Near field payment method, apparatus, and device

Abstract

The embodiments of the present specification disclose a near field payment method, device and equipment. The scheme comprises: a payment terminal scans a peer-to-peer connection group created by a user equipment based on a wireless network communication technology; obtaining the discovery information published by the user equipment in the peer-to-peer connection group; decoding the discovery information, obtaining the service data corresponding to the user equipment, and executing the payment service corresponding to the user equipment according to the service data.

Description

Technical Field

[0001] This specification relates to the field of Internet technology, and in particular to near-field payment methods, devices, and equipment. Background Technology

[0002] With the development of computer and internet technologies, many business operations can be performed using smart devices. For example, payment services can be executed through near-field communication (NFC) payment.

[0003] Traditionally, near-field payment methods mainly include three types: Near Field Communication (NFC) write-back, Bluetooth Low Energy (BLE) broadcasting, and ultrasonic / audio broadcasting.

[0004] For NFC write-back, the user-side device (corresponding to the smart terminal such as a smartphone or tablet used by the user to perform payment transactions) needs to have NFC enabled and needs to be physically and continuously close to the terminal-side device (corresponding to the payment terminal on the merchant's side) in order to perform the payment transaction.

[0005] For BLE broadcasting, the payment software installed on the user-side device needs to authorize Bluetooth permissions. At the same time, the user-side device needs to enable Bluetooth. The payment software scans and connects to nearby terminal devices, and the two parties interact with each other to execute the payment transaction based on the transaction data.

[0006] For ultrasonic / audio broadcasting, the terminal device encodes the transaction data into an acoustic signal and plays it. The payment software installed on the user's device needs to obtain microphone access and relies on listening to and decoding this acoustic signal to obtain transaction data and execute payment transactions.

[0007] Therefore, a near-field payment solution that can balance user experience and business execution reliability is needed. Summary of the Invention

[0008] This specification provides one or more embodiments of near-field payment methods, apparatuses, devices, and storage media to address the following technical problem: the need for a near-field payment solution that can balance user experience and business execution reliability.

[0009] To solve the above-mentioned technical problems, one or more embodiments of this specification are implemented as follows:

[0010] This specification provides one or more embodiments of a near-field payment method, including:

[0011] The payment terminal scan detected a peer-to-peer connection group created by the user equipment based on wireless network communication technology;

[0012] Obtain the discovery information published by the user equipment in the peer connection group;

[0013] The discovery information is decoded to obtain the business data corresponding to the user equipment, and the payment business corresponding to the user equipment is executed based on the business data.

[0014] This specification provides one or more embodiments of a near-field payment device, comprising:

[0015] The group discovery module enables payment terminals to scan and discover peer-to-peer connection groups created by user equipment based on wireless network communication technology.

[0016] The discovery information acquisition module acquires the discovery information published by the user equipment in the peer connection group;

[0017] The business execution module decodes the discovery information, obtains the business data corresponding to the user device, and executes the payment business corresponding to the user device based on the business data.

[0018] This specification provides one or more embodiments of a near-field payment device, comprising:

[0019] At least one processor; and,

[0020] A memory communicatively connected to the at least one processor; wherein,

[0021] The memory stores instructions executable by the at least one processor, which, when executed by the at least one processor, enable the at least one processor to:

[0022] The payment terminal scan detected a peer-to-peer connection group created by the user equipment based on wireless network communication technology;

[0023] Obtain the discovery information published by the user equipment in the peer connection group;

[0024] The discovery information is decoded to obtain the business data corresponding to the user equipment, and the payment business corresponding to the user equipment is executed based on the business data.

[0025] This specification provides one or more embodiments of a non-volatile computer storage medium storing computer-executable instructions, wherein the computer-executable instructions are configured as follows:

[0026] The payment terminal scan detected a peer-to-peer connection group created by the user equipment based on wireless network communication technology;

[0027] Obtain the discovery information published by the user equipment in the peer connection group;

[0028] The discovery information is decoded to obtain the business data corresponding to the user equipment, and the payment business corresponding to the user equipment is executed based on the business data.

[0029] The above-described at least one technical solution adopted in one or more embodiments of this specification can achieve the following beneficial effects:

[0030] Improved ease of use and coverage: Compared to NFC write-back which relies on physical contact, the peer-to-peer connection group scanning and discovery mechanism allows user devices to automatically establish connections and exchange data over a wider area without physically touching the payment terminal, thus improving the user's payment experience.

[0031] Enhanced device compatibility and data carrying capacity: Compared to Bluetooth Low Energy (BLE) broadcasting, it does not require user device applications to obtain Bluetooth permissions. As long as the device supports the corresponding wireless network communication technology (usually Wi-Fi), it can participate in the discovery and payment process, covering some unauthorized devices or devices that cannot use Bluetooth. At the same time, based on the physical layer characteristics of this technology, a single transmission can carry a larger amount of data, supporting more complex business data interactions.

[0032] Improving the success rate and reliability of payment execution: Compared to ultrasonic / audio broadcasting solutions, it does not rely on the transmission of sound signals and microphone pickup, thus being less susceptible to interference from ambient noise at the payment site. By decoding discovery information published in peer-to-peer connection groups, the process of acquiring business data is more stable, thereby improving the success rate of payment execution.

[0033] Achieving a silent payment process: The entire discovery process does not involve network connection or interaction, requires no user authorization or confirmation, has no pop-up prompts, and does not interrupt the user's currently connected Wi-Fi network. The payment is completed automatically in the background, avoiding interference with the user's ongoing operations (such as browsing the web or watching videos), truly achieving seamless payment.

[0034] Flexible data capacity to adapt to diverse business needs: By using the SSID in the discovery information, it can transmit at least 18 bytes of data to carry regular payment tokens; it can also support more data capacity and carry richer transaction information through the registration service in the discovery information based on actual needs, providing expansion space for complex business scenarios.

[0035] Low latency and high payment efficiency: Targeted channel scanning reduces group discovery time. Combined with subsequent data interaction, the entire payment process can be completed in the blink of an eye, effectively reducing user waiting time and increasing transaction throughput. Attached Figure Description

[0036] To more clearly illustrate the technical solutions in the embodiments or prior art of this specification, the drawings used in the description of the embodiments or prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this specification. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0037] Figure 1 A flowchart illustrating a near-field payment method provided for one or more embodiments of this specification;

[0038] Figure 2 This is a flowchart illustrating active and passive scanning in one or more embodiments of this specification.

[0039] Figure 3 A flowchart illustrating a scanning registration service in an application scenario, provided for one or more embodiments of this specification;

[0040] Figure 4 This is a schematic diagram illustrating the sorting process of multiple peer connection groups in an application scenario, provided for one or more embodiments of this specification.

[0041] Figure 5 A schematic diagram of the structure of a near-field payment device provided for one or more embodiments of this specification;

[0042] Figure 6 This is a schematic diagram of the structure of a near-field payment device provided for one or more embodiments of this specification. Detailed Implementation

[0043] This specification provides an embodiment of a near-field payment method, apparatus, device, and storage medium.

[0044] To enable those skilled in the art to better understand the technical solutions in this specification, the technical solutions in the embodiments of this specification will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this specification, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of this application.

[0045] Figure 1This diagram illustrates a near-field payment method provided in one or more embodiments of this specification. The method can be applied to various business sectors, such as internet finance, e-commerce, instant messaging, gaming, and government services. The process can be executed by computing devices specific to the sector (e.g., smart mobile terminals for payment services), and certain input parameters or intermediate results can be manually adjusted to improve accuracy.

[0046] Figure 1 The process may include the following steps:

[0047] S102: The payment terminal scan detected a peer-to-peer connection group created by the user equipment based on wireless network communication technology.

[0048] A payment terminal is a dedicated device that provides payment acceptance capabilities in transaction scenarios. It has a wireless network communication module that can discover and connect to user devices to complete identity authentication, transaction data exchange, and payment authorization. For example, it can be a POS machine, a mobile payment terminal, or the payment module of a vending machine. Taking a POS machine as an example, it is usually equipped with a corresponding wireless network communication module that can support various payment methods such as tap-to-pay, facial recognition, and QR code scanning.

[0049] User equipment (UHQ) is a personal mobile computing device owned and controlled by a consumer. It can be a smartphone, smart bracelet, smartwatch, or other device that has a payment client installed, stores payment credentials (such as tokens, keys, QR code data, etc.), and can provide the information required for the transaction to the payment terminal.

[0050] Wireless network communication technologies can include Wi-Fi, Thread, Zigbee, Ultra Wide Band (UWB), etc. These wireless network communication technologies have device discovery mechanisms, support peer-to-peer or infrastructure networking, and user equipment can create peer-to-peer connection groups based on these wireless network communication technologies.

[0051] A peer-to-peer group is a temporary communication set established by two or more wireless devices in a self-organized manner without traditional centralized infrastructure (such as access points or base stations). Devices within the group can exchange data directly without the need for external network relay. The lifecycle of the group is usually tied to business needs, created on demand and disbanded after use.

[0052] For example, in a Wi-Fi scenario, a peer-to-peer group can be a P2P group (Wi-Fi P2P Group Owner, or simply Group), which includes the group owner (GO) who created the P2P group and the clients participating in the group; in a Thread scenario, a peer-to-peer group can be a Thread network (Mesh), which can include routers, end devices, and leaders; in a Zigbee scenario, a peer-to-peer group can be a Zigbee network (PAN), which can include a coordinator, routers, and end devices; in a UWB scenario, a peer-to-peer group can be a peer-to-peer session, which can include initiators and responders.

[0053] Generally, Wi-Fi has a wide range of applications. Its P2P group mode supports direct communication between devices in environments without access points, and its high transmission rate can meet the data transmission efficiency and stability requirements of payment services. Therefore, in this specification, the embodiment uses a Wi-Fi scenario as an example for explanation. In this case, the user device creates a temporary P2P group based on Wi-Fi technology. "Temporary" means that the P2P group is not permanent, but dynamically created by the user device when near-field payment is needed. It automatically disbands or is actively closed by the user device after the payment transaction is completed, thereby effectively reducing device power consumption and ensuring communication security, avoiding the risk of network attacks or information leakage that may be caused by the long-term existence of the group.

[0054] Figure 2 This diagram illustrates the process of active and passive scanning in one or more embodiments of this specification, representing an application scenario. When scanning at a payment terminal, two methods can be used to discover the existence of a corresponding peer-to-peer connection group.

[0055] The first method is active scanning. The payment terminal actively scans, periodically sending probe request frames through a designated channel. Based on the probe response frames returned by the user equipment, it discovers peer-to-peer connection groups created by the user equipment using wireless network communication technology. Both the probe request frame and the probe response frame are types of Wi-Fi management frames. Wi-Fi management frames (also known as 802.11 management frames) are key control frames in the Wi-Fi protocol used to coordinate communication between wireless devices and access points. They are primarily responsible for network discovery, connection management, authentication, and channel switching.

[0056] The probe request frame is a management frame actively sent by the receiving end of the business data (usually a payment terminal in this specification embodiment) to scan the surrounding network. It is used to discover nearby workstations, access points or P2P group owners. In this specification embodiment, it is mainly used to discover nearby P2P group owners (that is, user equipment that establishes P2P groups).

[0057] The probe response frame is a unicast management frame that is sent back by the service data sender (usually a user equipment in this specification embodiment) after receiving the probe request frame. It is used to announce the existence of its own network. It usually carries information such as Service Set Identifier (SSID), supported rates, capability information, and P2P information elements. The receiver determines whether to join or connect to the P2P group based on this information.

[0058] The second method is passive scanning. The payment terminal passively scans and receives beacon frames sent by user equipment (UE) through a designated channel. Based on these beacon frames, it discovers peer-to-peer (P2P) connection groups created by UEs using wireless network communication technology. The beacon frame (Wi-Fi Beacon) is a type of Wi-Fi management frame. It primarily announces the existence of the network to the sender of service data, allowing nearby receivers to discover the P2P group. It also carries information such as SSID, supported rates, capabilities, and P2P information elements. Receivers only need to listen to these beacon frames; they do not need to actively send probe request frames to discover the P2P group and obtain the relevant information.

[0059] Generally, when multiple channels exist, whether using active or passive scanning, scanning must be performed sequentially on these channels. For example, active scanning involves sending probe request frames sequentially across multiple channels; or passive scanning involves listening for beacon frames on multiple channels.

[0060] For P2P groups, the working channel can be specified. Therefore, the specified working channel (referred to as the designated channel) can be used as the target channel for the payment terminal to reduce the number of channels to be scanned and improve scanning efficiency. For example, when a user device creates a P2P group, it can set the working channel to a number of preset commonly used channels (such as channels 1, 6, and 11 in the 2.4GHz band). When scanning, the payment terminal only needs to perform active or passive scanning on these specified channels, without having to traverse all possible channels, thereby shortening the scanning time and improving the response speed of near-field payment.

[0061] It should be noted that both the receiving and sending ends can choose to perform only one of the two methods, active scanning and passive scanning, or they can use both methods in parallel to further improve the probability and efficiency of discovering peer connection groups. Figure 2 The simultaneous display of two scanning methods (active scanning and passive scanning) is solely for the purpose of illustrating the scanning methods and does not imply any sequential order or necessary relationship between the two methods.

[0062] S104: Obtain the discovery information published by the user equipment in the peer connection group.

[0063] Discovery information refers to the information exchanged during the device discovery phase. This information is published by the user device to nearby discoverable devices within the peer-to-peer connection group and is then discovered and obtained by the payment terminal. At this point, the device discovery phase is still in progress, and the payment terminal and user device have not yet established a connection. Therefore, discovery information can also be called offline information or offline discovery information, etc.

[0064] Specifically, when a user device creates a P2P group, it can create the P2P group using the `createGroup()` function and automatically become the group owner (GO). It then constructs a `WifiP2pConfig` object using the `Builder()` function and configures the group's attributes (such as SSID, supported speeds, capability information, and P2P information elements). Finally, a callback via the `ActionListener` function indicates successful P2P group creation and broadcasts the message, awaiting either passive scanning by payment terminals or active scanning by payment terminals.

[0065] At this point, the payment terminal obtains the service set identifier (SSID) published by the user device in the peer-to-peer connection group. The user device pre-encodes the corresponding business data to generate the SSID. When generating and publishing a P2P group, the user device needs to generate a corresponding SSID to name the group. Traditional solutions typically use a preset format or random naming, such as directly using the device name or a random string as the SSID.

[0066] In the embodiments described in this specification, the user equipment pre-acquires the corresponding business data and encodes it to generate a service set identifier. In this way, the payment terminal only needs to obtain the business data (in the form of encoding) during the device discovery phase without connecting to the user equipment. This makes the entire process unnecessary to establish a TCP / IP connection, without triggering system notifications, and without interrupting the user's current Wi-Fi internet access, thus achieving silent operation and improving the user experience.

[0067] The business data can include key data related to the current near-field payment business, such as user identification information and payment scenario identifiers. User identification information is used to uniquely identify the user initiating the payment, such as the user's account ID on the payment platform, the hash value of the bound mobile phone number, or the unique identifier of the device. Payment scenario identifiers can distinguish different transaction environments, such as offline supermarket shopping, restaurant consumption, and self-service payment. Key data can include business-related verification values, which can be encoded in a specific encoding format to ensure that the business data can be effectively carried in the SSID and cannot be tampered with.

[0068] Furthermore, in addition to the service set identifier, the registration service published by the user equipment in the peer-to-peer connection group is obtained. Specifically, if the amount of data generated by encoding the business data exceeds the amount of data that the service set identifier can carry, the user equipment pre-encodes the business data to generate the service set identifier and the registration service.

[0069] Using SSIDs to carry business data enables rapid data transmission. However, SSIDs themselves have a limited data capacity, typically carrying a maximum of 32 bytes (corresponding to a payload length of 255). To carry more data, a registration service can be used.

[0070] Figure 3 This is a flowchart illustrating a scanning registration service in an application scenario, provided for one or more embodiments of this specification. Service registration is the process by which devices in a Wi-Fi P2P group (in this specification, user devices are mainly used as an example for explanation) register the information of the application layer services they support (such as printing, media rendering, file sharing, etc.) into the P2P service discovery mechanism, so that other devices can obtain the capabilities and parameters of these services by querying before connecting.

[0071] When a user device registers a service, it uses the service name, service type, transmission protocol and port, and additional attributes as registration content. By writing this registration content into the service and registering, the user device completes the service registration. To facilitate the payment terminal's search and confirmation of a specific registered service, the registered service carrying the coded business data can be named with a specific service name, allowing the payment terminal to quickly locate and retrieve the corresponding business data.

[0072] In actual operation, the user equipment determines whether service registration is necessary based on the amount of encoded business data. After service registration, the payment terminal checks whether the name of each service terminal is a specific name to determine whether the data it carries needs to be decoded to obtain the business data.

[0073] S106: Decode the discovery information to obtain the service data corresponding to the user equipment, and execute the payment service corresponding to the user equipment based on the service data.

[0074] Specifically, the discovery information is obtained by the user device encrypting business data in advance using the payment terminal's public key. The public key refers to the public key in an asymmetric encryption algorithm, which is registered and distributed in advance by the payment terminal to the user device or a trusted third party (such as the payment platform server). After generating business data, the user device uses the public key to encrypt the business data to ensure the confidentiality of the data during transmission and prevent it from being intercepted and cracked by unauthorized third parties.

[0075] At this point, after receiving the discovery information, the payment terminal decrypts it using its own private key to obtain the second decrypted data. After receiving the encrypted discovery information, the payment terminal uses its own private key (a private key paired with the public key, held only by the payment terminal and strictly kept confidential) to decrypt it, thus obtaining the original business data. For example, when using the RSA algorithm, the user equipment encrypts the business data using the payment terminal's RSA public key, and the payment terminal decrypts it using its own RSA private key after receiving it.

[0076] The business data contained in the second decrypted data is verified based on the digest data. The decrypted second decrypted data contains the original business data and a digest data obtained by hashing the business data. The payment terminal can recalculate the hash value of the decrypted business data using the same hash algorithm as the user equipment (e.g., SHA-256) to obtain the verification digest. This verification digest is then compared with the digest data carried in the second decrypted data. If they match, it indicates that the business data has not been tampered with during transmission, and data integrity is confirmed; if they do not match, it indicates that the data may have been tampered with or transmitted incorrectly, and the payment terminal will refuse to execute subsequent payment transactions to ensure transaction security.

[0077] Typically, business data contains at least user identification information, enabling the payment terminal to execute the user's payment action on the payment platform based on its interaction with the corresponding server. For example, the payment terminal scans the barcode of a product to obtain information about the product to be paid for (including product type, amount to be paid, etc.). The user device then establishes a P2P group and transmits the business data carrying the user identification information, encrypted with the payment terminal's public key, to the payment terminal. The payment terminal decrypts the discovery information using its private key, verifies the business data, and, upon successful verification, interacts with the server to execute the payment transaction.

[0078] Improved ease of use and coverage: Compared to NFC write-back which relies on physical contact, the peer-to-peer connection group scanning and discovery mechanism allows user devices to automatically establish connections and exchange data over a wider area without physically touching the payment terminal, thus improving the user's payment experience.

[0079] Enhanced device compatibility and data carrying capacity: Compared to Bluetooth Low Energy (BLE) broadcasting, it does not require user device applications to obtain Bluetooth permissions. As long as the device supports the corresponding wireless network communication technology (usually Wi-Fi), it can participate in the discovery and payment process, covering some unauthorized devices or devices that cannot use Bluetooth. At the same time, based on the physical layer characteristics of this technology, a single transmission can carry a larger amount of data, supporting more complex business data interactions.

[0080] Improving the success rate and reliability of payment execution: Compared to ultrasonic / audio broadcasting solutions, it does not rely on the transmission of sound signals and microphone pickup, thus being less susceptible to interference from ambient noise at the payment site. By decoding discovery information published in peer-to-peer connection groups, the process of acquiring business data is more stable, thereby improving the success rate of payment execution.

[0081] Achieving a silent payment process: The entire discovery process does not involve network connection or interaction, requires no user authorization or confirmation, has no pop-up prompts, and does not interrupt the user's currently connected Wi-Fi network. The payment is completed automatically in the background, avoiding interference with the user's ongoing operations (such as browsing the web or watching videos), truly achieving seamless payment.

[0082] Flexible data capacity to adapt to diverse business needs: By using the SSID in the discovery information, it can transmit at least 18 bytes of data to carry regular payment tokens; it can also support more data capacity and carry richer transaction information through the registration service in the discovery information based on actual needs, providing expansion space for complex business scenarios.

[0083] Low latency and high payment efficiency: Targeted channel scanning reduces group discovery time. Combined with subsequent data interaction, the entire payment process can be completed in the blink of an eye, effectively reducing user waiting time and increasing transaction throughput.

[0084] In one or more embodiments of this specification, during the transmission of business data between the user equipment and the payment terminal, the encoding and decoding processes of the business data can prevent third parties from directly obtaining the business data, thus achieving confidentiality of the business data. However, for payment services, which are of high importance, in order to further improve the confidentiality of business data and prevent malicious acquisition of business data by third-party devices, the user equipment can choose not to encode the specific business data in the SSID when encoding the business data, but instead encode the corresponding service identifier to indicate which registration services in this release contain real business data and which registration services are redundant settings.

[0085] Specifically, before decoding at the payment terminal, the user device performs encoding processing. The user device encodes the real business data, generating several first-level registration services and publishing them; and it encodes the generated fake business data, generating several second-level registration services and publishing them. The real business data refers to the actual business data generated by the user during the transaction, while the fake business data is simulated data generated by the user device based on preset rules or random algorithms. It is similar in format to the real business data but has invalid content.

[0086] The identifier corresponding to the first registered service is encrypted to generate a service set identifier, which is then published. The payment terminal decrypts the service set identifier to determine which registered services contain the actual business data, rather than directly obtaining the specific business data.

[0087] Based on this, during the stage of the payment terminal acquiring registration services, the first step is to determine the decoded data for the service set identifier. Based on the decoded data, a subset of registration services are selected from the multiple registration services published by the user device as the discovery information. At this point, when the payment terminal scans all registration services published by the user device, it can accurately identify which are the first registration services based on the acquired service identifiers. Therefore, it only decodes these first registration services to obtain the real business data, ignoring the second registration services. This method introduces fake registration services as interference. Even if a third-party device intercepts all registration services and can decode them to obtain business data, it will be difficult to distinguish which contain real data. This increases the difficulty of maliciously acquiring and cracking business data, further enhancing data security during near-field payment.

[0088] Furthermore, the payment platform for user devices and each payment device usually belong to the same manufacturer, or the two have corresponding business dealings, so a shared key (here referred to as the master key) can be pre-allocated to both parties.

[0089] During the scanning process of the payment terminal, it can broadcast the unique identifier address (such as the MAC address) corresponding to the terminal to other devices (including user equipment). Alternatively, when the user equipment interacts with the payment terminal or transmits business data in a historical moment, the user equipment records the unique identifier address of the payment terminal at the current location.

[0090] At this point, the first registered service recorded in the SSID is encrypted based on the unique identifier address and master key.

[0091] Once the payment terminal obtains the SSID, it generates its own device key using its unique identifier address and the preset master key shared between the payment terminal and the user device. For example, it can generate a device key uniquely corresponding to the payment terminal by performing a hash operation between the payment terminal's MAC address and the master key.

[0092] Based on the device key, the decoded data is decrypted to obtain the corresponding first decrypted data. The user device uses the same device key when encrypting, therefore the payment terminal can directly use it for decryption.

[0093] Based on the first decrypted data, a subset of registered services are selected from among the multiple registered services published by the user equipment as discovery information. The payment terminal uses this device key to decrypt the encrypted service identifiers in the service set identifier, thereby accurately determining which registered services are the first registered services containing real business data, and obtaining the corresponding first registered services as discovery information.

[0094] This encryption method, which combines a unique device identifier with a shared master key, ensures that only specific, authorized payment terminals can correctly decrypt and identify genuine business data. This further eliminates the possibility of other unauthorized devices cracking the information, forming a multi-dimensional security protection mechanism that ensures greater security while maintaining the convenience of near-field payments.

[0095] In one or more embodiments of this specification, in some high-density scenarios (such as shopping malls, subway stations, etc.), payment terminals may simultaneously scan dozens or even hundreds of P2P groups, among which some fake beacons may be mixed in. Decoding these detection information one by one would not only be time-consuming and labor-intensive, but might also lead to the payment terminal obtaining incorrect information.

[0096] Figure 4This specification provides a schematic diagram of the sorting process for multiple peer-to-peer connection groups in one or more embodiments, illustrating the process of acquiring physical layer information for each discovered peer-to-peer connection group. The physical layer information may include Received Signal Strength Indicator (RSSI), Channel State Information (CSI), and Angle of Arrival (ASA). RSSI measures the power intensity of received frames; in free space, signal strength is inversely proportional to the square of the distance. User equipment intending to make a payment is typically very close to the payment terminal, therefore its RSSI value should be higher than background noise and that of other distant devices. Compared to RSSI, CSI provides fine-grained information about multipath propagation, including the amplitude and phase of subcarriers. The channel response of near-field devices has unique fingerprint characteristics, which can distinguish between signals dominated by direct path (target device) and signals dominated by reflection / diffraction (interference device). If the payment terminal is equipped with a multi-antenna array, the azimuth angle of the signal source can be estimated by calculating the phase difference of the signal arriving at different antennas. As the angle of arrival, it can be combined with the physical orientation of the terminal (such as the direction the scanning window is facing) to focus only on signals arriving from a specific angle (such as a 30-degree cone area directly in front).

[0097] Based on physical layer information, multiple peer-to-peer connection groups are filtered and prioritized to facilitate sequential information processing according to the filtering and prioritization results. For example, a threshold range for RSSI is set, retaining only peer-to-peer connection groups with signal strength exceeding this threshold to initially filter out nearby user devices. Then, combined with CSI characteristics, the filtered groups are further verified, eliminating interfering devices whose channel response does not conform to the characteristics of short-range direct propagation. Finally, for payment terminals equipped with multiple antennas, the priority of groups within a preset angle range is increased based on the angle of arrival information, resulting in the final group priority processing order, ensuring that signals from devices directly in front of the user are processed first. Through this multi-level physical layer information filtering and prioritization mechanism, the payment terminal can quickly identify the most likely target user device from a large number of candidate groups, reducing invalid decoding operations and improving the response speed and accuracy of payment services. Especially in complex environments with dense populations, it effectively avoids payment delays or failures caused by false beacons or interference from distant devices.

[0098] Based on the same idea, one or more embodiments of this specification also provide apparatus and devices corresponding to the above methods, such as... Figure 5 , Figure 6 As shown.

[0099] Figure 5This specification provides a schematic diagram of the structure of a near-field payment device according to one or more embodiments, the device comprising:

[0100] Group discovery module 502: The payment terminal scans and discovers peer-to-peer connection groups created by user equipment based on wireless network communication technology;

[0101] Discovery information acquisition module 504 acquires discovery information published by the user equipment in the peer connection group;

[0102] The business execution module 506 decodes the discovery information, obtains the business data corresponding to the user device, and executes the payment business corresponding to the user device based on the business data.

[0103] The group discovery module 502 is a temporary P2P group created by the user equipment based on Wi-Fi technology.

[0104] The group discovery module 502 allows the payment terminal to actively scan and periodically send probe request frames through a designated channel. Based on the probe response frames returned by the user equipment, it discovers peer-to-peer connection groups created by the user equipment using wireless network communication technology; and / or,

[0105] The payment terminal receives beacon frames sent by user equipment through a designated channel via passive scanning, and discovers peer-to-peer connection groups created by user equipment based on wireless network communication technology based on the beacon frames.

[0106] The discovery information acquisition module 502 acquires the service set identifier published by the user equipment in the peer connection group;

[0107] The user equipment pre-encodes the corresponding service data to generate the service set identifier.

[0108] The discovery information acquisition module 502 acquires the registration service published by the user equipment in the peer connection group;

[0109] If the amount of data generated by encoding the business data is greater than the amount of data that the service set identifier can carry, then the user equipment pre-encodes the business data to generate the service set identifier and the registration service.

[0110] The discovery information acquisition module 504 determines the decoded data for the service set identifier;

[0111] Based on the decoded data, some registration services are selected from the multiple registration services published by the user equipment as the discovery information obtained.

[0112] The discovery information acquisition module 504 generates its own device key by using the unique identifier address corresponding to the payment terminal itself and the preset master key shared by the payment terminal and the user equipment.

[0113] Based on the device key, the decoded data is decrypted to obtain the corresponding first decrypted data;

[0114] Based on the first decrypted data, some registration services are selected from the multiple registration services published by the user equipment as the discovery information obtained.

[0115] The device also includes a discovery information publishing module 508;

[0116] The discovery information publishing module 508, through the user equipment, encodes real business data to generate several first registration services and publishes them; and encodes generated false business data to generate several second registration services and publishes them.

[0117] The identifier corresponding to the first registered service is encrypted to generate a service set identifier and then published.

[0118] The business execution module 506 decrypts the discovery information using its own private key to obtain second decrypted data; wherein the discovery information is obtained by the user equipment in advance by encrypting the business data based on the public key of the payment terminal;

[0119] Based on the digest data contained in the second decrypted data, the business data contained in the second decrypted data is verified.

[0120] The group discovery module 502 obtains the physical layer information corresponding to each of the discovered peer connection groups.

[0121] Based on the physical layer information, the multiple peer connection groups are filtered and prioritized so that information can be processed sequentially according to the filtering and prioritization results.

[0122] Figure 6 This specification provides a schematic diagram of the structure of a near-field payment device according to one or more embodiments, the device comprising:

[0123] At least one processor; and,

[0124] A memory communicatively connected to the at least one processor; wherein,

[0125] The memory stores instructions executable by the at least one processor, which, when executed by the at least one processor, enable the at least one processor to:

[0126] The payment terminal scan detected a peer-to-peer connection group created by the user equipment based on wireless network communication technology;

[0127] Obtain the discovery information published by the user equipment in the peer connection group;

[0128] The discovery information is decoded to obtain the business data corresponding to the user equipment, and the payment business corresponding to the user equipment is executed based on the business data.

[0129] Based on the same idea, one or more embodiments of this specification also provide a non-volatile computer storage medium corresponding to the above method, storing computer-executable instructions, wherein the computer-executable instructions are configured as follows:

[0130] The payment terminal scan detected a peer-to-peer connection group created by the user equipment based on wireless network communication technology;

[0131] Obtain the discovery information published by the user equipment in the peer connection group;

[0132] The discovery information is decoded to obtain the business data corresponding to the user equipment, and the payment business corresponding to the user equipment is executed based on the business data.

[0133] In the 1990s, improvements to a technology could be clearly distinguished as either hardware improvements (e.g., improvements to the circuit structure of diodes, transistors, switches, etc.) or software improvements (improvements to the methodology). However, with technological advancements, many methodological improvements today can be considered direct improvements to the hardware circuit structure. Designers almost always obtain the corresponding hardware circuit structure by programming the improved methodology into the hardware circuit. Therefore, it cannot be said that a methodological improvement cannot be implemented using hardware physical modules. For example, a Programmable Logic Device (PLD) (such as a Field Programmable Gate Array (FPGA)) is such an integrated circuit whose logic function is determined by the user programming the device. Designers can program and "integrate" a digital system onto a PLD themselves, without needing chip manufacturers to design and manufacture dedicated integrated circuit chips. Furthermore, nowadays, instead of manually manufacturing integrated circuit chips, this programming is mostly implemented using "logic compiler" software. Similar to the software compiler used in program development, the original code before compilation must also be written in a specific programming language, called a Hardware Description Language (HDL). There are many HDLs, such as ABEL (Advanced Boolean Expression Language), AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCal, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, and RHDL (Ruby Hardware Description Language). Currently, the most commonly used are VHDL (Very-High-Speed ​​Integrated Circuit Hardware Description Language) and Verilog. Those skilled in the art should also understand that by simply performing some logic programming on the method flow using one of these hardware description languages ​​and programming it into an integrated circuit, the hardware circuit implementing the logical method flow can be easily obtained.

[0134] The controller can be implemented in any suitable manner. For example, it can take the form of a microprocessor or processor and a computer-readable medium storing computer-readable program code (e.g., software or firmware) executable by the (micro)processor, logic gates, switches, application-specific integrated circuits (ASICs), programmable logic controllers, and embedded microcontrollers. Examples of controllers include, but are not limited to, the following microcontrollers: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20, and Silicon Labs C8051F320. A memory controller can also be implemented as part of the control logic of the memory. Those skilled in the art will also recognize that, in addition to implementing the controller in purely computer-readable program code form, the same functionality can be achieved by logically programming the method steps to make the controller take the form of logic gates, switches, application-specific integrated circuits, programmable logic controllers, and embedded microcontrollers. Therefore, such a controller can be considered a hardware component, and the means included therein for implementing various functions can also be considered as structures within the hardware component. Alternatively, the means for implementing various functions can be considered as both software modules implementing the method and structures within the hardware component.

[0135] The systems, devices, modules, or units described in the above embodiments can be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer. Specifically, a computer can be, for example, a personal computer, laptop computer, cellular phone, camera phone, smartphone, personal digital assistant, media player, navigation device, email device, game console, tablet computer, wearable device, or any combination of these devices.

[0136] For ease of description, the above devices are described in terms of function, divided into various units. Of course, in implementing this specification, the functions of each unit can be implemented in one or more software and / or hardware components.

[0137] Those skilled in the art will understand that the embodiments of this specification can be provided as methods, systems, or computer program products. Therefore, the embodiments of this specification can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the embodiments of this specification can take the form of a computer program product implemented on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0138] This specification is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this specification. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0139] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0140] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0141] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0142] Memory may include non-persistent storage in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM. Memory is an example of computer-readable media.

[0143] Computer-readable media includes both permanent and non-permanent, removable and non-removable media that can store information using any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic magnetic disk storage or other magnetic storage devices, or any other non-transferable medium that can be used to store information accessible by a computing device. As defined herein, computer-readable media does not include transient computer-readable media, such as modulated data signals and carrier waves.

[0144] It should also be noted that the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0145] This specification can be described in the general context of computer-executable instructions that are executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc., that perform a specific task or implement a specific abstract data type. This specification can also be practiced in distributed computing environments, where tasks are performed by remote processing devices connected via a communication network. In distributed computing environments, program modules can reside in local and remote computer storage media, including storage devices.

[0146] The various embodiments in this specification are described in a progressive manner. Similar or identical parts between embodiments can be referred to mutually. Each embodiment focuses on describing the differences from other embodiments. In particular, the embodiments of apparatus, devices, and non-volatile computer storage media are basically similar to the method embodiments, so the descriptions are relatively simple; relevant parts can be referred to the descriptions of the method embodiments.

[0147] The foregoing has described specific embodiments of this specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recited in the claims may be performed in a different order than that shown in the embodiments and may still achieve the desired result. Furthermore, the processes depicted in the drawings do not necessarily require the specific or sequential order shown to achieve the desired result. In some embodiments, multitasking and parallel processing are possible or may be advantageous.

[0148] The above description is merely one or more embodiments of this specification and is not intended to limit this specification. Various modifications and variations can be made to the one or more embodiments of this specification by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principle of one or more embodiments of this specification should be included within the scope of the claims of this specification.

Claims

1. A near-field payment method, comprising: The payment terminal scan detected a peer-to-peer connection group created by the user equipment based on wireless network communication technology; Obtain discovery information published by the user equipment in the peer connection group, the discovery information including service set identifier and / or registered services; The discovery information is decoded to obtain the business data corresponding to the user equipment, and the payment business corresponding to the user equipment is executed based on the business data.

2. The method as described in claim 1, wherein the peer-to-peer connection group created by the user equipment based on wireless network communication technology specifically includes: Temporary P2P groups created by user equipment based on Wi-Fi technology.

3. The method as described in claim 1, wherein the payment terminal scans and discovers peer-to-peer connection groups created by user equipment based on wireless network communication technology, specifically including: The payment terminal actively scans and periodically sends probe request frames through a designated channel. Based on the probe response frames returned by the user equipment, it discovers peer-to-peer connection groups created by the user equipment using wireless network communication technology; and / or, The payment terminal receives beacon frames sent by user equipment through a designated channel via passive scanning, and discovers peer-to-peer connection groups created by user equipment based on wireless network communication technology based on the beacon frames.

4. The method as described in claim 1, wherein obtaining the discovery information published by the user equipment in the peer connection group specifically includes: Obtain the service set identifier published by the user equipment in the peer connection group; The user equipment pre-encodes the corresponding service data to generate the service set identifier.

5. The method of claim 4, further comprising: Obtain the registration service published by the user equipment in the peer connection group; If the amount of data generated by encoding the business data is greater than the amount of data that the service set identifier can carry, then the user equipment pre-encodes the business data to generate the service set identifier and the registration service.

6. The method of claim 5, wherein obtaining the registration service published by the user equipment in the peer connection group specifically includes: Determine the decoded data for the service set identifier; Based on the decoded data, some registration services are selected from the multiple registration services published by the user equipment as the discovery information obtained.

7. The method as described in claim 6, wherein, based on the decoded data, a subset of registration services are selected from among the multiple registration services published by the user equipment as the acquired discovery information, specifically including: The payment terminal generates its own device key using its unique identifier address and the preset master key shared by the payment terminal and the user device. Based on the device key, the decoded data is decrypted to obtain the corresponding first decrypted data; Based on the first decrypted data, some registration services are selected from the multiple registration services published by the user equipment as the discovery information obtained.

8. The method of claim 6, further comprising, before determining the decoded data for the service set identifier: Using the user equipment, real business data is encoded to generate several first registration services and published. The generated fake business data is then encoded to create several secondary registration services, which are then published. The identifier corresponding to the first registered service is encrypted to generate a service set identifier and then published.

9. The method as described in claim 1, wherein decoding the discovery information to obtain service data corresponding to the user equipment specifically includes: The discovery information is decrypted using the user device's private key to obtain second decrypted data; wherein the discovery information is obtained by the user device encrypting the business data in advance using the public key of the payment terminal; Based on the digest data contained in the second decrypted data, the business data contained in the second decrypted data is verified.

10. The method of claim 1, wherein after the payment terminal scans and discovers a peer-to-peer connection group created by the user equipment based on wireless network communication technology, the method further includes: For the multiple peer connection groups discovered, obtain the physical layer information corresponding to each peer connection group; Based on the physical layer information, the multiple peer connection groups are filtered and prioritized so that information can be processed sequentially according to the filtering and prioritization results.

11. A near-field payment device, comprising: The group discovery module enables payment terminals to scan and discover peer-to-peer connection groups created by user equipment based on wireless network communication technology. The discovery information acquisition module acquires the discovery information published by the user equipment in the peer connection group, the discovery information including service set identifier and / or registered service; The business execution module decodes the discovery information, obtains the business data corresponding to the user device, and executes the payment business corresponding to the user device based on the business data.

12. The apparatus of claim 11, wherein the group discovery module is a temporary P2P group created by the user equipment based on Wi-Fi technology.

13. The apparatus of claim 11, wherein the group discovery module allows the payment terminal to periodically send probe request frames through a designated channel via active scanning, and discover peer-to-peer connection groups created by the user equipment based on wireless network communication technology based on probe response frames returned by the user equipment; and / or, The payment terminal receives beacon frames sent by user equipment through a designated channel via passive scanning, and discovers peer-to-peer connection groups created by user equipment based on wireless network communication technology based on the beacon frames.

14. The apparatus of claim 11, wherein the discovery information acquisition module acquires the service set identifier published by the user equipment in the peer connection group; in, The user equipment pre-encodes the corresponding service data to generate the service set identifier.

15. The apparatus of claim 14, wherein the discovery information acquisition module acquires the registration service published by the user equipment in the peer connection group; in, If the amount of data generated by encoding the business data is greater than the amount of data that the service set identifier can carry, then the user equipment pre-encodes the business data to generate the service set identifier and the registration service.

16. The apparatus of claim 15, wherein the discovery information acquisition module determines decoded data for the service set identifier; Based on the decoded data, some registration services are selected from the multiple registration services published by the user equipment as the discovery information obtained.

17. The apparatus of claim 16, wherein the discovery information acquisition module generates its own corresponding device key by using the unique identifier address corresponding to the payment terminal itself and the preset master key shared by the payment terminal and the user equipment; Based on the device key, the decoded data is decrypted to obtain the corresponding first decrypted data; Based on the first decrypted data, some registration services are selected from the multiple registration services published by the user equipment as the discovery information obtained.

18. The apparatus of claim 16, further comprising a discovery information publishing module; The discovery information publishing module, through the user equipment, encodes real business data to generate several first registration services and publishes them; and encodes generated fake business data to generate several second registration services and publishes them. The identifier corresponding to the first registered service is encrypted to generate a service set identifier and then published.

19. The apparatus of claim 11, wherein the service execution module decrypts the discovery information using its corresponding private key to obtain second decrypted data; wherein, The discovery information is obtained by the user equipment in advance by encrypting the business data based on the public key of the payment terminal; Based on the digest data contained in the second decrypted data, the business data contained in the second decrypted data is verified.

20. The apparatus of claim 11, wherein the group discovery module acquires physical layer information corresponding to each of the discovered peer connection groups; Based on the physical layer information, the multiple peer connection groups are filtered and prioritized so that information can be processed sequentially according to the filtering and prioritization results.

21. A near-field payment device, comprising: At least one processor; as well as, A memory communicatively connected to the at least one processor; wherein, The memory stores instructions executable by the at least one processor, which, when executed by the at least one processor, enable the at least one processor to: The payment terminal scan detected a peer-to-peer connection group created by the user equipment based on wireless network communication technology; Obtain discovery information published by the user equipment in the peer connection group, the discovery information including service set identifier and / or registered services; The discovery information is decoded to obtain the business data corresponding to the user equipment, and the payment business corresponding to the user equipment is executed based on the business data.

Images