Payment password verification system and method

Abstract

The invention discloses a payment password verification system and method, and relates to the field of financial payment security, and the system comprises a database server which is used for storing verification data; at least one verification machine which is internally provided with at least one pluggable chip slot, and each pluggable chip slot is matched with a payment password verification chip; the verification machine is used for obtaining corresponding verification data from the database server after receiving payment verification request data, and verifying whether the payment verification request data is legal based on the payment password verification chip. The problem that payment password verification cannot be realized with low customization cost and low maintenance difficulty in the prior art is solved.

Description

Technical Field

[0001] This invention relates to the field of financial payment security technology, and in particular to a payment password verification system and method. Background Technology

[0002] In the financial payment sector, payment password verification machines are crucial devices for ensuring the legitimacy of payment transactions. Their core function is to verify the matching of payment passwords with business information, directly impacting bank fund security and transaction efficiency. Currently, most payment password verification machines used by banks adopt a PCIe built-in verification card architecture, integrating the verification module into the PCIe slot of a server motherboard or dedicated hardware, forming a deeply integrated "server-verification module" implementation model.

[0003] While this model can maintain a certain degree of adaptability in high-concurrency transaction scenarios, it has significant technical drawbacks: First, the customization cost is high, requiring customized motherboards and hardware for the characteristics of the verification module, with a development cycle of 3-6 months. It is also incompatible with ordinary PCs or standard servers, necessitating the purchase of dedicated hardware and increasing equipment investment. Second, the maintenance complexity and cost are both high, as the verification chip is integrated into the verification card. A single chip failure requires the replacement of the entire verification card, increasing maintenance costs and affecting business continuity. Third, scalability is limited, constrained by the number of PCIe slots on the server, making it difficult to increase the number of verification modules. This makes it unable to meet the large-scale deployment needs of the expanding banking business and is gradually becoming unsuitable for the current diversified and large-scale payment business scenarios of banks.

[0004] Therefore, there is an urgent need for a payment password verification system that can achieve low customization costs and low maintenance difficulty. Summary of the Invention

[0005] In view of this, the present invention proposes a payment password verification system and method that can achieve payment password verification with low customization cost and low maintenance difficulty.

[0006] To achieve the above objectives, the present invention provides the following technical solution: A payment password verification system, comprising: Database server, used to store verification data; At least one verification machine has at least one pluggable chip slot inside, and each pluggable chip slot is adapted to a payment password verification chip; The verification machine is used to receive payment verification request data, obtain corresponding verification data from the database server, and verify the legality of the payment verification request data based on the payment password verification chip.

[0007] Based on the above technical solution, the present invention can be further improved as follows: Optionally, the payment password verification system further includes a corporate terminal and a payment password device; The corporate terminal is used to obtain business information; The payment password generator is connected to the corporate terminal and is used to receive business information from the corporate terminal and generate a payment password for the business information based on a built-in algorithm. The corporate terminal generates payment verification request data based on a one-to-one correspondence of payment password and business information.

[0008] Optionally, the payment password verification system also includes a bank host; The bank host is used to obtain the verification result output by the verification machine and the account status corresponding to the payment verification request data, and decide whether to execute the transaction based on the verification result and the account status.

[0009] Optionally, the payment password verification system further includes a management machine, on which the payment password background verification management software is deployed; The management machine is used to monitor the operating status of the database server and the verification machine, and to record and store the verification logs.

[0010] Optionally, the verification machine has a rack-mount structure.

[0011] Optionally, the payment password verification chip can be independently plugged in and replaced without shutting down the verification machine, and the replacement process does not affect the normal operation of other payment password verification chips.

[0012] Optionally, multiple verification machines form a cluster, and the cluster is configured with a load balancing module; The load balancing module is used to dynamically allocate the payment verification request data according to the real-time load status of each verification machine and each payment password verification chip.

[0013] A payment password verification method includes: During a transaction, the verification machine receives payment verification request data, retrieves the corresponding verification data from the database server, and verifies the legality of the payment verification request data based on the payment password verification chip.

[0014] An electronic device includes a memory, a processor, and a computer program stored in the memory and running on the processor, wherein the processor executes the computer program to implement the steps of the method described herein.

[0015] A non-transitory computer-readable storage medium having a computer program stored thereon, the computer program implementing the steps of the method when executed by a processor.

[0016] The present invention has the following advantages: The payment password verification system in this invention adopts a pluggable chip design, allowing for independent replacement of a single faulty chip, thus reducing maintenance costs and the risk of business interruption. Furthermore, verification data is centrally stored on a database server, avoiding the storage of core data on the verification machine itself. This enhances data security and achieves hardware-software decoupling, eliminating the need for dedicated hardware and reducing equipment customization and deployment costs. Attached Figure Description

[0017] For illustrative purposes and not limiting, the present invention will now be described in conjunction with embodiments and accompanying drawings, wherein: Figure 1 A first schematic diagram showing the main components of the payment password verification system in an embodiment of the present invention; Figure 2 This is a flowchart illustrating the payment password verification method in an embodiment of the present invention. Figure 3 A second schematic diagram showing the main components of the payment password verification system in an embodiment of the present invention; Figure 4 This is a software architecture diagram of the payment password verification system in an embodiment of the present invention; Figure 5 This is a schematic diagram of the physical structure of the electronic device provided by the present invention. Detailed Implementation

[0018] To enable those skilled in the art to better understand the present invention, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of the present invention, and not all of them. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0019] It should be noted that the terms "first," "second," etc., in the specification and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be used interchangeably where appropriate for the embodiments of the invention described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0020] It should be noted that, where there is no conflict, the embodiments and features of the present invention can be combined with each other. The embodiments of the present invention will now be described in detail with reference to the accompanying drawings.

[0021] The payment password verification system is a system used by banks to verify the relevant elements of payment vouchers and payment passwords to determine the authenticity of the payment passwords. The entire payment password verification system mainly consists of front-end payment password issuance management software, back-end verification management software, and related hardware equipment.

[0022] Figure 1 This is a schematic diagram illustrating the main components of the payment password verification system in an embodiment of the present invention. Figure 1 As shown, the payment password verification system 1 provided in this embodiment of the invention includes a database server 10 and a verification machine 20.

[0023] Database server 10 is used to store verification data; At least one verification machine 20 is provided, with at least one pluggable chip slot inside, each pluggable chip slot being adapted to one payment password verification chip; the verification machine 20 has a rack-mount structure. Multiple verification machines 20 form a cluster, and the cluster is configured with a load balancing module; the load balancing module is used to dynamically distribute payment verification request data according to the real-time load status of each verification machine and each payment password verification chip.

[0024] Rack-mounted payment password verification machines represent a loosely coupled and highly available verification machine implementation in the field of dedicated verification systems for electronic payment password devices. Internally, the verification machine employs an MCU architecture, deeply integrating the verification machine's operating module and the communication module with the verification system software. It utilizes a pluggable chip (SSX10-A chip), supporting the replacement of specified chips and expansion chips. It features low coupling, high availability, easy maintenance, low cost, and flexible deployment.

[0025] The verification machine 20 receives payment verification request data, retrieves the corresponding verification data from the database server, and verifies the legality of the payment verification request data based on the payment password verification chip.

[0026] The payment password verification system's database server and rack-mounted verification machine are relatively independent, which better meets the bank's data governance and management requirements, while also enabling efficient payment password verification operations. Connected via the bank's communication bus, it also offers significant advantages in terms of security and scalability.

[0027] Figure 4 This is a software architecture diagram of the payment password verification system of the present invention, as shown below. Figure 4 As shown, the platform software adopts a multi-layered architecture with layered management and clear, unambiguous interfaces between layers. It utilizes customized, engineered software modules to facilitate verification of the machine architecture. Hardware layer: It adopts a rack-mount server form factor and integrates multiple SSX10-A verification chips (plug and play), supporting dynamic expansion.

[0028] Software layer: Runs independent verification system software, and monitors its running status through a web interface.

[0029] Database layer: The bank's master key and verification data are stored in an independent database, which can be dynamically loaded into the verification machine.

[0030] Communication Layer: Enables data exchange between the verification machine and the bank system via TCP / HTTP protocol, supporting virtual machine ID binding to payment password generators. Facilitates secondary development and maintenance.

[0031] Figure 3 This is a second schematic diagram illustrating the main components of the payment password verification system in an embodiment of the present invention. (See diagram below.) Figure 3 As shown, the payment password verification system provided in this embodiment of the invention also includes a corporate terminal, a payment password generator, a bank host, and a management unit.

[0032] The corporate terminal is used to obtain business information; The payment password generator is connected to the corporate terminal to receive business information from the corporate terminal and generate a payment password for the business information based on a built-in algorithm. The payment password generator is a special tool certified by the People's Bank of China and the State Cryptography Administration. It uses advanced data encryption technology and allows depositors to generate payment passwords independently based on relevant elements on bills or settlement documents.

[0033] A serial cable is used to connect the payment password generator to the bank's verification system via serial communication at one end, and to the payment password generator itself at the other end for data communication. This achieves communication support between the payment password generator and the payment password verification system without increasing the bank's software and hardware development costs.

[0034] The corporate terminal generates payment verification request data based on the one-to-one corresponding payment password and business information.

[0035] The bank's mainframe is used to obtain the verification results output by the verification machine and the account status corresponding to the payment verification request data, and decides whether to execute the transaction based on the verification results and account status.

[0036] Deploy the payment password backend verification and management software on the management machine; The management machine is used to monitor the operating status of the database server and the verification machine, and to record and store the verification logs.

[0037] The payment password verification system of this invention stores the bank's master key in the bank's database. The verification machine dynamically loads the key via API, avoiding hard-coding the key and reducing security risks. It supports key version upgrades and dynamic switching to adapt to changing business needs. Each SSX10-A chip in the verification machine operates independently, supporting parallel processing of payment password verification tasks and improving overall throughput. The verification chips can be flexibly replaced or expanded without downtime maintenance, reducing operational complexity. It supports collaborative work among multiple verification machines, dynamically allocating transaction tasks through a load balancing algorithm to ensure stability in high-concurrency scenarios. The payment password verification system can self-check the status of each verification chip in the verification machine and automatically switch to skip faulty chips during payment password verification, ensuring service continuity and stability.

[0038] Figure 2 This is a flowchart illustrating the payment password verification method in an embodiment of the present invention, as shown below. Figure 2 As shown, the payment password verification method provided in this embodiment of the invention includes the following steps S101 to S102.

[0039] S101, During a transaction, the verification machine receives payment verification request data.

[0040] S102, obtain the corresponding verification data from the database server based on the payment verification request data, and verify the legality of the payment verification request data based on the payment password verification chip.

[0041] Figure 5 This is a schematic diagram of the physical structure of an electronic device provided in an embodiment of the present invention, such as... Figure 5 As shown, the electronic device 30 includes: a processor 301, a memory 302, and a bus 303; The processor 301 and the memory 302 communicate with each other via the bus 303. The processor 301 is used to call program instructions in the memory 302 to execute the methods provided in the above-described method embodiments, and to execute the methods provided in the embodiments of the present invention.

[0042] This embodiment provides a non-transitory computer-readable storage medium that stores computer instructions, which cause a computer to execute the method provided in this embodiment of the invention.

[0043] Those skilled in the art will understand that all or part of the steps of the above method embodiments can be implemented by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, it performs the steps of the above method embodiments. The aforementioned storage medium includes various storage media capable of storing program code, such as ROM, RAM, magnetic disk, or optical disk.

[0044] The specific embodiments described above do not constitute a limitation on the scope of protection of this invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can occur depending on design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this invention should be included within the scope of protection of this invention.

Claims

1. A payment password verification system, characterized in that, include: Database server, used to store verification data; At least one verification machine has at least one pluggable chip slot inside, and each pluggable chip slot is adapted to a payment password verification chip; The verification machine is used to receive payment verification request data, obtain corresponding verification data from the database server, and verify the legality of the payment verification request data based on the payment password verification chip.

2. The payment password verification system according to claim 1, characterized in that, The payment password verification system also includes a corporate terminal and a payment password device; The corporate terminal is used to obtain business information; The payment password generator is connected to the corporate terminal and is used to receive business information from the corporate terminal and generate a payment password for the business information based on a built-in algorithm. The corporate terminal generates payment verification request data based on a one-to-one correspondence of payment password and business information.

3. The payment password verification system according to claim 1, characterized in that, The payment password verification system also includes a bank host computer; The bank host is used to obtain the verification result output by the verification machine and the account status corresponding to the payment verification request data, and decide whether to execute the transaction based on the verification result and the account status.

4. The payment password verification system according to claim 1, characterized in that, The payment password verification system also includes a management machine, on which the payment password background verification management software is deployed; The management machine is used to monitor the operating status of the database server and the verification machine, and to record and store the verification logs.

5. The payment password verification system according to claim 1, characterized in that, The verification machine has a frame structure.

6. The payment password verification system according to claim 1, characterized in that, The payment password verification chip can be independently plugged in and replaced without shutting down the verification machine, and the replacement process does not affect the normal operation of other payment password verification chips.

7. The payment password verification system according to claim 1, characterized in that, Multiple verification machines are configured into a cluster, and the cluster is equipped with a load balancing module. The load balancing module is used to dynamically allocate the payment verification request data according to the real-time load status of each verification machine and each payment password verification chip.

8. A method for verifying payment passwords, characterized in that, include: During a transaction, the verification machine receives payment verification request data; Based on the payment verification request data, the corresponding verification data is obtained from the database server, and the payment password verification chip is used to verify whether the payment verification request data is valid.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and running on the processor, characterized in that, When the processor executes the computer program, it implements the steps of the method as described in claim 8.

10. A non-transitory computer-readable medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the steps of the method as described in claim 8.

Images