WO2017185926A1 - 移动支付方法和装置 - Google Patents

移动支付方法和装置 Download PDF

Info

Publication number
WO2017185926A1
WO2017185926A1 PCT/CN2017/077989 CN2017077989W WO2017185926A1 WO 2017185926 A1 WO2017185926 A1 WO 2017185926A1 CN 2017077989 W CN2017077989 W CN 2017077989W WO 2017185926 A1 WO2017185926 A1 WO 2017185926A1
Authority
WO
WIPO (PCT)
Prior art keywords
fingerprint verification
fingerprint
mobile payment
application
payment terminal
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2017/077989
Other languages
English (en)
French (fr)
Inventor
陈成钱
周钰
郭伟
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Unionpay Co Ltd
Original Assignee
China Unionpay Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Unionpay Co Ltd filed Critical China Unionpay Co Ltd
Priority to CA3026587A priority Critical patent/CA3026587C/en
Priority to US16/096,779 priority patent/US20190318340A1/en
Priority to JP2018555629A priority patent/JP6675498B2/ja
Priority to EP17788579.5A priority patent/EP3451265A4/en
Publication of WO2017185926A1 publication Critical patent/WO2017185926A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04M—TELEPHONIC COMMUNICATION
    • H04M1/00—Substation equipment, e.g. for use by subscribers
    • H04M1/72—Mobile telephones; Cordless telephones, i.e. devices for establishing wireless links to base stations without route selection
    • H04M1/724—User interfaces specially adapted for cordless or mobile telephones
    • H04M1/72448—User interfaces specially adapted for cordless or mobile telephones with means for adapting the functionality of the device according to specific conditions
    • H04M1/72454—User interfaces specially adapted for cordless or mobile telephones with means for adapting the functionality of the device according to specific conditions according to context-related or environment-related conditions
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/322—Aspects of commerce using mobile devices [M-devices]
    • G06Q20/3227—Aspects of commerce using mobile devices [M-devices] using secure elements embedded in M-devices
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/327—Short range or proximity payments by means of M-devices
    • G06Q20/3278—RFID or NFC payments by means of M-devices
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G06Q20/4014—Identity check for transactions
    • G06Q20/40145—Biometric identity checks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0861—Network architectures or network communication protocols for network security for authentication of entities using biometrical features, e.g. fingerprint, retina-scan
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3226—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
    • H04L9/3231—Biological data, e.g. fingerprint, voice or retina
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/80—Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Definitions

  • the present invention relates to mobile payment technologies, and in particular to a mobile payment method and apparatus based on a near field communication function, which can seamlessly switch between a fingerprint verification mode and a non-fingerprint verification mode.
  • NFC Near Field Communication
  • eSE embedded security unit
  • the typical representative is Apple Inc. Apple Pay.
  • fingerprint verification can ensure that the current cardholder is a legitimate cardholder, thereby protecting the cardholder's card security.
  • the present invention provides a mobile payment method and apparatus based on a near field communication function, which can simultaneously fit a mobile payment scenario under a security protection mechanism and a non-security protection mechanism, and can implement seamless handover between the two to provide good user experience.
  • a mobile payment method comprising the following steps:
  • the mobile payment terminal performs a contactless protocol initialization process between it and an external device
  • the mobile payment terminal receives a selection command from the external device, the selection command designating a contactless application
  • the mobile payment terminal determines whether the specified contactless application passes the fingerprint verification
  • the mobile payment terminal runs the specified contactless application to perform a payment operation
  • the execution of the non-contact protocol initialization process is independent of the execution of the fingerprint verification process.
  • the fingerprint verification process is performed before determining that the specified contactless application supports the fingerprint verification mode.
  • the fingerprint verification process is performed after determining that the specified contactless application supports the fingerprint verification mode.
  • the mobile payment terminal determines whether the specified contactless application supports a fingerprint verification mode by accessing an application registry, and the application registry saves and resides in the mobile payment terminal.
  • the fingerprint associated information is contacted by the application, the fingerprint identification information including an identifier indicating whether the contactless application supports the fingerprint verification mode and a status flag indicating whether the fingerprint verification passes when the fingerprint verification mode is supported.
  • the step of determining, by the mobile payment terminal, whether to pass the fingerprint verification comprises:
  • a mobile payment terminal including:
  • a near field communication unit configured to perform a contactless protocol initialization process between the mobile payment terminal and the external device and to receive a selection command from an external device, the selection command specifying a contactless application operating within the mobile payment terminal;
  • a fingerprint verification unit configured to perform a fingerprint verification process
  • An embedded security unit includes a fingerprint triggering module, and the fingerprint triggering module is configured to:
  • the execution of the non-contact protocol initialization process is independent of the execution of the fingerprint verification process.
  • the mobile payment terminal is a mobile phone.
  • the embedded security unit further includes an application registry accessible by the fingerprint triggering module, and the application registry is saved and resident in the mobile payment terminal.
  • the non-contact application associates fingerprint identification information including an identifier indicating whether the contactless application supports the fingerprint verification mode and a status flag indicating whether the fingerprint verification passes when the fingerprint verification mode is supported.
  • the embedded security unit further includes a fingerprint identification processing module configured to update the status flag in the application registry according to the fingerprint verification result of the fingerprint verification unit.
  • the fingerprint triggering module is configured to determine whether to pass the fingerprint verification in the following manner:
  • the status flag is the third set value, performing a fingerprint verification process and repeating steps a) and b), wherein, during the execution of the fingerprint verification process, if the fingerprint verification is passed, the status flag is The fingerprint identification processing module is set to the first setting Value, otherwise set by the fingerprint identification processing module to a second set value;
  • the status flag is reset by the fingerprint identification processing module to a third set value after being set to a preset period of the first set value or the second set value.
  • the designated contactless application runs on the embedded security unit.
  • FIG. 1 is a schematic structural diagram of a mobile payment terminal according to an embodiment of the present invention.
  • FIG. 2 is a flow chart of a mobile payment method in accordance with one embodiment of the present invention.
  • FIG. 3 is a flow chart of a mobile payment method in accordance with another embodiment of the present invention.
  • FIG. 4 is a flow chart of a mobile payment method in accordance with yet another embodiment of the present invention.
  • the initialization process of the near field communication (NFC) contactless protocol is performed independently of the secure application mechanism such as fingerprint verification.
  • a mobile payment terminal such as a mobile phone
  • an external device eg, a POS machine, a subway gate, a bus reader, etc.
  • the NFC function is turned on to complete the initialization process of the contactless protocol. Regardless of whether an authentication process such as fingerprint verification has been passed.
  • a contactless command is sent to the latter to instruct the latter to run the corresponding contactless application, thereby completing the payment operation.
  • the contactless application of the protection mechanism uses the fingerprint identification information to indicate whether a non-contact application supports the fingerprint verification mode and whether the fingerprint verification passes when the fingerprint verification mode is supported.
  • the fingerprint identification information of a contactless application includes an identifier indicating whether the contactless application supports the fingerprint verification mode and a status flag indicating whether the fingerprint verification is passed when the fingerprint verification mode is supported.
  • the different assignments of the same parameter can be used to indicate the status of the identifier and status flags.
  • an information byte can be used to represent various states, wherein the assignment "0" indicates a state in which a contactless application does not support fingerprint recognition, and the assignment "1" indicates that the contactless application supports fingerprint recognition but has not performed the fingerprint verification process.
  • the state of assignment "2" indicates that the contactless application supports fingerprint recognition and passes the state of the fingerprint verification process, and the assignment "3" indicates the state in which the contactless application supports fingerprint verification and fails the fingerprint verification process.
  • the fingerprint identification information can be stored in the registration information table, while the latter can be stored in the embedded security unit (eSE) along with the contactless application.
  • eSE embedded security unit
  • the eSE When the eSE receives the contactless application selection command of the external device, it will directly return the execution result of the contactless application to the external device, thereby completing the subsequent application interaction process with the external device.
  • the eSE For the contactless application supporting fingerprint verification, when the eSE receives the contactless application selection command of the external device, if the fingerprint identification information indicates that the fingerprint verification fails, the eSE will return the error information that the non-contact application does not exist to the external device, and The external device will not select the non-contact application, and the subsequent application interaction process cannot be completed. If the fingerprint identification information indicates that the fingerprint verification is passed, the eSE will return the execution result of the contactless application to the external device, and complete subsequent application interaction with the external device. The process, and resetting the fingerprint identification information of the non-contact application to a state in which the fingerprint verification fails after the application interaction process is completed.
  • the user can actively input a fingerprint for fingerprint verification before swiping to update the fingerprint identification information of the non-contact application, or trigger the eSE when the card is swiped close to the external device.
  • the fingerprint client on the mobile payment terminal is woken up, and the user is prompted to input a fingerprint, thereby completing fingerprint verification of the contactless application.
  • FIG. 1 is a schematic structural diagram of a mobile payment terminal according to an embodiment of the present invention.
  • a mobile phone and a POS machine are respectively taken as examples of mobile payment terminals and external devices.
  • the mobile phone 10 as a mobile payment terminal includes near field communication (NFC).
  • NFC near field communication
  • the near field communication unit 110 is configured to perform a contactless protocol initialization process between the mobile payment terminal and the POS machine 20 as an external device, receive a selection command from the POS machine, and return a result of the operation of the contactless application to the POS machine, where The selection command specifies a contactless application running within the mobile payment terminal.
  • near field communication unit 110 is also configured to couple with fingerprint verification unit 120 to trigger the operation of the latter, and to couple with embedded security unit 130 as a communication interface in the process of interaction between the contactless application and the POS.
  • the fingerprint verification unit 120 includes a fingerprint client 121, a fingerprint verification processing module 122, and a fingerprint trigger monitoring module 123.
  • the fingerprint client 121 is responsible for running a fingerprint input application configured to initiate a fingerprint verification process of the fingerprint verification processing module 122 and display a prompt interface for fingerprint input in response to a command of the fingerprint trigger monitoring module 123.
  • the fingerprint verification processing module 122 is configured to verify whether the fingerprint input by the user matches the reference object in response to the startup command from the fingerprint client 121, and update the fingerprint identification information of the currently selected contactless application according to the verification result. For example, as described above, if the fingerprint verification is passed, the status flag is updated from "1" to "2", and if the fingerprint verification is not passed, the status flag is updated from "1" to "3".
  • the fingerprint verification processing module 122 transmits the updated fingerprint identification information to the embedded security unit (eSE) 130.
  • eSE embedded security unit
  • the fingerprint verification processing module 122 typically requires security protection, so it typically operates in a secure environment provided by the handset (eg, TEE).
  • the fingerprint trigger monitoring module 123 is configured to activate the fingerprint client 121 to perform the above operations in response to a fingerprint invocation command of the embedded security unit 130 that is monitored from the near field communication unit 110.
  • the embedded security unit 130 includes a fingerprint triggering module 131, a fingerprint identification processing module 132, an application distribution module 133, and a storage area 134 that holds the contactless application and application registry.
  • the fingerprint triggering module 131 is configured to determine whether the selected contactless application supports fingerprint verification and whether fingerprint verification is passed in response to the contactless application selection command received from the POS machine 20 via the near field communication unit 110. If the fingerprint verification is supported and the fingerprint verification has not been passed, the fingerprint triggering module 131 sends a fingerprint calling command to the fingerprint triggering monitoring module 123 through the near field communication unit 110, and the latter triggers the fingerprint client 121 to present a prompt for inputting the fingerprint to the user, and triggers The fingerprint verification processing module 122 verifies whether the user input fingerprint matches the reference object and updates the fingerprint identification letter of the currently selected contactless application. interest.
  • the fingerprint identification processing module 132 is configured to access the storage area 134 to look up and update the fingerprint identification information of the current contactless application in the application registry in response to the fingerprint information update command returned by the fingerprint verification processing module 122.
  • the application distribution module 133 is configured to directly activate the corresponding contactless application to operate within the embedded security unit when the selected contactless application does not support fingerprint verification, and if the selected contactless application supports fingerprint verification, if The fingerprint identification information determines that the fingerprint verification has passed, and then the corresponding non-contact application is started to run in the embedded security unit.
  • FIG. 2 is a flow chart of a mobile payment method in accordance with one embodiment of the present invention.
  • the application scenario in which the user uses the mobile phone payment application supporting fingerprint verification to swipe the card on the POS machine, and the user actively inputs the fingerprint before the non-contact protocol initialization process is executed.
  • the mobile payment method of the present embodiment is implemented by means of the mobile payment terminal shown in FIG. 1. It should be noted, however, that the method is not limited to devices having a particular structure.
  • the process shown in Figure 2 includes:
  • Step 201 Before the card is swiped, since the non-contact application that knows that the card is to be swiped requires fingerprint verification, the user actively opens the fingerprint client 121 on the mobile phone, selects the designated non-contact application, and inputs the fingerprint according to the prompt.
  • Step 202 The fingerprint verification processing module 122 compares the fingerprint input by the user with the reference fingerprint in response to the command of the fingerprint client 121.
  • Step 203 The fingerprint verification processing module 122 updates the fingerprint identification information of the application according to the comparison result and sends an update application fingerprint identification command to the fingerprint identification processing module 132.
  • Step 204 The fingerprint identification processing module 132 updates the fingerprint identification information in the application registry of the selected contactless application according to the received updated fingerprint identification command.
  • Step 205 The fingerprint identification processing module 132 returns a message that the update is successful to the fingerprint verification processing module 122.
  • Step 206 If the fingerprint verification passes, the fingerprint verification processing module 122 returns a message that the fingerprint verification is passed to the fingerprint client 121.
  • Step 207 The fingerprint client 121 prompts the user to take the mobile phone to swipe the card on the POS machine.
  • Step 208 The fingerprint identification processing module 132 receives the contactless application selection command sent by the POS machine via the near field communication unit.
  • Step 209 The fingerprint identification processing module 132 obtains the application from the application registry. Fingerprint identification information.
  • Step 210 The fingerprint identification processing module 132 determines the processing manner of the next step according to the fingerprint identification information. In particular, for the case where the selected contactless application has passed fingerprint verification and the selected contactless application does not support fingerprint verification, the fingerprint identification processing module 132 forwards the contactless application selection command to the application distribution module 133 for the selected The fingerprint identification processing module 132 instructs the fingerprint triggering module 131 to initiate a fingerprint verification process, which will be described in detail below with reference to FIG. 3, but fails to pass fingerprint verification for the selected contactless application. In the case, the fingerprint identification processing module 132 will prevent the contactless application selection command from being forwarded to the application distribution module 133. In the present embodiment, since the previous fingerprint verification has passed, the fingerprint identification processing module 132 forwards the contactless application selection command to the application distribution module 133.
  • Step 211 The application distribution module 133 selects the specified application to run in the embedded security unit 130 according to the contactless application selection command, and returns a message indicating that the application selection is successful to the fingerprint identification processing module 132.
  • Step 212 The fingerprint identification processing module 132 forwards the message that the application selection succeeds to the POS machine, so that the latter performs subsequent application interaction commands with the contactless application running on the embedded security unit 130, thereby completing the user card payment process.
  • FIG. 3 is a flow chart of a mobile payment method in accordance with another embodiment of the present invention.
  • the application scenario in which the user uses the mobile phone payment application supporting fingerprint verification to swipe the card on the POS machine, and the user inputs the fingerprint after the non-contact protocol initialization process is executed.
  • the mobile payment method of the present embodiment is implemented by means of the mobile payment terminal shown in FIG. 1. It should be noted, however, that the method is not limited to devices having a particular structure.
  • the process shown in Figure 3 includes:
  • Step 301 The fingerprint identification processing module 132 receives the contactless application selection command sent by the POS machine via the near field communication unit.
  • Step 302 The fingerprint identification processing module 132 obtains fingerprint identification information of the application from the application registry.
  • Step 303 The fingerprint identification processing module 132 determines the processing manner of the next step according to the fingerprint identification information.
  • the fingerprint identification processing module 132 sends an instruction to start the fingerprint verification process to the fingerprint trigger module 131.
  • Step 304 The fingerprint triggering module 131 sends an instruction to start the fingerprint verification process to the fingerprint triggering monitoring module 123 via the near field communication unit 110.
  • Step 305 the fingerprint triggering listening module 123 wakes up the fingerprint client 121, instructing the latter to start the fingerprint verification process.
  • Step 306 The fingerprint client 121 prompts for input of the fingerprint and starts the fingerprint verification processing module 122.
  • Step 307 The fingerprint verification processing module 122 compares the fingerprint input by the user with the reference fingerprint in response to the command of the fingerprint client 121, updates the fingerprint identification information of the application according to the comparison result, and sends an update application fingerprint identifier to the fingerprint identification processing module 132. command.
  • Step 308 The fingerprint identification processing module 132 updates the fingerprint identification information in the application registry of the selected contactless application according to the received updated fingerprint identification command.
  • Step 309 If the fingerprint verification passes, the fingerprint identification processing module 132 forwards the contactless application selection command to the application distribution module 133, otherwise the contactless application selection command is prevented from being forwarded to the application distribution module 133.
  • Step 310 The application distribution module 133 selects the specified application to run in the embedded security unit 130 according to the contactless application selection command, and returns a message indicating that the application selection is successful to the fingerprint identification processing module 132.
  • Step 311 The fingerprint identification processing module 132 forwards the message that the application selection succeeds to the POS machine, so that the latter performs subsequent application interaction commands with the non-contact application running on the embedded security unit 130, thereby completing the user card payment process.
  • the fingerprint identification information of the contactless application needs to be reset to the state in which the fingerprint verification is not performed, which can be completed in the following manner: in the fingerprint identification processing module After receiving the command to update the fingerprint identification information, the fingerprint verification processing module 122 starts the timer. When the timing is reached, the fingerprint identification processing module 132 needs to reset the fingerprint identification information of the non-contact application to a state in which the fingerprint verification is not performed. .
  • FIG. 4 is a flow chart of a mobile payment method in accordance with yet another embodiment of the present invention.
  • an application scenario in which a user uses a mobile payment application that does not support fingerprint verification to swipe a card on a bus terminal is used.
  • the mobile payment method of the present embodiment is implemented by means of the mobile payment terminal shown in FIG. 1. It should be noted, however, that the method is not limited to devices having a particular structure.
  • the process shown in Figure 4 includes:
  • Step 401 The fingerprint identification processing module 132 receives the contactless application selection command sent by the POS machine via the near field communication unit.
  • Step 402 The fingerprint identification processing module 132 obtains fingerprint identification information of the application from the application registry.
  • Step 403 The fingerprint identification processing module 132 determines the processing manner of the next step according to the fingerprint identification information. In the present embodiment, since the selected contactless application does not support fingerprint verification, the fingerprint identification processing module 132 forwards the contactless application selection command to the application distribution module 133.
  • Step 404 The application distribution module 133 selects the specified application to run in the embedded security unit 130 according to the contactless application selection command, and returns a message indicating that the application selection is successful to the fingerprint identification processing module 132.
  • Step 405 The fingerprint identification processing module 132 forwards the message of successful application selection to the POS machine, so that the latter performs subsequent application interaction commands with the contactless application running on the embedded security unit 130, thereby completing the user card payment process.
  • the technical advantage of the invention is that the fingerprint verification mode and the non-fingerprint verification mode can be seamlessly switched, thereby ensuring the convenient and friendly user experience of the fingerprint payment, and also providing a good non-fingerprint verification mode. user experience.

Landscapes

  • Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Strategic Management (AREA)
  • Physics & Mathematics (AREA)
  • General Business, Economics & Management (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Signal Processing (AREA)
  • Finance (AREA)
  • Health & Medical Sciences (AREA)
  • Biomedical Technology (AREA)
  • General Health & Medical Sciences (AREA)
  • Life Sciences & Earth Sciences (AREA)
  • Biodiversity & Conservation Biology (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Environmental & Geological Engineering (AREA)
  • Human Computer Interaction (AREA)
  • Cash Registers Or Receiving Machines (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Telephone Function (AREA)

Abstract

本发明涉及基于近场通信功能的移动支付方法和装置，其可在指纹验证模式与非指纹验证模式之间无缝切换。根据本发明的移动支付方法包括下列步骤：移动支付终端执行其与外部设备之间的非接触协议初始化过程；所述移动支付终端从所述外部设备接收选择命令，所述选择命令指定非接触应用；所述移动支付终端确定所指定的非接触应用是否支持指纹验证模式；如果支持指纹验证模式，则所述移动支付终端确定所指定的非接触应用是否通过指纹验证；以及如果所指定的非接触应用通过指纹验证或者不支持指纹验证模式，则所述移动支付终端运行所指定的非接触应用以执行支付操作，其中，所述非接触协议初始化过程的执行独立于指纹验证过程的执行。

Description

移动支付方法和装置 技术领域
本发明涉及移动支付技术，具体而言，涉及基于近场通信功能的移动支付方法和装置，其可在指纹验证模式与非指纹验证模式之间无缝切换。
背景技术
随着近场通信功能(NFC)、指纹验证和内嵌式安全单元(eSE)在手机上的广泛应用，结合三者的手机支付方式正在市场上逐渐流行起来，其中的典型代表就是美国苹果公司的Apple Pay。在这种指纹支付方式下，通过指纹验证可以确保当前持卡人是合法的持卡人，从而保护持卡人的刷卡安全。
上述手机支付方式对于使用需要指纹验证的非接触应用而言是体验友好的。然而，当需要同时支持安全验证和非安全验证的非接触应用场景时却存在不足之处。例如，手机上除了支持银行卡的非接触支付外，往往还支持公交刷卡应用。银行卡支付出于安全性考虑，需要采用诸如指纹验证之类的安全保护机制，由此牺牲一定的处理速度对于用户来说是可接受的；而对于公交刷卡应用来说，由于使用的频繁性、通过的快速性和金额的小额化等特点，安全保护机制的提供将降低刷卡速度，大大影响用户体验。
由上可见，迫切需要在手机上提供一种能够同时适合上述两类应用场景特点的移动支付技术。
发明内容
本发明提供基于近场通信功能的移动支付方法和装置，其可同时适合在安全保护机制下和非安全保护机制下的移动支付场景，并且可在二者之间实现无缝切换以提供良好的用户体验。
根据本发明的一个方面，提供了一种移动支付方法，包括下列步骤：
移动支付终端执行其与外部设备之间的非接触协议初始化过程；
所述移动支付终端从所述外部设备接收选择命令，所述选择命令指定非接触应用；
所述移动支付终端确定所指定的非接触应用是否支持指纹验证模式；
如果支持指纹验证模式，则所述移动支付终端确定所指定的非接触应用是否通过指纹验证；以及
如果所指定的非接触应用通过指纹验证或者不支持指纹验证模式，则所述移动支付终端运行所指定的非接触应用以执行支付操作，
其中，所述非接触协议初始化过程的执行独立于指纹验证过程的执行。
优选地，在上述方法中，指纹验证过程在确定所指定的非接触应用支持指纹验证模式之前执行。
优选地，在上述方法中，指纹验证过程在确定所指定的非接触应用支持指纹验证模式之后执行。
优选地，在上述方法中，所述移动支付终端通过访问应用注册表来确定所指定的非接触应用是否支持指纹验证模式，所述应用注册表保存与驻留在所述移动支付终端内的非接触应用相关联的指纹标识信息，所述指纹标识信息包括指示非接触应用是否支持指纹验证模式的标识符以及在支持指纹验证模式时指纹验证是否通过的状态标志。
优选地，在上述方法中，所述移动支付终端确定是否通过指纹验证的步骤包括：
a)读取所述状态标志；
b)如果所述状态标志为第一设定值，则确定所指定的非接触应用已经通过指纹验证，并且如果所述状态标志为第二设定值，则确定所指定的非接触应用未通过指纹验证；
c)如果所述状态标志为第三设定值，则执行指纹验证过程并且重复执行步骤a)和b)，其中，在执行指纹验证过程中，如果指纹验证通过，则将所述状态标志设置为第一设定值，否则则设置为第二设定值；以及
d)在将所述状态标志设置为第一设定值或第二设定值的一个预设时段之后，将所述状态标志重置为第三设定值。
根据本发明的一个方面，还提供了一种移动支付终端，包括：
近场通信单元，其被配置为执行移动支付终端与外部设备之间的非接触协议初始化过程和接收来自外部设备的选择命令，所述选择命令指定在移动支付终端内运行的非接触应用；
指纹验证单元，其配置为执行指纹验证过程；以及
内嵌式安全单元，其包括指纹触发模块，所述指纹触发模块配置为：
确定所指定的非接触应用是否支持指纹验证模式；
在支持指纹验证模式时确定所指定的非接触应用是否通过指纹验证；以及
在所指定的非接触应用通过指纹验证或者不支持指纹验证模式时，指示在所述移动支付终端内运行所指定的非接触应用以执行支付操作，
其中，所述非接触协议初始化过程的执行独立于指纹验证过程的执行。
优选地，所述移动支付终端为手机。
优选地，在上述移动支付终端中，所述所述内嵌式安全单元进一步包括可由所述指纹触发模块访问的应用注册表，所述应用注册表保存与驻留在所述移动支付终端内的非接触应用相关联的指纹标识信息，所述指纹标识信息包括指示非接触应用是否支持指纹验证模式的标识符以及在支持指纹验证模式时指纹验证是否通过的状态标志。
优选地，在上述移动支付终端中，所述内嵌式安全单元进一步包括指纹标识处理模块，其配置为根据所述指纹验证单元的指纹验证结果来更新所述应用注册表内的状态标志。
优选地，在上述移动支付终端中，所述指纹触发模块被配置为按照下列方式确定是否通过指纹验证：
a)读取所述状态标志；
b)如果所述状态标志为第一设定值，则确定所指定的非接触应用已经通过指纹验证，并且如果所述状态标志为第二设定值，则确定所指定的非接触应用未通过指纹验证；
c)如果所述状态标志为第三设定值，则执行指纹验证过程并且重复执行步骤a)和b)，其中，在执行指纹验证过程中，如果指纹验证通过，则所述状态标志被所述指纹标识处理模块设置为第一设定 值，否则则被所述指纹标识处理模块设置为第二设定值；以及
d)所述状态标志在被设置为第一设定值或第二设定值的一个预设时段之后，所述状态标志被所述指纹标识处理模块重置为第三设定值。
优选地，在上述移动支付终端中，所指定的非接触应用在所述内嵌式安全单元上运行。
附图说明
本发明的上述和/或其它方面和优点将通过以下结合附图的各个方面的描述变得更加清晰和更容易理解，附图中相同或相似的单元采用相同的标号表示，附图包括：
图1为按照本发明一个实施例的移动支付终端的架构示意图。
图2为按照本发明一个实施例的移动支付方法的流程图。
图3为按照本发明另一个实施例的移动支付方法的流程图。
图4为按照本发明还有一个实施例的移动支付方法的流程图。
具体实施方式
下面参照其中图示了本发明示意性实施例的附图更为全面地说明本发明。但本发明可以按不同形式来实现，而不应解读为仅限于本文给出的各实施例。给出的上述各实施例旨在使本文的披露全面完整，以将本发明的保护范围更为全面地传达给本领域技术人员。
诸如“包含”和“包括”之类的用语表示除了具有在说明书和权利要求书中有直接和明确表述的单元和步骤以外，本发明的技术方案也不排除具有未被直接或明确表述的其它单元和步骤的情形。
按照本发明的一个方面，近场通信(NFC)的非接触协议的初始化过程独立于指纹验证之类的安全应用机制独立执行。在一个实施例中，当诸如手机之类的移动支付终端靠近外部设备(例如POS机、地铁闸机、公交车读卡器等)时，NFC功能被开启以完成非接触协议的初始化过过程而不管是否已经通过指纹验证之类的身份验证过程。当外部设备识别到移动支付终端时，将向后者发送非接触命令以指示后者运行相应的非接触应用，从而完成支付操作。
按照本发明的另一个方面，为了区分基于安全保护机制和非安全 保护机制的非接触应用，利用指纹标识信息来指示某个非接触应用是否支持指纹验证模式和在支持指纹验证模式时指纹验证是否通过。优选地，一个非接触应用的指纹标识信息包括指示非接触应用是否支持指纹验证模式的标识符以及在支持指纹验证模式时指纹验证是否通过的状态标志。更好地，可以用同一个参数的不同赋值来表示标识符和状态标志的状态。例如，可以用一个信息字节来表示各种状态，其中，赋值“0”表示一个非接触应用不支持指纹识别的状态，赋值“1”表示该非接触应用支持指纹识别但是尚未执行指纹验证过程的状态，赋值“2”表示该非接触应用支持指纹识别并且通过指纹验证过程的状态，赋值“3”表示该非接触应用支持指纹验证并且未通过指纹验证过程的状态。指纹标识信息可以保存在注册信息表内，而后者可连同非接触应用保存在内嵌式安全单元(eSE)内。
对于不支持指纹验证的非接触应用，当eSE接收到外部设备的非接触应用选择命令时，其将向外部设备直接返回非接触应用的执行结果，从而完成与外部设备的后续应用交互流程。
对于支持指纹验证的非接触应用，当eSE接收到外部设备的非接触应用选择命令时，如果指纹标识信息指示指纹验证未通过，则eSE将向外部设备返回非接触应用不存在的报错信息，而外部设备将选择不到非接触应用，从而无法完成后续的应用交互流程；如果指纹标识信息指示指纹验证通过，则eSE将向外部设备返回非接触应用的执行结果，与外部设备完成后续的应用交互过程，并且在应用交互过程完成后再将该非接触应用的指纹标识信息重置为指纹验证未通过的状态。在具体的应用场景下，对于支持指纹验证的非接触应用，用户可以在刷卡前主动输入指纹进行指纹验证，以更新非接触应用的指纹标识信息，或者当靠近外部设备进行刷卡时，由eSE触发唤醒移动支付终端上的指纹客户端，提示用户输入指纹，从而完成该非接触应用的指纹验证。
以下借助附图描述实现本发明的实施例。
图1为按照本发明一个实施例的移动支付终端的架构示意图。示例性地，这里以手机和POS机分别作为移动支付终端和外部设备的实例。
如图1所示，作为移动支付终端的手机10包括近场通信(NFC) 单元110、指纹验证单元120和内嵌式安全单元130。
近场通信单元110被配置为执行移动支付终端与作为外部设备的POS机20之间的非接触协议初始化过程，接收来自POS机的选择命令以及向POS机返回非接触应用的运行结果，其中所述选择命令指定在移动支付终端内运行的非接触应用。此外，近场通信单元110还被配置为与指纹验证单元120耦合以触发后者的运行，以及与内嵌式安全单元130耦合以作为非接触应用与POS机交互过程中的通信接口。
参见图1，指纹验证单元120包括指纹客户端121、指纹验证处理模块122和指纹触发监听模块123。
指纹客户端121负责运行指纹输入应用，其配置为响应于指纹触发监听模块123的命令，启动指纹验证处理模块122的指纹验证处理过程并显示指纹输入的提示界面。指纹验证处理模块122被配置为响应于来自于指纹客户端121的启动命令，验证用户输入的指纹与参考对象是否匹配，并根据验证结果对当前所选择的非接触应用的指纹标识信息进行更新。例如如上所述，如果指纹验证通过，则将状态标志由“1”更新为“2”，而如果指纹验证未通过，则将状态标志由“1”更新为“3”。指纹验证处理模块122将更新后的指纹标识信息传送至内嵌式安全单元(eSE)130。指纹验证处理模块122通常需要安全保护，因此其一般运行于手机所提供的安全环境中(如TEE)。指纹触发监听模块123配置为响应于从近场通信单元110监听到的内嵌式安全单元130的指纹调用命令，启动指纹客户端121执行上述操作。
继续参见图1，内嵌式安全单元130包括指纹触发模块131、指纹标识处理模块132、应用分发模块133以及保存非接触应用和应用注册表的存储区域134。
指纹触发模块131配置为响应于经近场通信单元110从POS机20接收到的非接触应用选择命令，判断所选择的非接触应用是否支持指纹验证以及指纹验证是否通过。如果支持指纹验证且尚未指纹验证通过，则指纹触发模块131通过近场通信单元110向指纹触发监听模块123发送指纹调用命令，由后者触发指纹客户端121向用户呈现输入指纹的提示，以及触发指纹验证处理模块122验证用户输入指纹与参考对象是否匹配和更新当前所选择的非接触应用的指纹标识信 息。指纹标识处理模块132被配置为响应于指纹验证处理模块122返回的指纹信息更新命令，访问存储区域134以在应用注册表中查找和更新当前非接触应用的指纹标识信息。应用分发模块133被配置为在所选择的非接触应用不支持指纹验证时直接启动相应的非接触应用在内嵌式安全单元内运行，以及在所选择的非接触应用支持指纹验证时，如果根据指纹识别信息判断指纹验证已经通过，则启动相应的非接触应用在内嵌式安全单元内运行。
图2为按照本发明一个实施例的移动支付方法的流程图。示例性地，在本实施例中所涉及的是用户利用支持指纹验证的手机支付应用在POS机上刷卡的应用场景，并且用户在非接触协议初始化过程执行之前主动输入指纹。为阐述方便，本实施例的移动支付方法借助图1所示的移动支付终端实现。但是需要指出的是，该方法并不局限于具有特定结构的装置。
图2所示的流程包括：
步骤201：在刷卡前，由于知晓要刷卡的非接触应用需要指纹验证，因此用户主动打开手机上的指纹客户端121，选择指定的非接应用并且根据提示输入指纹。
步骤202：指纹验证处理模块122响应于指纹客户端121的命令，将用户输入的指纹与参考指纹进行比较。
步骤203：指纹验证处理模块122根据比较结果更新该应用的指纹标识信息并且向指纹标识处理模块132发送更新应用指纹标识命令。
步骤204：指纹标识处理模块132根据收到的更新指纹标识命令，对所选定的非接触应用在应用注册表中的指纹标识信息进行更新。
步骤205：指纹标识处理模块132向指纹验证处理模块122返回更新成功的消息。
步骤206：如果指纹验证通过，则指纹验证处理模块122向指纹客户端121返回指纹验证通过的消息。
步骤207：指纹客户端121提示用户可拿手机在POS机上刷卡。
步骤208：指纹标识处理模块132经近场通信单元接收POS机发送的非接触应用选择命令。
步骤209：指纹标识处理模块132从应用注册表中获取该应用的 指纹标识信息。
步骤210：指纹标识处理模块132根据指纹标识信息确定下一步的处理方式。具体而言，对于所选择的非接触应用已经通过指纹验证和所选择的非接触应用不支持指纹验证的情况，指纹标识处理模块132将非接触应用选择命令转发至应用分发模块133，对于所选择的非接触应用尚未进行指纹验证的情况，指纹标识处理模块132指示指纹触发模块131发起指纹验证过程，该方式将在下面结合图3作详细描述，而对于所选择的非接触应用未通过指纹验证的情况，指纹标识处理模块132将阻止非接触应用选择命令被转发至应用分发模块133。在本实施例中，由于之前指纹验证已经通过，因此指纹标识处理模块132将非接触应用选择命令转发至应用分发模块133。
步骤211：应用分发模块133根据非接触应用选择命令，选取指定的应用在内嵌式安全单元130内运行，并将应用选择成功的消息返回给指纹标识处理模块132。
步骤212：指纹标识处理模块132将应用选择成功的消息转发给POS机，以使后者与内嵌式安全单元130上运行的非接触应用执行后续的应用交互命令，从而完成用户刷卡支付过程。
图3为按照本发明另一个实施例的移动支付方法的流程图。示例性地，在本实施例中所涉及的是用户利用支持指纹验证的手机支付应用在POS机上刷卡的应用场景，并且用户在非接触协议初始化过程执行之后输入指纹。为阐述方便，本实施例的移动支付方法借助图1所示的移动支付终端实现。但是需要指出的是，该方法并不局限于具有特定结构的装置。
图3所示的流程包括：
步骤301：指纹标识处理模块132经近场通信单元接收POS机发送的非接触应用选择命令。
步骤302：指纹标识处理模块132从应用注册表中获取该应用的指纹标识信息。
步骤303：指纹标识处理模块132根据指纹标识信息确定下一步的处理方式。在本实施例中，由于所选择的非接触应用支持指纹验证但是尚未执行指纹验证，因此指纹标识处理模块132向指纹触发模块131发送启动指纹验证过程的指令。
步骤304：指纹触发模块131将启动指纹验证过程的指令经近场通信单元110发送至指纹触发监听模块123。
步骤305指纹触发监听模块123唤醒指纹客户端121，指示后者启动指纹验证过程。
步骤306：指纹客户端121提示输入指纹并且启动指纹验证处理模块122。
步骤307：指纹验证处理模块122响应于指纹客户端121的命令，将用户输入的指纹与参考指纹进行比较，根据比较结果更新该应用的指纹标识信息并且向指纹标识处理模块132发送更新应用指纹标识命令。
步骤308：指纹标识处理模块132根据收到的更新指纹标识命令，对所选定的非接触应用在应用注册表中的指纹标识信息进行更新。
步骤309：如果指纹验证通过，则指纹标识处理模块132将非接触应用选择命令转发至应用分发模块133，否则将阻止非接触应用选择命令被转发至应用分发模块133。
步骤310：应用分发模块133根据非接触应用选择命令，选取指定的应用在内嵌式安全单元130内运行，并将应用选择成功的消息返回给指纹标识处理模块132。
步骤311：指纹标识处理模块132将应用选择成功的消息转发给POS机，以使后者与内嵌式安全单元130上运行的非接触应用执行后续的应用交互命令，从而完成用户刷卡支付过程。
在上述支持指纹验证的实施例中，在非接触应用交互完成后，与该非接触应用的指纹标识信息需要重置为指纹验证未执行的状态，这可以通过以下方式完成：在指纹标识处理模块132从指纹验证处理模块122接收到更新指纹标识信息命令后即启动定时器，待达到定时时间时，指纹标识处理模块132将该非接触应用的指纹标识信息需要重置为指纹验证未执行的状态。
图4为按照本发明还有一个实施例的移动支付方法的流程图。示例性地，在本实施例中所涉及的是用户利用不支持指纹验证的手机支付应用在公交终端上刷卡的应用场景。为阐述方便，本实施例的移动支付方法借助图1所示的移动支付终端实现。但是需要指出的是，该方法并不局限于具有特定结构的装置。
图4所示的流程包括：
步骤401：指纹标识处理模块132经近场通信单元接收POS机发送的非接触应用选择命令。
步骤402：指纹标识处理模块132从应用注册表中获取该应用的指纹标识信息。
步骤403：指纹标识处理模块132根据指纹标识信息确定下一步的处理方式。在本实施例中，由于所选择的非接触应用不支持指纹验证，因此指纹标识处理模块132将非接触应用选择命令转发至应用分发模块133。
步骤404：应用分发模块133根据非接触应用选择命令，选取指定的应用在内嵌式安全单元130内运行，并将应用选择成功的消息返回给指纹标识处理模块132。
步骤405：指纹标识处理模块132将应用选择成功的消息转发给POS机，以使后者与内嵌式安全单元130上运行的非接触应用执行后续的应用交互命令，从而完成用户刷卡支付过程。
虽然上述实施例都是基于实体eSE的手机来描述的，但是对于具备类似于eSE功能的移动支付终端(例如支持HCE功能的手机)而言，这些实施例也是适用的。
本发明具有的技术优点是可在指纹验证模式与非指纹验证模式之间无缝切换，从而在保证指纹支付所具备的便捷与友好的用户体验的同时，也为非指纹验证模式提供了良好的用户体验。
虽然已经示出并说明了各个示例性实施例，但本领域普通技术人员应当理解的是，可以对这些示例性实施例在形式和细节方面做出各种改变而不背离由所附权利要求书限定的本发明构思的精神和范围。

Claims (11)

  1. 一种移动支付方法，其特征在于，包括下列步骤：
    移动支付终端执行其与外部设备之间的非接触协议初始化过程；
    所述移动支付终端从所述外部设备接收选择命令，所述选择命令指定非接触应用；
    所述移动支付终端确定所指定的非接触应用是否支持指纹验证模式；
    如果支持指纹验证模式，则所述移动支付终端确定所指定的非接触应用是否通过指纹验证；以及
    如果所指定的非接触应用通过指纹验证或者不支持指纹验证模式，则所述移动支付终端运行所指定的非接触应用以执行支付操作，
    其中，所述非接触协议初始化过程的执行独立于指纹验证过程的执行。
  2. 如权利要求1所述的方法，其中，指纹验证过程在确定所指定的非接触应用支持指纹验证模式之前执行。
  3. 如权利要求1所述的方法，其中，指纹验证过程在确定所指定的非接触应用支持指纹验证模式之后执行。
  4. 如权利要求1所述的方法，其中，所述移动支付终端通过访问应用注册表来确定所指定的非接触应用是否支持指纹验证模式，所述应用注册表保存与驻留在所述移动支付终端内的非接触应用相关联的指纹标识信息，所述指纹标识信息包括指示非接触应用是否支持指纹验证模式的标识符以及在支持指纹验证模式时指纹验证是否通过的状态标志。
  5. 如权利要求4所述的方法，其中，所述移动支付终端确定是否通过指纹验证的步骤包括：
    a)读取所述状态标志；
    b)如果所述状态标志为第一设定值，则确定所指定的非接触应用已经通过指纹验证，并且如果所述状态标志为第二设定值，则确定所指定的非接触应用未通过指纹验证；
    c)如果所述状态标志为第三设定值，则执行指纹验证过程并且重复执行步骤a)和b)，其中，在执行指纹验证过程中，如果指纹 验证通过，则将所述状态标志设置为第一设定值，否则则设置为第二设定值；以及
    d)在将所述状态标志设置为第一设定值或第二设定值的一个预设时段之后，将所述状态标志重置为第三设定值。
  6. 一种移动支付终端，其特征在于，包括：
    近场通信单元，其被配置为执行移动支付终端与外部设备之间的非接触协议初始化过程和接收来自外部设备的选择命令，所述选择命令指定在移动支付终端内运行的非接触应用；
    指纹验证单元，其配置为执行指纹验证过程；以及
    内嵌式安全单元，其包括指纹触发模块，所述指纹触发模块配置为：
    确定所指定的非接触应用是否支持指纹验证模式；
    在支持指纹验证模式时确定所指定的非接触应用是否通过指纹验证；以及
    在所指定的非接触应用通过指纹验证或者不支持指纹验证模式时，指示在所述移动支付终端内运行所指定的非接触应用以执行支付操作，
    其中，所述非接触协议初始化过程的执行独立于指纹验证过程的执行。
  7. 如权利要求6所述的移动支付终端，其中，所述移动支付终端为手机。
  8. 如权利要求6所述的移动支付终端，其中，所述所述内嵌式安全单元进一步包括可由所述指纹触发模块访问的应用注册表，所述应用注册表保存与驻留在所述移动支付终端内的非接触应用相关联的指纹标识信息，所述指纹标识信息包括指示非接触应用是否支持指纹验证模式的标识符以及在支持指纹验证模式时指纹验证是否通过的状态标志。
  9. 如权利要求8所述的移动支付终端，其中，所述内嵌式安全单元进一步包括指纹标识处理模块，其配置为根据所述指纹验证单元的指纹验证结果来更新所述应用注册表内的状态标志。
  10. 如权利要求8所述的移动支付终端，其中，所述指纹触发模块被配置为按照下列方式确定是否通过指纹验证：
    a)读取所述状态标志；
    b)如果所述状态标志为第一设定值，则确定所指定的非接触应用已经通过指纹验证，并且如果所述状态标志为第二设定值，则确定所指定的非接触应用未通过指纹验证；
    c)如果所述状态标志为第三设定值，则执行指纹验证过程并且重复执行步骤a)和b)，其中，在执行指纹验证过程中，如果指纹验证通过，则所述状态标志被所述指纹标识处理模块设置为第一设定值，否则则被所述指纹标识处理模块设置为第二设定值；以及
    d)所述状态标志在被设置为第一设定值或第二设定值的一个预设时段之后，所述状态标志被所述指纹标识处理模块重置为第三设定值。
  11. 如权利要求6所述的移动支付终端，其中，所指定的非接触应用在所述内嵌式安全单元上运行。
PCT/CN2017/077989 2016-04-27 2017-03-24 移动支付方法和装置 Ceased WO2017185926A1 (zh)

Priority Applications (4)

Application Number Priority Date Filing Date Title
CA3026587A CA3026587C (en) 2016-04-27 2017-03-24 Mobile payment method and device
US16/096,779 US20190318340A1 (en) 2016-04-27 2017-03-24 Mobile payment method and apparatus
JP2018555629A JP6675498B2 (ja) 2016-04-27 2017-03-24 モバイル決済方法及び装置
EP17788579.5A EP3451265A4 (en) 2016-04-27 2017-03-24 METHOD AND DEVICE FOR MOBILE PAYMENT

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201610270230.9A CN105704332B (zh) 2016-04-27 2016-04-27 移动支付方法和装置
CN201610270230.9 2016-04-27

Publications (1)

Publication Number Publication Date
WO2017185926A1 true WO2017185926A1 (zh) 2017-11-02

Family

ID=56217723

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2017/077989 Ceased WO2017185926A1 (zh) 2016-04-27 2017-03-24 移动支付方法和装置

Country Status (7)

Country Link
US (1) US20190318340A1 (zh)
EP (1) EP3451265A4 (zh)
JP (1) JP6675498B2 (zh)
CN (1) CN105704332B (zh)
CA (1) CA3026587C (zh)
TW (1) TWI696132B (zh)
WO (1) WO2017185926A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2020191547A1 (zh) * 2019-03-22 2020-10-01 华为技术有限公司 生物识别方法及装置
US12165127B2 (en) 2016-09-06 2024-12-10 Apple Inc. User interfaces for stored-value accounts

Families Citing this family (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105704332B (zh) * 2016-04-27 2020-02-28 中国银联股份有限公司 移动支付方法和装置
US10546302B2 (en) 2016-06-30 2020-01-28 Square, Inc. Logical validation of devices against fraud and tampering
US20180187335A1 (en) 2017-01-01 2018-07-05 Lummus Corporation Materials segregating seed cotton extractor cleaner
GB201702795D0 (en) * 2017-02-21 2017-04-05 Mastercard International Inc Contactless interaction system, apparatus and method
CN107423594B (zh) * 2017-03-08 2019-05-21 Oppo广东移动通信有限公司 一种指纹支付方法及终端设备
CN109427157B (zh) * 2017-08-22 2021-03-26 佛山市顺德区顺达电脑厂有限公司 金融交易支付之触控计算机装置及其管理方法
US10715536B2 (en) * 2017-12-29 2020-07-14 Square, Inc. Logical validation of devices against fraud and tampering
CN108764929A (zh) * 2018-06-12 2018-11-06 飞天诚信科技股份有限公司 一种带有指纹识别功能的ic卡及其工作方法
GB2577477B8 (en) * 2018-08-31 2022-02-16 Idex Biometrics Asa Biometric Interface
US11507958B1 (en) 2018-09-26 2022-11-22 Block, Inc. Trust-based security for transaction payments
US11494762B1 (en) 2018-09-26 2022-11-08 Block, Inc. Device driver for contactless payments
TWI752319B (zh) * 2019-05-08 2022-01-11 華南商業銀行股份有限公司 金融交易系統及其運作方法
CN112132122B (zh) * 2020-11-26 2021-03-16 飞天诚信科技股份有限公司 一种指纹卡的实现方法及指纹卡

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103268547A (zh) * 2013-06-04 2013-08-28 北京邮电大学 具有指纹认证机制的nfc手机支付系统
CN103544599A (zh) * 2012-07-09 2014-01-29 马克西姆综合产品公司 用于在移动终端内认证、存储和交易的嵌入式安全元件
US20140248941A1 (en) * 2013-03-01 2014-09-04 Igt Transfer verification of mobile payments
CN104574086A (zh) * 2014-12-29 2015-04-29 宇龙计算机通信科技(深圳)有限公司 一种支付方法、装置及终端
CN105704332A (zh) * 2016-04-27 2016-06-22 中国银联股份有限公司 移动支付方法和装置

Family Cites Families (20)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070292006A1 (en) * 1996-08-07 2007-12-20 Johnson Alice A Fingerprint compiler program of explanation
JP2006163960A (ja) * 2004-12-09 2006-06-22 Sharp Corp 決済機能付き携帯通信端末、課金決済システム及び課金決済における認証方法
CN102103683A (zh) * 2009-12-17 2011-06-22 中兴通讯股份有限公司 Nfc移动终端的卡模拟应用的实现方法及其装置
CA2792887C (en) * 2010-03-11 2019-06-18 Wal-Mart Stores, Inc. System and method for transaction payments using a mobile device
JP5775767B2 (ja) * 2011-09-05 2015-09-09 株式会社日立製作所 遠隔事前操作装置
CN103455913B (zh) * 2013-08-26 2017-09-19 天地融科技股份有限公司 Nfc支付方法、装置、系统及移动终端
WO2015039117A1 (en) * 2013-09-16 2015-03-19 Sonavation, Inc. System for verifying an identity of a card holder
US10121144B2 (en) * 2013-11-04 2018-11-06 Apple Inc. Using biometric authentication for NFC-based payments
US9271150B2 (en) * 2013-11-12 2016-02-23 Lg Electronics Inc. Mobile terminal and control method thereof
US20170169435A1 (en) * 2014-01-31 2017-06-15 Via International Service Association Method and system for authorizing a transaction
CN103927658A (zh) * 2014-04-08 2014-07-16 深圳市中兴移动通信有限公司 移动支付方法和移动支付终端
JP2015212864A (ja) * 2014-05-01 2015-11-26 株式会社Ｎｔｔドコモ 端末装置、決済方法及びプログラム
US9578023B2 (en) * 2014-11-14 2017-02-21 Motorola Solutions, Inc. Identity assertion based on biometric information
GB201423362D0 (en) * 2014-12-30 2015-02-11 Mastercard International Inc Trusted execution enviroment (TEE) based payment application
CN104732390B (zh) * 2015-04-20 2018-06-19 广东欧珀移动通信有限公司 基于nfc的支付方法及装置
CN104933556A (zh) * 2015-05-27 2015-09-23 小米科技有限责任公司 模式设置方法及装置
WO2017028277A1 (zh) * 2015-08-19 2017-02-23 华为技术有限公司 指纹识别方法及移动终端
US10127539B2 (en) * 2015-09-30 2018-11-13 Bank Of America Corporation System for tokenization and token selection associated with wearable device transactions
CN105354706A (zh) * 2015-10-08 2016-02-24 广东欧珀移动通信有限公司 Nfc安全支付方法和系统
US10037420B1 (en) * 2017-05-17 2018-07-31 American Express Travel Related Services Copmany, Inc. Cardless transactions

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103544599A (zh) * 2012-07-09 2014-01-29 马克西姆综合产品公司 用于在移动终端内认证、存储和交易的嵌入式安全元件
US20140248941A1 (en) * 2013-03-01 2014-09-04 Igt Transfer verification of mobile payments
CN103268547A (zh) * 2013-06-04 2013-08-28 北京邮电大学 具有指纹认证机制的nfc手机支付系统
CN104574086A (zh) * 2014-12-29 2015-04-29 宇龙计算机通信科技(深圳)有限公司 一种支付方法、装置及终端
CN105704332A (zh) * 2016-04-27 2016-06-22 中国银联股份有限公司 移动支付方法和装置

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3451265A4 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US12165127B2 (en) 2016-09-06 2024-12-10 Apple Inc. User interfaces for stored-value accounts
WO2020191547A1 (zh) * 2019-03-22 2020-10-01 华为技术有限公司 生物识别方法及装置

Also Published As

Publication number Publication date
JP2019521407A (ja) 2019-07-25
CN105704332B (zh) 2020-02-28
US20190318340A1 (en) 2019-10-17
JP6675498B2 (ja) 2020-04-01
TW201738814A (zh) 2017-11-01
CA3026587C (en) 2021-06-01
TWI696132B (zh) 2020-06-11
EP3451265A4 (en) 2019-10-23
CA3026587A1 (en) 2017-11-02
CN105704332A (zh) 2016-06-22
EP3451265A1 (en) 2019-03-06

Similar Documents

Publication Publication Date Title
CN105704332B (zh) 移动支付方法和装置
KR102622185B1 (ko) 모바일 결제 장치 및 모바일 결제 시스템
US10719689B2 (en) Electronic device and fingerprint recognition method
CN101771754B (zh) 一种移动终端及其近场通信的方法
WO2012155620A1 (zh) 一种进行近场通信安全性保护的方法及移动通信终端
CN106104601A (zh) 虚拟卡片激活方法及装置
US9008575B2 (en) Portable mobile communication device and method of controlling near field communication
EP3817415B1 (en) Method and device for configuring nfc smart card
CN105117908B (zh) 一种交易支付提示方法及电子设备
CN106339870A (zh) 资源转移方法及装置
WO2019047148A1 (zh) 一种密码验证方法、终端、计算机可读存储介质
CN106920090A (zh) Nfc支付方法及装置
WO2010045828A1 (zh) 电子支付应用关闭和开启的方法及装置
US11461762B2 (en) NFC payment method and apparatus implemented on mobile terminal
CN112989851B (zh) Nfc卡片激活方法、装置和电子设备
WO2011103734A1 (zh) 终端设备的近场通信实现方法及实现近场通信的终端设备
CN105225113B (zh) 一种信息处理方法及电子设备
WO2016082394A1 (zh) 一种实现用户识别卡锁定的方法和移动终端
CN106651352A (zh) 一种基于近场通信的支付方法及装置
CN111913773A (zh) Nfc卡控制方法、控制装置及电子设备
JP6910377B2 (ja) アイデンティティ検証方法及び装置
WO2016165171A1 (zh) 用于移动终端的近场支付方法、装置和移动终端
HK1226221A1 (zh) 移动支付方法和装置
HK1226221B (zh) 移动支付方法和装置
KR101542653B1 (ko) 엔에프씨를 이용한 시간 검증 기반 오티피 생성 방법

Legal Events

Date Code Title Description
ENP Entry into the national phase

Ref document number: 2018555629

Country of ref document: JP

Kind code of ref document: A

NENP Non-entry into the national phase

Ref country code: DE

WWE Wipo information: entry into national phase

Ref document number: 2017788579

Country of ref document: EP

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17788579

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2017788579

Country of ref document: EP

Effective date: 20181127

ENP Entry into the national phase

Ref document number: 3026587

Country of ref document: CA