CN105590199A - Payment method and payment system based on dynamic two-dimensional code - Google Patents

Abstract

The invention relates to a payment method and a payment system based on a two-dimensional code. The payment method based on the two-dimensional code of the present invention includes the following steps: a transaction information generation step, the merchant terminal generates a static two-dimensional code containing the transaction information; a transaction information acquisition step, the cardholder selects in the application of the mobile terminal for The payment card for payment, scanning the static two-dimensional code to obtain transaction information; the dynamic two-dimensional code generation step, the application of the mobile terminal recognizes the static two-dimensional code and generates it based on the static two-dimensional code and the card information of the payment card Dynamic two-dimensional code: the dynamic two-dimensional code acquisition step, the merchant terminal scans the dynamic two-dimensional code and uploads it to the background system to request payment authorization from the payment institution. According to the present invention, it is possible to provide a payment method and a payment system based on a two-dimensional code that further guarantee payment security.

Description

A payment method and payment system based on a dynamic two-dimensional code

technical field

The invention relates to the field of computer application technology, in particular to a two-dimensional code payment method and payment system based on a dynamic two-dimensional code.

Background technique

Two-dimensional code, also known as two-dimensional barcode, is a black and white pattern distributed on a plane (two-dimensional direction) with specific geometric figures according to certain rules, and is a key to all information data. In modern commercial activities, a wide range of applications can be realized, such as product anti-counterfeiting/traceability, advertisement push, website link, data download, commodity transaction, payment, etc.

For example, a payment method based on a two-dimensional code is disclosed in Patent Document 1 (CN103646327A). The method comprises the steps of:

Obtain the card information of the payment card with payment function;

The user transmits the payment card information to the payment management center through the APP on the mobile phone;

The payment management center generates a two-dimensional code with payment function according to the payment card information sent by the user and transmits the two-dimensional code to the cloud server;

The user sends a payment request to the payment management center through the APP when consuming;

After receiving the payment request, the payment management center conducts identity verification;

After passing the identity verification, the cloud server generates the corresponding QR code and sends it to the APP;

The APP displays the received QR code for the product seller to scan;

Send the scanned QR code information to the banking system or third-party payment system for payment authorization.

In Patent Document 1, payment is realized based on a static two-dimensional code, which is easily stolen by lawbreakers, and the security of payment is not high.

Contents of the invention

In view of the above problems, the present invention aims to provide a two-dimensional code-based payment method and payment system that can improve payment security.

The payment method based on the two-dimensional code of the present invention is characterized in that it comprises the following steps:

In the transaction information generation step, the merchant terminal generates a static two-dimensional code containing transaction information;

In the transaction information acquisition step, the cardholder selects the payment card used for payment in the application of the mobile terminal, and scans the static two-dimensional code to obtain the transaction information;

A dynamic two-dimensional code generation step, the application of the mobile terminal recognizes the static two-dimensional code and generates a dynamic two-dimensional code based on the static two-dimensional code and the card information of the payment card;

In the step of acquiring a dynamic two-dimensional code, the merchant terminal scans the dynamic two-dimensional code and uploads it to the background system to request payment authorization from the payment institution.

Preferably, the transaction information includes at least transaction amount, merchant code, transaction time,

The dynamic two-dimensional code has a specified valid time.

Preferably, the step of obtaining transaction information includes the following sub-steps:

The cardholder opens the application of the mobile terminal and performs identity verification. If the identity verification is passed, proceed to the following steps; otherwise, the background system is notified to remind the cardholder that there is a risk;

The cardholder chooses the payment card to be paid from the payment cards that have been bound with the application of the mobile terminal;

The cardholder scans the static QR code generated by the merchant terminal to obtain transaction information.

Preferably, the dynamic two-dimensional code generation step includes the following sub-steps:

The mobile terminal scans the static two-dimensional code and identifies the transaction information contained in the static two-dimensional code;

Combining the transaction information and the card information of the payment card to generate payment information;

A dynamic two-dimensional code is generated according to the payment information.

Preferably, the dynamic two-dimensional code generation step includes the following sub-steps:

The mobile terminal scans the static two-dimensional code and identifies the transaction information contained in the static two-dimensional code;

Combining transaction information, card information of payment card, and fingerprint code to generate payment information;

A dynamic two-dimensional code is generated according to the payment information.

Preferably, the sub-step of generating payment information includes the following steps:

Generate a message authentication code MAC according to the combination of transaction information, payment card information, and fingerprint code to obtain payment information A;

Encrypting the payment information A to generate payment information B;

Combining the payment information B with specified information to form payment information C;

Generate a dynamic two-dimensional code according to the payment information C,

Wherein, while generating the dynamic two-dimensional code, the application of the mobile terminal starts counting down, and after reaching the specified valid time, the dynamic two-dimensional code becomes invalid and needs to be regenerated.

Preferably, said dynamic two-dimensional code acquisition step includes the following sub-steps:

The merchant terminal scans the dynamic two-dimensional code;

The merchant terminal uploads the dynamic QR code to the background system;

The background system analyzes the received dynamic QR code to obtain payment information;

Obtain the transaction information and the card information of the payment card according to the payment information, and request deduction processing from the payment card institution based on the transaction information and the card information of the payment card;

The background system returns the processing result of the payment institution to the merchant terminal.

Preferably, in the step of obtaining transaction information, the identity verification performed by the cardholder is to call the fingerprint reader to read the fingerprint of the person who opens the mobile terminal application and obtain the fingerprint code, and the application of the mobile terminal verifies the fingerprint to determine whether Is the cardholder, if the verification is passed, continue to the following steps, otherwise notify the background system to remind the cardholder that there is a risk.

Preferably, the dynamic two-dimensional code generation step includes the following sub-steps:

The mobile terminal scans the static two-dimensional code and identifies the transaction information contained in the static two-dimensional code;

Combining transaction information, card information of payment card, and fingerprint code to generate payment information;

A dynamic two-dimensional code is generated according to the payment information.

Preferably, the sub-step of generating payment information includes the following steps:

Generate message authentication code MAC according to transaction information, card information of payment card, and fingerprint code to obtain payment information A;

Encrypting the payment information A to generate payment information B;

Combining the payment information B with specified information to form payment information C;

Generate a dynamic two-dimensional code according to the payment information C,

Wherein, while generating the dynamic two-dimensional code, the application of the mobile terminal starts counting down, and after reaching the specified valid time, the dynamic two-dimensional code becomes invalid and needs to be regenerated.

Preferably, said dynamic two-dimensional code acquisition step includes the following sub-steps:

The merchant terminal scans the dynamic two-dimensional code;

The merchant terminal uploads the dynamic QR code to the background system;

The background system analyzes the received dynamic QR code to obtain payment information;

Obtain transaction information, card information of payment card, fingerprint code according to payment information;

The background system checks the fingerprint code, if it passes, proceed to the following steps, otherwise it will be directly rejected;

The backend system requests the payment card institution to debit the payment based on the transaction information and the card information of the payment card;

The background system returns the processing result of the payment institution to the merchant terminal.

The payment method based on the two-dimensional code of the present invention is characterized in that it comprises the following steps:

Transaction information generation step, the merchant terminal generates transaction information;

In the transaction information acquisition step, the cardholder selects the payment card used for payment in the application of the mobile terminal, and enters the payment amount into the application of the mobile terminal;

In the dynamic two-dimensional code generation step, the application of the mobile terminal generates a dynamic two-dimensional code according to the input payment amount and the card information of the payment card;

In the step of obtaining the dynamic two-dimensional code, the merchant terminal scans the dynamic two-dimensional code and uploads it to the background system so that the payment institution can request payment authorization.

Preferably, the dynamic two-dimensional code has a specified valid time.

Preferably, the step of obtaining transaction information includes the following sub-steps:

The cardholder opens the application of the mobile terminal and performs identity verification. If the identity verification is passed, proceed to the following steps; otherwise, the background system is notified to remind the cardholder that there is a risk;

The cardholder chooses the payment card to be paid from the payment cards that have been bound with the application of the mobile terminal;

The cardholder enters the payment amount in the application of the mobile terminal.

Preferably, the dynamic two-dimensional code generation step includes the following sub-steps:

The application of the mobile terminal generates payment information based on the input payment amount, combining the payment amount and the card information of the payment card;

A dynamic two-dimensional code is generated according to the payment information.

Preferably, the combination of the payment amount and the card information of the payment card to generate the payment information includes the following steps:

Combining the payment amount and the card information of the payment card to generate a message authentication code MAC to obtain payment information A;

Encrypting the payment information A to generate payment information B;

Combining the payment information B with specified information to form payment information C;

Generate a dynamic two-dimensional code according to the payment information C,

Wherein, while generating the dynamic two-dimensional code, the application of the mobile terminal starts counting down, and after reaching the specified valid time, the dynamic two-dimensional code becomes invalid and needs to be regenerated.

Preferably, said dynamic two-dimensional code acquisition step includes the following sub-steps:

The merchant terminal scans the dynamic two-dimensional code;

The merchant terminal uploads the dynamic QR code and merchant information to the background system;

The background system analyzes the received dynamic QR code to obtain payment information;

Obtain the transaction amount and card information of the payment card according to the payment information;

Request deduction processing from the payment card institution according to the merchant information, transaction amount, and card information of the payment card;

The background system returns the processing result of the payment institution to the merchant terminal.

Preferably, in the transaction information acquisition step, the identity verification performed by the cardholder is to call the fingerprint reader to read the fingerprint of the person who wants to open the application of the mobile terminal and obtain the fingerprint code, and the application of the mobile terminal verifies the fingerprint To determine whether it is the cardholder himself, if the verification is passed, proceed to the following steps, otherwise notify the background system to remind the cardholder that there is a risk.

Preferably, the dynamic two-dimensional code generation step includes the following sub-steps:

Combine payment amount, card information of payment card, and fingerprint code to generate payment information;

A dynamic two-dimensional code is generated according to the payment information.

Preferably, the sub-step of generating payment information includes the following steps:

Generate message authentication code MAC according to the combination to obtain payment information A;

Encrypting the payment information A to generate payment information B;

Combining the payment information B with specified information to form payment information C;

Generate a dynamic two-dimensional code according to the payment information C,

Wherein, while generating the dynamic two-dimensional code, the application of the mobile terminal starts counting down, and after reaching the specified valid time, the dynamic two-dimensional code becomes invalid and needs to be regenerated.

Preferably, said dynamic two-dimensional code acquisition step includes the following sub-steps:

The merchant terminal scans the dynamic two-dimensional code;

The merchant terminal uploads the merchant information and dynamic QR code to the background system;

The background system analyzes the received dynamic QR code to obtain the transaction amount, payment card information and fingerprint code;

The background system checks the fingerprint code, if it passes, proceed to the following steps, otherwise it will be directly rejected;

The background system requests the payment card institution to debit the payment based on the transaction amount, merchant information, and card information of the payment card;

The background system returns the processing result of the payment institution to the merchant terminal.

The payment system based on the two-dimensional code of the present invention is characterized in that it includes: a merchant terminal, an application of a mobile terminal, a background system,

Wherein, the merchant terminal is used to generate a static two-dimensional code containing transaction information, on the other hand, it is also used to read a dynamic two-dimensional code generated by the following mobile terminal and upload it to the background system to request payment authorization,

The application of the mobile terminal is used to read the static two-dimensional code and generate a dynamic two-dimensional code according to the static two-dimensional code and the card information of the payment card,

The background system is used for receiving the dynamic two-dimensional code from the merchant terminal and for analyzing the received dynamic two-dimensional code to request payment authorization from the payment institution.

Preferably, the transaction information includes at least transaction amount, merchant code, transaction time,

The dynamic two-dimensional code has a specified valid time.

Preferably, the mobile terminal is also equipped with a fingerprint recognizer for identifying fingerprints, wherein the fingerprint recognizer is used to read the fingerprint of the person who opens the mobile terminal application and obtain a fingerprint code, and the application of the mobile terminal is also used to Verify the pattern code to determine whether it is the cardholder. If the verification is passed, proceed to the following steps, otherwise notify the background system to remind the cardholder that there is a risk.

Preferably, the application of the mobile terminal is used for the mobile terminal to scan the static two-dimensional code and identify the transaction information contained in the static two-dimensional code, and combine the transaction information, the card information of the payment card, and the fingerprint code to generate the payment information, and generate a dynamic two-dimensional code according to the payment information.

The payment system based on the two-dimensional code of the present invention is characterized in that it includes: a merchant terminal, an application of a mobile terminal, a background system,

Wherein, the merchant terminal is used to generate transaction information, on the other hand, it is also used to read the dynamic two-dimensional code generated by the following mobile terminal and upload the read dynamic two-dimensional code together with the merchant information to the background system for request payment authorization,

The application of the mobile terminal is used to obtain the transaction amount and generate a dynamic two-dimensional code according to the obtained transaction amount and the card information of the payment card,

The background system is used to receive the dynamic two-dimensional code and merchant information from the merchant terminal and analyze the received dynamic two-dimensional code to obtain the transaction amount and the card information of the payment card. According to the card information of the payment card, the merchant information and the transaction The amount requests payment authorization from the payment institution.

Preferably, the dynamic two-dimensional code has a specified valid time.

Preferably, the mobile terminal is also equipped with a fingerprint recognizer for identifying fingerprints, wherein the fingerprint recognizer is used to read the fingerprint of the person who opens the mobile terminal application and obtain a fingerprint code, and the application of the mobile terminal is also used to Verify the fingerprint code to determine whether it is the cardholder. If the verification is passed, continue to the following steps, otherwise notify the background system to remind the cardholder that there is a risk.

Preferably, the application of the mobile terminal is also used to combine the payment amount, the card information of the payment card, and the fingerprint code to generate payment information, and generate a dynamic two-dimensional code according to the payment information.

In the present invention, after the application of the mobile terminal encrypts the payment information, it generates a dynamic two-dimensional code with a certain validity period, and the background system analyzes the dynamic two-dimensional code, and performs corresponding decryption and verification, and then transfers it to the bank or payment institution for payment. Debit operation. In the two-dimensional code-based payment method and the two-dimensional code-based payment system of the present invention, there is no need to rely on the mobile network, which can save mobile network fees for cardholders, and the generated dynamic two-dimensional code has high security and can It ensures the safety and reliability of the transaction process, and at the same time, it can also save the cardholder from the trouble of carrying the payment card or bank card with him.

Furthermore, in the present invention, a fingerprint identifier is further provided for identifying the user's fingerprint. Through fingerprint authentication, the cardholder's account can be prevented from being lost when the mobile terminal is stolen, and the security of the transaction is further improved.

Description of drawings

FIG. 1 is a schematic flowchart showing a two-dimensional code-based payment method according to a first embodiment of the present invention.

Fig. 2 is a schematic flow chart showing a payment method based on a two-dimensional code according to a second embodiment of the present invention.

Fig. 3 shows a specific flow chart of the mobile terminal side in the two-dimension code-based payment method of the first embodiment and the second embodiment of the present invention.

Fig. 4 shows a specific flowchart of the background system side in the two-dimension code-based payment method of the first embodiment and the second embodiment of the present invention.

Fig. 5 shows a specific flow chart of the mobile terminal side in the payment method based on the two-dimension code according to the third embodiment of the present invention.

Fig. 6 shows a specific flowchart of the background system side in the payment method based on the two-dimensional code of the third embodiment of the present invention.

detailed description

Introduced below are some of the various embodiments of the invention, intended to provide a basic understanding of the invention. It is not intended to identify key or critical elements of the invention or to delineate the scope of protection.

first embodiment

FIG. 1 is a schematic flowchart showing a two-dimensional code-based payment method according to a first embodiment of the present invention.

As shown in Figure 1, the payment method based on the two-dimensional code of the first embodiment of the present invention mainly includes the following processes:

(1) Merchant's cash register scans the product and generates transaction information: a QR code containing transaction amount, merchant code, transaction time and other information;

(2) The cardholder enters security information on the mobile terminal (actually an application installed on the mobile terminal), opens the application, and selects the payment card used for payment;

(3) The cardholder uses the mobile terminal to scan the QR code containing the transaction information generated by the merchant;

(4) The mobile terminal recognizes the QR code, and generates a dynamic QR code for payment according to the transaction information. If the payment card is a bank card, the dynamic two-dimensional code includes, for example: bank card number, CVN code, payment amount, merchant code, transaction time, terminal identification code, transaction serial number, message authentication code MAC and other information. Set a certain valid time for the dynamic QR code, and if it exceeds the valid time, it will be automatically invalidated;

(5) The cash register of the merchant scans the dynamic QR code, and uploads the dynamic QR code to the background system for processing;

(6) The background system returns the processing result.

second embodiment

In the first embodiment, the merchant side generates a static two-dimensional code containing information such as the transaction amount, and in the second embodiment, the cardholder directly inputs the transaction amount on the mobile terminal side.

Fig. 2 is a schematic flow chart showing a payment method based on a two-dimensional code according to a second embodiment of the present invention.

As shown in Figure 2, the payment method based on the two-dimensional code of the second embodiment of the present invention mainly includes the following processes:

(1) Merchant's cash register scans the goods and generates transaction information;

(2) After the cardholder has passed the identity verification on the mobile terminal, he opens the application installed on the mobile terminal and selects the payment card used for payment;

(3) The cardholder uses the mobile terminal to input the payment amount;

(4) The mobile terminal application generates a dynamic QR code for payment according to the payment amount. If the payment card is a bank card, the dynamic QR code: includes bank card number, CVN code, payment amount, transaction time, Terminal identification code, transaction serial number, security verification code and other information. The dynamic QR code has a certain valid time, and if it exceeds the valid time, it will be automatically invalidated;

(5) The cash register of the merchant scans the payment dynamic QR code, and uploads the payment dynamic QR code to the background system for background processing;

(6) The background system returns the processing result.

Fig. 3 shows a specific flow chart of the mobile terminal side in the two-dimension code-based payment method of the first embodiment and the second embodiment of the present invention.

As shown in Figure 3, the specific process on the mobile terminal side is as follows:

1. The cardholder opens the mobile terminal application and enters the user credentials. Here, the user credentials can be a combination of user name, gesture password, digital password, etc., and are stored locally through encryption.

2. The application verifies whether the user credentials are correct, if correct, continue, otherwise prompts an error. If there are multiple errors, the application will be locked, and the background system will be notified through the network or SMS. The background system reminds the cardholder of risks through the information reserved by the cardholder.

3. The application checks whether the system encryption key needs to be updated, and if the key expires, update the key. Wherein, the encryption key here is the key used to generate the message authentication code MAC in the following step 8.

4. The cardholder chooses the bank card used for payment. The bank card information is verified in advance and encrypted and stored locally, without the need for the user to enter the password again. After adding the bank card for a certain period of time, the user needs to re-enter the relevant information for secondary activation.

5. The camera of the cardholder's mobile terminal scans the transaction information provided by the merchant (in the case of the first embodiment) or directly enters the transaction amount (in the case of the second embodiment).

6. There are two ways in this step:

a) The application parses the scanned transaction information, and extracts merchant code, merchant name, transaction amount and other information (in the case of the first embodiment);

b) The user directly inputs the amount to be paid on the application (the situation in the second embodiment).

7. The application of the mobile terminal combines the payment information according to the step 5 information. For example, in the case of a bank card, the payment information includes: bank card number, CVN code, payment amount, transaction time, terminal identification code, transaction serial number, merchant number (if any) etc.

8. The application of the mobile terminal generates a message authentication code MAC according to the payment information combined in step 7. Here, it is necessary to select the information involved in the calculation of the message authentication code MAC according to the prior agreement, such as bank card number, CVN code, payment amount, transaction time, terminal identification code, transaction serial number, and merchant number. Use symmetric encryption algorithm or irreversible encryption algorithm, such as 3DES, AES, RC5, MD5, etc. Among them, the principle of message authentication code MAC to realize authentication is to use a public function and a key to generate a fixed-length value as an authentication identifier, and use this identifier to identify the integrity of the message. Using a key to generate a small data block of a fixed size, That is, MAC, and add it to the message, and then transmit it, and the receiver uses the key shared with the sender to perform authentication and so on.

9. According to the result of step 8, combine payment information A. Further, the information A is encrypted again, and the encrypted payment information B is obtained by using a safe asymmetric encryption algorithm, such as RSA. Then, the user number or other agreed information is further combined with the encrypted payment information B to form the final payment information C. The user ID here means that the background system will assign a user ID when the user registers, which is used by the background system to find the corresponding key. Other agreed information here includes mobile phone number, email address, a random string, etc.

10. Generate a dynamic QR code based on the final payment information C generated in step 9.

11. After the dynamic QR code is generated, the app will count down. When the countdown ends, the dynamic QR code will be invalid and needs to be regenerated.

Fig. 4 shows a specific flowchart of the background system side in the two-dimension code-based payment method of the first embodiment and the second embodiment of the present invention.

As shown in Figure 4, the specific flow of the background system side in the payment method based on the two-dimensional code of the first embodiment and the second embodiment of the present invention is as follows:

1. The background system analyzes the received merchant message, identifies the merchant information, and verifies the merchant information.

2. The background system analyzes the payment QR code, that is, the dynamic QR code mentioned above, and identifies the user number or other agreed information and encrypted payment information. Verify the user ID. If the status of the user ID is incorrect, it will directly return failure.

3. Identify the user based on the user number or other agreed information. Obtain the decryption key according to the user's settings, and then use the selected asymmetric encryption algorithm to decrypt the payment information to obtain the plaintext payment information and MAC.

4. Check whether the transaction time in the payment information is within the validity period, and if it expires, directly reject it.

5. According to the decrypted information and the selected encryption algorithm, verify the MAC. If the MAC verification fails, the direct response fails, and if it succeeds, continue.

6. Carry out deduction preprocessing. For example, according to the agreement with the bank or payment institution, organize the deduction request message, etc.

7. Go to the bank or payment institution for deduction processing, and return the processing result to the merchant according to the processing result of the bank or payment institution.

In the first embodiment and the second embodiment, after the application of the mobile terminal encrypts the payment information, a dynamic two-dimensional code with a certain validity period is generated, and the background system analyzes the dynamic two-dimensional code, and performs corresponding decryption and verification, and then Go to the bank or payment institution for the debit operation. In the payment method based on the two-dimensional code of the present invention, it does not rely on the mobile network, which can save the mobile network fee for the cardholder, and the generated dynamic two-dimensional code has high security, the transaction process is safe and reliable, and the transaction security can be guaranteed. Moreover, it can save the cardholder the trouble of carrying the payment card or bank card with him at the same time.

third embodiment

In the third embodiment, the fingerprint identification technology is added on the basis of the first embodiment or the second embodiment.

Fig. 5 shows a specific flow chart of the mobile terminal side in the payment method based on the two-dimension code according to the third embodiment of the present invention.

As shown in Figure 5, the specific flow of the mobile terminal side in the payment method based on the two-dimensional code of the third embodiment of the present invention is as follows:

1. The cardholder opens the application of the mobile terminal, and the application calls the fingerprint reader to read the user's fingerprint.

2. The application verifies the read fingerprint, if the verification fails, an error will be displayed.

3. The application checks whether the system encryption key needs to be updated, and if the key expires, update the key.

4. The cardholder selects the payment card for payment. The payment card information is verified in advance and encrypted and stored locally, so that the user does not need to enter the password again. After adding the payment card for a certain period of time, the user needs to re-enter the relevant information for secondary activation.

5. The cardholder scans the transaction information provided by the merchant through the camera of the mobile terminal or directly enters the transaction amount.

6. There are two ways in this step:

a) The application analyzes the scanned transaction information, and extracts information such as merchant code, merchant name, and transaction amount (based on the first embodiment);

b) The user directly inputs the amount to be paid on the application (based on the second embodiment).

7. The application combines payment information based on the information in steps 1 and 5. If the payment card is a bank, combine payment information such as: bank card number, CVN code, payment amount, transaction time, terminal identification code, transaction serial number , merchant number (if any), fingerprint code, etc.

8. The application generates a message authentication code MAC based on the payment information combined in step 7. Here, you need to select the information to participate in the calculation of MAC according to the prior agreement. If the payment card is a bank, such as bank card number, CVN code, payment amount, transaction time, terminal identification code, transaction serial number, merchant number, and fingerprint code. Use symmetric encryption algorithm or irreversible encryption algorithm, such as 3DES, AES, RC5, MD5, etc.

9. According to the result of step 8, combine it into payment information A. Encrypt information A, and use a secure asymmetric encryption algorithm, such as RSA, to obtain encrypted payment information B. The user number or other agreed information is combined with the encrypted payment information B to form the final payment information C.

10. Generate a dynamic QR code based on the final payment information C generated in step 9.

11. After the dynamic QR code is generated, the application will count down. When the countdown ends, the QR code will be invalid and needs to be regenerated.

Fig. 6 shows a specific flowchart of the background system side in the payment method based on the two-dimensional code of the third embodiment of the present invention.

As shown in FIG. 6, the specific flow of the background system side in the payment method based on the two-dimensional code of the third embodiment of the present invention is as follows:

1. The background system analyzes the received merchant message, identifies the merchant information, and verifies the merchant information.

2. The background system analyzes the dynamic QR code, and identifies the user number or other agreed information and encrypted payment information. Verify the user ID. If the status of the user ID is incorrect, it will directly return failure.

3. Identify the user based on the user number or other agreed information. Obtain the decryption key according to the user's settings, and then use the selected asymmetric encryption algorithm to decrypt the payment information to obtain the plaintext payment information and MAC.

4. Check whether the transaction time in the payment information is within the validity period, and if it expires, directly reject it.

5. According to the decrypted information and the selected encryption algorithm, verify the MAC. If the MAC verification fails, the direct response fails, and if it succeeds, continue.

6. Verify the fingerprint code. If the fingerprint verification fails, it will be rejected directly.

7. Perform deduction pre-processing. For example, according to the agreement with the bank or payment institution, organize the deduction request message, etc.

8. Go to the bank or payment institution for deduction processing, and return the mobile terminal processing result according to the processing result of the bank or payment institution.

9. The processing results include: payment result, authorization code, serial number, transaction time, card issuing bank number, card issuing bank, payment card number, transaction type, voucher number, reference number, payment amount, MAC, etc. The processing result is encrypted with the encryption method agreed with the merchant, such as 3DES, AES, RSA, etc. can be used. Generate a response QR code based on the processing result, which is convenient for merchants to scan.

10. The cash register of the merchant analyzes the response QR code, and ends the transaction according to the payment result.

In the third embodiment, a payment method using a fingerprint and a dynamic two-dimensional code is proposed, and the application of the mobile terminal is used to read the fingerprint information, and the fingerprint information and the payment information are combined to generate a dynamic two-dimensional code with a certain validity period. The payment background analyzes the dynamic QR code, decrypts and verifies it accordingly, and then transfers it to the bank or payment institution for deduction. In the third embodiment, the generated dynamic two-dimension code has uniqueness and high security, so the security of the transaction can be guaranteed. Moreover, in the third embodiment, the fingerprint of the cardholder is verified, which can further prevent the loss of the cardholder's funds caused by the theft of the mobile terminal, and improve the security of the transaction.

The following is a brief description of the payment system based on the two-dimensional code of the present invention.

The two-dimensional code-based payment system of the first aspect of the present invention includes: a merchant terminal, an application of a mobile terminal, and a background system.

Wherein, the merchant terminal is used to generate a static two-dimensional code containing transaction information. On the other hand, it is also used to read a dynamic two-dimensional code generated by the following mobile terminal and upload it to the background system to request payment authorization. The application of the mobile terminal is used to read the static two-dimensional code and generate a dynamic two-dimensional code according to the static two-dimensional code and based on the static two-dimensional code, and the background system is used to receive the dynamic two-dimensional code from the merchant terminal. The QR code is used to analyze the received dynamic QR code to request payment authorization from the payment institution.

Preferably, the transaction information includes at least transaction amount, merchant code, and transaction time, and the dynamic two-dimensional code has a specified valid time.

Preferably, the mobile terminal is also equipped with a fingerprint recognizer for identifying fingerprints, wherein the fingerprint recognizer is used to read the fingerprint of the person who opens the mobile terminal application and obtain a fingerprint code, and the application of the mobile terminal is also used to Verify the pattern code to determine whether it is the cardholder. If the verification is passed, proceed to the following steps, otherwise notify the background system to remind the cardholder that there is a risk.

Preferably, the application of the mobile terminal is used for the mobile terminal to scan the static two-dimensional code and identify the transaction information contained in the static two-dimensional code, and combine the transaction information, the card information of the payment card, and the fingerprint code to generate the payment information, and generate a dynamic two-dimensional code according to the payment information.

The two-dimensional code payment system of the second aspect of the present invention is characterized in that it includes: a merchant terminal, an application of a mobile terminal, and a background system. Wherein, the merchant terminal is used to generate transaction information, on the other hand, it is also used to read the dynamic two-dimensional code generated by the following mobile terminal and upload the read dynamic two-dimensional code together with the merchant information to the background system To request payment authorization, the application of the mobile terminal is used to obtain the transaction amount and generate a dynamic two-dimensional code according to the obtained transaction amount and the card information of the payment card, and the background system is used to receive the dynamic two-dimensional code from the merchant terminal and merchant information and analyze the received dynamic QR code to obtain the transaction amount and card information of the payment card, and request payment authorization from the payment institution according to the card information of the payment card, merchant information and transaction amount.

Preferably, the dynamic two-dimensional code has a specified valid time.

Preferably, the mobile terminal is also equipped with a fingerprint recognizer for identifying fingerprints, wherein the fingerprint recognizer is used to read the fingerprint of the person who opens the mobile terminal application and obtain a fingerprint code, and the application of the mobile terminal is also used to Verify the fingerprint code to determine whether it is the cardholder. If the verification is passed, continue to the following steps, otherwise notify the background system to remind the cardholder that there is a risk.

Preferably, the application of the mobile terminal is also used to combine the payment amount, the card information of the payment card, and the fingerprint code to generate payment information, and generate a dynamic two-dimensional code according to the payment information.

The above example mainly illustrates the payment method and payment system based on the two-dimensional code of the present invention. Although only some specific embodiments of the present invention have been described, those skilled in the art should understand that the present invention can be implemented in many other forms without departing from the spirit and scope thereof. The examples and embodiments shown are therefore to be regarded as illustrative and not restrictive, and the invention may cover various modifications without departing from the spirit and scope of the invention as defined in the appended claims with replace.

Claims (29)

1. the method for payment based on Quick Response Code, is characterized in that, comprises the steps:

Transaction Information generates step, and merchant tenninal generates the static Quick Response Code that comprises Transaction Information;

Transaction Information obtaining step, holder selects the Payment Card that is used for paying in the application of mobile terminal, scans described static Quick Response Code to obtain Transaction Information;

Dynamic Two-dimensional code generates step, and static Quick Response Code and the card information based on described static Quick Response Code and Payment Card generate Dynamic Two-dimensional code described in the application identification of mobile terminal;

Dynamic Two-dimensional code obtaining step, merchant tenninal scans described Dynamic Two-dimensional code and uploads to background system with to payment mechanism request payment authorization.

2. the method for payment based on Quick Response Code as claimed in claim 1, is characterized in that,

Described Transaction Information at least comprises dealing money, trade company's code, exchange hour,

Described Dynamic Two-dimensional code possesses the effective time of regulation.

3. the method for payment based on Quick Response Code as claimed in claim 2, is characterized in that,

Described Transaction Information obtaining step comprises following sub-step:

Holder opens the application of mobile terminal and carries out authentication, if by authentication, continues following steps, otherwise notice background system exists risk with prompting holder;

Holder selects from the Payment Card of the application binding of mobile terminal selecting the Payment Card that will pay;

The described static Quick Response Code that holder is scanned merchant tenninal generation obtains Transaction Information.

4. the method for payment based on Quick Response Code as claimed in claim 3, is characterized in that,

Described Dynamic Two-dimensional code generates step and comprises following sub-step:

Static Quick Response Code and identify the Transaction Information comprising in described static Quick Response Code described in mobile scanning terminal;

The card information that combines described Transaction Information and Payment Card generates payment information;

Generate Dynamic Two-dimensional code according to described payment information.

5. the method for payment based on Quick Response Code as claimed in claim 4, is characterized in that,

Described Dynamic Two-dimensional code generates step and comprises following sub-step:

Static Quick Response Code and identify the Transaction Information comprising in described static Quick Response Code described in mobile scanning terminal;

Card information and the finger-print codes of combination Transaction Information, Payment Card generate payment information;

Generate Dynamic Two-dimensional code according to described payment information.

6. the method for payment based on Quick Response Code as claimed in claim 5, is characterized in that,

The sub-step that generates payment information comprises the steps:

According to the card information of Transaction Information, Payment Card and finger-print codes combination producing message authentication code MAC to obtain payment information A;

Described payment information A is encrypted and generates payment information B;

Described payment information B and provisioning information are combined to form to payment information C;

Generate Dynamic Two-dimensional code according to described payment information C,

Wherein, in generating Dynamic Two-dimensional code, the application of mobile terminal starts to carry out countdown, reaches after the effective time of described regulation, and this Dynamic Two-dimensional code cancels, and need to regenerate.

7. the method for payment based on Quick Response Code as claimed in claim 6, is characterized in that,

Described Dynamic Two-dimensional code obtaining step comprises following sub-step:

Merchant tenninal scans described Dynamic Two-dimensional code;

Dynamic Two-dimensional code is uploaded to background system by merchant tenninal;

Background system is resolved and is obtained payment information the Dynamic Two-dimensional code of receiving;

Ask to withhold processing according to the card information of payment information acquisition Transaction Information and Payment Card and the card information based on Transaction Information and Payment Card to Payment Card mechanism;

The result of payment mechanism is returned to merchant tenninal by background system.

8. the method for payment based on Quick Response Code as claimed in claim 3, is characterized in that,

In described Transaction Information obtaining step, the authentication that holder carries out is to call fingerprint knowledge device read the people's who opens mobile terminal application fingerprint and obtain finger-print codes, application by mobile terminal verifies that to fingerprint judging whether is holder, continue if the verification passes following steps, otherwise there is risk with prompting holder in notice background system.

9. the method for payment based on Quick Response Code as claimed in claim 8, is characterized in that,

Described Dynamic Two-dimensional code generates step and comprises following sub-step:

Static Quick Response Code and identify the Transaction Information comprising in described static Quick Response Code described in mobile scanning terminal;

Card information and the finger-print codes of combination Transaction Information, Payment Card generate payment information;

Generate Dynamic Two-dimensional code according to described payment information.

10. the method for payment based on Quick Response Code as claimed in claim 9, is characterized in that,

The sub-step that generates payment information comprises the steps:

Generate message authentication code MAC to obtain payment information A according to the card information of Transaction Information, Payment Card and finger-print codes;

Described payment information A is encrypted and generates payment information B;

Described payment information B and provisioning information are combined to form to payment information C;

Generate Dynamic Two-dimensional code according to described payment information C,

Wherein, in generating Dynamic Two-dimensional code, the application of mobile terminal starts to carry out countdown, reaches after the effective time of described regulation, and this Dynamic Two-dimensional code cancels, and need to regenerate.

11. methods of payment based on Quick Response Code as claimed in claim 10, is characterized in that,

Described Dynamic Two-dimensional code obtaining step comprises following sub-step:

Merchant tenninal scans described Dynamic Two-dimensional code;

Dynamic Two-dimensional code is uploaded to background system by merchant tenninal;

Background system is resolved and is obtained payment information the Dynamic Two-dimensional code of receiving;

Obtain Transaction Information, the card information of Payment Card, finger-print codes according to payment information;

Background system carries out verification to finger-print codes, if by, continue following step, otherwise directly refuse;

The card information of background system based on Transaction Information and Payment Card asks to withhold processing to Payment Card mechanism;

The result of payment mechanism is returned to merchant tenninal by background system.

12. 1 kinds of methods of payment based on Quick Response Code, is characterized in that, comprise the steps:

Transaction Information generates step, and merchant tenninal generates Transaction Information;

Transaction Information obtaining step, holder selects the Payment Card that is used for paying in the application of mobile terminal, and inputs payment in the application of mobile terminal;

Dynamic Two-dimensional code generates step, and the application of mobile terminal generates Dynamic Two-dimensional code according to the card information of the payment of input and Payment Card;

Dynamic Two-dimensional code obtaining step, merchant tenninal scans described Dynamic Two-dimensional code and uploads to background system with payment mechanism request payment authorization.

13. methods of payment based on Quick Response Code as claimed in claim 12, is characterized in that,

Described Dynamic Two-dimensional code possesses the effective time of regulation.

14. methods of payment based on Quick Response Code as claimed in claim 13, is characterized in that,

Described Transaction Information obtaining step comprises following sub-step:

Holder opens the application of mobile terminal and carries out authentication, if by authentication, continues following steps, otherwise notice background system exists risk with prompting holder;

Holder selects from the Payment Card of the application binding of mobile terminal selecting the Payment Card that will pay;

Holder inputs payment in the application of mobile terminal.

15. methods of payment based on Quick Response Code as claimed in claim 14, is characterized in that,

Described Dynamic Two-dimensional code generates step and comprises following sub-step:

The payment of the application of mobile terminal based on input, the card information of the combined payment amount of money and Payment Card generates payment information;

Generate Dynamic Two-dimensional code according to described payment information.

16. methods of payment based on Quick Response Code as claimed in claim 15, is characterized in that,

The son that the card information of the combined payment amount of money and Payment Card generates payment information comprises the steps:

By the card information combination producing message authentication code MAC of payment and Payment Card to obtain payment information A;

Described payment information A is encrypted and generates payment information B;

Described payment information B and provisioning information are combined to form to payment information C;

Generate Dynamic Two-dimensional code according to described payment information C,

Wherein, in generating Dynamic Two-dimensional code, the application of mobile terminal starts to carry out countdown, reaches after the effective time of described regulation, and this Dynamic Two-dimensional code cancels, and need to regenerate.

17. methods of payment based on Quick Response Code as claimed in claim 16, is characterized in that,

Described Dynamic Two-dimensional code obtaining step comprises following sub-step:

Merchant tenninal scans described Dynamic Two-dimensional code;

Dynamic Two-dimensional code and merchant information are uploaded to background system by merchant tenninal;

Background system is resolved and is obtained payment information the Dynamic Two-dimensional code of receiving;

Obtain the card information of dealing money and Payment Card according to payment information;

Ask to withhold processing according to the card information of merchant information, dealing money, Payment Card to Payment Card mechanism;

The result of payment mechanism is returned to merchant tenninal by background system.

18. methods of payment based on Quick Response Code as claimed in claim 14, is characterized in that,

In described Transaction Information obtaining step, the authentication that holder carries out be call fingerprint know device read the application that will open mobile terminal people fingerprint and obtain finger-print codes, application by mobile terminal verifies to determine whether holder to fingerprint, continue if the verification passes following steps, otherwise there is risk with prompting holder in notice background system.

19. methods of payment based on Quick Response Code as claimed in claim 18, is characterized in that,

Described Dynamic Two-dimensional code generates step and comprises following sub-step:

The card information of the combined payment amount of money, Payment Card and finger-print codes generate payment information;

Generate Dynamic Two-dimensional code according to described payment information.

20. methods of payment based on Quick Response Code as claimed in claim 19, is characterized in that,

The sub-step that generates payment information comprises the steps:

According to combination producing message authentication code MAC to obtain payment information A;

Described payment information A is encrypted and generates payment information B;

Described payment information B and provisioning information are combined to form to payment information C;

Generate Dynamic Two-dimensional code according to described payment information C,

Wherein, in generating Dynamic Two-dimensional code, the application of mobile terminal starts to carry out countdown, reaches after the effective time of described regulation, and this Dynamic Two-dimensional code cancels, and need to regenerate.

21. methods of payment based on Quick Response Code as claimed in claim 20, is characterized in that,

Described Dynamic Two-dimensional code obtaining step comprises following sub-step:

Merchant tenninal scans described Dynamic Two-dimensional code;

Merchant information and Dynamic Two-dimensional code are uploaded to background system by merchant tenninal;

Background system is resolved the card information and the finger-print codes that obtain dealing money, Payment Card to the Dynamic Two-dimensional code of receiving;

Background system carries out verification to finger-print codes, if by, continue following step, otherwise directly refuse;

The card information of background system based on dealing money, merchant information and Payment Card asks to withhold processing to Payment Card mechanism;

The result of payment mechanism is returned to merchant tenninal by background system.

22. 1 kinds of payment systems based on Quick Response Code, is characterized in that, comprising: the application of merchant tenninal, mobile terminal, background system,

Wherein, described merchant tenninal is used for generating the static Quick Response Code that comprises Transaction Information, on the other hand, and also for reading the Dynamic Two-dimensional code being generated by following mobile terminal and uploading to background system with request payment authorization,

The application of described mobile terminal is used for reading described static Quick Response Code and generates Dynamic Two-dimensional code according to the card information of described static Quick Response Code and Payment Card,

Described background system is for accepting Dynamic Two-dimensional code and for resolving the Dynamic Two-dimensional code that receives with to payment mechanism request payment authorization from described merchant tenninal.

23. payment systems based on Quick Response Code as claimed in claim 22, is characterized in that,

Described Transaction Information at least comprises dealing money, trade company's code, exchange hour,

Described Dynamic Two-dimensional code possesses the effective time of regulation.

24. payment systems based on Quick Response Code as claimed in claim 23, is characterized in that,

Described mobile terminal also possesses the Fingerprint Identification Unit for identifying fingerprint, and wherein, described Fingerprint Identification Unit is used for reading the people's who opens mobile terminal application fingerprint and obtains finger-print codes,

The application of described mobile terminal also, for line coding is verified to judging whether is holder, continues following steps if the verification passes, otherwise notice background system exists risk with prompting holder.

25. payment systems based on Quick Response Code as claimed in claim 24, is characterized in that,

The application of described mobile terminal is for static Quick Response Code described in mobile scanning terminal and identify the Transaction Information that described static Quick Response Code comprises, and combine the card information of Transaction Information, Payment Card and finger-print codes generates payment information, generate Dynamic Two-dimensional code according to described payment information.

26. 1 kinds of payment systems based on Quick Response Code, is characterized in that, comprising: the application of merchant tenninal, mobile terminal, background system,

Wherein, described merchant tenninal is used for generating Transaction Information, on the other hand, and also for reading the Dynamic Two-dimensional code being generated by following mobile terminal and the Dynamic Two-dimensional code reading being uploaded to background system with request payment authorization together with merchant information,

The application of described mobile terminal is used for obtaining dealing money and generates Dynamic Two-dimensional code according to the card information of the dealing money obtaining and Payment Card,

Described background system is for accepting Dynamic Two-dimensional code that Dynamic Two-dimensional code and merchant information and parsing receive to obtain the card information of dealing money and Payment Card from described merchant tenninal, according to the card information of Payment Card, merchant information and dealing money to payment mechanism request payment authorization.

27. payment systems based on Quick Response Code as claimed in claim 26, is characterized in that,

Described Dynamic Two-dimensional code possesses the effective time of regulation.

28. payment systems based on Quick Response Code as claimed in claim 27, is characterized in that,

Described mobile terminal also possesses the Fingerprint Identification Unit for identifying fingerprint, and wherein, described Fingerprint Identification Unit is used for reading the people's who opens mobile terminal application fingerprint and obtains finger-print codes,

The application of described mobile terminal also, for finger-print codes being verified to judging whether is holder, continues following steps if the verification passes, otherwise notice background system exists risk with prompting holder.

29. payment systems based on Quick Response Code as claimed in claim 28, is characterized in that,

The application of described mobile terminal is also for the card information of payment, Payment Card and finger-print codes are carried out to combination producing payment information, and generates Dynamic Two-dimensional code according to described payment information.