CN102194178A - Payment processing system, method and device - Google Patents

Abstract

The invention discloses a payment processing system, method and device. The payment processing system comprises a mobile terminal and a server which are in communication connection, a fingerprint acquisition device for acquiring fingerprint information of a user as well as a card swiping device for acquiring information of a fiscard. The mobile terminal is used for generating a transaction request encrypted message and transmitting the transaction request encrypted message to the server; the transaction request encrypted message comprises first user fingerprint information and transaction information, or the first user fingerprint information, first fiscard information and transaction information; and the server is used for receiving and analyzing the transaction request encrypted message, carrying out security certificate and carrying out payment processing on the transaction information if the certificate is successful. By using the payment processing system, the user fingerprint information is introduced in electronic payment application and the transaction security of the electronic payment is improved.

Description

Payment processing system, method and device

Technical Field

The invention relates to the technical field of electronic payment, in particular to a payment processing system, a payment processing method and a payment processing device.

Background

With the development and popularization of mobile technology, mobile phone payment gradually becomes an emerging electronic payment service form. Compared with the traditional electronic payment based on the internet, the mobile phone payment has the characteristics of mobility, timeliness, individuation, convenience and the like, capital processing systems such as bank counters, cashier platforms of merchants and the like are directly pushed to users, and the users can complete transactions with various objects at any time and any place as long as holding the mobile phone.

At present, mobile phone payment is mainly realized by a short message mode. Based on the consideration of security, the short message content can be encrypted in an end-to-end security mode encryption mode.

The inventor finds that although the existing mobile payment method adopts an encryption mode, the transaction security is still not satisfactory in the process of practicing the prior art, for example: the phenomenon of malicious counterfeiting of the short message happens occasionally, so that transfer disputes are caused, the customer experience is reduced, and the popularization and the promotion of the electronic payment technology are not facilitated.

Disclosure of Invention

The invention provides a payment processing system, a payment processing method and a payment processing device, which are used for improving the transaction security of electronic payment.

The invention provides a payment processing method, which comprises the following steps:

the mobile terminal generates a transaction request encryption message; the transaction request encryption message comprises: first user fingerprint information and transaction information, or the first user fingerprint information, first financial card information and transaction information;

and the mobile terminal sends the transaction request encryption message to a server for requesting the server to carry out corresponding payment processing.

The invention also provides another payment processing method, which comprises the following steps:

receiving and analyzing a transaction request encryption message sent by a mobile terminal, wherein the transaction request encryption message comprises: first user fingerprint information and transaction information; performing fingerprint authentication on the first user fingerprint information according to prestored legal user fingerprint information; when the fingerprint authentication is successful, determining and utilizing the legal financial card information corresponding to the first user fingerprint information according to the prestored mapping relation information between the legal user fingerprint information and the legal financial card information to carry out payment processing on the transaction information;

or,

receiving and analyzing a transaction request encryption message sent by a mobile terminal, wherein the transaction request encryption message comprises: first user fingerprint information, first financial card information and transaction information; according to the pre-stored fingerprint information of the legal user, the information of the legal financial card and the mapping relation information between the two kinds of information, the content authentication is carried out on the transaction request encrypted message; and when the content authentication is successful, performing payment processing on the transaction information by using the first financial card information.

The present invention also provides a mobile terminal, comprising:

the message generating module is used for generating a transaction request encryption message; the transaction request encryption message comprises: first user fingerprint information and transaction information, or the first user fingerprint information, first financial card information and transaction information;

and the communication module is used for sending the transaction request encryption message to a server and requesting the server to perform corresponding payment processing.

The present invention also provides a server, comprising: the system comprises a request acquisition module, an authentication module and a payment processing module;

the request acquisition module is used for receiving and analyzing a transaction request encryption message sent by the mobile terminal, wherein the transaction request encryption message comprises: first user fingerprint information and transaction information; the authentication module is used for carrying out fingerprint authentication on the first user fingerprint information according to prestored legal user fingerprint information; the payment processing module is used for determining and utilizing legal financial card information corresponding to the first user fingerprint information to perform payment processing on the transaction information according to the prestored mapping relation information between the legal user fingerprint information and the legal financial card information when the fingerprint authentication is successful;

or, the request obtaining module is configured to receive and analyze a transaction request encryption message sent by a mobile terminal, where the transaction request encryption message includes: first user fingerprint information, first financial card information and transaction information; the authentication module is used for performing content authentication on the transaction request encrypted message according to prestored legal user fingerprint information, legal financial card information and mapping relation information between the two kinds of information; and the payment processing module is used for carrying out payment processing on the transaction information by utilizing the first financial card information when the content authentication is successful.

The invention also provides a payment processing system, comprising:

the mobile terminal and the server are in communication connection with the mobile terminal;

the fingerprint acquisition device is used for acquiring user fingerprint information; the fingerprint acquisition device is internally arranged in the mobile terminal, or externally arranged on the mobile terminal and in communication connection with the mobile terminal, or respectively in communication connection with the mobile terminal and the server;

the card swiping device is used for acquiring financial card information; the card swiping device is arranged in the fingerprint acquisition device, or externally arranged in the fingerprint acquisition device and in communication connection with the fingerprint acquisition device, or internally arranged in the mobile terminal, or externally arranged in the mobile terminal and in communication connection with the mobile terminal.

The invention also provides an external safety information storage device of the mobile terminal, which comprises:

the fingerprint acquisition module is used for acquiring fingerprint information;

the card swiping module is used for acquiring financial card information;

the safe storage module is used for storing the financial card information;

the communication module is used for communicating with the mobile terminal;

the control module is used for generating an encrypted message according to the fingerprint information and/or the financial card information and sending the encrypted message to the mobile terminal through the communication module; and analyzing the encryption request message received by the communication module and from the mobile terminal, acquiring information required by the encryption request message to the fingerprint acquisition module, the card swiping module or the safe storage module, generating an encryption response message, and sending the encryption response message to the mobile terminal through the communication module.

The present invention also provides another payment processing system, comprising:

the mobile terminal;

the server is in communication connection with the mobile terminal;

the external safety information storage device of the mobile terminal is in communication connection with the mobile terminal.

The payment processing system, the payment processing method and the payment processing device lead the fingerprint information of the user into the electronic payment application. Because the user fingerprint information is not easy to be tampered and can truly reflect the user identity, the transaction security of electronic payment is improved, and the user experience is improved. In addition, the system provided by the invention is compatible with different types of mobile terminals, and can meet the mobile payment requirements of different users, thereby improving the service quality and being beneficial to promoting the popularization and application of the mobile terminal payment technology.

Drawings

FIG. 1 is a schematic diagram of a payment processing system according to the present invention;

fig. 2 is a schematic structural diagram of a mobile terminal provided in the present invention;

FIG. 3 is a schematic diagram of a server according to the present invention;

fig. 4 is a flowchart of a method for performing a delivery process at a mobile terminal according to the present invention;

FIG. 5 is a flowchart of another method for performing a delivery process at a mobile terminal according to the present invention;

FIG. 6 is a flowchart of a method for server-side delivery processing according to the present invention;

FIG. 7 is a flow chart of another method for server-side delivery processing according to the present invention;

FIG. 8 is a flowchart of another method for server-side delivery processing according to the present invention;

fig. 9 is a schematic structural diagram of an external security information storage device of a mobile terminal according to the present invention;

fig. 10 is a schematic structural diagram of another payment processing system provided by the present invention.

Detailed Description

In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention. All other embodiments, which can be obtained by a person skilled in the art without inventive effort based on the embodiments of the present invention, are within the scope of the present invention.

Fig. 1 is a schematic structural diagram of a payment processing system provided in the present invention. The payment processing system as shown in fig. 1 comprises: fingerprint collection device 1, mobile terminal 2, server 3 and device 4 of punching the card. The mobile terminal 2 is in communication connection with the server 3, and the fingerprint acquisition device 1 and the card swiping device 4 are respectively externally arranged on the mobile terminal 2 and are in communication connection with the mobile terminal 2.

The fingerprint acquisition device 1 is used for acquiring fingerprint information of a user. The card swiping device 4 is used for collecting financial card information, which may include: financial card in-card information, etc., such as magnetic stripe information, IC card information, etc., of the financial card. The form of presentation of the financial card may be, but is not limited to: bank cards, IC cards, merchant cards or other forms of payment cards, etc. The mobile terminal 2 can generate a transaction request encryption message or a binding request encryption message based on the user fingerprint information acquired by the fingerprint acquisition device 1 and the financial card information acquired by the card swiping device 4, send the transaction request encryption message or the binding request encryption message to the server 3, authenticate the user fingerprint information or the user fingerprint information and the financial card information by the server 3, and perform corresponding payment processing after the authentication is successful.

Optionally, the payment processing system may further include: a secure storage device 5. The safety storage device 5 is used for storing financial card information, is externally arranged on the fingerprint acquisition device 1 and is in communication connection with the fingerprint acquisition device 1.

Further, the integration or connection relationship of each device included in the payment processing system shown in fig. 1 may be appropriately modified according to actual needs, so as to improve convenience of actual application and meet the requirements of different users. For example: the fingerprint acquisition device can be arranged in the mobile terminal; the card swiping device can be arranged in the fingerprint acquisition device, or externally arranged in the fingerprint acquisition device and in communication connection with the fingerprint acquisition device, or arranged in the mobile terminal. The safety storage device can be arranged in the fingerprint acquisition device, or in the mobile terminal, or externally arranged on the mobile terminal and in communication connection with the mobile terminal; the fingerprint acquisition device can also be in communication connection with a server and the like.

In the payment processing system provided by the invention, the devices in communication connection can communicate in a wired or wireless mode. The fingerprint acquisition device and/or the card swiping device can be used as a special device and placed on a counter or other self-service opening points, and a user can bind fingerprint information with a financial card account in the modes of swiping a card and inputting a password on the special device and/or inputting a fingerprint and the like. Or the fingerprint acquisition device and/or the card swiping device can be used as private equipment of the user, the user can be in communication connection with the mobile terminal, and the binding request encryption message is sent to the server through the mobile terminal and is used for requesting the server to establish the mapping relation between the fingerprint information of the legal user and the information of the legal financial card.

From the perspective of whether the financial card information is stored or not, two application modes can be included: for example: the financial card information storage mode comprises the following steps: in the application mode, the financial card information bound by the user can be issued to a private user security storage device externally arranged on the mobile terminal for storage in the process of binding the user fingerprint information and the financial card information. When transaction payment is needed, the mobile terminal acquires the financial card information from the secure storage device, generates a transaction request encryption message and sends the transaction request encryption message to the server, and the server performs corresponding payment processing. (II) a financial card information non-storage mode: when the mobile terminal is used, a user can acquire financial card information through the card swiping device which is externally arranged on the mobile terminal and is private to the user, then user fingerprint information is acquired through the fingerprint acquisition device which is externally arranged on the mobile terminal and is private to the user, and the mobile terminal generates a transaction request encryption message and sends the transaction request encryption message to the server so as to enable the server to perform corresponding payment processing.

The system provided by the invention introduces the user fingerprint information into the electronic payment application. Because the user fingerprint information is not easy to be tampered and can truly reflect the user identity, the transaction security of electronic payment is improved, and the user experience is improved. In addition, the system provided by the invention is compatible with a common mobile terminal, integrates the mobile terminal with the functions of a fingerprint acquisition device and/or a card swiping device and the like, and the mobile terminal can be a mobile phone, a notebook, a POS machine, a vehicle-mounted computer and the like, so that the mobile payment requirements of different users can be met, the service quality is improved, and the popularization and the application of the mobile terminal payment technology are promoted.

The following describes the structures of the mobile terminal and the server involved in the system, respectively, with reference to fig. 2 and 3.

Fig. 2 is a schematic structural diagram of a mobile terminal provided in the present invention. As shown in fig. 2, the mobile terminal includes: amessage generating module 21 and acommunication module 22.

Themessage generating module 21 may be configured to generate a transaction request encryption message; the transaction request encryption message comprises: first user fingerprint information and transaction information, or first user fingerprint information, first financial card information and transaction information. Thecommunication module 22 is configured to send the transaction request encrypted message to a server, and is configured to request the server to perform corresponding payment processing. The corresponding implementation of this scenario can be seen in the description of fig. 4 below.

Further, themessage generating module 21 may be further configured to generate a binding request encrypted message, where the binding request encrypted message includes: second user fingerprint information and second financial card information. Correspondingly, the communication module may be configured to send the binding request encryption packet to the server, and be configured to request the server to establish a mapping relationship between the second user fingerprint information and the second financial card information. The corresponding implementation of this scenario can be seen in the description of fig. 5 below.

The first user fingerprint information and/or the second user fingerprint information can be acquired by the mobile terminal, or acquired by a fingerprint acquisition device externally arranged on the mobile terminal and then sent to the mobile terminal. The first financial card information and/or the second financial card information can be acquired by the mobile terminal, or acquired by card swiping equipment which is externally arranged on the mobile terminal and connected with the mobile terminal and then sent to the mobile terminal, or acquired by a safety storage device which is externally arranged on the mobile terminal and stores corresponding information.

The transaction information may include: remittance information, transfer information, consumption amount, payment amount, etc

The encryption algorithm employed by the mobile terminal and the server is not limited, for example: the message can be encrypted and decrypted based on DES, 3DES (triple DES), RSA and other algorithms widely used in the financial industry, so that the security of data transmission is improved.

The mobile terminal sends the encrypted message including the user fingerprint information to the server, namely, the user fingerprint is introduced into the electronic payment application, and the server carries out payment processing on the transaction based on the user fingerprint information. Because the user fingerprint information is not easy to be tampered and can truly reflect the user identity, the transaction security of electronic payment is improved, the user experience is improved, and the popularization and application of the mobile terminal payment technology are promoted. The mobile terminal provided by the invention can be embodied as a mobile phone, a notebook computer, a POS machine, a vehicle-mounted computer and the like, so that the mobile payment requirements of different users can be met, and the service quality is improved.

Fig. 3 is a schematic structural diagram of a server provided in the present invention. As shown in fig. 3, the server includes: arequest acquisition module 31, anauthentication module 32 and apayment processing module 33.

In a possible implementation manner of the server provided by the present invention, therequest obtaining module 31 may be configured to receive and analyze a transaction request encrypted message sent by a mobile terminal, where the transaction request encrypted message includes: first user fingerprint information and transaction information. Theauthentication module 32 may be configured to perform fingerprint authentication on the first user fingerprint information according to pre-stored valid user fingerprint information. Thepayment processing module 33 may be configured to, when the fingerprint authentication is successful, determine and utilize the legal financial card information corresponding to the first user fingerprint information to perform payment processing on the transaction information according to the pre-stored mapping relationship information between the legal user fingerprint information and the legal financial card information.

In this case, the first user fingerprint information serves as both the user identity authentication and the authentication basis of the financial card information, and the corresponding implementation method thereof can be referred to the following description of fig. 6. If the server pre-stores the mapping relationship between the legal user fingerprint and the legal financial card information in one-to-one correspondence, the server can adopt the legal financial card information corresponding to the first legal user fingerprint information to carry out corresponding payment processing on the transaction information when the first legal user fingerprint information is successfully authenticated.

If the server pre-stores the legal user fingerprint and the legal financial card information, a one-to-many mapping relation exists between the legal user fingerprint and the legal financial card information, and when the first legal user fingerprint information is successfully authenticated, the server can select one group of legal financial card information from the multiple groups of legal financial card information corresponding to the first legal user fingerprint information according to preset conditions to carry out corresponding payment processing on the transaction information. The setting mode of the preset condition is not limited, such as: the information of the multiple combined financial cards can be prioritized, and the information of the legal financial card with higher priority can be selected, etc. In this case, the user may also select the financial card, for example, the user sends the card number of the selected financial card to the server, and the server performs payment processing on the transaction information based on the financial card information corresponding to the card number.

In another possible implementation manner of the server provided by the present invention, therequest obtaining module 31 may be configured to receive and analyze a transaction request encrypted message sent by a mobile terminal, where the transaction request encrypted message includes: first user fingerprint information, first financial card information, and transaction information. Theauthentication module 32 may be configured to perform content authentication on the transaction request encrypted message according to pre-stored fingerprint information of a legal user, information of a legal financial card, and mapping relationship information between the two kinds of information. Thepayment processing module 33 may be configured to perform payment processing on the transaction information using the first financial card information when the content authentication is successful. In this case, the corresponding implementation method of the partial verification information required by the user fingerprint information authentication process can be referred to as the description of fig. 7 below.

On the basis of the above technical solution, the server may further include: and a mapping relationinformation obtaining module 34.

In another possible implementation manner of the server provided by the present invention, therequest obtaining module 31 may be further configured to obtain a binding request encrypted message sent by the mobile terminal, where the binding request encrypted message includes: second user fingerprint information and second financial card information. Theauthentication module 32 may be further configured to legally authenticate the second financial card information. The mapping relationshipinformation obtaining module 34 may be configured to establish and store a mapping relationship between the fingerprint information of the valid user and the information of the valid financial card when the validity authentication is successful, where the fingerprint information of the valid user and the information of the valid financial card are the second fingerprint information of the user and the second financial card information of the second financial card that are successfully authenticated, respectively. The corresponding implementation method of this case can be seen from the following description of fig. 8.

The server provided by the invention carries out payment processing on the transaction based on the user fingerprint information sent from the mobile terminal side. Because the user fingerprint information is not easy to be tampered and can truly reflect the user identity, the transaction security of electronic payment is improved, the user experience is improved, and the popularization and application of the mobile terminal payment technology are promoted.

Fig. 4 is a flowchart of a method for performing a delivery process at a mobile terminal according to the present invention. The delivery processing method shown in fig. 4 is described from the perspective of the mobile terminal side; specifically, the delivery processing method includes:

step 41: the mobile terminal generates a transaction request encryption message; the transaction request encryption message comprises: first user fingerprint information and transaction information, or first user fingerprint information, first financial card information and transaction information.

The first financial card information may include: financial card account numbers and passwords, etc.

Step 42: and the mobile terminal sends the transaction request encryption message to a server for requesting the server to perform corresponding payment processing.

The method of payment processing by the server is described in detail in fig. 6 and 7 below.

In addition, the mobile terminal may further send the acquired user fingerprint information and financial card information to the server, so that the server establishes a mapping relationship between the legal user fingerprint information and the legal financial card information, and an implementation method of the mobile terminal is shown in fig. 5 and includes:

step 51: the mobile terminal generates a binding request encryption message, wherein the binding request encryption message comprises: second user fingerprint information and second financial card information.

The second financial card information may include: financial card account numbers and passwords, etc.

Step 52: and the mobile terminal sends the binding request encryption message to the server for requesting the server to establish a mapping relation between the second user fingerprint information and the second financial card information.

In the above technical solution, the first user fingerprint information and/or the second user fingerprint information may be collected by the mobile terminal itself, or may be collected by a fingerprint collecting device externally disposed on the mobile terminal and then sent to the mobile terminal. The first financial card information and/or the second financial card information can be acquired by the mobile terminal, or acquired by card swiping equipment which is externally arranged on the mobile terminal and connected with the mobile terminal and then sent to the mobile terminal, or acquired by a safety storage device which is externally arranged on the mobile terminal and stores corresponding information.

Fig. 6 is a flowchart of a method for performing delivery processing on a server side according to the present invention. The delivery processing method shown in fig. 6 is described from the perspective of the mobile terminal side; specifically, the delivery processing method includes:

step 61: receiving and analyzing a transaction request encryption message sent by a mobile terminal, wherein the transaction request encryption message comprises: first user fingerprint information and transaction information.

Step 62: and performing fingerprint authentication on the first user fingerprint information according to prestored legal user fingerprint information.

The server compares the first user fingerprint with a prestored legal user fingerprint, and if the first user fingerprint and the legal user fingerprint are consistent, the fingerprint authentication is successful; otherwise, the fingerprint authentication fails. The server can adopt the existing method of fingerprint comparison for fingerprint comparison, and the details are not repeated herein.

And step 63: and when the fingerprint authentication is successful, determining and utilizing the legal financial card information corresponding to the first user fingerprint information according to the prestored mapping relation information between the legal user fingerprint information and the legal financial card information to carry out payment processing on the transaction information.

When the authentication fails, the server does not perform transaction payment.

If the server pre-stores the mapping relationship between the legal user fingerprint and the legal financial card information in one-to-one correspondence, the server can adopt the legal financial card information corresponding to the first legal user fingerprint information to carry out corresponding payment processing on the transaction information when the first legal user fingerprint information is successfully authenticated.

If the server pre-stores the legal user fingerprint and the legal financial card information, a one-to-many mapping relation exists between the legal user fingerprint and the legal financial card information, and when the first legal user fingerprint information is successfully authenticated, the server can select one group of legal financial card information from the multiple groups of legal financial card information corresponding to the first legal user fingerprint information according to preset conditions to carry out corresponding payment processing on the transaction information. The setting mode of the preset condition is not limited, such as: the information of the multiple combined financial cards can be prioritized, and the information of the legal financial card with higher priority can be selected, etc. In this case, the user may also select the financial card, for example, the user sends the card number of the selected financial card to the server, and the server performs payment processing on the transaction information based on the financial card information corresponding to the card number.

In the embodiment, the first user fingerprint information is simultaneously used as the authentication basis of the user identity authentication and the financial card information, so that the transaction security and the payment efficiency of electronic payment are improved.

Fig. 7 is a flowchart of another method for server-side delivery processing according to the present invention. The delivery processing method shown in fig. 7 is described from the perspective of the mobile terminal side; specifically, the delivery processing method includes:

step 71: receiving and analyzing a transaction request encryption message sent by a mobile terminal, wherein the transaction request encryption message comprises: first user fingerprint information, first financial card information, and transaction information.

Step 72: and according to the prestored fingerprint information of the legal user, the information of the legal financial card and the mapping relation information between the two kinds of information, performing content authentication on the transaction request encrypted message.

The content authentication of the transaction request encryption message in the step can comprise: performing fingerprint authentication on the first user fingerprint information, and authenticating the first financial card information; the method can also comprise the following steps: and authenticating the mapping relation between the first user fingerprint information and the first financial card information.

The fingerprint authentication method for the first user fingerprint information includes, for example: comparing the first user fingerprint with a prestored legal user fingerprint, and if the first user fingerprint and the prestored legal user fingerprint are consistent, the fingerprint authentication is successful; otherwise, the fingerprint authentication fails.

The first financial card information may include: financial card account numbers and passwords; the method for authenticating the first financial card information comprises the following steps: authenticating the use authority of the financial card account by adopting the password, and if the password is consistent with the legal password for using the financial card account, the authentication is successful; otherwise, authentication fails.

Authenticating the mapping relation between the first user fingerprint information and the first financial card information, for example: comparing the mapping relation with a prestored legal preset relation, and if the information is consistent, successfully authenticating; otherwise, authentication fails.

Step 73: and when the authentication is successful, carrying out payment processing on the transaction information by using the first financial card information.

When the authentication fails, the server does not perform transaction payment.

The method for acquiring the mapping relationship information between the user fingerprint information and the legal financial card information by the server can be established and stored by the server according to the binding request of the mobile terminal, and the implementation method of the method is shown in fig. 8, and specifically includes:

step 81: acquiring a binding request encryption message sent by a mobile terminal, wherein the binding request encryption message comprises: second user fingerprint information and second financial card information.

Step 82: and carrying out validity authentication on the second financial card information.

The second financial card information may include: financial card account numbers and passwords; the method for authenticating the second financial card information includes: authenticating the use authority of the financial card account by adopting the password, and if the password is consistent with the legal password for using the financial card account, the authentication is successful; otherwise, authentication fails.

Step 83: and when the legality authentication is successful, establishing and storing a mapping relation between the fingerprint information of the legal user and the information of the legal financial card, wherein the fingerprint information of the legal user and the information of the legal financial card are the fingerprint information of the second user and the information of the second financial card which are successfully authenticated respectively.

Fig. 9 is a schematic structural diagram of an external security information storage device of a mobile terminal according to the present invention. As shown in fig. 9, the external security information storage device of the mobile terminal provided in this embodiment includes:fingerprint acquisition module 91,card swiping module 92,secure storage module 93,communication module 94 andcontrol module 95.

Thefingerprint acquisition module 91 is used for acquiring fingerprint information.

Thecard swiping module 92 is used for collecting financial card information; the collected financial card information may include: the financial card contains card information, such as magnetic stripe information, IC card information, etc.

Thesecure storage module 93 is used to store financial card information.

Thecommunication module 94 is used for communicating with the mobile terminal.

Thecontrol module 95 is configured to generate an encrypted message according to the fingerprint information and/or the financial card information, and send the encrypted message to the mobile terminal through the communication module; and analyzing the encryption request message received by the communication module and from the mobile terminal, acquiring information required by the encryption request message to the fingerprint acquisition module, the card swiping module or the safe storage module, generating an encryption response message, and sending the encryption response message to the mobile terminal through the communication module.

The external security information storage device of mobile terminal that this embodiment provided, it is integrated by fingerprint collection, the card swiping and the security memory function, can be external with mobile terminal to with mobile terminal communication, introduce user's fingerprint information to the electronic payment and use, improved electronic payment's transaction security, also improved the convenience that the user used.

Fig. 10 is a schematic structural diagram of another payment processing system provided by the present invention. The payment processing system as shown in fig. 10 includes: themobile terminal 101, theserver 102, and the external securityinformation storage device 103 of the mobile terminal, wherein the structure of themobile terminal 101 may refer to the description in the embodiment corresponding to fig. 2, the structure of theserver 102 may refer to the description in the embodiment corresponding to fig. 3, and the structure of the external securityinformation storage device 103 of the mobile terminal may refer to the description in the embodiment corresponding to fig. 9, which are not repeated herein.

Through the analysis of the technical scheme, the payment processing system, the payment processing method and the payment processing device, provided by the invention, introduce the user fingerprint information into the electronic payment application. Because the user fingerprint information is not easy to be tampered and can truly reflect the user identity, the transaction security of electronic payment is improved, and the user experience is improved. In addition, the system is compatible with a common mobile terminal, integrates the functions of a fingerprint acquisition device and/or a card swiping device and the like, and the mobile terminal can be a mobile phone, a notebook, a POS machine, a vehicle-mounted computer and the like, so that the mobile payment requirements of different users can be met, the service quality is improved, and the popularization and the application of the mobile terminal payment technology are promoted.

Those of ordinary skill in the art will understand that: the figures are merely schematic representations of one embodiment, and the blocks or flow diagrams in the figures are not necessarily required to practice the present invention.

Those of ordinary skill in the art will understand that: modules in the devices in the embodiments may be distributed in the devices in the embodiments according to the description of the embodiments, or may be located in one or more devices different from the embodiments with corresponding changes. The modules of the above embodiments may be combined into one module, or further split into multiple sub-modules.

Finally, it should be noted that: the above examples are only intended to illustrate the technical solution of the present invention, but not to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.

Claims (12)

1. A payment processing method, the method comprising:

the mobile terminal generates a transaction request encryption message; the transaction request encryption message comprises: first user fingerprint information and transaction information, or the first user fingerprint information, first financial card information and transaction information;

and the mobile terminal sends the transaction request encryption message to a server for requesting the server to carry out corresponding payment processing.

2. The method of claim 1, further comprising:

the mobile terminal generates a binding request encryption message, wherein the binding request encryption message comprises: second user fingerprint information and second financial card information;

the mobile terminal sends the binding request encryption message to the server, and is used for requesting the server to establish a mapping relation between the second user fingerprint information and the second financial card information;

the first user fingerprint information and/or the second user fingerprint information are acquired by the mobile terminal, or acquired by a fingerprint acquisition device externally arranged on the mobile terminal and then sent to the mobile terminal;

the first financial card information and/or the second financial card information are acquired by the mobile terminal, or acquired by card swiping equipment which is externally arranged on the mobile terminal and connected with the mobile terminal and then sent to the mobile terminal, or acquired by a safety storage device which is externally arranged on the mobile terminal and stores corresponding information.

3. A payment processing method, the method comprising:

receiving and analyzing a transaction request encryption message sent by a mobile terminal, wherein the transaction request encryption message comprises: first user fingerprint information and transaction information; performing fingerprint authentication on the first user fingerprint information according to prestored legal user fingerprint information; when the fingerprint authentication is successful, determining and utilizing the legal financial card information corresponding to the first user fingerprint information according to the prestored mapping relation information between the legal user fingerprint information and the legal financial card information to carry out payment processing on the transaction information;

or,

receiving and analyzing a transaction request encryption message sent by a mobile terminal, wherein the transaction request encryption message comprises: first user fingerprint information, first financial card information and transaction information; according to the pre-stored fingerprint information of the legal user, the information of the legal financial card and the mapping relation information between the two kinds of information, the content authentication is carried out on the transaction request encrypted message; and when the content authentication is successful, performing payment processing on the transaction information by using the first financial card information.

4. The method of claim 3, further comprising:

acquiring a binding request encryption message sent by the mobile terminal, wherein the binding request encryption message comprises: second user fingerprint information and second financial card information; carrying out validity authentication on the second financial card information; and when the legality authentication is successful, establishing and storing a mapping relation between the fingerprint information of the legal user and the information of the legal financial card, wherein the fingerprint information of the legal user and the information of the legal financial card are the fingerprint information of the second user and the information of the second financial card which are successfully authenticated respectively.

5. A mobile terminal, comprising:

the message generating module is used for generating a transaction request encryption message; the transaction request encryption message comprises: first user fingerprint information and transaction information, or the first user fingerprint information, first financial card information and transaction information;

and the communication module is used for sending the transaction request encryption message to a server and requesting the server to perform corresponding payment processing.

6. The mobile terminal of claim 5,

the message generating module is further configured to generate a binding request encrypted message, where the binding request encrypted message includes: second user fingerprint information and second financial card information;

the communication module is further configured to send the binding request encrypted message to the server, and is configured to request the server to establish a mapping relationship between the second user fingerprint information and the second financial card information;

the first user fingerprint information and/or the second user fingerprint information are acquired by the mobile terminal, or acquired by a fingerprint acquisition device externally arranged on the mobile terminal and then sent to the mobile terminal;

the first financial card information and/or the second financial card information are acquired by the mobile terminal, or acquired by card swiping equipment which is externally arranged on the mobile terminal and connected with the mobile terminal and then sent to the mobile terminal, or acquired by a safety storage device which is externally arranged on the mobile terminal and stores corresponding information.

7. A server, comprising: the system comprises a request acquisition module, an authentication module and a payment processing module;

the request acquisition module is used for receiving and analyzing a transaction request encryption message sent by the mobile terminal, wherein the transaction request encryption message comprises: first user fingerprint information and transaction information; the authentication module is used for carrying out fingerprint authentication on the first user fingerprint information according to prestored legal user fingerprint information; the payment processing module is used for determining and utilizing legal financial card information corresponding to the first user fingerprint information to perform payment processing on the transaction information according to the prestored mapping relation information between the legal user fingerprint information and the legal financial card information when the fingerprint authentication is successful;

or,

the request acquisition module is used for receiving and analyzing a transaction request encryption message sent by the mobile terminal, wherein the transaction request encryption message comprises: first user fingerprint information, first financial card information and transaction information; the authentication module is used for performing content authentication on the transaction request encrypted message according to prestored legal user fingerprint information, legal financial card information and mapping relation information between the two kinds of information; and the payment processing module is used for carrying out payment processing on the transaction information by utilizing the first financial card information when the content authentication is successful.

8. The server of claim 7, further comprising: a mapping relation information acquisition module;

the request obtaining module is further configured to obtain a binding request encryption message sent by the mobile terminal, where the binding request encryption message includes: second user fingerprint information and second financial card information; the authentication module is also used for carrying out validity authentication on the second financial card information; the mapping relation information acquisition module is used for establishing and storing a mapping relation between the fingerprint information of the legal user and the information of the legal financial card when the legality authentication is successful, wherein the fingerprint information of the legal user and the information of the legal financial card are the fingerprint information of the second user and the information of the second financial card which are successfully authenticated respectively.

9. An external safe information storage device of mobile terminal, characterized by that, includes:

the fingerprint acquisition module is used for acquiring fingerprint information;

the card swiping module is used for acquiring financial card information;

the safe storage module is used for storing the financial card information;

the communication module is used for communicating with the mobile terminal;

the control module is used for generating an encrypted message according to the fingerprint information and/or the financial card information and sending the encrypted message to the mobile terminal through the communication module; and analyzing the encryption request message received by the communication module and from the mobile terminal, acquiring information required by the encryption request message to the fingerprint acquisition module, the card swiping module or the safe storage module, generating an encryption response message, and sending the encryption response message to the mobile terminal through the communication module.

10. A payment processing system, comprising:

a mobile terminal according to claim 5 or 6;

a server according to claim 7 or 8, communicatively connected to the mobile terminal;

the fingerprint acquisition device is used for acquiring user fingerprint information; the fingerprint acquisition device is internally arranged in the mobile terminal, or externally arranged on the mobile terminal and in communication connection with the mobile terminal, or respectively in communication connection with the mobile terminal and the server;

the card swiping device is used for acquiring financial card information; the card swiping device is arranged in the fingerprint acquisition device, or externally arranged in the fingerprint acquisition device and in communication connection with the fingerprint acquisition device, or internally arranged in the mobile terminal, or externally arranged in the mobile terminal and in communication connection with the mobile terminal.

11. The system of claim 10, further comprising:

the safe storage device is used for storing the financial card information; the safety storage device is arranged in the fingerprint acquisition device, or externally arranged in the fingerprint acquisition device and in communication connection with the fingerprint acquisition device, or internally arranged in the mobile terminal, or externally arranged in the mobile terminal and in communication connection with the mobile terminal.

12. A payment processing system, comprising:

a mobile terminal according to claim 5 or 6;

a server according to claim 7 or 8, communicatively connected to the mobile terminal;

the external security information storage device of the mobile terminal is the device according to claim 9, and is connected with the mobile terminal in a communication mode.

Images