CN104361490B - A kind of method of payment and system of sensitive information markization - Google Patents

Abstract

The present invention provides a payment method for identifying sensitive information, including: S1 registering sensitive information and identifying information on an identifying server and establishing a corresponding relationship; S2 trading platform acquiring the sensitive information and generating payment information; S3 The transaction platform sends the sensitive information to the identification server to obtain the identification information; S4 the transaction platform sends the identification information and the payment information to the payment platform; S5 the payment platform sends the identification information Go to the identification server to obtain card number information; S6 The payment platform completes the transaction according to the payment information and the card number information, and returns a transaction result. The invention carries out network security payment by identifying sensitive information, and the adopted identification is compatible with the data structure of the existing bank card number, and the existing merchant system and payment system only need to change a small number of interfaces to realize the identification of the bank card payment process , with better technical effects.

Description

A payment method and system for identifying sensitive information

technical field

The invention relates to the field of network security, in particular to a network security payment method and system.

Background technique

Online payment is the foundation of e-commerce. The widespread application of electronic payment has promoted the rapid development of e-commerce, but it has also brought about the leakage of personal sensitive information, especially bank card information.

In order to solve the problem of information leakage, various encryption measures and algorithms are generally used in the online payment link, including symmetric encryption, asymmetric encryption and other measures. Use, protection, and management have become the short boards of online information protection, especially to achieve end-to-end encryption of sensitive information such as personal account information.

Taking the more sensitive bank card number information as an example, in the actual online shopping environment: 1. Bank card information needs to go through at least several links such as e-commerce, payment companies, acquiring banks, and card issuing banks. For commercial considerations, such as possible refunds etc. E-commerce and payment companies often also need to keep bank card information. 2. If point-to-point encryption is used to achieve end-to-end effects throughout the process, the storage and use of keys will become very complicated and expensive, and it will be extremely easy to There is a loophole.

Contents of the invention

In practical applications, it is very necessary to encrypt sensitive data such as credit card numbers and ID numbers. However, using traditional block ciphers usually expands the data and changes the length and type of data. It is necessary to modify the database structure or application to adapt to these changes. The cost is very high.

How tokenization works: Replace bank card data or financial account records with a special value or identifier. The tokenization approach is more flexible and feasible to implement than the end-to-end encryption approach. If this technology is used, then in many cases what is actually transmitted is not the real bank card data, which also excludes the possibility of information leakage. This kind of identification can be stored unlimitedly, and this value can be retained and continued to be used in transactions, or allow the data to be used for statistics, analysis, mining, etc. afterwards.

To this end, the present invention provides a payment method for identifying sensitive information, including:

S1 registers sensitive information and identification information on the identification server and establishes a corresponding relationship;

S2 trading platform obtains sensitive information and generates payment information;

S3, the transaction platform sends the sensitive information to the identification server to obtain the identification information;

S4, the transaction platform sends the identification information and the payment information to the payment platform;

S5 The payment platform sends the identification information to the identification server to obtain the sensitive information;

S6 The payment platform completes the transaction according to the payment information and the sensitive information, and returns a transaction result.

Further preferably, the sensitive information includes merchant number, card number, expiration date, and CVV code.

Further preferably, the identification server in step S1 registers the sensitive information and the identification information, specifically including:

S11 generating and storing the identification information according to the card number and the merchant number;

S12 generates an identification table and a card number table for storage, and binds the identification table and the card number table;

S13 searches for the identification information according to the card number and the merchant number;

S14 Searches for the card number information according to the identification information and the merchant number.

Further preferably, in the step S12, the specific process of generating the identification table containing the identification information and the card number table containing the card number is as follows: the identification server encrypts the card number information using the first algorithm combined with the first key and Store, the card number information includes the card number, card number type, card bin, validity period and CVV code, assign a corresponding card number ID to the encrypted card number information to generate a card number table;

The identification server stores first information, and the first information includes the identification information, the merchant number, the card number ciphertext and the card number ID, and the card number ciphertext is the second algorithm adopted by the identification server. Encrypting the card number in conjunction with the second key to generate; assigning a corresponding identification ID to the first information to generate the identification table;

Binding the identification table and the card number table through the card number ID;

The specific process of searching the identification information according to the card number and merchant number is as follows: the identification server adopts the second algorithm combined with the second key to encrypt the card number to generate the ciphertext of the card number, and searches the identification table for the identification information corresponding to the merchant number and the merchant number. The identification information corresponding to the ciphertext of the card number;

The specific process of searching the card number according to the identification information and the merchant number is: the identification server searches the identification table for the card number ID corresponding to the identification information and the merchant number; The identification server searches the card number table for the encrypted card number information corresponding to the card number ID, and decrypts it using the first algorithm combined with a first key to obtain the card number information.

Further preferably, the step S3 is specifically:

The transaction platform sends the merchant number and the card number to the identification server to obtain the identification information, and the identification server responds to the request by using the second algorithm combined with the received second key pair The card number is encrypted to generate the card number ciphertext; the identification server searches the stored identification table for the identification information corresponding to the merchant number and the card number ciphertext, and uses the found The above identification information is returned to the transaction platform.

Further preferably, the step S5 is specifically:

The payment platform receives the payment information and the identification information, and sends the identification information and the merchant number to the identification server; the identification server looks up the identification information in the identification table. Information and the card number ID corresponding to the merchant number; after finding the corresponding card number ID, the identification server looks up the encrypted card number information corresponding to the card number ID in the card number table; The identification server decrypts the found encrypted card number information, and returns the decrypted card number information to the payment platform.

Further preferably, the transaction platform includes a payment gateway and a front-end identification interface; the payment gateway obtains the sensitive information and the payment information; and the front-end identification interface verifies the legality of the identity of the merchant.

Further preferably, in steps S3 to S4, the payment gateway sends the obtained sensitive information and the payment information to the identification front interface, and the identification front interface sends the identification server Sending a request to obtain the identification information, and sending the payment information and the identification information returned by the identification server to the payment platform.

Further preferably, in steps S3 to S4, the payment gateway obtains the sensitive information and the payment information, and sends a request for obtaining the identification information to the identification server through the identification front interface, and sends the payment The information and the identification information returned by the identification server are sent to the payment platform.

In the present invention, the acquisition of identification information and the replacement of identification information and sensitive information can be completed through the payment gateway or the front interface of the identification. By providing two implementation modes, it can adapt to different transformation requirements.

The present invention also provides a sensitive information marked payment system, including a marked server end, a transaction end and a payment end, and the marked server end includes:

An identification information generation module, which generates identification information according to sensitive information;

A registration module, binding the sensitive information and the identification information;

A searching module, searching for the identification information according to the sensitive information, and searching for the sensitive information according to the identification information;

A sending module, sending the identification information to the transaction end, and sending the sensitive information to the payment end;

The transaction terminal includes:

A transaction module, which acquires sensitive information and generates payment information;

An identification information acquisition module, which sends an identification information acquisition request to the identification server to obtain the identification information;

An identification information replacement module, which replaces the sensitive information with the identification information, and sends the identification information and the payment information to the payment terminal;

The payment terminal includes:

A sensitive information acquisition module, which sends the identification information to the identification server to acquire the sensitive information;

A payment module, making payment according to the payment information and the sensitive information, and completing the transaction;

A transaction result returning module, which returns the transaction result to the transaction terminal.

The identification information adopted by the present invention is compatible with the data structure of the existing bank card number, and the existing merchant system and payment system only need to change a small amount of interfaces to realize the identification of the bank card payment process, eliminating the need for key storage, and the process is simple , with a better technical effect.

Description of drawings

Below in conjunction with accompanying drawing and specific embodiment the present invention is described in further detail:

Fig. 1 is a schematic flow chart of a payment method for identifying sensitive information according to the present invention;

Fig. 2 is a schematic flow chart of the second step of another embodiment of a payment method for identifying sensitive information according to the present invention;

Fig. 3 is a three-step flowchart of another embodiment of a sensitive information identification payment method according to the present invention;

Fig. 4 is a structural block diagram of a sensitive information identification payment system according to the present invention.

Detailed ways

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the present invention will be specifically described below in conjunction with the accompanying drawings and embodiments. The drawings in the following description are only some embodiments of the invention. For those skilled in the art, other drawings can also be obtained based on these drawings without creative effort.

As shown in Fig. 1, it is a schematic flow chart of the payment method for marking sensitive information of the present invention. As a specific embodiment 1 of the present invention, the present invention provides a payment method for marking sensitive information, including:

S1 registers sensitive information and identification information on the identification server and establishes a corresponding relationship;

S2 trading platform obtains sensitive information and generates payment information;

S3, the transaction platform sends the sensitive information to the identification server to obtain the identification information;

S4, the transaction platform sends the identification information and the payment information to the payment platform;

S5 The payment platform sends the identification information to the identification server to obtain the sensitive information;

S6 The payment platform completes the transaction according to the payment information and the sensitive information, and returns a transaction result.

Specifically, the sensitive information includes merchant number, card number, validity period, and CVV code.

The identification server in step S1 of the present invention registers the sensitive information and the identification information, specifically including the following four steps:

S11 generating and storing the identification information according to the card number and the merchant number;

S12 generates an identification table and a card number table for storage, and binds the identification table and the card number table;

S13 searches for the identification information according to the card number and the merchant number;

S14 Searches for the card number according to the identification information and the merchant number.

Specifically, step S12 generates the identification table containing the identification information and the card number table containing the card number. The specific process is: the identification server adopts the first algorithm combined with the first key to encrypt and store the card number information. , validity period and CVV code, and assign a corresponding card number ID to the encrypted card number information to generate a card number table.

The identification server stores the first information, and the first information includes identification information, merchant number, card number ciphertext and card number ID, and the card number ciphertext is generated by the identification server using the second algorithm in combination with the second key to encrypt the card number; for the first The information is assigned a corresponding identification ID to generate an identification table.

The identification table and the card number table are bound by the card number ID.

Step S13 The specific process of searching for the identification information according to the card number and the merchant number is as follows: the identification server adopts the second algorithm combined with the second key to encrypt the card number to generate a card number ciphertext, and searches the identification table for the ciphertext corresponding to the merchant number and the card number. Identification information.

The specific process of step S14 searching for the card number according to the identification information and the merchant number is as follows: the identification server searches the identification table for the card number ID corresponding to the identification information and the merchant number, and the identification server searches the card number table for the encrypted card number corresponding to the card number ID The information is decrypted by using the first algorithm combined with the first key to obtain the card number information.

To elaborate on the above step S1, the identification information is represented by Token. The process for the identification server to register sensitive information and identification information is as follows:

1. Take out the pre-generated token from the token pool. The token is a secure random number generated by an encryption machine, which is used to splicing with the token bin to generate a token.

2. Splicing the token, token bin, and the last four digits of the corresponding card number into a complete Token, among which, the token bin is similar to the bank card bin (identifying the card issuing bank) and plays the role of transaction routing. Token is a tag replacement with formatted characters. By establishing a mapping relationship table between Token and card number, the original value in the corresponding relationship can be found through the mapping table. The complete format of the spliced Token is token bin+token+the last four digits of the card number.

3. Create a card number table in the database. The identification server uses the first algorithm combined with the first key to encrypt and store the card number information, wherein the card number information includes the card number, card number type (credit card, debit card, etc.), card bin, validity period, and CVV code, and the encrypted card number information Assign a corresponding card number ID to generate a card number table. The first algorithm in the present invention is not limited, and any algorithm that can realize the encryption function is acceptable.

4. Create an identification table (Token table) in the database. The identification server stores all the first information, the first information includes identification information Token, merchant number, card number ciphertext and card number ID, and assigns a corresponding identification ID to the first information to generate a Token table.

Specifically, the ciphertext of the card number is generated by the identification server using the second encryption algorithm and the second key to encrypt the corresponding card number. The second encryption algorithm in the present invention preferably uses the MD5 algorithm to encrypt the card number to generate the card number MD5, because the MD5 algorithm has the advantage that the data length is small, but the encryption algorithm is not limited to the MD5 algorithm, and can also include encryption algorithms such as sha1.

Specifically, the merchant number is the code of an e-commerce organization such as JD.com, Taobao, and Suning, or a number registered with UnionPay. Each e-commerce company is different, and its corresponding merchant ID is also different. The same bank card number generates different Tokens on different e-commerce platforms. When querying the Token used by the card number on an e-commerce platform based on the card number, the merchant number must also be used as the query condition, that is, the card number MD5 is first encrypted and calculated according to the card number and the key, and the corresponding Token can be found according to the card number MD5 and the merchant number .

Specifically, the card number ID is also stored in the Token table, and the card number ID is bound to the card number table.

Specifically, the validity period of the Token is also stored in the Token table, which is used to detect whether the Token has expired.

Specifically, the Token table also stores a token key and a token value. In the actual payment process, the identification information Token passed in response to the Token request is the two values of token key and tokenvalue. The token key is the Token value hidden with *. The key will leave four digits in the middle of the Token and use * to represent it, just like the account number displayed on the online banking or mobile phone. *****3758, used to hide some values for user confirmation when displayed. tokenvalue is the complete value passed in the actual process, which is used to send to the payment platform for payment. The token table also stores the validity period of the token, which is used to check whether the pre-generated token has expired.

In step S13, when the transaction platform sends a Token acquisition request to the identification server, the transaction platform first sends sensitive information to the identification server, including merchant number, card number and other information. The identification server receives the sensitive information, and uses the MD5 encryption algorithm combined with the first key to encrypt the card number to generate the ciphertext of the card number, that is, the card number MD5. The identification server looks up the identification ID corresponding to the received merchant number and card number ciphertext in the Token table, obtains the first information stored in this identification ID, and returns the Token in the first information, including token key and token value, to trading platform.

In step S14, when the payment platform sends a request for obtaining card number information to the identification server, the payment platform sends the merchant number and Token to the identification server. The identification server looks up the card number ID corresponding to the received Token and merchant number in the Token table. The identification server searches for the matching card number ID in the card number table according to the corresponding card number ID, and obtains the encrypted card number information corresponding to the current card number ID. The identification server uses the first algorithm combined with the first key to decrypt to obtain the card number information, including card number, card number type (credit card, debit card, etc.), card bin, validity period, and CVV code. The identification server returns the obtained card number information to the payment platform.

So far, the identification server has established a corresponding relationship between the sensitive information and the corresponding identification information Token, and completed the initial registration.

The specific process of Embodiment 1 of the present invention will be described below.

Before the payment process, the registration of sensitive information and corresponding Token is first completed in the identification server. For the registration process, refer to the detailed process of step S1 mentioned above, and will not be repeated here.

After completing the registration, proceed to the payment process.

Step S2: The user browses products through the user browser and selects products to add to the shopping cart for settlement. The e-commerce platform generates order information and sends it to the transaction platform. The transaction platform generates payment information based on the order information. Among them, e-commerce platforms include Taobao, JD.com, Suning, etc.

The trading platform redirects the page to the e-commerce platform, displaying on the browser the sensitive information entered by the user for payment. The user enters sensitive information such as the card number through the redirection web page and sends it to the trading platform.

Step S3: The trading platform sends a request for obtaining Token, merchant number and card number to the identification server.

The identification server responds to the request to obtain the Token, and calculates the received card number to generate the ciphertext of the card number, that is, the card number MD5. The identification server looks up the Token corresponding to the merchant number and the MD5 of the card number in the stored identification table. If it is found that the Token does not exist, a new Token is generated, and an identification ID is assigned and stored in the identification table.

If the Token exists, check whether the validity period of the Token has expired, and generate a new Token if the Token expires; if the Token has not expired, return the found Token to the trading platform. The token includes two values: token key and token value, token key is the token value hidden with *, and token value is the complete token value passed in the actual process.

Step S4 The trading platform obtains the returned Token, and sends the Token and payment information to the payment platform. In the present invention, the payment platform includes UnionPay Online and the banking system.

Step S5 The payment platform receives the Token and payment information, and sends the Token and merchant number to the identification server. The identification server looks up the card number ID corresponding to the Token and the merchant number in the stored identification table. After finding the corresponding card number ID, the identification server looks up the encrypted card number information corresponding to the card number ID in the stored card number table. The identification server decrypts the encrypted card number information to obtain specific card number information, and returns the card number information to the payment platform.

Step S6: The payment platform obtains the returned card number information, makes payment according to the payment information and card number information, completes the transaction and returns the transaction result to the transaction platform.

Specifically, the transaction terminal in the present invention includes a payment gateway and an identification front interface, wherein the payment gateway is used to obtain sensitive information and generate payment information, and may be the e-commerce's own payment gateway or a third-party payment gateway. The identification front interface verifies the data validity of the received payment information and sensitive information, and verifies the signature information to confirm whether the identity of the merchant is legal.

Embodiment 1 is improved to obtain preferred embodiment 2, wherein in steps S3 to S4, the payment gateway sends the acquired sensitive information and payment information to the identification front interface, and the identification front interface sends the information to the identification server Obtain the Token request, and send the payment information and the Token returned by the identification server to the payment platform.

As shown in Figure 2, it is the process flow of another specific embodiment 2 of the present invention, wherein:

The detailed process of step S1 is the same as that in embodiment 1.

Step S2: The user browses the product through the user browser and selects the product to add to the shopping cart for settlement. The e-commerce platform generates an order according to the user's transaction information and sends it to the payment gateway with a signature. The payment gateway receives the order information, verifies the signature information, generates payment information according to the order information, and redirects the page to display the sensitive information entered by the user for payment on the browser. The user enters sensitive information such as the card number through the redirection web page and sends it to the payment gateway. The payment gateway signs sensitive and payment information.

S31 to S41: the payment gateway sends sensitive information and payment information to the identification front interface. The identification front-end interface checks the validity of the data, verifies the signature information, and confirms that the identity of the merchant is legal. The identification front-end interface sends sensitive information and obtains Token requests to the identification server.

The identification server receives the sensitive information sent by the front-end interface of the identification and obtains the Token request, and performs MD5 calculation on the card number in the sensitive information to obtain the card number MD5. Find the stored Token based on the merchant number and card number MD5. If the Token does not exist, a new Token is generated, and an identification ID is assigned and stored in the identification table.

If the Token exists, check whether the validity period of the Token has expired, and generate a new Token if the Token expires; if the Token has not expired, directly return the Token, wherein the Token includes two values of token key and token value, The token key is the Token value hidden with *, and the token value is the complete Token value passed in the actual process.

The identification front interface receives the Token returned by the identification server, and sends the Token and payment information to the payment platform.

Step S5 The payment platform receives the Token and payment information, and sends the Token and merchant number to the identification server. The identification server looks up the card number ID corresponding to the Token and the merchant number in the stored identification table. After finding the corresponding card number ID, the identification server looks up the encrypted card number information corresponding to the card number ID in the stored card number table. The identification server decrypts the encrypted card number information to obtain specific card number information, and returns the card number information to the payment platform.

Step S61: The payment platform makes payment according to the payment information and the returned card number information, completes the transaction, returns the transaction result to the identification front interface, and the identification front interface actively returns the transaction result to the payment gateway.

In the second embodiment, the present invention transforms the identification front interface, so that the identification front interface acquires Token to complete the Token request processing work, and the identification front interface replaces the acquired Token with sensitive information, and sends the payment information and Token to the payment platform. After the payment is completed, the payment platform returns the transaction result to the identification front interface, and the identification front interface actively notifies the payment gateway of the transaction result.

Embodiment 1 is improved to obtain preferred embodiment 3, wherein in step S3 to step S4, the payment gateway obtains the sensitive information and the payment information, and sends to the identification server through the identification front interface to obtain the Identify the information request, and send the payment information and the identification information returned by the identification server to the payment platform.

As shown in Figure 3, it is the process of another specific embodiment 3 of the present invention, wherein:

The detailed process of step S1 is the same as that in embodiment 1.

Step S2: The user browses the product through the user browser and selects the product to add to the shopping cart for settlement. The e-commerce platform generates an order according to the user's transaction information and sends it to the payment gateway with a signature. The payment gateway receives the order information, verifies the signature information, generates payment information according to the order information, and redirects the page to display the sensitive information entered by the user for payment on the browser. The user enters sensitive information such as the card number through the redirection web page and sends it to the payment gateway. The payment gateway signs sensitive and payment information.

Step S32 to Step S42: The payment gateway sends sensitive information and a Token acquisition request to the identification front interface, checks the validity of the data through the identification front interface, verifies the signature information, and confirms that the merchant's identity is legal. Sensitive information and token acquisition requests are forwarded to the identification server by the identification front interface.

The identification server receives the sensitive information sent by the payment gateway and the request to obtain Token, and performs MD5 calculation on the card number in the sensitive information to obtain the card number MD5. Find the stored Token based on the merchant number and card number MD5. If the Token does not exist, a new Token is generated, and an identification ID is assigned and stored in the identification table.

If the Token exists, check whether the validity period of the Token has expired, and generate a new Token if the Token expires; if the Token has not expired, directly return the Token, wherein the Token includes two values of token key and token value, The token key is the Token value hidden with *, and the token value is the complete Token value passed in the actual process.

The identification server returns the identification information to the payment gateway through the identification front interface. The payment gateway receives the returned identification information, and sends the identification information and payment information to the payment platform.

Step S5 The payment platform receives the Token and payment information, and sends the Token and merchant number to the identification server. The identification server looks up the card number ID corresponding to the Token and the merchant number in the stored identification table. After finding the corresponding card number ID, the identification server looks up the encrypted card number information corresponding to the card number ID in the stored card number table. The identification server decrypts the encrypted card number information to obtain specific card number information, and returns the card number information to the payment platform.

Step S62: The payment platform makes payment according to the payment information and the returned card number information, completes the transaction, and directly returns the transaction result to the payment gateway.

In the third embodiment, the present invention transforms the payment gateway so that the payment gateway acquires Token to complete the Token request processing work, and the payment gateway replaces the acquired Token with sensitive information, and sends the payment information and Token to the payment platform. After the payment is completed, the payment platform returns the transaction result to the payment gateway.

The present invention also provides a sensitive information marked payment system, as shown in Figure 4, a structural block diagram of a sensitive information marked payment system, including a marked server end, transaction end and payment end, wherein:

The identification server includes:

An identification information generation module, which generates identification information according to sensitive information;

A registration module, binding the sensitive information and the identification information;

A searching module, searching for the identification information according to the sensitive information, and searching for the sensitive information according to the identification information;

A sending module, sending the identification information to the transaction end, and sending the sensitive information to the payment end;

The transaction terminal includes:

A transaction module, which acquires sensitive information and generates payment information based on order information;

An identification information acquisition module, which sends an identification information acquisition request to the identification server to obtain the identification information;

An identification information replacement module, which replaces the sensitive information with the identification information, and sends the identification information and the payment information to the payment terminal;

The payment terminal includes:

A sensitive information acquisition module, which sends the identification information to the identification server, and acquires

said sensitive information;

A payment module, making payment according to the payment information and the sensitive information, and completing the transaction;

A transaction result returning module, which returns the transaction result to the transaction terminal.

Specifically, sensitive information includes merchant number, card number, expiration date, CVV code, etc.

Specifically, the transaction terminal in the present invention includes a payment gateway and an identification front interface, wherein the payment gateway is an e-commerce company's own or a third-party payment gateway.

The payment terminal in the present invention includes UnionPay Online and the banking system, and the application scenarios of the present invention include e-commerce—bank system payment, e-commerce—UnionPay online payment, e-commerce (including payment gateway)——UnionPay online payment, e-commerce (Including payment gateway) - banking system payment, e-commerce - third-party payment gateway - UnionPay online payment, e-commerce - third-party payment gateway - banking system payment.

Among them, for e-commerce (including payment gateway) - UnionPay online payment and e-commerce (including payment gateway) - bank system payment, e-commerce firstly sends the generated order information to the payment gateway through the internal interface, and the self-owned payment gateway The interface acquires sensitive information and generates payment information, and sends the payment information and sensitive information to UnionPay or the banking system through the external interface for processing.

For e-commerce - third-party payment gateway - UnionPay online payment and e-commerce - third-party payment gateway - banking system payment, the e-commerce will send the generated order signature information to the third-party payment gateway through the external interface, and the third-party payment The gateway obtains sensitive information, generates payment information based on the order information, and sends the payment information and sensitive information to UnionPay or the banking system for processing.

The specific embodiments of the invention have been described in detail above, but the present invention is not limited to the specific embodiments described above, which are only examples. For those skilled in the art, any equivalent modifications and substitutions to the system are also within the scope of the present invention. Therefore, equivalent changes and modifications made without departing from the spirit and scope of the invention shall fall within the scope of the present invention.

Claims (3)

1. A payment method for identifying sensitive information, comprising: S1 registers sensitive information and identification information on the identification server and establishes a corresponding relationship; the sensitive information includes merchant number, card number, validity period, and CVV code; The S2 trading platform obtains the sensitive information and generates payment information; S3, the transaction platform sends the sensitive information to the identification server, and acquires the identification information; S4, the transaction platform sends the identification information and the payment information to the payment platform; S5 The payment platform sends the identification information to the identification server to obtain the sensitive information; S6 The payment platform completes the transaction according to the payment information and the sensitive information, and returns a transaction result; Wherein, the transaction platform includes a payment gateway and an identification front interface; the payment gateway obtains the sensitive information and generates the payment information; the payment gateway receives the order information, generates payment information according to the order information, and gives Page redirection; the user enters sensitive information through the redirection webpage and sends it to the payment gateway; the payment gateway sends the sensitive information and payment information to the identification front interface; the identification front interface verifies the legality of the identity of the merchant; The identification server in step S1 registers the sensitive information and the identification information, specifically including: S11 generating and storing the identification information according to the card number and the merchant number; S12 Generate an identification table containing the identification information and a card number table containing the card number for storage, and bind the identification table and the card number table; S13 searches for the identification information according to the card number and the merchant number; S14 searching for the card number according to the identification information and the merchant number; In the step S12, the specific process of generating the identification table containing the identification information and the card number table containing the card number is as follows: the identification server uses the first algorithm combined with the first key to encrypt and store the card number information, and the The card number information includes the card number, card number type, card bin, validity period and CVV code, and a corresponding card number ID is assigned to the encrypted card number information to generate a card number table; The identification server stores first information, and the first information includes the identification information, the merchant number, the card number ciphertext and the card number ID, and the card number ciphertext is the second algorithm adopted by the identification server. Encrypting the card number in conjunction with the second key to generate; assigning a corresponding identification ID to the first information to generate the identification table; Binding the identification table and the card number table through the card number ID; The specific process of searching the identification information according to the card number and merchant number is as follows: the identification server adopts the second algorithm combined with the second key to encrypt the card number to generate the ciphertext of the card number, and searches the identification table for the identification information corresponding to the merchant number and the merchant number. The identification information corresponding to the ciphertext of the card number; The specific process of searching the card number according to the identification information and the merchant number is: the identification server searches the identification table for the card number ID corresponding to the identification information and the merchant number; The identification server searches the card number table for the encrypted card number information corresponding to the card number ID, and uses the first algorithm and a first key to decrypt to obtain the card number information. 2. A payment method for identifying sensitive information as claimed in claim 1, characterized in that: From step S3 to step S4, the payment gateway sends the obtained sensitive information and the payment information to the identification front interface, and the identification front interface sends to the identification server to obtain the identifying the information request, and sending the payment information and the identification information returned by the identification server to the payment platform. 3. A payment system for marking sensitive information, including a marking server end, transaction end and payment end, characterized in that: The identification server includes: An identification information generation module generates identification information according to sensitive information; the sensitive information includes merchant number, card number, validity period, and CVV code; A registration module, binding the sensitive information and the identification information; A searching module, searching for the identification information according to the sensitive information, and searching for the sensitive information according to the identification information; A sending module, sending the identification information to the transaction end, and sending the sensitive information to the payment end; The transaction terminal includes: A transaction module, which acquires sensitive information and generates payment information; An identification information acquisition module, which sends an identification information acquisition request to the identification server to obtain the identification information; An identification information replacement module, which replaces the sensitive information with the identification information, and sends the identification information and the payment information to the payment terminal; The payment terminal includes: A sensitive information acquisition module, which sends the identification information to the identification server to acquire the sensitive information; A payment module, making payment according to the payment information and the sensitive information, and completing the transaction; A transaction result return module, which returns the transaction result to the transaction terminal; Wherein, the transaction end includes a payment gateway and an identification front interface; the payment gateway obtains the sensitive information and generates the payment information; the payment gateway receives the order information, generates payment information according to the order information, and gives Page redirection; the user enters sensitive information through the redirection webpage and sends it to the payment gateway; the payment gateway sends the sensitive information and payment information to the identification front interface; the identification front interface verifies the legality of the identity of the merchant; The identification server registers the sensitive information and the identification information, specifically including: generating and storing the identification information according to the card number and the merchant number; Generate an identification table containing the identification information and a card number table containing the card number for storage, and bind the identification table and the card number table; Find the identification information according to the card number and merchant number; Find the card number according to the identification information and the merchant number; The specific process of generating the identification table containing the identification information and the card number table containing the card number is: the identification server adopts the first algorithm combined with the first key to encrypt and store the card number information, and the card number information includes the card number, Card number type, card bin, validity period and CVV code, assigning a corresponding card number ID to the encrypted card number information to generate a card number table; The identification server stores first information, and the first information includes the identification information, the merchant number, the card number ciphertext and the card number ID, and the card number ciphertext is the second algorithm adopted by the identification server. Encrypting the card number in conjunction with the second key to generate; assigning a corresponding identification ID to the first information to generate the identification table; Binding the identification table and the card number table through the card number ID; The specific process of searching the identification information according to the card number and the merchant number is: the identification server adopts the first algorithm combined with the first key to encrypt the card number to generate the ciphertext of the card number, and searches the identity table for the identification information related to the merchant number and the merchant number. The identification information corresponding to the ciphertext of the card number; The specific process of searching the card number according to the identification information and the merchant number is: the identification server searches the identification table for the card number ID corresponding to the identification information and the merchant number; The identification server searches the card number table for the encrypted card number information corresponding to the card number ID, and decrypts it using the first algorithm combined with a first key to obtain the card number information.