CN105787718A - Business logistics safe payment method based on cash on delivery - Google Patents

Abstract

The invention relates to a secure payment method for business logistics based on cash on delivery. After the dispatcher's hand-held POS terminal is connected to the recipient's mobile smart terminal, the hand-held POS terminal and the mobile smart terminal both send their current location, current location noise and air flow respectively. The humidity is sent to the certification agency, and the certification agency judges that the two parties to the payment are located in a safe transaction space distance, and the difference between the current location noise and the air humidity of the two parties are both within the safe range, and send the transaction key to the payment party of the cash on delivery. The mobile smart The terminal judges that the current payment password is entered by its legal owner according to the pressure database of the left and right hands of each button it has built, and transfers the fee to the account of the logistics company; during the cash-on-delivery transaction process, the tax supervision system monitors the completion of the transaction order in real time The situation, and after the transaction is successful, the banking system will deduct the business tax of the merchant and the logistics company on its behalf.

Description

Safe payment method for business logistics based on cash on delivery

technical field

The invention relates to the field of commercial logistics, in particular to a cash-on-delivery-based secure payment method for commercial logistics.

Background technique

In recent years, with the rapid development of e-commerce, more and more consumers like to shop through online platforms to choose their favorite products. After the selection of goods is completed, the network platform will provide online payment or cash on delivery to pay for the selected goods. Among them, in order to avoid the inconsistency between the actual product and the description of the selected product, the consumer will tend to choose the method of cash on delivery to pay for the purchased product. The cash on delivery method means that after the consumer submits the basic order information, the logistics company picks up the goods at the merchant and then delivers the goods to the consumer. After the consumer is satisfied, he pays for the goods by cash or POS card. As well as the express fee of the logistics company, the two fees paid by the consumer are temporarily saved by the logistics company, and the cost of the goods is transferred to the merchant within a certain period of time according to the schedule, so as to complete the entire process of cash on delivery.

There are still some problems in the cash-on-delivery payment that the existing logistics companies replace merchants' charges: First, there will be payment security problems when consumers use POS to swipe their cards. For example, during the cash-on-delivery payment process, transaction information is easily Malicious third-party cracking will bring economic losses to consumers or logistics companies; secondly, the existing cash on delivery method lacks more accurate tax supervision for merchants and logistics companies, resulting in tax evasion by some merchants or logistics companies, reducing the State tax revenue.

Contents of the invention

The technical problem to be solved by the present invention is to provide a cash-on-delivery system that can conveniently and safely complete the cash on delivery of goods and ensure the security of the cash-on-delivery transaction, and can effectively supervise the taxation of merchants and logistics companies on online shopping platforms. A safe payment method for business logistics based on cash on delivery.

The technical solution adopted by the present invention to solve the above-mentioned technical problems is: a cash-on-delivery-based commercial logistics security payment method, which is used for merchant terminals, online shopping platforms, consumer terminals, logistics company management platforms, certification agencies, banking systems and tax supervision The commercial logistics payment transaction system composed of the system is characterized in that it includes the following steps in sequence:

(1) Merchants and logistics companies register their respective collection accounts in the banking system, register their respective tax identification numbers in the tax supervision system, and register their respective tax identification numbers on the online shopping platform;

(2) The management platform of the logistics company records all handheld POS terminals with NFC functions, establishes communication connections between each handheld POS terminal and the banking system and certification agency, and uses the handheld POS terminal to send certification requests to the banking system and certification authority respectively. Institutions and banking systems generate their public keys for communication with handheld POS terminals, financial authentication certificate sets for handheld POS terminals, and send financial authentication certificate sets and public keys to handheld POS terminals; certification agencies generate public keys for communication with handheld POS terminals , the set of credit authentication certificates of the handheld POS terminal, and send the set of credit authentication certificates and the public key to the handheld POS terminal; where:

Described hand-held POS terminal is marked as POS, and bank system is marked as BANK, and certification agency is marked as TSM, and the financial authentication certificate set mark of hand-held POS terminal is Cert(BANK _POS ), and the public key of bank system and hand-held POS terminal is marked as k( POS, BANK); the credit authentication certificate set of the handheld POS terminal is marked as Cert(TSM _POS ), and the certification authority and the public key of the handheld POS terminal are marked as k(POS,TSM); where:

Cert(TSM _POS )＝{Cert ¹ (TSM _POS ),Cert ² (TSM _POS ),...,Cert ^m (TSM _POS )};

Cert(BANK _POS )＝{Cert ¹ (BANK _POS ),Cert ² (BANK _POS ),...,Cert ^m (BANK _POS )}; m≥3;

Among them, m represents the number of financial authentication certificates and credit authentication certificates available for handheld POS terminals, and the credit authentication certificates of handheld POS terminals have a one-to-one correspondence with their financial authentication certificates; each credit authentication certificate in the credit authentication certificate set of handheld POS terminals and Each financial authentication certificate in its financial authentication certificate set follows the traversal usage rules and is limited to one use;

(3) The merchant registers the tax identification number on the online shopping platform, and publishes product information on the online shopping platform through the merchant terminal, and the consumer uses the consumer terminal to select the target product on the online shopping platform, and registers the recipient's contact information for the purchased product , and choose cash on delivery, after the online shopping platform generates and saves the transaction order for the purchased goods, the online shopping platform sends the commodity transaction order to be paid to the tax supervision system for storage; the transaction order includes the transaction order number, order Generation time, target commodity name and price, merchant contact information and merchant tax identification number of the target commodity, recipient information and cash on delivery method;

(4) The online shopping platform sends the pick-up notice and transaction order to the logistics company management platform. After the logistics company management platform saves the transaction order, it notifies the logistics company’s picker to pick up the goods at the merchant according to the transaction order information, and according to the information in the transaction order Recipient information, the logistics company management platform will notify the logistics company dispatcher to carry the registered handheld POS terminal to deliver the goods according to the recipient information in the transaction order;

(5) The recipient uses its mobile smart terminal with NFC function to send authentication requests to the banking system and the certification agency respectively, and the banking system generates its public key for communication with the mobile smart terminal and the set of financial authentication certificates of the mobile smart terminal, and sends The set of financial authentication certificates and the public key are given to the mobile smart terminal; the certification authority generates its public key for communication with the mobile smart terminal, the set of credit authentication certificates of the mobile smart terminal, and sends the set of credit authentication certificates and the public key to the mobile smart terminal; where:

The mobile smart terminal is marked as Mobile, the financial authentication certificate set of the mobile smart terminal is marked as Cert (BANK _Mobile ), and the public key of the banking system and the mobile smart terminal is marked as k (Mobile, BANK); the credit authentication certificate of the mobile smart terminal The set is marked as Cert(TSM _Mobile ), and the public key of the certification authority and the mobile smart terminal is marked as k(Mobile,TSM); where:

Cert(TSM _Mobile )＝{Cert ¹ (TSM _Mobile ),Cert ² (TSM _Mobile ),...,Cert ^m (TSM _Mobile )};

Cert(BANK _Mobile )＝{Cert ¹ (BANK _Mobile ),Cert ² (BANK _Mobile ),...,Cert ^m (BANK _Mobile )}; m≥3; Among them, the credit authentication certificate of the smart mobile terminal and its financial authentication certificate It is a one-to-one correspondence relationship; each credit authentication certificate in the mobile smart terminal credit authentication certificate set and each financial authentication certificate in its financial authentication certificate set follow the traversal usage rules and are limited to one use;

(6) The mobile smart terminal collects in real time the value and direction of pressing pressure of each button on the keyboard by its legal owner during the payment operation during the preset time period, and constructs that the legal owner of the mobile smart terminal uses the left hand during the payment operation. and the right hand are respectively for the left hand press pressure database and the right hand press pressure database of each button, and calculate the variance of each button left hand press pressure database and right hand press pressure database respectively; Wherein:

The i-th button on the mobile smart terminal is marked as Button _i , and the pressure database of the legal owner of the mobile smart terminal built for the button Button _i is marked as Right hand pressure database is recorded as N is the number of press pressure data stored respectively in the left hand press pressure database and the right hand press pressure database; Indicates the nth pressing pressure data of the left hand of the legal owner of the mobile smart terminal collected for Button _i , Represents the nth press pressure data of the right hand of the legal owner of the mobile intelligent terminal _collected for the button Button _i ; The variance of the pressure of the right hand of the legal owner of the mobile smart terminal is denoted as Among them, variance and The calculation formulas are as follows:

${\mathrm{<span\; class="notranslate">\; \&sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; L</span>}\mathrm{<span\; class="notranslate">\; e</span>}\mathrm{<span\; class="notranslate">\; f</span>}\mathrm{<span\; class="notranslate">\; t</span>}}^{\mathrm{<span\; class="notranslate">\; 2</span>}}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; Button</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; =</span>\underset{\mathrm{<span\; class="notranslate">\; no</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}{\overset{\mathrm{<span\; class="notranslate">\; N</span>}}{<span\; class="notranslate">\; \&Sigma;</span>}}\frac{{<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; f</span>}}_{\mathrm{<span\; class="notranslate">\; B</span>}\mathrm{<span\; class="notranslate">\; u</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; no</span>}\mathrm{<span\; class="notranslate">\; i</span>}}^{\mathrm{<span\; class="notranslate">\; L</span>}\mathrm{<span\; class="notranslate">\; e</span>}\mathrm{<span\; class="notranslate">\; f</span>}\mathrm{<span\; class="notranslate">\; t</span>}}<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; no</span>}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; -</span>\stackrel{<span\; class="notranslate">\; \&OverBar;</span>}{{\mathrm{<span\; class="notranslate">\; f</span>}}_{\mathrm{<span\; class="notranslate">\; B</span>}\mathrm{<span\; class="notranslate">\; u</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; no</span>}\mathrm{<span\; class="notranslate">\; i</span>}}^{\mathrm{<span\; class="notranslate">\; L</span>}\mathrm{<span\; class="notranslate">\; e</span>}\mathrm{<span\; class="notranslate">\; f</span>}\mathrm{<span\; class="notranslate">\; t</span>}}}<span\; class="notranslate">\; )</span>}^{\mathrm{<span\; class="notranslate">\; 2</span>}}}{\mathrm{<span\; class="notranslate">\; N</span>}}<span\; class="notranslate">\; ,</span>\stackrel{<span\; class="notranslate">\; \&OverBar;</span>}{{\mathrm{<span\; class="notranslate">\; f</span>}}_{\mathrm{<span\; class="notranslate">\; B</span>}\mathrm{<span\; class="notranslate">\; u</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; no</span>}\mathrm{<span\; class="notranslate">\; i</span>}}^{\mathrm{<span\; class="notranslate">\; L</span>}\mathrm{<span\; class="notranslate">\; e</span>}\mathrm{<span\; class="notranslate">\; f</span>}\mathrm{<span\; class="notranslate">\; t</span>}}}<span\; class="notranslate">\; =</span>\underset{\mathrm{<span\; class="notranslate">\; no</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}{\overset{\mathrm{<span\; class="notranslate">\; N</span>}}{<span\; class="notranslate">\; \&Sigma;</span>}}\frac{{\mathrm{<span\; class="notranslate">\; f</span>}}_{\mathrm{<span\; class="notranslate">\; B</span>}\mathrm{<span\; class="notranslate">\; u</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; no</span>}\mathrm{<span\; class="notranslate">\; i</span>}}^{\mathrm{<span\; class="notranslate">\; L</span>}\mathrm{<span\; class="notranslate">\; e</span>}\mathrm{<span\; class="notranslate">\; f</span>}\mathrm{<span\; class="notranslate">\; t</span>}}<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; no</span>}<span\; class="notranslate">\; )</span>}{\mathrm{<span\; class="notranslate">\; N</span>}}<span\; class="notranslate">\; ;</span>$

${\mathrm{<span\; class="notranslate">\; \&sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; R</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; g</span>}\mathrm{<span\; class="notranslate">\; h</span>}\mathrm{<span\; class="notranslate">\; t</span>}}^{\mathrm{<span\; class="notranslate">\; 2</span>}}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; Button</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; =</span>\underset{\mathrm{<span\; class="notranslate">\; no</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}{\overset{\mathrm{<span\; class="notranslate">\; N</span>}}{<span\; class="notranslate">\; \&Sigma;</span>}}\frac{{<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; f</span>}}_{\mathrm{<span\; class="notranslate">\; B</span>}\mathrm{<span\; class="notranslate">\; u</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; no</span>}\mathrm{<span\; class="notranslate">\; i</span>}}^{\mathrm{<span\; class="notranslate">\; R</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; g</span>}\mathrm{<span\; class="notranslate">\; h</span>}\mathrm{<span\; class="notranslate">\; t</span>}}<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; no</span>}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; -</span>\stackrel{<span\; class="notranslate">\; \&OverBar;</span>}{{\mathrm{<span\; class="notranslate">\; f</span>}}_{\mathrm{<span\; class="notranslate">\; B</span>}\mathrm{<span\; class="notranslate">\; u</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; no</span>}\mathrm{<span\; class="notranslate">\; i</span>}}^{\mathrm{<span\; class="notranslate">\; R</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; g</span>}\mathrm{<span\; class="notranslate">\; h</span>}\mathrm{<span\; class="notranslate">\; t</span>}}}<span\; class="notranslate">\; )</span>}^{\mathrm{<span\; class="notranslate">\; 2</span>}}}{\mathrm{<span\; class="notranslate">\; N</span>}}<span\; class="notranslate">\; ,</span>\stackrel{<span\; class="notranslate">\; \&OverBar;</span>}{{\mathrm{<span\; class="notranslate">\; f</span>}}_{\mathrm{<span\; class="notranslate">\; B</span>}\mathrm{<span\; class="notranslate">\; u</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; no</span>}\mathrm{<span\; class="notranslate">\; i</span>}}^{\mathrm{<span\; class="notranslate">\; R</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; g</span>}\mathrm{<span\; class="notranslate">\; h</span>}\mathrm{<span\; class="notranslate">\; t</span>}}}<span\; class="notranslate">\; =</span>\underset{\mathrm{<span\; class="notranslate">\; no</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}{\overset{\mathrm{<span\; class="notranslate">\; N</span>}}{<span\; class="notranslate">\; \&Sigma;</span>}}\frac{{\mathrm{<span\; class="notranslate">\; f</span>}}_{\mathrm{<span\; class="notranslate">\; B</span>}\mathrm{<span\; class="notranslate">\; u</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; no</span>}\mathrm{<span\; class="notranslate">\; i</span>}}^{\mathrm{<span\; class="notranslate">\; R</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; g</span>}\mathrm{<span\; class="notranslate">\; h</span>}\mathrm{<span\; class="notranslate">\; t</span>}}<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; no</span>}<span\; class="notranslate">\; )</span>}{\mathrm{<span\; class="notranslate">\; N</span>}}<span\; class="notranslate">\; ;</span>$

(7) When the dispatcher of the logistics company delivers the goods to the recipient and waits for the recipient to pay, the dispatcher of the logistics company turns on the NFC function of the hand-held POS terminal and the recipient turns on the NFC function of his mobile smart terminal, and the hand-held The POS terminal generates and stores the first random number and the effective time value of the first random number, obtains the current location and the noise and air humidity of the current location, and then sends the payment request information including the signature of the handheld POS terminal to the recipient's mobile Intelligent terminal, and send the current location of the handheld POS terminal, current location noise and air humidity data to the certification body; among them:

The payment request information includes the first random number RP ₁ generated by the handheld POS terminal, the valid time value TP of the first random number RP ₁ , the payment request ReqM, the financial authentication certificate Cert ^t (BANK _POS ) selected by the handheld POS terminal, The credit authentication certificate Cert ^t (TSM _POS ) selected by the handheld POS terminal, the self-signature Sig _POS of the handheld POS terminal, and the private key sk(POS) of the handheld POS terminal; wherein, the payment request information is recorded as Message _PM , and the payment request information Message _PM is marked by the formula as follows:

${\mathrm{<span\; class="notranslate">\; message</span>}}_{\mathrm{<span\; class="notranslate">\; P</span>}<span\; class="notranslate">\; -</span>\mathrm{<span\; class="notranslate">\; m</span>}}<span\; class="notranslate">\; =</span>\left\{\begin{array}{c}\mathrm{<span\; class="notranslate">\; P</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; S</span>}<span\; class="notranslate">\; ,</span>\mathrm{<span\; class="notranslate">\; m</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; b</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; l</span>}\mathrm{<span\; class="notranslate">\; e</span>}<span\; class="notranslate">\; ,</span>{\mathrm{<span\; class="notranslate">\; RP</span>}}_{\mathrm{<span\; class="notranslate">\; 1</span>}}<span\; class="notranslate">\; ,</span>\mathrm{<span\; class="notranslate">\; T</span>}\mathrm{<span\; class="notranslate">\; P</span>}<span\; class="notranslate">\; ,</span>{\mathrm{<span\; class="notranslate">\; Cert</span>}}^{\mathrm{<span\; class="notranslate">\; t</span>}}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; BANK</span>}}_{\mathrm{<span\; class="notranslate">\; P</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; S</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; ,</span>{\mathrm{<span\; class="notranslate">\; Cert</span>}}^{\mathrm{<span\; class="notranslate">\; t</span>}}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; TSM</span>}}_{\mathrm{<span\; class="notranslate">\; P</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; S</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; ,</span>\mathrm{<span\; class="notranslate">\; Re</span>}\mathrm{<span\; class="notranslate">\; m</span>}<span\; class="notranslate">\; ,</span>\\ {\mathrm{<span\; class="notranslate">\; Sig</span>}}_{\mathrm{<span\; class="notranslate">\; P</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; S</span>}}<span\; class="notranslate">\; ,</span>\mathrm{<span\; class="notranslate">\; the\; s</span>}\mathrm{<span\; class="notranslate">\; k</span>}<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; P</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; S</span>}<span\; class="notranslate">\; )</span>\end{array}\right\}<span\; class="notranslate">\; ;</span>\mathrm{<span\; class="notranslate">\; t</span>}<span\; class="notranslate">\; \&Element;</span><span\; class="notranslate">\; \&lsqb;</span>\mathrm{<span\; class="notranslate">\; 1</span>}<span\; class="notranslate">\; ,</span>\mathrm{<span\; class="notranslate">\; m</span>}<span\; class="notranslate">\; \&rsqb;</span><span\; class="notranslate">\; ;</span>$

(8) The mobile smart terminal receives the payment request information sent by the handheld POS terminal, generates the first random number for anti-theft, obtains the current position of the mobile smart terminal and the noise and air humidity of the current position, and sends the payment request information including the handheld POS terminal Certification request information and the current location of the mobile smart terminal, current location noise and air humidity to the certification agency; among them:

The authentication request information sent by the mobile intelligent terminal includes the payment request information Message _PM of the handheld POS terminal, the anti-theft first random number RW ₁ generated by the mobile intelligent terminal, the authentication request ReqT, the session request ReqSession with the handheld POS terminal, and the mobile The public key k(Wallet,TSM) for communication between the smart terminal and the certification authority; wherein, the authentication request information of the mobile smart terminal is marked as Message _MT , where:

Message _MT ＝{Message _PM ,TSM,RM ₁ ,ReqT,ReqSession,k(Mobile,TSM)};

(9) The certification agency receives and extracts the certification request information sent by the smart mobile terminal, the current location of the smart mobile terminal, the noise and air humidity at the current location, records the time when the smart mobile terminal certification request is received, and based on the certification information of the smart mobile terminal extracted, Request information, the current position of the mobile smart terminal and the current position noise and air humidity, the current position of the hand-held POS terminal and the current position noise and the air humidity make a feedback to the mobile smart terminal whether to conduct transactions; wherein, the steps include steps (9- 1) to step (9-3):

(9-1) When the certification authority judges that the extracted handheld POS terminal credit authentication certificate exists in the credit authentication certificate database stored by the certification authority and the time when the certification authority receives the mobile smart terminal authentication request is within the effective time value of the first random number , it indicates that the credit authentication certificate is valid and the corresponding handheld POS terminal is a secure terminal, the certification authority generates a transaction key between the mobile smart terminal and the handheld POS terminal, and executes step (9-2); otherwise, the certification authority sends Refuse to send transaction information to the mobile smart terminal;

(9-2) According to the extracted current location and current location noise of the handheld POS terminal and the mobile smart terminal, the certification body judges that the difference between the current location noise corresponding to the handheld POS terminal and the mobile smart terminal is within the preset difference range , and the spatial distance between the handheld POS terminal and the mobile smart terminal is less than the preset safe transaction space distance threshold, then perform step (9-3); otherwise, the certification authority sends a transaction rejection message to the mobile smart terminal

(9-3) When the certification body judges that the difference in air humidity corresponding to the handheld POS terminal and the mobile smart terminal is within the preset difference range, the certification body sends confirmation transaction information to the mobile smart terminal; otherwise, the certification body sends Refuse to send transaction information to the mobile smart terminal; among them:

The confirmation transaction information sent by the certification body is marked as Message _TM-Confirm , the transaction secret key between the mobile smart terminal and the handheld POS terminal is marked as K, and the rejection transaction information sent by the certification body is marked as Message _TM-Reject ; wherein:

Message _TM-Confirm ＝{TSM,Mobile,POS,RP ₁ ,RM ₁ ,TP,Cert ^t (TSM _POS ),K,k(Mobile,TSM)};

Message _TM-Reject = {TSM, Mobile, POS, RP ₁ , RM ₁ , RejectP, k(Mobile, TSM)};

(10) The mobile smart terminal receives the confirmation transaction information sent by the certification authority, and sends the transaction interaction information including the signature of the mobile smart terminal to the handheld POS terminal; wherein:

The transaction interaction information includes the signature Sig _Mobile of the mobile smart terminal, the first anti-theft random number generated by the mobile smart terminal, the transaction secret key between the mobile smart terminal and the handheld POS terminal, and the financial authentication certificate Cert ^s selected by the mobile smart terminal. (BANK _Mobile ), the credit authentication certificate Cert ^s (TSM _Mobile ) selected by the mobile intelligent terminal, and the selected credit authentication certificate Cert ^t (TSM _POS ) of the handheld POS terminal; wherein, the transaction interaction information sent by the mobile intelligent terminal is marked as Message _MP , transaction interaction information Message _MP is marked by the formula as follows:

${\mathrm{<span\; class="notranslate">\; message</span>}}_{\mathrm{<span\; class="notranslate">\; m</span>}<span\; class="notranslate">\; -</span>\mathrm{<span\; class="notranslate">\; P</span>}}<span\; class="notranslate">\; =</span>\left\{\begin{array}{c}\mathrm{<span\; class="notranslate">\; m</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; b</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; l</span>}\mathrm{<span\; class="notranslate">\; e</span>}<span\; class="notranslate">\; ,</span>\mathrm{<span\; class="notranslate">\; P</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; S</span>}<span\; class="notranslate">\; ,</span>\mathrm{<span\; class="notranslate">\; T</span>}\mathrm{<span\; class="notranslate">\; S</span>}\mathrm{<span\; class="notranslate">\; m</span>}<span\; class="notranslate">\; ,</span>{\mathrm{<span\; class="notranslate">\; RM</span>}}_{\mathrm{<span\; class="notranslate">\; 1</span>}}<span\; class="notranslate">\; ,</span>{\mathrm{<span\; class="notranslate">\; Cert</span>}}^{\mathrm{<span\; class="notranslate">\; the\; s</span>}}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; BANK</span>}}_{\mathrm{<span\; class="notranslate">\; m</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; b</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; l</span>}\mathrm{<span\; class="notranslate">\; e</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; ,</span>{\mathrm{<span\; class="notranslate">\; Cert</span>}}^{\mathrm{<span\; class="notranslate">\; the\; s</span>}}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; TSM</span>}}_{\mathrm{<span\; class="notranslate">\; m</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; b</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; l</span>}\mathrm{<span\; class="notranslate">\; e</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; ,</span>\mathrm{<span\; class="notranslate">\; K</span>}<span\; class="notranslate">\; ,</span>\\ {\mathrm{<span\; class="notranslate">\; Sig</span>}}_{\mathrm{<span\; class="notranslate">\; m</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; b</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; l</span>}\mathrm{<span\; class="notranslate">\; e</span>}}<span\; class="notranslate">\; ,</span>{\mathrm{<span\; class="notranslate">\; Cert</span>}}^{\mathrm{<span\; class="notranslate">\; t</span>}}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; TSM</span>}}_{\mathrm{<span\; class="notranslate">\; P</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; S</span>}}<span\; class="notranslate">\; )</span>\end{array}\right\}<span\; class="notranslate">\; ;</span>\mathrm{<span\; class="notranslate">\; the\; s</span>}<span\; class="notranslate">\; \&Element;</span><span\; class="notranslate">\; \&lsqb;</span>\mathrm{<span\; class="notranslate">\; 1</span>}<span\; class="notranslate">\; ,</span>\mathrm{<span\; class="notranslate">\; m</span>}<span\; class="notranslate">\; \&rsqb;</span><span\; class="notranslate">\; ;</span>$

(11) The handheld POS terminal receives and extracts the transaction interaction information sent by the mobile smart terminal, and makes a judgment based on the information extracted from the transaction interaction information: when the handheld POS terminal extracts the credit authentication certificate of the handheld POS terminal from the transaction interaction information When it has been stored in its stored credit authentication certificate database, then perform step (12); otherwise, the handheld POS terminal refuses to carry out payment transactions with the mobile smart terminal;

(12) The handheld POS terminal generates a second random number, and sends payment information including the second random number generated by it, the first random number, the first random number for anti-theft of the mobile smart terminal, and the payment required by the mobile smart terminal To the mobile intelligent terminal; wherein, the payment information is marked as Message _PM-Payment :

Message _PM-Payment ＝{POS,Mobile,RP ₂ ,RM ₁ ,RP ₁ ,Payment,K};

Among them, RP ₂ represents the second random number generated by the handheld POS terminal, Payment represents the payment required by the mobile smart terminal, and K is the transaction secret key between the handheld POS terminal and the mobile smart terminal;

(13) The mobile intelligent terminal receives the payment information sent by the handheld POS terminal, and generates a second random number to prevent theft, and the mobile intelligent terminal will include the received payment information and the newly generated payment transaction record of the second random number to prevent theft The information is sent to the certification body for storage; wherein, the payment transaction record information is marked as S _MT-Payment : S _MT-Payment = {Mobile, TSM, POS, RM ₂ , k(Mobile, TSM)}; RM ₂ represents mobile smart The anti-theft second random number generated by the terminal;

(14) The mobile intelligent terminal receives the payment password inputted through each key from the outside. After the mobile intelligent terminal judges whether the key is pressed by the left hand or the right hand according to the pressing pressure direction of each key, the mobile intelligent terminal calculates the pressure received by each key at this time. The pressing pressure is added to the pressing pressure database corresponding to the judged result, and the variance of each button corresponding to the pressing pressure database is recalculated at this time;

(15) The mobile intelligent terminal makes a judgment on whether to execute the payment operation according to the difference between the variance of the pressing pressure database newly obtained by each button in step (14) and the corresponding pressing pressure database variance in step (6):

When the difference obtained by each button is less than or equal to the preset threshold, it means that the payment password is input by the legal owner of the mobile smart terminal, and the mobile smart terminal sends a payment command including the payment password and its financial authentication certificate to the banking system, which is then When the bank system judges that the payment password is consistent with the preset payment password, it transfers the payment from the payment account of the mobile smart terminal to the collection account of the logistics company in the bank system, and the bank system sends a notification of successful transfer to the handheld POS terminal and the logistics company management platform and mobile smart terminal; otherwise, it means that the payment password is not entered by the legal owner of the mobile smart terminal, and the mobile smart terminal refuses to perform the payment operation;

(16) After the hand-held POS terminal receives the notification of successful transfer from the banking system, the dispatcher of the logistics company will hand over the goods to the recipient, and complete the delivery of the goods by the logistics company; After deducting the delivery fee preset by the platform, the logistics company management platform will send its tax identification number and payment order to the bank system according to the price of the target commodity in the order information, and the bank system will transfer the logistics company management platform collection account The corresponding payment in the order information is transferred to the receiving account of the merchant in the order information, and the transaction process of cash on delivery is completed;

(17) The banking system sends the successful transaction order number to the tax supervision system. When the tax supervision system checks that the successful transaction order number is consistent with the stored transaction order number, the logistics company and the merchant will calculate the successful transaction order number for the successful transaction. The business tax that should be paid for the transaction order, and notify the banking system to replace the tax supervision system to withhold the business tax of the logistics company and the merchant respectively, so as to complete the tax supervision of the commercial shopping payment transaction system.

Compared with the prior art, the present invention has the advantages of:

First, the pick-up personnel of the logistics company pick up the goods at the merchant according to the information of each transaction order, and each handheld POS terminal of the logistics company obtains the corresponding financial authentication certificate and credit authentication certificate from the banking system and the certification institution respectively. The recipient's mobile smart terminal obtains its financial authentication certificate and credit authentication certificate to ensure the legal identity of the terminals of both parties in the cash-on-delivery payment and ensure the property safety of both parties;

Secondly, taking advantage of the fact that the air humidity at the same location is the same, the certification agency judges that the mobile smart terminal and the handheld POS terminal are located in a safe transaction space, and the noise of the current location and the difference between the current location air humidity corresponding to the two are located in a safe space. If it is judged that the handheld POS terminal and the mobile smart terminal are at the same location, and the two are within a safe distance, the certification authority will send the transaction key to the mobile smart terminal and the handheld POS terminal to ensure that both parties to the transaction within a safe location;

Again, according to the uniqueness of human behavior characteristics, the mobile smart terminal constructs the pressure database of the left and right hands pressing each button when its legal owner is in a normal state, and according to the reconstruction of the left and right hand pressing pressure database of each button when the mobile smart terminal pays In the case of variance, when it is judged that the current payment password is entered by its legal owner, the transfer fee is transferred to the account of the logistics company; otherwise, the mobile smart terminal refuses to pay the transaction, so as to ensure the property safety of the recipient in the cash on delivery;

Finally, during the entire process from the beginning to the end of cash on delivery, the tax supervision system monitors the payment status of each transaction order in real time, and after the payment is successful, the banking system replaces the tax supervision system to deduct the corresponding business tax of merchants and logistics companies , in order to achieve effective tax supervision of merchants and logistics companies on online shopping platforms.

Description of drawings

FIG. 1 is a schematic structural diagram of a commercial logistics payment transaction system in an embodiment of the present invention.

detailed description

The present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments.

In this embodiment, the secure payment method for business logistics based on cash on delivery is used in a business logistics payment transaction system composed of merchant terminals, online shopping platforms, consumer terminals, logistics company management platforms, certification agencies, banking systems, and tax supervision systems. The payment system is shown in Figure 1. The online shopping platform is connected to the merchant terminal, the consumer terminal and the logistics company management platform respectively. The merchant terminal is connected to the banking system and the tax supervision system. The banking system is connected to the merchant terminal and the consumer terminal respectively to the logistics company management platform. And the tax supervision system, both the merchant terminal and the consumer terminal are connected to the certification agency. In this embodiment, the secure payment method for business logistics based on cash on delivery includes the following steps in sequence:

(1) Merchants and logistics companies register their respective collection accounts in the banking system, register their respective tax identification numbers in the tax supervision system, and register their respective tax identification numbers on the online shopping platform;

(2) The management platform of the logistics company records all handheld POS terminals with NFC functions, establishes communication connections between each handheld POS terminal and the banking system and certification agency, and uses the handheld POS terminal to send certification requests to the banking system and certification authority respectively. Institutions and banking systems generate their public keys for communication with handheld POS terminals, financial authentication certificate sets for handheld POS terminals, and send financial authentication certificate sets and public keys to handheld POS terminals; certification agencies generate public keys for communication with handheld POS terminals 1. Set the credit authentication certificate set of the handheld POS terminal, and send the credit authentication certificate set and public key to the handheld POS terminal;

The financial authentication certificate here is used to indicate the confirmation of the payment transaction information by the handheld POS terminal, so that the handheld POS terminal has no repudiation of the payment transaction that has been confirmed by itself, so as to ensure the normal progress of the payment transaction; the credit authentication certificate here As a trusted certificate for handheld POS terminals, it is used to verify the legal identities of both parties to the payment transaction to ensure the security of the transaction; among them:

The handheld POS terminal is marked as POS, the banking system is marked as BANK, the certification body is marked as TSM, the set of financial authentication certificates of the handheld POS terminal is marked as Cert(BANK _POS ), the public key of the banking system and the handheld POS terminal is marked as k(POS, BANK); the set of credit authentication certificates of the handheld POS terminal is marked as Cert(TSM _POS ), and the public key of the certification authority and the handheld POS terminal is marked as k(POS,TSM); where:

Cert(TSM _POS )＝{Cert ¹ (TSM _POS ),Cert ² (TSM _POS ),...,Cert ^m (TSM _POS )};

Cert(BANK _POS )＝{Cert ¹ (BANK _POS ),Cert ² (BANK _POS ),...,Cert ^m (BANK _POS )}; m≥3;

Among them, m represents the number of financial authentication certificates and credit authentication certificates available for handheld POS terminals, and the credit authentication certificates of handheld POS terminals have a one-to-one correspondence with their financial authentication certificates; each credit authentication certificate in the credit authentication certificate set of handheld POS terminals and Each financial authentication certificate in its financial authentication certificate set follows the traversal usage rules and is limited to one use;

When the handheld POS terminal needs to use the credit authentication certificate, it chooses to use it sequentially among the m credit authentication certificates of its credit authentication certificate set Cert (TSM _POS ), and the same credit authentication certificate will not be used repeatedly, so as to prevent After spying on the credit authentication certificate used by the handheld POS terminal, the malicious third party uses the credit authentication certificate again, threatening the transaction security of the handheld POS terminal; similarly, the mobile smart terminal also follows the same usage rules as the handheld POS terminal, and in turn The traversal chooses to use the credit authentication certificate in its credit authentication certificate set Cert (TSM _Mobile ), and the same credit authentication certificate will not be reused, that is, each credit authentication certificate follows the traversal usage rules and can only be used once, and the credit authentication certificate is used Reuse is invalid;

(3) The merchant registers the tax identification number on the online shopping platform, and publishes product information on the online shopping platform through the merchant terminal, and the consumer uses the consumer terminal to select the target product on the online shopping platform, and registers the recipient's contact information for the purchased product , and choose cash on delivery, after the online shopping platform generates and saves the transaction order for the purchased goods, the online shopping platform sends the commodity transaction order to be paid to the tax supervision system for storage; the transaction order includes the transaction order number, order Generation time, target commodity name and price, merchant contact information and merchant tax identification number of the target commodity, recipient information and cash on delivery method;

(4) The online shopping platform sends the pick-up notice and transaction order to the logistics company management platform. After the logistics company management platform saves the transaction order, it notifies the logistics company’s picker to pick up the goods at the merchant according to the transaction order information, and according to the information in the transaction order Recipient information, the logistics company management platform will notify the logistics company dispatcher to carry the registered handheld POS terminal to deliver the goods according to the recipient information in the transaction order;

(5) The recipient uses its mobile smart terminal with NFC function to send authentication requests to the banking system and the certification agency respectively, and the banking system generates its public key for communication with the mobile smart terminal and the set of financial authentication certificates of the mobile smart terminal, and sends The set of financial authentication certificates and the public key are sent to the mobile smart terminal; the certification authority generates its public key for communication with the mobile smart terminal, the set of credit authentication certificates of the mobile smart terminal, and sends the set of credit authentication certificates and the public key to the mobile smart terminal; the mobile smart For the functions of the financial authentication certificates and credit authentication certificates corresponding to the terminals, please refer to the detailed description of the corresponding authentication certificates of the handheld POS terminals of the logistics company in step 2, which will not be repeated here; among them:

The smart mobile terminal is denoted as Mobile, the set of financial authentication certificates of the smart mobile terminal is marked as Cert(BANK _Mobile ), the public key of the banking system and the smart mobile terminal is marked as k(Mobile,BANK); the set of credit authentication certificates of the smart mobile terminal is marked as is Cert(TSM _Mobile ), the public key of the certification authority and the mobile smart terminal is marked as k(Mobile,TSM); where:

Cert(TSM _Mobile )＝{Cert ¹ (TSM _Mobile ),Cert ² (TSM _Mobile ),...,Cert ^m (TSM _Mobile )};

Cert(BANK _Mobile )＝{Cert ¹ (BANK _Mobile ),Cert ² (BANK _Mobile ),...,Cert ^m (BANK _Mobile )}; m≥3; Among them, the credit authentication certificate of the smart mobile terminal and its financial authentication certificate It is a one-to-one correspondence relationship; each credit authentication certificate in the mobile smart terminal credit authentication certificate set and each financial authentication certificate in its financial authentication certificate set follow the traversal usage rules and are limited to one use; that is, when a handheld POS terminal uses When the second credit authentication certificate Cert ² (TSM _POS ) in its credit authentication certificate set Cert (TSM _POS ), the handheld POS terminal uses the second financial authentication certificate in its financial authentication certificate set Cert (BANK _POS ) correspondingly Certificate Cert ² (BANK _POS ); when the mobile smart terminal uses the fifth credit authentication certificate Cert ⁵ (TSM _Mobile ) in its credit authentication certificate set Cert (TSM _Mobile ), the handheld POS terminal uses its financial authentication certificate correspondingly The fifth financial authentication certificate Cert ⁵ (BANK _{Mobile ) in the set Cert (BANK Mobile )} ;

(6) The mobile smart terminal collects in real time the value and direction of pressing pressure of each button on the keyboard by its legal owner during the payment operation during the preset time period, and constructs that the legal owner of the mobile smart terminal uses the left hand during the payment operation. and the right hand respectively for the left hand press pressure database and the right hand press pressure database of each button, and calculate the variance of each button left hand press pressure database and right hand press pressure database respectively;

Among them, when people are safe and are not disturbed by factors such as external threats, surprise, or fear, the temperature of the surface of the palm, the humidity of the surface of the palm, and the amount of sweat discharged from the surface of the palm are all within their respective normal data ranges, and the three There is a correlation between them; once the interference of external factors, such as surprise, fear, fright or intimidation and other external unfavorable factors, the human body itself will undergo corresponding physiological changes, resulting in the temperature of the palm surface being too low or too high, and the temperature of the palm Surface humidity Sweating leads to increased humidity, etc. Therefore, after collecting a certain amount of palm surface temperature, humidity, and sweat output data of the legal owner of the mobile smart terminal, the relationship between the palm surface temperature, humidity, and sweat output can be constructed to identify the legal owner of the mobile smart terminal. to make a judgment on their identity and the current environmental security situation in which they are located; among them:

The i-th button on the mobile smart terminal is marked as Button _i , and the left-hand pressure database of the legal owner of the mobile smart terminal constructed for the button Button _i is marked as Right hand pressure database is recorded as n∈N, N is the number of press pressure data stored in the left hand press pressure database and the right hand press pressure database respectively; Indicates the nth pressing pressure data of the left hand of the legal owner of the mobile smart terminal collected for Button _i , Represents the nth press pressure data of the right hand of the legal owner of the mobile intelligent terminal _collected for the button Button _i ; The variance of the pressure of the right hand of the legal owner of the mobile smart terminal is denoted as Among them, variance and The calculation formulas are as follows:

${\mathrm{<span\; class="notranslate">\; \&sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; L</span>}\mathrm{<span\; class="notranslate">\; e</span>}\mathrm{<span\; class="notranslate">\; f</span>}\mathrm{<span\; class="notranslate">\; t</span>}}^{\mathrm{<span\; class="notranslate">\; 2</span>}}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; Button</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; =</span>\underset{\mathrm{<span\; class="notranslate">\; no</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}{\overset{\mathrm{<span\; class="notranslate">\; N</span>}}{<span\; class="notranslate">\; \&Sigma;</span>}}\frac{{<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; f</span>}}_{\mathrm{<span\; class="notranslate">\; B</span>}\mathrm{<span\; class="notranslate">\; u</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; no</span>}\mathrm{<span\; class="notranslate">\; i</span>}}^{\mathrm{<span\; class="notranslate">\; L</span>}\mathrm{<span\; class="notranslate">\; e</span>}\mathrm{<span\; class="notranslate">\; f</span>}\mathrm{<span\; class="notranslate">\; t</span>}}<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; no</span>}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; -</span>\stackrel{<span\; class="notranslate">\; \&OverBar;</span>}{{\mathrm{<span\; class="notranslate">\; f</span>}}_{\mathrm{<span\; class="notranslate">\; B</span>}\mathrm{<span\; class="notranslate">\; u</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; no</span>}\mathrm{<span\; class="notranslate">\; i</span>}}^{\mathrm{<span\; class="notranslate">\; L</span>}\mathrm{<span\; class="notranslate">\; e</span>}\mathrm{<span\; class="notranslate">\; f</span>}\mathrm{<span\; class="notranslate">\; t</span>}}}<span\; class="notranslate">\; )</span>}^{\mathrm{<span\; class="notranslate">\; 2</span>}}}{\mathrm{<span\; class="notranslate">\; N</span>}}<span\; class="notranslate">\; ,</span>\stackrel{<span\; class="notranslate">\; \&OverBar;</span>}{{\mathrm{<span\; class="notranslate">\; f</span>}}_{\mathrm{<span\; class="notranslate">\; B</span>}\mathrm{<span\; class="notranslate">\; u</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; no</span>}\mathrm{<span\; class="notranslate">\; i</span>}}^{\mathrm{<span\; class="notranslate">\; L</span>}\mathrm{<span\; class="notranslate">\; e</span>}\mathrm{<span\; class="notranslate">\; f</span>}\mathrm{<span\; class="notranslate">\; t</span>}}}<span\; class="notranslate">\; =</span>\underset{\mathrm{<span\; class="notranslate">\; no</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}{\overset{\mathrm{<span\; class="notranslate">\; N</span>}}{<span\; class="notranslate">\; \&Sigma;</span>}}\frac{{\mathrm{<span\; class="notranslate">\; f</span>}}_{\mathrm{<span\; class="notranslate">\; B</span>}\mathrm{<span\; class="notranslate">\; u</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; no</span>}\mathrm{<span\; class="notranslate">\; i</span>}}^{\mathrm{<span\; class="notranslate">\; L</span>}\mathrm{<span\; class="notranslate">\; e</span>}\mathrm{<span\; class="notranslate">\; f</span>}\mathrm{<span\; class="notranslate">\; t</span>}}<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; no</span>}<span\; class="notranslate">\; )</span>}{\mathrm{<span\; class="notranslate">\; N</span>}}<span\; class="notranslate">\; ;</span>$

${\mathrm{<span\; class="notranslate">\; \&sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; R</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; g</span>}\mathrm{<span\; class="notranslate">\; h</span>}\mathrm{<span\; class="notranslate">\; t</span>}}^{\mathrm{<span\; class="notranslate">\; 2</span>}}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; Button</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; =</span>\underset{\mathrm{<span\; class="notranslate">\; no</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}{\overset{\mathrm{<span\; class="notranslate">\; N</span>}}{<span\; class="notranslate">\; \&Sigma;</span>}}\frac{{<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; f</span>}}_{\mathrm{<span\; class="notranslate">\; B</span>}\mathrm{<span\; class="notranslate">\; u</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; no</span>}\mathrm{<span\; class="notranslate">\; i</span>}}^{\mathrm{<span\; class="notranslate">\; R</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; g</span>}\mathrm{<span\; class="notranslate">\; h</span>}\mathrm{<span\; class="notranslate">\; t</span>}}<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; no</span>}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; -</span>\stackrel{<span\; class="notranslate">\; \&OverBar;</span>}{{\mathrm{<span\; class="notranslate">\; f</span>}}_{\mathrm{<span\; class="notranslate">\; B</span>}\mathrm{<span\; class="notranslate">\; u</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; no</span>}\mathrm{<span\; class="notranslate">\; i</span>}}^{\mathrm{<span\; class="notranslate">\; R</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; g</span>}\mathrm{<span\; class="notranslate">\; h</span>}\mathrm{<span\; class="notranslate">\; t</span>}}}<span\; class="notranslate">\; )</span>}^{\mathrm{<span\; class="notranslate">\; 2</span>}}}{\mathrm{<span\; class="notranslate">\; N</span>}}<span\; class="notranslate">\; ,</span>\stackrel{<span\; class="notranslate">\; \&OverBar;</span>}{{\mathrm{<span\; class="notranslate">\; f</span>}}_{\mathrm{<span\; class="notranslate">\; B</span>}\mathrm{<span\; class="notranslate">\; u</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; no</span>}\mathrm{<span\; class="notranslate">\; i</span>}}^{\mathrm{<span\; class="notranslate">\; R</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; g</span>}\mathrm{<span\; class="notranslate">\; h</span>}\mathrm{<span\; class="notranslate">\; t</span>}}}<span\; class="notranslate">\; =</span>\underset{\mathrm{<span\; class="notranslate">\; no</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}{\overset{\mathrm{<span\; class="notranslate">\; N</span>}}{<span\; class="notranslate">\; \&Sigma;</span>}}\frac{{\mathrm{<span\; class="notranslate">\; f</span>}}_{\mathrm{<span\; class="notranslate">\; B</span>}\mathrm{<span\; class="notranslate">\; u</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; t</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; no</span>}\mathrm{<span\; class="notranslate">\; i</span>}}^{\mathrm{<span\; class="notranslate">\; R</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; g</span>}\mathrm{<span\; class="notranslate">\; h</span>}\mathrm{<span\; class="notranslate">\; t</span>}}<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; no</span>}<span\; class="notranslate">\; )</span>}{\mathrm{<span\; class="notranslate">\; N</span>}}<span\; class="notranslate">\; ;</span>$

Since the legal owner of the mobile intelligent terminal uses the left or right hand to input the password through the keys on the keyboard each time, the size and direction of the pressing pressure exerted by the legal owner on each keyboard are different. Therefore, according to the unique Due to this characteristic, by collecting the value of pressing pressure on each keyboard and the corresponding direction of pressing pressure over a period of time, a legal owner of a mobile smart terminal can construct a database of left-hand pressing pressure and right-hand pressing pressure for payment. Thereby, the constructed left-hand press pressure database or right-hand press pressure database can be used as the identity authentication information representing the legal owner of the mobile smart terminal to ensure the security of payment transactions;

Among them, the left-hand pressing pressure database of a key on the keyboard contains the value and direction of the pressing pressure when the legal owner of the mobile smart terminal presses the key with his left hand in the payment state; The right-hand pressing pressure database of the mobile smart terminal contains the value and direction of the pressing pressure when the right hand of the legal owner of the mobile smart terminal presses the button in the payment state;

(7) When the dispatcher of the logistics company delivers the goods to the recipient and waits for the recipient to pay, the dispatcher of the logistics company turns on the NFC function of the hand-held POS terminal and the recipient turns on the NFC function of his mobile smart terminal, and the hand-held The POS terminal generates and stores the first random number and the effective time value of the first random number, obtains the current location data and the noise and air humidity of the current location, and then sends the payment request information including the signature of the handheld POS terminal to the recipient's Mobile smart terminal, and send the current location of the handheld POS terminal and the noise and air humidity data of the current location to the certification body; among them:

The payment request information includes the first random number RP ₁ generated by the handheld POS terminal, the valid time value TP of the first random number RP ₁ , the payment request ReqM, the financial authentication certificate Cert ^t (BANK _POS ) selected by the handheld POS terminal, the handheld POS The credit authentication certificate Cert ^t (TSM _POS ) selected by the terminal, the self-signature Sig _POS of the handheld POS terminal and the private key sk(POS) of the handheld POS terminal; wherein, the payment request information is recorded as Message _PM , and the payment request information Message _PM is composed of The formula markup is as follows:

${\mathrm{<span\; class="notranslate">\; message</span>}}_{\mathrm{<span\; class="notranslate">\; P</span>}<span\; class="notranslate">\; -</span>\mathrm{<span\; class="notranslate">\; m</span>}}<span\; class="notranslate">\; =</span>\left\{\begin{array}{c}\mathrm{<span\; class="notranslate">\; P</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; S</span>}<span\; class="notranslate">\; ,</span>\mathrm{<span\; class="notranslate">\; m</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; b</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; l</span>}\mathrm{<span\; class="notranslate">\; e</span>}<span\; class="notranslate">\; ,</span>{\mathrm{<span\; class="notranslate">\; RP</span>}}_{\mathrm{<span\; class="notranslate">\; 1</span>}}<span\; class="notranslate">\; ,</span>\mathrm{<span\; class="notranslate">\; T</span>}\mathrm{<span\; class="notranslate">\; P</span>}<span\; class="notranslate">\; ,</span>{\mathrm{<span\; class="notranslate">\; Cert</span>}}^{\mathrm{<span\; class="notranslate">\; t</span>}}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; BANK</span>}}_{\mathrm{<span\; class="notranslate">\; P</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; S</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; ,</span>{\mathrm{<span\; class="notranslate">\; Cert</span>}}^{\mathrm{<span\; class="notranslate">\; t</span>}}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; TSM</span>}}_{\mathrm{<span\; class="notranslate">\; P</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; S</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; ,</span>\mathrm{<span\; class="notranslate">\; Re</span>}\mathrm{<span\; class="notranslate">\; m</span>}<span\; class="notranslate">\; ,</span>\\ {\mathrm{<span\; class="notranslate">\; Sig</span>}}_{\mathrm{<span\; class="notranslate">\; P</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; S</span>}}<span\; class="notranslate">\; ,</span>\mathrm{<span\; class="notranslate">\; the\; s</span>}\mathrm{<span\; class="notranslate">\; k</span>}<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; P</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; S</span>}<span\; class="notranslate">\; )</span>\end{array}\right\}<span\; class="notranslate">\; ;</span>\mathrm{<span\; class="notranslate">\; t</span>}<span\; class="notranslate">\; \&Element;</span><span\; class="notranslate">\; \&lsqb;</span>\mathrm{<span\; class="notranslate">\; 1</span>}<span\; class="notranslate">\; ,</span>\mathrm{<span\; class="notranslate">\; m</span>}<span\; class="notranslate">\; \&rsqb;</span><span\; class="notranslate">\; ;</span>$

(8) The mobile smart terminal receives the payment request information sent by the handheld POS terminal, generates the first random number for anti-theft, obtains the current position of the mobile smart terminal and the noise and air humidity of the current position, and sends the payment request information including the handheld POS terminal The certification request information and the current location of the mobile smart terminal, current location noise and air humidity are sent to the certification agency; among them:

The authentication request information sent by the mobile intelligent terminal includes the payment request information Message _PM of the handheld POS terminal, the first anti-theft random number RW ₁ generated by the mobile intelligent terminal, the authentication request ReqT, the session request ReqSession with the handheld POS terminal, and the mobile intelligent terminal The public key k(Wallet,TSM) communicated with the certification authority; wherein, the certification request information of the mobile smart terminal is marked as Message _MT , where:

Message _MT ＝{Message _PM ,TSM,RM ₁ ,ReqT,ReqSession,k(Mobile,TSM)};

(9) The certification agency receives and extracts the certification request information sent by the smart mobile terminal, the current location of the smart mobile terminal, the noise and air humidity at the current location, records the time when the smart mobile terminal certification request is received, and based on the certification information of the smart mobile terminal extracted, The request information, the current position of the mobile intelligent terminal and the noise and air humidity of the current position, the current position of the handheld POS terminal and the noise and air humidity of the current position make feedback on whether to conduct transactions to the mobile intelligent terminal; wherein, the steps include the steps ( 9-1) to step (9-3):

(9-1) When the certification authority judges that the extracted handheld POS terminal credit authentication certificate exists in the credit authentication certificate database stored by the certification authority and the time when the certification authority receives the mobile smart terminal authentication request is within the effective time value of the first random number , it indicates that the credit authentication certificate is valid and the corresponding handheld POS terminal is a secure terminal, and the transaction behavior is credible. The certification authority generates a transaction key between the mobile smart terminal and the handheld POS terminal, and performs step (9-2) ; Otherwise, the certification authority sends a transaction rejection message to the mobile smart terminal;

(9-2) According to the extracted current location and current location noise of the handheld POS terminal and the mobile smart terminal, the certification body judges that the difference between the current location noise corresponding to the handheld POS terminal and the mobile smart terminal is within the preset difference range , and the spatial distance between the handheld POS terminal and the mobile smart terminal is less than the preset safe transaction space distance threshold, it indicates that the certification body initially determines that the handheld POS terminal and the mobile smart terminal are currently in the same geographic location, and then execute step (9-3 ) to make an accurate determination; otherwise, the certification authority sends transaction rejection information to the mobile smart terminal

(9-3) When the certification body judges that the difference in air humidity corresponding to the handheld POS terminal and the mobile smart terminal is within the preset difference range, it indicates that the step (9-2) has been preliminarily determined, and at this time If the handheld POS terminal and the mobile smart terminal are indeed in the same safe geographical location, the certification body will send confirmation transaction information to the mobile smart terminal; otherwise, the certification body will send a transaction rejection message to the mobile smart terminal; among them:

The confirmation transaction information sent by the certification body is marked as Message _TM-Confirm , the transaction key between the mobile smart terminal and the handheld POS terminal is marked as K, and the transaction rejection information sent by the certification body is marked as Message _TM-Reject ; where:

Message _TM-Confirm ＝{TSM,Mobile,POS,RP ₁ ,RM ₁ ,TP,Cert ^t (TSM _POS ),K,k(Mobile,TSM)};

Message _TM-Reject = {TSM, Mobile, POS, RP ₁ , RM ₁ , RejectP, k(Mobile, TSM)};

(10) The mobile smart terminal receives the confirmation transaction information sent by the certification authority, and sends the transaction interaction information including the signature of the mobile smart terminal to the handheld POS terminal; wherein:

The transaction interaction information includes the signature Sig _Mobile of the mobile smart terminal, the anti-theft first random number generated by the mobile smart terminal, the transaction secret key between the mobile smart terminal and the handheld POS terminal, and the financial authentication certificate Cert ^s (BANK _Mobile ), the credit authentication certificate Cert ^s (TSM _Mobile ) selected by the mobile intelligent terminal, and the selected credit authentication certificate Cert ^t (TSM _POS ) of the handheld POS terminal; wherein, the transaction interaction information sent by the mobile intelligent terminal is marked as Message _MP , the transaction interaction information Message _MP is marked by the formula as follows:

${\mathrm{<span\; class="notranslate">\; message</span>}}_{\mathrm{<span\; class="notranslate">\; m</span>}<span\; class="notranslate">\; -</span>\mathrm{<span\; class="notranslate">\; P</span>}}<span\; class="notranslate">\; =</span>\left\{\begin{array}{c}\mathrm{<span\; class="notranslate">\; m</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; b</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; l</span>}\mathrm{<span\; class="notranslate">\; e</span>}<span\; class="notranslate">\; ,</span>\mathrm{<span\; class="notranslate">\; P</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; S</span>}<span\; class="notranslate">\; ,</span>\mathrm{<span\; class="notranslate">\; T</span>}\mathrm{<span\; class="notranslate">\; S</span>}\mathrm{<span\; class="notranslate">\; m</span>}<span\; class="notranslate">\; ,</span>{\mathrm{<span\; class="notranslate">\; RM</span>}}_{\mathrm{<span\; class="notranslate">\; 1</span>}}<span\; class="notranslate">\; ,</span>{\mathrm{<span\; class="notranslate">\; Cert</span>}}^{\mathrm{<span\; class="notranslate">\; the\; s</span>}}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; BANK</span>}}_{\mathrm{<span\; class="notranslate">\; m</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; b</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; l</span>}\mathrm{<span\; class="notranslate">\; e</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; ,</span>{\mathrm{<span\; class="notranslate">\; Cert</span>}}^{\mathrm{<span\; class="notranslate">\; the\; s</span>}}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; TSM</span>}}_{\mathrm{<span\; class="notranslate">\; m</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; b</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; l</span>}\mathrm{<span\; class="notranslate">\; e</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; ,</span>\mathrm{<span\; class="notranslate">\; K</span>}<span\; class="notranslate">\; ,</span>\\ {\mathrm{<span\; class="notranslate">\; Sig</span>}}_{\mathrm{<span\; class="notranslate">\; m</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; b</span>}\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; l</span>}\mathrm{<span\; class="notranslate">\; e</span>}}<span\; class="notranslate">\; ,</span>{\mathrm{<span\; class="notranslate">\; Cert</span>}}^{\mathrm{<span\; class="notranslate">\; t</span>}}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; TSM</span>}}_{\mathrm{<span\; class="notranslate">\; P</span>}\mathrm{<span\; class="notranslate">\; o</span>}\mathrm{<span\; class="notranslate">\; S</span>}}<span\; class="notranslate">\; )</span>\end{array}\right\}<span\; class="notranslate">\; ;</span>\mathrm{<span\; class="notranslate">\; the\; s</span>}<span\; class="notranslate">\; \&Element;</span><span\; class="notranslate">\; \&lsqb;</span>\mathrm{<span\; class="notranslate">\; 1</span>}<span\; class="notranslate">\; ,</span>\mathrm{<span\; class="notranslate">\; m</span>}<span\; class="notranslate">\; \&rsqb;</span><span\; class="notranslate">\; ;</span>$

(11) The handheld POS terminal receives and extracts the transaction interaction information sent by the mobile smart terminal, and makes a judgment based on the information extracted from the transaction interaction information: when the handheld POS terminal extracts the credit authentication certificate of the handheld POS terminal from the transaction interaction information When it has been stored in the credit authentication certificate database stored in it, it means that the payment transaction request initiated by the handheld POS terminal has been confirmed by the mobile smart terminal, that is, the mobile smart terminal agrees to the payment transaction initiated by the handheld POS terminal, then execute the step (12); otherwise, it indicates that the mobile smart terminal does not agree with the payment transaction, and the handheld POS terminal refuses to conduct payment transactions with the mobile smart terminal;

(12) The handheld POS terminal generates a second random number, and sends payment information including the second random number generated by it, the first random number, the first random number for anti-theft of the mobile smart terminal, and the payment required by the mobile smart terminal To the smart mobile terminal; among them, the payment information is marked as Message _PM-Payment :

Message _PM-Payment ＝{POS,Mobile,RP ₂ ,RM ₁ ,RP ₁ ,Payment,K};

Among them, RP ₂ represents the second random number generated by the handheld POS terminal, Payment represents the payment required by the mobile smart terminal, and K is the transaction secret key between the handheld POS terminal and the mobile smart terminal;

(13) The mobile intelligent terminal receives the payment information sent by the handheld POS terminal, and generates a second random number to prevent theft, and the mobile intelligent terminal will include the received payment information and the newly generated payment transaction record of the second random number to prevent theft The information is sent to the certification body for storage; wherein, the payment transaction record information is marked as S _MT-Payment : S _MT-Payment = {Mobile, TSM, POS, RM ₂ , k(Mobile, TSM)}; RM ₂ indicates that the mobile smart terminal generates The anti-theft second random number;

(14) The mobile intelligent terminal receives the payment password inputted through each key from the outside. After the mobile intelligent terminal judges whether the key is pressed by the left hand or the right hand according to the pressing pressure direction of each key, the mobile intelligent terminal calculates the pressure received by each key at this time. The pressing pressure is added to the pressing pressure database corresponding to the judged result, and the variance of each button corresponding to the pressing pressure database is recalculated at this time;

For example, if the mobile smart terminal judges that the person currently operating the mobile smart terminal to perform payment operations is left-handed, the mobile smart terminal will add the real-time collected palm surface temperature, palm surface humidity, and palm sweat discharge data to its legal owner's original data. Press the left hand of each button in the pressure database, and then calculate its variance to the newly formed left hand press pressure database, so as to calculate and understand the data fluctuation situation in the newly formed left hand press pressure database in step 15;

(15) The mobile intelligent terminal makes a judgment on whether to execute the payment operation according to the difference between the variance of the pressing pressure database newly obtained by each button in step (14) and the corresponding pressing pressure database variance in step (6):

When the difference obtained by each button is less than or equal to the preset threshold value, it means that the data in the press pressure database obtained by each button does not fluctuate greatly due to the newly added data, and the payment password is input by the legal owner of the mobile smart terminal. The mobile smart terminal sends a payment command including the payment password, its financial authentication certificate and credit authentication certificate to the bank system, and when the bank system judges that the payment password is consistent with the preset payment password, it transfers the money in the payment account of the mobile smart terminal to the logistics company In the receiving account of the banking system, the banking system sends a successful transfer notification to the handheld POS terminal, logistics company management platform and mobile smart terminal; If the payment password is not entered by the legal owner of the smart mobile terminal, the smart mobile terminal refuses to perform the payment operation;

(16) After the hand-held POS terminal receives the notification of successful transfer from the banking system, the dispatcher of the logistics company will hand over the goods to the recipient, and complete the delivery of the goods by the logistics company; After deducting the delivery fee preset by the platform, the logistics company management platform will send its tax identification number and payment order to the bank system according to the price of the target commodity in the order information, and the bank system will transfer the logistics company management platform collection account The corresponding payment in the order information is transferred to the receiving account of the merchant in the order information, and the transaction process of cash on delivery is completed;

(17) The banking system sends the successful transaction order number to the tax supervision system. When the tax supervision system checks that the successful transaction order number is consistent with the stored transaction order number, it indicates that the logistics company and the merchant will calculate the transaction order number for the transaction. The business tax that should be paid for the successful transaction order, and notify the banking system to replace the tax supervision system to withhold the business tax of the logistics company and the merchant respectively, so as to complete the tax supervision of the business shopping payment transaction system, prevent tax evasion, and increase the country's tax income.

Claims (1)

1. based on the business logistics safe payment method cashed on delivery, for the business logistics payment transaction system that merchant terminal, shopping online platform, consumer end, logistics company management platform, certification authority, banking system and tax supervisory systems are constituted, it is characterized in that, in turn include the following steps:

(1) businessman and logistics company register respective collecting account in banking system respectively, register respective identifier of paying taxes in tax supervisory systems, and respective identifier of paying taxes registered by shopping on the web platform；

(2) its each handheld POS terminal with NFC function is all put on record by logistics company management platform, set up each handheld POS terminal respectively with the communication connection of banking system, certification authority, utilize handheld POS terminal to send certification respectively and ask to banking system and certification authority, banking system generates the financial certification authority set of certificates of itself and the PKI of handheld POS terminal communication, handheld POS terminal, and sends financial certification authority set of certificates and PKI to handheld POS terminal；Certification authority generates the credit accreditation set of certificates of itself and the PKI of handheld POS terminal communication, handheld POS terminal, concurrently delivers letters and uses certification set of certificates and PKI to handheld POS terminal；Wherein:

Described handheld POS terminal is designated as POS, and banking system is designated as BANK, and certification authority is designated as TSM, and the financial certification authority set of certificates of handheld POS terminal is labeled as Cert (BANK_POS), the PKI of banking system and handheld POS terminal is designated as k (POS, BANK)；The credit accreditation set of certificates of handheld POS terminal is labeled as Cert (TSM_POS), certification authority and handheld POS terminal public key are designated as k (POS, TSM)；Wherein:

Cert(TSM_POS)={ Cert¹(TSM_POS),Cert²(TSM_POS),…,Cert^m(TSM_POS)}；

Cert(BANK_POS)={ Cert¹(BANK_POS),Cert²(BANK_POS),…,Cert^m(BANK_POS)}；m≥3；

Wherein, m represent handheld POS terminal can financial certification authority certificate and credit accreditation certificate number, the credit accreditation certificate of handheld POS terminal and its financial certification authority certificate are one-to-one relationship；Each credit accreditation certificate in handheld POS terminal credit accreditation set of certificates and each financial certification authority certificate in its financial certification authority set of certificates are followed traversal and are used rule and all limit use once；

(3) identifier of paying taxes registered by businessman's shopping on the web platform, and by merchant terminal shopping on the web platform publishing commodity information, after consumer utilizes consumer end's shopping on the web platform selecting end article, register addressee's contact details of purchased commodity, and select to cash on delivery, after the generation of shopping online platform, preserving the trading order form for purchased commodity, shopping online platform sends this commodity transaction order to be paid and stores to tax supervisory systems；Wherein, trading order form includes trading order form number, order generates Business Contact Information and businessman belonging to time, end article title and price, end article and pays taxes identifier, addressee information and mode of cashing on delivery；

(4) shopping online platform sends picking notice and trading order form to logistics company management platform, after logistics company management platform preserves trading order form, notice logistics company picking person locates picking according to trading order form information in businessman, and according to the addressee information in trading order form, logistics company management platform notify that logistics company is sent part person to carry the handheld POS terminal put on record and sent commodity with charge free according to the addressee information in trading order form；

(5) addressee utilizes it to have the mobile intelligent terminal of NFC function to send certification respectively and ask to banking system and certification authority, banking system generates the financial certification authority set of certificates of its PKI communicated with mobile intelligent terminal, mobile intelligent terminal, and sends financial certification authority set of certificates, PKI to mobile intelligent terminal；Certification authority generates the credit accreditation set of certificates of its PKI communicated with mobile intelligent terminal, mobile intelligent terminal, concurrently delivers letters with certification set of certificates, PKI to mobile intelligent terminal；Wherein:

Described mobile intelligent terminal is designated as Mobile, and the financial certification authority set of certificates of mobile intelligent terminal is labeled as Cert (BANK_Mobile), the PKI of banking system and mobile intelligent terminal is designated as k (Mobile, BANK)；The credit accreditation set of certificates of mobile intelligent terminal is labeled as Cert (TSM_Mobile), the PKI of certification authority and mobile intelligent terminal is designated as k (Mobile, TSM)；Wherein:

Cert(TSM_Mobile)={ Cert¹(TSM_Mobile),Cert²(TSM_Mobile),…,Cert^m(TSM_Mobile)}；

Cert(BANK_Mobile)={ Cert¹(BANK_Mobile),Cert²(BANK_Mobile),…,Cert^m(BANK_Mobile)}；m≥3；Wherein, the credit accreditation certificate of mobile intelligent terminal and its financial certification authority certificate are one-to-one relationship；Each credit accreditation certificate in mobile intelligent terminal credit accreditation set of certificates and each financial certification authority certificate in its financial certification authority set of certificates are followed traversal and are used rule and all limit use once；

(6) mobile intelligent terminal in preset time period its lawful owner of Real-time Collection when delivery operation, on keyboard, each button presses pressure value and presses pressure direction, build mobile intelligent terminal lawful owner utilizes the left hand that left hand and the right hand are respectively directed to each button to press pressure data storehouse and the right hand presses pressure data storehouse when delivery operation, and calculates each button left hand respectively and press pressure data storehouse and the right hand presses the variance in pressure data storehouse；Wherein:

On described mobile intelligent terminal, i-th button is designated as Button_i, for button Button_iThe left hand of constructed mobile intelligent terminal lawful owner is pressed pressure data storehouse and is designated asThe right hand is pressed pressure data storehouse and is designated asN ∈ N, N be left hand press pressure data storehouse and the right hand press pressure data storehouse stores respectively press pressure data number；Represent for button Button_iThe n-th of the mobile intelligent terminal lawful owner's left hand gathered presses pressure data,Represent for button Button_iThe n-th of the mobile intelligent terminal lawful owner's right hand gathered presses pressure data；Described button Button_iThe variance that suffered mobile intelligent terminal lawful owner's left hand presses pressure is designated asMobile intelligent terminal lawful owner's right hand is pressed the variance of pressure and is designated asWherein, varianceWithComputing formula respectively as follows:

${\mathrm{\&sigma;}}_{Left}^2\left({\mathrm{Button}}_i\right)=\underset{n=1}{\overset{N}{\&Sigma;}}\frac{{\left(F_{Buttoni}^{Left}\right(n)-\stackrel{\&OverBar;}{F_{Buttoni}^{Left}})}^2}{N},$ $\stackrel{\&OverBar;}{F_{Buttoni}^{Left}}=\underset{n=1}{\overset{N}{\&Sigma;}}\frac{F_{Buttoni}^{Left}\left(n\right)}{N};$

${\mathrm{\&sigma;}}_{Right}^2\left({\mathrm{Button}}_i\right)=\underset{n=1}{\overset{N}{\&Sigma;}}\frac{{\left(F_{Buttoni}^{Right}\right(n)-\stackrel{\&OverBar;}{F_{Buttoni}^{Right}})}^2}{N},$ $\stackrel{\&OverBar;}{F_{Buttoni}^{Right}}=\underset{n=1}{\overset{N}{\&Sigma;}}\frac{F_{Buttoni}^{Right}\left(n\right)}{N};$

(7) logistics company send part person send with charge free commodity to addressee place and wait addressee pay the bill time, after logistics company sends part person to open the NFC function of handheld POS terminal and addressee opens the NFC function of its mobile intelligent terminal, handheld POS terminal generates, store the effective time value of the first random number and the first random number, obtain noise and the air humidity of current location and current location, then the payment request information including handheld POS terminal self signature is sent to the mobile intelligent terminal of addressee, and send handheld POS terminal current location, current location noise and air humidity data are to certification authority；Wherein:

Described payment request information includes the first random number R P that handheld POS terminal generates₁, this first random number R P₁Effective time value TP, the financial certification authority certificate Cert that chooses of payment request ReqM, handheld POS terminal^t(BANK_POS), the credit accreditation certificate Cert that chooses of handheld POS terminal^t(TSM_POS), handheld POS terminal self signature Sig_POSAnd the private key sk (POS) of handheld POS terminal；Wherein, this payment request information is designated as Message_P-M, payment request information Message_P-MAs follows by formula labelling:

${\mathrm{Message}}_{P-M}=\left\{\begin{array}{c}POS,Mobile,{\mathrm{RP}}_{1}TP,{\mathrm{Cert}}^t\left({\mathrm{BANK}}_{POS}\right),{\mathrm{Cert}}^t\left({\mathrm{TSM}}_{POS}\right),\mathrm{Re}M,\\ {\mathrm{Sig}}_{POM},sk\left(POS\right)\end{array}\right\};t\&Element;\&lsqb;1,m\&rsqb;;$

(8) mobile intelligent terminal receives the payment request information that handheld POS terminal sends, generate anti-the first random number stolen secret information, obtain noise and the air humidity of mobile intelligent terminal current location and current location, and send the certification solicited message and mobile intelligent terminal current location, current location noise and air humidity that include handheld POS terminal payment request information to certification authority；Wherein:

The certification solicited message that described mobile intelligent terminal sends includes the payment request information Message of handheld POS terminal_P-M, mobile intelligent terminal generate anti-the first random number R W stolen secret information₁, certification request ReqT, its ask PKI k (Wallet, TSM) of communicating between ReqSession and mobile intelligent terminal with certification authority with handheld POS terminal session；Wherein, this certification solicited message of mobile intelligent terminal is labeled as Message_M-T, wherein:

Message_M-T={ Message_P-M,TSM,RM₁,ReqT,ReqSession,k(Mobile,TSM)}；

(9) certification authority receives, extracts certification solicited message and mobile intelligent terminal current location and current location noise and air humidity that mobile intelligent terminal sends, record receives the time of mobile intelligent terminal certification request, and mobile intelligent terminal is made whether the feedback being traded according to the certification solicited message of the mobile intelligent terminal extracted, mobile intelligent terminal current location and current location noise and air humidity, handheld POS terminal current location and current location noise and air humidity；Wherein, this step includes step (9-1) successively to step (9-3):

(9-1) when certification authority judges the effective time value that the time that the handheld POS terminal credit accreditation certificate extracted is present in the credit accreditation certificate database that certification authority has stored and certification authority's reception mobile intelligent terminal certification is asked is positioned at the first random number, show that the handheld POS terminal that this credit accreditation certificate is effective and corresponding is security terminal, certification authority generates the transaction key between mobile intelligent terminal and this handheld POS terminal, and performs step (9-2)；Otherwise, certification authority sends refusal Transaction Information to mobile intelligent terminal；

(9-2) certification authority is according to the handheld POS terminal extracted and the current location of mobile intelligent terminal and current location noise, judge handheld POS terminal and mobile intelligent terminal the difference of current location noise corresponding respectively be positioned at default difference range, and the space length between handheld POS terminal and mobile intelligent terminal less than default Secure Transaction word space threshold time, then perform step (9-3)；Otherwise, certification authority sends refusal Transaction Information to mobile intelligent terminal

(9-3) certification authority judge handheld POS terminal and mobile intelligent terminal the difference of air humidity corresponding respectively when being positioned at default difference range, then certification authority sends and confirms that Transaction Information is to mobile intelligent terminal；Otherwise, certification authority sends refusal Transaction Information to mobile intelligent terminal；Wherein:

The confirmation Transaction Information that described certification authority sends is labeled as Message_T-M-Confirm, the transaction key of mobile intelligent terminal and handheld POS terminal room is designated as K, and the refusal Transaction Information that certification authority sends is labeled as Message_T-M-Reject；Wherein:

Message_T-M-Confirm={ TSM, Mobile, POS, RP₁,RM₁,TP,Cert^t(TSM_POS),K,k(Mobile,TSM)}；

Message_T-M-Reject={ TSM, Mobile, POS, RP₁,RM₁,RejectP,k(Mobile,TSM)}；

(10) mobile intelligent terminal receives the confirmation Transaction Information that certification authority sends, and the transaction interactive information including mobile intelligent terminal signature is sent to handheld POS terminal；Wherein:

Described transaction interactive information includes the signature Sig of mobile intelligent terminal_Mobile, the financial certification authority certificate Cert that chooses of the anti-transaction key of the first random number, mobile intelligent terminal and handheld POS terminal room stolen secret information that generates of mobile intelligent terminal, mobile intelligent terminal^s(BANK_Mobile), the credit accreditation certificate Cert that chooses of mobile intelligent terminal^s(TSM_Mobile) and the credit accreditation certificate Cert chosen of handheld POS terminal^t(TSM_POS)；Wherein, the transaction interactive information that described mobile intelligent terminal sends is labeled as Message_M-P, conclude the business interactive information Message_M-PAs follows by formula labelling:

${\mathrm{Message}}_{M-P}=\left\{\begin{array}{c}Mobile,POS,TSM,{\mathrm{PM}}_1,{\mathrm{Cert}}^s\left({\mathrm{BANK}}_{Mobile}\right),{\mathrm{Cert}}^s\left({\mathrm{TSM}}_{Mobile}\right),K,\\ {\mathrm{Sig}}_{Mobile},{\mathrm{Cert}}^t\left({\mathrm{TSM}}_{POS}\right)\end{array}\right\};s\&Element;\&lsqb;1,m\&rsqb;;$

(11) handheld POS terminal receives, extracts the transaction interactive information that mobile intelligent terminal sends, and judge according to the information extracted in interactive information of concluding the business: when the handheld POS terminal credit accreditation certificate that handheld POS terminal is extracted in interactive information of concluding the business has been stored in the credit accreditation certificate database of its storage, then perform step (12)；Otherwise, handheld POS terminal refusal carries out payment transaction with mobile intelligent terminal；

(12) handheld POS terminal generates the second random number, and send include the second random number of its generation, the first random number, mobile intelligent terminal prevent that the payment information of payment is to mobile intelligent terminal needed for the first random number stolen secret information, mobile intelligent terminal；Wherein, described payment information flag is Message_P-M-Payment:

Message_P-M-Payment={ POS, Mobile, RP₂,RM₁,RP₁,Payment,K}；

Wherein, RP₂Representing the second random number that handheld POS terminal generates, Payment represents payment needed for mobile intelligent terminal, and K is the transaction key between handheld POS terminal and mobile intelligent terminal；

(13) mobile intelligent terminal receives the payment information that handheld POS terminal sends, and generate anti-the second random number stolen secret information, mobile intelligent terminal the payment transaction records information including received payment information and newly-generated anti-second random number of stealing secret information is sent to certification authority's storage；Wherein, described payment transaction records information flag is S_M-T-Payment: S_M-T-Payment={ Mobile, TSM, POS, RM₂,k(Mobile,TSM)}；RM₂Represent anti-the second random number stolen secret information that mobile intelligent terminal generates；

(14) mobile intelligent terminal receives the outside payment cipher by each key-press input, by mobile intelligent terminal press suffered by each button pressure direction judge to press press each button as after left hand or the right hand, mobile intelligent terminal adds corresponding the pressing in pressure data storehouse of institute's judged result to by pressing pressure suffered by now each button, recalculates now each button correspondence and presses the variance in pressure data storehouse；

(15) mobile intelligent terminal is pressed according to each button gained again in step (14) corresponding in pressure data storehouse variance and step (6) and is pressed the difference between the variance of pressure data storehouse, judges whether performing delivery operation:

When each button gained difference is respectively less than or is equal to predetermined threshold value, represent that this payment cipher is inputted by mobile intelligent terminal lawful owner, mobile intelligent terminal sends the pay warrant including this payment cipher and its financial certification authority certificate to banking system, when being judged that payment cipher is consistent with default payment cipher by banking system, the fund of mobile intelligent terminal Send only Account is transferred to logistics company in the collecting account of banking system, and is turned money success notification to handheld POS terminal, logistics company management platform and mobile intelligent terminal by banking system transmission；Otherwise, representing that this payment cipher is not mobile intelligent terminal lawful owner input, mobile intelligent terminal refusal performs delivery operation；

(16) handheld POS terminal receive banking system send turn money success notification after, logistics company sends part person to give addressee by commodity, completes logistics company sending with charge free these commodity；Logistics company management platform sends expense with charge free according to what it was preset with shopping online platform, after at deduction, it sends expense with charge free, logistics company management platform is according to the end article price in sequence information, send its pay taxes identifier and pay warrant to banking system, the collecting account being transferred in sequence information by the corresponding fund in logistics company management platform collecting account businessman by banking system, completes the process of exchange cashed on delivery；

(17) this Successful Transaction order number is sent to tax supervisory systems by banking system, when trading order form number that tax supervisory systems this Successful Transaction order number being checked has stored with it is consistent, then calculate respectively and obtain the business tax that logistics company and businessman should pay for this Successful Transaction order, and transmitting bank's system substitutes tax supervisory systems and withholds the business tax of logistics company and businessman respectively, to complete the taxation supervision to commercial affairs shopping payment transaction system.