TWI817096B - A tokenization scanning code payment system, method and computer readable medium - Google Patents

Abstract

The present invention provides a tokenization scanning code payment system, method and computer readable medium. The system includes a tokenization scanning code payment device, a mobile device and a sales device, wherein the tokenization scanning code payment device receives a trading data from the mobile device and the sales device. The tokenization scanning code payment device obtains a corresponding card number based on the tokenization card information in the trading data for subsequent payment. Therefore, the present invention can be applied to scan code payment without being restricted by the tokenization card information of contactless payment to provide users with a more convenient and secure transaction mode. The present invention further provides a computer-readable medium for performing the tokenization scanning code payment method.

Description

A coded scan code payment system, method and computer-readable medium

The present invention relates to a coded payment technology, and in particular, to a coded scan code payment system, method and computer-readable medium that utilizes coded card information.

At present, in terms of payment behavior, more and more consumers have gradually become accustomed to switching from cash and physical cards to using mobile payment for consumption, and scanning barcodes has become the mainstream among users today. However, relatively speaking, "the merchants are not widespread" and "the card is not supported" are one of the main reasons why users do not like to use mobile payment.

However, in the existing technology, the coding services provided by card issuing organizations (such as GISMI International Co., Ltd., MasterCard Inc. or Visa Inc.) are limited. When applying for a coded card (such as a code card) on a smartphone, When using a coded credit card, you must decide whether the coded card (such as a coded credit card) will be used for scan-code payment or contactless payment. In other words, coded cards (such as coded credit cards) used for scan-code payment or contactless payment cannot replace each other or be used interchangeably. Therefore, the payment methods they can provide have been determined at the time of application and cannot be easily changed later. or flexible use.

Furthermore, if the coded card of the conventional scan-code payment is used for scan-code payment, the system of the operator providing the scan-code payment service will store the user corresponding to the coded card of the conventional scan-code payment. the original credit card number. Therefore, when the system side performs a transaction, after receiving the coded card of the conventional scan-code payment, the system side obtains the corresponding user's original credit card number from within its system to perform the transaction.

However, the aforementioned transaction model using conventional scan-code payment coded cards for scan-code payment requires the user's card number to be stored in advance in the system of the operator that provides scan-code payment services. Therefore, the system has the potential to leak the user's credit card number. Doubts about the original credit card number reduce the security of the transaction.

Therefore, how to overcome the limitation that coded cards cannot replace each other or be used interchangeably, so that the current electronic wallet provider's contactless payment tools can use the contactless coded card to carry out scan-code payment mode, improve the convenience of use of payment tools and expand the applicability Fields and improving their security have become important issues for those skilled in the field.

In order to solve the above problems, the present invention provides a coded scan code payment system, which includes: a sales device that transmits the first transaction data; a mobile device that transmits the second transaction data; and a code scan payment device that is connected by communication. The mobile device and the sales device receive the first transaction data or the second transaction data for verification, and then obtain the corresponding card number based on the coded card information in the first transaction data or the second transaction data for processing. Transaction authorization, in which, after obtaining and confirming the result of the transaction authorization, the scan-code payment device causes the scan-code payment device to conduct a transaction, and then notifies the mobile device and the sales device to display the result of the transaction.

The present invention also provides a coded scan code payment method, which includes: a scan code payment device receiving the first transaction data transmitted from a sales device, or receiving the second transaction data transmitted by a mobile device, in order to respond to the third transaction data. Verify the first transaction data or the second transaction data; the scan-code payment device obtains the corresponding card number based on the coded card information in the first transaction data or the second transaction data for transaction authorization; and the scan-code payment device obtains the corresponding card number based on the coded card information in the first transaction data or the second transaction data for transaction authorization; The QR code payment device obtains and confirms the result of the transaction authorization, so that the QR code payment device performs the transaction, and then notifies the mobile device and the sales device to display the result of the transaction.

The invention further provides a computer-readable medium, which is used in a computing device or computer and stores instructions to execute the above coded code scanning payment method.

From the above, it can be seen that the coded scan code payment system, method and computer-readable medium of the present invention transmit the coded card information from the mobile device or sales device to the card issuing organization for translation (de-tokenize) to obtain the original card number. and make payment. In this way, the present invention provides users to apply for a set of coded card information for contactless payment based on their bound credit card or debit card, which can then be used for contactless payment or scan-code payment. Therefore, compared with In the existing technology, it is necessary to specify whether the coded card information is for contactless payment or scan-code payment when applying, so the two cannot be used interchangeably. However, the present invention can apply the coded card information used for contactless payment to Scan-code payment allows users to quickly and safely choose the most suitable payment method based on current needs.

In order to make the above-mentioned features and advantages of the present invention more obvious and easy to understand, embodiments are given below and explained in detail with reference to the accompanying drawings. Additional features and advantages of the invention will be set forth in the description which follows, and in part will be apparent from the description, or may be learned by practice of the invention. It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory and are not intended to limit the scope of the present invention.

1: Coded scan code payment system

10: Scan code payment device

101:Data verification module

102: Payment processing module

103:Code processing module

11:Mobile device

111: Transaction data processing module

112:Transmission interface

12: Sales device

20:Card issuing organization

30:Card issuing bank

40: Acquiring bank

S21 to S28, S31 to S38: steps

S41 to S412, S51 to S510: steps

S61 to S67: Steps

Figure 1 is a schematic structural diagram of the coded scanning payment system of the present invention;

Figure 2 is a schematic flow chart of the scanned method for coded scanning payment according to the present invention;

Figure 3 is a schematic flow chart of the main scanning method of coded scanning payment according to the present invention;

Figure 4 is a sequential schematic diagram of the payment embodiment of the scanned method in Figure 2;

Figure 5 is a sequential schematic diagram of the payment embodiment of the main scanning method in Figure 3; and

FIG. 6 is a sequential schematic diagram of the subsequent payment embodiment of FIG. 4 and FIG. 5 .

The following describes the implementation of the present invention through specific embodiments. Those familiar with the art can easily understand other advantages and effects of the present invention from the content disclosed in this specification.

It should be noted that the structures, proportions, sizes, etc. shown in the drawings attached to this specification are only used to coordinate with the content disclosed in the specification for the understanding and reading of those familiar with the art, and are not used to limit the implementation of the present invention. Therefore, it has no technical substantive significance. Any structural modifications, changes in proportions, or adjustments in size shall still fall within the scope of this invention without affecting the effects that can be produced and the purposes that can be achieved. The technical content disclosed by the invention must be within the scope that can be covered. At the same time, terms such as "a", "first", "second", "upper" and "lower" cited in this specification are only for convenience of description and are not used to limit the scope of the present invention. Changes or adjustments in the scope of implementation and relative relationships shall be regarded as the scope within which the present invention can be implemented without substantially changing the technical content.

Figure 1 is a schematic structural diagram of the coded scan code payment system of the present invention. As shown in Figure 1, the coded scan code payment system 1 includes: a scan code payment device 10, a mobile device 11 with an application (Application, APP) and a camera lens, and a sales device 12, wherein the code scan payment device 10 includes: The payment device 10 includes a data verification module 101, a payment processing module 102 and a code processing module 103, and the mobile device 11 includes a transaction data processing module 111 and a transmission interface 112.

Specifically, the scan code payment device 10 is built in a server (such as a general server, a file server, a storage unit server, etc.) or other electronic equipment with appropriate computing mechanisms; the mobile device 11 includes a smart mobile phones, smart bracelets/watches, tablets or other portable electronic devices; and the sales device 12 includes a point of service (POS, or commonly referred to as POS machine), but is not limited to above.

In addition, each of the above modules can be software, hardware or firmware; if it is hardware, it can be a processing unit, processor, computer or server with data processing and computing capabilities; if it is software or firmware , it can include instructions executable by a processing unit, processor, computer or server, and can be installed on the same hardware device or distributed on multiple different hardware devices.

In this embodiment, the scan-code payment device 10 is connected via communication (such as using the Internet or various wired, wireless or mobile networks) to connect a mobile device 11, a sales device 12, a card issuing organization 20, One card issuing bank 30 and one acquiring bank 40. Among them, the card issuing organization 20 includes JCB International Co., Ltd. and MasterCard, which issue Japan Credit Bureau (JCB). MasterCard Company, or VisaCard Company, etc.; and the card issuing bank 30 and the acquiring bank 40 include banks and other related financial institutions, but are not limited to the above.

The scan code payment device 10 includes a data verification module 101, a payment processing module 102 and a code processing module 103, wherein the data verification module 101 is used to verify that the mobile device 11 and the Whether the binding relationship between the coded card information of the bound card selected by the user (such as a credit card or debit card, etc.) is consistent, and an encryption algorithm is used to generate a transaction verification code to verify the first transaction data Legality, integrity and format correctness, or using a cryptographic algorithm to encrypt a second transaction data, and then using the cryptographic algorithm to parse the encrypted second transaction data, and also verify the parsed second transaction data The legality, completeness and correctness of the format of the secondary transaction data.

In one embodiment, the cryptographic algorithm includes Triple Data Encryption Algorithm (TDEA, or 3DES) or Advanced Encryption Standard (Advanced Encryption Standard, AES), but is not limited to the above.

Furthermore, the payment processing module 102 is used to process transaction data content and execute transaction process logic; and the code processing module 103 is used to interface with the card issuing organization 20, the card issuing bank 30 or the acquiring bank 40, and The code processing module 103 retrieves the corresponding original card number from the coded card information of the selected bound card through the card issuing organization 20. In addition, it also provides the payment processing module 102 to the card issuing bank 30 or the acquiring bank 40. forward the request.

The mobile device 11 is a scanner with the function of scanning one-dimensional or two-dimensional barcodes (such as QR code) and a display (not shown in the figure) with the function of displaying one-dimensional or two-dimensional barcodes (such as QR code), and includes A transaction data processing module 111 and a transmission interface 112, wherein the transaction data processing module 111 is used to provide access to the coded card information in the mobile device 11, and generate an identification containing the mobile device 11 information, the coded card information of the selected bound card, and the one-dimensional or two-dimensional barcode (such as QR code) of the transaction verification code.

In addition, the transaction data processing module 111 can be used to parse the one-dimensional or two-dimensional barcode (such as QR code) generated by the sales device 12 to obtain transaction information; and the transmission interface 112 is used to provide the mobile device 11 Transfer data to and from the QR code payment device 10 .

In one embodiment, the identification information of the mobile device 11 includes an International Mobile Equipment Identity number (IMEI), an International Mobile Subscriber Identification Number (IMSI) or an integrated circuit. Card identification code (Integrate circuit card identity, ICCID), etc., but not limited to the above.

In one embodiment, the application program of the mobile device 11 provides a user to apply for corresponding coded card information from a card issuing group ID 20 based on at least one bound card (such as a credit card or a debit card, etc.), and the Coded card information is used for contactless payments.

The sales device 12 is used to read the one-dimensional or two-dimensional barcode (such as QR code) of the mobile device 11 to obtain the identification information of the mobile device 11 and the coded card information of the selected bound card. and the transaction verification code, to transmit the identification information of the mobile device 11, the coded card information, the transaction verification code and the first transaction information of the transaction information to the scan code payment device 10, or the sales The device 12 generates and displays a one-dimensional or two-dimensional barcode (such as a QR code) containing transaction information, wherein the one-dimensional or two-dimensional barcode (such as a QR code) is generated in real time through the sales device 12 .

In one embodiment, the transaction information includes store information, product name, product price or product quantity, but is not limited to the above.

In one embodiment, the one-dimensional or two-dimensional barcode (such as QR code) generated by the sales device 12 is also a fixed one-dimensional or two-dimensional barcode (such as QR code), which includes the store's Information, after scanning the fixed one-dimensional or two-dimensional barcode (such as QR code) with the scanner of the mobile device 11, transaction information such as the amount of the product can be input through the application of the mobile device 11.

FIG. 2 is a schematic flowchart of the scanned method of the coded code scanning payment system of the present invention, and is explained with reference to FIG. 1 .

As shown in Figure 2, the scanned method flow of this coded scan code payment includes the following steps S21 to step S28:

In step S21, an application program of the mobile device 11 provides a user to apply for corresponding coded card information from a card issuing organization 20 based on at least one bound card (such as a credit card or a debit card, etc.) to obtain the code. Convert card information.

In step S22, the application of the mobile device 11 provides the user to select the bound card to be used for this transaction, and uses the coded card information of the selected bound card and the identification information of the mobile device 11 to scan The code payment device 10 requests a transaction verification code.

In step S23, the mobile device 11 receives the transaction verification code from the scan code payment device 10, and the mobile device 11 generates a verification code including the identification information of the mobile device 11, the coded card information and the transaction verification code. One-dimensional or two-dimensional barcode (such as QR code) is displayed on the display of the mobile device 11 so that a sales device 12 can scan the one-dimensional or two-dimensional barcode.

In step S24, after the sales device 12 scans the one-dimensional or two-dimensional barcode, the sales device 12 parses the one-dimensional or two-dimensional barcode to obtain the identification information of the mobile device 11, the coded card information and the The transaction verification code is used to transmit the identification information of the mobile device 11, the coded card information, the transaction verification code and the first transaction data of the transaction information to the scan code payment device 10, thereby initiating this transaction.

In step S25, the scan-code payment device 10 receives the first transaction data from the sales device 12 to verify the legality, completeness and correctness of the format of the first transaction data.

In step S26, the scan-code payment device 10 executes a transaction authorization request, and the code-scan payment device 10 translates (de-tokenizes) the coded card information through the card issuing organization 20 to retrieve the bound card. After obtaining the original card number, a card issuing bank 30 is authorized for the transaction. In one embodiment, an encrypted connection is used between the QR code payment device 10 and the card issuing organization 20 .

In step S27, the scan code payment device 10 obtains the transaction authorization result from the card issuer 30 to confirm the transaction authorization result and determine whether to execute a transaction request. If the transaction authorization result is successful, the scan code The code payment device 10 makes the transaction request to an acquiring bank 40 .

In step S28, the QR code payment device 10 and the sales device 12 receive a transaction result from the acquiring bank 40, and the QR code payment device 10 processes the transaction result and notifies the mobile device 11, and sends the transaction result to the mobile device 11. The transaction result is directly notified to the sales device 12 so that the mobile device 11 and the sales device 12 display the transaction result.

FIG. 3 is a schematic flowchart of the main scanning method of the coded code scanning payment system of the present invention, and is explained with reference to FIG. 1 .

As shown in Figure 3, the main scanning method process of coded scanning payment includes the following steps S31 to S38:

In step S31, an application program of the mobile device 11 provides a user to apply for corresponding coded card information from a card issuing organization 20 based on at least one bound card (such as a credit card or a debit card, etc.).

In step S32, a sales device 12 generates a one-dimensional or two-dimensional barcode containing a transaction information and displays the one-dimensional or two-dimensional barcode on the screen of the sales device 12.

In step S33 , the scanner of the mobile device 11 scans the one-dimensional or two-dimensional barcode on the screen of the sales device 12 .

In step S34, the transaction data processing module 111 of the mobile device 11 parses the one-dimensional or two-dimensional barcode, and the application program of the mobile device 11 provides the user to select the bound card to be used for this transaction. The coded card information of the selected bound card, the identification information of the mobile device 11 and the second transaction data of the transaction information are sent to the scan code payment device 10 to initiate this transaction.

In step S35, the QR code payment device 10 receives the second transaction data from the mobile device 11 to verify the legality, completeness and correctness of the format of the second transaction data.

In step S36, the scan-code payment device 10 executes a transaction authorization request, and the code-scan payment device 10 translates (de-tokenizes) the coded card information through the card issuing organization 20 to retrieve the bound card. After obtaining the original card number, a card issuing bank 30 is authorized for the transaction. In one embodiment, an encrypted connection is used between the QR code payment device 10 and the card issuing organization 20 .

In step S37, the scan code payment device 10 obtains the transaction authorization result from the card issuer 30 to confirm the transaction authorization result and determine whether to execute a transaction request. If the transaction authorization result is successful, the scan code The code payment device 10 makes the transaction request to an acquiring bank 40 .

In step S38, the QR code payment device 10 and the sales device 12 receive a transaction result from the acquiring bank 40, and the QR code payment device 10 processes the transaction result and notifies the mobile device 11, and sends the transaction result to the mobile device 11. The transaction result is directly notified to the sales device 12 so that the mobile device 11 and the sales device 12 display the transaction result.

FIG. 4 is a sequential schematic diagram of a payment embodiment of the scanned method in FIG. 2 , and is explained with reference to FIGS. 1 and 2 together. At the same time, the main contents of the payment embodiment of the scanned method are as follows. The remaining contents are the same as those explained in FIG. 1 and FIG. 2 above, and will not be repeated here.

In step S41, when a user performs a payment transaction, the user selects the bound card (such as a credit card or debit card, etc.) to be used for this transaction in the application of the mobile device 11, and the The transmission interface 112 sends its identification information and the coded card information of the selected bound card to the data verification module 101 of the scan-code payment device 10 to request a transaction verification code.

In step S42, the data verification module 101 receives the identification information of the mobile device 11 and the coded card information for verification, so as to confirm that the mobile device 11 is registered through the identification information of the mobile device 11, and with The binding relationship of the coded card information matches, and the data verification module 101 then responds with a set of transaction verification codes generated by calculating an encryption algorithm based on the identification information and the coded card information.

In one embodiment, the encryption algorithm is a hash algorithm that adds salt to the identification information of the mobile device 11 and the coded card information and is provided by the data verification module 101 A set of tokens are combined and calculated to obtain a key, and then the MAC algorithm is used to calculate the key and the coded card information to generate the transaction verification code.

In step S43, the transmission interface 112 of the mobile device 11 receives the transaction verification code generated by the data verification module 101, and the transaction data processing module 111 of the mobile device 11 generates an identification information including the mobile device 11, The coded card information and the transaction verification code A one-dimensional or two-dimensional barcode (such as a QR code) is used to display the one-dimensional or two-dimensional barcode on the display of the mobile device 11 .

In one embodiment, the mobile device 11 can use at least one key (such as SUK (single use key) and private key) stored internally to sign the coded card information.

In step S44, a sales device 12 scans the one-dimensional or two-dimensional barcode displayed on the display of the mobile device 11, and the sales device 12 parses the one-dimensional or two-dimensional barcode to obtain the information of the mobile device 11. The identification information, the coded card information and the transaction verification code, then, the sales device 12 transmits the identification information of the mobile device 11, the coded card information, the transaction verification code and the first transaction data of the transaction information to This data verifies module 101, thereby initiating this transaction.

In step S45, after the data verification module 101 receives the first transaction data, the data verification module 101 uses the encryption algorithm to identify the mobile device 11 and the coded card information based on the first transaction data. Calculate another transaction verification code to compare whether the other transaction verification code matches the transaction verification code, and then verify the identification information of the mobile device 11, the coded card information, the transaction verification code and the transaction information. Legality, integrity and format correctness, and the data verification module 101 transmits the verified coded card information and transaction information to the payment processing module 102 of the QR code payment device 10 .

In step S46 , the payment processing module 102 combines the coded card information and the transaction information to execute a transaction authorization request to transmit the coded card information and the transaction information to the code of the scan-code payment device 10 Processing module 103.

In step S47, after receiving the transaction authorization request, the code processing module 103 transmits the coded card information to a card issuing organization 20.

In step S48 , the card issuing organization 20 translates the coded card information to obtain a corresponding original card number, and returns the original card number to the code processing module 103 .

In one embodiment, if the coded card information has been signed by the mobile device 11, the card issuing organization 20 verifies the signed coded card information again to ensure that the signed coded information Security of card information.

In step S49, the code processing module 103 combines the original card number and the transaction information and sends them to a card issuing bank 30 for transaction authorization.

In step S410, the card issuing bank 30 returns an authorization result to the code processing module 103.

In step S411, the code processing module 103 returns the authorization result to the payment processing module 102.

In step S412, the payment processing module 102 confirms the authorization result. If the authorization result is failed, the payment processing module 102 ends the current payment transaction and replies that the transaction between the mobile device 11 and the sales device 12 failed. The mobile device 11 and the sales device 12 display transaction failure results on their displays to notify the user; otherwise, if the authorization result is successful, the payment processing module 102 performs subsequent transaction requests in the payment process.

FIG. 5 is a sequential schematic diagram of a payment embodiment of the main scanning method in FIG. 3 , and is explained with reference to FIG. 1 and FIG. 3 together. At the same time, the main contents of the payment embodiment of the main scanning method are as follows. The remaining contents are the same as those explained in FIG. 1 and FIG. 3 above, and will not be repeated here.

In step S51, a scanner of a mobile device 11 scans a one-dimensional or two-dimensional barcode containing a transaction information displayed by a sales device 12, and the transaction data processing module 111 of the mobile device 11 parses the one-dimensional or two-dimensional barcode. A two-dimensional barcode is used to display the transaction information on the display of the mobile device 11 for confirmation by a user, and the application of the mobile device 11 provides the user with the option to select the bound card to be used for this transaction.

In step S52, the transaction data processing module 111 of the mobile device 11 uses the identification information of the mobile device 11, the coded card information of the selected bound card and the second transaction data of the transaction information through a cryptographic algorithm. The method is encrypted, and then the encrypted second transaction data is sent to the data verification module 101 of the scan-code payment device 10 through the transmission interface 112 of the mobile device 11 .

In one embodiment, the mobile device 11 can use at least one key (such as SUK (single use key) and private key) stored internally to sign the coded card information.

In step S53, the data verification module 101 receives the encrypted second transaction data, and after analyzing the encrypted second transaction data using the cryptographic algorithm (such as 3DES/AES), the data verification The module 101 confirms that the mobile device 11 is registered through the identification information of the mobile device 11 and is consistent with the binding relationship with the coded card information. Then, the data verification module 101 verifies the identification of the mobile device 11 information, the legality, completeness and correctness of the format of the coded card information and the transaction information, so as to transmit the verified coded card information and the transaction information to the payment processing module 102 of the scan code payment device 10 .

In step S54 , the payment processing module 102 combines the coded card information and the transaction information to execute a transaction authorization request to transmit the coded card information and the transaction information to the code of the scan-code payment device 10 Processing module 103.

In step S55, after receiving the transaction authorization request, the code processing module 103 sends the coded card information to a card issuing organization 20.

In step S56, the card issuing organization 20 translates the coded card information to obtain a corresponding original card number, and returns the original card number to the code processing module 103.

In one embodiment, if the coded card information has been signed by the mobile device 11, the card issuing organization 20 verifies the signed coded card information again to ensure that the signed coded information Security of card information.

In step S57, the code processing module 103 combines the original card number and the transaction information and sends them to a card issuing bank 30 for transaction authorization.

In step S58, the card issuing bank 30 returns an authorization result to the code processing module 103.

In step S59, the code processing module 103 returns the authorization result to the payment processing module 102.

In step S510, the payment processing module 102 confirms the authorization result. If the authorization result is failed, the payment processing module 102 ends the current payment transaction and replies that the transaction between the mobile device 11 and the sales device 12 failed. The mobile device 11 and the sales device 12 display transaction failure results on their displays to notify the user; otherwise, if the authorization result is successful, the payment processing module 102 performs subsequent transaction requests in the payment process.

Figure 6 is a sequential schematic diagram of the subsequent payment embodiment of Figures 4 and 5, and is explained with reference to Figures 1 to 3 together. At the same time, the main contents of this subsequent payment embodiment are as follows. The remaining contents are the same as those explained in FIG. 2 and FIG. 3 above, and will not be repeated here.

In step S61, when the payment processing module 102 of the scan-code payment device 10 confirms that the authorization result is successful, the payment processing module 102 processes an original card number and a transaction information of a bound card, and then scans the code and confirms that the authorization result is successful. The code processing module 103 of the code payment device 10 sends a transaction request to an acquiring bank 40 .

In step S62, after completing the transaction request, the acquiring bank 40 sends a transaction result to a sales device 12 and the code processing module 103.

In step S63, the sales device 12 receives the transaction result from the acquiring bank 40 and displays the transaction result for a user to view.

In step S64, the code processing module 103 receives the transaction result from the acquiring bank 40 and replies to the payment processing module 102.

In step S65, the payment processing module 102 receives the transaction result from the code processing module 103 and replies to the data verification module 101 of the scan code payment device 10.

In step S66, the data verification module 101 receives the transaction result from the payment processing module 102, and uses a cryptographic algorithm (3DES/AES) to encrypt the transaction result to convert the encrypted transaction The result is sent to a mobile device 11.

In step S67, the transmission interface 112 of the mobile device 11 receives the encrypted transaction result from the data verification module 101, and the transaction data processing module 111 of the mobile device 11 uses the cryptographic algorithm to parse the encrypted transaction result. Encrypted transaction results and display the transaction results for the user to view.

In addition, the present invention also discloses a computer-readable medium, which is applied to a computing device or computer having a processor (eg, CPU, GPU, etc.) and/or a memory, and stores instructions, and can utilize the computing device or computer. The computer executes the computer-readable medium through the processor and/or memory to perform the above methods and steps when executing the computer-readable medium.

In summary, the coded scan code payment system, method and computer-readable medium of the present invention provide users with the ability to apply for a set of coded card information for contactless payment only based on their bound credit card or debit card. , which can be used for contactless payment or scan-code payment. Therefore, the present invention transmits the coded card information from the mobile device or sales device to the card issuing organization for translation (de-tokenize) to obtain the original card number and perform In the subsequent payment, in addition to using the coded card information for contactless payment, the coded card information can also be used for scan code payment, so that the coded card information for contactless payment can be based on the user's Choose the payment method that suits your current needs.

Furthermore, the coded code scanning payment system, method and computer-readable medium of the present invention have at least the following technical differences and their effects:

1. The present invention provides a transaction model that uses current coded cards for contactless payment (such as coded credit cards) for scan-code payment.

2. The present invention provides users with the ability to use the already applied coded card for contactless payment to conduct scanned transactions without re-applying for a coded card for scan-code payment (such as a coded credit card).

3. The present invention uses cryptographic algorithms such as Triple Data Encryption Algorithm (TDEA, or 3DES) or Advanced Encryption Standard (AES) to avoid the intrusion of mobile devices and QR code payment devices. When transmitting transaction-related information between locations, information leakage may occur, and the legality, completeness and correctness of the format of transaction-related information must also be ensured.

4. The present invention uses an encryption algorithm to calculate a transaction verification code through a Hash algorithm and a MAC algorithm to ensure the legality, integrity and integrity of transaction-related information transmitted by the mobile device through the transaction verification code. Format correctness.

5. The present invention uses coded cards to perform payment transactions, so it can ensure that the transaction-related information transmitted between the mobile device (or sales device) and the scanned payment device does not contain the original card number, thereby preventing the leakage of the card number from causing malicious persons to Possibility of fraud.

6. Compared with the conventional coded card for scan-code payment, the present invention can use the key for security verification to sign the coded card (such as coded card information) for contactless payment, and when signed Only after the coded card for contactless payment is verified by the card issuing organization, the transaction will be legal. Therefore, the security level of the coded card for contactless payment is higher, and the coded card for contactless payment (such as coded card information) is reduced. ) is the risk of theft caused by theft.

7. Compared with the existing technology, the user's original credit card number corresponding to the coded card of the conventional scan-code payment must be stored in the system of the operator that provides the scan-code payment service before the transaction can be executed. However, the coded scan code payment system, method and computer-readable medium of the present invention do not store any user's original credit card (or debit card, etc.) card number, so there is no possibility that the credit card information will be stolen by an intentional person on the system side. It is safer for users to trade.

The above embodiments are only illustrative to illustrate the principles and effects of the present invention, but are not intended to limit the present invention. Any person skilled in the art can make any modification without departing from the spirit and scope of the invention. Under this category, modifications and changes are made to the above embodiments. Therefore, the protection scope of the present invention should be as listed in the patent application scope.

1: Coded scan code payment system

10: Scan code payment device

101:Data verification module

102: Payment processing module

103:Code processing module

11:Mobile device

111: Transaction data processing module

112:Transmission interface

12: Sales device

20:Card issuing organization

30:Card issuing bank

40: Acquiring bank

Claims (11)

A coded scan code payment system includes: a sales device, which after scanning a one-dimensional or two-dimensional barcode, transmits a first transaction data including a transaction verification code; a mobile device, which scans another one-dimensional or two-dimensional barcode. After another two-dimensional barcode, an encrypted second transaction data is transmitted; and a scan-code payment device communicates with the mobile device and the sales device to receive the first transaction data containing the transaction verification code or the encrypted one. Verify the second transaction data, and then execute a transaction authorization request based on the coded card information for contactless payment corresponding to the selected bound card in the first transaction data or the second transaction data, The scan code payment device translates the coded card information used for contactless payment through a card issuing organization to obtain the corresponding selected bound card based on the coded card information used for contactless payment. After entering the original card number, the transaction authorization is performed, in which the scan-code payment device obtains the transaction authorization result obtained by performing transaction authorization through the coded card information used for contactless payment, and confirms the transaction on the scan-code payment device After the authorization is obtained, the code-scanning payment device is enabled to conduct a transaction, and then the mobile device and the sales device are notified to display the result of the transaction. The code-scanning payment device includes a data verification module that receives data from the sales device. The first transaction data of the device includes the transaction verification code, and the data verification module uses an encryption algorithm to calculate another transaction based on the identification information in the first transaction data and the coded card information used for contactless payment. A transaction verification code is used to compare whether the other transaction verification code matches the transaction verification code to verify the legality, completeness and correctness of the format of the first transaction data. The coded scan code payment system as described in claim 1, wherein the mobile device uses the identification information of the mobile device and the coded card information for contactless payment to request the transaction verification from the scan code payment device. code to generate and display the one-dimensional or two-dimensional barcode including the identification information, the coded card information for contactless payment and the transaction verification code, so that the sales device can scan and parse the one-dimensional or the two-dimensional barcode Two-dimensional barcode, and after the sales device generates the first transaction data including the identification information, the coded card information for contactless payment, the transaction verification code and a transaction information, the first transaction data is Sent to the scan code payment device. The coded scan code payment system as described in claim 2, wherein the data verification module receives and verifies the identification information from the mobile device and the coded card information used for contactless payment to reply a set of The transaction verification code generated by the encryption algorithm is calculated based on the identification information and the coded card information used for contactless payment. The coded scan code payment system as described in claim 1, wherein the sales device generates and displays the other one-dimensional or the other two-dimensional barcode containing a transaction information for the mobile device to scan and analyze the other a one-dimensional or another two-dimensional barcode, and the mobile device generates the second transaction data including the identification information of the mobile device, the coded card information for contactless payment and the transaction information. The second transaction data is encrypted through a cryptographic algorithm, and then the encrypted second transaction data is sent to the scan code payment device. The coded scan code payment system as described in claim 4, wherein the data verification module receives the encrypted second transaction data from the mobile device, and uses the cryptographic algorithm to verify the encrypted third transaction data. 2. Analyze the transaction data to verify the legality, completeness and format correctness of the identification information, the coded card information used for contactless payment and the transaction information. A coded scan code payment method, including: A scan-code payment device receives a first transaction data including a transaction verification code sent from a sales device after scanning a one-dimensional or two-dimensional barcode, or receives a mobile device after scanning another one-dimensional or another two-dimensional barcode. An encrypted second transaction data is then sent to verify the first transaction data containing the transaction verification code or the encrypted second transaction data; the scan-code payment device uses the first transaction data or the encrypted second transaction data. The coded card information for contactless payment corresponding to the selected bound card in the second transaction data executes a transaction authorization request, and the code scanning payment device uses the coded card for contactless payment. The information is translated through a card issuing organization to obtain the original card number of the corresponding selected bound card based on the coded card information used for contactless payment, and then authorize the transaction; and the scan code payment device obtains the pass The coded card information used for contactless payment is used to authorize the transaction and the result of the transaction authorization is obtained. After the scan-code payment device confirms the result of the transaction authorization, the scan-code payment device is allowed to perform the transaction and then notified. The mobile device and the sales device display the result of the transaction, wherein the data verification module of the scan-code payment device receives the first transaction data containing the transaction verification code from the sales device, and the data verification module The group uses an encryption algorithm to calculate another transaction verification code based on the identification information in the first transaction data and the coded card information used for contactless payment, so as to compare the other transaction verification code with the transaction verification code. Whether it is consistent or not, in order to verify the legality, completeness and correctness of the format of the first transaction data. The coded scan code payment method as described in claim 6 further includes: the mobile device using the identification information of the mobile device and the coded card information for contactless payment to request the transaction from the scan code payment device. verification code, and generate and display the verification code containing the Identification information, the coded card information for contactless payment and the one-dimensional or two-dimensional barcode of the transaction verification code; and the one-dimensional or two-dimensional barcode is scanned and parsed by the sales device to generate a generated code containing the Identification information, the coded card information for contactless payment, the transaction verification code and the first transaction data of transaction information, and then transmit the first transaction data to the scan code payment device. The coded scan code payment method described in request item 7 further includes the data verification module receiving and verifying the identification information from the mobile device and the coded card information used for contactless payment, and the data verification The module responds with a set of transaction verification codes calculated by the encryption algorithm based on the identification information and the coded card information used for contactless payment. The coded scan code payment method as described in claim 6 further includes: generating and displaying the other one-dimensional or the other two-dimensional barcode containing a transaction information by the sales device; scanning and parsing the mobile device Another one-dimensional or another two-dimensional barcode is used to generate the second transaction data including the identification information of the mobile device, the coded card information for contactless payment and the transaction information, and then the second transaction data is generated. The transaction data is encrypted through the cryptographic algorithm to transmit the encrypted second transaction data to the scan code payment device. The coded scan code payment method described in claim 9 further includes the data verification module receiving the encrypted second transaction data from the mobile device, and using the cryptographic algorithm to verify the encrypted second transaction data. 2. Analyze the transaction data to verify the legality, completeness and correctness of the format of the identification information, the coded card information and the transaction information. A computer-readable medium, used in a computing device or computer, stores instructions to execute the coded scan code payment method described in any one of claims 6 to 10.

Images