Wi-fi technology-based offline automatic payment method, system and apparatus

The Wi-Fi-based offline payment method uses beacon packets for encrypted transactions to facilitate secure and rapid bulk payments without network access, addressing the inconvenience and privacy concerns of existing methods.

WO2025139324A1PCT designated stage expired Publication Date: 2025-07-03GUANGZHOU ROBUSTEL CO LTD
View PDF 5 Cites 0 Cited by

Patent Information

Application Number
PCT/CN2024/128076
Authority / Receiving Office
WO · WO
Patent Type
Applications
Current Assignee / Owner
Priority Date
2023-12-25
Filing Date
2024-10-29
Publication Date
2025-07-03

AI Technical Summary

Technical Problem

Existing payment methods in environments without network connectivity require manual phone interaction, which can be inconvenient and expose personal biometric data, and there is a need for a method that allows bulk payment without phone operation and without compromising privacy.

Method used

A Wi-Fi-based offline payment method using beacon packets to broadcast consumer information, enabling encrypted payment through a 4-Way Handshake process without network connection, allowing secure and rapid bulk payments by leveraging existing Wi-Fi infrastructure.

Benefits of technology

Enables secure, rapid, and convenient payment transactions without network access by utilizing Wi-Fi beacon packets for encrypted transactions, enhancing user experience and security by reducing the need for manual phone interaction and protecting personal data.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN2024128076_03072025_PF_FP_ABST
    Figure CN2024128076_03072025_PF_FP_ABST
Patent Text Reader

Abstract

A Wi-Fi technology-based offline automatic payment method, which relates to the field of offline payment, and comprises the following steps: step 1, an AP broadcasts first data; and upon receiving the first data and the first data passing verification, a mobile phone of a client acquires a consumption bill, and initiates a 4-Way Handshak offline connection with the AP; step 2, the AP uses a first PTK to encrypt Anonce to generate M1 and sends same to the mobile phone of the client; and the mobile phone of the client uses the first PTK to decrypt the M1 to obtain the Anonce; step 3, the AP receives M2, M2 containing Snonce and a payment code encrypted by means of using a second PTK; and step 4, the AP uses the second PTK to decrypt the payment code, and performs payment by mans of using the decrypted payment code. Also provided are a Wi-Fi technology-based offline automatic payment apparatus and a Wi-Fi technology-based offline automatic payment system. The present method enables payment without a network or payment without taking out a mobile phone to operate, and enables simultaneous large-batch automatic and rapid payment. Common Wi-Fi functions of APs and mobile phones are reserved.
Need to check novelty before this filing date? Find Prior Art

Description

Offline automatic payment method, system and device based on Wi-Fi technology

[0001] This application claims priority to the Chinese patent application filed with the China Patent Office on December 25, 2023, with application number 202311794243.2 and invention name “A method, system and device for offline automatic payment based on Wi-Fi technology”, the entire contents of which are incorporated by reference into this application. Technical Field

[0002] The present invention relates to the field of offline payment, and in particular to an offline automatic payment method, system and device based on Wi-Fi technology. Background Art

[0003] At supermarkets today, after scanning the items, you need to pull out your phone and display the WeChat or Alipay payment QR code to pay. This requires waiting in line, going online, or opening the payment code. Similarly, at gas stations, after filling up, you need to go to the salesperson to pay, which isn't a quick process. Some payment methods also require going online or opening the corresponding WeChat or Alipay payment app on your phone.

[0004] In modern life, payment via QR codes, which include both a receipt code and a payment code, is very common. However, these codes require customers to use their mobile phones to confirm payment, which can degrade the customer experience when they are shopping for large quantities and don't have their hands free to pay. Current contactless payment methods use facial or fingerprint recognition to confirm payment, which can easily reveal personal information. Therefore, a payment method that is both quick and easy to use while not revealing personal information is needed.

[0005] CN101308559A discloses a WI-FI mobile phone payment terminal, payment method, and system. The system includes: a payer's mobile phone terminal, a payee's mobile phone terminal, and a bank mobile payment server. The payee's mobile phone terminal is used to send a payment request to the payer's mobile phone terminal via a WI-FI signal; the payer's mobile phone terminal is used to receive the payment request and, based on the payment request, send a payment instruction to the bank mobile payment server; the bank mobile payment server receives the payment request, processes relevant account information, and sends the operation results to the payee's mobile phone terminal and the payer's mobile phone terminal. Bill information is sent to a mobile phone via Wi-Fi, and the mobile phone is used to confirm and make payment, which reduces the need to input information. However, mobile payment is required, and there is a possibility that the hands are not free for confirmation, which may reduce the customer experience.

[0006] The technical problem to be solved by the present invention is: how to pay without a network or without taking out a mobile phone to operate, and how to pay in large quantities automatically and quickly at the same time.

[0007] Summary of the Invention

[0008] The main purpose of the present invention is to provide an offline automatic payment method based on Wi-Fi technology. By utilizing Wi-Fi beacon broadcast packets, the consumption information of each consumer is continuously broadcast. The customer obtains his or her bill based on the unique temporary PTK of his or her mobile phone and sends the payment QR code encrypted by 4-Way Handshake, thereby realizing payment in the absence of network or without taking out the mobile phone to operate the payment. In addition, the AP can send multiple beacon broadcast packets in a short period of time, thereby realizing large-scale automatic and fast payment.

[0009] To achieve the above objectives, the technical solutions adopted in this application are:

[0010] An offline automatic payment method based on Wi-Fi technology includes the following steps:

[0011] Step 1: The AP broadcasts first data containing the customer's mobile phone bill. When the customer's mobile phone receives the first data and verifies the MIC, it obtains the bill and initiates a 4-Way Handshake offline connection with the AP.

[0012] Step 2: The AP encrypts Anonce using the first PTK to generate M1 and sends it to the client phone. The client phone decrypts M1 using the first PTK to obtain Anonce. The first PTK was negotiated between the AP and the client phone during the previous 4-Way Handshake.

[0013] Step 3: The AP receives M2, which contains the payment code and Snonce encrypted using a second PTK. The second PTK is generated by the customer's phone using the customer's phone identification information, Anonce, and Snonce. The customer's phone identification information is pre-stored in the AP.

[0014] Step 4: The AP uses the second PTK to decrypt the payment code and uses the decrypted payment code to make payment.

[0015] It should be noted that the 4-Way Handshake is the process by which a mobile phone and an access point establish a wireless connection via Wi-Fi. Specifically, the AP and STA each know the password before the 4-way handshake. At the 1 / 4 mark, the AP transmits its random number (Anonce) to the STA. After receiving the Anonce, the STA can generate the PTK. At the 2 / 4 mark, the STA transmits its random number (Snonce) to the AP, along with a MIC (Secret Confirmation Key). After receiving the Snonce, the AP can generate the PTK and compare the received MIC with its own MIC for integrity verification. If the integrity check fails, the handshake fails. If the integrity check succeeds, the AP generates the PTK and GTK (Group Transient Key, used to encrypt multicast and broadcast messages). At the 3 / 4 mark, the AP sends both the GTK and MIC to the STA. At the 4 / 4 mark, the STA sends an ACK to confirm the connection.

[0016] STA: Every terminal connected to a wireless network, such as laptops, mobile phones, and other user devices that can access the Internet.

[0017] AP: A wireless access point is the creator of a wireless network and the central node of the network. A wireless router used in a typical home or office is an AP, as is a device that can enable a Wi-Fi hotspot.

[0018] Anonce: A random number generated by the AP.

[0019] Snonce: A random number generated by the STA.

[0020] PTK: Pairwise Transmission Key, used for encryption and decryption of unicast data frames.

[0021] BSSID: Identifier for device identification.

[0022] Beacon: A beacon frame is sent periodically by the AP at certain time intervals to inform the outside world of the existence of its wireless network.

[0023] MIC: Key confirmation key, used for verification.

[0024] GTK: Group Transient Key, used to encrypt multicast and broadcast.

[0025] Preferably, the identification information of the customer's mobile phone is the mobile phone number and the BSSID of the mobile phone.

[0026] Preferably, the verification method in step 1 is: the AP uses the first PTK to encrypt the consumption bill; and the customer's mobile phone uses the first PTK to decrypt.

[0027] Preferably, if this is a first-time purchase, an electronic shopping card is required. The specific process is as follows: the AP encrypts and broadcasts a second data message using the client's mobile phone identifier; the second data message includes the merchant's BSSID and merchant name. The client's mobile phone decrypts the second data message using the identifier to obtain the AP's BSSID and merchant name. The merchant information needs to be stored for use by the chain merchant. A 4-Way Handshake offline connection is then initiated with the AP to generate a first PTK.

[0028] Preferably, the method further includes step 5: the AP monitors the location of the customer through the positioning of the customer's mobile phone, and determines whether the customer has paid when the customer leaves.

[0029] Preferably, the method further includes step 6: the AP scans other surrounding APs to determine whether there is an AP-BSSID conflict among other APs.

[0030] Preferably, if it is a chain store, multiple APs share the customer's mobile phone information and the first PTK; the customer's mobile phone information includes the mobile phone number and the BSSID of the mobile phone;

[0031] Step 1: The AP broadcasts first data; the first data contains the customer's mobile phone consumption bill and the original AP-BSSID; when the customer's mobile phone receives the first data and verifies that the MIC is passed, it obtains the consumption bill and the original AP-BSSID, verifies that the original AP-BSSID is passed, and initiates a 4-Way Handshake offline connection with the AP.

[0032] An offline automatic payment device based on Wi-Fi technology is also provided, comprising the following units:

[0033] Broadcast unit: used to broadcast first data; the first data contains the customer's mobile phone consumption bill; when the customer's mobile phone receives the first data and verifies the MIC, it obtains the consumption bill and initiates a 4-Way Handshake offline connection with the AP;

[0034] M1 generation unit: used to encrypt Anonce with a first PTK to generate M1 and send it to the client phone; the client phone decrypts M1 with the first PTK to obtain Anonce; the first PTK is negotiated between the AP and the client phone during the previous 4-Way Handshake process;

[0035] M2 receiving unit: used to receive M2, wherein M2 contains a payment code and a Snonce encrypted with a second PTK; the second PTK is generated by the customer's mobile phone using the customer's mobile phone identification information, Anonce, and Snonce; the customer's mobile phone identification information is pre-stored in the AP;

[0036] Payment receiving unit: used to decrypt the payment code using the second PTK and use the decrypted payment code to make payment;

[0037] The broadcast unit, M1 generation unit, M2 receiving unit and payment collection unit are communicatively connected in sequence.

[0038] Preferably, it also includes:

[0039] Positioning unit: used to monitor the customer's location through the positioning of the customer's mobile phone and determine whether the customer has paid when leaving;

[0040] The positioning unit is in communication with the payment receiving unit.

[0041] Preferably, it also includes:

[0042] Scanning unit: used to scan other APs around and determine whether there is an AP-BSSID conflict with other APs;

[0043] The scanning unit is communicatively connected with the positioning unit.

[0044] Preferably, it also includes:

[0045] Sharing unit: used for multiple APs to share customer mobile phone information and the first PTK; the customer mobile phone information includes the mobile phone number and the BSSID of the mobile phone;

[0046] The sharing unit is communicatively connected with the scanning unit.

[0047] Also provided is an offline automatic payment system based on Wi-Fi technology, comprising any of the above-mentioned devices and a customer's mobile phone; the customer's mobile phone is communicatively connected to the device.

[0048] Preferably, the plurality of devices are communicatively connected with each other.

[0049] Compared with the existing technology, this solution has the following beneficial effects:

[0050] This solution's offline automatic payment method, based on Wi-Fi technology, cleverly utilizes beacon broadcast packets to continuously broadcast individual billing information. Each beacon packet carries a customer's information, encrypted using a unique PTK, much like each vehicle carrying different goods, ensuring strong security. If the customer successfully decrypts the packet, the beacon packet contains their bill. The customer's phone then uses an offline 4-Way Handshake to encrypt the payment QR code and send it to the access point for payment. This allows payment to be made even without a network connection or without having to use the phone. By setting the beacon interval to 10 milliseconds and broadcasting a beacon every 10 milliseconds, 100 beacons are broadcast per second. Therefore, 100 customer bills can be processed simultaneously within one second. For larger shopping malls, multiple access points can be used, but with different frequencies. For example, a 2.4G network has 13 channels, allowing 100 * 13 = 1600 bills to be processed per second, significantly improving the speed of simultaneous bill processing.

[0051] 2. This solution's offline automatic payment method based on Wi-Fi technology offers high security. Fake APs may appear near the service area, so legitimate APs frequently scan surrounding APs for BSSID conflicts. If a conflict occurs, the merchant can report it to the police and locate the offending AP through location tracking. Similarly, if a customer receives an illegal bill on their phone, they can notify the merchant to report it to the police. To verify the merchant's legitimacy, the first time a card is issued, the customer needs to click on the phone to confirm the merchant's information and identify the legitimate AP and merchant. Secondly, when making purchases in a different location, the customer's phone enters the range of the AP, and the AP uses the cloud platform to detect that the customer's phone is roaming. The Beacon packet will contain the AP-BSSID used when the customer registered, indicating a legitimate bill. Purchases can be made according to the local Wi-Fi fast automatic deduction process, eliminating the need to apply for an electronic shopping card at every store and improving the customer's shopping experience.

[0052] 3. The offline automatic payment method based on Wi-Fi technology in this solution can track whether the deduction is successful through the Wi-Fi positioning system, so as to remind customers that the payment is unsuccessful or report the act of running away, thus protecting the interests of merchants. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] FIG1 is a flow chart of an offline automatic payment method according to Embodiment 1;

[0054] FIG2 is a flowchart of Example 14-Way Handshake offline connection;

[0055] FIG3 is a block diagram of an offline automatic payment device according to Embodiment 2;

[0056] FIG4 is a structural diagram of the offline automatic payment system of Example 3. DETAILED DESCRIPTION

[0057] To make the objectives, technical solutions, and advantages of the embodiments of the present application more clear, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the accompanying drawings of the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Generally, the components of the present application described and shown in the drawings herein can be arranged and designed in various different configurations.

[0058] Example 1

[0059] Referring to FIG1 , an offline automatic payment method based on Wi-Fi technology includes the following steps:

[0060] Step 1: The AP broadcasts first data containing the customer's mobile phone bill. When the customer's mobile phone receives the first data and passes verification, it obtains the bill and initiates a 4-Way Handshake offline connection with the AP.

[0061] During step 1, the AP and the customer's phone have already established a Wi-Fi connection during the customer's last purchase. Because the AP and the customer's phone have already established an offline Wi-Fi connection, both have the first PTK stored. After receiving the first data, the customer's phone verifies it as follows: the AP encrypts the bill using the first PTK; the customer's phone decrypts it using the first PTK. If the first data can be decrypted and the calculated MIC is verified to be correct, the bill is confirmed to be the customer's own, and the customer's phone receives the bill. The MIC is part of the PTK and is used for integrity verification during data transmission.

[0062] If the customer and the store have never established an offline Wi-Fi connection, authentication should be performed. More generally, this involves applying for an e-shopping card. The AP encrypts and broadcasts the second data using the customer's phone's identifier. The original second PTK is simply the negotiated phone number plus a padding value. The second data contains the AP-BSSID and the merchant's name. The customer's phone decrypts the second data using the identifier to obtain the merchant's basic information and initiates a 4-Way Handshake offline connection with the AP, replacing the AP's inherent password with the phone number. When the AP receives M2, it verifies the MIC using the inherent password as normal, but the phone number verifies the MIC correctly. Therefore, only the first PTK is generated and not installed for Wi-Fi data encryption.

[0063] During this process, the legitimacy of the second data contained in the AP's beacon must be verified. The AP encrypts the second data using the customer's mobile phone number and a padding of 1. After receiving the second data, the customer's phone decrypts it using their own mobile phone number. Upon successful decryption, a pop-up window confirming the merchant's information appears. After confirming the merchant's information is correct, the customer clicks "Confirm" on their phone, which then stores the AP-BSSID, merchant name, and phone number. The customer's phone can then store the AP-BSSID, merchant name, phone number, and first PTK on their SIM card or upload it to a payment QR code platform like WeChat or Alipay for recovery purposes if the customer changes phones or SIM cards. The AP also stores the phone's BSSID, corresponding mobile phone number, and corresponding first PTK in its data table. This ensures that the customer knows which APs and merchants are legitimate for future purchases, preventing others from stealing the customer's payment QR code.

[0064] Step 2: The AP encrypts Anonce using the first PTK to generate M1 and sends it to the client phone. The client phone decrypts M1 using the first PTK to obtain Anonce. The first PTK was negotiated between the AP and the client phone during the previous 4-Way Handshake.

[0065] It should be noted that the first PTK at this time is the first PTK when the electronic shopping card is first applied for or the second PTK saved by the AP and the customer's mobile phone during the last 4-Way Handshake offline connection process.

[0066] Step 3: The AP receives M2, which contains a payment code encrypted with a second PTK, embedded in key-data and Snonce. The second PTK is generated by the customer's phone using the customer's phone identification information, Anonce, and Snonce. The customer's phone identification information is pre-stored in the AP. The key-data attribute is a custom attribute of the second data (M2 packet) that can store information.

[0067] It should be noted that the second PTK is generated during the 4-Way Handshake process using the client's phone's identifier, Anonce, and Snonce. The client's phone uses the saved second PTK to encrypt M2 and store the second PTK. Furthermore, if a client's phone is replaced, the phone's BSSID will change. Therefore, if the phone's BSSID changes, the old BSSID must be included in the Snonce. Specifically, the Snonce is generated by adding the old phone's BSSID (6 bytes) to the randomly generated 26 bytes. This allows the AP to determine whether the phone has changed its BSSID.

[0068] Step 4: The AP uses the second PTK to decrypt the payment code and uses the decrypted payment code to make payment.

[0069] After receiving M2, the AP verifies M2's MIC using the previously saved first PTK. If verification fails, the AP looks up the corresponding phone number based on the phone's BSSID, calculates the second PTK based on the Anonce and Snonce, and uses the second PTK to verify the MIC. If verification is successful, the second PTK replaces the first PTK and is saved. The AP then obtains the payment code for payment. If the current phone's BSSID is changed to a new one, the AP saves the new BSSID.

[0070] Preferably, the identification information of the customer's mobile phone is a mobile phone number.

[0071] Preferably, the method further includes step 5: the AP monitors the location of the customer through the positioning of the customer's mobile phone, and determines whether the customer has paid when the customer leaves.

[0072] In this embodiment, the customer's phone's positioning system uses the AP to assist in positioning. The AP then detects that the customer has entered its service range. If the customer's phone fails to send the payment QR code, or if the AP fails to debit the payment, the AP will send an alert indicating which customer has not paid when the customer's phone is about to leave the mall. The customer's phone will also be notified of the unpaid bill, protecting the interests of both merchants and customers.

[0073] Preferably, the method further includes step 6: the AP scans other surrounding APs to determine whether there is an AP-BSSID conflict among other APs.

[0074] In this embodiment, to improve security, some fake APs may appear. Therefore, legitimate APs should regularly scan surrounding APs for AP-BSSID conflicts. If a conflict occurs, the merchant can report it to the police and locate the offending AP through location tracking. Similarly, if a customer receives a bill that violates the law, they can notify the merchant to report it. To verify the merchant's legitimacy, the first time you apply for a card, you need to click on the merchant's information on your phone to confirm the legitimate AP and merchant.

[0075] Preferably, if it is a chain store, multiple APs share the customer's mobile phone information and the first PTK; the customer's mobile phone information includes the mobile phone number and the BSSID of the mobile phone;

[0076] When a customer's phone enters the range of an access point (AP) at a chain store, the AP detects the roaming status through a cloud platform. The beacon packet contains the AP-BSSID used during customer registration, confirming a valid bill. The customer can then proceed with the Wi-Fi fast automatic deduction process according to local procedures.

[0077] If a customer's phone roams to another chain store, the AP's beacon packet carries the AP-BSSID from the time of registration, ID 0x4. If the customer's phone discovers a new AP, it will iterate through all first PTKs. If it finds a corresponding old AP-BSSID, it confirms that the customer has roamed to a different AP within the same store. If the customer's phone finds its own bill, it will select this AP-BSSID for authentication and association. This allows payment within chain stores without multiple registrations, improving the customer shopping experience.

[0078] Referring to Figure 2, it should be noted that during an offline 4-Way Handshake connection, the PTK is not installed, and no IP address is obtained. However, the Anonce for M1 is encrypted. When the mobile phone receives M1, it uses the stored PTK to calculate the Anonce. For M2, the mobile phone number is used as the password to generate a new PTK, and the key-data (the payment code) is encrypted. When the AP receives M2, it verifies that the MIC in M2 is incorrect, following a normal 4-Way Handshake connection. It then searches for the customer's mobile phone number and uses it to generate a new PTK, verifying that the MIC is correct. Therefore, when the AP sends M3, it sets the first two reserved bits of M3's key information to 10 and writes 1 in the error column, indicating that the PTK cannot be installed and that this is an offline 4-Way Handshake connection. The same principle applies to M4. During an offline 4-Way Handshake connection, the AP and mobile phone transmit data during the handshake process, without establishing a network connection with the AP. Specifically, the AP and the phone exchange data during the four-way handshake authentication process, then save but not install the PTK. This causes the WiFi connection between the AP and the phone to fail, enabling payment without connecting to the mall's WiFi. The AP and phone retain their normal Wi-Fi functionality.

[0079] Example 2

[0080] Referring to FIG3 , an offline automatic payment device based on Wi-Fi technology includes the following units:

[0081] Broadcast unit: used to broadcast first data; the first data contains the customer's mobile phone consumption bill; when the customer's mobile phone receives the first data and passes the verification, it obtains the consumption bill and initiates a 4-Way Handshake connection with the AP;

[0082] M1 generation unit: used to encrypt Anonce with a first PTK to generate M1 and send it to the client phone; the client phone decrypts M1 with the first PTK to obtain Anonce; the first PTK is negotiated between the AP and the client phone during the previous 4-Way Handshake process;

[0083] M2 receiving unit: used to receive M2, which contains the payment code and Snonce encrypted with the second PTK; the second PTK is generated by the customer's mobile phone using the customer's mobile phone identification information, Anonce, and Snonce; the customer's mobile phone identification information is pre-stored in the AP;

[0084] Payment collection unit: Used to decrypt the payment code using the second PTK and use the decrypted payment code to make payment. At the same time, it reminds the customer's mobile phone that the new second PTK is an offline connection and does not need to store the mobile phone number as a universal password. The reserved and error bits can be assigned special values ​​for prompting;

[0085] Positioning unit: used to monitor the customer's location through the positioning of the customer's mobile phone, and determine whether the customer has paid when leaving.

[0086] Scanning unit: used to scan other APs in the surrounding area to determine whether there is an AP-BSSID conflict with other APs.

[0087] Sharing unit: used for multiple APs to share client mobile phone information and the first PTK; the client mobile phone information includes the mobile phone number and the BSSID of the mobile phone.

[0088] In this embodiment, the broadcast unit, M1 generation unit, M2 receiving unit, payment collection unit, positioning unit, scanning unit, and sharing unit are sequentially connected. After the broadcast unit broadcasts the first data, the customer's mobile phone issues a 4-Way Handshake offline connection request. The broadcast unit sends the 4-Way Handshake offline connection request information to the M1 generation unit. The M1 generation unit encrypts the Anonce using the first PTK to generate M1, sends it to the customer's mobile phone, and sends a message to the M2 receiving unit, prompting it to receive M2. The M2 receiving unit receives M2 and sends it to the payment collection unit. The payment collection unit decrypts the payment code and makes the payment. The payment collection unit sends a successful payment message to the positioning unit, which then sends the bill to the customer's mobile phone when the customer leaves. The scanning unit scans for nearby APs. If an illegal AP is found, it sends a message to the merchant. An AP whose AP-BSSID is not on the merchant's list is an illegal AP. In chain stores with stores in different locations, multiple sharing units are interconnected through the Internet or local area network to share customer mobile phone information and the first PTK, so that each AP can have all customer mobile phone information and the corresponding first PTK.

[0089] Example 3

[0090] Referring to FIG4 , an offline automatic payment system based on Wi-Fi technology includes the above-mentioned device and a customer's mobile phone; the customer's mobile phone is in communication connection with the device, and the multiple devices are in communication connection with each other.

[0091] The customer's mobile phone and the offline automatic payment device are linked through the 4-Way Handshake authentication process to send the payment code to the offline automatic payment device for payment. During this process, the customer can make payments safely and quickly without having to use his mobile phone to confirm, thus improving the customer's shopping experience.

[0092] The sharing unit between multiple devices enables different merchants in a chain of merchants to share a customer's mobile phone number, mobile phone BSSID and first PTK, thereby enabling payment in the chain of merchants without multiple registrations, thereby improving the customer's shopping experience.

[0093] While embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions, and variations may be made to the embodiments without departing from the principles and spirit of the invention, and that the scope of the invention is defined by the claims and their equivalents.

Claims

1. An offline automatic payment method based on Wi-Fi technology, characterized in that, It includes the following steps: Step 1: The AP broadcasts the first data; the first data contains the consumption bill of the customer's mobile phone; when the customer's mobile phone receives the first data and passes the verification, it obtains the consumption bill and initiates a 4-Way Handshak offline connection with the AP; Step 2: The AP encrypts Anonce with the first PTK to generate M1 and sends it to the customer's mobile phone; the customer's mobile phone decrypts M1 with the first PTK to obtain Anonce; the first PTK is negotiated between the AP and the customer's mobile phone during the previous 4-Way Handshak process; Step 3: The AP receives M2, where M2 contains the payment code encrypted with the second PTK and Snonce; the second PTK is generated by the customer's mobile phone using the customer's mobile phone's identification information, Anonce, and Snonce; the customer's mobile phone's identification information is pre-stored in the AP; Step 4: The AP decrypts the payment code with the second PTK and makes a payment using the decrypted payment code. The AP and the customer's mobile phone each use the second PTK to replace the first PTK for storage.

2. The offline automatic payment method based on Wi-Fi technology according to claim 1, wherein The identification information of the customer's mobile phone is the mobile phone number and the BSSID of the mobile phone.

3. The offline automatic payment method based on Wi-Fi technology according to claim 1, characterized in that, The verification method in Step 1 is: The AP encrypts the consumption bill with the first PTK; the customer's mobile phone decrypts it with the first PTK.

4. The offline automatic payment method based on Wi-Fi technology according to claim 1, characterized in that For the first purchase, an electronic shopping card needs to be processed. The specific process is: The AP encrypts the second data with the customer's mobile phone's identification information and broadcasts it; the second data contains the AP-BSSID and the merchant name; when the customer's mobile phone decrypts the second data with the identification information, obtains the AP-BSSID and the merchant name, the customer needs to confirm the merchant's information for the first time and initiate a 4-Way Handshak offline connection with the AP.

5. The offline automatic payment method based on Wi-Fi technology according to claim 1, characterized in that, It also includes Step 5: The AP monitors the customer's location through the customer's mobile phone and determines whether the payment has been made when the customer leaves.

6. The offline automatic payment method based on Wi-Fi technology according to claim 1, characterized in that, It also includes Step 6: The AP scans other APs around and determines whether there is an AP-BSSID conflict with other APs.

7. The offline automatic payment method based on Wi-Fi technology according to claim 4, wherein For chain merchants, multiple APs share the customer's mobile phone information and the first PTK; the customer's mobile phone information includes the mobile phone number and the BSSID of the mobile phone; In Step 1: The AP broadcasts the first data; the first data contains the consumption bill of the customer's mobile phone and the original AP-BSSID; when the customer's mobile phone receives the first data and passes the verification, it obtains the consumption bill and the original AP-BSSID, verifies the original AP-BSSID and passes, and initiates a 4-Way Handshak offline connection with the AP.

8. An offline automatic payment device based on Wi-Fi technology, characterized in that, It includes the following units: Broadcast unit: Used to broadcast the first data; the first data contains the consumption bill of the customer's mobile phone; when the customer's mobile phone receives the first data and passes the verification, it obtains the consumption bill and initiates a 4-Way Handshak offline connection with the AP; M1 Generation Unit: It is used to generate M1 by encrypting Anonce with the first PTK and send it to the customer's mobile phone; the customer's mobile phone decrypts M1 with the first PTK to obtain Anonce; the first PTK is negotiated by the AP and the customer's mobile phone during the previous 4-Way Handshak process; M2 Receiving Unit: It is used to receive M2, where M2 contains the payment code encrypted with the second PTK and Snonce; the second PTK is generated by the customer's mobile phone using the customer's mobile phone's identification information, Anonce, and Snonce; the customer's mobile phone's identification information is pre-stored in the AP; Collection Unit: It is used to decrypt the payment code with the second PTK and make a payment using the decrypted payment code, The broadcast unit, M1 generation unit, M2 receiving unit, and collection unit are sequentially communicatively connected.

9. The offline automatic payment device based on Wi-Fi technology according to claim 8, wherein It further includes: Location Unit: It is used to monitor the customer's location through the location of the customer's mobile phone and determine whether the payment has been made when the customer leaves; The location unit is communicatively connected to the collection unit.

10. An offline automatic payment device based on Wi-Fi technology according to claim 8, characterized in that, It further includes: Scanning Unit: It is used to scan other surrounding APs and determine whether there is an AP-BSSID conflict among other APs; The scanning unit is communicatively connected to the location unit.

11. An offline automatic payment device based on Wi-Fi technology according to claim 8, characterized in that, It further includes: Sharing Unit: It is used for multiple APs to share the customer's mobile phone information and the first PTK; the customer's mobile phone information includes the mobile phone number and the BSSID of the mobile phone; The sharing unit is communicatively connected to the scanning unit.

12. An offline automatic payment system based on Wi-Fi technology, characterized in that, It includes the device as described in any one of 7-11 and the customer's mobile phone; the customer's mobile phone is communicatively connected to the device.

13. An offline automatic payment system based on Wi-Fi technology according to claim 12, characterized in that, The multiple devices are communicatively connected to each other.

Citation Information

Patent Citations

  • mobile intelligent terminal payment method and system based on low-power-consumption Bluetooth

    CN103824185A

  • Payment information processing method, device, mobile terminal and system

    CN109919597A

  • Method and device for managing communication channel

    CN113613245A

  • Offline automatic payment method, system and device based on Wi-Fi technology

    CN117479111A

  • Security authentication method and apparatus applied to wi-fi

    US20230300615A1