CN104408622B - System and method for realizing electronic transaction confirmation based on independent cryptographic device - Google Patents

Abstract

The invention relates to a system and method for realizing electronic transaction confirmation based on an independent cryptographic device, which comprises an independent cryptographic device; a user intelligent terminal, which is used to receive a pushed payment message and confirm the transaction; and a transaction confirmation terminal, which is used to provide users with selected commodities Or an operation interface that displays transaction information and generates transaction orders; an authentication service platform; a virtual account management platform to manage user virtual accounts and receive order information verified by the authentication service platform to push payment requests to the user's smart terminal And the payment process is completed according to the confirmation information of the user intelligent terminal. The system and method for realizing electronic transaction confirmation based on an independent cryptographic device adopting this structure adopts the hardware encryption device to digitally sign the transaction data, thereby protecting the transaction process and confirming the authenticity of the transaction, providing a higher security payment solution, and at the same time not Loss of quickness, has a wider range of applications.

Description

System and method for realizing electronic transaction confirmation based on independent cryptographic device

technical field

The invention relates to the technical field of digital signatures, in particular to the technical field of O2O electronic transaction digital signatures, in particular to a system and method for realizing electronic transaction confirmation based on an independent cryptographic device.

Background technique

"O2O" (online and offline integration) is becoming more and more popular as a new business model in China. Electronic transaction confirmation (such as e-commerce payment or logistics receipt) is a very important link in the O2O business model. More and more attention is paid by businessmen. The use of QR codes for electronic transaction confirmation is a very popular method at present. Under this scheme, merchants can compile transaction information such as commodity types, prices, and merchant account numbers into a QR code, which can be printed and published on various newspapers, magazines, advertisements, books and other carriers, and even on the advertising walls of subway stations. You can also see products with QR codes printed on them. The user can scan the QR code of the product of interest through the mobile phone client, and then make payment and settlement with the merchant account. Finally, the merchant can deliver the goods and complete the transaction according to the user's receipt and contact information in the payment transaction information.

However, using QR code for payment and settlement has the following problems:

First of all, users cannot be sure that the QR code they see is connected to a legitimate merchant. This is because the principle of QR code technology is simple and the threshold for implementation is very low. The Internet is flooded with a large number of QR code generator software. Anyone can generate a QR code from information such as links and program codes according to their own intentions. It is impossible to understand the hidden content of the QR code by visual reading, which provides an opportunity for criminals to forge the QR code or embed a website link with a Trojan virus into the QR code. Scanning the code will unknowingly download the Trojan horse program to your mobile terminal, thereby revealing the user's private information and even causing economic losses to the user.

Second, merchants cannot ensure that legitimate transactions are not denied. Since QR code payment usually does not require users to submit order information using digital signature technology, merchants cannot ensure that legitimate transactions are not denied.

It can be seen that although QR code payment is convenient and fast, the protection for both parties of the transaction is slightly insufficient.

SUMMARY OF THE INVENTION

The purpose of the present invention is to overcome the shortcomings of the above-mentioned prior art, and to provide a payment solution that can be realized by adopting a hardware encryption device to digitally sign the transaction data, thereby protecting the transaction process and confirming the authenticity of the transaction and providing higher security. , A system and method for realizing electronic transaction confirmation based on an independent cryptographic device without losing speed and having a wider range of applications.

In order to achieve the above object, the system and method for realizing electronic transaction confirmation based on an independent cryptographic device of the present invention have the following constitutions:

The main features of the system for realizing electronic transaction confirmation based on an independent cryptographic device are that the system includes:

An independent cryptographic device to store the user's private key and perform digital signature calculations;

The user's intelligent terminal is used to receive the payment message pushed by the virtual account management platform and confirm the transaction;

The transaction confirmation terminal is used to provide the user with an operation interface for selecting commodities or displaying transaction information and generating transaction orders;

The authentication service platform is used to register and manage the said independent cryptographic device and transaction confirmation terminal, and to save the public key certificate chain used to verify the digital signature, the binding information between the independent cryptographic device and the user's smart terminal, and the user's virtual account and Binding relationship of independent cryptographic devices;

The virtual account management platform is used to manage user virtual accounts, process payment requests, and receive order information verified by the authentication service platform to push payment requests to the user intelligent terminal and complete the confirmation information according to the user intelligent terminal. payment process.

Preferably, the independent cryptographic device includes a central processing unit, a secure memory, a cryptographic co-processor and a communication interface with the transaction confirmation terminal.

Preferably, the transaction confirmation terminal is a PC or an embedded self-service terminal.

Preferably, the electronic transaction is O2O electronic transaction.

Preferably, the user's intelligent terminal is a user's mobile terminal, and the authentication service platform also stores the binding information of the independent password device, the user's virtual account and the user's mobile phone number.

The present invention also relates to a method for realizing electronic transaction confirmation based on an independent cryptographic device according to the system, the main feature of which is that the method comprises the following steps:

(1) The described transaction confirmation terminal generates a transaction order or displays the user's billing information according to the user's selection of commodities;

(2) The transaction confirmation terminal sends the transaction order information to the independent cryptographic device;

(3) The independent cryptographic device generates a digital signature according to the transaction order and returns it to the transaction confirmation terminal together with its identification information;

(4) The transaction confirmation terminal sends the transaction order including the independent cryptographic device identification information and digital signature data to the authentication service platform;

(5) The authentication service platform verifies the identity of the transaction confirmation terminal and the digital signature;

(6) The authentication service platform sends the verified transaction order information to the virtual account management platform;

(7) The virtual account management platform generates a payment request according to the verified transaction order information and sends it to the user intelligent terminal;

(8) The virtual account management platform sends the user payment confirmation information of the user intelligent terminal to the authentication service platform;

(9) The authentication service platform forwards the user payment confirmation information to the transaction confirmation terminal;

(10) The transaction confirmation terminal displays the transaction result.

Preferably, between the described steps (1) and (2), the following steps are also included:

(1-1) The described transaction confirmation terminal prompts the user to connect to the independent cryptographic device and input the offline password of the independent cryptographic device.

Preferably, the authentication service platform also stores the binding relationship between the independent cryptographic device and the user's virtual account and has a secure channel with the transaction confirmation terminal, and the transaction confirmation terminal will contain the identification information of the independent cryptographic device and the user's virtual account. Transaction orders including digital signature data are sent to the authentication service platform, specifically:

The transaction confirmation terminal sends the transaction order including the identification information of the independent cryptographic device and the digital signature data to the authentication service platform through the secure channel;

The authentication service platform forwards the user payment confirmation information to the transaction confirmation terminal, specifically:

The authentication service platform forwards the user payment confirmation information to the transaction confirmation terminal through the secure channel.

Preferably, the authentication service platform verifies the identity of the transaction confirmation terminal and the digital signature, including the following steps:

(5-1) The authentication service platform verifies the identity of the transaction confirmation terminal, if the transaction confirmation terminal is a registered device, proceed to step (5-2), otherwise proceed to step (5-3) ;

(5-2) The authentication service platform verifies the digital signature in the transaction order sent by the transaction confirmation terminal, and if the digital signature verification passes, proceed to step (6), otherwise proceed to step (5-3);

(5-3) The authentication service platform sends transaction failure information to the transaction confirmation terminal, and then proceeds to step (10).

The system and method for realizing electronic transaction confirmation based on an independent cryptographic device in the invention have the following beneficial effects:

The invention realizes the confirmation of transaction data offline by using an independent cryptographic device, and pushes the confirmation data to the online account system, and the online account system completes the payment, so as to protect the authenticity and effectiveness of the transaction and confirmation data. The independent cryptographic device in this invention can be, but is not limited to, a smart IC card and needs to bind the user's virtual account first. Using the system and method can provide a payment solution with higher security than two-dimensional code payment without losing speed; the present invention adopts the registered O2O transaction confirmation terminal to provide users with commodities or display order information, and in this environment It can effectively avoid the transaction risks caused by the forgery of the QR code and the embedded Trojan virus; the use of an independent cryptographic device to confirm the transaction order offline through digital signature technology can prevent the order from being forged, tampered with and the person placing the order denies. The independent password device is bound to the user's virtual account and mobile phone number, which can complete the payment process safely and quickly, with a good user experience and a wider range of applications.

Description of drawings

FIG. 1 is a schematic structural diagram of a system for realizing electronic transaction confirmation based on an independent cryptographic device of the present invention.

FIG. 2 is a flowchart of a method for realizing electronic transaction confirmation based on an independent cryptographic device according to the present invention.

Detailed ways

In order to describe the technical content of the present invention more clearly, further description will be given below with reference to specific embodiments.

Digital signature is the application of asymmetric key encryption technology and digital digest technology. Simply put, the so-called digital signature is some data attached to the data unit, or a cryptographic transformation made on the data unit. This data or transformation allows the recipient of the data unit to confirm the origin of the data unit and the integrity of the data unit and to protect the data from forgery by a person (eg, the recipient). It is a method of signing messages in electronic form, and a signed message can be transmitted over a communication network. This technology can ensure the integrity of information transmission, carry out the identity authentication of the sender, and prevent the occurrence of denial in the transaction, so it is widely used in the e-commerce transaction process including O2O payment. The security of the payment scheme using digital signature technology is higher than that of QR code payment. Digital signature needs to store a pair of public and private key pairs in the signing device, and then use the private key to calculate the data to generate a digital signature value. Therefore, the security of the private key is particularly important for digital signatures and cannot be stored in an open system environment. , such as mobile terminals such as mobile phones, should be stored in a dedicated hardware cryptographic device, and the digital signature calculation is also completed in the cryptographic device, so as to maximize the security of the digital signature process.

In order to achieve the purpose of the present invention, the system for realizing electronic transaction confirmation based on an independent cryptographic device of the present invention includes:

Independent cryptographic device, used to store the user's private key and perform digital signature calculation; since the independent cryptographic device and the user's smart terminal are independent of each other, even if the user's smart terminal is lost, it will not pose a security threat;

The user's intelligent terminal is used to receive the payment message pushed by the virtual account management platform and confirm the transaction;

The transaction confirmation terminal is used to provide the user with an operation interface for selecting commodities or displaying transaction information and generating transaction orders;

The authentication service platform is used to register and manage the said independent cryptographic device and transaction confirmation terminal, and to save the public key certificate chain used to verify the digital signature, the binding information between the independent cryptographic device and the user's smart terminal, and the user's virtual account and The binding relationship of independent cryptographic devices; in this way, the authentication service platform can confirm and verify the various information contained in the transaction order after the transaction confirmation terminal generates the transaction order;

The virtual account management platform is used to manage user virtual accounts, process payment requests, and receive order information verified by the authentication service platform to push payment requests to the user intelligent terminal and complete the confirmation information according to the user intelligent terminal. payment process.

In a preferred embodiment, the independent cryptographic device includes a central processing unit, a secure memory, a cryptographic co-processor and a communication interface with the transaction confirmation terminal.

In another preferred embodiment, the transaction confirmation terminal is a PC or an embedded self-service terminal.

In another preferred embodiment, the electronic transaction is an O2O electronic transaction. However, it is obvious that in practical applications, the present invention can be applied to various electronic trading platforms.

In a preferred embodiment, the user's intelligent terminal is a user's mobile terminal, and the authentication service platform also stores the binding information of the independent password device, the user's virtual account and the user's mobile phone number. In practical applications, the user's intelligent terminal may also be a personal device such as a personal computer and a tablet computer.

The present invention also relates to a method for realizing electronic transaction confirmation based on an independent cryptographic device according to the system, comprising the following steps:

(1) The described transaction confirmation terminal generates a transaction order or displays the user's billing information according to the user's selection of commodities;

(2) The transaction confirmation terminal sends the transaction order information to the independent cryptographic device;

(3) The independent cryptographic device generates a digital signature according to the transaction order and returns it to the transaction confirmation terminal together with its identification information;

(4) The transaction confirmation terminal sends the transaction order including the independent cryptographic device identification information and digital signature data to the authentication service platform;

(5) The authentication service platform verifies the identity of the transaction confirmation terminal and the digital signature;

(6) The authentication service platform sends the verified transaction order information to the virtual account management platform;

(7) The virtual account management platform generates a payment request according to the verified transaction order information and sends it to the user intelligent terminal;

(8) The virtual account management platform sends the user payment confirmation information of the user intelligent terminal to the authentication service platform;

(9) The authentication service platform forwards the user payment confirmation information to the transaction confirmation terminal;

(10) The transaction confirmation terminal displays the transaction result.

In a preferred embodiment, between the steps (1) and (2), the following steps are also included:

(1-1) The described transaction confirmation terminal prompts the user to connect to the independent cryptographic device and input the offline password of the independent cryptographic device. The user's transaction security is double guaranteed by the offline password and digital signature. Even if the independent password device is lost, the payment cannot be completed without knowing the offline password after being obtained by others.

In a preferred embodiment, the authentication service platform also stores the binding relationship between the independent cryptographic device and the user's virtual account and has a secure channel with the transaction confirmation terminal, and the transaction confirmation terminal will include Transaction orders including independent cryptographic device identification information and digital signature data are sent to the authentication service platform, specifically:

The transaction confirmation terminal sends the transaction order including the identification information of the independent cryptographic device and the digital signature data to the authentication service platform through the secure channel;

The authentication service platform forwards the user payment confirmation information to the transaction confirmation terminal, specifically:

The authentication service platform forwards the user payment confirmation information to the transaction confirmation terminal through the secure channel.

Through the encrypted security channel, comprehensive information security protection for electronic transactions can be performed to prevent hackers from intercepting transaction information from the transmission channel.

In a preferred embodiment, the authentication service platform verifies the identity of the transaction confirmation terminal and the digital signature, including the following steps:

(5-1) The authentication service platform verifies the identity of the transaction confirmation terminal, if the transaction confirmation terminal is a registered device, proceed to step (5-2), otherwise proceed to step (5-3) ;

(5-2) The authentication service platform verifies the digital signature in the transaction order sent by the transaction confirmation terminal, and if the digital signature verification passes, proceed to step (6), otherwise proceed to step (5-3);

(5-3) The authentication service platform sends transaction failure information to the transaction confirmation terminal, and then proceeds to step (10).

By verifying the identity of the transaction confirmation terminal, users can only conduct transactions in trusted electronic trading platforms, ensuring that users will not be deceived by false electronic trading platforms.

The technical scheme of the present invention is further elaborated below with a specific embodiment in which the system and method for realizing electronic transactions based on independent cryptographic devices of the present invention are applied to O2O electronic transactions:

The system for realizing electronic transaction confirmation based on an independent cryptographic device of the present invention includes: an independent cryptographic device for storing the user's private key and performing digital signature calculation, the user's mobile terminal (such as a smart phone), an O2O transaction confirmation terminal, an authentication service platform and Virtual account management platform.

The independent cryptographic device is provided with a central processing unit, a secure memory, a cryptographic co-processor and a communication interface with the O2O transaction confirmation terminal. The user binds it with his own virtual account, and the binding information is stored in the authentication service platform, which is used to digitally sign the order data generated by the transaction confirmation terminal.

The user's mobile terminal is used to receive payment messages pushed by the virtual account management platform, and the user can confirm the transaction on this terminal.

The O2O transaction confirmation terminal can be a PC or a dedicated embedded self-service terminal, which is used to provide users with an operation interface to select commodities or display transaction information, generate transaction orders, and send them to the authentication service platform through a secure network channel. In addition, it can be connected to an independent cryptographic device through a communication interface, submit an order data digital signature request to the cryptographic device, and receive the returned digital signature value.

The authentication service platform is a server system with three main functions. The first function is for registration, management of independent cryptographic devices and O2O transaction confirmation terminals. The transaction process can only be triggered if the user uses an independent cryptographic device on the O2O transaction confirmation terminal registered on the authentication service platform. Another function of the authentication service platform is to save the public key certificate chain used to verify the digital signature, the binding information between the independent cryptographic device and the user's virtual account and the user's mobile phone number, and the private data for establishing a secure channel with the O2O transaction confirmation terminal. The last important function of the device is to store the binding relationship between the user's virtual account and the independent password device.

The virtual account management platform is a system for managing user virtual accounts and processing payment requests. It is used to receive the order information verified by the authentication service platform, push the payment request to the user, and complete the payment process according to the user's confirmation information.

The system structure for realizing O2O electronic transaction confirmation in this specific embodiment is shown in FIG. 1 .

The flow chart of the method for realizing O2O electronic transaction confirmation according to this specific embodiment is shown in Figure 2, and includes the following steps:

(1) The user (that is, the transaction payer) selects the desired product at the O2O transaction confirmation terminal, and the O2O transaction confirmation terminal generates an order;

(2) The O2O transaction confirmation terminal prompts the user to connect to the independent cryptographic device and input the offline password of the independent cryptographic device;

(3) The O2O payment transaction confirmation terminal sends the order information to the independent cryptographic device, and the independent cryptographic device generates a digital signature on the order information and returns it to the O2O transaction confirmation terminal together with its identification information;

(4) The O2O transaction confirmation terminal sends the order information including the independent cryptographic device identification information and digital signature data to the authentication service platform through a secure channel;

(5) The authentication service platform verifies the identity of the O2O transaction confirmation terminal and checks whether it is a registered device;

(6) After the verification is passed, the verification service platform verifies the digital signature in the order;

(7) If the verification of the digital signature is passed, the authentication service platform sends the order information to the management platform of the virtual account associated with the independent cryptographic device;

(8) The virtual account management platform generates a payment request according to the order information and pushes it to the user's mobile phone;

(9) The user confirms the payment request on the mobile phone;

(10) The virtual account management platform sends the received user payment confirmation information to the authentication service platform;

(11) The authentication service platform forwards the payment confirmation information to the O2O transaction confirmation terminal through the secure channel, and the payment acceptance terminal displays the transaction result to the user.

The system and method for realizing electronic transaction confirmation based on an independent cryptographic device in the invention have the following beneficial effects:

The invention realizes the confirmation of transaction data offline by using an independent cryptographic device, and pushes the confirmation data to the online account system, and the online account system completes the payment, so as to protect the authenticity and effectiveness of the transaction and confirmation data. The independent cryptographic device in this invention can be, but is not limited to, a smart IC card and needs to bind the user's virtual account first. Using the system and method can provide a payment solution with higher security than two-dimensional code payment without losing speed; the present invention adopts the registered O2O transaction confirmation terminal to provide users with commodities or display order information, and in this environment It can effectively avoid the transaction risks caused by the forgery of the QR code and the embedded Trojan virus; the use of an independent cryptographic device to confirm the transaction order offline through digital signature technology can prevent the order from being forged, tampered with and the person placing the order denies. The independent password device is bound to the user's virtual account and mobile phone number, which can complete the payment process safely and quickly, with a good user experience and a wider range of applications.

In this specification, the invention has been described with reference to specific embodiments thereof. However, it will be evident that various modifications and changes can still be made without departing from the spirit and scope of the invention. Accordingly, the specification and drawings are to be regarded in an illustrative rather than a restrictive sense.

Claims (8)

1. A system for effecting electronic transaction confirmation based on a stand-alone cryptographic device, said system comprising:

the independent password equipment is used for storing a user private key and performing digital signature calculation;

the user intelligent terminal is used for receiving the payment message pushed by the virtual account management platform and confirming the transaction;

the transaction confirmation terminal is used for providing an operation interface for selecting commodities or displaying transaction information for a user and generating a transaction order;

the authentication service platform is used for registering and managing the independent password equipment and the transaction confirmation terminal, storing a public key certificate chain for verifying a digital signature, binding information of the independent password equipment and the user intelligent terminal and a binding relation between the virtual account of the user and the independent password equipment, and storing the binding information of the independent password equipment, the virtual account of the user and the mobile phone number of the user;

the virtual account management platform is used for managing a user virtual account, processing a payment request, receiving order information verified by the authentication service platform, pushing the payment request to the user intelligent terminal and completing a payment process according to the confirmation information of the user intelligent terminal,

the electronic transaction is O2O electronic transaction;

the system realizes the electronic transaction confirmation operation based on the independent password equipment, wherein the electronic transaction confirmation operation carries out the following processing:

(1) the transaction confirmation terminal generates a transaction order or displays bill information of the user according to the selection of the user on the commodity;

(2) the transaction confirmation terminal sends the transaction order information to the virtual account management;

(3) the independent password equipment generates a digital signature according to the transaction order and returns the digital signature and the identification information of the digital signature to the transaction confirmation terminal;

(4) the transaction confirmation terminal sends a transaction order containing the identification information of the independent password equipment and the digital signature data to the authentication service platform;

(5) the authentication service platform verifies the identity of the transaction confirmation terminal and the digital signature;

(6) the authentication service platform sends the verified transaction order information to the virtual account management platform;

(7) the virtual account management platform generates a payment request according to the verified transaction order information and sends the payment request to the user intelligent terminal;

(8) the virtual account management platform sends the user payment confirmation information of the user intelligent terminal to the authentication service platform;

(9) the authentication service platform forwards the user payment confirmation information to the transaction confirmation terminal;

(10) and the transaction confirmation terminal displays a transaction result.

2. The system for enabling electronic transaction confirmation based on a stand-alone cryptographic device of claim 1, wherein the stand-alone cryptographic device comprises a central processing unit, a secure memory, a cryptographic coprocessor and a communication interface with the transaction confirmation terminal.

3. The system for realizing electronic transaction confirmation based on the independent password device as claimed in claim 1, wherein the transaction confirmation terminal is a PC or an embedded self-service terminal.

4. The system for enabling electronic transaction confirmation based on the independent password device of claim 1, wherein the user intelligent terminal is a user mobile terminal.

5. A method for realizing electronic transaction confirmation based on independent password equipment in the system according to any one of claims 1 to 4, characterized in that the method comprises the following steps:

(1) the transaction confirmation terminal generates a transaction order or displays bill information of the user according to the selection of the user on the commodity;

(2) the transaction confirmation terminal sends the transaction order information to the virtual account management;

(3) the independent password equipment generates a digital signature according to the transaction order and returns the digital signature and the identification information of the digital signature to the transaction confirmation terminal;

(4) the transaction confirmation terminal sends a transaction order containing the identification information of the independent password equipment and the digital signature data to the authentication service platform;

(5) the authentication service platform verifies the identity of the transaction confirmation terminal and the digital signature;

(6) the authentication service platform sends the verified transaction order information to the virtual account management platform;

(7) the virtual account management platform generates a payment request according to the verified transaction order information and sends the payment request to the user intelligent terminal;

(8) the virtual account management platform sends the user payment confirmation information of the user intelligent terminal to the authentication service platform;

(9) the authentication service platform forwards the user payment confirmation information to the transaction confirmation terminal;

(10) and the transaction confirmation terminal displays a transaction result.

6. The method for realizing electronic transaction confirmation based on the independent password device as claimed in claim 5, wherein between the steps (1) and (2), further comprising the following steps:

(1-1) the transaction confirmation terminal prompts the user to connect the independent password device and to input the offline password of the independent password device.

7. The method for realizing electronic transaction confirmation based on the independent password device according to claim 5, wherein the authentication service platform further stores a binding relationship between the independent password device and a virtual account of a user and a secure channel with the transaction confirmation terminal, and the transaction confirmation terminal sends a transaction order containing identification information of the independent password device and digital signature data to the authentication service platform, specifically:

the transaction confirmation terminal sends a transaction order containing the identification information of the independent password equipment and the digital signature data to the authentication service platform through the secure channel;

the authentication service platform verifies and forwards the user payment confirmation information to the transaction confirmation terminal, and specifically comprises the following steps:

the authentication service platform forwards the payment confirmation information of the user to the transaction confirmation terminal through the secure channel.

8. The method for implementing electronic transaction confirmation based on independent password device as claimed in claim 5, wherein the authentication service platform verifies the identity of the transaction confirmation terminal and the digital signature, comprising the steps of:

(5-1) the authentication service platform verifies the identity of the transaction confirmation terminal, if the transaction confirmation terminal is a registered device, the step (5-2) is continued, otherwise, the step (5-3) is continued;

(5-2) the authentication service platform verifies the digital signature in the transaction order sent by the transaction confirmation terminal, if the digital signature is verified, the step (6) is continued, otherwise, the step (5-3) is continued;

(5-3) the authentication service platform sends transaction failure information to the transaction confirmation terminal, and then continues to the step (10).

Images