CN119107085A

CN119107085A - Business processing method, device, card object, storage medium, and program product

Info

Publication number: CN119107085A
Application number: CN202411230402.0A
Authority: CN
Inventors: 何畅
Original assignee: Tencent Technology Shenzhen Co Ltd
Current assignee: Tencent Technology Shenzhen Co Ltd
Priority date: 2024-09-03
Filing date: 2024-09-03
Publication date: 2024-12-10

Abstract

The embodiment of the present application provides a business processing method, device, card object, storage medium, and program product. The business processing method includes: receiving business processing information input to the card object, the business processing information includes business processing instructions and biometrics, and the business processing instructions are used to indicate the business requested to be executed; responding to the card swiping operation performed on the card object on the card swiping device; if the business processing information meets the business processing conditions, triggering the card swiping device to execute the business. The embodiment of the present application can improve the security of business execution.

Description

Business processing method, device, card object, storage medium and program product

Technical Field

The present application relates to the field of computer technology, and in particular, to a service processing method, a service processing apparatus, a card object, a computer readable storage medium, and a computer program product.

Background

The card object may be used to execute a service, and in particular, the execution of the service may be triggered by performing a swipe operation on the card object. At present, the security of the execution of a service triggered by a card swiping operation is difficult to ensure because, when a card object is lost, the card object has a problem that the card swiping operation is illegally executed, and the card swiping person who performs the card swiping operation on the card object is not the same person as the owner of the card object, resulting in that the service is illegally executed. Therefore, how to improve the security of service execution becomes a current research hotspot.

Disclosure of Invention

The embodiment of the application provides a business processing method and device, a card object, a storage medium and a program product, which can improve the safety of business execution.

In one aspect, an embodiment of the present application provides a service processing method, where the service processing method includes:

Receiving service processing information input to a card object, wherein the service processing information comprises a service processing instruction and biological characteristics, and the service processing instruction is used for indicating a service requiring execution;

Responding to a card swiping operation performed on a card object on a card swiping device;

and if the service processing information meets the service processing conditions, triggering the card swiping equipment to execute the service.

Accordingly, an embodiment of the present application provides a service processing apparatus, including:

The receiving unit is used for receiving service processing information input to the card object, wherein the service processing information comprises a service processing instruction and biological characteristics, and the service processing instruction is used for indicating a service requiring execution;

And the processing unit is used for responding to the card swiping operation executed on the card swiping device, and triggering the card swiping device to execute the service if the service processing information meets the service processing condition.

In one implementation, the card object comprises an information acquisition module, and a receiving unit, which is used for executing the following steps when receiving the business processing information input to the card object:

And receiving business processing information input to an information acquisition module in the card object.

In one implementation, the information acquisition module comprises a sound signal acquisition sub-module and a sound print recognition sub-module, wherein the service processing instruction is a sound instruction, and the receiving unit is used for receiving the service processing information input to the information acquisition module in the card object and specifically executing the following steps:

receiving a sound instruction input to a sound signal acquisition submodule in a card object;

the biological characteristics are voiceprint characteristics obtained by voiceprint extraction of the voice command through the voiceprint recognition sub-module.

In one implementation, the information acquisition module comprises a sound signal acquisition sub-module and a biological feature acquisition sub-module, wherein the service processing instruction is a sound instruction, and the receiving unit is used for receiving the service processing information input to the information acquisition module in the card object and specifically executing the following steps:

A biometric input to a biometric acquisition sub-module in the card object is received.

In one implementation, the information acquisition module comprises a sound signal acquisition sub-module, a voiceprint recognition sub-module and a biological feature acquisition sub-module, wherein the service processing instruction is a sound instruction, the biological feature comprises a first biological feature and a second biological feature, and the receiving unit is used for executing the following steps when receiving the service processing information input to the information acquisition module in the card object:

the first biological feature is a voiceprint feature obtained by voiceprint extraction of the voice command through a voiceprint recognition sub-module;

A second biometric input to a biometric acquisition sub-module in the card object is received, the second biometric being a type of biometric other than a voiceprint feature.

In one implementation, the receiving unit is configured to, when receiving a sound instruction input to the sound signal acquisition submodule in the card object, specifically perform the following steps:

the sound signal acquisition sub-module comprises a sound signal acquisition switch and a sound signal receiver, and is used for receiving the starting operation of the sound signal acquisition switch and triggering the receiving of the sound instruction input to the sound signal receiver;

or receiving the voice command input to the voice signal acquisition sub-module in response to the start collection signal input to the voice signal acquisition sub-module, and stopping receiving the voice command input to the voice signal acquisition sub-module in response to the stop collection signal input to the voice signal acquisition sub-module.

In one implementation, the information acquisition module comprises an instruction input module and a biological feature acquisition sub-module, and the receiving unit is used for receiving the business processing information input to the information acquisition module in the card object, and is specifically used for executing the following steps:

Receiving a business processing instruction input to an instruction input module in a card object, wherein the business processing instruction comprises at least one of a text instruction, a graphic instruction, a symbol instruction, a digital instruction and a gesture instruction;

In one implementation, the service processing information satisfies a service processing condition, including at least one of:

The biological feature meets the characteristic condition, namely, the biological feature is matched with the input feature;

the business processing instruction satisfies the instruction condition.

In one implementation, the business process instructions satisfy instruction conditions, including at least one of:

The operation key in the service processing instruction meets the key condition, wherein the operation key meets the key condition, which means that the operation key is the same as a preset key, the preset key is set in a management client of a card object, and the operation key comprises any one of a single effective key, a plurality of effective keys, a short-term effective key and a permanent effective key;

the service operation information in the service processing instruction meets the operation information condition, wherein the service operation information meets the operation information condition, namely, the service operation information is matched with the operation information of the card swiping operation;

The operation time interval meets the time threshold condition, wherein the operation time interval is within the interval threshold, and the operation time interval is the time interval between the receiving time of the business processing instruction and the card swiping time corresponding to the card swiping operation;

the payment resource amount in the business processing instruction satisfies the payment condition.

In one implementation, the payment resource amount meeting the payment condition includes any one of:

The payment resource amount is rated payment resource amount, and the service payment resource amount corresponding to the service is smaller than or equal to the rated payment resource amount;

The payment resource amount is the business payment resource amount corresponding to the business operation, and the business payment resource amount is smaller than or equal to the residual payment resource amount of the owner of the card object.

In one implementation, the service processing instruction includes a service type, and the processing unit is configured to, when triggering the card swiping device to execute the service, specifically perform the following operations:

Triggering card swiping equipment to execute the service corresponding to the service type;

the business comprises any one of payment business, entrance guard opening business and attendance business.

In one implementation, the processing unit is further configured to perform the steps of:

and executing the resource recharging operation on the card object.

In one implementation, the processing unit is configured to perform a resource recharging operation on the card object, and includes any one of the following:

Triggering a management client of the card swiping device to execute resource recharging operation on the card object in response to the card swiping operation executed on the card swiping device;

In response to a swipe operation performed on the card object at the swipe device, a resource recharge operation is triggered to be performed on the card object in a management client of the card object.

comparing the biological characteristics with the input characteristics;

and if the biological characteristics are matched with the input characteristics, determining that the service processing information meets the characteristic conditions in the service processing conditions.

In one implementation, the biometric feature comprises one or more biometric feature types, the input feature comprises an input value for each biometric feature type, and the processing unit is configured to perform the following steps when comparing the biometric feature with the input feature:

comparing the characteristic value of each biological characteristic type with the input value of the corresponding biological characteristic type;

If the characteristic value under each biological characteristic type is matched with the input value under the corresponding biological characteristic type, determining that the biological characteristic is matched with the input characteristic;

If the biological feature is a voiceprint feature, the type of biological feature included in the voiceprint feature includes any one or more of spectral features, formants, fundamental tones, volume, and accents.

Accordingly, an embodiment of the present application provides a card object, including:

The information acquisition module is used for receiving service processing information input to the card object, wherein the service processing information comprises a service processing instruction and biological characteristics, and the service processing instruction is used for indicating a service requiring execution;

An access control module for checking the service processing information based on the service processing condition in response to a card swiping operation performed on the card object on the card swiping device;

and the communication module is used for triggering the card swiping equipment to execute the service if the service processing information meets the service processing conditions.

Accordingly, an embodiment of the present application provides a computer-readable storage medium storing a computer program which, when read and executed by a processor of a computer device, causes the computer device to execute the service processing method described above.

Accordingly, embodiments of the present application provide a computer program product comprising a computer program stored in a computer readable storage medium. The processor of the computer device reads the computer program from the computer-readable storage medium, and the processor executes the computer program so that the computer device performs the service processing method described above.

In the embodiment of the application, the service processing information input to the card information can comprise a service processing instruction and a biological feature, the service processing instruction can be used for indicating the service requested to be executed, and the card swiping equipment can be triggered to execute the service if the service processing information meets the service processing condition in response to the card swiping operation executed on the card swiping equipment. It can be seen that in the embodiment of the application, the service processing information (including service processing execution and biological characteristics) is required to meet the service processing conditions, the service can be executed, the biological characteristics can be used for carrying out identity confirmation on the card swiping person, and the problem that the card object is illegally executed after the card object is lost is effectively avoided by collecting the biological characteristics, so that the security of service execution can be improved.

Drawings

In order to more clearly illustrate the embodiments of the application or the technical solutions in the prior art, the drawings that are required in the embodiments or the description of the prior art will be briefly described, it being obvious that the drawings in the following description are only some embodiments of the application, and that other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.

FIG. 1 is a schematic diagram of a card swiping operation according to an embodiment of the present application;

FIG. 2 is a schematic diagram of a card object usage architecture according to an embodiment of the present application;

Fig. 3 is a schematic architecture diagram of a service processing system according to an embodiment of the present application;

FIG. 4 is a schematic diagram of a preset key setting interface according to an embodiment of the present application;

FIG. 5 is a schematic diagram of a card swiping payment scenario provided by an embodiment of the application;

fig. 6 is a schematic flow chart of a service processing method according to an embodiment of the present application;

FIG. 7 is a schematic diagram of an input structure of a card object according to an embodiment of the present application;

FIG. 8 is a schematic diagram of an input structure of another card object according to an embodiment of the present application;

FIG. 9 is a schematic diagram of an input structure of a card object according to another embodiment of the present application;

FIG. 10 is a schematic diagram of an input structure of a card object according to another embodiment of the present application;

FIG. 11 is a schematic diagram of an input structure of a card object according to an embodiment of the present application;

FIG. 12 is a schematic diagram illustrating the input of a different type of business process instruction according to an embodiment of the present application;

FIG. 13 is a schematic diagram of a technical flow of card swipe recharging according to the embodiment of the application;

FIG. 14 is a schematic diagram of a technical flow of a card swiping execution service according to an embodiment of the application;

FIG. 15 is a schematic diagram illustrating transmission and verification of an operation key according to an embodiment of the present application;

FIG. 16 is a schematic diagram of a card object according to an embodiment of the present application;

fig. 17 is a schematic structural diagram of an information collecting module in a card object according to an embodiment of the present application;

FIG. 18 is a schematic diagram of an information collection module in another card object according to an embodiment of the present application;

FIG. 19 is a schematic diagram of a structure of an information collection module in a card object according to another embodiment of the present application;

FIG. 20 is a schematic diagram of a structure of an information collection module in a card object according to another embodiment of the present application;

FIG. 21 is a schematic structural diagram of an access control module in a card object according to an embodiment of the present application;

fig. 22 is a schematic structural diagram of a service processing device according to an embodiment of the present application.

Detailed Description

The following description of the embodiments of the present application will be made clearly and completely with reference to the accompanying drawings, in which it is apparent that the embodiments described are only some embodiments of the present application, but not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the application without making any inventive effort, are intended to be within the scope of the application.

The embodiment of the application relates to a card object, which refers to equipment for triggering execution service through card swiping operation. The device here refers in particular to a smart card (which card device may also be referred to as NFC hardware wallet) using NFC (NEAR FIELD Communication) technology or in particular to a mobile terminal using NFC technology. The card swiping operation is as shown in fig. 1, and the operation of contacting the card object with the card swiping device within a preset distance can comprise zero-distance contact or close-type contact, wherein the zero-distance contact refers to direct contact between the card object and the card swiping device, and the close-type contact refers to close-type contact between the card object and the card swiping device, but not contact between the card object and the card swiping device, and the distance between the card object and the card swiping device is not more than the preset distance when the close-type contact is performed. Triggering the execution of the service type by a swipe operation may include, but is not limited to, any of payment services (e.g., payment membership points, and swipe bus, etc.), opening access services, attendance services.

The overall architecture of the card object during use is shown in fig. 2, and may include a card object, a card swiping device, a management platform, and a management client. Wherein ① in the card object's security module, the card object may communicate with the card swiping device via a communication protocol, which may include 7816 protocol (a card object communication protocol), single-wire protocol, and man-machine interaction protocol, etc., and the card object may also control communication between the card object and the card swiping device via access control rules in the access control module. When the card object accesses multiple services, the card object may also include a multi-service operation management environment that manages the multiple services. ② The card swiping terminal may communicate with the card object through a CLF (Contactless Front-End, contactless front-End module). ③ The management platform may be used to access different services (e.g., buses, banks, electronic tickets, membership cards, etc.), provide management functions for the different services, and may also provide management functions for the security modules of the card objects. ④ The management client can provide management functions for different services and management functions for card objects.

Based on the introduction of the card object, in order to avoid the problem that the card object is illegally executed to cause the illegal execution of the service after the card object is lost, and influence the security of the service execution, the embodiment of the application creatively provides a card object and a service processing method based on the card object, which can improve the security of the service execution. Specifically:

For the card object, the original card object comprises a hardware chip, and the hardware chip contains a digital certificate. On the basis, the embodiment of the application adds an information acquisition module in the card object, and the information acquisition module can be used for receiving the business processing instruction and the biological characteristics. Correspondingly, a biological characteristic comparison sub-module and an instruction verification sub-module are newly added in the access control module of the card object, the biological characteristic comparison sub-module can be used for verifying biological characteristics, and the instruction verification sub-module can be used for verifying business processing instructions.

The original verification mode in the card object is to verify the digital certificate in the hardware information so as to verify the validity of the card swiping operation. Based on this, the embodiment of the application combines the verification of the digital certificate with the verification of the business processing instruction and the verification of the biological characteristics, and verifies the validity of the card swiping operation. The verification of the biological characteristics can comprise comparing the collected biological characteristics with the biological characteristics recorded when the card object is opened so as to verify whether the card swiping person is an owner of the card object, thereby effectively avoiding the problem that after the card object is lost, the card object has illegal execution of the card swiping operation, and the service is illegally executed. The verification of the business process instruction may include verifying information carried in the business process instruction, for example, comparing an operation key carried in the business process instruction with a preset key (the preset key is set by an owner of the card object) to verify whether the card reader is the owner of the card object, comparing business process time carried in the business process instruction with card reading time, comparing a business process location carried in the business process instruction with card reading location, the verification mode may be used as an anti-replay mechanism when the business process instruction is a sound instruction to prevent the business process instruction from being played after recording, and a payment verification mechanism verifying payment resource amount carried in the business process execution to verify validity of the payment resource amount, and the like.

It can be seen that by improving the card object and improving the verification mode in the card object, the embodiment of the application can effectively avoid the problem that the card object has illegal execution of the card swiping operation to cause illegal execution of the service after the card object is lost, and can improve the security of service execution. In addition, the embodiment of the application improves the card object, does not greatly adjust the overall architecture of the card object in the using process, and improves the compatibility of the card object.

It should be noted that, in the present disclosure, the relevant data collection (for example, collection of the business processing instruction and collection of the biological feature) and processing (for example, verification of the business processing instruction and verification of the biological feature, etc.) should strictly obtain the informed consent or independent consent (or have a legal basis) of the personal information body when the example is applied according to the requirements of the relevant laws and regulations, and develop the subsequent data use and processing behavior within the authorized range of the laws and regulations and the personal information body.

The following describes a business processing system to which the card object belongs.

As shown in fig. 3, the business processing system may include a card object 301, a card swiping device 302, a management client 303 for the card object, and a business background 304. Wherein:

Card object 301 the card object may include an information acquisition module and an access control module, which may include a biometric comparison sub-module and an instruction verification sub-module. The information acquisition module can be used for receiving the service processing instruction and the biological characteristics, the biological characteristics comparison sub-module can be used for verifying the biological characteristics, and the instruction verification sub-module can be used for verifying the service processing instruction.

Card swiping device 302 the card swiping device may comprise any of a POS (Point of Sales) machine, a mobile payment terminal, a cash register, etc.

Card object management client 303. Card object management clients may be used to manage card objects. The managing herein may include at least one of setting a preset key of the card object in a managing client of the card object, recharging resources of the card object in the managing client of the card object, managing services supported by the card object (e.g., adding, editing, or deleting services supported by the card object), and so forth. The management client of the card object may run in the terminal.

Business background 304-a business background server that can be used to provide technical service support for triggering the execution of a business by a swipe operation. The technical service support provided by the business background can comprise, for example, writing the recharged resource amount in an account corresponding to the card object after recharging the card object, performing auxiliary verification on the card object, for example, comparing an operation key carried in a business processing instruction with a preset key, deducting the paid resource amount in the account corresponding to the card object, and the like.

It should be noted that, the terminal mentioned in the embodiment of the present application may be a smart phone, a tablet computer, a notebook computer, a desktop computer, an intelligent voice interaction device, an intelligent watch, a vehicle-mounted terminal, an intelligent home appliance, an aircraft, etc., but is not limited thereto. The background server may be a single physical server, a server cluster or a distributed system formed by a plurality of physical servers, or a cloud server providing cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDNs (Content Delivery Network, content delivery networks), basic cloud computing services such as big data and artificial intelligence platforms, and the like. The client mentioned in the embodiments of the present application may include any of an application program, an applet, and a Web application, etc.

The following describes a business processing flow of a business processing system:

1. and (3) card swiping and recharging processes:

executing card swiping operation on the card swiping device, triggering the card swiping device to send a recharging request to the service background, and controlling the card swiping device to store recharging data into the card object through a recharging instruction by the service background in response to the recharging request.

The card swiping device may be a card swiping device of a merchant, that is, the card object may be resource recharged by the card swiping device of the merchant. In detail, the owner of the card object can execute card swiping operation on card swiping equipment of a merchant, the card swiping equipment and the merchant can communicate recharging amount and pay corresponding amount to the merchant, the card swiping equipment of the merchant can send recharging request to a service background, and the service background can respond to the recharging request and control the card swiping equipment to store recharging data into the card object through recharging instructions.

Or the card swiping device may be a terminal operated by the management client of the card object, that is, the card object may be resource-recharged by the management client of the card object. In detail, the owner of the card object can execute card swiping operation on the terminal operated by the management client of the card object, after paying the corresponding amount in the management client of the card object, the management client of the card object can send a recharging request to the service background, and the service background can respond to the recharging request and control the terminal operated by the management client of the card object through the recharging instruction to store recharging data into the card object.

It should be noted that, the card swiping and recharging process is consistent with the card swiping and recharging process of the traditional card object in the interactive mode, but the difference in the underlying technology is that the amount of resources which are not recharged and stored in the card object is a payment certificate, the payment certificate is associated with the account corresponding to the card object in the business background, and the amount of resources paid can be deducted from the corresponding account according to the payment certificate during the subsequent card swiping and recharging. Storing the payment voucher in the card object instead of the resource amount can improve the security of the resource amount.

2. The setting flow of the preset key:

The preset key may be set before the execution of the service is triggered by the card swiping operation, and as shown in fig. 4, the owner of the card object may set a preset key similar to a payment password in a management client (e.g., management application or card owner information and management background) of the card object. The preset secret key can be generally set after the resource is recharged, and the set preset secret key can be used for comparing with the operation secret key carried in the service processing instruction when the service is triggered to be executed through the card swiping operation in the follow-up process. The preset key is similar to a password, as shown in fig. 4, some personalized sentences which are easy to memorize (for example, the preset key is set as a sesame door in fig. 4) and have personal characteristics can be set as the preset key, so that the key is not easy to crack. The preset secret key is personalized content, can be changed at any time, and can ensure the safety of triggering execution service by card swiping operation.

3. The process of executing the business by swiping the card comprises the following steps:

Taking the example of triggering execution of the payment service through the card swiping operation, the flow of the card swiping execution service is as shown in fig. 5, and may include the following (1) - (4):

(1) The card reader (e.g., may be a consumer) may input business process instructions and biometric features to the information gathering device of the card object. For example, the service processing instruction may be a voice instruction, the information carried in the voice instruction may include an operation key (for example, sesame is opened) +service processing time (for example, time 1) +service type (for example, payment) +payment resource amount (for example, 50 yuan), that is, the voice instruction may be "sesame is opened 1 payment 50 yuan", and the biological feature may be a voiceprint feature obtained by extracting the feature of the voice instruction.

(2) The card object can compare whether the operation key carried in the sound instruction is matched with the preset key, check whether the service processing time carried in the sound instruction is correct (specifically, whether the service processing time is matched with the card swiping time), whether the sound instruction is an instruction issued by the owner of the card object (specifically, whether the voiceprint feature identified from the sound instruction is matched with the voiceprint feature recorded when the owner of the card object opens the card object), and control the subsequent card swiping payment resource amount by taking the payment resource amount as the payment amount.

(3) If the operation key in the voice command is matched with the preset key, the service processing time is correct (specifically, the service processing time is consistent with the card swiping time), and the voice command is a command issued by the owner of the card object (specifically, the voiceprint feature identified from the voice command is matched with the voiceprint feature recorded when the owner of the card object opens the card), if the card swiping person executes the card swiping operation on the card object within an interval threshold (for example, the interval threshold is 20 seconds) after inputting the voice command, and the amount of resources to be paid is within a payment amount, the card swiping operation is effective, and the payment flow can be entered. The payment flow refers to the fact that the card swiping device requests the business background to deduct the amount of resources paid from an account corresponding to the card object based on the payment certificate.

(4) If any one of the following conditions is present, the operation key in the voice command is not matched with the preset key, the service processing time is wrong (specifically, the service processing time is inconsistent with the card swiping time and may be replayed by sound recording), the voice command is not a command issued by the owner of the card object (specifically, the voice print characteristic identified from the voice command is not matched with the voice print characteristic recorded when the owner of the card object opens the card), the operation is overtime (specifically, the time interval between the time of inputting the voice command and the time of executing the card swiping operation exceeds the interval threshold), and the credit exceeds the limit (specifically, the amount of resources to be paid exceeds the payment credit), the card object is not communicated with the card swiping device, the card swiping operation is invalid, and the card swiping payment fails.

Based on the service processing system, whether the card swiping person is the owner of the card object can be determined through the comparison of the biological characteristics and the comparison of the operation keys in the service processing instructions, and the safety of service execution can be improved. Further, by checking whether the service processing time is correct, even after the card reader is determined to be the owner of the card object, whether the service processing instruction is the instruction record of the card reader in the process of replaying the instruction record of the card object owner can be determined, and the safety of service execution can be further improved. In addition, by carrying the payment amount in the business processing instruction, the problem that the large amount of payment resources are deducted by mistake due to the fact that the large amount of payment resources are input by mistake can be avoided, and the resource safety can be improved.

It may be understood that, the service processing system described in the embodiment of the present application is for more clearly describing the technical solution of the embodiment of the present application, and is not limited to the technical solution provided in the embodiment of the present application, and as a general technical object in the art can know, with evolution of a system architecture and occurrence of a new service scenario, the technical solution provided in the embodiment of the present application is applicable to similar technical problems.

Next, a service processing method provided by the embodiment of the present application will be described in detail.

The embodiment of the application provides a business processing method, which is executed by a card object, and the content introduced by the business processing method comprises different input modes of business processing instructions and biological characteristics, effective conditions of card swiping operation and a card swiping recharging scene. As shown in fig. 6, the service processing method may include, but is not limited to, the following steps S601 to S603:

S601, receiving service processing information input to the card object, wherein the service processing information comprises a service processing instruction and a biological feature, and the service processing instruction is used for indicating a service requested to be executed.

In step S601, the card object may include an information collecting module, and may receive service processing information input by the card swiping person to the information collecting module in the card object, where the service processing information may include a service processing instruction and a biometric feature, and the service processing instruction may be used to indicate a service requested to be executed.

In the following description, various input modes of service processing information (i.e., service processing execution and biological characteristics) are described, and the input modes of service processing information (i.e., service processing execution and biological characteristics) may include any of the following:

First, input voice command+extract voiceprint feature.

In the input mode of the service processing information, the service processing instruction is a voice instruction, and the information acquisition module can comprise a voice signal acquisition sub-module and a voiceprint recognition sub-module. The biological characteristics can be voiceprint characteristics obtained by voiceprint extraction of the voice instructions through the voiceprint recognition sub-module.

Further, the input manner of the voice command may include any one of the following ① and ②:

① The voice command input mode I comprises a voice signal acquisition sub-module, a voice signal receiving sub-module and a voice signal receiving sub-module, wherein the voice signal acquisition sub-module can comprise a voice signal acquisition switch and a voice signal receiver, can receive the starting operation of the voice signal acquisition switch and trigger the receiving of the voice command input to the voice signal receiver, and can receive the closing operation of the voice signal acquisition switch and trigger the stopping of the receiving of the voice command input to the voice signal receiver.

As shown in fig. 7, the card object in the input mode of the voice command may include a voice signal acquisition switch (e.g., a microphone switch in fig. 7), a voice signal receiver (e.g., a microphone in fig. 7), and a voice print recognition sub-module (e.g., a voice print recognition chip in fig. 7). After the microphone switch is pressed, the voice command in the microphone can be received, the voiceprint recognition chip is started to start extracting voiceprint features in the voice command, and the microphone switch can be loosened to stop receiving the voice command in the microphone.

② And a second voice command input mode is that the voice command input to the voice signal acquisition sub-module can be received in response to the start collection signal input to the voice signal acquisition sub-module, and the voice command input to the voice signal acquisition sub-module is stopped to be received in response to the stop collection signal input to the voice signal acquisition sub-module.

As shown in fig. 8, the card object in the input mode of the voice command may include a voice signal acquisition sub-module (for example, a microphone in fig. 8) and a voiceprint recognition sub-module (for example, a voiceprint recognition chip in fig. 8). The voice command in the microphone can be received after the collection starting signal in the microphone is detected, the voice print recognition chip is started to start extracting voice print characteristics in the voice command, and the voice command in the microphone can be stopped being received after the collection stopping signal in the microphone is detected.

Second, input voice command + input biometric.

In the input mode of the service processing information, the service processing instruction is a sound instruction, and the information acquisition module can comprise a sound signal acquisition sub-module and a biological characteristic acquisition sub-module. The voice command input to the voice signal acquisition submodule in the card object can be received, and the biological feature input to the biological feature acquisition submodule in the card object can be received.

In the input mode of the service processing information, the input mode of the voice command is the same as the input mode of the voice command in the input mode of the first service processing information, and will not be described herein. Taking the example that the sound signal acquisition sub-module includes a sound signal acquisition switch and a sound signal receiver, as shown in fig. 9, a card object in the input mode of the service processing information may include a sound signal acquisition switch (e.g., a microphone switch in fig. 9), a sound signal receiver (e.g., a microphone in fig. 9), and a biometric feature acquisition sub-module (e.g., a fingerprint collector in fig. 9) in the card object. The fingerprint sensor can receive the voice command in the microphone after the microphone switch is pressed, can release the microphone switch and stop receiving the voice command in the microphone, and can place a finger on the fingerprint collector to collect fingerprint characteristics.

Third, input voice command+extract voiceprint feature+input other biometric features.

In the input mode of the service processing information, the service processing instruction is a voice instruction, the biological characteristics can comprise a first biological characteristic and a second biological characteristic, and the information acquisition module can comprise a voice signal acquisition sub-module, a voiceprint recognition sub-module and a biological characteristic acquisition sub-module. The method comprises the steps of receiving a voice command input to a voice signal acquisition submodule in a card object, wherein the first biological feature can be a voiceprint feature obtained by voiceprint extraction of the voice command through a voiceprint recognition submodule, and receiving a second biological feature input to a biological feature acquisition submodule in the card object, and the second biological feature can be other biological features except the voiceprint feature.

In the input mode of the service processing information, the input mode of the voice command is the same as the input mode of the voice command in the input mode of the first service processing information, and will not be described herein. Taking the example that the sound signal collecting sub-module includes a sound signal collecting switch and a sound signal receiver, as shown in fig. 10, a card object in the input mode of the service processing information may include a sound signal collecting switch (for example, a microphone switch in fig. 10), a sound signal receiver (for example, a microphone in fig. 10), a voiceprint recognition sub-module (for example, a voiceprint recognition chip in fig. 10), and a biometric feature collecting sub-module (for example, a fingerprint collector in fig. 10). The voice command in the microphone can be received after the microphone switch is pressed, the voice print recognition chip is started to start extracting voice print characteristics in the voice command, the microphone switch can be loosened to stop receiving the voice command in the microphone, a finger can be placed on the fingerprint collector, and the fingerprint collector collects the fingerprint characteristics.

Fourth, other instructions are entered+biometric features are entered.

In this manner of inputting the service processing information, the information acquisition module may include an instruction input module and a biometric feature acquisition sub-module. The business processing instructions input to the instruction input module in the card object may be received, and the biometric features input to the biometric feature collection sub-module in the card object may be received. The business process instructions may include at least one of text instructions, graphic instructions, numerical instructions, symbolic instructions, and gesture instructions. The text instruction refers to a business processing instruction with a text instruction form, the graphic instruction refers to a business processing instruction with a graphic instruction form, different graphics represent different business processing instructions, the digital instruction refers to a business processing instruction with a digital instruction form, different numbers represent different business processing instructions, the symbol instruction refers to a business processing instruction with a symbol instruction form, different symbols represent different business processing instructions, the gesture instruction refers to a business processing instruction with a gesture instruction form, and different gestures represent different business processing instructions.

As shown in fig. 11, the card object in the input mode of the service processing information may include an instruction input module (for example, an input panel in fig. 11) and a biometric acquisition sub-module (for example, a fingerprint collector in fig. 11). In fig. 11, taking a text instruction input by the instruction input module as an example, the input text instruction is "sesame door opening time 1 pays 50 yuan", and a finger can be placed on the fingerprint collector, and the fingerprint collector collects fingerprint characteristics.

As shown in fig. 12, a graphic instruction (for example, the graphic instruction input in (a) in fig. 12 is "square" representing a payment service), a symbolic instruction (for example, the symbolic instruction input in (b) in fig. 12 is "P" representing a payment service), a digital instruction (for example, the digital instruction input in (c) in fig. 12 is "50" representing a payment 50-ary or a payment amount of 50-ary) or a gesture instruction (for example, the gesture instruction input in (d) in fig. 12 is "index finger long press input panel", representing a payment service) may also be input in the instruction input module (for example). In addition, a combination of different types of business process instructions may be performed, as shown in fig. 12, in which a "symbolic instruction+numeric instruction" is input as a business process instruction (for example, "P50" in (e) in fig. 12, representing payment 50 yuan).

It should be noted that, fig. 9, fig. 10, and fig. 11 illustrate an example in which the biometric acquisition module is a fingerprint acquisition device, and the embodiment of the application is not limited to the type of the biometric acquisition module, for example, the biometric acquisition module may also be a face acquisition device or an iris acquisition device, etc., where the biometric acquired by the face acquisition device is a face feature, and the biometric acquired by the iris acquisition device is an iris feature.

It can be seen that the step S601 provides a multiple service processing information input manner, in the first service processing information input manner, the biological feature can be directly extracted from the voice command, so that the cost of separately collecting the biological feature is reduced, in the second service processing information input manner, the problem that the voice command is a recording playback can be avoided, in the case that the voice command is a recording playback, the comparison result of the voice print feature is not credible, in the third service processing information input manner, multiple biological features are input, the credibility of the comparison result of the biological features can be improved, in the fourth service processing information input manner, the input form of the service processing command is not limited to the voice form, and the method is better suitable for different users (such as text commands, graphic commands, digital commands, symbol commands, gesture commands, and the like) of the card object.

S602, in response to a card swiping operation performed on the card object on the card swiping device.

In step S602, the card swiping operation refers to an operation of making contact with the card swiping device within a preset distance. In the embodiment of the application, the execution sequence between the card swiping operation and the receiving business processing information is not limited. In one implementation, the card object may first receive the service processing information input to the card object, and then respond to the card swiping operation performed on the card object on the card swiping device, that is, the card swiping person may first input the service processing information to the card object, and then perform the card swiping operation, where step S601 is performed before step S602. In another implementation, the service processing information input to the card object may be received in response to the card swiping operation performed on the card object on the card swiping device, that is, the card swiping person inputs the service execution information to the card object in the course of performing the card swiping operation, and step S601 is performed in the course of performing step S602.

S603, if the service processing information meets the service processing conditions, triggering the card swiping device to execute the service.

In step S603, the service processing information satisfies the service processing condition, and may include at least one of the following:

1. the biological characteristics meet the characteristic conditions.

The biometric feature meeting the feature condition means that the biometric feature is matched with the input feature, and the input feature means that the owner of the card object inputs the biometric feature when opening the card object. It can be seen that when the biological characteristics meet the characteristic conditions, the card swiping person and the owner of the card object can be ensured to be the same, and the safety of triggering the service execution through the card swiping operation can be improved.

2. The business processing instruction satisfies the instruction condition.

The service processing instruction satisfies an instruction condition including at least one of the following (1) - (4):

(1) The operation key in the service processing instruction satisfies the key condition.

The operation key satisfying the key condition means that the operation key is identical to the preset key. As shown in fig. 4, the preset key may be set in the management client of the card object. The operation keys may include any of a single valid key, a plurality of valid keys, a short-term valid key, and a permanent valid key. The single effective key is a disposable key, the single effective key is invalid after being used once, thus ensuring that if a malicious third party obtains an operation key in a sound instruction, the operation key is not reused, the multiple effective keys are keys with specified effective times, the multiple effective keys are invalid after being used for the specified effective times, the short-term effective key is a key with specified effective time, the short-term effective key is invalid after the specified effective time, and the permanent effective key is a key with permanent effectiveness.

(2) The service operation information in the service processing instruction satisfies the operation information condition.

The service operation information meeting the operation information condition means that the service operation information is matched with the operation information of the card swiping operation. In detail, the business operation information may include at least one of a business processing time and a business processing place, and correspondingly, the operation information of the card swiping operation includes at least one of a card swiping time and a card swiping place, and the matching of the business operation information and the operation information of the card swiping operation includes at least one of the same business processing time and card swiping time, and the same business processing place and card swiping place. For example, the service processing time carried in the service processing instruction is "time 1", the card swiping time is "time 1", the service processing time and the card swiping time can be determined to be the same, the service processing place carried in the service processing instruction is "place 1", the card swiping place is "place 1", the service processing time and the card swiping time can be determined to be the same, and therefore the service operation information can be determined to meet the operation information condition.

It can be seen that the card object is provided with the replay prevention mechanism by carrying the service processing time and/or the service processing location in the service processing instruction and verifying the service processing time and/or the service processing location. The anti-replay mechanism is to prevent the service processing instruction from being replayed after recording, and the service processing time and/or the service processing place in the service processing of replaying after recording is usually different from the card punching time and/or the card punching place.

(3) The operation time interval satisfies a time threshold condition.

The operation time interval meeting the time threshold condition means that the operation time interval is within the interval threshold, and the operation time interval means the time interval between the receiving time of the service processing instruction and the card swiping time corresponding to the card swiping operation. In particular, the judgment of the time threshold condition is applicable to the case where the card reader inputs the business process information to the card object, and the time interval may be a short time interval, for example, 20 seconds, before the card reader performs the card reading operation, so that it is possible to prevent a malicious third party from acquiring the card object to which the business process instruction has been input and from having no way to use it in a short time.

(4) The payment resource amount in the business processing instruction satisfies the payment condition.

The payment resource amount satisfying the payment condition may include any one of the following:

The first type of the method comprises the steps that the payment resource amount is rated payment resource amount, the service payment resource amount corresponding to the service is smaller than or equal to the rated payment resource amount, and the service payment resource amount refers to the resource amount required to be paid for executing the service. For example, in a business for paying the commodity purchase expense, the card reader sets the rated payment amount to be 50 yuan in the business processing instruction, if the commodity purchase expense input by the merchant is 40 yuan less than the rated payment amount, the payment condition is determined to be met, and if the commodity purchase expense input by the merchant is 60 yuan more than the rated payment amount, the payment condition is determined not to be met, and the card-reading payment is invalid. It can be seen that by setting the rated payment resource amount in the business processing instruction, the resource amount of the card swiping payment is ensured to be within the rated payment resource amount, the card swiping payment exceeding the rated payment resource amount is invalid, and the security of the card swiping payment can be improved.

And the second type of the payment resource amount is the business payment resource amount corresponding to the business operation, and the business payment resource amount is smaller than or equal to the residual payment resource amount of the owner of the card object. For example, the card reader sets the amount of the payment to be 50 yuan in the business processing instruction, if the balance in the account corresponding to the card object is greater than or equal to 50 yuan, the payment is valid, and if the balance in the account corresponding to the card object is less than 50 yuan, the payment is invalid. It can be seen that by setting the payment resource amount in the service processing instruction and checking whether the remaining payment resource amount in the account corresponding to the card object is enough for the card swiping payment, the accuracy of the card swiping payment can be ensured.

In step S603, if the service processing information meets the service processing condition, the card swiping device may be triggered to execute the service. In detail, the service processing instruction may include a service type, and the card swiping device may be triggered to execute a service corresponding to the service type. The service type can comprise any one of a payment type, an access control opening type and an attendance type, and correspondingly, the service can comprise any one of a payment service, an access control opening type and an attendance service. Wherein, the card swiping device executing the payment service may refer to the card swiping device (or the card swiping device requesting the service background) transferring the service payment resource amount from the account corresponding to the card object to the merchant account (for example, paying the merchant for the service payment resource amount), or the card swiping device (or the card swiping device requesting the service background) requesting the service background deducting the service payment resource amount from the account corresponding to the card object (for example, deducting the number of times of riding cars). The card swiping device performing the door lock opening service may refer to the card swiping device (or the card swiping device requesting a door lock control device (e.g., a door lock)) opening the door lock. The card swiping device performing the attendance service may refer to the card swiping device recording attendance.

Optionally, if the service processing information does not meet the service processing condition, the card swiping device may be triggered to prompt a card swiping failure. The service processing information failing to satisfy the service processing condition may include any of a case where the biometric feature does not match the input feature, the operation key is not identical to the preset key, the service operation information does not match the operation information of the card swiping operation, the operation time interval exceeds the interval threshold, and the payment resource amount fails to satisfy the payment condition (may include the service payment resource amount being greater than the rated payment resource amount, or the service payment resource amount being greater than the remaining payment resource amount of the owner of the card object).

The above steps S601-S603 describe the flow of the card swiping execution service, and the following describes the card swiping recharging flow. The resource recharging operation may be performed on the card object, and may include any of the following:

First, the management client corresponding to the card swiping device can be triggered to execute the resource recharging operation on the card object in response to the card swiping operation on the card swiping device. In this case, the card swiping device may be a card swiping device of a merchant, and the recharging resource amount may be input into a management client of the card swiping device, the management client of the card swiping device may send a recharging request to a service background, the service background may increase the payment resource amount in an account corresponding to the card object in response to the recharging request, and the card swiping device is controlled to store recharging data (recharging data is payment credentials) into the card object through a recharging instruction.

Second, a resource recharge operation for a card object may be triggered in a management client of the card object in response to a swipe operation performed on the card object on the swipe device. In this case, the card swiping device may be a terminal of an owner of the card object, in which a management client of the card object may be operated, the recharging resource amount may be input in the management client of the card object, the management client of the card object may send a recharging request to a service background, the service background may increase the payment resource amount in an account corresponding to the card object in response to the recharging request, and the card swiping device (i.e., the terminal of the owner of the card object) is controlled by the recharging instruction to store recharging data (the recharging data is payment credentials) into the card object.

Optionally, similar to the case of executing the service by swiping the card, in the case of recharging by swiping the card, the recharging information may be received and input to the card object, the recharging information may include a recharging instruction and a biological feature, the recharging instruction may be used to indicate the amount of recharging resources, if the recharging information meets the recharging condition, the recharging operation of the resources may be executed on the card object, and if the recharging information does not meet the recharging condition, the recharging failure may be triggered by the card swiping device.

Further, the input mode of the recharging information is the same as the input mode of the service processing information, and will not be described here again. The recharging information meets the recharging condition and can comprise at least one of the following steps that the biological characteristics are matched with the input characteristics, an operation key carried in the recharging instruction is identical to a preset key, business operation information (which can comprise recharging time and/or recharging place) carried in the recharging instruction is matched with operation information (which can comprise card swiping time and/or card swiping place) of the card swiping operation, and the operation time interval is within an interval threshold. The recharging information does not meet recharging conditions and can comprise any of the following steps that the biological characteristics are not matched with the input characteristics, the operation key is not identical with the preset key, the service operation information is not matched with the operation information of the card swiping operation, and the operation time interval exceeds the interval threshold. It can be seen that the security of card swiping recharging can be improved by verifying recharging information before recharging the resource.

In the embodiment of the application, whether the owner of the card object is the same person or not can be verified through verifying the biological characteristics, the security of the card executing service is improved, whether the owner of the card object and the card person are the same person or not can be verified through verifying the operation key in the service processing instruction, the security of the card executing service can be ensured even if the operation key is maliciously acquired by setting the operation key as a single effective key, the replay attack of the service processing instruction can be prevented through verifying the service processing time and/or the service processing place in the service processing instruction, the security of the card executing service can be improved, the time interval between the service processing instruction input by the card reader and the card executing operation is limited, the card object which has been maliciously acquired and has been input with the service processing instruction can not be used in a short time, the security of the card executing service can be improved, and the payment security and the correctness can be improved through payment resource limitation. In addition, the recharging information is verified before the resource recharging, so that the safety of card swiping recharging can be improved.

The above description is given to the scene of recharging by swiping a card and the scene of executing the business by swiping a card, and the following description is given to the technical flow of recharging by swiping a card and the technical flow of executing the business by swiping a card.

1. The technical flow of card swiping and recharging is as follows:

The technical flow of card swiping and recharging is as shown in fig. 13, and may include the following steps S1301-S1308:

s1301, the card object contacts the card swiping device to perform a card swiping operation.

S1302, the card swiping device inputs the recharging resource quantity.

S1303, the card swiping device sends a recharging request to the business background.

S1304, the business background responds to the recharging request, and adds the payment resource amount in the account corresponding to the card object to generate the payment certificate of the card object.

The business background may associate payment credentials of the card object with an account corresponding to the card object.

S1305, the business background issues payment credentials to the card swiping device.

S1306, the card swiping device performs first verification on the payment certificate.

The first check herein refers to checking whether the payment credential meets the credential specification.

S1307, the card swiping device writes the payment credential to the card object.

S1308, the card object performs a second check on the payment credential and stores the payment credential after the check passes.

The second check herein refers to checking whether the payment credential meets the credential specification.

In the technical flow of card swiping and recharging shown in fig. 13, after recharging, the specific recharging resource amount is stored in the card object, but the payment certificate is not needed, so that the resource security can be improved. The payment certificate is associated with an account corresponding to the card object, and resources can be deducted from the account corresponding to the card object according to the payment certificate during subsequent card swiping payment.

2. Technical flow of executing business by swiping card:

Fig. 14 is a flowchart describing a card swiping operation, taking as an example that the card swiping operation effectively includes all cases (the biometric feature is matched with the input feature, the operation key is the same as the preset key, the service operation information is matched with the operation information of the card swiping operation, the operation time interval is within the interval threshold, and the service payment resource amount is less than or equal to the rated payment resource amount). As shown in fig. 14, the card swiping execution service may include the following steps S1401 to S1412:

S1401, the card reader inputs service processing information to the card object.

The service processing information may include service processing instructions and biometric features, and the service processing instructions may be used to indicate a service requested to be executed.

S1402, the card object receives business process information input to the card object.

When the business processing instruction is a voice instruction, the card object can also comprise a voice recognition chip, the voice recognition chip can perform voice recognition on the voice instruction to obtain a text corresponding to the voice instruction, and information such as an operation key, business operation information, business type, payment resource amount and the like is extracted from the text.

S1403, the card object checks whether the biometric feature satisfies the feature condition.

The step of checking whether the biological characteristics meet the characteristic conditions by the card object is that the card object compares the biological characteristics with the input characteristics, if the biological characteristics are matched with the input characteristics, the biological characteristics can be determined to meet the characteristic conditions, and if the biological characteristics are not matched with the input characteristics, the biological characteristics can be determined to not meet the characteristic conditions.

The biometric feature may be aligned with the input feature according to a feature alignment rule. Upon opening the card object, the biometric characteristics (i.e., the entry features) of the owner of the card object may be recorded, and the entry features may be stored in the card object. The biometric feature may comprise a value of a feature under one or more biometric types, and the entered feature comprises an entered value under each biometric type.

The process of comparing the biological characteristics with the input characteristics according to the characteristic comparison rule can comprise the steps of comparing the characteristic value under each biological characteristic type with the input value under the corresponding biological characteristic type, determining that the biological characteristics are matched with the input characteristics if the characteristic value under each biological characteristic type is matched with the input value under the corresponding biological characteristic type, and determining that the biological characteristics are not matched with the input characteristics if the biological characteristic type with the characteristic value not matched with the input value exists. The feature value matching with the entry value may mean that the difference between the feature value and the entry value is less than a difference threshold, and the feature value not matching with the entry value may mean that the difference between the feature value and the entry value is greater than or equal to the difference threshold.

In particular, if the biometric characteristic is a voiceprint characteristic, the type of biometric characteristic included in the voiceprint characteristic may include any one or more of spectral characteristics, formants, pitch, volume, and accents. The spectral features may include, for example, a cepstrum, a spectral envelope, etc., which may be used to reflect the frequency distribution of the voice command, formants (Formants) which may be used to indicate the tone of the voice command, pitch (F0) which may be used to indicate the frequency of the vocal cord vibration, sound volume which may be used to indicate the tone of the voice command, loudness or intensity of the voice command, accent which may be used to indicate the voicing style of the voice command. An exemplary voiceprint feature (which includes voiceprint feature types that are spectral features, formants, and pitch) is shown in table 1 below:

TABLE 1

If the biometric feature satisfies the feature condition, the card object checks whether the service processing time in the service processing instruction is correct or not in S1404.

Checking whether the service processing time in the service processing instruction is correct refers to comparing the service processing time in the service processing execution with the card swiping time. If the service processing time is the same as the card swiping time, the service processing time can be determined to be correct, and if the service processing time is different from the card swiping time, the service processing time can be determined to be incorrect.

Optionally, after determining that the service processing time is correct, it may also be checked whether the service processing location in the service processing instruction is correct, and if so, execution may be triggered S1405. Checking whether the business processing location in the business processing instruction is correct refers to comparing the business processing location in the business processing execution with the card swiping location. If the business processing place is the same as the card swiping place, the business processing place can be determined to be correct, and if the business processing place is different from the card swiping place, the business processing place can be determined to be incorrect.

S1405, after the card swiping operation is performed on the card swiping device, the card swiping device inputs the business payment resource amount and initiates a card swiping instruction.

S1406, after receiving the card swiping instruction, the card object checks whether the operation time interval is overtime.

The operation time interval refers to a time interval between the receiving time of the service processing instruction and the card swiping time corresponding to the card swiping operation. Checking whether the operation time interval has timed out refers to comparing the operation time interval to an interval threshold. If the operation time interval is within the interval threshold, it may be determined that the operation time interval has not timed out, and if the operation time interval exceeds the interval threshold, it may be determined that the operation time interval has timed out.

S1407, if not, the card object checks whether the service payment resource amount exceeds the rated payment resource amount in the service processing instruction.

S1408, if not, the card object transmits the operation key in the service processing instruction to the card swiping device.

S1409, the card swiping device transparently transmits the operation key to the business background.

S1410, the service background verifies whether the operation key is legal.

Verifying whether the operation key is legal means that the operation key is compared with a preset key. If the operation key is not matched with the preset key, the operation key is determined to be illegal.

S1411, if the operation key is legal, the service background transmits legal results to the card swiping device.

S1412, the card swiping device executes the service requested by the service processing instruction.

For example, the service requested by the service processing instruction is a payment service, the card swiping device may submit the service payment resource amount and the payment credentials of the card object to the service background, and the service background may determine the account of the card object based on the payment credentials of the card object, and deduct the service payment resource amount from the account of the card object.

It should be noted that, the transmission process and the verification process of the operation key are shown in fig. 15, and the validity of the operation key in fig. 15 is verified by the service background, because after the preset key is set in the management client of the card object, the preset key is uploaded to the service background for storage. Optionally, if the preset key is set in the management client of the card object, the preset key is uploaded to the card object for storage, and the validity of the operation key can be verified by the card object.

In the technical flow of card swiping and recharging shown in fig. 14, by verifying the instruction content in the service processing instruction and verifying the biological characteristics, the card object cannot be illegally swiped to trigger the execution of the service under the condition that the card object is lost, so that the security of the card swiping and executing service can be improved.

The structure of the card object provided by the embodiment of the application is described below.

An embodiment of the present application provides a card object, as shown in fig. 16, where the card object may include:

1. Information acquisition module 1601:

The information acquisition module may be configured to receive service processing information input to the card object, where the service processing information may include a service processing instruction and a biometric feature, and the service processing instruction may be configured to indicate a service requested to be executed.

Further, the information acquisition module may include any of the following:

case one:

The business process instructions may be voice instructions. As shown in fig. 17, the information collection module 1601 may include a sound signal collection sub-module 1601a (e.g., a microphone in fig. 17, or the sound signal collection sub-module may be a microphone switch and a microphone) and a voiceprint recognition sub-module 1601b (e.g., a voiceprint recognition chip in fig. 17). The voice signal acquisition sub-module 1601a may be configured to receive a voice command, and the voiceprint recognition sub-module 1601b may be configured to voiceprint extract a voiceprint feature from the voice command, where the biometric feature may be a voiceprint feature.

And a second case:

The business process instructions may be voice instructions. As shown in fig. 18, the information acquisition module 1601 may include a sound signal acquisition sub-module 1601a (e.g., a microphone in fig. 18, or the sound signal acquisition sub-module may be a microphone switch and a microphone) and a biometric acquisition sub-module 1601c (e.g., a fingerprint collector in fig. 18). The sound signal acquisition sub-module 1601a may be configured to receive sound instructions and the biometric acquisition sub-module 1601c may be configured to receive biometric features (e.g., fingerprint features).

And a third case:

The business process instructions may be voice instructions and the biometric may include a first biometric and a second biometric. As shown in fig. 19, the information acquisition module 1601 may include a sound signal acquisition sub-module 1601a (e.g., a microphone in fig. 19, or the sound signal acquisition sub-module may be a microphone switch and a microphone), a voiceprint recognition sub-module 1601b (e.g., a voiceprint recognition chip in fig. 19), and a biometric feature acquisition sub-module 1601c (e.g., a fingerprint collector in fig. 18). The voice signal acquisition sub-module 1601a may be configured to receive a voice command, the voice print recognition sub-module 1601b may be configured to perform voice print extraction on the voice command to obtain a first biometric feature, where the first biometric feature is a voice print feature, and the biometric feature acquisition sub-module 1601c may be configured to receive a second biometric feature, where the second biometric feature is a biometric feature of another type than the voice print feature.

Case four:

As shown in fig. 20, the information acquisition module 1601 may include an instruction input sub-module 1601d (e.g., an input panel in fig. 20) and a biometric acquisition sub-module 1601c (e.g., a fingerprint acquisition unit in fig. 20). The instruction input sub-module 1601d may be configured to receive a business process instruction, which may include any of a text instruction, a graphic instruction, a digital instruction, a symbolic instruction, and a gesture instruction, and the biometric acquisition sub-module 1601c may be configured to receive a biometric feature.

It can be seen that the embodiments of the present application provide various structures of an information acquisition device, in a first structure of the information acquisition device (corresponding to the first case) the biological feature can be directly extracted from the voice command, so that the cost of separately acquiring the biological feature is reduced, in a second structure of the information acquisition device (corresponding to the second case), the problem that the voice command is a playback sound recording can be avoided, in the case that the voice command is a playback sound recording, the comparison result of the voice print feature is not reliable, in a third structure of the information acquisition device (corresponding to the third case), the reliability of the comparison result of the biological feature can be improved, and in a fourth structure of the information acquisition device (corresponding to the fourth case), the acquisition form of the service processing command is not limited to the voice form, and can be better adapted to different users of the card object (for example, text command, graphic command, digital command, symbol command, gesture command, etc. for deaf-mutes.

2. Access control module 1602:

The access control module may be configured to check the business process information based on the business process conditions in response to a swipe operation performed on the card object at the swipe device. The access control module may include at least one of a biometric comparison sub-module and an instruction verification sub-module. As shown in fig. 21, the access control module 1602 may include a biometric comparison sub-module 1602a and an instruction verification sub-module 1602b. As shown in fig. 21, the access control module may also include other control sub-modules 1602c.

The biological characteristic comparison sub-module can store input characteristics and can be used for comparing the biological characteristics with the input characteristics, and in more detail, the biological characteristic comparison sub-module can also store characteristic comparison rules, and the biological characteristics can be compared with the input characteristics according to the characteristic comparison rules. The command verification sub-module can be used for verifying the service processing command, and in more detail, when the service processing command is a voice command, the command verification sub-module can comprise a voice recognition chip, and the command verification sub-module can perform voice recognition processing on the voice command through the voice recognition chip to obtain a text corresponding to the voice command and verify the text corresponding to the voice command. The service processing information satisfies the service processing condition and may include at least one of a biometric feature consistent with the input feature and a service processing instruction satisfying the instruction condition.

Further, the instruction verification sub-module is configured to perform at least one of comparing an operation key in the service processing instruction with a preset key, comparing service operation information in the service processing instruction with operation information of a card swiping operation, comparing an operation time interval with an interval threshold, and verifying a payment resource amount in the service processing instruction when verifying the service processing instruction. The service processing instruction meeting the instruction condition may include at least one of an operation key being identical to a preset key, service operation information being matched with operation information of a card swiping operation, an operation time interval being within the interval threshold, and a payment resource amount meeting the payment condition.

3. Communication module 1603:

the communication module may be configured to trigger the card swiping device to execute the service if the service processing information meets the service processing condition. The communication module may specifically be a near field communication module, where the near field communication module may communicate with the card swiping device through a communication protocol. The communication protocol may include, but is not limited to, at least one of 7816 protocol (a card object communication protocol), single wire protocol, and man-machine interaction protocol.

4. Card data module 1604:

the card data module may be used to store payment credentials for the card object.

In the embodiment of the application, the information acquisition device in the card object can receive the service processing instruction and the biological characteristic, the biological characteristic is verified through the biological characteristic comparison submodule in the card object, whether the card swiping person is the same person as the owner of the card object or not can be verified, the safety of the card swiping execution service is improved, the operation secret key in the service processing instruction is verified through the instruction verification submodule in the card object, whether the card swiping person is the same person as the owner of the card object or not can be verified, the service operation information in the service processing instruction is verified through the instruction verification submodule in the card object, replay attack of the service processing instruction can be prevented, the safety of the card swiping execution service is improved, the time interval between the input of the service processing instruction by the card swiping person and the execution of the card swiping operation is limited through the instruction verification submodule in the card object, the fact that the card object with the service processing instruction input cannot be used in a short time can be ensured, and the safety of the card object of the service executing the service is improved.

In order to facilitate better implementation of the service processing method according to the embodiment of the present application, correspondingly, the following provides an apparatus according to the embodiment of the present application.

Referring to fig. 22, fig. 22 is a schematic structural diagram of a service processing device according to an embodiment of the present application, where the service processing device may be disposed in a card object according to an embodiment of the present application. The service processing means shown in fig. 22 may be a computer program running in a computer device, which service processing means may be used to perform some or all of the steps of the method embodiments shown in fig. 6, 13 or 14. Referring to fig. 22, the service processing apparatus may include the following units:

a receiving unit 2201, configured to receive service processing information input to a card object, where the service processing information includes a service processing instruction and a biological feature, and the service processing instruction is used to instruct a service that is requested to be executed;

And a processing unit 2202, configured to, in response to a card swiping operation performed on the card object on the card swiping device, trigger the card swiping device to execute the service if the service processing information satisfies the service processing condition.

In one implementation, the card object includes an information acquisition module, and a receiving unit 2201, configured to, when receiving service processing information input to the card object, specifically perform the following steps:

In one implementation, the information acquisition module includes a voice signal acquisition sub-module and a voice print recognition sub-module, and the service processing instruction is a voice instruction, and the receiving unit 2201 is configured to, when receiving the service processing information input to the information acquisition module in the card object, execute the following steps:

In one implementation, the information acquisition module includes a sound signal acquisition sub-module and a biological feature acquisition sub-module, and the service processing instruction is a sound instruction, and the receiving unit 2201 is configured to, when receiving the service processing information input to the information acquisition module in the card object, execute the following steps:

In one implementation, the information acquisition module includes a sound signal acquisition sub-module, a voiceprint recognition sub-module, and a biological feature acquisition sub-module, where the service processing instruction is a sound instruction, and the biological feature includes a first biological feature and a second biological feature, and the receiving unit 2201 is configured to, when receiving the service processing information input to the information acquisition module in the card object, execute the following steps:

In one implementation, the receiving unit 2201 is configured to, when receiving a sound instruction input to a sound signal acquisition sub-module in a card object, specifically perform the following steps:

In one implementation, the information acquisition module includes an instruction input module and a biometric feature acquisition sub-module, and the receiving unit 2201 is configured to, when receiving service processing information input to the information acquisition module in the card object, perform the following steps:

the business processing instruction satisfies the instruction condition.

In one implementation, the service processing instructions include a service type, and the processing unit 2202 is configured to, when triggering the card swiping device to execute the service, specifically perform the following operations:

In one implementation, the processing unit 2202 is further configured to perform the following steps:

and executing the resource recharging operation on the card object.

In one implementation, the processing unit 2202 is configured to perform a resource recharging operation on a card object, including any one of the following:

comparing the biological characteristics with the input characteristics;

In one implementation, the biometric feature comprises a value of a feature under one or more biometric types, the entered feature comprises an entered value under each biometric type, and the processing unit 2202 is configured to, when comparing the biometric feature with the entered feature, specifically perform the steps of:

According to an embodiment of the present application, each unit in the service processing apparatus shown in fig. 22 may be separately or completely combined into one or several other units, or some unit(s) thereof may be further split into a plurality of units with smaller functions, which may achieve the same operation without affecting the implementation of the technical effects of the embodiment of the present application. The above units are divided based on logic functions, and in practical applications, the functions of one unit may be implemented by a plurality of units, or the functions of a plurality of units may be implemented by one unit. In other embodiments of the present application, the service processing device may also include other units, and in practical applications, these functions may also be implemented with assistance from other units, and may be implemented by cooperation of multiple units.

According to another embodiment of the present application, a service processing apparatus as shown in fig. 22 may be constructed by running a computer program capable of executing the steps involved in some or all of the methods as shown in fig. 6, 13 or 14 on a general-purpose computing device such as a computer including a processing element such as a Central Processing Unit (CPU), a random access storage medium (RAM), a read only storage medium (ROM), and the like, and a storage element, and the service processing method of the embodiment of the present application is implemented. The computer program may be recorded on, for example, a computer-readable storage medium, and loaded into and executed by the computing device described above.

Embodiments of the present application also provide a computer program product comprising a computer program stored in a computer readable storage medium. The processor of the computer device reads the computer program from the computer-readable storage medium, and the processor executes the computer program so that the computer device performs the service processing method described above.

Those of ordinary skill in the art will appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware, or combinations of computer software and electronic hardware. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the solution. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present application.

In the present embodiment, the term "module" or "unit" refers to a computer program or a part of a computer program having a predetermined function and working together with other relevant parts to achieve a predetermined object, and may be implemented in whole or in part by using software, hardware (such as a processing circuit or a memory), or a combination thereof. Also, a processor (or multiple processors or memories) may be used to implement one or more modules or units. Furthermore, each module or unit may be part of an overall module or unit that incorporates the functionality of the module or unit.

In the above embodiments, it may be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented in software, may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the processes or functions in accordance with embodiments of the present application are produced in whole or in part. The computer may be a general purpose computer, a special purpose computer, a network of computers, or other programmable devices. The computer instructions may be stored in or transmitted across a computer-readable storage medium. The computer instructions may be transmitted from one website, computer, server, or data center to another website, computer, server, or data center by a wired (e.g., coaxial cable, fiber optic, digital Subscriber Line (DSL)), or wireless (e.g., infrared, wireless, microwave, etc.). Computer readable storage media can be any available media that can be accessed by a computer or data storage devices, such as servers, data centers, etc., that contain an integration of one or more available media. The usable medium may be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., solid state disk (Solid STATE DISK, SSD)), or the like.

The foregoing is merely illustrative of the present application, and the present application is not limited thereto, and any person skilled in the art will readily recognize that variations or substitutions are within the scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.

Claims

1. A method for processing a service, comprising:

Receiving service processing information input to a card object, wherein the service processing information comprises a service processing instruction and a biological feature, and the service processing instruction is used for indicating a service requested to be executed;

Responding to a card swiping operation performed on the card object on a card swiping device;

And if the service processing information meets the service processing condition, triggering the card swiping equipment to execute the service.

2. The method of claim 1, wherein the card object includes an information acquisition module, and wherein receiving business process information input to the card object includes:

3. The method of claim 2, wherein the information collection module includes a voice signal collection sub-module and a voice print recognition sub-module, the business process instructions are voice instructions, and the receiving business process information input to the information collection module in the card object includes:

Receiving a sound instruction input to a sound signal acquisition submodule in the card object;

The biological feature is a voiceprint feature obtained by voiceprint extraction of the voice command through the voiceprint recognition sub-module.

4. The method of claim 2, wherein the information collection module comprises a sound signal collection sub-module and a biometric collection sub-module, the business process instructions are sound instructions, and the receiving business process information input to the information collection module in the card object comprises:

5. The method of claim 2, wherein the information collection module comprises a voice signal collection sub-module, a voiceprint recognition sub-module, and a biometric collection sub-module, the business process instructions are voice instructions, the biometric comprises a first biometric and a second biometric, and the receiving business process information input to the information collection module in the card object comprises:

The first biological feature is a voiceprint feature obtained by voiceprint extraction of the voice command through the voiceprint recognition sub-module;

A second biometric input to a biometric acquisition sub-module in the card object is received, the second biometric being a type of biometric other than the voiceprint feature.

6. The method of any of claims 3-5, wherein the receiving the sound instructions input to the sound signal acquisition sub-module in the card object comprises:

The sound signal acquisition sub-module comprises a sound signal acquisition switch and a sound signal receiver, and is used for receiving the starting operation of the sound signal acquisition switch and triggering the receiving of the sound instruction input to the sound signal receiver, receiving the closing operation of the sound signal acquisition switch and triggering the stopping of the receiving of the sound instruction input to the sound signal receiver, or

And receiving a sound instruction input to the sound signal acquisition sub-module in response to a start collection signal input to the sound signal acquisition sub-module, and stopping receiving the sound instruction input to the sound signal acquisition sub-module in response to a stop collection signal input to the sound signal acquisition sub-module.

7. The method of claim 2, wherein the information acquisition module includes an instruction input module and a biometric acquisition sub-module, and wherein receiving business process information input to the information acquisition module in the card object includes:

Receiving a business processing instruction input to an instruction input module in the card object, wherein the business processing instruction comprises at least one of a text instruction, a graphic instruction, a symbol instruction, a digital instruction and a gesture instruction;

8. The method of claim 1 or 2, wherein the service processing information satisfies service processing conditions, comprising at least one of:

the business processing instruction meets the instruction condition.

9. The method of claim 8, wherein the business process instructions satisfy instruction conditions comprising at least one of:

the operation key in the service processing instruction meets a key condition, wherein the operation key meeting the key condition means that the operation key is the same as a preset key, the preset key is set in a management client of the card object, and the operation key comprises any one of a single effective key, a plurality of effective keys, a short-term effective key and a permanent effective key;

The service operation information in the service processing instruction meets an operation information condition, wherein the service operation information meets the operation information condition, namely, the service operation information is matched with the operation information of the card swiping operation;

the operation time interval meets a time threshold condition, wherein the operation time interval meets the time threshold condition, namely, the operation time interval is within an interval threshold, and the operation time interval is a time interval between the receiving time of the business processing instruction and the card swiping time corresponding to the card swiping operation;

and the payment resource amount in the service processing instruction meets the payment condition.

10. The method of claim 9, wherein the payment resource amount meeting a payment condition comprises any one of:

11. The method of claim 1 or 2, wherein the transaction instructions include a transaction type, and wherein the triggering the card swiping device to execute the transaction includes:

triggering the card swiping equipment to execute the service corresponding to the service type;

the business comprises any one of payment business, entrance guard opening business and attendance checking business.

12. The method of claim 1 or 2, wherein the method further comprises:

And executing the resource recharging operation on the card object.

13. The method of claim 12, wherein performing a resource recharge operation on the card object comprises any one of:

triggering a management client of the card swiping device to execute resource recharging operation on the card object in response to card swiping operation executed on the card swiping device;

And triggering the execution of resource recharging operation on the card object in the management client of the card object in response to the card swiping operation on the card object.

14. The method of claim 1 or 2, wherein the method further comprises:

comparing the biometric feature with an input feature;

15. The method of claim 14, wherein the biometric feature comprises a feature value for one or more biometric types, the entered feature comprises an entered value for each biometric type, and the comparing the biometric feature to the entered feature comprises:

wherein if the biometric characteristic is a voiceprint characteristic, the type of biometric characteristic included in the voiceprint characteristic includes any one or more of spectral characteristics, formants, pitch, volume, and accents.

16. A card object, comprising:

The information acquisition module is used for receiving service processing information input to the card object, the service processing information comprises a service processing instruction and biological characteristics, and the service processing instruction is used for indicating a service requested to be executed;

an access control module for checking the service processing information based on service processing conditions in response to a card swiping operation performed on the card object on a card swiping device;

And the communication module is used for triggering the card swiping equipment to execute the service if the service processing information meets the service processing condition.

17. The card object of claim 16, wherein the information acquisition module comprises a sound signal acquisition sub-module and a voiceprint recognition sub-module, the business process instructions being sound instructions;

the sound signal acquisition sub-module is used for receiving the sound instruction;

the voiceprint recognition submodule is used for carrying out voiceprint extraction on the voice command to obtain voiceprint characteristics, and the biological characteristics are the voiceprint characteristics.

18. The card object of claim 16, wherein the information acquisition module comprises a sound signal acquisition sub-module and a biometric acquisition sub-module, wherein the business process instructions are sound instructions;

The biological feature collection submodule is used for receiving the biological feature.

19. The card object of claim 16, wherein the information acquisition module comprises a sound signal acquisition sub-module, a voiceprint recognition sub-module, and a biometric acquisition sub-module, wherein the business process instructions are sound instructions, and wherein the biometric comprises a first biometric and a second biometric;

the voiceprint recognition submodule is used for carrying out voiceprint extraction on the voice command to obtain the first biological characteristic, wherein the first biological characteristic is a voiceprint characteristic;

The biometric acquisition submodule is used for receiving the second biometric, and the second biometric is other types of biometric except the voiceprint feature.

20. The card object of claim 16, wherein the information acquisition module comprises an instruction input sub-module and a biometric acquisition sub-module;

The instruction input submodule is used for receiving the business processing instruction, and the business processing instruction comprises any one of a text instruction, a graphic instruction, a digital instruction, a symbol instruction and a gesture instruction;

21. The card object of claim 16, wherein the access control module includes at least one of a biometric comparison sub-module and an instruction verification sub-module;

the biological characteristic comparison sub-module is used for comparing the biological characteristic with the input characteristic;

the instruction verification submodule is used for verifying the business processing instruction;

The service processing information meets service processing conditions and comprises at least one of the following steps that the biological characteristics are consistent with the input characteristics, and the service processing instruction meets instruction conditions.

22. The card object of claim 21, wherein the instruction verification submodule is configured to, when verifying the business processing instruction, perform at least one of:

comparing the operation key in the service processing instruction with a preset key;

Comparing the business operation information in the business processing instruction with the operation information of the card swiping operation;

Comparing the operation time interval with an interval threshold, wherein the operation time interval is the time interval between the receiving time of the service processing instruction and the operation time corresponding to the card swiping operation;

verifying the payment resource amount in the service processing instruction;

The service processing instruction meeting instruction conditions comprises at least one of the operation key being the same as the preset key, the service operation information being matched with the operation information of the card swiping operation, the operation time interval being within the interval threshold, and the payment resource quantity meeting payment resource conditions.

23. A service processing apparatus, comprising:

the card processing device comprises a receiving unit, a processing unit and a processing unit, wherein the receiving unit is used for receiving service processing information input to a card object, the service processing information comprises a service processing instruction and a biological feature, and the service processing instruction is used for indicating a service requested to be executed;

24. A computer readable storage medium, characterized in that the computer readable storage medium stores a computer program adapted to be loaded by a processor and to perform the service processing method according to any of claims 1-15.

25. A computer program product, characterized in that the computer program product comprises a computer program which, when executed by a processor, implements the service processing method according to any of claims 1-15.