CN1932866B - Network software payment method and system thereof - Google Patents

Abstract

The invention discloses a network software payment method and a system thereof, belonging to the technical field of network financial transactions. The invention saves the user information in the smart key device, connects the smart key device to the computer, and the network software agent verifies the user information in the smart key device, and guides the user to the payment platform to pay after the verification is passed. . Since the present invention adopts an intelligent key device, and the intelligent key device is a security carrier capable of preventing tampering and stealing of internal information, its security performance is extremely high. The smart key device can only use the key inside the device, so that the key cannot be copied. In addition, because the network software agent can send the payment information to the smart key device, and use the smart key device to complete the subsequent recharge work, the end user no longer needs to enter the user name, password, and recharge information multiple times, and the payment process is simpler and reduces The probability of user information being stolen is reduced, so it is more secure.

Description

Payment method and system for network software

technical field

The invention relates to the technical field of network financial transactions, in particular to a payment method and system for network software.

Background technique

The rapid development of the network has brought about a change in the means of payment - online payment. In order to ensure the safety of user information, the existing online payment methods require multiple authentication procedures such as electronic signatures and passwords. Taking the existing online game recharge payment as an example, if the user uses online banking to pay, the following steps must be followed:

1) Enter the agent's webpage, enter the user name and corresponding password registered by the user at the agent, after the verification is passed, enter or select the service and amount to be paid, and confirm;

2) The agent's webpage automatically transfers to the payment platform webpage. On the payment platform webpage, the user needs to enter the bank's user name and password to pay online. The successful payment information will be returned to the agent. , mobile phone and other means to send the payment information to the user;

3) Enter the game operator's webpage, enter the user name and corresponding password registered by the user in the online game, and after the verification is passed, enter the payment information received in the previous step to complete the entire payment process.

The above steps require multiple input of user names and passwords. There are many authentication steps and cumbersome authentication methods. It is easy for users to make mistakes when entering authentication information, and there is a great risk of information being intercepted. Therefore, the simplification of transaction steps and the security of payment are particularly important.

The smart key device is a small hardware device with a processor and a memory, which can be connected to a computer through the computer's data communication interface. The private key can be saved inside it, the encryption algorithm can be preset, and some algorithms can also be customized later. The built-in private key of the smart key device is invisible to the outside world, and the calculations related to the key are completely run inside the device, and the smart key device has the characteristics of anti-attack and extremely high security.

HMAC (keyed-Hashing Message Authentication Code)-Hash keyed hash algorithm is a commonly used authentication method of impact response. The smart key device uses HMAC-Hash for online authentication. First, the client sends a login request to the server, and the server can extract the corresponding user key from the database through the user name; after that, when the server receives the login request from the client, it sends the smart key to the server through the client. The device sends a random character string, and the smart key device on the client performs HMAC-Hash calculation on the received random character string and the key in the smart key device through the built-in hardware encryption engine, and returns the result to the server. After receiving the calculation result, the server performs the same calculation according to the corresponding key and the random string sent, and finally the server compares the two results, and if they are the same, the verification is passed. HMAC combines the key with the Hash operation, and each operation involves random data to ensure that the result data generated by each authentication process is different, so that even if a malicious person intercepts a certain authentication data, it cannot pass the next authentication.

The asymmetric key mechanism is a widely used authentication mechanism at present. In this mechanism, the encryption key is different from the decryption key, and the data encrypted with the public key can only be decrypted with the corresponding private key. The digital signature of the public key system not only ensures the confidentiality of the information, but also ensures the non-repudiation of the information. First, the client sends a login request to the server, and the server sends a random string to the smart key device through the client. , the smart key device signs the random character string with the private key, returns it to the server, and the server verifies it with the corresponding public key of the smart key device.

The operator of network software refers to the party that provides all services related to the operation and maintenance of network software, and the agent refers to the party responsible for selling network software related products. The operating mode of existing network software is that operators provide services related to network software operation and maintenance and grant sales rights to agents, and sellers are responsible for selling software or software-related products.

Contents of the invention

In order to solve the problems of cumbersome operation and low security of the network software payment method in the prior art, the present invention provides a network software payment method with simple operation and high security, and a system for realizing the method.

The payment method of the network software of the present invention includes a payment process and a recharge process:

The payment process includes the following steps in turn:

(1) The smart key device establishes a connection with the computer;

(2) The agent server end is selected, and the agent server end verifies the user information through the smart key device;

(3) The agent server side links the user interface to the payment platform;

(4) After successful payment through the payment platform, the agent server sends the payment information to the smart key device and saves the payment information in the smart key device;

The recharge process includes the following steps in turn:

(1) The client reads the payment information in the smart key device;

(2) The client sends the payment information to the operator server;

(3) Complete the top-up; or,

(1)'The user runs the client program;

(2)' the user enters the PIN code of the smart key device after the client program prompts;

(3) 'The smart key device judges whether the PIN code entered by the user is correct, if correct, the verification is passed, and step (4)' is performed; if it is not correct, the verification fails, and the user is required to input the PIN code again;

(4)'The online game server verifies the user information stored in the smart key device through the client program;

(5) 'The online game server judges whether the verification result is correct, if it is correct, the verification is passed, and the client program reads the payment information in the smart key device; if it is not correct, the verification fails, exit the recharge program, and send a warn;

(6)'The client program sends the payment information to the server;

After the smart key device is connected to the computer, it also includes the step of verifying the legal holder of the smart key device;

The method for verifying the legal holder of the smart key device is PIN code verification or biometric verification;

The step of verifying user information adopts an impact response method or an asymmetric key method.

The recharging process is the operation of the client program, and the client program reads the payment information and sends it to the operator server to complete the recharging operation;

The payment information is transmitted in encrypted form.

The present invention also provides a payment system for network software, including a smart key device, a client and an agent/operator server,

The smart key device includes:

A storage module for storing user information and payment information;

A communication module, used to establish a communication link between the smart key device and the computer, and transmit data;

The legal holder verification module is connected with the communication module, and is used to verify whether the current user is the legal holder of the smart key device during use; the legal holder verification method is PIN code verification or biometric verification ;

The clients include:

The transceiver module is used to send the data of the smart key device to the agent/operator server through the Internet, or receive the agent/operator server data transmitted from the network and send it to the agent/operator server. smart key device;

The agent/operator server includes:

A communication module, configured to receive data sent by the transceiver module or send data from the agent/operator server to the transceiver module;

The user identity verification module is connected with the communication module, and is used to verify the user information in the smart key device; the step of verifying the user information adopts an impact response method or an asymmetric key method.

The smart key device also includes an encryption module connected between the storage module and the communication module of the smart key device for encrypting the transmission data.

The beneficial effect produced by the present invention is: because the present invention adopts the intelligent key device, and the intelligent key device is a security carrier capable of preventing tampering and stealing of internal information, the intelligent key device can only use the key inside the equipment. key, the key cannot be copied like this, and its security is very high, and the present invention adopts the intelligent key device to greatly improve the security of network software payment. In addition, because the agent can send the payment information to the smart key device, and use the smart key device to complete the subsequent recharge work, the end user no longer needs to enter the user name, password, and recharge information multiple times, and the payment process is simpler and reduces the number of users. The probability of information being stolen, so it is more secure.

Description of drawings

Fig. 1 is a flowchart of an embodiment in which a user uses a smart key device to pay via the network.

Fig. 2 is a flow chart of an embodiment in which a user uses a smart key device to recharge an online game.

Fig. 3 is a flow chart of another embodiment in which a user uses a smart key device to recharge an online game.

Fig. 4 is a structural principle diagram of the payment system of the network software.

Detailed ways

The method of the present invention will be further described below in conjunction with the accompanying drawings and specific embodiments, but it is not intended to limit the present invention.

As shown in Figure 1, the whole process of the user using the smart key device to pay through the network is:

Step 101: storing user information in the smart key device, the information may include user name, user password and key, etc.;

Step 102: When the user needs to pay, connect the smart key device to the computer;

Step 103: In order to protect the smart key device from being stolen by others, the user inputs the PIN code of the smart key device;

Step 104: the smart key device judges whether the PIN code input by the user is correct, if it is correct, the verification is passed, and step 105 is executed; if it is not correct, the verification fails, and the step is returned to step 103, and the user is required to input the PIN code again;

Step 105: the user selects an agent, such as a seller in an online store, or a game agent;

Step 106: The agent verifies the user information stored in the smart key device;

Step 107: Determine whether the verification result is correct, if it is correct, the verification is passed, and execute step 108; if it is not correct, the verification is not passed, execute step 111, exit the payment program, and issue a warning to the user;

Step 108: The agent introduces the user to the payment platform, such as a bank's payment web page, the user enters the account number and password of the electronic bank to pay, and the payment is completed.

Step 109: the payment platform sends payment information to the agent;

Step 110: The agent sends the payment information to the smart key device.

In the above process, the step of PIN code verification can be replaced by biometric verification, which can also achieve the purpose of verifying whether the user is the legal holder of the smart key device.

In the above process, the agent can verify the user information stored in the smart key device in two ways: impulse response and asymmetric key.

The following takes an online game as an example to illustrate the process of the user using the smart key device to recharge the network software.

As shown in Figure 2, the process for the user to recharge online games using the smart key device is:

Step 201: The user directly links to the operator's webpage from the agency's webpage after passing the above payment process;

Step 202: The operator verifies the user information stored in the smart key device;

Step 203: Determine whether the verification result is correct, if it is correct, the verification is passed, and execute step 204; if not, the verification is not passed, execute step 207, exit the recharge program, and issue a warning to the user;

Step 204: The operator reads the payment information in the smart key device through its web page;

Step 205: The operator's webpage sends the payment information to the operator's server;

Step 206: The top-up is completed.

As shown in Figure 3, the process of another way for the user to use the smart key device to recharge the online game is:

Step 301: the user runs the client program;

Step 302: The user inputs the PIN code of the smart key device after being prompted by the client program;

Step 303: the smart key device judges whether the PIN code input by the user is correct, if it is correct, the verification is passed, and step 304 is executed; if it is not correct, the verification fails, and the step is returned to step 302, and the user is required to input the PIN code again;

Step 304: The online game server verifies the user information stored in the smart key device through the client program;

Step 305: Determine whether the verification result is correct. If it is correct, the verification is passed, and then execute step 306;

Step 306: the client program reads the payment information in the smart key device;

Step 307: the client program sends the payment information to the server;

Step 308: The top-up is completed.

The PIN code verification in the above process can also be replaced by biometric verification.

The verification of the user information stored in the smart key device in the above two recharging processes is the same as the payment process, and there are also two verification methods: impulse response and asymmetric key.

During the entire process of payment and recharging, the payment information is transmitted in ciphertext.

As shown in Figure 4, the present invention also provides a payment system for network software, the system includes a smart key device, a client and an agent/operator server,

The smart key device includes a storage module, an encryption module, a communication module and a PIN code verification module, wherein:

The storage module is used to store user information and payment information, the user information includes user name, user password and key, etc., and the payment information includes payment amount and other information;

An encryption module, connected between the storage module and the communication module, is used to encrypt the transmission data;

A communication module, used for establishing a communication link between the smart key device and the computer, and transmitting data;

The legal holder verification module is connected with the communication module, and is used to verify whether the current user is the legal holder of the smart key device during use, which can be verified by PIN code or user's biometric feature;

The client includes a transceiver module, which is used to send the data of the smart key device to the agent/operator server through the Internet, or receive the server-side data transmitted from the network and send it to the smart key device;

The agent/operator server includes a communication module and a user authentication module, where:

A communication module, configured to receive data sent by the transceiver module or send data from the server to the transceiver module;

The user identity verification module is connected with the communication module and used for verifying the user information in the smart key device.

The above is only a preferred embodiment of the present invention, and the scope of protection of the present invention is not limited thereto. Those skilled in the art can easily think of any changes or substitutions within the technical scope disclosed in the present invention. All should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be determined by the protection scope of the claims.

Claims (2)

1. A payment method for network software, characterized in that, The smart key device establishes a connection with the computer, wherein the smart key device includes user information; Use the smart key device to verify the identity of the user; When the smart key device judges that the user's identity is legal, the agent server selected by the user verifies the user information through the smart key device; When the verification is successful, the agency server connects the user terminal with the payment platform; After the payment is successful, the payment platform sends the payment information to the agent server; The agency server sends the payment information to the smart key device and saves the payment information in the smart key device; The operator server verifies the user information through the smart key device; When the verification is successful, the client reads the payment information in the smart key device; The client sends the payment information to the operator server; Wherein the smart key device uses a PIN code or a biometric feature to verify the identity of the user; The step of verifying user information adopts an impact response method or an asymmetric key method. 2. The payment method for network software according to claim 1, wherein the payment information is transmitted in ciphertext.

Images