Method, system, apparatus and device for preventing unauthorized scanning of quick response code, and storage medium and product

Abstract

Disclosed in the present application are a method, system, apparatus and device for preventing unauthorized scanning of a quick response code, and a storage medium and a product. The method comprises: on the basis of a quick response code generation command sent by a terminal device, generating a target quick response code, and feeding back the target quick response code to the terminal device; receiving first user information and second user information fed back by a scanning terminal, wherein the first user information is generated by the scanning terminal scanning the target quick response code on the terminal device, and the second user information is acquired by the scanning terminal from the terminal device by means of a SIM card; and sending the first user information and the second user information to a card application server for identity verification, so as to obtain an identity authentication result, and sending the identity authentication result to the scanning terminal for service processing. Compared with an existing method for performing service processing only on the basis of a quick response code, the above method in the present application can better protect the information security of a user and prevent unauthorized scanning of the quick response code.

Description

Two-dimensional code anti-fraud method, system, device, equipment, storage medium and product

[0001] Cross-reference to Related Applications

[0002] The present application claims priority from Chinese patent application 202411067183.9 filed on August 5, 2024, the disclosure of which is incorporated herein by reference in its entirety. TECHNICAL FIELD

[0003] The present application relates to the technical field of data processing, and particularly relates to a two-dimensional code anti-fraud method, system, device, equipment, storage medium and product. BACKGROUND

[0004] With the wide application of two-dimensional code technology, how to avoid two-dimensional code fraud becomes an important security issue. Smartphones generate consumption two-dimensional codes, and consumption is performed through fixed or mobile intelligent terminal code scanning identification. This payment method is very common in daily life scenarios, such as urban public transportation, subways, electronic boarding passes, various tickets, and offline store pickup, etc. Since the information between the mobile phone App (Application) and the intelligent code scanning terminal is unidirectional and does not require a password, how to prevent the consumption two-dimensional code on the mobile phone from being intentionally or unintentionally fraud becomes a very important mobile payment security issue. SUMMARY

[0005] The main purpose of the present application is to provide a two-dimensional code anti-fraud method, system, device, equipment, storage medium and product, which aims to solve the technical problem that the two-dimensional code is easily fraud in the prior art.

[0006] To achieve the above purpose, the present application provides a two-dimensional code anti-fraud method, which is applied to a software server, and the two-dimensional code anti-fraud method comprises the following steps:

[0007] When receiving a two-dimensional code generation command sent by a terminal device, generating a target two-dimensional code according to user information in the two-dimensional code generation command, and feeding back the generated target two-dimensional code to the terminal device;

[0008] Receiving first user information and second user information fed back by a scanning terminal, wherein the first user information is generated by the scanning terminal scanning a target two-dimensional code on the terminal device, and the second user information is obtained by the scanning terminal from the terminal device through a SIM card;

[0009] Sending the first user information and the second user information to a card application server;

[0010] receive the identity authentication result fed back by the card application server according to the first user information and the second user information, and send the identity authentication result to the scanning terminal for business processing.

[0011] In addition, to achieve the above object, the application further provides a two-dimensional code anti-theft method, which is applied to a card application server and includes the following operations:

[0012] receive first user information and second user information sent by a software server, the first user information being generated by scanning a target two-dimensional code on a scanning terminal device, and the second user information being obtained by the scanning terminal from the terminal device through a SIM card;

[0013] perform user identity authentication based on the first user information and the second user information, obtain an identity authentication result, and send the identity authentication result to the software server.

[0014] In addition, to achieve the above object, the application further provides a two-dimensional code anti-theft method, which is applied to a scanning terminal and includes the following operations:

[0015] scan a target two-dimensional code displayed on a scanning terminal device, and determine first user information according to the target two-dimensional code;

[0016] obtain second user information on a terminal device through NFC;

[0017] send the first user information and the second user information to a software server;

[0018] receive an identity authentication result fed back by the software server, and perform business processing according to the identity authentication result.

[0019] In addition, to achieve the above object, the application further provides a two-dimensional code anti-theft system, which includes a software server, a scanning terminal and a card application server.

[0020] The software server is configured to, when receiving a two-dimensional code generation command sent by a terminal device, generate a target two-dimensional code according to the two-dimensional code generation command, and feed back the generated target two-dimensional code to the terminal device.

[0021] The scanning terminal is configured to obtain first user information based on the target two-dimensional code displayed by the terminal device, and obtain second user information from the terminal device through a SIM card, and send the first user information and the second user information to the software server.

[0022] The software server is further configured to send the first user information and the second user information to a card application server.

[0023] The card application server is configured to perform user identity authentication based on the first user information and the second user information, and feed back an identity authentication result to the software server.

[0024] The software server is further configured to send the identity authentication result to the scanning terminal.

[0025] The scanning terminal is further configured to perform business processing based on the identity authentication result.

[0026] In addition, to achieve the above object, the application further provides a two-dimensional code anti-theft device, which is applied to a software server and comprises:

[0027] A target two-dimensional code generation module is configured to generate a target two-dimensional code according to user information in a two-dimensional code generation command when receiving the two-dimensional code generation command, and feed back the generated target two-dimensional code to a terminal device.

[0028] A user information receiving module is configured to receive first user information and second user information fed back by a scanning terminal, wherein the first user information is generated by the scanning terminal by scanning a target two-dimensional code on the terminal device, and the second user information is obtained by the scanning terminal from the terminal device through a SIM card.

[0029] A user information forwarding module is configured to send the first user information and the second user information to a card application server.

[0030] An identity authentication result feedback module is configured to receive an identity authentication result fed back by the card application server according to the first user information and the second user information, and send the identity authentication result to the scanning terminal for business processing.

[0031] In addition, to achieve the above object, the application further provides a two-dimensional code anti-theft device, which is applied to a card application server and comprises:

[0032] A receiving module is configured to receive first user information and second user information sent by a software server, wherein the first user information is generated by scanning a target two-dimensional code on a terminal device, and the second user information is obtained by a scanning terminal from the terminal device through a SIM card.

[0033] An identity authentication module is configured to perform user identity authentication based on the first user information and the second user information, obtain an identity authentication result, and send the identity authentication result to the software server.

[0034] In addition, to achieve the above object, the application further provides a two-dimensional code anti-theft device, which is applied to a scanning terminal and comprises:

[0035] A scanning module is configured to scan a target two-dimensional code displayed on a terminal device and determine first user information according to the target two-dimensional code.

[0036] An NFC module is configured to acquire second user information on the terminal device through NFC.

[0037] A user information sending module is configured to send the first user information and the second user information to a software server.

[0038] A business processing module is configured to receive an identity authentication result fed back by the software server and perform business processing according to the identity authentication result.

[0039] In addition, to achieve the above object, the application further provides a two-dimensional code anti-theft device, which comprises a memory, a processor and a computer program stored in the memory and executable on the processor, and the computer program is configured to implement the operations of the two-dimensional code anti-theft method as described above.

[0040] In addition, to achieve the above object, the application further provides a storage medium, which is a computer readable storage medium, and the storage medium stores a computer program, and the computer program is executed by a processor to implement the operations of the two-dimensional code anti-theft method as described above.

[0041] In addition, to achieve the above object, the application further provides a computer program product, which comprises a computer program, and the computer program is executed by a processor to implement the operations of the two-dimensional code anti-theft method as described above.

[0042] The application receives a two-dimensional code generation command sent by a terminal device, generates a target two-dimensional code according to user information in the two-dimensional code generation command, and feeds back the generated target two-dimensional code to the terminal device; receives first user information and second user information fed back by a scanning terminal, the first user information is generated by the scanning terminal scanning the target two-dimensional code on the terminal device, and the second user information is obtained by the scanning terminal from the terminal device through a SIM card; sends the first user information and the second user information to a card application server; receives an identity authentication result fed back by the card application server according to the first user information and the second user information, and sends the identity authentication result to the scanning terminal for business processing. Since the application performs identity authentication and business processing through the first user information generated by scanning the target two-dimensional code and the second user information obtained through the SIM card, compared with the existing method of performing business processing only according to the information on the scanned two-dimensional code, the above method of the application can better protect the information security of the user and prevent the two-dimensional code from being stolen. BRIEF DESCRIPTION OF DRAWINGS

[0043] The accompanying drawings, which are incorporated into and form part of the specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the application.

[0044] In order to more clearly illustrate the technical solutions in the embodiments of the application or the prior art, the accompanying drawings needed to be used in the embodiments or prior art description will be briefly introduced. Obviously, for those skilled in the art, other drawings can also be obtained based on these drawings without creative labor.

[0045] Fig. 1 is a structural schematic diagram of a first embodiment of a two-dimensional code anti-fraud system of the application;

[0046] Fig. 2 is a flowchart provided by a first embodiment of a two-dimensional code anti-fraud method of the application;

[0047] Fig. 3 is a flowchart provided by a second embodiment of a two-dimensional code anti-fraud method of the application;

[0048] Fig. 4 is an identity authentication flowchart provided by the second embodiment of the two-dimensional code anti-fraud method of the application;

[0049] Fig. 5 is a SIM card application opening flowchart provided by the second embodiment of the two-dimensional code anti-fraud method of the application;

[0050] Fig. 6 is a flowchart provided by a third embodiment of a two-dimensional code anti-fraud method of the application;

[0051] Fig. 7 is a module structure schematic diagram of a first embodiment of a two-dimensional code anti-fraud device of the application;

[0052] Fig. 8 is a schematic diagram of a module structure of a second embodiment of the two-dimensional code anti-fraud device according to the present application;

[0053] Fig. 9 is a schematic diagram of a module structure of a third embodiment of the two-dimensional code anti-fraud device according to the present application;

[0054] Fig. 10 is a schematic diagram of a device structure of a hardware operating environment involved in a two-dimensional code anti-fraud method according to an embodiment of the present application.

[0055] The object, functional features and advantages of the present application will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0056] It should be understood that the specific embodiments described herein are merely intended to explain the technical solutions of the present application, and are not intended to limit the present application.

[0057] In order to better understand the technical solutions of the present application, the following will be described in detail in conjunction with the accompanying drawings and specific embodiments.

[0058] The main solution of the embodiment of the present application is as follows: when a two-dimensional code generation command sent by a terminal device is received, user information is determined according to the two-dimensional code generation command; a target two-dimensional code is generated according to the user information, and the generated target two-dimensional code is fed back to the terminal device; first user information and second user information fed back by a scanning terminal are received, the first user information is generated by the scanning terminal scanning the target two-dimensional code on the terminal device, and the second user information is obtained by the scanning terminal from the terminal device through a SIM (Subscriber Identification Module) card (i.e., a user identification card); the first user information and the second user information are sent to a card application server; an identity authentication result fed back by the card application server according to the first user information and the second user information is received, and the identity authentication result is sent to the scanning terminal for business processing.

[0059] Since the present application is to perform identity authentication and business processing through the first user information generated by scanning the target two-dimensional code and the second user information obtained through the SIM card, compared with the existing method of performing business processing only according to the information on the scanned two-dimensional code, the above method of the present application can better protect the information security of the user and prevent the two-dimensional code from being fraudulently used.

[0060] It should be noted that the execution subject of the present embodiment can be a computing service device having data processing, network communication and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or an electronic device capable of realizing the above functions, a two-dimensional code anti-fraud device, etc. In the following, the present embodiment and each of the following embodiments will be described by taking the two-dimensional code anti-fraud device as an example.

[0061] Based on this, the application embodiment provides a two-dimensional code anti-fraud system. Referring to FIG. 1, FIG. 1 is a structural schematic diagram of a first embodiment of the two-dimensional code anti-fraud system.

[0062] In this embodiment, the two-dimensional code anti-fraud system comprises a software server, a scanning terminal and a card application server.

[0063] The software server is configured to generate a target two-dimensional code according to a two-dimensional code generation command when receiving the two-dimensional code generation command sent by a terminal device, and feed back the generated target two-dimensional code to the terminal device.

[0064] The scanning terminal is configured to acquire first user information based on the target two-dimensional code displayed by the terminal device, and acquire second user information from the terminal device through a SIM card, and send the first user information and the second user information to the software server.

[0065] The software server is further configured to send the first user information and the second user information to the card application server.

[0066] The card application server is configured to perform user identity authentication based on the first user information and the second user information, and feed back an identity authentication result to the software server.

[0067] The software server is further configured to send the identity authentication result to the scanning terminal.

[0068] The scanning terminal is further configured to perform business processing based on the identity authentication result.

[0069] It should be noted that, referring to FIG. 1, the software server is the APP server in FIG. 1, the scanning terminal is the two-dimensional code scanning device in FIG. 1, and the card application server is the card application server in FIG. 1. The SIM card terminal in FIG. 1 is the terminal device, which can be a mobile phone, a smart watch or other terminal capable of displaying a two-dimensional code. The terminal device is installed with a super SIM card, and the super SIM card can be installed with a SIM card application. The SIM card application is an application program for providing corresponding function services for users. In some embodiments, the card application server stores user biological information characteristic information (such as face, fingerprint and other data) and user identity information (identity ID, mobile phone number and other data), and is configured to verify user information transmitted by the App server.

[0070] App service end: used for issuing a two-dimensional code containing user information to the SIM card terminal, in addition, the App service end will receive the user information in the two-dimensional code transmitted by the two-dimensional code scanning device, the user information in the super SIM card obtained through NFC, and perform business processing according to the verification result of the card application service end on the consistency of the two-dimensional code and the user;

[0071] Two-dimensional code scanning device: not only used for scanning the two-dimensional code presented by the user and extracting the information in the two-dimensional code, but also can obtain the information in the super SIM card application (i.e. the above-mentioned SIM card application) through NFC, and send the obtained two-dimensional code information and card application information to the App service end;

[0072] SIM card terminal: a terminal device installed with a super SIM card, and presents a consumption two-dimensional code containing user information issued by the App service end to the two-dimensional code scanning device, and in addition, obtains user information from the super SIM card application through the NFC (Near Field Communication) function;

[0073] Super SIM card: installed on a mobile terminal, and a SIM card application can be installed thereon, and the super SIM card can interact with the terminal device through the opening of the machine card channel, and in the case of having the right, control the third party application and sensor installed on the terminal;

[0074] Super SIM card application: an application program installed on the super SIM card, which provides corresponding function services for the user, and the super SIM card application used in the embodiment is an identity verification application. The identity verification SIM card application, i.e. the super SIM card application, is a kind of identity verification technology based on the SIM card, and even in the case that the SIM card terminal has no network, the scanning terminal can access the identity verification SIM card application through NFC to quickly obtain and process data. When the user uses the two-dimensional code consumption function in the App which has been installed and registered, the App prompts the user to open the identity verification SIM card application. In this process, the card application server plays a crucial role. All user information, authentication information, security information and other data are managed by the card application server. This management method not only ensures the security of data, but also improves the efficiency of data processing. The card application server is not only responsible for the collection and storage of data, but also responsible for the update and maintenance of data.

[0075] It should be noted that the two-dimensional code generation command is an instruction for requesting the software server to generate a consumption two-dimensional code. The two-dimensional code generation command can include user information, and the user information includes user biological information and user identity information. The user biological information can include user face information, fingerprint information, and the like. The user identity information can include user identity ID (Identity Document, identity number), mobile phone number, and the like. The first user information is identity information and user biological information of a user obtained by a scanning terminal by scanning a target two-dimensional code on the terminal device. The user biological information can include user face information, fingerprint information, and the like. The second user information is obtained by the scanning terminal from the terminal device through a SIM card. The SIM card of the terminal device stores the second user information of the user, and the second user information can include signature data corresponding to the user biological information and user identity information. The user identity authentication based on the first user information and the second user information by the card application server can be to authenticate the identity of the user according to the first user information, the second user information, and the identity information and biological information of the user stored on the card application server. The business processing based on the identity authentication result by the scanning terminal can be that the scanning terminal performs a transaction according to consumption information in the target two-dimensional code when the identity authentication result is authentication passed, and rejects the transaction when the identity authentication result is authentication failed.

[0076] Based on the above embodiment, the application provides a two-dimensional code anti-fraud method. Referring to FIG. 2, FIG. 2 is a flowchart of the two-dimensional code anti-fraud method according to an embodiment of the application.

[0077] In this embodiment, the two-dimensional code anti-fraud method is applied to a software server, and the two-dimensional code anti-fraud method includes operations S10-S40.

[0078] In operation S10, when a two-dimensional code generation command sent by a terminal device is received, a target two-dimensional code is generated according to user information in the two-dimensional code generation command, and the generated target two-dimensional code is fed back to the terminal device.

[0079] It should be noted that the two-dimensional code generation command can include user information such as a face, a fingerprint, a username, and a mobile phone number of a user collected by a terminal device. The generating a target two-dimensional code according to the user information in the two-dimensional code generation command can be adding the user information to a generated consumption two-dimensional code to obtain a target two-dimensional code containing the user information. When a user is in a consumption scenario, the user can request a software server to issue a two-dimensional code for transaction through a terminal device. In this embodiment, the user consumption scenario mainly includes two types. The first type is a verification scenario in which a consumption two-dimensional code is generated after payment, and the second type is a small-amount payment consumption scenario. For the first type of consumption scenario, a consumption two-dimensional code is generated for the user after payment. This scenario is common in scenarios such as ticket purchase, online payment, and offline goods pickup. For example, a user purchases a movie ticket online, and a two-dimensional code containing the user's ticket purchase information is generated after payment. The user presents the two-dimensional code at the entrance of the cinema, and the staff can verify the user's ticket purchase information after scanning the two-dimensional code to confirm the validity of the user's ticket purchase. Similarly, if the user purchases an entity product online and chooses offline pickup, a two-dimensional code containing the user's purchase information is generated after payment. The user presents the two-dimensional code when picking up the goods, and the merchant can confirm the user's purchase information after scanning the two-dimensional code to complete the delivery of the goods. For the second type of consumption scenario, the user can make a small-amount payment without entering a password. This scenario is common in scenarios such as the use of public transportation tools such as buses and subways. For example, when the user takes a bus or a subway, the user only needs to present a two-dimensional code on the mobile phone to complete the payment and take the bus or subway. This method does not require the user to enter a password, and is convenient and fast. This embodiment is applicable to both of the above-mentioned user consumption scenarios.

[0080] Further, in order to prevent the user's two-dimensional code from being stolen and used, the user information includes user biological information and user identity information.

[0081] The operation of generating a target two-dimensional code according to the user information in the two-dimensional code generation command includes:

[0082] characterizing the user biological information to obtain user biological information characterization data;

[0083] encrypting the user identity information and the user biological information characterization data to obtain an encryption result;

[0084] generating a consumption two-dimensional code, embedding the encryption result in the consumption two-dimensional code, and obtaining a target two-dimensional code.

[0085] It should be noted that the user identity information can be identity ID, mobile phone number and the like data uploaded by the user during registration. The user biological information can include face, fingerprint and the like information of the user. The feature of the user biological information can be feature extraction of the user biological information, to obtain user biological information feature data. The user identity information and the user biological information feature data are encrypted by using an encryption algorithm predefined in advance, to obtain an encryption result, a consumption two-dimensional code is generated based on a general two-dimensional code generation manner, the encryption result is embedded in the consumption two-dimensional code, to obtain a target two-dimensional code. Wherein, the feature of the user biological information can be that principal component analysis (PCA) is used as a core technology, information is encoded and decoded through a high-dimensional space projection method, and the feature data is projected to a high-dimensional space determined by the data itself. In some embodiments, the feature of the face information can be: 1) data preparation: given a set of face images, extract the feature vectors to form a feature set ({X1, X2,..., Xn}). m}).

[0086] 2) PCA training: apply PCA to the feature set, find the principal components that maximize the variance. These principal components define a high-dimensional space where the main variation of the data is preserved.

[0087] 3) Feature vector mapping: project a new feature vector (X) into the principal component space through PCA to obtain its encoded representation in the space. The specific code is represented as:

[0088] def extract_features(image_paths):

[0089] #1) Extract face feature vectors from the given image path list

[0090] #2) Train PCA model

[0091] training_image_paths = ['path_to_image1.jpg', 'path_to_image2.jpg',...] # replace with your image paths

[0092] features = extract_features(training_image_paths)

[0093] pca = PCA(n_components=0.99, whiten=True) # retain 99% variance

[0094] pca_features = pca.fit_transform(features)

[0095] #3) Map new feature vector to PCA space

[0096] test_image_path = 'path_to_new_image.jpg' # replace with new image path

[0097] test_image_feature = extract_features([test_image_path])[0]

[0098] test_pca_feature = pca.transform([test_image_feature])

[0099] print("Feature vector mapped to PCA space:", test_pca_feature)

[0100] Where the extract_features function is used to extract feature vectors from a list of image paths, and the PCA class is used to train the PCA model and map the feature vectors to the principal component space. This process not only effectively compresses the face features, but also retains enough information for subsequent recognition or comparison tasks.

[0101] Operation S20, receiving the first user information and the second user information fed back by the scanning terminal, the first user information is generated by the scanning terminal scanning the target two-dimensional code on the terminal device, and the second user information is obtained by the scanning terminal from the terminal device through the SIM card;

[0102] It should be noted that after the terminal device receives the target two-dimensional code, the terminal device displays the target two-dimensional code to the scanning terminal. The scanning terminal scans the target two-dimensional code and extracts the first user information therein. The first user information includes the user biological information and the user identity information added by the software server when generating the target two-dimensional code. In order to prevent the two-dimensional code from being stolen, the scanning terminal can also obtain the second user information stored in the SIM card of the terminal device through near field communication (NFC), and the second user information includes the user identity information and the signature data corresponding to the user biological information.

[0103] Operation S30, sending the first user information and the second user information to the card application server;

[0104] In specific implementation, the software server sends the first user information and the second user information to the card application server for identity verification.

[0105] In some embodiments, since the data transmission process is all ciphertext transmission, the software server cannot decrypt the second user information, and the card application server cannot decrypt the first user information, the operation S40 includes: decrypting the first user information to obtain target user biological information characteristic data and target user identity information data;

[0106] The target user biological information characteristic data, the target user identity information data, and the second user information are encrypted and sent to the card application server.

[0107] It should be noted that the decryption of the first user information can be to decrypt the first user information by a pre-defined decryption algorithm to obtain target user biological information characteristic data and target user identity information data in the first user information. The target user biological information characteristic data, the target user identity information data, and the second user information are encrypted by a pre-defined encryption algorithm for data interaction with the card application server, and the encrypted information is sent to the card application server.

[0108] Operation S40, receiving the identity authentication result fed back by the card application server according to the first user information and the second user information, and sending the identity authentication result to the scanning terminal for business processing.

[0109] It should be noted that the identity authentication result is obtained by the card application server based on the first user information, the second user information, and the user information stored by the card application server (the card application server) for user identity authentication. The user information stored by the card application server can include the user's identity information, the user's biological information characteristic data, and the signature data of the user's biological information characteristic data. The identity authentication result can be sent to the scanning terminal for business processing, which can be a transaction according to the identity authentication result.

[0110] The embodiment receives a two-dimensional code generation command sent by a terminal device, generates a target two-dimensional code according to the two-dimensional code generation command, and feeds back the generated target two-dimensional code to the terminal device; receives first user information and second user information fed back by a scanning terminal, the first user information is generated by scanning the target two-dimensional code on the terminal device by the scanning terminal, and the second user information is obtained from the terminal device by the scanning terminal through a SIM card; sends the first user information and the second user information to a card application server; receives an identity authentication result fed back by the card application server according to the first user information and the second user information, and sends the identity authentication result to the scanning terminal for business processing. Since the embodiment performs identity authentication and business processing through the first user information generated by scanning the target two-dimensional code and the second user information obtained through the SIM card, compared with the prior art of performing business processing only according to information on the scanned two-dimensional code, the above method can better protect the information security of the user and prevent the two-dimensional code from being stolen.

[0111] Based on the above embodiment, the embodiment of the application provides a two-dimensional code anti-stealing method, and Fig. 3 is a flowchart of the two-dimensional code anti-stealing method according to the second embodiment of the application.

[0112] In the embodiment, the two-dimensional code anti-stealing method is applied to a card application server, and the two-dimensional code anti-stealing method comprises operations S100-S200.

[0113] Operation S100: receiving first user information and second user information sent by a software server, the first user information being generated by scanning a target two-dimensional code on a terminal device, and the second user information being obtained from the terminal device by a scanning terminal through a SIM card.

[0114] In a specific implementation, the card application server receives first user information and second user information sent by a software server. The first user information is data obtained by characterizing user identity information and user biological information in a target two-dimensional code. The second user information is signature data of user biological information characteristic data and user identity information obtained from a SIM card of a terminal device by a scanning terminal through NFC.

[0115] Operation S200: performing user identity authentication based on the first user information and the second user information, obtaining an identity authentication result, and sending the identity authentication result to the software server.

[0116] It should be noted that the user identity authentication based on the first user information and the second user information to obtain the identity authentication result can be comparing the user identity information in the first user information with the user identity information in the second user information. If they are consistent, the data of the first user biological information feature after signature is obtained, and the obtained signature result is compared with the signature data in the second user information. If they are consistent, the identity authentication result is identity authentication passed.

[0117] Further, in order to improve the identity authentication efficiency, the operation S200 can include decrypting the second user identity information in the second user information.

[0118] Comparing the second user identity information with the first user identity information in the first user information to obtain a first verification result.

[0119] In the case that the first verification result is verified, the third user biological information feature data is searched according to the second user identity information.

[0120] According to the third user biological information feature data and the signature data in the second user identity information, signature verification is performed to obtain a second verification result.

[0121] In the case that the second verification result is verified, the third user biological information feature data is compared with the first user biological information in the first user information to obtain an identity authentication result.

[0122] It should be noted that the second user information is information generated by the card application server according to the user identity information and the user biological information uploaded by the terminal device when the SIM card application is opened, and is encrypted. The second user information can only be decrypted by the card application server. Therefore, the card application server needs to first decrypt the second user information according to the encryption and decryption algorithm corresponding to the encrypted second user information to obtain the user identity information in the second user information, that is, the second user identity information. The comparison of the second user identity information with the first user identity information in the first user information to obtain the first verification result can be a comparison of the second user identity information with the first user identity information in the first user information. When they are consistent, it is determined that the first verification result is verified. The next step of verification is performed, otherwise, an identity authentication result of verification failure is generated. The third user biological information characteristic data can be found according to the mobile phone number or ID information in the second user identity information. The third user biological information characteristic data includes signature data. The signature verification according to the third user biological information characteristic data and the signature data in the second user identity information to obtain the second verification result can be a comparison of the signature data in the third user biological information characteristic data and the signature data in the second user identity information. If they are consistent, it is determined that the second verification result is verified. The next step of verification is performed, otherwise, an identity authentication result of verification failure is generated. The first user biological information is user biological information characteristic data obtained by the software server according to the user biological information received by the terminal device. The comparison of the third user biological information characteristic data and the first user biological information in the first user information is a comparison of the user biological information characteristic data extracted from the target two-dimensional code and the user biological information characteristic data stored in the card application server. If they are consistent, it is determined that the identity authentication result is verified. Otherwise, an identity authentication result of verification failure is generated.

[0123] In a specific implementation, reference can be made to FIG. 4, which is an identity verification flowchart provided by the second embodiment of the anti-fraud method of the two-dimensional code of the present application. The two-dimensional code scanning terminal sends the user information obtained from the target two-dimensional code and the super SIM card identity authentication application (i.e., the super SIM card application) to the App server (i.e., the software server). The user information in the two-dimensional code is the encrypted user biological information characteristic data (face, fingerprint, etc.) and the user identity information data (identity ID, mobile phone number, etc.), and the user information in the super SIM card identity authentication application is the signature data of the user biological information characteristic data and the encrypted data of the user identity data. After the App server receives the data sent by the two-dimensional code scanning terminal, the user biological information characteristic data and the user identity information data in the target two-dimensional code are decrypted. Then the data is sent to the card application server together with the encrypted user information data in the super SIM card identity authentication application for identity verification. The card application server decrypts the user identity information (identity ID, mobile phone number, etc.) data in the super SIM card identity authentication application, and verifies the user identity information (identity ID, mobile phone number, etc.) data in the two-dimensional code to obtain a first verification result. The card application server finds the user biological information characteristic data according to the decrypted user identity information in the super SIM card identity authentication application, and performs signature verification to obtain a second verification result. The card application server verifies the user biological information characteristic data in the two-dimensional code with the user biological information characteristic data found in the card application server to obtain a third verification result. If all the above three verification results are passed, the card application server returns the verification pass information to the APP server. If one of the verifications fails, the card application server returns the verification fail information to the APP server.

[0124] Further, in order to prevent the two-dimensional code from being fraudulently used, the operation S100 further includes the following operations before the operation S100:

[0125] After receiving the user information sent by the terminal device, the user information is verified to obtain a verification result.

[0126] In the case where the verification result is a verification pass, the user biological information of the user information is characterized to obtain third user biological information characteristic data.

[0127] The third user biological information characteristic data is stored.

[0128] It should be noted that, in order to realize the two-dimensional code anti-fraud in the embodiment, the scanning terminal needs to obtain the data in the two-dimensional code and the second user information stored in the SIM card application through NFC when performing the transaction, and the second user information also needs to be verified when performing the identity verification. The user information sent by the terminal device includes the user identity information and the user biological information collected by the terminal device, and the verification of the user information can be to call a third-party identity verification platform to verify whether the user identity information and the user biological information are accurate. The user biological information in the user information can be characterized to obtain third user biological information characteristic data, which can refer to the operation of information characterization in the above embodiment, and will not be described here in this embodiment. The third user biological information characteristic data can be stored in the card application server, and the user identity information is also stored. At the same time, the third user biological information characteristic data is signed, and the signature data and the user identity information are sent to the super SIM card identity authentication application for storage, which is used to send to the scanning terminal through NFC when performing the transaction.

[0129] In a specific implementation, referring to FIG. 5, FIG. 5 is a flowchart of opening a SIM card application provided by the second embodiment of the two-dimensional code anti-fraud method of the application; the terminal device first collects user biological information (face, fingerprint, etc.) and user identity information (identity ID, mobile phone number, etc.), and sends them to the card application server; the card application server verifies the received user information. If the verification fails, the card application fails to open, and the card opening process is restarted; after the verification passes, the card application server characterizes the user biological information and stores it together with the user identity information in the card application server; the card application server signs the data after the user biological information is characterized, and encrypts the user identity information, and stores them together in the super SIM card identity authentication application.

[0130] The embodiment receives first user information and second user information sent by a software server, the first user information is generated by scanning a target two-dimensional code on a terminal device, and the second user information is obtained by a scanning terminal from the terminal device through a SIM card; user identity verification is performed based on the first user information and the second user information, an identity authentication result is obtained, and the identity authentication result is sent to the software server. The embodiment ensures that the user's identity information is fully protected during the verification process, and ensures the security of the transaction.

[0131] Based on the above embodiment, the embodiment of the application provides a two-dimensional code anti-fraud method, referring to FIG. 6, which is a flowchart provided by the third embodiment of the two-dimensional code anti-fraud method of the application.

[0132] In this embodiment, the two-dimensional code anti-fraud method is applied to a scanning terminal, and the two-dimensional code anti-fraud method comprises operations S1' to S4':

[0133] Operation S1': scanning a target two-dimensional code displayed on a scanning terminal device, and determining first user information according to the target two-dimensional code;

[0134] It should be noted that when a user performs a transaction, the user needs to present a target two-dimensional code generated by a software service end and distributed to a terminal device. When the user presents the target two-dimensional code, the scanning terminal will start a scanning program, and read the first user information and consumption information in the target two-dimensional code through a built-in scanner. This process requires the scanning terminal to have high-precision scanning capability to ensure that the information in the target two-dimensional code can be accurately read. At the same time, the scanning terminal also needs to have strong processing capability to complete a large amount of data processing and calculation in a short time. After scanning is completed, the scanning terminal will obtain the consumption information and encrypted user information (i.e. the first user information, including user identity information and user biological information) in the target two-dimensional code, which are key data for subsequent verification. Next, the scanning terminal will perform legality verification of the target two-dimensional code. This process mainly verifies the legality of the target two-dimensional code by comparing the consumption information in the target two-dimensional code. If the consumption information in the target two-dimensional code does not match the record in the scanning terminal, or the target two-dimensional code has been used, the scanning terminal will determine that the target two-dimensional code is an illegal two-dimensional code, and refuse this service.

[0135] Operation S2': obtaining second user information on the terminal device through NFC;

[0136] It should be noted that the scanning terminal has NFC function. NFC is a short-range high-frequency wireless communication technology that allows non-contact point-to-point data transmission between electronic devices (within 10 centimeters). The application of this technology in the scanning terminal enables the device to quickly and securely exchange data within a very short distance. After the target two-dimensional code presented by the user is verified by the scanning terminal and its legality is confirmed, the scanning terminal will start its NFC function and communicate with the user's terminal device. This communication process is very fast and secure, and is completed within a very short distance, and has strong encryption protection during data transmission. In this communication process, the main task of the scanning terminal is to obtain the signature data of the user biological information feature and the encrypted user identity information (i.e. the second user information) in the identity authentication SIM card application in the user's terminal device. These information is input by the user through the apdu instruction when the identity authentication SIM card application is enabled and stored in the super SIM card, and will be used for subsequent verification and business processing.

[0137] Operation S3': sending the first user information and the second user information to a software server;

[0138] It should be noted that the obtained first user information and the second user information are sent to the software server for user identity authentication. The software server forwards the first user information and the second user information to the card application server for identity authentication, and the specific authentication process can refer to the above embodiment. The interaction process between the scanning terminal and the terminal device is strictly in accordance with the security mode issued by the card application server. The card application server plays the role of "command center" in this process. It issues a series of instructions and keys to guide the scanning terminal to communicate with the terminal device securely. The key for communication is dynamically generated and different for each communication, which greatly increases the security of data transmission. The card application server is also responsible for unified management of all authentication information. These information are stored in a secure database, and only requests that have passed strict verification can obtain these information. This centralized management method not only ensures the security of data, but also improves the efficiency of data processing.

[0139] Operation S4': receiving the identity authentication result fed back by the software server, and performing business processing according to the identity authentication result.

[0140] It should be noted that the business processing according to the identity authentication result can be completing the transaction according to the consumption information and the user identity information in the two-dimensional code when the identity authentication result is verified, and rejecting the transaction when the identity authentication result is not verified.

[0141] In specific implementation, the content of business processing will be different according to the user's consumption scene and the function of the scanning terminal. For example, if the user uses the two-dimensional code payment on urban rail transit, the business processing may be to deduct the user's public transportation fee and open the gate. If the user uses the two-dimensional code payment to purchase goods in a supermarket, the business processing may be to complete the payment transaction and print a receipt.

[0142] During the business processing, abnormal situations may also occur. For example, if a network failure or a device failure occurs during the verification process, appropriate emergency measures are needed to deal with it, including prompting the user, recording abnormal information, and repairing the fault as soon as possible. After completing the business processing, the processing result also needs to be recorded and fed back. For example, the processing result is recorded in the database for subsequent query and statistics; the processing result can also be fed back to the user to enable the user to understand his / her consumption situation.

[0143] The embodiment scans a target two-dimensional code displayed on a terminal device, determines first user information according to the target two-dimensional code, acquires second user information on the terminal device through NFC, sends the first user information and the second user information to a software server, receives an identity authentication result fed back by the software server, and performs business processing according to the identity authentication result. The embodiment realizes consistency verification of the two-dimensional code and the user information, thereby improving the security when the two-dimensional code is used.

[0144] It should be noted that the above examples are only used for understanding the present application and do not constitute a limitation on the two-dimensional code anti-fraud method of the present application. More forms of simple transformation based on the technical concept are within the protection scope of the present application.

[0145] The present application also provides a two-dimensional code anti-fraud device. Please refer to FIG. 7, which is a module structure schematic diagram of the two-dimensional code anti-fraud device embodiment one of the present application. The two-dimensional code anti-fraud device is applied to a software server. The two-dimensional code anti-fraud device comprises:

[0146] A target two-dimensional code generation module 10 is configured to generate a target two-dimensional code according to user information in a two-dimensional code generation command when receiving the two-dimensional code generation command, and feed back the generated target two-dimensional code to the terminal device;

[0147] A user information receiving module 20 is configured to receive first user information and second user information fed back by a scanning terminal. The first user information is generated by the scanning terminal scanning a target two-dimensional code on a terminal device, and the second user information is acquired by the scanning terminal from the terminal device through a SIM card.

[0148] A user information forwarding module 30 is configured to send the first user information and the second user information to a card application server.

[0149] An identity authentication result feedback module 40 is configured to receive an identity authentication result fed back by the card application server according to the first user information and the second user information, and send the identity authentication result to the scanning terminal for business processing.

[0150] The embodiment receives a two-dimensional code generation command sent by a terminal device, generates a target two-dimensional code according to the two-dimensional code generation command, and feeds back the generated target two-dimensional code to the terminal device; receives first user information and second user information fed back by a scanning terminal, the first user information is generated by scanning the target two-dimensional code on the terminal device by the scanning terminal, and the second user information is obtained from the terminal device by the scanning terminal through a SIM card; sends the first user information and the second user information to a card application server; receives an identity authentication result fed back by the card application server according to the first user information and the second user information, and sends the identity authentication result to the scanning terminal for business processing. Since the embodiment performs identity authentication and business processing through the first user information generated by scanning the target two-dimensional code and the second user information obtained through the SIM card, compared with the prior art of performing business processing only according to information on the scanned two-dimensional code, the above method of the embodiment can better protect the information security of the user and prevent the two-dimensional code from being stolen.

[0151] Based on the above embodiment, the application further provides a two-dimensional code anti-theft device, please refer to Figure 8, Figure 8 is a module structure schematic diagram of the second embodiment of the two-dimensional code anti-theft device of the application; the two-dimensional code anti-theft device is applied to a card application server, and the two-dimensional code anti-theft device comprises:

[0152] The receiving module 100 is configured to receive first user information and second user information sent by a software server, the first user information is generated by scanning a target two-dimensional code on a terminal device, and the second user information is obtained from the terminal device by a scanning terminal through a SIM card.

[0153] The identity authentication module 200 is configured to perform user identity authentication based on the first user information and the second user information, obtain an identity authentication result, and send the identity authentication result to the software server.

[0154] The embodiment receives first user information and second user information sent by a software server, the first user information is generated by scanning a target two-dimensional code on a terminal device, and the second user information is obtained from the terminal device by a scanning terminal through a SIM card; performs user identity authentication based on the first user information and the second user information, obtains an identity authentication result, and sends the identity authentication result to the software server. The embodiment ensures that the identity information of the user is fully protected during the verification process, and guarantees the security of the transaction.

[0155] Based on the above embodiment, the application further provides a two-dimensional code anti-fraud device. Please refer to Figure 9, which is a module structure diagram of the third embodiment of the two-dimensional code anti-fraud device. The two-dimensional code anti-fraud device is applied to a scanning terminal. The two-dimensional code anti-fraud device comprises:

[0156] a scanning module 1', which is configured to scan a target two-dimensional code displayed on a terminal device, and determine first user information according to the target two-dimensional code;

[0157] an NFC module 2', which is configured to acquire second user information on the terminal device through NFC;

[0158] a user information sending module 3', which is configured to send the first user information and the second user information to a software server;

[0159] a business processing module 4', which is configured to receive an identity authentication result fed back by the software server, and perform business processing according to the identity authentication result.

[0160] The two-dimensional code anti-fraud device provided by the application adopts the two-dimensional code anti-fraud method in the above embodiment, and can solve the technical problem that the two-dimensional code is easy to be frauded in the prior art. Compared with the prior art, the two-dimensional code anti-fraud device provided by the application has the same beneficial effects as the two-dimensional code anti-fraud method provided by the above embodiment, and other technical features in the two-dimensional code anti-fraud device are the same as the features disclosed in the above embodiment, which will not be described here.

[0161] The application provides a two-dimensional code anti-fraud device, which comprises at least one processor and a memory in communication connection with the at least one processor. The memory stores instructions executable by the at least one processor. The instructions are executed by the at least one processor, so that the at least one processor can execute the two-dimensional code anti-fraud method in the above embodiment one.

[0162] Reference is made to Figure 10, which shows a structure diagram of a two-dimensional code anti-fraud device suitable for implementing the embodiments of the application. The two-dimensional code anti-fraud device in the embodiments of the application can include but is not limited to mobile terminals such as mobile phones, notebook computers, digital broadcast receivers, PDAs (Personal Digital Assistant), PADs (Portable Application Description), PMPs (Portable Media Player), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), and the like, and fixed terminals such as digital TVs, desktop computers, and the like. The two-dimensional code anti-fraud device shown in Figure 10 is only an example, and should not bring any limitation to the functions and use range of the embodiments of the application.

[0163] As shown in FIG. 10, the two-dimensional code anti-fraud device can include a processing device 1001 (such as a central processing unit, a graphics processing unit, etc.), which can perform various appropriate actions and processes according to programs stored in a read-only memory (ROM) 1002 or programs loaded from a storage device 1003 into a random access memory (RAM) 1004. In the RAM 1004, various programs and data required for the operation of the two-dimensional code anti-fraud device are also stored. The processing device 1001, the ROM 1002, and the RAM 1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touch pad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, etc.; the storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the two-dimensional code anti-fraud device to communicate with other devices wirelessly or by wire to exchange data. Although the two-dimensional code anti-fraud device with various systems is shown in the figure, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be alternatively implemented or provided.

[0164] In particular, according to the embodiments disclosed in the present application, the processes described above with reference to the flowcharts can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product comprising a computer program carried on a computer readable medium, the computer program containing program codes for executing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network through the communication device, or installed from the storage device 1003, or installed from the ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the methods of the embodiments disclosed in the present application are performed.

[0165] The two-dimensional code anti-fraud device provided in the present application adopts the two-dimensional code anti-fraud method in the above-mentioned embodiments, and can solve the technical problem that the two-dimensional code is easily stolen in the prior art. Compared with the prior art, the two-dimensional code anti-fraud device provided in the present application has the same beneficial effects as the two-dimensional code anti-fraud method provided in the above-mentioned embodiments, and other technical features in the two-dimensional code anti-fraud device are the same as the features disclosed in the previous embodiment method, which will not be described here.

[0166] It should be understood that portions of the application disclosed can be implemented in hardware, software, firmware, or combinations thereof. In the description of the embodiments above, specific features, structures, materials or characteristics can be combined in any suitable manner in one or more embodiments or examples.

[0167] The above description is merely illustrative of the application and is not intended to limit the scope of the application. Any variations and modifications that can be made by those skilled in the art without departing from the spirit of the application are intended to be included in the scope of the application. The scope of the application should therefore be limited only by the claims.

[0168] The application provides a computer readable storage medium having stored thereon computer readable program instructions (i.e. computer programs) for performing the two-dimensional code anti-fraud swiping method in the above embodiments.

[0169] The computer readable storage medium provided by the application may, for example, be a U disk, but is not limited to an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, system or device, or any combination of the above. More specific examples of the computer readable storage medium can include, but are not limited to, an electrical connection having one or more conductive wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present embodiment, the computer readable storage medium can be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, system or device. The program code contained on the computer readable storage medium can be transmitted by any suitable medium, including but not limited to electrical wires, optical cables, RF (Radio Frequency), etc., or any suitable combination of the above.

[0170] The above computer readable storage medium can be included in the two-dimensional code anti-fraud swiping device; or can exist separately and not be assembled into the two-dimensional code anti-fraud swiping device.

[0171] The above computer readable storage medium carries one or more programs, which, when executed by the two-dimensional code anti-fraud swiping device, cause the two-dimensional code anti-fraud swiping device to perform the above two-dimensional code anti-fraud swiping method.

[0172] Computer program code for carrying out operations of the present application can be written in any combination of one or more programming languages, including an object oriented programming language such as Java, Smalltalk, C++ or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code can execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the latter scenario, the remote computer can be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or the connection can be made to an external computer (for example, through the Internet using an Internet Service Provider).

[0173] The flow diagrams and the block diagrams in the drawings are meant as methodological and functional description of implementations of systems, methods, and computer program products according to various embodiments of the present application. In this regard, each block in the flow diagrams or block diagrams can represent a module, a segment, or a portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that in some alternative implementations, the functions noted in the blocks can occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently or the blocks may

[0174] The modules involved in the embodiments of the present application can be implemented in software or hardware. In some cases, the names of the modules do not constitute a limitation on the modules themselves.

[0175] The readable storage medium provided by the present application is a computer readable storage medium, which stores computer readable program instructions (i.e. computer programs) for executing the two-dimensional code anti-fraud method, and can solve the technical problem that the two-dimensional code is easily stolen in the prior art. Compared with the prior art, the computer readable storage medium provided by the present application has the same beneficial effects as the two-dimensional code anti-fraud method provided by the above-mentioned embodiments, and will not be described here.

[0176] The application further provides a computer program product comprising a computer program which, when executed by a processor, implements the operations of the two-dimensional code anti-fraud method as described above.

[0177] The computer program product provided by the application can solve the technical problem that the two-dimensional code is easily stolen in the prior art. Compared with the prior art, the beneficial effects of the computer program product provided by the application are the same as those of the two-dimensional code anti-fraud method provided by the above-described embodiments, and are not described here.

[0178] The above only describes some embodiments of the application, and does not limit the patent scope of the application. Any equivalent structural transformation, direct / indirect application in other related technical fields, or the like made by using the content of the application specification and drawings within the technical concept of the application is included in the patent protection scope of the application.

Claims

1. A two-dimensional code theft prevention method, wherein, The two-dimensional code anti-fraud method is applied to a software server, and comprises the following operations: Upon receiving a two-dimensional code generation command sent by a terminal device, a target two-dimensional code is generated according to user information in the two-dimensional code generation command, and the generated target two-dimensional code is fed back to the terminal device; Receiving first user information and second user information fed back by a scanning terminal, the first user information being generated by the scanning terminal scanning a target two-dimensional code on the terminal device, and the second user information being obtained by the scanning terminal from the terminal device through a SIM card; Sending the first user information and the second user information to a card application server; Receiving an identity authentication result fed back by the card application server according to the first user information and the second user information, and sending the identity authentication result to the scanning terminal for business processing.

2. The two-dimensional code theft prevention method of claim 1, wherein, The user information comprises user biological information and user identity information; The operation of generating a target two-dimensional code according to user information in the two-dimensional code generation command comprises: Characterizing the user biological information to obtain user biological information characterization data; Encrypting the user identity information and the user biological information characterization data to obtain an encryption result; Producing a consumption two-dimensional code, embedding the encryption result in the consumption two-dimensional code to obtain the target two-dimensional code.

3. The two-dimensional code theft prevention method of claim 1, wherein, The operation of sending the first user information and the second user information to the card application server comprises: Decrypting the first user information to obtain target user biological information characterization data and target user identity information data; Encrypting and sending the target user biological information characterization data, the target user identity information data, and the second user information to the card application server.

4. The two-dimensional code theft prevention method of claim 3, wherein, The operation of decrypting the first user information to obtain target user biological information characterization data and target user identity information data comprises: Decrypting the first user information through a pre-defined decryption algorithm to obtain target user biological information characterization data and target user identity information data in the first user information.

5. The two-dimensional code theft prevention method of claim 3, wherein, The operation of encrypting and sending the target user biological information characterization data, the target user identity information data, and the second user information to the card application server comprises: Encrypting the target user biological information characterization data, the target user identity information data, and the second user information through a pre-defined encryption algorithm for data interaction with the card application server, and sending the encrypted information to the card application server.

6. A two-dimensional code anti-fraud method, applied to a card application server, comprising the following operations: Receiving first user information and second user information sent by a software server, the first user information being generated through a target two-dimensional code on a terminal device, and the second user information being obtained by a scanning terminal from the terminal device through a SIM card; Perform user identity authentication based on the first user information and the second user information to obtain an identity authentication result, and send the identity authentication result to the software server.

7. The two-dimensional code theft prevention method of claim 6, wherein, The operation of performing user identity authentication based on the first user information and the second user information to obtain an identity authentication result includes: Decrypting second user identity information in the second user information; Comparing the second user identity information with first user identity information in the first user information to obtain a first verification result; In the case where the first verification result is a verification pass, searching for third user biological information characteristic data according to the second user identity information; Performing signature verification according to the third user biological information characteristic data and signature data in the second user identity information to obtain a second verification result; In the case where the second verification result is a verification pass, comparing the third user biological information characteristic data with first user biological information in the first user information to obtain the identity authentication result.

8. The two-dimensional code theft prevention method of claim 7, wherein, The two-dimensional code anti-fraud method includes the following operations: In the case where the first verification result is a verification fail, generating an identity authentication result of a verification fail; And / or, in the case where the second verification result is a verification fail, generating an identity authentication result of a verification fail.

9. The two-dimensional code theft prevention method of claim 7, wherein, The first user biological information includes user biological information characteristic data obtained by the software server from user biological information uploaded by a terminal device, the third user biological information characteristic data is user biological information characteristic data stored in the card application server, and the operation of comparing the third user biological information characteristic data with first user biological information in the first user information to obtain the identity authentication result includes: Comparing user biological information characteristic data extracted from the target two-dimensional code with user biological information characteristic data stored in the card application server; In the case of consistency, determining that the identity authentication result is a verification pass; In the case of inconsistency, generating an identity authentication result of a verification fail.

10. The two-dimensional code theft prevention method of claim 7, wherein, Before the operation of receiving first user information and second user information sent by the software server, the method further includes: After receiving user information sent by the terminal device, verifying the user information to obtain a verification result; In the case where the verification result is a verification pass, characterizing user biological information in the user information to obtain third user biological information characteristic data; Storing the third user biological information characteristic data.

11. The two-dimensional code theft prevention method of claim 10, wherein, The user information includes user identity information and user biological information collected by the terminal device. The operation of verifying the user information includes calling a third-party identity verification platform to verify whether the user identity information and the user biological information are accurate. And / or, the two-dimensional code anti-fraud method further comprises: storing the user identity information, signing the third user biological information characteristic data, sending the signed data and the user identity information to the super-SIM card identity authentication application for storage, and sending the super-SIM card identity authentication application to the scanning terminal through NFC during transaction.

12. A two-dimensional code theft prevention method, wherein, The two-dimensional code anti-fraud method is applied to a scanning terminal, and the two-dimensional code anti-fraud method comprises the following operations: Displaying a target two-dimensional code on a scanning terminal device, determining first user information according to the target two-dimensional code; Obtaining second user information on the terminal device through NFC; Sending the first user information and the second user information to a software server; Receiving an identity authentication result fed back by the software server, and performing business processing according to the identity authentication result.

13. The two-dimensional code theft prevention method of claim 12, wherein, The operation of performing business processing according to the identity authentication result comprises: in the case that the identity authentication result is verified, completing the transaction according to the consumption information and the user identity information in the target two-dimensional code; in the case that the identity authentication result is not verified, rejecting the transaction.

14. A two-dimensional code theft prevention system, wherein, The two-dimensional code anti-fraud system comprises a software server, a scanning terminal, and a card application server. The software server is configured to generate a target two-dimensional code according to a two-dimensional code generation command when receiving the two-dimensional code generation command, and feed back the generated target two-dimensional code to the terminal device. The scanning terminal is configured to obtain first user information based on the target two-dimensional code displayed by the terminal device, and obtain second user information from the terminal device through a SIM card, and send the first user information and the second user information to the software server. The software server is further configured to send the first user information and the second user information to the card application server. The card application server is configured to perform user identity authentication based on the first user information and the second user information, and feed back an identity authentication result to the software server. The software server is further configured to send the identity authentication result to the scanning terminal. The scanning terminal is further configured to perform business processing based on the identity authentication result.

15. A two-dimensional code theft-preventing device, wherein, The two-dimensional code anti-fraud device is applied to a software server, and the two-dimensional code anti-fraud device comprises: A target two-dimensional code generation module is configured to generate a target two-dimensional code according to user information in a two-dimensional code generation command when receiving the two-dimensional code generation command sent by a terminal device, and feed back the generated target two-dimensional code to the terminal device. A user information receiving module is configured to receive first user information and second user information fed back by a scanning terminal, the first user information being generated by the scanning terminal scanning a target two-dimensional code on the terminal device, and the second user information being obtained by the scanning terminal from the terminal device through a SIM card. A user information forwarding module is configured to send the first user information and the second user information to a card application server. An identity authentication result feedback module is configured to receive an identity authentication result fed back by the card application server based on the first user information and the second user information, and send the identity authentication result to the scanning terminal for business processing.

16. A two-dimensional code theft-preventing device, wherein, The two-dimensional code anti-theft device is applied to a card application server, and the two-dimensional code anti-theft device comprises: A receiving module is configured to receive first user information and second user information sent by a software server, the first user information is generated by scanning a target two-dimensional code on a terminal device, and the second user information is obtained by the scanning terminal from the terminal device through a SIM card; An identity authentication module is configured to perform user identity authentication based on the first user information and the second user information, obtain an identity authentication result, and send the identity authentication result to the software server.

17. A two-dimensional code theft prevention device, wherein, The two-dimensional code anti-theft device is applied to a scanning terminal, and the two-dimensional code anti-theft device comprises: A scanning module is configured to scan a target two-dimensional code displayed on a terminal device, and determine first user information according to the target two-dimensional code; An NFC module is configured to obtain second user information on the terminal device through NFC; A user information sending module is configured to send the first user information and the second user information to a software server; A business processing module is configured to receive an identity authentication result fed back by the software server, and perform business processing according to the identity authentication result.

18. A two-dimensional code theft-preventing device, wherein, The two-dimensional code anti-theft device comprises a memory, a processor, and a computer program stored in the memory and executable on the processor, the computer program is configured to implement the operations of the two-dimensional code anti-theft method in any one of claims 1 to 5, 6 to 11, or 12 to 13.

19. A storage medium, wherein, The storage medium is a computer readable storage medium, and the storage medium stores a computer program, the computer program is executed by the processor to implement the operations of the two-dimensional code anti-theft method in any one of claims 1 to 5, 6 to 11, or 12 to 13.

20. A computer program product, wherein, The computer program product comprises a computer program, the computer program is executed by the processor to implement the operations of the two-dimensional code anti-theft method in any one of claims 1 to 5, 6 to 11, or 12 to 13.

Images