TWI684945B - Point-to-point transfer system and method - Google Patents

Abstract

The invention discloses a peer-to-peer transfer system. The system is applied in an application environment including a first terminal, a second terminal, and a background system provided on the server side. The peer-to-peer transfer system includes: a background application unit provided in the background system; settings The first application unit at the first terminal; the second application unit provided at the second terminal; wherein, when performing a transfer transaction, the first terminal and the terminal are configured to pass through the first application and the second application to the background system The background application obtains the first token and the second token. The first token includes the first account information associated with the first terminal and the second token includes the second account information associated with the second terminal. The distance wireless communication technology forwards the first token to the second terminal; and after receiving the forwarded first token, the second terminal sends both the first token and the second token to the background system.

Description

Point-to-point transfer system and method

The invention relates to a point-to-point transfer system and method, and in particular to a transfer system and method based on short-range wireless communication technology and scepter technology.

Under the existing methods, WeChat, Alipay, and banks all provide their own transfer products, but these transfer products are not convenient and safe. For example, under the existing transfer method, the transfer-out party needs to provide the card number, and the transfer-out party initiates the transaction, and needs to enter the password and other elements. These methods are not convenient enough to meet the needs of users.

In order to solve the above problems, this application proposes a peer-to-peer (ie P2P) transfer system based on short-range wireless communication technology (ie NFC) and token (ie Token) technology. The system is suitable for the convenient transfer of funds between individuals in the offline scenario of mobile internet payment.

According to an aspect of the present application, there is provided a point-to-point transfer system, the system is applied to include a first terminal, a second terminal and In the application environment of the background system provided on the server side, the peer-to-peer transfer system includes: a background application unit provided in the background system; a first application unit provided in the first terminal; a second application unit provided in the second terminal; wherein , When performing a transfer transaction, the first terminal and the second terminal are configured to obtain the first token and the second token from the background application of the background system through the first application and the second application, respectively. The first token includes first account information associated with the first terminal and the second token includes second account information associated with the second terminal; the first terminal uses the short-range wireless communication technology to A token is forwarded to the second terminal; and after receiving the forwarded first token, the second terminal sends both the first token and the second token to the background System for identification and matching of tokens.

In the above point-to-point transfer system, the second terminal is configured to send the first right through the second application unit before sending both the first token and the second token to the background system The rod and the second token are reorganized to form a first alternate token and a second alternate token. As an example, the second terminal is configured to reorganize the first token and the second token to form the first substitute token information and the second substitute token by dividing the data of the first token into at least Two data segments, the data of the second token is divided into at least two data segments; and the data segment divided by the first token and the data segment divided by the second token are combined to form the first substitution right Rod and second alternative token, where the first alternative token includes the data segment from the first token and the second token, and the second alternative token includes the remaining data segment and the first token in the first token The remaining data segment in the second scepter.

In the above point-to-point transfer system, the background system performs the first token and the second token after receiving the first token and the second token sent from the second terminal Authentication and matching to obtain transaction elements for account matching and transaction authorization.

In the above point-to-point transfer system, wherein the first terminal is configured as an analog payment account carrier, and the second terminal is configured as an analog payment acceptance terminal.

In the above point-to-point transfer system, the background system is configured to use the transaction time and random number before sending the first token and the second token to the first terminal and the second terminal, respectively. Or one or more of the transaction amount to perform logical processing on the first token and/or the second token to ensure transmission security.

According to another aspect of the present application, there is provided a peer-to-peer transfer method executed in a background system, the method comprising: generating a first token, and sending the first token to a first terminal simulating a payment account carrier , Wherein the first token includes account information associated with the first terminal; generate a second token and send the second token to the second terminal of the analog payment acceptance terminal, wherein, the The second token includes account information associated with the second terminal; receiving the first token and the second token from the second terminal, wherein the first token is defined by the first token The terminal forwards it to the second terminal through short-range wireless communication technology; and authenticates and matches the first token and the second token.

In the above point-to-point transfer method, receiving the first token and the second token sent by the second terminal includes: the first The token and the second token are reorganized to form a first substitute token and a second substitute token, and the transmitted first substitute token and second substitute token are received. As an example, wherein the first token and the second token are reorganized according to the following steps to form a first substitute token and a second substitute token: the data of the first token is divided into at least two data segments , The data of the second token is divided into at least two data segments; and the data segment divided by the first token and the data segment divided by the second token are combined to form data including the first token respectively The first alternative token and the second alternative token of the data segment of the segment and the second token.

In the above point-to-point transfer method, authenticating and matching the first token and the second token includes: extracting transaction elements from the first token and the second token.

In the above point-to-point transfer method, the method further includes: sending the transaction element to the card issuing system for transaction authorization.

In the above point-to-point transfer method, before sending the generated first token to the first terminal of the simulated payment account carrier, one or more of the transaction time, random number, and transaction amount are used to perform the first token Logic processing, and/or before sending the generated second token to the second terminal of the simulated payment account carrier, use one or more of transaction time, random number, transaction amount to perform logic on the second token deal with.

10‧‧‧First terminal

100‧‧‧First application unit

20‧‧‧Second terminal

200‧‧‧Second application unit

30‧‧‧Backstage system

31‧‧‧ First Scepter

32‧‧‧Second Scepter

40‧‧‧Card issuer

After reading the specific embodiments of the present invention with reference to the accompanying drawings, those skilled in the art will understand more clearly the various aspects of the present invention surface. Those skilled in the art should understand that these drawings are only used to describe the technical solutions of the present invention in conjunction with specific embodiments, and are not intended to limit the protection scope of the present invention.

FIG. 1 is a schematic structural diagram of a peer-to-peer transfer system and its application environment according to an example of the present invention.

The following describes some of the many possible embodiments of the present invention, intended to provide a basic understanding of the present invention, and is not intended to confirm the key or decisive elements of the present invention or limit the scope of protection. It is easy to understand that, according to the technical solution of the present invention, without changing the essential spirit of the present invention, those of ordinary skill in the art may propose other implementations that can be replaced with each other. Therefore, the following specific embodiments and the accompanying drawings are only exemplary illustrations of the technical solutions of the present invention, and should not be regarded as the entirety of the present invention or as limitations or limitations to the technical solutions of the present invention.

, That is, short-range wireless communication technology, which can carry out short-range (usually within a few centimeters) wireless communication between mobile devices, supporting active mode, passive mode and bidirectional mode. In an embodiment of the present application, using NFC technology, the personal mobile terminal implanted with the NFC chip is compared to a payment account carrier and a payment acceptance terminal, respectively, and the account information is transmitted by reading a token (ie, Token) by The personal mobile terminal of the analog payment acceptance terminal initiates the transaction and sends it to the back-end system for token verification and account matching, and sends it to the card issuer for transaction authorization.

In the following examples, the first terminal and the second terminal are The mobile phone is used as an example to illustrate, but not limited to this. All electronic terminals that have the NFC function, can be bound to the user's bank card account, and can access the network can be used as the first terminal or the second terminal, such as an ipad or other tablet.

FIG. 1 is a schematic structural diagram of a peer-to-peer transfer system and its application environment according to an example of the present invention. The point-to-point transfer system according to an example of the present invention is explained below with reference to FIG. As shown in FIG. 1, the terminal of the analog payment account carrier, that is, the first terminal 10 includes the first application unit 100, and the analog payment acceptance terminal, that is, the second terminal 20 includes the second application unit 200. In this example, the first application unit 100 is called the transfer-out application unit and the second application unit 200 is called the transfer-in application unit according to the transfer roles of the first terminal 10 and the second terminal 20. However, in actual application, The transfer-in application unit and the transfer-out application unit can be implemented as applications that include both the transfer-in function and the transfer-out function, which also enables the terminal loaded with the application to function as both a payment account carrier and a payment acceptance terminal. The background system 30 includes a background application unit (not labeled).

The first terminal 10 of the analog payment account carrier and the second terminal 20 of the analog payment acceptance terminal are respectively connected to the background system 30. The first terminal 10 obtains the first token 31 (hereinafter also referred to as Token 1) from the background application of the background system 30 through its first application unit 100, and the second terminal 20 sends the first token 31 to the background system 30 through its second application unit 200. The background application acquires the second token 32 (hereinafter also referred to as Token 2).

According to this example of the present invention, the first token 31 is generated by the background application unit of the background system 30, and the second token 32 is also generated by the background system 30 background application generation. In the operation related to transfer, when the background system 30 receives the operation request transmitted by the first terminal 10, the background application unit of the background system 30 will pass any one of the current transaction time, transaction amount, and random number or The combination of them performs XOR and other logical operations on the generated first token 31, so that the token is more secure. Similarly, in the operation related to transfer, when the background system 30 receives the operation request transmitted by the second terminal 20, the background application unit of the background system 30 will pass any of the current transaction time, transaction amount, and random number One or a combination of them performs logical operations such as XOR on the generated second token 20 to make the token more secure. It should be noted that either the current transaction time, transaction amount, random number, or a combination thereof can be used to perform logical operations such as XOR on both the first token 31 and the second token 32, or only An exclusive OR logical operation is performed on one of the first token 31 and the second token 32.

Furthermore, in order to prevent the information leakage even if Token 1 and Token 2 are intercepted illegally, according to the example of the present invention, the first token 31 and the second token 32 are reorganized to form the first substitute token and the second token Two alternative scepter. Exemplarily, the first token 31 may be divided into two data segments, and the second token 32 may be divided into two data segments, thereby one data segment of the first token 31 and one data segment of the second token 32 The combination constitutes the first alternative token and combines the remaining data segment of the first token 31 and the remaining data segment of the second token 32 to constitute the second alternative token. Similarly, the first token 31 may be divided into two data segments and the second token 32 may be divided into three data segments, thereby one data segment of the first token 31 and two of the second token 32 The data segments are combined to form a substitute token, and the remaining data segments of the first token 31 and the remaining data segments of the second token 32 are combined to constitute another substitute token. For example, you can use the first 1/2 and last 1/2 methods to disassemble and reorganize, such as: the first 1/2 of Token1 and the last 1/2 of Token2, and the first 1/2 of Token2 and the last 1/2 of Token2 (Several types can be set, and the back-end and front-end can be randomly selected for each transaction.) The reorganization process of the first token 31 and the second token 32 as discussed above may be performed by the second application unit 200 of the second terminal 20.

In the process of on-site transactions, the mobile phone terminal 10 of the analog payment account carrier and the mobile phone terminal 20 of the analog payment acceptance terminal interact through NFC technology. Through this process, the mobile phone of the analog payment acceptance terminal obtains the transfer account Token 1 and transfers the Token 1 And the token 2 obtained by itself is sent to the background system, or the reorganized first replacement token and second replacement token are sent to the background system 30 as a transaction message, for example.

The payment acceptance terminal organizes the transaction message to the back-end system 30, and the back-end system authenticates and matches the token, and then sends the transaction request to the card issuer 40 for authorization. After the authorization by the card issuer is completed, the transaction response returns to the payment acceptance terminal 20 and sends a short message to the payment account carrier terminal 10.

In a specific embodiment, the peer-to-peer transfer method performed in the background system 30 includes: generating a first token and sending the first token to a first terminal that simulates a payment account carrier, where the A token includes account information associated with the first terminal; generate a second token and send the second token to the second terminal of the analog payment accepting terminal Terminal, wherein the second token includes account information associated with the second terminal; receiving the first token and the second token sent by the second terminal, wherein, the first token A token is forwarded by the first terminal to the second terminal through short-range wireless communication technology; and the first token and the second token are authenticated and matched.

In one embodiment, receiving the first token and the second token sent by the second terminal includes reorganizing the first token and the second token to form a first replacement token and The second substitute token, so that the second terminal sends the first substitute token and the second substitute token to the background system. As a specific example, the first scepter and the second scepter are reorganized in the following manner to form a first alternative scepter and a second alternative scepter: the data of the first scepter is divided into at least two data Segment, the data of the second scepter is divided into at least two data segments; and the data segment divided by the first scepter and the data segment divided by the second scepter are combined to form a data segment including the first scepter respectively The first alternative token and the second alternative token of the data segment of the data segment and the second token. As a specific example, the two tokens can be disassembled and reorganized in the first 1/2 and last 1/2 ways to ensure that the tokens of the two accounts cannot be restored even if they are intercepted during the transmission of the payment acceptance terminal and the background system. Further strengthen security.

According to examples of the present invention, authenticating and matching the first token and the second token include: extracting transaction elements from the first token and the second token. Subsequently, the transaction element may be sent to the card issuing system for transaction authorization.

According to an embodiment of the present invention, the generated first Before sending the token to the first terminal of the simulated payment account carrier, use one or more of the transaction time, random number, and transaction amount to logically process the first token and send the generated second token Before giving the second terminal that simulates the payment account carrier, the second token is logically processed using one or more of transaction time, random number, and transaction amount. In this way, the security of the transfer process is further strengthened.

In another specific embodiment, a peer-to-peer transfer system is provided. The system includes: a background system located on the server side; a first terminal; and a second terminal. When performing a transfer transaction, the first terminal and the second terminal are configured to obtain the first token and the second token respectively from the background system, the first token includes the first account information associated with the first terminal and The second token includes second account information associated with the second terminal. The first terminal forwards the first token to the second terminal through short-range wireless communication technology. After receiving the forwarded first token, the second terminal sends both the first token and the second token to the background system for authentication and matching of the token.

In one embodiment, the aforementioned peer-to-peer transfer system further includes a card issuing system, and the second terminal is configured to send the first token and the second token to the background system before sending both The scepter and the second scepter are reorganized to form a first alternative scepter and a second alternative scepter. Exemplarily, the second terminal is configured to reorganize the first token and the second token to form the first substitute token information and the second substitute token by dividing the data of the first token into at least Two data segments, dividing the data of the second scepter into at least two data segments; and dividing the data divided by the first scepter The data segment is combined with the data segment divided by the second token to form a first alternative token and a second alternative token that respectively include the data segment of the first token and the data segment of the second token. As a more specific example, for example, during the transmission process, the two tokens can be disassembled and reorganized in the first 1/2 and the last 1/2, etc., to ensure that the two accounts in the payment acceptance terminal and the background system during the transmission process Token cannot be recovered even if it is intercepted, further enhancing security.

In one embodiment, after receiving the first token and the second token sent from the second terminal, the background system authenticates and matches the first token and the second token, Thereby obtaining transaction elements for account matching and transaction authorization.

In one embodiment, the first terminal is configured as an analog payment account carrier, and the second terminal is configured as an analog payment accepting terminal. Using the short-range wireless communication technology, the second terminal obtains the first token information transmitted by the first terminal , And then the background system that transmits the first scepter and the second scepter. In this example, if the first terminal is the initiator (master device) of NFC transmission, the first terminal provides the radio frequency field during the data transmission between the first terminal and the second terminal, otherwise, the second terminal Provide RF field. However, in terms of processing the transfer business, the request is initiated to the background via the second terminal as the analog payment acceptance terminal, which can be understood as the initiator of the entire transfer business or that it is in the active working mode and the second terminal is in the passive work mode.

In one embodiment, the background system is configured to use the transaction time, random number, and time before sending the first token and the second token to the first terminal and the second terminal, respectively. Of the transaction amount One or more items to perform logical processing on the first token and/or the second token to ensure transmission security.

In the examples or embodiments described herein, there are multiple ways to reorganize the first token and the second token. According to the present invention, the background system and the terminal will pre-appoint which reorganization methods to adopt and different reorganizations In the method, an instruction will be given in the message information sent by the second terminal to the background system, so that the background system correctly recognizes the first token and the second token from the first substitute token and the second substitute token. More specifically, between the background application unit of the background system and the second application unit installed in the terminal, which reorganization methods are adopted in advance, and different reorganization methods are adopted, in the message information sent by the second terminal to the background system An instruction is given so that the background application unit of the background system can correctly identify the first token and the second token from the first substitute token and the second substitute token.

In the examples of the present invention, each of the first application unit, the second application unit, and the background application unit can be implemented in the form of software to be loaded into the first terminal, the second terminal, and the existing background system; alternatively Each of the first application unit, the second application unit, and the background application unit can be implemented in the form of software combined with hardware, so as to be loaded into the first terminal, the second terminal, and the existing background system. Furthermore, the point-to-point transfer system according to the example of the present invention can be implemented by software, or hardware, or a combination of software and hardware.

Under the premise of ensuring safety, the system of this application enables the transfer party to initiate fund transfer transactions to the background authorization. Account information is automatically read by a personal mobile terminal in a contactless manner, without the need for the transferring party to inform the transferring party Card number information is convenient and improves security. In addition, the account information is transmitted using the scepter method, and then matched by the background system to avoid the transfer of the card number to be received by the receiving terminal, to avoid hidden risks such as card number leakage, and improve security.

In the foregoing, specific embodiments of the present invention have been described with reference to the accompanying drawings. However, those of ordinary skill in the art can understand that various changes and replacements can be made to the specific embodiments of the present invention without departing from the spirit and scope of the present invention. These changes and replacements all fall within the scope defined by the patent application scope of the present invention.

10‧‧‧First terminal

20‧‧‧Second terminal

30‧‧‧Backstage system

31‧‧‧ First Scepter

32‧‧‧Second Scepter

40‧‧‧Card issuer

100‧‧‧First application unit

200‧‧‧Second application unit

Claims (13)

A point-to-point transfer system. The system is applied in an application environment including a first terminal, a second terminal, and a background system provided on the server side. The point-to-point transfer system includes: a background application unit provided in the background system; A first application unit of the terminal; a second application unit provided in the second terminal; wherein, when performing a transfer transaction, the first terminal and the second terminal are configured to pass through the first application and the second application, respectively, to The background application of the background system obtains a first token and a second token, the first token includes the first account information associated with the first terminal and the second token includes the first token associated with the second terminal Two account information; the first terminal forwards the first token to the second terminal through short-range wireless communication technology; and after receiving the forwarded first token, the second terminal transmits Both the first token and the second token are sent to the background system for authentication and matching of the token. The peer-to-peer transfer system according to claim 1, wherein the second terminal is configured to pass the second terminal before sending both the first token and the second token to the background system The application unit reorganizes the first token and the second token to form a first substitute token and a second substitute token. The peer-to-peer transfer system according to claim 2, wherein the second application unit is configured to reorganize the first token and the second token to form the first substitute token and the second substitute token in the following manner: Dividing the data of the first token into at least two data segments, and dividing the data of the second token into at least two data segments; and dividing the data segment divided by the first token and the second token Combination of data segments to form a first alternative token and a second alternative token, wherein each of the first alternative token and the second alternative token includes a partial data segment of the first token and the second token Part of the information section. The peer-to-peer transfer system according to any one of request items 1 to 3, wherein, after receiving the first token and the second token sent from the second terminal, the background system The token and the second token are authenticated and matched to obtain transaction elements for account matching and transaction authorization. The peer-to-peer transfer system according to any one of claims 1 to 3, wherein the first terminal is configured as an analog payment account carrier. The peer-to-peer transfer system according to any one of request items 1 to 3, wherein the second terminal is configured as an analog payment acceptance terminal. The peer-to-peer transfer system according to any one of the request items 1 to 3, wherein the background application unit is configured to send the first token and the second token to the first terminal and the Before the second terminal, one or more of transaction time, random number, and transaction amount are used to logically process the first token and/or the second token to ensure transmission security. A peer-to-peer transfer method performed in a background system, the method includes: generating a first token, and sending the first token to a simulated payment account A first terminal of a user carrier, wherein the first token includes account information associated with the first terminal; a second token is generated, and the second token is sent to the second of the analog payment accepting terminal A terminal, wherein the second token includes account information associated with the second terminal; receiving the first token and the second token sent by the second terminal, wherein, the first token A token is forwarded by the first terminal to the second terminal through short-range wireless communication technology; and the first token and the second token are authenticated and matched. The peer-to-peer transfer method according to claim 8, wherein receiving the first token and the second token sent by the second terminal includes: the first token and the second token are reorganized To form a first alternative token and a second alternative token, and receive the transmitted first alternative token and second alternative token. The peer-to-peer transfer method according to claim 9, wherein the first token and the second token are reorganized according to the following steps to form a first substitute token and a second substitute token: the first token The data of is divided into at least two data segments, the data of the second token is divided into at least two data segments; and the data segment divided by the first token is combined with the data segment divided by the second token to form the first An alternative token and a second alternative token, wherein the first alternative token and the second alternative token each include a partial data segment of the first token and a partial data segment of the second token. Point-to-point transfer party as described in any one of request items 8 to 10 The method, wherein authenticating and matching the first token and the second token includes: extracting transaction elements from the first token and the second token. The peer-to-peer transfer method according to any one of request items 8 to 10, further comprising: sending the transaction element to a card issuing system for transaction authorization. The peer-to-peer transfer method according to any one of claims 8 to 10, wherein before sending the generated first token to the first terminal of the simulated payment account carrier, the transaction time, random number, and transaction amount are used. One or more of the logical processing of the first token, and/or before sending the generated second token to the second terminal of the simulated payment account carrier, using one of the transaction time, random number, and transaction amount The item or items perform logical processing on the second token.

Images