WO2015081738A1 - 处理交易数据的方法和智能卡 - Google Patents

处理交易数据的方法和智能卡 Download PDF

Info

Publication number
WO2015081738A1
WO2015081738A1 PCT/CN2014/086150 CN2014086150W WO2015081738A1 WO 2015081738 A1 WO2015081738 A1 WO 2015081738A1 CN 2014086150 W CN2014086150 W CN 2014086150W WO 2015081738 A1 WO2015081738 A1 WO 2015081738A1
Authority
WO
WIPO (PCT)
Prior art keywords
transaction
smart card
last
information
confirmed
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2014/086150
Other languages
English (en)
French (fr)
Inventor
李东声
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Tendyron Corp
Original Assignee
Tendyron Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from CN201310648305.9A external-priority patent/CN103679458B/zh
Application filed by Tendyron Corp filed Critical Tendyron Corp
Priority to EP14868476.4A priority Critical patent/EP3079115A4/en
Priority to US15/101,429 priority patent/US20160307198A1/en
Priority to JP2016536541A priority patent/JP6099830B2/ja
Publication of WO2015081738A1 publication Critical patent/WO2015081738A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/409—Device specific authentication in transaction processing
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K19/00—Record carriers for use with machines and with at least a part designed to carry digital markings
    • G06K19/06—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code
    • G06K19/067—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components
    • G06K19/07—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components with integrated circuit chips
    • G06K19/073—Special arrangements for circuits, e.g. for protecting identification code in memory
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/341—Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/0806—Details of the card
    • G07F7/0846—On-card display means
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/0806—Details of the card
    • G07F7/0853—On-card keyboard means

Definitions

  • the present invention relates to the field of electronic technologies, and in particular, to a method and a smart card for processing transaction data.
  • the dual interface smart card is a smart card with a contact communication method and a contactless communication method, that is, the dual interface smart card not only has a contact communication method, but also has a non-contact communication method such as wireless.
  • a contact communication method such as Bluetooth
  • a non-contact communication method such as wireless
  • the invention provides a method and a smart card for processing transaction data, and the technical problem to be solved is how to reduce the security risk brought by the continuous stealing to the user's smart card account.
  • a method for processing transaction data comprising: acquiring, by a smart card, transaction request information; the smart card reading a status identifier of a previous transaction;
  • the smart card performs a check calculation on the transaction request information to obtain verification data; the smart card outputs the verification data, and The transaction information of the transaction is saved to the transaction log to complete the transaction; after completing the transaction, the smart card displays the key information of the transaction; if the smart card receives the The confirmation operation of the key information of the transaction, the smart card marks the status identifier of the current transaction as the confirmed identification according to the confirmation operation.
  • the method further has the following feature: the method further includes: if the status identifier of the last transaction indicates that the last transaction is not confirmed, the smart card outputs prompt information for confirming the last transaction information.
  • the method further has the following feature: the key information includes at least one of a transaction amount, a transaction time, and a payment account information.
  • the method further has the following feature: if the smart card is not received within a preset time For the confirmation operation of the key information of the transaction, the smart card marks the status identifier of the current transaction as an unconfirmed identifier.
  • the method further has the following feature: the confirming operation is confirming a password.
  • the method further has the following feature: the smart card marking the status identifier of the current transaction as the confirmed identifier according to the confirming operation, the smart card verifying the confirmed password, and if the verification is passed, Then, the status identifier of the transaction is marked as a confirmed identifier.
  • a method for processing transaction data comprising: acquiring, by a smart card, transaction request information; the smart card reading a status identifier of a previous transaction;
  • the smart card performs a check calculation on the transaction request information to obtain verification data; the smart card outputs the verification data; the terminal acquires Verifying data, and obtaining a password of the smart card, and transmitting the password and the verification data; the background server receives the password and the verification data, and verifies the password and the verification data, A verification result is obtained, and the verification result is sent; the terminal receives the verification result, and processes the transaction according to the verification result.
  • a smart card comprising: an obtaining module, configured to obtain transaction request information; and a reading module, connected to the obtaining module, configured to read a status identifier of a previous transaction after receiving the transaction request information; and a computing module And the reading module is configured to: if the status identifier of the last transaction indicates that the last transaction is confirmed, perform verification calculation on the transaction request information to obtain verification data; and output module, Outputting the verification data, and saving the transaction information of the transaction to the transaction log to complete the transaction; the display module is configured to display the key information of the transaction after completing the transaction; the receiving module uses Receiving a confirmation operation for the key information of the current transaction; a marking module, connected to the receiving module, for receiving, during a preset time, the key information of the current transaction if the receiving module receives The confirmation operation marks the status identifier of the current transaction as the confirmed identification according to the confirmation operation.
  • the smart card further has the following feature: the output module is further configured to: after reading the status identifier of the last transaction, if the status identifier of the last transaction indicates that the last transaction is not confirmed, output Confirm the prompt information of the last transaction information.
  • the smart card further has the following feature: the marking module is further configured to: if the confirmation operation of the key information of the current transaction is not received within a preset time, the current The status identifier of the transaction is marked as unconfirmed.
  • the smart card has the following features: the confirming operation is a confirmation password; the marking module includes: a verification unit, configured to verify the confirmation password; and a marking unit, configured to: if the verification password is verified And mark the status identifier of the transaction as the confirmed identifier.
  • a method for processing transaction data comprising: acquiring, by a smart card, transaction request information; after receiving the transaction request information, the smart card reads a status identifier of a previous transaction, wherein the status identifier is used to indicate the last time Whether the transaction is confirmed;
  • the smart card performs a check calculation on the transaction request information to obtain verification data; the smart card outputs the verification data, and The transaction information of the transaction is saved to the transaction log to complete the transaction; after completing the transaction, the smart card displays the key information of the transaction; the smart card waits to receive confirmation of the key information of the transaction.
  • the operation if the smart card receives the confirmation operation of the key information of the current transaction within a preset time, the smart card updates the status identifier of the current transaction according to the confirmation operation.
  • the method further has the following feature: the method further includes: after the smart card reads the status identifier of the last transaction, if the status identifier of the last transaction indicates that the last transaction is not confirmed, then The smart card outputs a prompt message confirming the last transaction information.
  • the method further has the following feature: the key information includes at least one of a transaction amount, a transaction time, and a payment account information.
  • the method further has the following feature: the smart card sets the status identifier of the current transaction if the smart card does not receive the confirmation operation of the key information of the current transaction within a preset time. Updated to an unconfirmed ID.
  • the method further has the following feature: the smart card waiting to receive the confirmation operation of the key information of the current transaction, comprising: the smart card receiving a confirmation password; the smart card updating the book according to the confirming operation
  • the status identifier of the transaction includes: the smart card verifies the confirmation password, and if the verification passes, updates the status identifier of the current transaction to the confirmed identifier.
  • a method for processing transaction data comprising: acquiring, by a smart card, transaction request information; after receiving the transaction request information, the smart card reads a status identifier of a previous transaction, wherein the status identifier is used to indicate the last time Whether the transaction is confirmed;
  • the smart card performs a check calculation on the transaction request information to obtain verification data; the smart card outputs the verification data; the terminal acquires Verifying data, and obtaining a password of the smart card, and transmitting the password and the verification data; the background server receives the password and the verification data, and verifies the password and the verification data, A verification result is obtained, and the verification result is sent; the terminal receives the verification result, and processes the transaction according to the verification result.
  • a smart card comprising: an obtaining module, configured to obtain transaction request information; and a reading module, connected to the obtaining module, configured to read a status identifier of a previous transaction after receiving the transaction request information, where State flag Knowing to indicate whether the last transaction is confirmed; a calculation module, connected to the reading module, for requesting the transaction if the status identifier of the last transaction indicates that the last transaction was confirmed The information is verified and calculated, and the verification data is obtained; the output module is configured to output the verification data, and save the transaction information of the transaction to the transaction log to complete the transaction; the display module is used to complete the current After the transaction, the key information of the transaction is displayed; the receiving module is configured to receive the confirmation operation of the key information of the transaction; and the update module is connected to the receiving module for using the preset time if The receiving module receives the confirmation operation of the key information of the current transaction, and then updates the status identifier of the current transaction according to the confirmation operation.
  • the smart card further has the following feature: the output module is further configured to: after reading the status identifier of the last transaction, if the status identifier of the last transaction indicates that the last transaction is not confirmed, output Confirm the prompt information of the last transaction information.
  • the smart card further has the following feature: the update module is further configured to: if the confirmation operation of the key information of the current transaction is not received within a preset time, the current The status ID of the transaction is updated to an unconfirmed identifier.
  • the smart card has the following features: the confirmation operation is to confirm the password; the update module includes: a verification unit, configured to verify the confirmation password; and an update unit, configured to: if the verification password is verified And updating the status identifier of the transaction to the confirmed identifier.
  • a computer readable storage medium comprising computer instructions that, when executed, cause a method of processing transaction data as described above.
  • the embodiment provided by the present invention requires the user to confirm the transaction on the smart card after each transaction of the smart card.
  • the smart card will detect whether the last transaction has been confirmed by the user.
  • the user confirms the transaction the user responds to the processing operation of the transaction. Can not confirm on the smart card, so that the smart card can not respond to the second transaction operation, so that the stolen brush behavior can not be performed again, thereby reducing the security risk brought by the continuous stolen brush to the user's smart card account, and avoiding the situation of continuous attack , improve the security of the account.
  • FIG. 1 is a schematic flow chart of an embodiment of a method for processing transaction data provided by the present invention
  • FIG. 2 is a schematic flow chart of an embodiment of a method for processing transaction data provided by the present invention
  • FIG. 3 is a schematic structural diagram of an embodiment of a smart card provided by the present invention.
  • connection In the description of the present invention, it should be noted that the terms “installation”, “connected”, and “connected” are to be understood broadly, and may be fixed or detachable, for example, unless otherwise explicitly defined and defined. Connected, or integrally connected; can be mechanical or electrical; can be directly connected, or indirectly connected through an intermediate medium, can be the internal communication of the two components.
  • Connected, or integrally connected can be mechanical or electrical; can be directly connected, or indirectly connected through an intermediate medium, can be the internal communication of the two components.
  • the specific meaning of the above terms in the present invention can be understood in a specific case by those skilled in the art.
  • FIG. 1 is a schematic flowchart diagram of an embodiment of a method for processing transaction data provided by the present invention.
  • the method embodiment shown in Figure 1 includes:
  • Step 101 The smart card acquires transaction request information.
  • the transaction request information includes at least a payment request or a transfer request
  • the manner in which the smart card obtains the transaction request may be obtained through a contact method or through contactless acquisition.
  • Step 102 The smart card reads a status identifier of a previous transaction
  • the criminal is to use the non-contact continuous piracy behavior to determine whether the smart card is manually confirmed by the cardholder to determine whether the card can be manually confirmed by the cardholder.
  • the transaction cannot be processed. For example, after the criminals have stolen a non-contact method, the criminal cannot be the first pen because the smart card is not in their hands. Pirates Manual confirmation, and the cardholder can not confirm the transaction after knowing that the smart card has a stolen brushing behavior. Therefore, when the criminals initiate the second stealing behavior, the smart card will not be confirmed by the previous transaction. The next second transaction is not accepted; on the contrary, if the cardholder manually confirms the smart card after completing a transaction, indicating that the cardholder knows the last transaction and allows the next transaction, the cardholder I think there is no stolen brushing behavior.
  • the status identifier may be a value, such as 0 and 1. For example, 0 means that the last transaction was not confirmed, and 1 means that the last transaction was confirmed; of course, in practical applications, Use any 2 identifiers to represent these two states.
  • the status identifier can be saved in the transaction log for easy reading and management.
  • the smart card After the smart card reads the status identifier of the last transaction, if the status indicator of the last transaction indicates that the last transaction was not confirmed, the smart card outputs a prompt message confirming the previous transaction information.
  • the prompt information may be displayed by a display device of the smart card, or may be displayed by a terminal connected to the smart card. If it is displayed directly by the smart card, it can reduce the change to the terminal and reduce the maintenance cost of the device.
  • Step 103 If the status identifier of the last transaction indicates that the last transaction is confirmed, the smart card performs a check calculation on the transaction request information to obtain verification data.
  • the verification data can be calculated using the MAC algorithm.
  • Step 104 The smart card outputs the verification data, and saves transaction information of the transaction to a transaction log to complete the transaction;
  • the communication mode used by the smart card to output the verification data may be the same as the communication manner of acquiring the transaction request information.
  • the smart card disconnects the communication with the external device (such as the POS machine), ends the transaction, and records the transaction information in the transaction log.
  • the smart card completes the communication with the external device through one-time interaction, completes the processing of the transaction request information, and controls the data reasonably and effectively under the premise of completing the basic processing flow.
  • the number of interactions of external devices reduces the possibility of being attacked by too many transactions.
  • Step 105 After completing the transaction, the smart card displays key information of the transaction;
  • the smart card when the smart card completes the transaction after outputting the verification data, after completing the transaction data, the smart card displays the key information through the display device set on the smart card to inform the user of the details of the transaction. It is convenient for the user to know the consumption status of the smart card, wherein the key information includes at least one of the transaction amount, the transaction time and the payment account information.
  • Step 106 If the smart card receives the confirmation operation of the key information of the current transaction within a preset time, the smart card marks the status identifier of the current transaction as be confirmed logo.
  • the confirmation operation may be sent by the user through a confirmation button set on the smart card, and the user may complete the confirmation operation by pressing the confirmation button on the smart card;
  • the confirmation button is a plurality of buttons, each button corresponding to one character, and the user confirms the password by selecting one or more components on the plurality of buttons, and the confirmation password is used as a confirmation operation.
  • the former method is simple to implement, the card structure of the smart card is changed less, and it is easy to implement; the latter, the confirmation of the transaction is completed by confirming the password, and since the complexity of confirming the password is high, the confirmation operation caused by the cardholder's misoperation can be reduced. The number of occurrences; in addition, the entered confirmation password can be subsequently verified for secure authentication.
  • the confirmation operation is a confirmation password
  • the smart card receives the confirmation password, and verifies the confirmation password. If the verification is passed, the status identifier of the transaction is marked as the confirmed identifier; otherwise, The confirmation identifier of the transaction is marked as an unconfirmed identifier.
  • the smart card marks the status identifier of the current transaction as an unconfirmed identification.
  • the smart card After the smart card displays the key information of the transaction information, the smart card counts the waiting time. If the time exceeds the preset time, it indicates that the user does not confirm the key information of the transaction, and then the The status identifier of this transaction is marked as unconfirmed.
  • the method provided by the present invention requires the user to confirm the transaction on the smart card after each transaction of the smart card.
  • the smart card will detect whether the last transaction has been confirmed by the user. If and only after the user confirms the transaction, the user will respond to the processing of the transaction, and the criminal will steal the transaction. After that, because the smart card cannot be confirmed, the smart card cannot respond to the second transaction operation, and thus the stealing behavior cannot be performed again, thereby reducing the security risk brought by the continuous stealing to the user's smart card account, and avoiding continuous attacks. The situation has occurred, which has improved the security of the account.
  • FIG. 2 is a schematic flow chart of an embodiment of a method for processing transaction data provided by the present invention.
  • the method embodiment shown in Figure 2 includes:
  • Step 201 The smart card acquires transaction request information.
  • Step 202 The smart card reads a status identifier of a previous transaction.
  • step 203 is performed; otherwise, step 204 is performed;
  • Step 203 the smart card performs verification calculation on the transaction request information, and obtains verification data, and then proceeds to step 205;
  • Step 204 The smart card outputs prompt information for confirming the last transaction information
  • Step 205 The smart card outputs the verification data.
  • Steps 201 to 205 are the same as steps 101 to 104, and are not described herein again.
  • Step 206 The terminal acquires verification data, and acquires a password of the smart card.
  • Step 207 The terminal sends the password and the check data.
  • Step 208 The background server receives the password and the verification data.
  • Step 209 The background server verifies the password and the verification data, obtains a verification result, and sends the verification result.
  • the background server separately verifies the password and the verification data, wherein the verification of the password and the verification data is not in the order of verification; when both the password and the verification data are verified, the background server sends the verification result of the verification. Otherwise, the background server sends the verification result of the verification failure.
  • Step 210 The terminal receives the verification result, and processes the transaction according to the verification result.
  • the terminal receives the verification result as the verification success, the transaction is completed, and the transaction is successfully displayed; if the verification result is the verification failure, the transaction is displayed as failed.
  • the method provided by the present invention requires the user to confirm the transaction on the smart card after each transaction of the smart card.
  • the smart card will detect whether the last transaction has been confirmed by the user. If and only after the user confirms the transaction, the user will respond to the processing of the transaction, and the criminal will steal the transaction. After that, because the smart card cannot be confirmed, the smart card cannot respond to the second transaction operation, and thus the stealing behavior cannot be performed again, thereby reducing the security risk brought by the continuous stealing to the user's smart card account, and avoiding continuous attacks. The situation has occurred, which has improved the security of the account.
  • the two devices of the terminal and the background server need to be changed without any hardware structure, and the implementation is simple and the hardware cost is low.
  • FIG. 3 is a schematic structural diagram of an embodiment of a smart card provided by the present invention.
  • the embodiment shown in Figure 3 includes:
  • the obtaining module 301 is configured to obtain transaction request information.
  • the reading module 302 is connected to the obtaining module 301, and configured to read the status identifier of the last transaction after receiving the transaction request information;
  • the calculation module 303 is connected to the reading module 302, and is configured to perform a check calculation on the transaction request information to obtain verification data if the status identifier of the last transaction indicates that the last transaction is confirmed;
  • the output module 304 is configured to output the verification data, and save the transaction information of the transaction to the transaction log to complete the transaction;
  • the display module 305 is configured to display key information of the transaction after completing the transaction;
  • the receiving module 306 is configured to receive a confirmation operation on the key information of the current transaction
  • the marking module 307 is connected to the determining module 306, and if the receiving module 306 receives the confirmation operation of the key information of the current transaction within a preset time, according to the confirming operation, The status identifier of the transaction is marked as a confirmed identifier.
  • the smart card is a dual interface card
  • the obtaining module 301 can obtain the transaction request information through contact or contactless
  • the reading module 302 reads whether the last transaction information is confirmed, if If it is confirmed that the user knows the transaction information, the calculation module 303 can perform a check operation on the transaction request according to the verification calculation method of the prior art, and obtain the verification data, and output it through the output module 304.
  • the display module 305 outputs the key information of the transaction
  • the marking module 307 marks the status identifier as the confirmed identifier according to the confirmation operation. .
  • the output module 304 is further configured to: after reading the status identifier of the last transaction, if the status identifier of the last transaction indicates that the last transaction is not confirmed, output a prompt for confirming the last transaction information. information.
  • the marking module 307 is further configured to: if the receiving module 306 does not receive the confirmation operation of the key information of the current transaction within a preset time, the status identifier of the current transaction is determined. Marked as unconfirmed.
  • the confirmation operation is a confirmation password
  • the marking module 307 includes: a verification unit, configured to verify the confirmation password; and a marking unit, configured to: if the verification password verification is passed, the current The status identifier of the transaction is marked as a confirmed identifier.
  • the smart card further includes a confirmation button for receiving confirmation of the current transaction information.
  • the confirmation of the transaction is realized by the confirmation button, the implementation is simple, the card structure of the smart card is changed little, and the implementation is easy; the latter, the confirmation of the transaction is completed by confirming the password, and the cardholder error can be reduced due to the high complexity of confirming the password.
  • the number of occurrences of the confirmation operation caused by the operation; in addition, the input confirmation password can be subsequently verified to implement the security authentication.
  • the embodiment provided by the present invention requires the user to confirm the transaction on the smart card after each transaction of the smart card.
  • the smart card will detect whether the last transaction was confirmed by the user. If and only after the user confirms the transaction, the user will respond to the processing of the transaction. After the child steals a stroke, the smart card cannot respond to the second transaction operation because it cannot be confirmed on the smart card, so that the stolen brushing behavior cannot be performed again, thereby reducing the security brought by the continuous stealing to the user's smart card account. The risk avoids the occurrence of continuous attacks and improves the security of the account.
  • a computer readable storage medium comprising computer instructions that, when executed, cause a method of processing transaction data as described above.
  • portions of the invention may be implemented in hardware, software, firmware or a combination thereof.
  • multiple steps or methods may be implemented in software or firmware stored in a memory and executed by a suitable instruction execution system.
  • a suitable instruction execution system For example, if implemented in hardware, as in another embodiment, it can be implemented by any one or combination of the following techniques well known in the art: having logic gates for implementing logic functions on data signals. Discrete logic circuits, application specific integrated circuits with suitable combinational logic gates, programmable gate arrays (PGAs), field programmable gate arrays (FPGAs), etc.
  • each functional unit in each embodiment of the present invention may be integrated into one processing module, or each unit may exist physically separately, or two or more units may be integrated into one module.
  • the above integrated modules can be implemented in the form of hardware or in the form of software functional modules.
  • the integrated modules, if implemented in the form of software functional modules and sold or used as stand-alone products, may also be stored in a computer readable storage medium.
  • the above mentioned storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

Landscapes

  • Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Computer Security & Cryptography (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Finance (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Control Of Vending Devices And Auxiliary Devices For Vending Devices (AREA)

Abstract

本发明提供一种处理交易数据的方法和系统，所述方法包括：智能卡获取交易请求信息；所述智能卡读取上一次交易的状态标识；如果所述上一次交易的状态标识表示所述上一次交易被确认，则所述智能卡对所述交易请求信息进行校验计算，得到校验数据；所述智能卡输出所述校验数据，并将本次交易的交易信息保存到交易日志，完成本次交易；所述智能卡在完成本次交易后，显示本次交易的关键信息；在预先设置的时间内，如果所述智能卡接收到对所述本次交易的关键信息的确认操作，则所述智能卡根据所述确认操作，将所述本次交易的状态标识标记为被确认标识。

Description

处理交易数据的方法和智能卡 技术领域
本发明涉及一种电子技术领域，尤其涉及一种处理交易数据的方法和智能卡。
背景技术
双界面智能卡是具有接触式通信方式和非接触式通信方式的智能卡，即该双界面智能卡不但具有接触式通信方式，还具有无线等非接触式的通信方式。但随着双界面智能卡的普及，不法分子可以在持卡人不知情的情况下，利用非接触式方式直接读取智能卡的账户信息，在没有直接盗取智能卡的前提下，对智能卡实施盗刷行为。
由于上述盗刷方式是在用户未遗失智能卡的前提下实现的，所以在用户未及时发现盗刷行为时，不法分子可以多次实施盗刷行为，因此如果不能及时遏止上述盗刷行为，势必会进一步扩大持卡人的智能卡账号的安全风险。因此，如何降低连续盗刷给用户的智能卡账户带来的安全风险是目前亟待解决的技术问题。
发明内容
本发明提供一种处理交易数据的方法和智能卡，要解决的技术问题是如何降低连续盗刷给用户的智能卡账户带来的安全风险。
一种处理交易数据的方法，包括：智能卡获取交易请求信息；所述智能卡读取上一次交易的状态标识；
如果所述上一次交易的状态标识表示所述上一次交易被确认，则所述智能卡对所述交易请求信息进行校验计算，得到校验数据；所述智能卡输出所述校验数据，并将本次交易的交易信息保存到交易日志，完成本次交易；所述智能卡在完成本次交易后，显示本次交易的关键信息；在预先设置的时间内，如果所述智能卡接收到对所述本次交易的关键信息的确认操作，则所述智能卡根据所述确认操作，将所述本次交易的状态标识标记为被确认标识。
其中，所述方法还具有如下特点：所述方法还包括：如果所述上一次交易的状态标识表示所述上一次交易未被确认，则所述智能卡输出确认上一次交易信息的提示信息。
其中，所述方法还具有如下特点：所述关键信息包括交易金额、交易时间和收款账号信息中的至少一个。
其中，所述方法还具有如下特点：在预先设置的时间内，如果所述智能卡没有接收到 对所述本次交易的关键信息的确认操作，则所述智能卡将所述本次交易的状态标识标记为未被确认标识。
其中，所述方法还具有如下特点：所述确认操作是确认密码。
其中，所述方法还具有如下特点：所述智能卡根据所述确认操作，将所述本次交易的状态标识标记为被确认标识包括：所述智能卡对所述确认密码进行验证，如果验证通过，则将所述本次交易的状态标识标记为被确认标识。
一种处理交易数据的方法，包括：智能卡获取交易请求信息；所述智能卡读取上一次交易的状态标识；
如果所述上一次交易的状态标识表示所述上一次交易被确认，则所述智能卡对所述交易请求信息进行校验计算，得到校验数据；所述智能卡输出所述校验数据；终端获取校验数据，以及获取所述智能卡的密码，并发送所述密码和所述校验数据；后台服务器接收所述密码和所述校验数据，对所述密码和所述校验数据进行验证，得到验证结果，并发送所述验证结果；所述终端接收所述验证结果，并根据所述验证结果，处理本次交易。
一种智能卡，包括：获取模块，用于获取交易请求信息；读取模块，与所述获取模块相连，用于在接收到所述交易请求信息后，读取上一次交易的状态标识；计算模块，与所述读取模块相连，用于如果所述上一次交易的状态标识表示所述上一次交易被确认，则对所述交易请求信息进行校验计算，得到校验数据；输出模块，用于输出所述校验数据，并将本次交易的交易信息保存到交易日志，完成本次交易；显示模块，用于在完成本次交易后，显示本次交易的关键信息；接收模块，用于接收对所述本次交易的关键信息的确认操作；标记模块，与所述接收模块相连，用于在预先设置的时间内，如果所述接收模块接收到对所述本次交易的关键信息的确认操作，则根据所述确认操作，将所述本次交易的状态标识标记为被确认标识。
其中，所述智能卡还具有如下特点：所述输出模块，还用于在读取上一次交易的状态标识之后，如果所述上一次交易的状态标识表示所述上一次交易未被确认，则输出确认上一次交易信息的提示信息。
其中，所述智能卡还具有如下特点：所述标记模块，还用于在预先设置的时间内，如果所述没有接收到对所述本次交易的关键信息的确认操作，则将所述本次交易的状态标识标记为未被确认标识。
其中，所述智能卡还具有如下特点：所述确认操作为确认密码；所述标记模块，包括：验证单元，用于对所述确认密码进行验证；标记单元，用于如果所述验证密码验证通过，则将所述本次交易的状态标识标记为被确认标识。
一种处理交易数据的方法，包括：智能卡获取交易请求信息；所述智能卡在接收到所述交易请求信息后，读取上一次交易的状态标识，其中所述状态标识用于指示所述上次交易是否被确认；
如果所述上一次交易的状态标识表示所述上一次交易被确认，则所述智能卡对所述交易请求信息进行校验计算，得到校验数据；所述智能卡输出所述校验数据，并将本次交易的交易信息保存到交易日志，完成本次交易；所述智能卡在完成本次交易后，显示本次交易的关键信息；所述智能卡等待接收对所述本次交易的关键信息的确认操作；在预先设置的时间内，如果所述智能卡接收到对所述本次交易的关键信息的确认操作，则所述智能卡根据所述确认操作，更新所述本次交易的状态标识。
其中，所述方法还具有如下特点：所述方法还包括：所述智能卡在读取上一次交易的状态标识之后，如果所述上一次交易的状态标识表示所述上一次交易未被确认，则所述智能卡输出确认上一次交易信息的提示信息。
其中，所述方法还具有如下特点：所述关键信息包括交易金额、交易时间和收款账号信息中的至少一个。
其中，所述方法还具有如下特点：在预先设置的时间内，如果所述智能卡没有接收到对所述本次交易的关键信息的确认操作，则所述智能卡将所述本次交易的状态标识更新为未被确认标识。
其中，所述方法还具有如下特点：所述智能卡等待接收对所述本次交易的关键信息的确认操作，包括：所述智能卡接收确认密码；所述智能卡根据所述确认操作，更新所述本次交易的状态标识，包括：所述智能卡对所述确认密码进行验证，如果验证通过，则将所述本次交易的状态标识更新为被确认标识。
一种处理交易数据的方法，包括：智能卡获取交易请求信息；所述智能卡在接收到所述交易请求信息后，读取上一次交易的状态标识，其中所述状态标识用于指示所述上次交易是否被确认；
如果所述上一次交易的状态标识表示所述上一次交易被确认，则所述智能卡对所述交易请求信息进行校验计算，得到校验数据；所述智能卡输出所述校验数据；终端获取校验数据，以及获取所述智能卡的密码，并发送所述密码和所述校验数据；后台服务器接收所述密码和所述校验数据，对所述密码和所述校验数据进行验证，得到验证结果，并发送所述验证结果；所述终端接收所述验证结果，并根据所述验证结果，处理本次交易。
一种智能卡，包括：获取模块，用于获取交易请求信息；读取模块，与所述获取模块相连，用于在接收到所述交易请求信息后，读取上一次交易的状态标识，其中所述状态标 识用于指示所述上次交易是否被确认；计算模块，与所述读取模块相连，用于如果所述上一次交易的状态标识表示所述上一次交易被确认，则对所述交易请求信息进行校验计算，得到校验数据；输出模块，用于输出所述校验数据，并将本次交易的交易信息保存到交易日志，完成本次交易；显示模块，用于在完成本次交易后，显示本次交易的关键信息；接收模块，用于接收对所述本次交易的关键信息的确认操作；更新模块，与所述接收模块相连，用于在预先设置的时间内，如果所述接收模块接收到对所述本次交易的关键信息的确认操作，则根据所述确认操作，更新所述本次交易的状态标识。
其中，所述智能卡还具有如下特点：所述输出模块，还用于在读取上一次交易的状态标识之后，如果所述上一次交易的状态标识表示所述上一次交易未被确认，则输出确认上一次交易信息的提示信息。
其中，所述智能卡还具有如下特点：所述更新模块，还用于在预先设置的时间内，如果所述没有接收到对所述本次交易的关键信息的确认操作，则将所述本次交易的状态标识更新为未被确认标识。
其中，所述智能卡还具有如下特点：所述确认操作为确认密码；所述更新模块，包括：验证单元，用于对所述确认密码进行验证；更新单元，用于如果所述验证密码验证通过，则将所述本次交易的状态标识更新为被确认标识。
一种计算机可读存储介质，包括计算机指令，当所述计算机指令被执行时，使得执行上述的处理交易数据的方法。
与现有技术相比，本发明提供的实施例，在智能卡每完成一笔交易后，均要求用户在智能卡上对该笔交易进行确认。当用户进行新一笔交易时，智能卡会检测上一笔交易是否得到用户确认，当用户对本次交易确认后，才响应本笔交易的处理操作，而不法分子在盗刷一笔后，由于不能在智能卡上进行确认，使得智能卡无法响应第二次的交易操作，从而不能再次进行盗刷行为，从而降低了连续盗刷给用户的智能卡账户带来的安全风险，避免了连续攻击的情况发生，提高了账号的安全性。
附图说明
为了更清楚地说明本发明实施例的技术方案，下面将对实施例描述中所需要使用的附图作简单地介绍，显而易见地，下面描述中的附图仅仅是本发明的一些实施例，对于本领域的普通技术人员来讲，在不付出创造性劳动的前提下，还可以根据这些附图获得其他附图。
图1为本发明提供的处理交易数据的方法实施例的流程示意图；
图2为本发明提供的处理交易数据的方法实施例的流程示意图；
图3为本发明提供的智能卡实施例的结构示意图。
具体实施方式
下面结合本发明实施例中的附图，对本发明实施例中的技术方案进行清楚、完整地描述，显然，所描述的实施例仅仅是本发明一部分实施例，而不是全部的实施例。基于本发明的实施例，本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例，都属于本发明的保护范围。
在本发明的描述中，需要理解的是，术语“中心”、“纵向”、“横向”、“上”、“下”、“前”、“后”、“左”、“右”、“竖直”、“水平”、“顶”、“底”、“内”、“外”等指示的方位或位置关系为基于附图所示的方位或位置关系，仅是为了便于描述本发明和简化描述，而不是指示或暗示所指的装置或元件必须具有特定的方位、以特定的方位构造和操作，因此不能理解为对本发明的限制。此外，术语“第一”、“第二”仅用于描述目的，而不能理解为指示或暗示相对重要性或数量或位置。
在本发明的描述中，需要说明的是，除非另有明确的规定和限定，术语“安装”、“相连”、“连接”应做广义理解，例如，可以是固定连接，也可以是可拆卸连接，或一体地连接；可以是机械连接，也可以是电连接；可以是直接相连，也可以通过中间媒介间接相连，可以是两个元件内部的连通。对于本领域的普通技术人员而言，可以具体情况理解上述术语在本发明中的具体含义。
下面将结合附图对本发明实施例作进一步地详细描述。
图1为本发明提供的处理交易数据的方法实施例的流程示意图。图1所示方法实施例包括：
步骤101、智能卡获取交易请求信息；
其中，交易请求信息至少包括支付请求或转账请求等；
智能卡获取该交易请求的方式可以是通过接触式方式获取，也可以是通过非接触式获取。
步骤102、所述智能卡读取上一次交易的状态标识；
具体的，由于交易请求涉及到账户金额的减少，所以为避免本次刷卡行为是不法分子是通过非接触方式的连续盗刷行为，判断该智能卡是否通过持卡人的手动确认来确定本次能够进行交易，如果持卡人不确认本次交易，则不能对本次交易进行处理，例如，不法分子在通过非接触方式盗刷一笔后，由于智能卡不在其手中，不法分子不能对第一笔盗刷行 进行手动确认，而持卡人在知晓智能卡发生一笔盗刷行为后，可以不对交易进行确认，因此，在不法分子发起第二笔盗刷行为时，智能卡由于没有得到上一步交易的确认，会不接受接下来的第二笔交易；相反，如果持卡人在完成一笔交易后，对智能卡进行手动确认，表示持卡人知晓上一笔交易，允许进行下一步交易，则说明持卡人认为当前不存在盗刷行为。
其中，该状态标识可以为一数值，如用0和1来表示，例如，用0来表示上次交易未被确认，用1来表示上次交易被确认；当然，在实际应用中，也可以利用任意2个标识来表示这两个状态。
其中，该状态标识可以保存在交易日志中，便于读取和管理。
智能卡在读取上一次交易的状态标识之后，如果所述上一次交易的状态标识表示所述上一次交易未被确认，则智能卡输出确认上一次交易信息的提示信息。其中，该提示信息可以是由智能卡的显示装置进行显示，也可以由与智能卡相连的终端来显示。如果由智能卡直接显示可以减少对终端的更改，降低设备的维护成本。
步骤103、如果所述上一次交易的状态标识表示所述上一次交易被确认，则所述智能卡对所述交易请求信息进行校验计算，得到校验数据；
例如，可以采用MAC算法计算得到校验数据。
步骤104、所述智能卡输出所述校验数据，并将本次交易的交易信息保存到交易日志，完成本次交易；
具体的，所述智能卡输出校验数据所采用的通信方式可以与获取交易请求信息的通信方式相同。在智能卡输出校验数据后，智能卡与外部设备(如POS机)断开通信连接，结束本次交易，将本次的交易信息记录到交易日志中。
需要说明的是，基于步骤101-104可以看出，智能卡通过一次性交互完成了与外部设备的通信，完成了交易请求信息的处理，在完成基本处理流程的前提下，合理有效地控制了与外部设备的交互次数，降低了交易次数过多存在被攻击的可能。
步骤105、所述智能卡在完成本次交易后，显示本次交易的关键信息；
需要说明的是，与现有技术中智能卡在输出校验数据后即完成交易相比，在完成交易数据后，智能卡会通过智能卡上设置的显示装置显示关键信息，以告知用户本次交易的详情，方便用户知晓智能卡的消费情况，其中关键信息包括交易金额、交易时间和收款账号信息中的至少一个。
步骤106、在预先设置的时间内，如果所述智能卡接收到对所述本次交易的关键信息的确认操作，则所述智能卡根据所述确认操作，将所述本次交易的状态标识标记为被确认 标识。
其中，确认操作可以是用户通过智能卡上设置的确认按钮发出的，用户可以通过按下智能卡上的确认按钮完成确认操作；
当然，所述确认按钮为多个按钮，每个按钮对应一个字符，用户通过在多个按钮上选择一个或多个组成确认密码，将该确认密码作为确认操作。
其中，前者方式实现简单，对智能卡的卡片结构改变少，易于实现；后者，通过确认密码完成对交易的确认，由于确认密码的复杂度较高，可以减少持卡人误操作引起的确认操作的发生次数；另外，可以对输入的确认密码进行后续验证，以实现安全认证。
具体的，所述确认操作为确认密码，所述智能卡接收确认密码，并对所述确认密码进行验证，如果验证通过，则将所述本次交易的状态标识标记为被确认标识；否则，将所述本次交易的确认标识标记为未被确认标识。
由本步骤可知，通过确认密码对确认操作进行认证，可以实现对确认操作的持卡人的身份验证，从而进一步保证交易的安全，降低盗刷的可能。
当然，在预先设置的时间内，如果所述智能卡没有接收到对所述本次交易的关键信息的确认操作，则所述智能卡将所述本次交易的状态标识标记为未被确认标识。
具体的，在智能卡显示交易信息的关键信息后，智能卡会对等待的时间进行计时，如果计时时间超过预先设置的时间，则表示用户没有对本次交易的关键信息进行确认操作，则将所述本次交易的状态标识标记为未被确认标识。
与现有技术相比，本发明提供的方法实施例，在智能卡每完成一笔交易后，均要求用户在智能卡上对该笔交易进行确认。当用户进行新一笔交易时，智能卡会检测上一笔交易是否得到用户确认，当且仅当用户对本次交易确认后，才响应本笔交易的处理操作，而不法分子在盗刷一笔后，由于不能在智能卡上进行确认，使得智能卡无法响应第二次的交易操作，从而不能再次进行盗刷行为，从而降低了连续盗刷给用户的智能卡账户带来的安全风险，避免了连续攻击的情况发生，提高了账号的安全性。
图2为本发明提供的处理交易数据的方法实施例的流程示意图。图2所示方法实施例包括：
步骤201、智能卡获取交易请求信息；
步骤202、所述智能卡读取上一次交易的状态标识；
如果所述上一次交易的状态标识表示所述上一次交易被确认，则执行步骤203；否则，执行步骤204；
步骤203、智能卡对所述交易请求信息进行校验计算，得到校验数据，然后执行步骤205；
步骤204、智能卡输出确认上一次交易信息的提示信息；
步骤205、所述智能卡输出所述校验数据；
其中步骤201至步骤205与步骤101至步骤104的操作相同，此处不再赘述。
步骤206、终端获取校验数据，以及获取所述智能卡的密码；
步骤207、所述终端发送所述密码和所述校验数据；
步骤208、后台服务器接收所述密码和所述校验数据；
步骤209、后台服务器对所述密码和所述校验数据进行验证，得到验证结果，并发送所述验证结果；
其中，后台服务器分别对密码和校验数据进行验证，其中对密码和校验数据的验证并没没有验证的先后顺序；在密码和校验数据均验证通过时，后台服务器发送验证通过的验证结果；否则，后台服务器发送验证失败的验证结果。
步骤210、所述终端接收所述验证结果，并根据所述验证结果，处理本次交易。
具体的，所述终端如果接收到验证结果为验证成功，则完成交易，显示交易成功；如果接收到的验证结果为验证失败，则显示交易失败。
与现有技术相比，本发明提供的方法实施例，在智能卡每完成一笔交易后，均要求用户在智能卡上对该笔交易进行确认。当用户进行新一笔交易时，智能卡会检测上一笔交易是否得到用户确认，当且仅当用户对本次交易确认后，才响应本笔交易的处理操作，而不法分子在盗刷一笔后，由于不能在智能卡上进行确认，使得智能卡无法响应第二次的交易操作，从而不能再次进行盗刷行为，从而降低了连续盗刷给用户的智能卡账户带来的安全风险，避免了连续攻击的情况发生，提高了账号的安全性。且，在能降低包括智能卡的交易系统的连续盗刷的风险的前提下，终端和后台服务器上述两个设备无需作任何硬件结构的改变，就实现简单，硬件成本低。
图3为本发明提供的智能卡实施例的结构示意图。图3所示实施例包括：
获取模块301，用于获取交易请求信息；
读取模块302，与所述获取模块301相连，用于在接收到所述交易请求信息后，读取上一次交易的状态标识；
计算模块303，与所述读取模块302相连，用于如果所述上一次交易的状态标识表示所述上一次交易被确认，则对所述交易请求信息进行校验计算，得到校验数据；
输出模块304，用于输出所述校验数据，并将本次交易的交易信息保存到交易日志，完成本次交易；
显示模块305，用于在完成本次交易后，显示本次交易的关键信息；
接收模块306，用于接收对所述本次交易的关键信息的确认操作；
标记模块307，与所述判断模块306相连，用于在预先设置的时间内，如果所述接收模块306接收到对所述本次交易的关键信息的确认操作，则根据所述确认操作，将所述本次交易的状态标识标记为被确认标识。
在本实施提供的智能卡实施例中，该智能卡为双界面卡，获取模块301可以通过接触式或非接触式获取交易请求信息，读取模块302读取上一次的交易信息是否却被确认，如果被确认，则表示用户知晓该交易信息，则计算模块303可以按照现有技术的校验计算方式对交易请求进行校验运算，得到校验数据，并通过输出模块304输出。在完成本次交易请求的处理后，显示模块305输出本次交易的关键信息，并在接收模块306收到对本次的确认操作后，标记模块307根据确认操作将状态标识标记为被确认标识。
其中，所述输出模块304，还用于在读取上一次交易的状态标识之后，如果所述上一次交易的状态标识表示所述上一次交易未被确认，则输出确认上一次交易信息的提示信息。
其中，所述标记模块307，还用于在预先设置的时间内，如果所述接收模块306没有接收到对所述本次交易的关键信息的确认操作，则将所述本次交易的状态标识标记为未被确认标识。
其中，所述确认操作为确认密码；所述标记模块307，包括：验证单元，用于对所述确认密码进行验证；标记单元，用于如果所述验证密码验证通过，则将所述本次交易的状态标识标记为被确认标识。
由本步骤可知，通过确认密码对确认操作进行认证，可以实现对确认操作的持卡人的身份验证，从而进一步保证交易的安全，降低盗刷的可能。
其中，所述智能卡还包括确认按钮，用以接收对所述本次的交易信息的确认。
其中，通过确认按钮实现交易确认，实现简单，对智能卡的卡片结构改变少，易于实现；后者，通过确认密码完成对交易的确认，由于确认密码的复杂度较高，可以减少持卡人误操作引起的确认操作的发生次数；另外，可以对输入的确认密码进行后续验证，以实现安全认证。
与现有技术相比，本发明提供的实施例，在智能卡每完成一笔交易后，均要求用户在智能卡上对该笔交易进行确认。当用户进行新一笔交易时，智能卡会检测上一笔交易是否得到用户确认，当且仅当用户对本次交易确认后，才响应本笔交易的处理操作，而不法分 子在盗刷一笔后，由于不能在智能卡上进行确认，使得智能卡无法响应第二次的交易操作，从而不能再次进行盗刷行为，从而降低了连续盗刷给用户的智能卡账户带来的安全风险，避免了连续攻击的情况发生，提高了账号的安全性。
一种计算机可读存储介质，包括计算机指令，当所述计算机指令被执行时，使得执行上述的处理交易数据的方法。
流程图中或在此以其他方式描述的任何过程或方法描述可以被理解为，表示包括一个或更多个用于实现特定逻辑功能或过程的步骤的可执行指令的代码的模块、片段或部分，并且本发明的优选实施方式的范围包括另外的实现，其中可以不按所示出或讨论的顺序，包括根据所涉及的功能按基本同时的方式或按相反的顺序，来执行功能，这应被本发明的实施例所属技术领域的技术人员所理解。
应当理解，本发明的各部分可以用硬件、软件、固件或它们的组合来实现。在上述实施方式中，多个步骤或方法可以用存储在存储器中且由合适的指令执行系统执行的软件或固件来实现。例如，如果用硬件来实现，和在另一实施方式中一样，可用本领域公知的下列技术中的任一项或他们的组合来实现：具有用于对数据信号实现逻辑功能的逻辑门电路的离散逻辑电路，具有合适的组合逻辑门电路的专用集成电路，可编程门阵列(PGA)，现场可编程门阵列(FPGA)等。
本技术领域的普通技术人员可以理解实现上述实施例方法携带的全部或部分步骤是可以通过程序来指令相关的硬件完成，所述的程序可以存储于一种计算机可读存储介质中，该程序在执行时，包括方法实施例的步骤之一或其组合。
此外，在本发明各个实施例中的各功能单元可以集成在一个处理模块中，也可以是各个单元单独物理存在，也可以两个或两个以上单元集成在一个模块中。上述集成的模块既可以采用硬件的形式实现，也可以采用软件功能模块的形式实现。所述集成的模块如果以软件功能模块的形式实现并作为独立的产品销售或使用时，也可以存储在一个计算机可读取存储介质中。
上述提到的存储介质可以是只读存储器，磁盘或光盘等。
在本说明书的描述中，参考术语“一个实施例”、“一些实施例”、“示例”、“具体示例”、或“一些示例”等的描述意指结合该实施例或示例描述的具体特征、结构、材料或者特点包含于本发明的至少一个实施例或示例中。在本说明书中，对上述术语的示意性表述不一定指的是相同的实施例或示例。而且，描述的具体特征、结构、材料或者特点可以在任何的一个或多个实施例或示例中以合适的方式结合。
尽管上面已经示出和描述了本发明的实施例，可以理解的是，上述实施例是示例性的，不能理解为对本发明的限制，本领域的普通技术人员在不脱离本发明的原理和宗旨的情况下在本发明的范围内可以对上述实施例进行变化、修改、替换和变型。本发明的范围由所附权利要求及其等同限定。

Claims (13)

  1. 一种处理交易数据的方法，其特征在于，包括：
    智能卡获取交易请求信息；
    所述智能卡读取上一次交易的状态标识；
    如果所述上一次交易的状态标识表示所述上一次交易被确认，则所述智能卡对所述交易请求信息进行校验计算，得到校验数据；
    所述智能卡输出所述校验数据，并将本次交易的交易信息保存到交易日志，完成本次交易；
    所述智能卡在完成本次交易后，显示本次交易的关键信息；
    在预先设置的时间内，如果所述智能卡接收到对所述本次交易的关键信息的确认操作，则所述智能卡根据所述确认操作，将所述本次交易的状态标识标记为被确认标识。
  2. 根据权利要求1所述的方法，其特征在于，所述方法还包括：
    如果所述上一次交易的状态标识表示所述上一次交易未被确认，则所述智能卡输出确认上一次交易信息的提示信息。
  3. 根据权利要求1或2所述的方法，其特征在于，所述关键信息包括交易金额、交易时间和收款账号信息中的至少一个。
  4. 根据权利要求1至3中任一项所述的方法，其特征在于，所述方法还包括：
    在预先设置的时间内，如果所述智能卡没有接收到对所述本次交易的关键信息的确认操作，则所述智能卡将所述本次交易的状态标识标记为未被确认标识。
  5. 根据权利要求1至4中任一项所述的方法，其特征在于：所述确认操作是确认密码。
  6. 根据权利要求5所述的方法，其特征在于，所述智能卡根据所述确认操作，将所述本次交易的状态标识标记为被确认标识包括：
    所述智能卡对所述确认密码进行验证，如果验证通过，则将所述本次交易的状态标识标记为被确认标识。
  7. 一种处理交易数据的方法，其特征在于，包括：
    智能卡获取交易请求信息；
    所述智能卡读取上一次交易的状态标识；
    如果所述上一次交易的状态标识表示所述上一次交易被确认，则所述智能卡对所述交易请求信息进行校验计算，得到校验数据；
    所述智能卡输出所述校验数据；
    终端获取校验数据，以及获取所述智能卡的密码，并发送所述密码和所述校验数据；
    后台服务器接收所述密码和所述校验数据，对所述密码和所述校验数据进行验证，得到验证结果，并发送所述验证结果；
    所述终端接收所述验证结果，并根据所述验证结果，处理本次交易。
  8. 一种智能卡，其特征在于，包括：
    获取模块，用于获取交易请求信息；
    读取模块，与所述获取模块相连，用于在接收到所述交易请求信息后，读取上一次交易的状态标识；
    计算模块，与所述读取模块相连，用于如果所述上一次交易的状态标识表示所述上一次交易被确认，则对所述交易请求信息进行校验计算，得到校验数据；
    输出模块，用于输出所述校验数据，并将本次交易的交易信息保存到交易日志，完成本次交易；
    显示模块，用于在完成本次交易后，显示本次交易的关键信息；
    接收模块，用于接收对所述本次交易的关键信息的确认操作；
    标记模块，与所述接收模块相连，用于在预先设置的时间内，如果所述接收模块接收到对所述本次交易的关键信息的确认操作，则根据所述确认操作，将所述本次交易的状态标识标记为被确认标识。
  9. 根据权利要求8所述的智能卡，其特征在于：
    所述输出模块，还用于在读取上一次交易的状态标识之后，如果所述上一次交易的状态标识表示所述上一次交易未被确认，则输出确认上一次交易信息的提示信息。
  10. 根据权利要求8或9所述的智能卡，其特征在于：
    所述标记模块，还用于在预先设置的时间内，如果所述没有接收到对所述本次交易的关键信息的确认操作，则将所述本次交易的状态标识标记为未被确认标识。
  11. 根据权利要求8至10中任一项所述的智能卡，其特征在于：
    所述确认操作为确认密码。
  12. 根据权利要求11所述的智能卡，其特征在于，所述标记模块包括：
    验证单元，用于对所述确认密码进行验证；
    标记单元，用于如果所述验证密码验证通过，则将所述本次交易的状态标识标记为被确认标识。
  13. 一种计算机可读存储介质，包括计算机指令，当所述计算机指令被执行时，使得 执行根据权利要求1-7中任一项所述的处理交易数据的方法。
PCT/CN2014/086150 2013-12-04 2014-09-09 处理交易数据的方法和智能卡 Ceased WO2015081738A1 (zh)

Priority Applications (3)

Application Number Priority Date Filing Date Title
EP14868476.4A EP3079115A4 (en) 2013-12-04 2014-09-09 Method and smart card for processing transaction data
US15/101,429 US20160307198A1 (en) 2013-12-04 2014-09-09 Method and smart card for processing transaction data
JP2016536541A JP6099830B2 (ja) 2013-12-04 2014-09-09 取引データを処理する方法及びスマートカード

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201310648305.9 2013-12-04
CN201310648305.9A CN103679458B (zh) 2013-12-04 处理交易数据的方法和智能卡

Publications (1)

Publication Number Publication Date
WO2015081738A1 true WO2015081738A1 (zh) 2015-06-11

Family

ID=50316930

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2014/086150 Ceased WO2015081738A1 (zh) 2013-12-04 2014-09-09 处理交易数据的方法和智能卡

Country Status (4)

Country Link
US (1) US20160307198A1 (zh)
EP (1) EP3079115A4 (zh)
JP (1) JP6099830B2 (zh)
WO (1) WO2015081738A1 (zh)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10607195B2 (en) * 2016-06-06 2020-03-31 ArrowPass, Inc. Facilitating selling and validating digital resources
CN112149098B (zh) * 2019-06-26 2024-05-24 天地融科技股份有限公司 一种办公系统安全控制方法、装置及系统
CN116882429B (zh) * 2023-09-08 2024-02-02 紫光同芯微电子有限公司 用于智能卡芯片的数据传输方法及装置、智能卡
CN117455666B (zh) * 2023-10-16 2025-02-25 厦门国际银行股份有限公司 一种基于神经网络的交易技术指标预测方法、装置及设备

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101291329A (zh) * 2007-04-16 2008-10-22 林仲宇 以电话号码及识别码做为网络在线刷卡双重认证之方法
CN102156945A (zh) * 2010-02-12 2011-08-17 连清宏 一种使用VoIPoW电话的信用卡风险控管方法
US20130179351A1 (en) * 2012-01-09 2013-07-11 George Wallner System and method for an authenticating and encrypting card reader
CN103679458A (zh) * 2013-12-04 2014-03-26 天地融科技股份有限公司 处理交易数据的方法和智能卡

Family Cites Families (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6003767A (en) * 1989-09-06 1999-12-21 Fujitsu Limited Cashless medium for an electronic cashless system
CN100468452C (zh) * 1999-08-23 2009-03-11 李东声 一种实现电子存折(钱包)安全交易的方法
US7480631B1 (en) * 2004-12-15 2009-01-20 Jpmorgan Chase Bank, N.A. System and method for detecting and processing fraud and credit abuse
EP1912182A1 (fr) * 2006-10-12 2008-04-16 Proton World International N.V. Autorisation d'une transaction entre un circuit électronique et un terminal
US8548426B2 (en) * 2009-02-20 2013-10-01 Boku, Inc. Systems and methods to approve electronic payments
US8523059B1 (en) * 2009-10-20 2013-09-03 Dynamics Inc. Advanced payment options for powered cards and devices
CN102081821B (zh) * 2009-11-27 2013-08-14 中国银联股份有限公司 Ic卡支付系统和方法以及多应用ic卡、支付终端
US20110137804A1 (en) * 2009-12-03 2011-06-09 Recursion Software, Inc. System and method for approving transactions
WO2012037971A1 (en) * 2010-09-21 2012-03-29 Mastercard International Incorporated Financial transaction method and system having an update mechanism
DE102011010082A1 (de) * 2011-02-01 2012-08-02 Giesecke & Devrient Gmbh Verfahren zur sicheren Betätigung eines Datenträgers mit Tastatur
US20130080238A1 (en) * 2011-09-22 2013-03-28 Bryan Kelly Method and System for Operating a Customer or Player Loyalty System Including a Portable Device Such as a Smartcard

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101291329A (zh) * 2007-04-16 2008-10-22 林仲宇 以电话号码及识别码做为网络在线刷卡双重认证之方法
CN102156945A (zh) * 2010-02-12 2011-08-17 连清宏 一种使用VoIPoW电话的信用卡风险控管方法
US20130179351A1 (en) * 2012-01-09 2013-07-11 George Wallner System and method for an authenticating and encrypting card reader
CN103679458A (zh) * 2013-12-04 2014-03-26 天地融科技股份有限公司 处理交易数据的方法和智能卡

Also Published As

Publication number Publication date
JP6099830B2 (ja) 2017-03-22
CN103679458A (zh) 2014-03-26
EP3079115A4 (en) 2017-10-11
US20160307198A1 (en) 2016-10-20
JP2016539424A (ja) 2016-12-15
EP3079115A1 (en) 2016-10-12

Similar Documents

Publication Publication Date Title
CN104599121B (zh) 一种信息传输方法、装置和系统
CN104038924B (zh) 实现资源交换信息处理的方法和系统
WO2022012616A1 (zh) 近场通信nfc的信息显示方法、装置及电子设备
US20160099938A1 (en) Authenticating Method and Apparatus Using Electronic Device
KR20160096202A (ko) 네트워크 결제 방법, 장치 및 시스템
KR20140138271A (ko) 생체 측정 인증 시스템
CN106357600A (zh) 用于支付服务的卡片注册方法和实施该方法的移动电子设备
CN105678271A (zh) 指纹录入方法、装置及移动终端
WO2015103886A1 (en) Numerical value transferring method, terminal, server, and system
WO2015081738A1 (zh) 处理交易数据的方法和智能卡
CN107422838A (zh) 一种穿戴式设备、解锁控制系统及解锁控制方法
WO2014056399A1 (zh) 一种电子签名工具、系统和方法
CN102546571B (zh) 一种身份认证系统及认证方法
CN104680371A (zh) 一种无卡交易处理方法和系统
US20150235228A1 (en) Method, device and system for on-line payment information transmission
CN104753569B (zh) 一种配置非接触参数的方法、nfc芯片及nfc设备
CN107548059A (zh) 一种认证方法及系统
CN105101259B (zh) 一种标识wifi的方法及智能终端
CN106651352A (zh) 一种基于近场通信的支付方法及装置
CN104933379B (zh) 身份证信息获取方法、装置及系统
KR20150050280A (ko) 지문 정보 및 인증번호를 이용한 인증 방법, 사용자 단말기 및 금융사 서버
CN115915131A (zh) 车辆钥匙双向加密认证方法、系统、车辆绑定装置及nfc卡
CN111104653B (zh) 用户操作的处理方法、装置、电子设备及可读存储介质
CN105989481B (zh) 数据交互方法及系统
WO2013181882A1 (zh) 手写笔、移动终端以及信息的处理方法

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 14868476

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2016536541

Country of ref document: JP

Kind code of ref document: A

WWE Wipo information: entry into national phase

Ref document number: 15101429

Country of ref document: US

NENP Non-entry into the national phase

Ref country code: DE

REEP Request for entry into the european phase

Ref document number: 2014868476

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 2014868476

Country of ref document: EP