, generates an authentication policy based on the assessment results, and distributes the authentication policy to the terminal device. After the authentication policy is distributed, it needs to be judged before execution. There are three types of authentication policies, as follows: low-risk authentication is facial recognition; medium-risk authentication is a fusion of facial recognition and fingerprint recognition; and high-risk authentication is a fusion of facial recognition, fingerprint recognition, and voiceprint recognition. The user follows the prompts on the terminal device to authenticate. When the authentication policy is low-risk, the user needs to have their face captured; when the authentication policy is medium-risk, the user needs to have their face captured first, then their fingerprint captured; and when the authentication policy is high-risk, the user needs to have their face captured first, then their fingerprint captured, and finally their voiceprint captured.

[0071] The terminal collects user authentication information. During face capture, the user is prompted to look directly at the screen for liveness detection; during fingerprint capture, the user is prompted to position their finger for liveness fingerprint detection; during voiceprint capture, the user is prompted to say random numbers and words for liveness voiceprint detection. The terminal sends user information to its internal trusted execution environment (TEE), which extracts face, fingerprint, and voiceprint feature templates. The TEE generates a payment token and sends it to the payment server. When the authentication policy is low-risk, the TEE uses an asymmetric encryption algorithm to sign the face feature template, context information, and timestamp using the device's private key to generate a secure payment token. When the authentication policy is medium-risk or high-risk, the TEE executes a feature-level fusion algorithm to generate a fused feature template using a small neural network, and then signs the fused feature template, context information, and timestamp using the device's private key to generate a secure payment token.

[0072] The payment server authenticates user information, verifying the payment token signature via the device's public key. It compares the user's facial feature template or fused feature template against a biometric database. The payment server returns the authentication result to the terminal, which displays whether the payment was successful or failed, indicating the payment is complete. The payment server anonymizes the transaction's context information, risk assessment results, and authentication results, using these as new training samples for risk model iteration.

[0073] This application's embodiments employ a multimodal authentication approach that integrates multiple biometric technologies to improve the accuracy and security of identification. When multiple technologies are used in combination, the shortcomings of one technology can be compensated for by the advantages of another, thereby improving the overall accuracy of the system. Multiple biometric authentication methods can more effectively prevent spoofing attacks, and the difficulty of forging multiple biometric features is greater, enhancing authentication security.

[0074] See Figure 3 According to another aspect of the embodiments of this application, a terminal payment device is also provided, including a context information processing unit 301, a target authentication strategy determination unit 302, a biometric information processing unit 303, and a target payment transaction processing unit 304.

[0075] The system includes the following components: a context information processing unit 301, which collects context information of the target payment transaction through a terminal device and encrypts the context information in a trusted execution environment within the terminal device before sending it to the payment server; a target authentication strategy determination unit 302, which performs a risk assessment on the target payment transaction based on the received context information through the payment server and determines the target authentication strategy from N authentication strategies based on the risk assessment results, where N is an integer greater than 1, and the N authentication strategies correspond to N different transaction risk levels, with the higher the transaction risk level of the authentication strategy, the more authentication methods are used simultaneously by that authentication strategy; a biometric information processing unit 303, which collects biometric information through the terminal device according to the target authentication strategy and encrypts the biometric information in a trusted execution environment before sending it to the payment server, where the trusted execution environment selects the encryption method for the biometric information based on the transaction risk level corresponding to the target authentication strategy; and a target payment transaction processing unit 304, which authenticates the received biometric information through the payment server and confirms the completion of the target payment transaction upon successful authentication.

[0076] Optionally, the target payment transaction processing unit 304 includes: a management strategy determination subunit, used to determine the information management strategy corresponding to the target payment transaction based on the transaction risk level corresponding to the target authentication strategy when the payment server sends the target authentication strategy to the terminal device, wherein the information management strategy includes the encryption method and decryption method of biometric information, wherein the payment server and the terminal device pre-negotiate and determine the information management strategy based on the transaction risk level of the authentication strategy; and a successful verification processing subunit, used to confirm the completion of the target payment transaction when the payment server successfully decrypts the received biometric information and successfully verifies the identity based on its own determined information management strategy corresponding to the target payment transaction.

[0077] The verification failure handling subunit is used to refuse to complete the target payment transaction if the payment server fails to decrypt the received biometric information or fails to authenticate the information according to its own information management strategy corresponding to the target payment transaction.

[0078] Optionally, the context information processing unit 301 includes: an information collection subunit, used to collect transaction information, payment environment information, and payment device information through the terminal device during the payment initiation stage, wherein the transaction information includes the transaction object identifier, transaction amount, merchant type, and product type; the payment environment information includes the location of the transaction payment location, network environment, network address, and transaction time; and the payment device information includes the fingerprint information and operating system information of the payment device; and a context information determination subunit, used to use the transaction information, payment environment information, and payment device information collected by the terminal device as the context information of the target payment transaction.

[0079] Optionally, the context information processing unit 301 includes: an information encapsulation subunit, used to encapsulate context information into a data packet through the terminal device; an encryption processing subunit, used to securely isolate the data packet by calling the trusted execution environment inside the terminal device, and encrypt the data packet using the encryption algorithm, private key, and timestamp built into the terminal device; and a packet sending subunit, used to send the encrypted data packet to the payment server through a pre-established secure network connection after the trusted execution environment confirms the integrity of the encrypted data packet.

[0080] Optionally, the target authentication strategy determination unit 302 includes: a risk level determination subunit, used to determine the transaction risk level of the target payment transaction using a risk assessment model after the payment server receives the context information. The risk assessment model is a model trained by a deep learning algorithm to assess the risk of payment transactions, using multi-dimensional historical transaction data including transaction amount, geographical location, time information, and device characteristics as training features and whether the transaction is an abnormal transaction as the training label; and an authentication strategy matching subunit, used to automatically match one authentication strategy as the target authentication strategy from N preset authentication strategies according to the transaction risk level of the target payment transaction. This includes: when the determined transaction risk level is level i, the target authentication strategy includes at least the i-th authentication method, and the number of authentication methods gradually increases as the value of i increases, where i is an integer greater than or equal to 1 and less than or equal to N.

[0081] Optionally, the authentication strategy matching subunit includes: a top-level processing module, which is used to ensure that if the transaction risk level of the target payment transaction is level N out of N transaction risk levels, the target authentication strategy must use all preset authentication methods from the first to the Nth.

[0082] Optionally, the authentication strategy matching subunit includes: a first-level processing module, configured to, when N=3, if the transaction risk level of the target payment transaction is level 1 among N transaction risk levels, then the target authentication strategy is an authentication strategy using the first authentication method, wherein the first authentication method is facial recognition; a second-level processing module, configured to, if the transaction risk level of the target payment transaction is level 2 among N transaction risk levels, then the target authentication strategy is an authentication strategy using both the first and second authentication methods simultaneously, wherein the second authentication method is fingerprint authentication; and a third-level processing module, configured to, if the transaction risk level of the target payment transaction is level 3 among N transaction risk levels, then the target authentication strategy is an authentication strategy using the first, second, and third authentication methods simultaneously, wherein the third authentication method is voiceprint authentication.

[0083] Optionally, the biometric information processing unit 303 includes: a biometric acquisition subunit, used to acquire the user's biometric information in a non-contact or contact manner through the biometric sensor of the terminal device according to the target authentication strategy; a liveness detection subunit, used to perform liveness detection on the acquired biometric information within the terminal device, wherein the liveness detection is used to analyze the liveness features in the biometric information using a deep learning algorithm to identify non-liveness transactions in the transaction payment process; a vector integration subunit, used to perform vector integration on the biometric information that has passed the liveness detection in a trusted execution environment to obtain a composite feature template; a token generation subunit, used to encrypt the composite feature template and generate a payment token by combining context information and a timestamp; and a token sending subunit, used to send the payment token to the payment server through the terminal device.

[0084] According to another aspect of the embodiments of this application, a computer-readable storage medium is also provided, which stores a computer program, wherein when the computer program is executed, the device where the computer-readable storage medium is located performs the above-described terminal payment method.

[0085] According to another aspect of the embodiments of this application, an electronic device is also provided, including one or more processors and a memory, the memory being used to store one or more programs, wherein when the one or more programs are executed by one or more processors, the one or more processors cause the one or more processors to perform the terminal payment method described above.

[0086] According to another aspect of the embodiments of this application, a computer program product is also provided, including a computer program or instructions that, when executed by a processor, implement the aforementioned terminal payment method.

[0087] The sequence numbers of the embodiments in this application are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0088] In the above embodiments of this application, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0089] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. The device embodiments described above are merely illustrative; for example, the division of units can be a logical functional division, and in actual implementation, there may be other division methods. For instance, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the displayed or discussed mutual coupling, direct coupling, or communication connection may be through some interfaces; the indirect coupling or communication connection between units or modules may be electrical or other forms.

[0090] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0091] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0092] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as a USB flash drive, read-only memory (ROM), random access memory (RAM), portable hard drive, magnetic disk, or optical disk.

[0093] The above description is only a preferred embodiment of this application. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the principle of this application, and these improvements and modifications should also be considered within the scope of protection of this application.

Claims

1. A terminal payment method, characterized in that, include: The context information of the target payment transaction is collected through the terminal device, and the context information is encrypted and sent to the payment server through the trusted execution environment inside the terminal device. The payment server performs a risk assessment on the target payment transaction based on the received context information, and determines the target authentication strategy from N authentication strategies based on the risk assessment results, where N is an integer greater than 1. The N authentication strategies correspond to N different transaction risk levels, and the higher the transaction risk level corresponding to the authentication strategy, the more authentication methods are used simultaneously by the authentication strategy. The terminal device collects biometric information according to the target authentication policy, and then encrypts the biometric information in the trusted execution environment before sending it to the payment server. The trusted execution environment selects the encryption method for the biometric information based on the transaction risk level corresponding to the target authentication policy. The payment server verifies the received biometric information and confirms the completion of the target payment transaction upon successful verification.

2. The terminal payment method according to claim 1, characterized in that, The payment server verifies the received biometric information and confirms the completion of the target payment transaction upon successful verification, including: When the payment server sends the target authentication policy to the terminal device, the payment server determines the information management policy corresponding to the target payment transaction based on the transaction risk level corresponding to the target authentication policy. The information management policy includes the encryption and decryption methods of biometric information. The payment server and the terminal device pre-negotiate and determine the information management policy based on the transaction risk level of the authentication policy. If the payment server successfully decrypts the received biometric information and successfully authenticates it according to its own information management strategy corresponding to the target payment transaction, the target payment transaction is confirmed to be completed. If the payment server fails to decrypt or authenticate the received biometric information according to its own information management strategy corresponding to the target payment transaction, it will refuse to complete the target payment transaction.

3. The terminal payment method according to claim 1, characterized in that, Collect contextual information about the target payment transaction through the terminal device, including: During the payment initiation phase, transaction information, payment environment information, and payment device information are collected through the terminal device. The transaction information includes the transaction object identifier, transaction amount, merchant type, and product type. The payment environment information includes the location of the transaction payment, network environment, network address, and transaction time. The payment device information includes the fingerprint information and operating system information of the payment device. The transaction information, payment environment information, and payment device information collected by the terminal device are used as the context information of the target payment transaction.

4. The terminal payment method according to claim 1, characterized in that, The context information is encrypted and sent to the payment server through the trusted execution environment within the terminal device, including: The terminal device encapsulates the context information into a data packet. The data packets are securely isolated by invoking the trusted execution environment within the terminal device, and the data packets are encrypted using the encryption algorithm, private key, and timestamp built into the terminal device. After the trusted execution environment confirms the integrity of the encrypted data packet, the encrypted data packet is sent to the payment server through a pre-established secure network connection.

5. The terminal payment method according to claim 1, characterized in that, The payment server performs a risk assessment on the target payment transaction based on the received context information, and determines the target authentication strategy from N authentication strategies based on the risk assessment results, including: After receiving the context information, the payment server uses a risk assessment model to determine the transaction risk level of the target payment transaction. The risk assessment model is a model trained by a deep learning algorithm to assess the risk of payment transactions, which uses multi-dimensional historical transaction data, including transaction amount, geographical location, time information, and device characteristics, as training features and whether the transaction is an abnormal transaction as a training label. Based on the transaction risk level of the target payment transaction, an authentication strategy is automatically matched from N preset authentication strategies as the target authentication strategy, including: when the determined transaction risk level is level i, the target authentication strategy includes at least the i-th authentication method, and as the value of i increases, the number of authentication methods gradually increases, where i is an integer greater than or equal to 1 and less than or equal to N.

6. The terminal payment method according to claim 5, characterized in that, Based on the transaction risk level of the target payment transaction, an authentication strategy is automatically matched from N preset authentication strategies as the target authentication strategy, including: If the transaction risk level of the target payment transaction is level N out of N transaction risk levels, then the target authentication strategy must use all preset authentication methods from the first to the Nth.

7. The terminal payment method according to claim 5, characterized in that, Based on the transaction risk level of the target payment transaction, an authentication strategy is automatically matched from N preset authentication strategies as the target authentication strategy, including: When N=3, if the transaction risk level of the target payment transaction is the first level among the N transaction risk levels, then the target authentication strategy is the authentication strategy using the first authentication method, wherein the first authentication method is face authentication. If the transaction risk level of the target payment transaction is the second level among N transaction risk levels, then the target authentication strategy is an authentication strategy that uses the first authentication method and the second authentication method simultaneously, wherein the second authentication method is fingerprint authentication. If the transaction risk level of the target payment transaction is level 3 out of N transaction risk levels, then the target authentication strategy is an authentication strategy that simultaneously uses the first authentication method, the second authentication method, and the third authentication method, wherein the third authentication method is voiceprint authentication.

8. The terminal payment method according to claim 1, characterized in that, The process includes: collecting biometric information through the terminal device according to the target authentication policy, encrypting the biometric information in the trusted execution environment, and sending it to the payment server; According to the target authentication strategy, the user's biometric information is collected in a non-contact or contact manner through the biometric sensor of the terminal device. The terminal device performs liveness detection on the collected biometric information. The liveness detection is used to analyze the liveness features in the biometric information using a deep learning algorithm to identify non-live transactions during the transaction payment process. In a trusted execution environment, the biometric information obtained through the liveness detection is vector-integrated to obtain a composite feature template; The composite feature template is encrypted, and a payment token is generated by combining the context information and the timestamp. The payment token is sent to the payment server via the terminal device.

9. A terminal payment device, characterized in that, include: The context information processing unit is used to collect the context information of the target payment transaction through the terminal device, and encrypt the context information through the trusted execution environment inside the terminal device before sending it to the payment server. The target authentication strategy determination unit is used to perform risk assessment on the target payment transaction by the payment server based on the received context information, and determine the target authentication strategy from N authentication strategies based on the risk assessment results, where N is an integer greater than 1, the N authentication strategies correspond to N different transaction risk levels, and the higher the transaction risk level corresponding to the authentication strategy, the more authentication methods are used simultaneously by the authentication strategy. A biometric information processing unit is used to collect biometric information through the terminal device according to the target authentication policy, and encrypt the biometric information in the trusted execution environment before sending it to the payment server. The trusted execution environment selects the encryption method for the biometric information according to the transaction risk level corresponding to the target authentication policy. The target payment transaction processing unit is used to authenticate the received biometric information through the payment server, and confirm the completion of the target payment transaction after successful authentication.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program, wherein when the computer program is executed, the device on which the computer-readable storage medium is located performs the terminal payment method according to any one of claims 1 to 8.

11. An electronic device, characterized in that, It includes one or more processors and a memory, the memory being used to store one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors cause the one or more processors to perform the terminal payment method according to any one of claims 1 to 8.

12. A computer program product, characterized in that, It includes a computer program or instructions that, when executed by a processor, implement the terminal payment method of any one of claims 1 to 8.

Images