CN105590206B - Method for verifying terminal authenticity in electronic cash transaction - Google Patents

Abstract

The invention relates to a method for verifying the authenticity of a terminal in an electronic cash transaction, which comprises the following steps: the terminal initiates an electronic cash transaction with the payment card, and sends terminal authenticity information to the payment card; the payment card receives and records terminal authenticity information and transaction information of electronic cash transaction; the payment card sends transaction information and terminal authenticity information to a card issuing institution; the card issuing mechanism forwards the terminal authenticity information to the acquiring mechanism, and the acquiring mechanism verifies the terminal authenticity information. The method and the system effectively prevent electronic cash from being stolen and brushed, protect the property safety of users, and provide great flexibility and expandability for further upgrading of terminal authentication in the future.

Description

Method for verifying terminal authenticity in electronic cash transaction

technical field

The invention relates to the technical field of electronic commerce, and more particularly, to a method for verifying the authenticity of a terminal in an electronic cash transaction.

Background technique

At present, payment cards in the form of financial IC cards have been widely used, and people generally use payment cards to conduct transactions in various merchants, which makes people's transactions safer and life more convenient. The storage unit in the payment card records the electronic cash in the user's account, and the electronic cash exists in the form of digital information and circulates through the Internet. The simplest form of electronic cash transaction is the data interaction between three subjects (merchant, user, bank).

In the field of e-commerce, the security of electronic cash held by users is of paramount importance and, in any case, a priority. In order to prevent the fake terminal from initiating electronic cash transactions and stealing the user's electronic cash, the existing solutions mainly carry out two-way authentication between the payment card and the terminal (for example, POS machine), such as the enhanced electronic cash application specification of China UnionPay used this method. However, this scheme has the following shortcomings:

1. Increase transaction time: The payment card needs to carry out certificate transmission with the terminal and the corresponding data exchange process of encryption/decryption and electronic signature verification, which will undoubtedly increase the processing time. For offline transactions that focus on transaction time, It will significantly reduce the user experience.

2. Insufficient flexibility: In this scheme, the authentication method between the payment card and the terminal needs to be fixed. Once the terminal adopts a different authentication method or adds a new authentication method for other terminals due to technological progress, the payment card will need to be authenticated. Make corresponding software changes, which is very inconvenient for issued cards.

Therefore, those skilled in the art expect to obtain a safe and efficient method for verifying the authenticity of a terminal in an electronic cash transaction.

SUMMARY OF THE INVENTION

The purpose of the present invention is to provide a safe and efficient method for verifying the authenticity of a terminal in an electronic cash transaction.

To achieve the above object, the present invention provides a technical scheme as follows:

A method for verifying the authenticity of a terminal in an electronic cash transaction, wherein the terminal is arranged in a merchant by an acquirer, and the acquirer sets the terminal authenticity information in the terminal, and the method includes the following steps: between the terminal initiating and the payment card and the terminal sends the terminal authenticity information to the payment card; the payment card receives and records the terminal authenticity information and the transaction information of the electronic cash transaction; the payment card sends the transaction information and the terminal authenticity information to the card issuer; the card issuer The terminal authenticity information is forwarded to the acquirer, and the acquirer verifies the terminal authenticity information.

Preferably, after step d), the following steps are further included: e), the acquiring agency determines whether the terminal is a pseudo terminal based on the authenticity information of the terminal, and returns the judgment result to the card issuing agency; f), if the judgment result indicates that the terminal is a pseudo terminal At the terminal, the card issuer initiates the cancellation of the electronic cash transaction.

Preferably, unique transaction information is generated for each electronic cash transaction.

Preferably, the payment card records at least one piece of transaction information and at least one piece of terminal authenticity information, wherein each terminal authenticity information corresponds to at least one piece of transaction information.

The method for verifying the authenticity of the terminal in the electronic cash transaction provided by the present invention can effectively prevent the electronic cash from being stolen, protect the property safety of the user, and enhance the user experience of the electronic cash transaction. There are fewer changes to the transaction process, and the time required for its transaction is also significantly reduced. In addition, this method provides great flexibility and scalability for further terminal authentication upgrades in the future.

Description of drawings

FIG. 1 is a schematic flowchart of a method for verifying the authenticity of a terminal in an electronic cash transaction provided by the first embodiment of the present invention.

FIG. 2 is a schematic diagram of the data interaction process between the payment card, the issuer and the acquirer.

Detailed ways

It should be noted that, in each embodiment of the present invention, the terminal (for example, a POS machine) is arranged in the merchant by the acquirer, the acquirer sets the terminal authenticity information in the terminal, the payment card is issued by the card issuer to the user, and the payment The card has a storage unit in which the user's account information (including at least electronic cash balance information) is recorded, and the user uses the payment card to conduct electronic cash transactions at merchants. The acquirer and the card issuer can be the same bank or different banks.

As shown in Figure 1, the present invention provides a method for verifying the authenticity of a terminal in an electronic cash transaction, which includes the following steps:

Step S10, the terminal initiates an electronic cash transaction with the payment card, and the terminal sends the terminal authenticity information to the payment card.

Specifically, an application program that provides an electronic cash transaction service is first activated on the terminal, and then an electronic cash transaction can be performed with the payment card. The terminal may send the terminal authenticity information to the payment card immediately after activation of the application, or after activation, during an electronic cash transaction, eg together with the transaction authorization amount information.

Preferably, the terminal sends the transaction authorization amount information together with the terminal authenticity information to the payment card, thereby reducing the number of data interactions in the electronic cash transaction process.

Acquirers set unique terminal authenticity information for each terminal to distinguish them from each other and prevent counterfeiting of terminals.

The terminal authenticity information may include, for example, information such as the identification of the acquirer, the identification of the terminal, and the identification of the merchant.

Further, the acquiring agency protects the terminal authenticity information to ensure its authenticity, confidentiality, integrity and unforgeability. The specific protection method is determined by the acquirer, for example, a random number, encryption of the payment card key and the key of the card issuer, electronic signature and other protection methods can be adopted.

Step S20, the payment card receives and records the authenticity information of the terminal and the transaction information of the electronic cash transaction.

In this step, the payment card receives the terminal authenticity information and the transaction information of this electronic cash transaction from the terminal, and records both in the storage unit of the payment card.

If the payment card finds that it has not received the terminal authenticity information, it can reject the transaction.

The transaction information of the electronic cash transaction may include, for example, transaction authorization amount information, transaction time, transaction serial number, and the like.

Wherein, each electronic cash transaction generates unique transaction information, and each transaction information corresponds to a piece of terminal authenticity information.

After multiple electronic cash transactions, the payment card held by the user records multiple pieces of transaction information and at least one piece of terminal authenticity information, wherein each terminal authenticity information corresponds to at least one piece of transaction information.

It can be understood that in the storage unit of the payment card, the recorded terminal authenticity information and transaction information may have a one-to-many relationship, that is, the terminal authenticity information corresponding to multiple transaction information is the same, indicating that the user is in the same merchant. It may also be a one-to-one relationship, that is, a certain transaction information corresponds to a unique piece of terminal authenticity information, indicating that the user has only made one transaction in a certain merchant.

Step S30, the payment card sends transaction information and terminal authenticity information to the card issuer.

This step occurs when the user connects the payment card to the Internet, for example when connecting to the Internet to recharge electronic cash. Figure 2 shows the data interaction process between the payment card, the issuer and the acquirer.

Preferably, the payment card will send all unprocessed terminal real information records to the card issuer, and the card issuer will process each transaction separately, so as to continue the circulation of electronic cash according to the real transaction situation.

The "terminal authenticity information record" referred to herein includes terminal authenticity information, transaction information, and the corresponding relationship between the two.

Step S40, the card issuer forwards the terminal authenticity information to the acquirer, and the acquirer verifies the terminal authenticity information.

The terminal authenticity information is recorded with the identification of the acquirer, and the card issuer forwards the terminal authenticity information to the acquirer according to the identification. In order to improve efficiency, the card issuer can set up a forwarding center to transmit many pieces of terminal authenticity information in a centralized and unified manner.

Specifically, the card issuer and the acquirer may be different banks, or different business departments of the same bank. As mentioned above, the terminals are arranged by the acquirer, and the acquirer sets unique terminal authenticity information for each terminal and protects it; therefore, the acquirer can verify the terminal authenticity information to determine that the electronic The authenticity of the terminal for cash transactions.

According to a further improved embodiment of the present invention, after step S40, the following two steps may also be included:

The acquirer determines whether the terminal is a pseudo terminal based on the authenticity information of the terminal, and returns the determination result to the card issuer;

If the judgment result indicates that the terminal is a pseudo terminal, the card issuer initiates the cancellation of the electronic cash transaction.

Specifically, if the judgment result indicates that the terminal is a real terminal, no special treatment is required, and the electronic cash flows according to the normal transaction mode; if the judgment result indicates that the terminal is a pseudo terminal, the acquirer initiates a cancellation action, that is, the card issuer is notified to restore the For the electronic cash amount on the payment card, for example, adopt the electronic cash recharge process, or set up a dedicated electronic cash amount recovery process; after the recovery is completed, the card issuer clears all records on the payment card involving pseudo-terminal and transaction information, and also The user can be reminded in this regard, safety measures can be taken, etc.

The method for verifying the authenticity of the terminal in the electronic cash transaction provided by the above embodiments can effectively prevent the electronic cash from being stolen, protect the property safety of the user, and enhance the user experience of the electronic cash transaction. The transaction process changes less, and the time required for the transaction is also significantly reduced. In addition, this method provides great flexibility and scalability for further terminal authentication upgrades in the future, and is suitable for promotion in this field.

The above description is only for the preferred embodiments of the present invention, and is not intended to limit the protection scope of the present invention. Based on the idea of the present invention, those skilled in the art can make various modification designs without departing from the idea of the present invention and the accompanying claims.

Claims (5)

1. A method of verifying terminal authenticity in an electronic cash transaction, wherein the terminal is disposed within a merchant by an acquirer that sets terminal authenticity information within the terminal, the method comprising the steps of:

a) the terminal initiates an electronic cash transaction with a payment card, and the terminal sends the terminal authenticity information to the payment card;

b) the payment card receives and records the terminal authenticity information and the transaction information of the electronic cash transaction;

c) the payment card sends the transaction information and the terminal authenticity information to a card issuing institution;

d) the card sending mechanism forwards the terminal authenticity information to the acquiring mechanism, and the acquiring mechanism verifies the terminal authenticity information;

wherein the terminal authenticity information comprises the acquirer, the terminal and the merchant identifier;

wherein the terminal is configured to send the transaction information to the payment card together with the terminal authenticity information.

2. The method of claim 1, further comprising, after said step d), the steps of:

e) the acquiring mechanism judges whether the terminal is a fake terminal or not based on the terminal authenticity information and returns a judgment result to the card issuing mechanism;

f) and if the judgment result indicates that the terminal is a fake terminal, the card issuing institution initiates a cancelling action of the electronic cash transaction.

3. The method according to claim 1, wherein the acquirer protects the terminal authenticity information.

4. The method of claim 1, wherein each of said electronic cash transactions generates unique said transaction information.

5. The method of claim 1, wherein said payment card records at least one piece of said transaction information and at least one piece of said terminal authenticity information, wherein each said terminal authenticity information corresponds to at least one said transaction information.

Images