TW202437168A - Payment system, payment method and computer-readable storage medium using mobiles devices as payment terminals - Google Patents

Abstract

The present invention uses mobile devices to replace payment terminals in traditional point-of-sale (POS) systems. The mobile device and the POS host register with the device management system, and provide a secure connection channel between the mobile device and the POS host through pairing. Next, the mobile device obtains the payment information of the customer to perform a payment transaction, and then sends the results of the transaction to the POS host to quickly and safely complete the checkout.

Description

Payment system, payment method and computer-readable storage medium using mobile device as payment terminal

The present invention relates to payment technology for point of sale (POS) systems, and in particular to a payment system, a payment method and a computer-readable storage medium using a mobile device as a payment terminal.

The known point-of-sale system includes a payment terminal and a point-of-sale host (abbreviated as a POS machine). When customers shop, they can complete the transaction checkout through the payment terminal, while the POS machine is used to assist the store to complete the inventory management. At present, the payment terminal and the POS machine are usually connected by wired methods such as RS232, Universal Serial Bus (USB), or wireless methods such as Bluetooth. Therefore, the transmission distance is limited, and the payment terminal must first pass the bank's hardware certification before it can be used. In addition, under the requirement of low cost, under the limitation of application scenarios such as multiple floors or outdoors, and when there is only one POS machine, the store cannot simply expand the number of payment terminals.

To solve the above problems, the present invention provides a payment method, which is executed by a mobile device, a device management system and a point-of-sale host. The payment method includes: registering the mobile device and the point-of-sale host with the device management system respectively to register the identification code and public key of the mobile device and the point-of-sale host in the device management system; pairing the mobile device and the point-of-sale host through the device management system; The mobile device obtains the other party's identification code and public key to establish a secure connection channel between the mobile device and the point-of-sale host; the mobile device captures the customer's payment information to transmit the payment information to the transaction system, so that the transaction system can perform a payment transaction based on the payment information and obtain the transaction result of the payment transaction; and the mobile device transmits the transaction result to the point-of-sale host through the secure connection channel.

The present invention also provides a computer-readable storage medium that stores instructions that are read by a mobile device, a device management system, and a point-of-sale host to execute the above-mentioned payment method.

The present invention also provides a payment system, including a device management system, a point-of-sale host, and a mobile device, wherein: the device management system is used to accept the registration of the mobile device and the point-of-sale host to store the identification code and public key of the mobile device and the point-of-sale host; the point-of-sale host is used to pair with the mobile device through the device management system to obtain the identification code and public key of the mobile device to establish a connection between the mobile device and the point-of-sale host. The mobile device is used to pair with the point-of-sale host through the device management system to obtain the identification code and public key of the point-of-sale host to establish the secure connection channel and capture the customer's payment information to transmit the payment information to the transaction system, conduct payment transactions and obtain the transaction results of the payment transactions, and then transmit the transaction results to the point-of-sale host through the secure connection channel.

The present invention provides a device management system to perform authentication and pairing between mobile devices and point-of-sale hosts, thereby providing a faster and more secure connection between mobile devices and point-of-sale hosts.

In addition, compared with the payment terminals of traditional point-of-sale systems, mobile devices are more convenient to use and expand, and can transmit data to the point-of-sale host at a longer distance. In addition, both cloud point-of-sale hosts and traditional point-of-sale hosts can apply the technical solution of the present invention.

10: Mobile devices

11: Register module

12: Data encryption and decryption module

13: Device pairing module

14: Data acquisition module

20: Device management system

21: Register verification module

22: Data encryption and decryption module

23: Pairing verification module

30: Point of sale host

31:Register module

32: Data encryption and decryption module

33: Device pairing module

34: Data processing module

40: Trading system

41: Electric support module

42: Credit card module

50: Customers

S11~S16,S21~S26,S31~S36: Steps

Figure 1 is a schematic diagram of the architecture of a payment system in an embodiment of the present invention.

Figures 2 to 4 are schematic diagrams of a payment method according to an embodiment of the present invention.

The following is a specific embodiment to illustrate the implementation of the present invention. Those with ordinary knowledge in this technical field can easily understand other advantages and effects of the present invention from the content disclosed in this specification.

FIG1 is a schematic diagram of the architecture of a payment system according to an embodiment of the present invention. As shown in FIG1 , the payment system includes a mobile device 10, a device management system 20, a point of sale host (POS for short) 30, and a transaction system 40.

In one embodiment, the mobile device 10 can be a mobile phone or a tablet computer. The mobile device 10 and the POS machine 30 are set up in the business premises of the store, while the device management system 20 and the transaction system 40 are set up outside the business premises of the store, and the mobile device 10 and the POS machine 30 are connected to each other through the Internet, cloud network or similar computer communication network.

In one embodiment, the mobile device 10 includes a registration module 11, a data encryption and decryption module 12, a device pairing module 13, and a data acquisition module 14; the device management system 20 includes a registration verification module 21, a data encryption and decryption module 22, and a pairing verification module 23; the POS machine 30 includes a registration module 31, a data encryption and decryption module 32, a device pairing module 33, and a data processing module 34; the transaction system 40 includes an electric payment module 41 and a credit card module 42.

The registration module 11 of the mobile device 10 is connected to the data encryption and decryption module 12 and the registration verification module 21. The data encryption and decryption module 12 is connected to the registration module 11, the device pairing module 13 and the data acquisition module 14. The device pairing module 13 is connected to the data encryption and decryption module 12 and the pairing verification module 23. The data acquisition module 14 is connected to the data encryption and decryption module 12, the data processing module 34 and the transaction system 40.

The registration verification module 21 of the device management system 20 is connected to the registration module 11, the data encryption and decryption module 22 and the registration module 31. The data encryption and decryption module 22 is connected to the registration verification module 21 and the pairing verification module 23. The pairing verification module 23 is connected to the device pairing module 13, the data encryption and decryption module 22 and the device pairing module 33.

The registration module 31 of the POS machine 30 is connected to the registration verification module 21 and the data encryption and decryption module 32. The data encryption and decryption module 32 is connected to the registration module 31, the device pairing module 33 and the data processing module 34. The device pairing module 33 is connected to the pairing verification module 23 and the data encryption and decryption module 32. The data processing module 34 is connected to the data acquisition module 14 and the data encryption and decryption module 32.

The electronic payment module 41 and the credit card module 42 of the transaction system 40 are both connected to the data acquisition module 14.

Each module in FIG. 1 may be software, hardware or firmware; if it is hardware, the module of the mobile device 10 may be a processing unit or processor with data processing and computing capabilities, and the remaining modules may be a processing unit, processor, computer or server with data processing and computing capabilities; if a module is software or firmware, it may include instructions that can be executed by the processing unit, processor, computer or server.

Figure 2 is a schematic diagram of a payment method according to an embodiment of the present invention. This payment method can be executed by the payment system shown in Figure 1. The process of Figure 2 is described below.

First, in step S11, the mobile device 10 and the POS machine 30 are registered with the device management system 20 respectively.

Then, in step S12, with the assistance of the device management system 20, the mobile device 10 is paired with the POS machine 30.

In step S13, when the store customer 50 needs to pay or check out, the mobile device 10 obtains the payment information of the customer 50, which can come from the customer 50's credit card or from the quick response code (QR code) displayed on the customer's mobile phone.

In step S14, the mobile device 10 transmits the payment data to the transaction system 40 to perform the payment transaction and obtains the transaction result returned by the transaction system 40.

Then, in step S15, the mobile device 10 transmits the transaction result to the POS machine 30.

Finally, in step S16, the POS machine 30 processes the transaction result.

FIG3 shows the registration process of step S11. For the mobile device 10, the registration process includes the following steps.

First, in step S21, the registration module 11 of the mobile device 10 sends a registration request to the device management system 20, and the registration request includes the identification code of the mobile device 10. After receiving the registration request, the device management system 20 sends the registration request to the registration verification module 21 for processing.

Next, in step S22, the registration verification module 21 generates a one-time password (OTP) using random numbers, and then uses the one-time password to verify the user identity of the mobile device 10.

Specifically, the registration verification module 21 of the device management system 20 sends the one-time password and the time limit specified by the device management system 20 to the mobile device 10 via SMS according to the communication number provided in advance by the user of the mobile device 10. The user can enter the one-time password through the user interface of the registration module 11 of the mobile device 10, and the registration module 11 will return the one-time password to the registration verification module 21 of the device management system 20 through the network.

If the registration verification module 21 receives the one-time password returned by the mobile device 10 within the time limit, the mobile device 10 is determined to have passed the identity verification. On the contrary, if the registration verification module 21 does not receive the one-time password returned by the mobile device 10 within the time limit, or the one-time password received from the mobile device 10 is inconsistent with the one previously sent by the registration verification module 21, the mobile device 10 is determined to have failed the identity verification.

During each identity verification, the registration verification module 21 of the device management system 20 generates a one-time password for this verification using random numbers, and then sends the one-time password to the mobile device 10 via a mobile communication network such as 4G or 5G in the form of a text message. The mobile device 10 then transmits the one-time password back to the device management system 20 via the Internet, cloud network or similar computer communication network. Each one-time password can only be used for one identity verification.

In addition, the sending and return of the one-time password are respectively transmitted through different paths of different networks, and the return of the one-time password is time-limited, thereby ensuring the rigor and security of identity verification.

After the mobile device 10 passes the identity verification, in step S23, the registration module 11 of the mobile device 10 generates a key pair of the mobile device 10 through the data encryption and decryption module 12, and the key pair includes the public key and the private key of the mobile device 10. On the contrary, if the mobile device 10 fails the identity verification, the registration process of Figure 3 is terminated.

Next, in step S24, the registration module 11 sends the public key and identification code of the mobile device 10 to the registration verification module 21 of the device management system 20.

In step S25, the registration verification module 21 stores the public key and identification code of the mobile device 10.

Finally, in step S26, the registration verification module 21 obtains the public key of the device management system 20 from the data encryption and decryption module 22, and sends the public key to the mobile device 10 to complete the registration.

On the other hand, the registration process of the POS machine 30 is similar to that of the mobile device 10, except that the mobile device 10, the registration module 11 and the data encryption and decryption module 12 are replaced by the POS machine 30, the registration module 31 and the data encryption and decryption module 32 respectively.

In addition, in the identity verification of step S22, the registration verification module 21 sends the one-time password and the specified time limit to the mobile phone bound to the POS machine 30, that is, the mobile phone of the user of the POS machine 30, by SMS, and the user of the POS machine 30 can input the one-time password through the user interface of the registration module 31 of the POS machine 30. The rest of the technical details of the registration process of the mobile device 10 and the POS machine 30 are the same.

Figure 4 shows the pairing process of step S12.

First, in step S31, the device pairing module 33 of the POS machine 30 generates a verification code using random numbers, obtains the signature of the POS machine 30 through the data encryption and decryption module 32, and then sends an initial pairing request to the device management system 20. The initial pairing request includes the identification code of the POS machine 30, the signature, and the verification code.

After receiving the initial pairing request, the device management system 20 sends the initial pairing request to the pairing verification module 23 for processing. The pairing verification module 23 verifies the signature through the data encryption and decryption module 22, and stores the identification code of the POS machine 30 and the verification code after confirming that the signature is correct.

In step S32, the data acquisition module 14 of the mobile device 10 obtains the authentication code and the identification code of the POS machine 30. For example, the user can make the POS machine 30 display a quick response code, and the authentication code and the identification code of the POS machine 30 are encoded in the quick response code. The data acquisition module 14 can scan the quick response code through the camera attached to the mobile device 10, and then extract the authentication code and the identification code of the POS machine 30. Alternatively, the data acquisition module 14 can provide a user interface for its user to manually input the authentication code and the identification code of the POS machine 30.

Next, in step S33, the device pairing module 13 of the mobile device 10 obtains the signature of the mobile device 10 through the data encryption and decryption module 12, and then sends a pairing request to the device management system 20. The pairing request includes the identification code of the mobile device 10, the signature, the authentication code and the identification code of the POS machine 30.

After receiving the pairing request, the device management system 20 sends the pairing request to the pairing verification module 23 for processing. The pairing verification module 23 verifies the signature through the data encryption and decryption module 22. After confirming that the signature is correct, it uses the authentication code and the identification code of the POS machine 30 to check whether the initial pairing request from the POS machine 30 has been received before (that is, to check whether the authentication code and the identification code of the POS machine 30 have been stored before).

If the initial pairing request has not been received before, the pairing verification module 23 rejects the pairing request of the mobile device 10 to interrupt the pairing process of Figure 4. If the initial pairing request from the POS machine 30 has been received before, the pairing verification module 23 stores the identification code of the mobile device 10.

Then, in step S34, the pairing verification module 23 uses the identification code of the POS machine 30 to query the public key of the POS machine 30, and obtains the signature of the device management system 20 through the data encryption and decryption module 22, and then returns the pairing result to the mobile device 10. This pairing result includes the signature and the identification code and public key of the POS machine 30.

After receiving the matching result, the mobile device 10 sends the matching result to the device matching module 13 for processing. The device matching module 13 verifies the signature through the data encryption and decryption module 12, and stores the identification code and public key of the POS machine 30 after confirming that the signature is correct.

Next, in step S35, the device matching module 33 of the POS machine 30 obtains the signature of the POS machine 30 through the data encryption and decryption module 32, and then sends a matching result request to the device management system 20 to obtain the matching result corresponding to the initial matching request in step S31.

The matching result request includes the identification code of the POS machine 30, the signature and the verification code. After receiving the matching result request, the device management system 20 sends the matching result request to the matching verification module 23 for processing.

Finally, in step S36, the pairing verification module 23 verifies the signature through the data encryption and decryption module 22, and after confirming that the signature is correct, obtains the signature of the device management system 20 through the data encryption and decryption module 22, and then sends the pairing result to the POS machine 30. The pairing result includes the signature and the identification code and public key of the mobile device 10.

After receiving the matching result, the POS machine 30 sends the matching result to the device matching module 33 for processing. The device matching module 33 verifies the signature through the data encryption and decryption module 32, and stores the identification code and public key of the mobile device 10 after confirming that the signature is correct.

After the pairing process in FIG. 4 , the mobile device 10 and the POS machine 30 have stored each other's identification code and public key, which can be used to verify each other's signature and confirm each other's identity, and can use each other's public key to decrypt the data encrypted by each other's private key to establish a secure connection channel for exchanging data. In addition, the secure connection channel can be used to transmit the transaction result of the payment transaction in step S15.

Continuing with the process of Figure 4, the following describes steps S13 to S16 in the process of Figure 2.

In step S13, the customer 50 checks out on the mobile device 10, and the mobile device 10 activates the payment application, which instructs the data capture module 14 to obtain the payment information of the customer 50. For example, the data capture module 14 can capture the payment information in the credit card chip of the customer 50 through the Near Field Communication (NFC) sensing function of the mobile device 10. Alternatively, the data capture module 14 can scan the electronic payment quick response code displayed on the mobile phone of the customer 50 through the camera of the mobile device 10 to obtain the payment information encoded in the electronic payment quick response code.

In step S14, the payment application of the mobile device 10 transmits the payment data to the transaction system 40. The transaction system 40 uses the payment module 41 or the credit card module 42 to perform the payment transaction according to the type of the payment data, and then transmits the transaction result back to the mobile device 10.

In step S15, the payment application of the mobile device 10 obtains the signature of the mobile device 10 through the data encryption and decryption module 12, and encrypts the transaction result with the private key of the mobile device 10 through the data encryption and decryption module 12, and then transmits the identification code of the mobile device 10, the signature and the encrypted transaction result to the POS machine 30.

Finally, in step S16, the data encryption and decryption module 32 of the POS machine 30 uses the identification code of the mobile device 10 to query and obtain the public key of the mobile device 10, and uses the public key to verify the signature of the mobile device 10 to confirm that the data transmitted by the mobile device 10 has not been tampered with. After confirming that the signature is correct, the public key of the mobile device 10 is used to decrypt and obtain the transaction result. Then, the data processing module 34 stores and processes the decrypted transaction result.

In each step of the aforementioned processes, the signing objects of the signatures of the mobile device 10, the device management system 20 and the POS machine 30 are the identification codes of the mobile device 10, the device management system 20 and the POS machine 30 respectively. When transmitting the signature, the transmitting end of the signature is one of the mobile device 10, the device management system 20 and the POS machine 30, and the receiving end of the signature is the other of the mobile device 10, the device management system 20 and the POS machine 30. The receiving end of the signature can verify the signature with the public key of the transmitting end. If the verification is correct, it means that the identity of the transmitting end is correct and the process can continue. If the verification is incorrect, the receiving end can terminate the process.

The mobile device of the present invention is installed with a bank-certified payment application to replace the payment terminal of the traditional POS system. When the store needs to expand the payment terminal, adding a mobile device to expand the payment terminal is more convenient and faster than purchasing a traditional payment terminal that has been certified by the bank's hardware, and it can also reduce equipment costs.

In addition, mobile devices can be connected to POS machines through wireless networks or near-field wireless communications, thereby extending the connection distance between POS system devices. Wireless mobile devices can be moved flexibly to improve the convenience of use for stores and customers.

In addition, the mobile device and POS machine of the present invention will register with the device management system to verify the user's identity, and establish a secure connection channel for exchanging data through pairing, which can ensure the security of the connection between devices and enable the POS system to operate more securely.

In one embodiment, the present invention further provides a computer-readable storage medium. The computer-readable storage medium includes at least one memory, floppy disk, hard disk and/or optical disk storing instructions. The instructions can be read by the aforementioned mobile device, device management system and POS machine to execute the above-mentioned payment method.

The above implementation forms are only illustrative of the principles and effects of the present invention, and are not intended to limit the present invention. Anyone with common knowledge in this technical field may modify and change the above implementation forms without violating the spirit and scope of the present invention. Therefore, the scope of protection of the present invention should be as listed in the scope of the patent application described below.

10: Mobile devices

20: Device management system

30: Point of sale host

40: Trading system

50: Customers

S11~S16: Steps

Claims (10)

A payment method is performed by a mobile device, a device management system, and a point-of-sale host, the payment method comprising: Request the mobile device and the point-of-sale host to register with the device management system respectively, so as to register the identification code and public key of the mobile device and the point-of-sale host in the device management system; Allow the mobile device to pair with the point-of-sale host through the device management system to obtain the other party's identification code and public key, so as to establish a secure connection channel between the mobile device and the point-of-sale host; The mobile device captures the customer's payment information and transmits the payment information to the transaction system so that the transaction system can perform a payment transaction based on the payment information and obtain the transaction result of the payment transaction; and The mobile device transmits the transaction result to the point-of-sale host through the secure connection channel. The payment method as described in claim 1, wherein the registration of the mobile device and the point-of-sale host comprises: The device management system sends a one-time password to the registered device, wherein the registered device is the mobile device or the point-of-sale host; If the device management system receives the one-time password sent back by the registered device within the specified time limit, it is determined that the registered device has passed the verification; if not, it is determined that the registered device has not passed the verification; and Only after the registered device passes the verification, the identification code and public key of the registered device will be sent to the device management system. The payment method as described in claim 2, wherein the device management system sends the one-time password to the registered device via a mobile communication network, so that the registered device returns the one-time password to the device management system via a computer communication network. The payment method as described in claim 2, wherein the registration of the mobile device and the point-of-sale host includes: After the device management system receives the identification code and public key sent by the registered device, it sends the public key of the device management system to the registered device so that the registered device can verify the signature of the device management system in the subsequent process. The payment method as described in claim 1, wherein the pairing of the mobile device and the point-of-sale host comprises: The point-of-sale host generates an authentication code, and then sends the authentication code and the identification code of the point-of-sale host to the device management system; Allow the mobile device to obtain the authentication code and the identification code of the point-of-sale host from the point-of-sale host or the user interface of the mobile device, and then obtain the public key of the point-of-sale host from the device management system based on the authentication code and the identification code of the point-of-sale host; and The point-of-sale host obtains the identification code and public key of the mobile device from the device management system. The payment method as described in claim 5, wherein the pairing of the mobile device and the point-of-sale host further comprises: causing the point-of-sale host to encode the authentication code and the identification code of the point-of-sale host in a quick response code to display the quick response code; and The mobile device is instructed to scan the quick response code to obtain the authentication code and the identification code of the point-of-sale host from the quick response code. The payment method as described in claim 1 further includes: Allow the mobile device to capture the payment information from the chip of the customer’s credit card through near field communication sensing; or The mobile device is used to scan the electronic payment quick response code displayed on the customer's mobile phone through a camera to capture the payment information encoded in the electronic payment quick response code. The payment method as described in claim 1 further includes: The mobile device and the point-of-sale host use each other's identification code and public key to verify each other's signature and confirm each other's identity, and use each other's public key to decrypt data encrypted by each other's private key to establish the secure connection channel. A computer-readable storage medium stores instructions that are read by a mobile device, a device management system, and a point-of-sale host to execute a payment method as described in any one of claims 1 to 8. A payment system includes a device management system, a point-of-sale host and a mobile device, wherein: The device management system is used to accept the registration of the mobile device and the point-of-sale host to store the identification code and public key of the mobile device and the point-of-sale host; The point-of-sale host is used to pair with the mobile device through the device management system to obtain the identification code and public key of the mobile device so as to establish a secure connection channel between the mobile device and the point-of-sale host; and The mobile device is used to pair with the point-of-sale host through the device management system to obtain the identification code and public key of the point-of-sale host, so as to establish the secure connection channel and capture the customer's payment information to transmit the payment information to the transaction system, conduct the payment transaction and obtain the transaction result of the payment transaction, and then transmit the transaction result to the point-of-sale host through the secure connection channel.

Images