Electronic tag-based payment method and apparatus, device, storage medium, and computer program product
Patent Information
- Authority / Receiving Office
- WO · WO
- Patent Type
- Applications
- Current Assignee / Owner
- Filing Date
- 2026-01-06
- Publication Date
- 2026-08-13
Smart Images
Figure CN2026070858_13082026_PF_FP_ABST
Abstract
Description
Payment methods, devices, equipment, storage media, and computer program products using electronic tags
[0001] This application is based on and claims priority to Chinese Patent Application No. 202510138206.9, filed on February 7, 2025, the entire contents of which are incorporated herein by reference. Technical Field
[0002] This application relates to the field of mobile payment technology, and in particular to payment methods, devices, equipment, storage media, and computer program products for electronic tags. Background Technology
[0003] With the rapid development of the internet and the widespread adoption of mobile devices such as smartphones and tablets, advancements in information storage and transmission technologies have led to an increasingly diverse range of mobile payment methods and applications, resulting in a situation where multiple payment methods coexist. Currently, the mobile payment market offers a variety of technologies, including QR code payment, fingerprint payment, facial recognition payment, Near Field Communication (NFC) payment, and electronic tag payment. Electronic tag payment combines electronic tags with mobile payment technology, allowing users to quickly complete transactions by tapping an NFC tag, offering advantages such as convenient payment experience and low cost. However, because electronic tags are passive native devices, they can only perform simple data storage and lack computing power; their tag content is static and cannot record transactions. Secondly, they cannot perform the same location-based risk control capabilities as traditional point-of-sale (POS) terminals. Therefore, there is an urgent need to propose an improved electronic tag payment method to enhance security and real-time risk control.
[0004] The above content is only used to help understand the technical solution of this application and does not represent an admission that the above content is prior art. Summary of the Invention
[0005] The main objective of this application is to provide a payment method, device, equipment, storage medium, and computer program product for electronic tags.
[0006] To achieve the above objectives, this application proposes a payment method using an electronic tag, wherein the method is applied to a Super SIM card, and the method includes:
[0007] The terminal receives the tag information and tag data of the electronic tag.
[0008] Calculate the relative position of the electronic tag based on the tag information;
[0009] A risk assessment is performed on the relative position of the tag and the tag data to generate a risk assessment result for the tag data. The risk assessment result is then sent to the terminal, which makes a payment based on the risk assessment result, generates payment information, and sends the payment information to the super SIM card.
[0010] The system receives payment information sent by the terminal and writes the payment information into the electronic tag.
[0011] In one embodiment, the operation of calculating the relative position of the electronic tag based on the tag information includes:
[0012] Obtain the current card location of the Super SIM card;
[0013] Based on the tag information, obtain the tag reference position of the electronic tag;
[0014] The relative position of the electronic tag is calculated based on the tag reference position and the current card position.
[0015] In one embodiment, the operation of performing a risk assessment on the relative position of the tag and the tag data to generate a risk assessment result for the tag data includes:
[0016] The tag data is decrypted and verified to generate historical transaction data and current transaction data for the electronic tag;
[0017] Based on the historical transaction data, the risk control model configured in the offline risk control unit performs a risk assessment on the relative position of the tag and the current transaction data, and generates a risk assessment result for the current transaction data.
[0018] In one embodiment, the operation of decrypting and verifying the tag data to generate historical transaction data and current transaction data of the electronic tag includes:
[0019] Determine the first key for the tag data based on the tag information;
[0020] The tag data is decrypted using the first key to generate initial decrypted data;
[0021] The initial decrypted data is subjected to security verification to generate historical transaction data and current transaction data of the electronic tag.
[0022] In one embodiment, the operation of writing the payment information into the electronic tag includes:
[0023] The payment information is compressed to generate a transaction data message for the payment information;
[0024] The message length of the transaction data message is compared with a preset first threshold.
[0025] When the length of the transaction data message is greater than the first threshold, the transaction data message is truncated according to the truncating rules to obtain the target transaction message;
[0026] The target transaction message is encrypted using a second key to generate an encrypted transaction message, which is then written into the electronic tag.
[0027] In one embodiment, the method is applied to a terminal, and the method includes:
[0028] The system acquires the tag information and tag data of the electronic tag, forwards the tag information and tag data to the Super SIM card, calculates the relative position of the electronic tag based on the tag information, performs a risk assessment on the relative position of the tag and the tag data, generates a risk assessment result of the tag data, and sends the risk assessment result to the terminal.
[0029] The system receives the risk assessment result sent by the Super SIM card, makes payment based on the risk assessment result, generates payment information, sends the payment information to the Super SIM card, and the Super SIM card writes the payment information into the electronic tag.
[0030] In one embodiment, the operation of making payment and generating payment information based on the risk assessment result includes:
[0031] If the risk assessment result is no risk, then obtain the user feature code of the current transaction data;
[0032] Payment is deducted through the payment platform based on the user's feature code, generating payment information for the current transaction data.
[0033] Furthermore, to achieve the above objectives, this application also proposes an electronic tag payment device, which includes:
[0034] The data receiving module is used to receive tag information and tag data of electronic tags sent by the terminal;
[0035] The location determination module is used to calculate the relative position of the electronic tag based on the tag information;
[0036] The risk assessment module is used to assess the risk of the relative position of the tag and the tag data, generate a risk assessment result of the tag data, send the risk assessment result to the terminal, and the terminal makes payment based on the risk assessment result, generates payment information, and sends the payment information to the super SIM card.
[0037] The data update module is used to receive payment information sent by the terminal and write the payment information into the electronic tag.
[0038] In addition, to achieve the above objectives, this application also proposes an electronic tag payment device, the device comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, the computer program being configured to implement the electronic tag payment method as described above.
[0039] In addition, to achieve the above objectives, this application also proposes a storage medium, which is a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, it implements the operation of the electronic tag payment method as described above.
[0040] In addition, to achieve the above objectives, this application also provides a computer program product, which includes a computer program that, when executed by a processor, implements the operation of the electronic tag payment method as described above. Attached Figure Description
[0041] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.
[0042] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, for those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0043] Figure 1 is a flowchart illustrating the payment method provided in Embodiment 1 of the electronic tag of this application;
[0044] Figure 2 is a schematic diagram of the message format of the tag data provided by the payment method of the electronic tag in this application;
[0045] Figure 3 is a simplified flowchart of the electronic tag's relative position calculated using the payment method of the electronic tag in this application;
[0046] Figure 4 is a schematic diagram of the payment information message header format provided by the payment method of the electronic tag in this application;
[0047] Figure 5 is a schematic diagram of the format of the payment information data items provided by the payment method of the electronic tag in this application;
[0048] Figure 6 is a schematic diagram of the application architecture provided by the payment method embodiment of the electronic tag of this application;
[0049] Figure 7 is a simplified flowchart of the specific implementation of the payment method embodiment of the electronic tag of this application;
[0050] Figure 8 is a schematic diagram of the module structure of the electronic tag payment device according to an embodiment of this application;
[0051] Figure 9 is a schematic diagram of the hardware operating environment involved in the payment method of the electronic tag in the embodiments of this application.
[0052] The purpose, features, and advantages of this application will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. Embodiments of the present invention
[0053] It should be understood that the specific embodiments described herein are merely illustrative of the technical solutions of this application and are not intended to limit this application.
[0054] To better understand the technical solution of this application, a detailed description will be provided below in conjunction with the accompanying drawings and specific implementation methods.
[0055] The main solution of this application embodiment is as follows: The method is applied to a Super SIM card: receiving tag information and tag data of an electronic tag sent by a terminal; calculating the relative position of the electronic tag based on the tag information; performing a risk assessment on the relative position of the tag and the tag data, generating a risk assessment result of the tag data, sending the risk assessment result to the terminal, and having the terminal make a payment based on the risk assessment result, generating payment information, and sending the payment information to the Super SIM card; receiving the payment information sent by the terminal, and writing the payment information into the electronic tag.
[0056] In this embodiment, for ease of description, the following description will focus on a payment device that identifies electronic tags.
[0057] With the rapid development of the internet and the widespread adoption of mobile devices such as smartphones and tablets, advancements in information storage and transmission technologies have led to an increasingly diverse range of mobile payment methods and applications, resulting in a situation where multiple payment methods coexist. Currently, the mobile payment market offers a variety of technologies, including QR code payment, fingerprint payment, facial recognition payment, NFC payment, and electronic tag payment. Among these, electronic tag payment combines electronic tags with mobile payment technology, allowing users to quickly complete transactions by tapping an NFC tag, offering advantages such as convenient payment experience and low cost. However, because electronic tags are passive, native devices, they can only perform simple data storage and lack computing power; their tag content is static and cannot record transactions. Secondly, unlike traditional smart POS systems, they cannot perform location-based risk control for merchants. Therefore, there is an urgent need to propose an improved electronic tag payment method to enhance security and real-time risk control.
[0058] This application provides a solution that improves the risk control capability of payment by calculating the relative position of electronic tags and conducting risk assessment on the relative position and tag data.
[0059] It should be noted that the executing entity in this embodiment can be a computing service device with data processing, network communication, and program execution functions, such as a tablet computer, personal computer, or mobile phone, or an electronic device or electronic tag payment device capable of performing the above functions. The following description uses an electronic tag payment device as an example to illustrate this embodiment and the subsequent embodiments.
[0060] Based on this, this application provides a payment method for electronic tags. Referring to Figure 1, Figure 1 is a flowchart of the first embodiment of the payment method for electronic tags in this application.
[0061] In this embodiment, the payment method of the electronic tag is applied to a super SIM card, and the payment method of the electronic tag includes operations S11~S14:
[0062] Operation S11: Receive tag information and tag data of electronic tags sent by the terminal.
[0063] It's worth noting that the Super SIM card is a powerful card launched by China Mobile. Built upon the capabilities of a traditional SIM card, it not only possesses the basic functions of a traditional SIM card but also features significant upgrades. The Super SIM card contains an encryption chip, supporting authentication and certification through Communications Technology (CT) and national cryptographic standards. It boasts a financial security level of Evaluation Assurance Level 4+ (EAL4+) and has passed national cryptographic certification. It can serve as a hardware carrier, providing enhanced security. Features include security authentication, NFC functionality, and large storage capacity. The Super SIM card stores the tag decryption key, tag reference location, and tag risk rules. The tag decryption key maintains a one-to-one correspondence with the electronic tag's version number, read / write mode, etc., with different versions corresponding to different keys, and a key isolation mechanism is in place.
[0064] Additionally, it should be noted that a terminal refers to a device capable of interacting with electronic tags, possessing the ability to read and / or write information from the electronic tags. In this context, the terminal device acquires information from the electronic tag through physical contact (such as "tap-to-read") and further processes this information. Terminal devices may include smartphones, tablets, handheld readers, etc., which can execute specific applications to achieve communication and data exchange with the electronic tags.
[0065] Additionally, it's important to note that an electronic tag is an electronic device with a built-in microchip and antenna, communicating wirelessly with a reader or payment terminal. During a transaction, the payment terminal reads the payment information from the electronic tag and verifies it against the consumer's payment account, ensuring the security and accuracy of the transaction. The electronic tag consists of three hardware components: a panel label, an NFC coil, and a voice playback device. Merchants apply for the tag, and the tag service platform encrypts and stores the merchant's information on the tag before providing it to the merchant.
[0066] Additionally, it should be noted that tag information refers to the tag's access address, read / write mode, and version number. Tag data refers to encrypted transaction data, including historical and current transaction data.
[0067] Additionally, it should be noted that tag data refers to encrypted transaction data, including historical transaction data stored in electronic tags, as well as current transaction data for the current transaction.
[0068] Figure 2 shows the message format of tag data obtained by the terminal from the electronic tag, including tag information and tag data. The tag information includes the tag access address (Uniform Resource Locator, URL), the tag read / write mode (R: read-only, W: read / write, M: read / write on demand), and the electronic tag version number; the tag data refers to the encrypted transaction data, including historical transaction data and current transaction data.
[0069] In some embodiments, the terminal transcodes the tag information and tag data to obtain the corresponding bytecode data, and then concatenates the tag information and tag data into tag-length-value (TLV) format data according to the format specification. The data is then sent to the super SIM card through the SIM card communication channel, and the super SIM card receives the tag information and tag data sent by the terminal.
[0070] TLV format data refers to data composed of three main parts: Tag, Length, and Value. Tag is used to identify the type or meaning of a field, which is equivalent to labeling the data field; the Length field is used to indicate the length of the Value field; Value is the actual data content, the type and length of which are determined by the preceding Tag, and can be an integer, string, binary data block, etc.
[0071] In one embodiment of this application, a tag payment application is installed on the super SIM card. This application is responsible for decrypting the tag content of the electronic tag; requesting the corresponding risk control model running in the offline risk control unit via an Application Programming Interface (API) to identify transaction risks; and overlaying payment information with tag information and historical transaction data, encrypting the data, and writing it back to the electronic tag. The tag payment application receives tag information and tag data, calculates the relative position of the electronic tag based on the tag information, decrypts and verifies the tag data to generate historical transaction data and current transaction data, and sends a risk assessment request to the offline risk control unit using the historical and current transaction data as request parameters.
[0072] In operation S12, the relative position of the electronic tag is calculated based on the tag information.
[0073] It should be noted that the relative position of the electronic tag refers to the actual position of the electronic tag at the time of the transaction, which is the distance and orientation relative to the preset tag reference position in the electronic tag.
[0074] In some embodiments, the current card location of the super SIM card is obtained; based on the tag information, the tag reference location of the electronic tag is obtained; and the tag relative location of the electronic tag is calculated according to the tag reference location and the current card location.
[0075] Operation S13: Perform a risk assessment on the relative position of the tag and the tag data, generate a risk assessment result for the tag data, send the risk assessment result to the terminal, and have the terminal make a payment based on the risk assessment result, generate payment information, and send the payment information to the super SIM card.
[0076] It should be noted that payment information refers to relevant information about the current transaction, including but not limited to the tag location, transaction time, and transaction result.
[0077] In some embodiments, the tag data is decrypted and verified to generate historical transaction data and current transaction data for the electronic tag. Based on the historical transaction data, a risk control model configured in the offline risk control unit performs a risk assessment on the relative position of the tag and the current transaction data, generating a risk assessment result for the current transaction data. The risk assessment result is sent to the terminal, which then performs payment through the payment platform based on the risk assessment result, generating payment information, which is then sent to the Super SIM card.
[0078] Operation S14: Receive payment information sent by the terminal and write the payment information into the electronic tag.
[0079] In some embodiments, the payment information and the relative position of the tag are compressed to generate a transaction data message of the payment information; the message length of the transaction data message is compared with a preset first threshold; when the message length of the transaction data message is greater than the first threshold, the transaction data message is truncated according to a pruning rule to obtain a target transaction message; the target transaction message is encrypted using a second key to generate an encrypted transaction message of the target transaction message, and the encrypted transaction message is written to the electronic tag.
[0080] This embodiment applies the above-described scheme to a Super SIM card: receiving tag information and tag data of an electronic tag sent by a receiving terminal; calculating the relative position of the electronic tag based on the tag information; performing a risk assessment on the relative position and tag data to generate a risk assessment result for the tag data; sending the risk assessment result to the terminal; the terminal then performs payment based on the risk assessment result, generating payment information, and sending the payment information to the Super SIM card; receiving the payment information sent by the terminal and writing the payment information into the electronic tag. By calculating the relative position of the electronic tag and performing a risk assessment on the relative position and tag data, the risk control capability of payment is improved.
[0081] Based on the above implementation scheme, in one feasible implementation, the operation of calculating the relative position of the electronic tag according to the tag information includes S21~S23:
[0082] Operation S21: Obtain the current card location of the Super SIM card.
[0083] It should be noted that the current location of the Super SIM card refers to the current location of the Super SIM card, which is usually expressed in latitude and longitude. The current latitude and longitude location of the Super SIM card can be obtained through base station positioning, satellite positioning, and other methods.
[0084] In some embodiments, the current latitude and longitude position of the Super SIM card is obtained through base station positioning, satellite positioning, or other methods. That is, the current card position of the Super SIM card also indicates the latitude and longitude position of the electronic tag when it is conducting the current transaction.
[0085] Operation S22: Based on the tag information, obtain the tag reference position of the electronic tag.
[0086] It should be noted that the tag reference location of an electronic tag refers to the latitude and longitude coordinates used to identify the permitted operating address of the electronic tag. The tag reference location can be one or more address ranges used to determine the geographical boundaries of the tag's legal use. Assume that electronic tag A has a tag reference location with latitude and longitude coordinates of (116.41667N, 39.91667E).
[0087] In some embodiments, based on information such as the version number and read / write mode in the tag information, a first key corresponding to the tag information is selected from the keys stored in the Super SIM card. The tag data is decrypted using the first key, and a tag identifier used to uniquely identify the electronic tag is obtained from the initially decrypted data. The tag reference location corresponding to the tag identifier is then queried or retrieved from the Super SIM card using the tag identifier. The tag reference location is the latitude and longitude of the address where the electronic tag is permitted to operate, which may be a single point or multiple points / address ranges.
[0088] Operation S23: Calculate the relative position of the electronic tag based on the tag reference position and the current card position.
[0089] In some embodiments, the relative position of the electronic tag is calculated based on the tag reference position of the electronic tag and the current card position of the super SIM card. The relative position of the tag includes the straight-line distance between the current card position and the tag reference position, and the azimuth angle between the current card position and the tag reference position.
[0090] In some embodiments, the formula for calculating the straight-line distance between the current card position and the tag reference position is as follows:
[0091]
[0092]
[0093]
[0094] in, and It is the latitude (in radians) of the two points between the label's reference position and the current card position. It is the difference in latitude between the tag's reference position and the current card position; It is the difference in longitude between the tag's reference position and the current card position; d is the Earth's radius, usually taken as an average of 6371 kilometers; d is the straight-line distance between the tag's reference position and the current card position.
[0095] In some embodiments, the azimuth angle between the current card position and the tag reference position is calculated. The calculation formula is:
[0096]
[0097] in, and It is the latitude (in radians) of the two points between the label's reference position and the current card position. It is the difference in longitude between the tag's reference position and the current card position. The azimuth is expressed in degrees: 0° represents true north, 90° represents true east, 180° represents true south, and 270° represents true west.
[0098] For better understanding, please refer to Figure 3. Figure 3 is a simplified flowchart of calculating the relative position of an electronic tag in one embodiment of this application. In this embodiment, the relative position of the tag is calculated through a tag payment application installed on a Super SIM card. First, the tag payment application is installed and activated on the Super SIM card through pre-installation or manual download. After installation, the system loads basic data, including the tag decryption key, the tag reference position, and risk rules, which are stored in the Super SIM card. Next, when the user needs to make a payment, the terminal with the Super SIM card is brought into contact with the electronic tag, and the tag content is obtained through NFC technology. The terminal sends the tag content to the tag payment application, which decrypts and verifies the tag content. Then, the current location information of the Super SIM card is collected through base station positioning or satellite positioning, and the relative position between the current position of the Super SIM card and the tag reference position is calculated, including the calculation of straight-line distance and azimuth angle.
[0099] This embodiment uses the above-described solution to obtain the current location of the Super SIM card as the current location of the electronic tag. Based on this real-time location and transaction time, it identifies merchant-side transaction risks, thereby solving the problem that the electronic tag itself lacks computing and positioning capabilities and cannot identify merchant-side transaction risks. By calculating the relative position of the electronic tag, it determines whether the electronic tag is currently in a legal business area permitted by the tag, thus improving the security of electronic tag payments.
[0100] Based on the above implementation scheme, in one feasible implementation, the operation of performing a risk assessment on the relative position of the label and the label data to generate a risk assessment result for the label data includes S31~S32:
[0101] Operation S31 decrypts and verifies the tag data to generate historical transaction data and current transaction data of the electronic tag.
[0102] It should be noted that historical transaction data refers to transaction information generated through electronic tag payment transactions at one or more points in the past and stored in the electronic tags. This information typically includes the transaction version number, the specific details of the transaction, such as the transaction time, transaction amount, and transaction result.
[0103] Additionally, it should be noted that current transaction data refers to real-time transaction information generated during the most recent transaction that has not yet been stored as historical transaction data. This information typically includes transaction details such as the location of the electronic tag in the current transaction, the transaction time, and the transaction amount.
[0104] In some embodiments, a first key for the tag data is determined based on the tag information; the tag data is decrypted using the first key to generate initial decrypted data; the initial decrypted data is then subjected to security verification to generate historical transaction data and current transaction data for the electronic tag.
[0105] In operation S32, the risk control model configured in the offline risk control unit performs a risk assessment on the relative position of the tag and the current transaction data based on the historical transaction data, and generates a risk assessment result for the current transaction data.
[0106] It should be noted that the offline risk control unit refers to an offline risk control unit added to the SIM card hardware layer by combining the secure storage and secure computing capabilities of the SIM card. The unit has multiple micro-risk control models pre-installed and provides risk identification services to the outside world through the risk control API. Each offline risk control model can quickly judge the transaction risk of the current transaction data based on information such as tag location and historical transaction data. The whole process does not need to rely on the backend service.
[0107] In some embodiments, historical transaction data and current transaction data are used as request parameters to generate a data assessment request, which is then sent to the offline risk control unit via an API. The offline risk control unit loads a risk control model from its own business code. This model is configured with a risk identification algorithm, which assesses the risk of the transaction data in the data assessment request to determine if the current transaction carries any risk, thus obtaining a risk assessment result for the current transaction. The risk identification algorithm includes, but is not limited to, risk identification rules or intelligent identification algorithms; this application does not impose any limitations on this approach.
[0108] In the embodiments of this application, different risk control models are configured according to business dimensions for different business codes, and different risk identification algorithms are configured accordingly. For example, the risk assessment rules of the risk control model include: verifying whether the current transaction location in the current transaction data exceeds the allowable value range of the electronic tag, and whether the electronic tag has the risk of being moved; verifying whether the current transaction time in the current transaction data is legal; and calculating whether the distance between the current transaction location and the previous transaction location exceeds a threshold based on historical transaction data and current transaction data.
[0109] This embodiment, through the above-described scheme, ensures the integrity and authenticity of the data by decrypting and verifying the tag data, preventing the data from being tampered with or forged during transmission or storage; and improves the security of the current transaction by using the risk control model configured in the offline risk control unit to assess the risk of the tag's relative position and the current transaction data based on historical transaction data.
[0110] Based on the above implementation scheme, in one feasible implementation, the operation of decrypting and verifying the tag data to generate historical transaction data and current transaction data of the electronic tag includes S41~S43:
[0111] Operation S41: Determine the first key of the tag data based on the tag information.
[0112] It should be noted that the first key for the tag data refers to the decryption key pre-stored in the Super SIM card, which corresponds to the version number and read / write mode of the electronic tag.
[0113] In some embodiments, the corresponding first key is determined based on tag information such as tag access address, tag read / write mode, and electronic tag version number.
[0114] In operation S42, the tag data is decrypted using the first key to generate initial decrypted data.
[0115] It should be noted that initial decryption data refers to intermediate data that has been decrypted using the first key but has not yet undergone security verification, including historical initial decryption data and current initial decryption data.
[0116] In some embodiments, the tag data is decrypted using a first key to generate initial decrypted data.
[0117] Operation S43 performs a security verification on the initial decrypted data to generate historical transaction data and current transaction data for the electronic tag.
[0118] In some embodiments, security verification is performed on information such as users, payment permissions, and merchants in the initial decrypted data to determine whether there are security risks. When the initial decrypted data has no security risks and passes the security verification, the historical transaction data and current transaction data of the electronic tag are obtained.
[0119] Based on the above implementation scheme, in one feasible implementation, the operation of writing the payment information into the electronic tag includes S51~S54:
[0120] In step S51, the relative positions of the payment information and the tag are compressed to generate a transaction data message for the payment information.
[0121] In some embodiments, payment information includes the tag location, transaction time, transaction amount, and transaction result of the current transaction. This payment information is compressed and stored. First, the payment information is converted into integers. For example, for tag location, based on a preset tag reference location, the straight-line distance and azimuth angle between the current electronic tag and the tag reference location are calculated, and then converted into integers as the tag location. For transaction time, the calculation formula is: Transaction Time = Current Transaction Time - Preset Reference Time. The preset reference time is randomly determined, and different versions correspond to different preset reference times. The time unit of the transaction time can be configured according to specific circumstances. For example, if the preset reference time is 2024-10-19 14:50:00, the current time is 2024-10-20 14:57:00, and the time unit is minutes, then the calculated transaction time is 1447. For transaction amount, it is uniformly converted to minutes, without decimals.
[0122] Then, the converted payment information is converted into data messages to obtain transaction data messages. The data messages include a message header and data items. The message header is filled according to the business type and transaction information in the payment information. The length and settings of the message header can be set according to specific actual needs. The data items include the data item length and data item value. The data items are filled with data in the order of the message header. The length and settings of the data items can be set according to specific actual needs.
[0123] For better understanding, please refer to Figure 4. Figure 4 shows the specific format of the message header in one embodiment of this application. The message header is 1 byte long. The first 4 bits represent the business type, and the last 4 bits are used to represent the presence or absence of data items such as tag position, transaction time, and transaction result. If the data item exists, the value of the corresponding bit is "1", and if the data item does not exist, the value of the corresponding bit is "0".
[0124] Figure 5 shows the specific format of a data item in one embodiment of this application. The data item includes the data item length and the data item value. In Figure 5, the first and second bits represent the length of the data item, and the third to 18th bits represent the value of the data item.
[0125] Operation S52 compares the message length of the transaction data message with a preset first threshold.
[0126] It should be noted that the preset first threshold refers to the maximum allowed tag message length limit during tag content update. When the message length to be written to the electronic tag exceeds the first threshold, it will be truncated according to the preset truncation rules.
[0127] In some embodiments, the message length of the transaction data message is obtained, and the message length is compared with a preset first threshold to obtain a length comparison result.
[0128] In operation S53, when the length of the transaction data message is greater than the first threshold, the transaction data message is truncated according to the truncating rules to obtain the target transaction message.
[0129] It's important to note that pruning rules refer to specific strategies used to trim or process data when the content length exceeds a set threshold. These rules can be formulated based on factors such as different priorities, information importance, and data integrity to ensure that the most important information is preserved as much as possible during the pruning process, while minimizing the impact of information loss on data integrity and readability. For example, pruning based on priority might first retain the most important information, such as unique identifiers for tags and key data fields, while deleting secondary or redundant information.
[0130] In some embodiments, the length of the transaction data packet is compared with a preset first threshold. If the length of the transaction data packet is greater than the first threshold, the packet needs to be pruned according to a pruning rule so that the length of the transaction data packet is less than the first threshold to obtain the target transaction packet. If the length of the transaction data packet is less than or equal to the first threshold, the transaction data packet is directly used as the target transaction packet.
[0131] In operation S54, the target transaction message is encrypted using the second key to generate an encrypted transaction message for the target transaction message, and the encrypted transaction message is written into the electronic tag.
[0132] It should be noted that the second key refers to the encryption key pre-stored in the Super SIM card, which corresponds to the version number and read / write mode of the electronic tag.
[0133] In some embodiments, the target transaction message is encrypted using a second key to generate an encrypted transaction message, which is then written to an electronic tag. In another embodiment of this application, the encrypted transaction message is written back to the electronic tag using NFC functionality, thereby dynamically updating the tag content.
[0134] This embodiment improves transmission speed, reduces the space occupied by payment information on electronic tags, and lowers storage costs by compressing payment information through the above scheme; and enhances data transmission security by encrypting with a second key.
[0135] Based on the above implementation scheme, in one feasible implementation, the method is applied to a terminal, and the method includes operations S61~S62:
[0136] Operation S61: Obtain tag information and tag data of electronic tag, and forward the tag information and tag data to Super SIM card. Super SIM card calculates the tag relative position of electronic tag based on tag information, performs risk assessment on tag relative position and tag data, generates risk assessment result of tag data, and sends the risk assessment result to terminal.
[0137] In some embodiments, the terminal approaches the electronic tag, for example, by touching it, to obtain the tag information and tag data. The terminal then transcodes the tag information and tag data to obtain the corresponding bytecode data. Following the format specifications, the terminal concatenates the tag information and tag data into TLV format data. The terminal then opens a communication channel with the Super SIM card and sends the data to the Super SIM card through this channel. After receiving the tag information and tag data, the Super SIM card obtains its current card location. Based on the tag information, it obtains the tag reference location of the electronic tag. Based on the tag reference location and the current card location, it calculates the relative position of the electronic tag. The tag data is decrypted and verified to generate historical and current transaction data for the electronic tag. Using a risk control model configured in the offline risk control unit, a risk assessment is performed on the relative position of the tag and the current transaction data based on the historical transaction data. This risk assessment result for the current transaction data is then sent to the terminal.
[0138] In some embodiments, in one embodiment of this application, the terminal sends tag information and tag data to the Super SIM card via Application Protocol Data Unit (APDU) instructions. The APDU instructions are shown in Table 1.
[0139]
[0140] Table 1
[0141] In operation S62, the risk assessment result sent by the Super SIM card is received, payment is made based on the risk assessment result, payment information is generated, the payment information is sent to the Super SIM card, and the Super SIM card writes the payment information into the electronic tag.
[0142] In some embodiments, the system receives a risk assessment result from the Super SIM card. If the risk assessment result is no risk, it obtains the user's feature code from the current transaction data. Based on the user's feature code, it deducts payment through the payment platform, generates payment information for the current transaction data, and sends the payment information to the Super SIM card, which then writes the payment information to an electronic tag. If the risk assessment result is risky, the system prompts the user on the terminal interface that the transaction is risky and terminates the transaction.
[0143] Based on the above implementation scheme, in one feasible implementation, the operation of making payment based on the risk assessment result and generating payment information includes S71~S72:
[0144] In step S71, if the risk assessment result is no risk, then obtain the user feature code of the current transaction data.
[0145] It should be noted that the user signature code refers to information pre-stored in the Super SIM card that is associated with the user's bank account.
[0146] In some embodiments, if the risk assessment result is no risk, when the Super SIM card sends the risk assessment result, it will obtain a preset user feature code from the Super SIM card based on the current transaction data, and return the risk assessment result and the user feature code to the terminal at the same time. The terminal then determines the user feature code corresponding to the current transaction data.
[0147] In step S72, payment is deducted through the payment platform based on the user's feature code, generating payment information for the current transaction data.
[0148] In some embodiments, the terminal displays the transaction details of the current transaction through a display interface. After the user views and confirms the payment, the terminal sends a payment request to the payment platform based on the user's feature code and the user's payment confirmation. After receiving the request, the payment platform deducts the payment and generates payment information for the current transaction data.
[0149] For a better understanding, please refer to Figures 6 and 7. Figure 6 is a schematic diagram of the architecture provided by the payment method embodiment of the electronic tag of this application, and Figure 7 is a simplified flowchart provided by the payment method embodiment of the electronic tag of this application.
[0150] As shown in the architecture diagram in Figure 6, the overall architecture consists of electronic tags, terminals, a tag payment service platform, a super SIM card, and a payment backend. Electronic tags transmit tag information and data to the terminal via NFC communication. The terminal includes a tag payment POS terminal, an application manager, an SE (Secure Element) access interface, and an access control module. The tag payment POS terminal is used for information display and payment confirmation. During payment confirmation, it sends an APDU request to the super SIM card through the SE access interface. After receiving the APDU request, the SE access interface forwards it to the access control module. The access control module obtains the application certificate from the application manager and accesses the super SIM card based on the application certificate. The access control module performs rule matching. The tag payment service platform is a backend management system used to provide merchant services, user management, tag management, and payment services. It provides backend services for users to install, activate, and bind tag payment card applications to bank accounts; verifies payment permissions for terminals; provides tag management capabilities to enable the initial writing of NFC tag information; and during payment, it completes transaction information collection through tag payment and reports it to the bank to complete the actual payment. The Super SIM card includes an Application Security Unit (SE) (tag payment application) and an offline risk control unit, which contain preset access control rules, keys, or certificate storage modules. The payment backend is used for tag payment and account management, and integrates with the tag payment service platform to complete the payment process.
[0151] As shown in the flowchart in Figure 7, the terminal device first interacts with the electronic tag via NFC, and the electronic tag returns tag information (the tag information refers to the tag information and tag data mentioned earlier in this application). The terminal device then parses and obtains the tag information. Next, it redirects to the electronic tag payment terminal (i.e., the tag payment terminal in Figure 6). The electronic tag payment terminal opens a communication channel with the SIM card and sends permission and risk assessment requests to the tag payment application based on the tag information. After receiving the requests, the tag payment application decrypts the tag information content and obtains the current transaction data from the tag information, such as transaction location and transaction time. Based on the tag information, it initiates a risk assessment request to the offline risk control unit. Upon receiving the request, the system loads the risk control model and uses it to assess the transaction risk based on historical transaction data. The assessment result is then sent to the tag payment card application. When the assessment result indicates no risk, the tag payment card application obtains the stored feature code (the user feature code in this application) and sends it to the electronic tag cashier. The electronic tag cashier displays the merchant's payment information to the user and, upon user confirmation, requests payment from the tag payment service platform. After verifying the payment information, the tag payment service platform obtains the feature code and requests the payment backend to deduct the payment based on it. The payment backend verifies the binding relationship, executes the deduction operation, and finally sends the deduction result back to the electronic tag cashier to display the payment result.
[0152] It should be noted that the above examples are only for understanding this application and do not constitute a limitation on the payment method of the electronic tag of this application. Any simple modifications based on this technical concept are within the protection scope of this application.
[0153] This application also provides a payment device for an electronic tag. Referring to Figure 8, the payment device for the electronic tag includes:
[0154] The data receiving module 801 is used to receive tag information and tag data of electronic tags sent by the terminal;
[0155] The location determination module 802 is used to calculate the relative position of the electronic tag based on the tag information;
[0156] The risk assessment module 803 is used to assess the risk of the relative position of the tag and the tag data, generate a risk assessment result of the tag data, send the risk assessment result to the terminal, and the terminal makes payment based on the risk assessment result, generates payment information, and sends the payment information to the super SIM card.
[0157] The data update module 804 is used to receive payment information sent by the terminal and write the payment information into the electronic tag.
[0158] The electronic tag payment device provided in this application, employing the electronic tag payment method described in the above embodiments, can solve the technical problem of low risk control capability in electronic tag payment transactions. Compared with the prior art, the beneficial effects of the electronic tag payment device provided in this application are the same as those of the electronic tag payment method provided in the above embodiments, and other technical features in the electronic tag payment device are the same as those disclosed in the methods of the above embodiments, and will not be repeated here.
[0159] This application provides a payment device for an electronic tag, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, which are executed by the at least one processor to enable the at least one processor to perform the electronic tag payment method in the first embodiment described above.
[0160] Referring now to Figure 9, a schematic diagram of a payment device suitable for implementing the electronic tag in the embodiments of this application is shown. The payment device for the electronic tag in the embodiments of this application may include, but is not limited to, mobile terminals such as mobile phones, laptops, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Description), PMPs (Portable Media Players), in-vehicle terminals (e.g., in-vehicle navigation terminals), and fixed terminals such as digital televisions (TVs), desktop computers, etc. The payment device for the electronic tag shown in Figure 9 is merely an example and should not impose any limitations on the functionality and scope of use of the embodiments of this application.
[0161] As shown in Figure 9, the electronic tag payment device may include a processing unit 1001 (e.g., a central processing unit, a graphics processor, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 1002 or a program loaded from a storage device 1003 into a random access memory (RAM) 1004. The RAM 1004 also stores various programs and data required for the operation of the electronic tag payment device. The processing unit 1001, ROM 1002, and RAM 1004 are interconnected via a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Typically, the following systems can be connected to the I / O interface 1006: input devices 1007 including, for example, a touchscreen, touchpad, keyboard, mouse, image sensor, microphone, accelerometer, gyroscope, etc.; output devices 1008 including, for example, a liquid crystal display (LCD), speaker, vibrator, etc.; storage devices 1003 including, for example, magnetic tape, hard disk, etc.; and communication devices 1009. Communication device 1009 allows the electronic tag payment device to communicate wirelessly or wiredly with other devices to exchange data. Although the figures show electronic tag payment devices with various systems, it should be understood that implementing or having all of the systems shown is not required. More or fewer systems may be implemented alternatively.
[0162] Specifically, according to the embodiments disclosed in this application, the processes described above with reference to the flowcharts can be implemented as computer software programs. For example, embodiments disclosed in this application include a computer program product comprising a computer program carried on a computer-readable medium, the computer program containing program code for performing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network via a communication device, or installed from storage device 1003, or installed from ROM 1002. When the computer program is executed by processing device 1001, it performs the functions defined in the methods of the embodiments disclosed in this application.
[0163] The electronic tag payment device provided in this application, employing the electronic tag payment method described in the above embodiments, can solve the technical problem of low risk control capability in electronic tag payment transactions. Compared with the prior art, the beneficial effects of the electronic tag payment device provided in this application are the same as those of the electronic tag payment method provided in the above embodiments, and other technical features of the electronic tag payment device are the same as those disclosed in the previous embodiment method, and will not be repeated here.
[0164] It should be understood that the various parts disclosed in this application can be implemented using hardware, software, firmware, or a combination thereof. In the description of the above embodiments, specific features, structures, materials, or characteristics can be combined in any suitable manner in one or more embodiments or examples.
[0165] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.
[0166] This application provides a computer-readable storage medium having computer-readable program instructions (i.e., a computer program) stored thereon, the computer-readable program instructions being used to execute the electronic tag payment method in the above embodiments.
[0167] The computer-readable storage medium provided in this application may be, for example, a USB flash drive, but is not limited to, electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices, or any combination thereof. More specific examples of computer-readable storage media may include, but are not limited to: electrical connections having one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, system, or device. The program code contained on the computer-readable storage medium may be transmitted using any suitable medium, including but not limited to: wires, optical cables, RF (Radio Frequency), etc., or any suitable combination thereof.
[0168] The aforementioned computer-readable storage medium may be included in the payment device of the electronic tag; or it may exist independently and not be installed in the payment device of the electronic tag.
[0169] The aforementioned computer-readable storage medium carries one or more programs that, when executed by the electronic tag payment device, cause the electronic tag payment device to: receive tag information and tag data of the electronic tag sent by the terminal; calculate the relative position of the electronic tag based on the tag information; perform a risk assessment on the relative position of the tag and the tag data, generate a risk assessment result of the tag data, send the risk assessment result to the terminal, and have the terminal make a payment based on the risk assessment result, generate payment information, and send the payment information to the super SIM card; receive the payment information sent by the terminal, and write the payment information into the electronic tag.
[0170] Computer program code for performing the operations of this application can be written in one or more programming languages or a combination thereof, including object-oriented programming languages such as Java, Smalltalk, and C++, and conventional procedural programming languages such as the "C" language or similar programming languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving remote computers, the remote computer can be connected to the user's computer via any type of network—including a Local Area Network (LAN) or a Wide Area Network (WAN)—or can be connected to an external computer (e.g., via the Internet using an Internet service provider).
[0171] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of this application. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two consecutively indicated blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can be implemented using a dedicated hardware-based system that performs the specified function or operation, or using a combination of dedicated hardware and computer instructions.
[0172] The modules described in the embodiments of this application can be implemented in software or hardware. The names of the modules do not necessarily limit the functionality of the unit itself.
[0173] The readable storage medium provided in this application is a computer-readable storage medium that stores computer-readable program instructions (i.e., computer programs) for executing the above-described electronic tag payment method, thereby solving the technical problem of low risk control capability in electronic tag payment transactions. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided in this application are the same as the beneficial effects of the electronic tag payment method provided in the above embodiments, and will not be repeated here.
[0174] This application also provides a computer program product, including a computer program that, when executed by a processor, implements the operation of the electronic tag payment method as described above.
[0175] The computer program product provided in this application can solve the technical problem of low risk control capability in electronic tag payment transactions. Compared with the prior art, the beneficial effects of the computer program product provided in this application are the same as the beneficial effects of the electronic tag payment method provided in the above embodiments, and will not be repeated here.
[0176] The above description is only a part of the embodiments of this application and does not limit the patent scope of this application. All equivalent structural transformations made under the technical concept of this application and using the contents of the specification and drawings of this application, or direct / indirect applications in other related technical fields, are included in the patent protection scope of this application.
Claims
1. A payment method using an electronic tag, wherein, The method is applied to a Super SIM card, and the method includes: The terminal receives the tag information and tag data of the electronic tag. Calculate the relative position of the electronic tag based on the tag information; A risk assessment is performed on the relative position of the tag and the tag data to generate a risk assessment result for the tag data. The risk assessment result is then sent to the terminal, which makes a payment based on the risk assessment result, generates payment information, and sends the payment information to the super SIM card. The system receives payment information sent by the terminal and writes the payment information into the electronic tag.
2. The method as described in claim 1, wherein, The operation of calculating the relative position of the electronic tag based on the tag information includes: Obtain the current card location of the Super SIM card; Based on the tag information, obtain the tag reference position of the electronic tag; The relative position of the electronic tag is calculated based on the tag reference position and the current card position.
3. The method as described in claim 2, wherein, The operation of obtaining the tag reference position of the electronic tag based on the tag information includes: Based on the version number and read / write mode in the tag information, select the first key corresponding to the tag information from the keys stored in the Super SIM card; The tag data is decrypted using the first key; Obtain the tag identifier from the decrypted data; wherein the tag identifier is used to uniquely identify the electronic tag; and The tag reference position corresponding to the tag identifier is obtained from the Super SIM card through the tag identifier.
4. The method of claim 2, wherein, The current card location is the current location of the Super SIM card, obtained through base station positioning or satellite positioning; the tag reference location is used to identify the latitude and longitude coordinates of the permitted business address of the electronic tag; The relative position of the tag is the distance and orientation of the actual position of the electronic tag relative to the tag reference position at the time of the current transaction.
5. The method of claim 1, wherein, The operation of performing a risk assessment on the relative position of the label and the label data, and generating a risk assessment result for the label data, includes: The tag data is decrypted and verified to generate historical transaction data and current transaction data for the electronic tag; Based on the historical transaction data, the risk control model configured in the offline risk control unit performs a risk assessment on the relative position of the tag and the current transaction data, and generates a risk assessment result for the current transaction data.
6. The method of claim 5, wherein, The historical transaction data refers to transaction information generated through payment transactions via the electronic tag at one or more points in the past and stored in the electronic tag, including the transaction version number, transaction time, transaction amount, and transaction result; The current transaction data is real-time transaction information generated during the most recent transaction that has not yet been stored as historical transaction data, including the tag location, transaction time, and transaction amount of the electronic tag in the current transaction.
7. The method of claim 5, wherein, The operation of using the risk control model configured in the offline risk control unit to perform risk assessment on the relative position of the tag and the current transaction data based on the historical transaction data, and generating a risk assessment result for the current transaction data includes: The historical transaction data and the current transaction data are used as request parameters to generate a data evaluation request; and The data assessment request is sent to the offline risk control unit via an application programming interface, so that the offline risk control unit loads the risk control model in the offline risk control unit through business code, and the risk control model performs the risk assessment on the data assessment request through a risk identification algorithm to generate the risk assessment result of the current transaction data.
8. The method of claim 5, wherein, The operation of decrypting and verifying the tag data to generate historical and current transaction data for the electronic tag includes: Determine the first key for the tag data based on the tag information; The tag data is decrypted using the first key to generate initial decrypted data; The initial decrypted data is subjected to security verification to generate historical transaction data and current transaction data of the electronic tag.
9. The method of claim 8, wherein, The operation of determining the first key for the tag data based on the tag information includes: The first key is determined based on the tag access address, tag read / write mode, and electronic tag version number of the tag information.
10. The method of claim 8, wherein, The operation of performing security verification on the initial decrypted data and generating historical and current transaction data for the electronic tag includes: Determine whether the user information, payment permission information, and merchant information in the initial decrypted data pose a security risk; and Once it is determined that the initial decrypted data does not pose the security risk, the historical transaction data and the current transaction data of the electronic tag are generated.
11. The method of claim 1, wherein, The operation of writing the payment information into the electronic tag includes: The payment information is compressed to generate a transaction data message for the payment information; The message length of the transaction data message is compared with a preset first threshold. When the length of the transaction data message exceeds the first threshold, the transaction data message is truncated according to the truncating rules to obtain the target transaction message; The target transaction message is encrypted using a second key to generate an encrypted transaction message, which is then written into the electronic tag.
12. The method of claim 11, wherein, The payment information includes the tag location of the current transaction, the transaction time, the transaction amount, and the transaction result.
13. The method of claim 11, wherein, The pruning rules are formulated based on priority, information importance, and data integrity.
14. A payment method using an electronic tag, wherein, The method is applied to a terminal, and the method includes: The system acquires the tag information and tag data of the electronic tag, forwards the tag information and tag data to the Super SIM card, calculates the relative position of the electronic tag based on the tag information, performs a risk assessment on the relative position of the tag and the tag data, generates a risk assessment result of the tag data, and sends the risk assessment result to the terminal. The system receives the risk assessment result sent by the Super SIM card, makes payment based on the risk assessment result, generates payment information, sends the payment information to the Super SIM card, and the Super SIM card writes the payment information into the electronic tag.
15. The method of claim 14, wherein, The operation of acquiring the tag information and tag data of the electronic tag and forwarding the tag information and tag data to the Super SIM card includes: Obtain the tag information and the tag data; The tag information and tag data are transcoded to obtain the corresponding bytecode data; According to the format specifications, the label information and the label data are concatenated into TLV format data; and Open a communication channel with the Super SIM card, and send the TLV format data to the Super SIM card through the channel.
16. The method of claim 14, wherein, The operation of making payment based on the risk assessment result and generating payment information includes: If the risk assessment result is no risk, then obtain the user's feature code of the current transaction data; Payment is deducted from the payment platform based on the user's unique identifier, generating payment information for the current transaction data.
17. A payment device using an electronic tag, wherein, The device includes: The data receiving module is used to receive tag information and tag data of electronic tags sent by the terminal; The location determination module is used to calculate the relative position of the electronic tag based on the tag information; The risk assessment module is used to assess the risk of the relative position of the tag and the tag data, generate a risk assessment result of the tag data, send the risk assessment result to the terminal, and the terminal makes payment based on the risk assessment result, generates payment information, and sends the payment information to the Super SIM card. The data update module is used to receive payment information sent by the terminal and write the payment information into the electronic tag.
18. A payment device using an electronic tag, wherein, The device includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, the computer program being configured to implement the payment method of the electronic tag as claimed in any one of claims 1 to 16.
19. A storage medium, wherein, The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, it implements the operation of the payment method of the electronic tag as described in any one of claims 1 to 16.
20. A computer program product, wherein, The computer program product includes a computer program that, when executed by a processor, implements the operation of the payment method for the electronic tag as described in any one of claims 1 to 16.