Disclosure of Invention
In view of the above, it is desirable to provide a method, an apparatus, a computer device, a storage medium, and a computer program product for accessing a cash receiving terminal, which can effectively improve transaction security and key transmission efficiency.
In a first aspect, the present application provides a method for access processing of a payee terminal, including:
receiving an activation application request sent by a collection terminal; the activation application request carries a collection terminal identifier, an activation code and a service terminal number;
verifying the validity of the activation application request, if the verification result is legal, activating the money receiving terminal, and generating a terminal key for the money receiving terminal;
returning an activation response message to the collection terminal; the activation response message carries the terminal key, and the terminal key is used for calling a payment interface provided by a receiving mechanism background server by using the terminal key when the receiving terminal receives a payment initiating request, and initiating the payment request to the receiving mechanism background server so as to complete the payment processing process initiated by the receiving terminal.
In one embodiment, before the step of receiving the request for activation application sent by the payee terminal, the method further includes: receiving a cash receiving terminal access request sent by a receiving mechanism foreground processing end when receiving a cash receiving terminal access application submitted by a merchant terminal; the receiving terminal access application and the receiving terminal access request carry a receiving terminal identification; if the access request of the collection terminal passes the verification, generating a corresponding activation code and a service terminal number, and binding and storing the activation code, the service terminal number and the collection terminal identification; returning a receiving terminal access response to a receiving mechanism foreground processing end; the cash receiving terminal access response carries the activation code and the service terminal number, the activation code and the service terminal number are returned to the merchant terminal by the receipt mechanism foreground processing end, and the cash receiving terminal obtains the activation code and the service terminal number from the merchant terminal.
In one embodiment, the step of generating the corresponding activation code and the service terminal number if the access request of the payee terminal passes verification includes: and if the access request of the collection terminal passes the verification, generating a corresponding activation code and a service terminal number, and determining the legal time limit and the legal times of the activation code.
In one embodiment, the step of verifying the validity of the activation application request includes: obtaining an activation code and a collection terminal identifier which are correspondingly bound and stored according to the service terminal number; judging whether the cash receiving terminal identification is consistent with the cash receiving terminal identification stored in a binding mode or not and whether the activation code is consistent with the activation code stored in the binding mode or not; and if the request is consistent with the request, the activation application request is legal.
In one embodiment, the activation application request further includes a digital signature and a collection public key, where the digital signature is obtained by signing the activation code and the service terminal number with a collection private key, the collection public key and the collection private key are generated by the collection terminal, and the step of verifying the validity of the activation application request includes: verifying the digital signature according to the received collection public key; when the digital signature passes the verification, obtaining an activation code and a collection terminal identifier which are correspondingly bound and stored according to the service terminal number; judging whether the cash receiving terminal identification is consistent with the cash receiving terminal identification stored in a binding mode or not and whether the activation code is consistent with the activation code stored in the binding mode or not; and if the request is consistent with the request, the activation application request is legal.
In one embodiment, the step of determining whether the payee terminal identifier is consistent with the payee terminal identifier stored in a binding manner, and whether the activation code is consistent with the activation code stored in the binding manner, includes: judging whether the receiving terminal identification is consistent with the receiving terminal identification which is bound and stored; when the cash receiving terminal identification is consistent with the cash receiving terminal identification stored in a binding mode, judging whether the activation code is consistent with the activation code stored in the binding mode; when the activation code is consistent with the activation code stored in a binding mode, judging whether the current use time of the activation code is within the legal time limit or not and whether the use times of the activation code are within the legal times or not; and when the current use time is within the legal time limit and the use times are within the legal times, the activation application request is legal.
In a second aspect, the present application further provides a method for accessing a cash receiving terminal, including:
the method comprises the steps of obtaining an activation code and a service terminal number received by a merchant terminal, and sending an activation application request to a receiving mechanism background server, wherein the activation application request carries a money receiving terminal identification, the activation code and the service terminal number;
receiving an activation response message returned by the acquirer background server after the activation application request is verified to be legal, and returning activation success prompt information to the merchant terminal based on the activation response message; wherein, the activation response message carries a terminal key;
and when a payment initiating request initiated by the merchant terminal is received, calling a payment interface provided by the acquirer background server by using the terminal key, and initiating the payment request to the acquirer background server.
In a third aspect, the present application further provides a device for processing access of a payee terminal, including:
the request receiving module is used for receiving an activation application request sent by a money receiving terminal; the activation application request carries a collection terminal identifier, an activation code and a service terminal number;
the activation verification module is used for verifying the validity of the activation application request, activating the money receiving terminal if the verification result is legal, and generating a terminal key for the money receiving terminal;
the activation response module is used for returning an activation response message to the collection terminal; the activation response message carries the terminal key, and the terminal key is used for calling a payment interface provided by a receiving mechanism background server by using the terminal key when the receiving terminal receives a payment initiating request, and initiating the payment request to the receiving mechanism background server so as to complete the payment processing process initiated by the receiving terminal.
In one embodiment, before the request receiving module receives an activation application request sent by a receiving terminal, the receiving terminal access processing apparatus further includes: the access request module is used for receiving a cash receiving terminal access request sent by a front-end processing end of the bill receiving mechanism when receiving a cash receiving terminal access application submitted by a merchant terminal; the receiving terminal access application and the receiving terminal access request carry a receiving terminal identification; the access verification module is used for generating a corresponding activation code and a corresponding service terminal number if the access request of the collection terminal passes verification, and binding and storing the activation code, the service terminal number and the collection terminal identifier; the access response module is used for returning a cash receiving terminal access response to the front-stage processing end of the acquiring mechanism; the cash receiving terminal access response carries the activation code and the service terminal number, the activation code and the service terminal number are returned to the merchant terminal by the receipt mechanism foreground processing end, and the cash receiving terminal obtains the activation code and the service terminal number from the merchant terminal.
In one embodiment, the access authentication module is further configured to: and if the access request of the collection terminal passes the verification, generating a corresponding activation code and a service terminal number, and determining the legal time limit and the legal times of the activation code.
In one embodiment, the activation verification module is further configured to: obtaining an activation code and a collection terminal identifier which are correspondingly bound and stored according to the service terminal number; judging whether the cash receiving terminal identification is consistent with the cash receiving terminal identification stored in a binding mode or not and whether the activation code is consistent with the activation code stored in the binding mode or not; and if the request is consistent with the request, the activation application request is legal.
In one embodiment, the activation application request further includes a digital signature and a collection public key, wherein the digital signature is obtained by signing the activation code and the service terminal number through a collection private key, and the collection public key and the collection private key are generated by the collection terminal; the activation verification module is further to: verifying the digital signature according to the received collection public key; when the digital signature passes the verification, obtaining an activation code and a collection terminal identifier which are correspondingly bound and stored according to the service terminal number; judging whether the cash receiving terminal identification is consistent with the cash receiving terminal identification stored in a binding mode or not and whether the activation code is consistent with the activation code stored in the binding mode or not; and if the request is consistent with the request, the activation application request is legal.
In one embodiment, the activation verification module is further configured to: judging whether the receiving terminal identification is consistent with the receiving terminal identification which is bound and stored; when the cash receiving terminal identification is consistent with the cash receiving terminal identification stored in a binding mode, judging whether the activation code is consistent with the activation code stored in the binding mode; when the activation code is consistent with the activation code stored in a binding mode, judging whether the current use time of the activation code is within the legal time limit or not and whether the use times of the activation code are within the legal times or not; and when the current use time is within the legal time limit and the use times are within the legal times, the activation application request is legal.
In a fourth aspect, the present application further provides a cash receiving terminal access apparatus, including:
the request sending module is used for acquiring the activation code and the service terminal number received by the merchant terminal and sending an activation application request to a background server of the acquiring mechanism, wherein the activation application request carries a money receiving terminal identifier, the activation code and the service terminal number;
a response receiving module, configured to receive an activation response message returned by the acquirer background server after verifying that the activation application request is legal, and return activation success prompt information to the merchant terminal based on the activation response message; wherein, the activation response message carries a terminal key;
and the payment request module is used for calling a payment interface provided by the acquirer background server by using the terminal key and initiating a payment request to the acquirer background server when receiving a payment initiating request initiated by the merchant terminal.
In a fifth aspect, the present application further provides a computer device. The computer device comprises a memory storing a computer program and a processor implementing the following steps when executing the computer program:
receiving an activation application request sent by a collection terminal; the activation application request carries a collection terminal identifier, an activation code and a service terminal number;
verifying the validity of the activation application request, if the verification result is legal, activating the money receiving terminal, and generating a terminal key for the money receiving terminal;
returning an activation response message to the collection terminal; the activation response message carries the terminal key, and the terminal key is used for calling a payment interface provided by a receiving mechanism background server by using the terminal key when the receiving terminal receives a payment initiating request, and initiating the payment request to the receiving mechanism background server so as to complete the payment processing process initiated by the receiving terminal.
In a sixth aspect, the present application further provides a computer-readable storage medium. The computer-readable storage medium having stored thereon a computer program which, when executed by a processor, performs the steps of:
receiving an activation application request sent by a collection terminal; the activation application request carries a collection terminal identifier, an activation code and a service terminal number;
verifying the validity of the activation application request, if the verification result is legal, activating the money receiving terminal, and generating a terminal key for the money receiving terminal;
returning an activation response message to the collection terminal; the activation response message carries the terminal key, and the terminal key is used for calling a payment interface provided by a receiving mechanism background server by using the terminal key when the receiving terminal receives a payment initiating request, and initiating the payment request to the receiving mechanism background server so as to complete the payment processing process initiated by the receiving terminal.
In a seventh aspect, the present application further provides a computer program product. The computer program product comprising a computer program which when executed by a processor performs the steps of:
receiving an activation application request sent by a collection terminal; the activation application request carries a collection terminal identifier, an activation code and a service terminal number;
verifying the validity of the activation application request, if the verification result is legal, activating the money receiving terminal, and generating a terminal key for the money receiving terminal;
returning an activation response message to the collection terminal; the activation response message carries the terminal key, and the terminal key is used for calling a payment interface provided by a receiving mechanism background server by using the terminal key when the receiving terminal receives a payment initiating request, and initiating the payment request to the receiving mechanism background server so as to complete the payment processing process initiated by the receiving terminal.
According to the access processing method, the access method and the device for the cash receiving terminal, the computer equipment, the storage medium and the computer program product, after the activation application request which is sent by the cash receiving terminal and carries the cash receiving terminal identification, the activation code and the service terminal number is received, the legality of the activation application request is verified, only under the condition that the activation application request is legal, the cash receiving terminal is further activated, and the terminal key is generated for the cash receiving terminal. And finally, feeding back an activation response message carrying the terminal key to the collection terminal so that the collection terminal and the acquirer background server complete the payment processing process when receiving the payment initiation request. Through the scheme, the activation application request carries the cash collection terminal identification, the activation code and the service terminal number, and the validity of the activation application request can be verified during activation operation, so that accurate activation of the designated cash collection terminal is guaranteed, and the condition that the cash collection terminal is replaced randomly for activation is avoided. Meanwhile, the scheme directly issues the terminal key to the collection terminal after generating the terminal key, does not need to use external tools such as mails and optical disks, and has higher transmission efficiency under the condition of effectively ensuring the transaction safety.
Detailed Description
In order to make the objects, technical solutions and advantages of the present application more apparent, the present application is described in further detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the present application and are not intended to limit the present application.
The access processing method for the payee terminal provided by the embodiment of the application can be applied to the application environment shown in fig. 1. The cash receiving terminal 102 communicates with the server 104 via a network, the merchant terminal 106 can communicate with the acquirer front-end processing terminal 108, the acquirer front-end processing terminal 108 can communicate with the server 104, and the merchant terminal 106 communicates with the cash receiving terminal 102. The data storage system may store data that the server 104 needs to process, and the data storage system may be integrated on the server 104, or may be placed on a cloud or other network server. The server 104 may specifically be a backend server of the acquirer, and may be implemented by an independent server or a server cluster composed of a plurality of servers.
In the actual operation process, the payee terminal 102 can send the activation application request under the control of the merchant terminal 106 and receive the payment initiation request from the merchant terminal 106. The activation application request sent by the receiving terminal 102 is transmitted to the server 104, the server 104 performs validity verification on the activation application request, activates the receiving terminal 102 under the condition that the activation application request is verified to be legal, and feeds back an activation response message to the receiving terminal 102 to realize the activation operation of the receiving terminal. After receiving the payment initiation request, the payee terminal 102 invokes the payment interface provided by the server 104 by activating the terminal key carried in the response message, and initiates the payment request to the server 104, so as to complete the payment processing procedure initiated by the merchant terminal 106 first, thereby implementing the payment operation. In the process, firstly, the merchant terminal 106 submits an access application to the acquirer foreground processing end 108, the acquirer foreground processing end 108 submits the application to the server 104, finally, the server 104 generates an activation code and a service terminal number corresponding to a money receiving terminal identifier in the access application and feeds the activation code and the service terminal number back to the acquirer foreground processing end 108, the merchant terminal 106 obtains the activation code and the service terminal number from the acquirer foreground processing end 108, and finally, the merchant terminal 106 transmits the activation code and the service terminal number to the money receiving terminal 102.
In one embodiment, as shown in fig. 2, a method for processing access of a payee terminal is provided, which is exemplified by applying the method to the server 104 in fig. 1, and is particularly applied to a backend server of an acquirer. In this embodiment, the method includes step 202, step 204, and step 206.
Step 202, receiving an activation application request sent by the receiving terminal.
Specifically, the activation application request carries a payee terminal identifier, an activation code, and a service terminal number. When the collection terminal is accessed to the acquiring mechanism for the first time, the collection terminal firstly sends an activation application request to the acquiring mechanism background server, and under the action of the activation application request, the acquiring mechanism background server starts to activate the collection terminal so as to enable the collection terminal to be accessed to the acquiring mechanism.
The collection terminal is a terminal device which can be directly butted with a collection mechanism to realize collection operation. It should be understood that the specific type Of the cash receiving terminal is not unique, and may be a POS (Point Of Sales), a cash register, and the like.
The payee terminal identifier is a Unique identity identifier of the payee terminal, and the specific form of the payee terminal identifier is not Unique, and the payee terminal identifier may be any parameter information capable of distinguishing different payee terminals, for example, in an embodiment, the payee terminal identifier may be a serial number of the payee terminal or a hardware serial number uuid (universal Unique identifier).
It should be noted that, in an embodiment, after receiving an activation instruction carrying a cash receiving terminal identifier, an activation code, and a service terminal number, which is input by a merchant, a cash receiving terminal generates a corresponding activation application request, and finally sends the generated activation application request to a backend server of an acquirer.
In one embodiment, the merchant inputs an activation instruction carrying the cash register terminal identifier, the activation code and the service terminal number, and then the merchant terminal communicates with the cash register terminal, so that the activation instruction carrying the cash register terminal identifier, the activation code and the service terminal number is sent to the cash register terminal, and finally the cash register terminal generates a corresponding activation application request according to the received activation instruction and sends the activation application request to the acquirer background server. In another embodiment, the merchant may also directly operate on the payment terminal, input the activation instruction carrying the payment terminal identifier, the activation code, and the service terminal number into the payment terminal, and then the payment terminal generates a corresponding activation application request and sends the activation application request to the acquirer background server.
And 204, verifying the validity of the activation application request, if the verification result is legal, activating the collection terminal, and generating a terminal key for the collection terminal.
Specifically, after receiving the activation application request, the acquirer background server performs analysis and verification on whether the activation application request is legal or not. Only after the activation application request is validated, the receiving mechanism background server activates the corresponding receiving terminal and finally generates a terminal key for the receiving terminal. The method for verifying whether the activation application request is legal is not unique, and specifically may be verifying whether a payee terminal identifier, an activation code or a service terminal number carried in the activation application request is legal, and/or verifying whether a corresponding relationship among the payee terminal identifier, the activation code and the service terminal number meets a certain requirement, and the like.
Step 206, an activation response message is returned to the payee terminal.
Specifically, the activation response message carries a terminal key, and the terminal key is used for calling a payment interface provided by a receiving mechanism background server by using the terminal key when the receiving terminal receives a payment initiation request, and initiating the payment request to the receiving mechanism background server to complete a payment processing process initiated by the receiving terminal, wherein the payment request carries a receiving terminal identifier.
The receiving mechanism background server can feed back an activation response message to the collection terminal after activating the corresponding collection terminal according to the received activation application request so as to ensure that the collection terminal can know the activation state of the collection terminal in time. When the receiving terminal receives the activation response message, namely the fact that the receiving terminal is successfully activated is represented, the receiving terminal can realize the payment function by combining the terminal key in the activation response message.
It can be understood that the receiving terminal receives the payment initiation request, specifically, the merchant directly operates on the receiving terminal, and inputs the payment initiation request to the receiving terminal. And then the payment receiving terminal uses the terminal key fed back by the acquiring mechanism background server to call a payment interface in the acquiring mechanism background server, sends the initiated payment request to the acquiring mechanism background server, and completes the whole payment operation after further processing of the acquiring mechanism background server. The merchant can also operate at the merchant terminal, a payment request is sent to the receiving terminal by the merchant terminal, and then the payment terminal uses the terminal key to call the payment interface of the receiving mechanism background server to realize the related payment operation.
In one embodiment, referring to fig. 3, before step 202, the method further includes step 302, step 304, and step 306.
Step 302, receiving a receiving terminal access request sent by a receiving mechanism foreground processing end when receiving a receiving terminal access application submitted by a merchant terminal.
And 304, if the access request of the receiving terminal passes the verification, generating a corresponding activation code and a corresponding service terminal number, and binding and storing the activation code, the service terminal number and the receiving terminal identification.
Step 306, return the access response of the receiving terminal to the front-end processing end of the receiving mechanism.
Specifically, the receiving terminal access application and the receiving terminal access request carry a receiving terminal identifier; the receiving terminal access response carries the activation code and the service terminal number, the activation code and the service terminal number are returned to the merchant terminal by the receiving mechanism foreground processing end, and the receiving terminal obtains the activation code and the service terminal number from the merchant terminal. In the scheme of this embodiment, before activating the payee terminal according to the activation application request, that is, before the payee terminal accesses the network, the acquirer background server generates a corresponding activation code and a corresponding service terminal number in combination with the payee terminal access request, and finally, the merchant can activate the payee terminal by using the activation code and the service terminal number.
The receipt mechanism foreground processing end refers to a front end of the receipt mechanism directly butted with the merchant, the specific type of the receipt mechanism foreground processing end is not unique, in one embodiment, the receipt mechanism foreground processing end can be a processing terminal, and the processing terminal has the functions of information receiving and issuing and can receive a receipt terminal access application sent by the merchant terminal and a receipt terminal access response returned by the receipt mechanism background server.
Furthermore, the front-end processing end of the acquiring mechanism is also corresponding to an acquiring mechanism merchant manager, and the acquiring mechanism merchant manager can directly operate the processing terminal, receive a money receiving terminal access application sent by the merchant terminal through the processing terminal and receive a money receiving terminal access response returned by the background server of the acquiring mechanism. Meanwhile, the merchant manager of the acquirer can also send a cash receiving terminal access request to the acquirer background server through the processing terminal according to the cash receiving terminal access application. By the scheme, a merchant manager of the acquiring mechanism can be more efficiently involved in the management process of the merchant money receiving terminal, and the legality and safety of the process of accessing the new money receiving terminal into the payment channel are improved.
It should be noted that, in an embodiment, when the acquirer background server receives the payee terminal access request sent by the acquirer foreground processing end, verification is required, and when the payee terminal access request passes verification, subsequent operations of generating, binding the activation code and the service terminal number, and returning an access response of the payee terminal are performed. And when the verification of the access request of the payee terminal is not passed, the background server of the acquirer directly returns a signal of failure of the request.
It can be understood that when the acquirer background server verifies the access request of the payee terminal, the specific verification operation is not unique, and different choices can be made specifically in combination with actual scenes. For example, in one embodiment, it may be verified whether the receiving terminal access request carries a receiving terminal identifier, and whether the carried receiving terminal identifier is legal, or the like.
Taking the cash collecting terminal as the cash register and the serial number of the cash collecting terminal as the hardware serial number of the cash register as an example for explanation, before the cash register accesses the network, a merchant (merchant terminal) needs to provide the hardware serial number of the cash register accessing the network for an acquiring mechanism (acquiring mechanism background server), and the acquiring mechanism background can allocate the service terminal serial number for the cash register and bind with the hardware serial number. After the successful binding, the background server of the acquiring mechanism automatically generates a globally unique digital ID as an activation code through an autonomous key of a relational database, the activation code is also bound with the received hardware serial number, then the activation code and the service terminal number are returned to the merchant terminal, and the cash register acquires the activation code and the service terminal number from the merchant terminal.
Further, in one embodiment, step 304 includes: and if the access request of the collection terminal passes the verification, generating a corresponding activation code and a service terminal number, and determining the legal time limit and the legal times of the activation code.
Specifically, in the solution of this embodiment, while the activation code is generated, a corresponding legal term and legal times are generated for the activation code. The use of the activation code is limited by the legal time limit and the legal times, so that the use of the activation code without time limit and use times is avoided, and the safety and effectiveness of the activation operation of the money receiving terminal are ensured.
It should be noted that the type of legal period is not exclusive, and in one embodiment, the legal period may be a range of times, such as 4 hours, 8 hours, 12 hours, 24 hours, 48 hours, etc., with the corresponding current time representing the cumulative time after the activation code was generated. When the accumulated time after the activation code is generated is larger than the corresponding legal period, namely the activation code exceeds the legal period, the activation code is invalid.
In another embodiment, the legal time limit may also be represented by a timestamp, and the acquirer background server accumulates, while generating the activation code, according to the legal time allowed by the activation code on the basis of the current timestamp, to obtain a timestamp, which is the legal time limit corresponding to the activation code. The corresponding current time represents the current timestamp, and in the subsequent validity analysis process, only the current timestamp needs to be analyzed whether to exceed the timestamp corresponding to the legal time limit.
Similarly, the specific number of the legal times is not unique, and may be one time, two times, and the like, and may be selected differently specifically in combination with the actual scene. For example, in a more detailed embodiment, the validity number is set to one time, i.e., each activate code can only be used once, and the activate code will be disabled after one use.
Referring to FIG. 4, in one embodiment, verifying the validity of the activation application request includes steps 402 and 404.
And 402, obtaining an activation code and a collection terminal identifier which are correspondingly bound and stored according to the service terminal number. Step 404, determining whether the receiving terminal identifier is consistent with the receiving terminal identifier stored in the binding manner, and whether the activation code is consistent with the activation code stored in the binding manner. If the two are consistent, the activation application request is legal.
Specifically, the binding stored identification of the collection terminal means that the collection terminal accesses the collection terminal identification carried in the request when the collection mechanism background server receives the collection terminal access request before the collection terminal accesses the network. Before the receiving terminal accesses the network, the receiving mechanism background server correspondingly generates and stores a service terminal number and an activation code for the receiving terminal identification according to the received receiving terminal identification. Therefore, when the acquirer background server receives the activation application request, it needs to verify whether the payee terminal identifier, the activation code, and the service terminal number carried in the activation application request correspond to each other one by one. Specifically, the activation code and the collection terminal identification which are correspondingly bound and stored under the service terminal number are called through the service terminal number, then the currently received activation code and the collection terminal identification are compared one by one, whether the currently received activation code and the currently received collection terminal identification are respectively consistent with the activation code and the collection terminal identification which are bound and stored is judged, and if the currently received activation code and the currently received collection terminal identification are consistent with the activation code and the collection terminal identification which are bound and stored, the validity is verified.
In one embodiment, the activation application request further includes a digital signature and a collection public key, wherein the digital signature is obtained by signing the activation code and the service terminal number through a collection private key, and the collection public key and the collection private key are generated by the collection terminal. Accordingly, referring to fig. 5, verifying the validity of the activation application request includes steps 502, 504, and 506.
Step 502, the digital signature is verified according to the received public key of collection. And step 504, when the digital signature passes the verification, obtaining the activation code and the collection terminal identification which are correspondingly bound and stored according to the service terminal number. Step 506, judging whether the receiving terminal identification is consistent with the receiving terminal identification stored in the binding way, and whether the activation code is consistent with the activation code stored in the binding way. If the two are consistent, the activation application request is legal.
Specifically, in the scheme of this embodiment, after the service terminal number and the activation code are generated before the receipt terminal accesses the network and are bound and stored with the receipt terminal identifier, the receipt terminal generates a public and private key pair, that is, a receipt public key and a receipt private key, and signs a combination of the activation code acquired by the receipt terminal and the receipt terminal number of the receipt terminal by using the receipt private key to obtain a corresponding digital signature. When the collection terminal sends an activation application request to the collection mechanism background server, the activation application request correspondingly carries a digital signature and a collection public key. Therefore, when the legitimacy verification is carried out by the background server of the acquirer, the digital signature is verified through the received collection public key at first, only after the digital signature is verified successfully, the verification of whether the subsequent activation code, the collection terminal number and the service terminal number are in one-to-one correspondence is carried out, and if the digital signature verification fails, the activation application request is directly considered to be illegal. The operation of verifying whether the activation code, the number of the receiving terminal and the number of the service terminal correspond to each other is similar to the above embodiment, and is not described herein again.
Further, referring to fig. 6, in an embodiment, the step of determining whether the payee terminal identifier is consistent with the payee terminal identifier stored in the binding, and whether the activation code is consistent with the activation code stored in the binding includes steps 602, 604, and 606.
Step 602, determining whether the receiving terminal identifier is consistent with the receiving terminal identifier stored in a binding manner. And step 604, when the identification of the collection terminal is consistent with the identification of the collection terminal stored in the binding manner, judging whether the activation code is consistent with the activation code stored in the binding manner. Step 606, when the activation code is consistent with the activation code stored in the binding mode, whether the current use time of the activation code is within the legal time limit and whether the use times of the activation code are within the legal times are judged. And when the current use time is within the legal time limit and the use times are within the legal times, the activation application request is legal.
Specifically, in the solution of this embodiment, it is necessary to verify whether the activation code, the payee terminal identifier, and the service terminal number correspond to each other one by one, and also to verify whether the activation code is legal. According to the scheme of the embodiment, the activation application request is finally considered to be validated only when the activation code is in the legal time limit and the legal times and the collection terminal identifier and the activation code are respectively consistent with the money terminal identifier and the activation code which are bound and stored under the collection terminal identifier, and otherwise, the validation fails. Or the following steps: and finally considering that the activation application request is verified to be legal if the digital signature is successfully verified within the legal time limit and the legal times and the collection terminal identifier and the activation code are respectively consistent with the money terminal identifier and the activation code which are bound and stored under the collection terminal identifier, otherwise, the activation application request is failed to be verified.
According to the method for processing access of the cash receiving terminal, after an activation application request which is sent by the cash receiving terminal and carries a cash receiving terminal identification, an activation code and a service terminal number is received, validity verification is carried out on the activation application request, the cash receiving terminal is further activated only under the condition that the activation application request is legal, and a terminal secret key is generated for the cash receiving terminal. And finally, feeding back an activation response message carrying the terminal key to the collection terminal so that the collection terminal and the acquirer background server complete the payment processing process when receiving the payment initiation request. Through the scheme, the activation application request carries the cash collection terminal identification, the activation code and the service terminal number, and the validity of the activation application request can be verified during activation operation, so that accurate activation of the designated cash collection terminal is guaranteed, and the condition that the cash collection terminal is replaced randomly for activation is avoided. Meanwhile, the scheme directly issues the terminal key to the collection terminal after generating the terminal key, does not need to use external tools such as mails and optical disks, and has higher transmission efficiency under the condition of effectively ensuring the transaction safety.
In an embodiment, referring to fig. 7, the present application further provides a receiving terminal access method, which is described in an example that the method is applied to the receiving terminal 102 in fig. 1, and in this embodiment, the method includes the following steps:
step 702, acquiring the activation code and the service terminal number received by the merchant terminal, and sending an activation application request to the acquirer background server.
Step 704, receiving an activation response message returned by the acquirer background server after verifying that the activation application request is legal, and returning activation success prompt information to the merchant terminal based on the activation response message.
Step 706, when receiving a payment initiation request initiated by the merchant terminal, using the terminal key to call a payment interface provided by the acquirer background server, and initiating the payment request to the acquirer background server.
Specifically, the activation application request carries a collection terminal identifier, an activation code and a service terminal number; wherein, the activation response message carries a terminal key, and the payment request carries a payment receiving terminal identification.
When the collection terminal is accessed to the acquiring mechanism for the first time, the collection terminal firstly sends an activation application request to the acquiring mechanism background server, and under the action of the activation application request, the acquiring mechanism background server starts to activate the collection terminal so as to enable the collection terminal to be accessed to the acquiring mechanism.
The payee terminal identifier is a unique identity identifier of the payee terminal, and the specific form of the payee terminal identifier is not unique, and the payee terminal identifier may be any parameter information capable of distinguishing different payee terminals.
After receiving an activation instruction which is input by a merchant and carries a money receiving terminal identifier, an activation code and a service terminal number, the money receiving terminal generates a corresponding activation application request, and finally sends the generated activation application request to a background server of the acquiring mechanism.
In one embodiment, the merchant inputs an activation instruction carrying the cash register terminal identifier, the activation code and the service terminal number, and then the merchant terminal communicates with the cash register terminal, so that the activation instruction carrying the cash register terminal identifier, the activation code and the service terminal number is sent to the cash register terminal, and finally the cash register terminal generates a corresponding activation application request according to the received activation instruction and sends the activation application request to the acquirer background server. In another embodiment, the merchant may also directly operate on the payment terminal, input the activation instruction carrying the payment terminal identifier, the activation code, and the service terminal number into the payment terminal, and then the payment terminal generates a corresponding activation application request and sends the activation application request to the acquirer background server.
And after receiving the activation application request, the receiving mechanism background server analyzes and verifies whether the activation application request is legal or not. Only after the activation application request is validated, the receiving mechanism background server activates the corresponding receiving terminal and finally generates a terminal key for the receiving terminal. The method for verifying whether the activation application request is legal is not unique, and specifically may be verifying whether a payee terminal identifier, an activation code or a service terminal number carried in the activation application request is legal, and/or verifying whether a corresponding relationship among the payee terminal identifier, the activation code and the service terminal number meets a certain requirement, and the like.
The receiving mechanism background server can feed back an activation response message to the collection terminal after activating the corresponding collection terminal according to the received activation application request so as to ensure that the collection terminal can know the activation state of the collection terminal in time. When the receiving terminal receives the activation response message, namely the fact that the receiving terminal is successfully activated is represented, the receiving terminal can realize the payment function by combining the terminal key in the activation response message.
According to the method for accessing the collection terminal, after an activation application request which is sent by the collection terminal and carries a collection terminal identifier, an activation code and a service terminal number is received, validity verification is carried out on the activation application request, the collection terminal is further activated only under the condition that the activation application request is legal, and a terminal key is generated for the collection terminal. And finally, feeding back an activation response message carrying the terminal key to the collection terminal so that the collection terminal and the acquirer background server complete the payment processing process when receiving the payment initiation request. Through the scheme, the activation application request carries the cash collection terminal identification, the activation code and the service terminal number, and the validity of the activation application request can be verified during activation operation, so that accurate activation of the designated cash collection terminal is guaranteed, and the condition that the cash collection terminal is replaced randomly for activation is avoided. Meanwhile, the scheme directly issues the terminal key to the collection terminal after generating the terminal key, does not need to use external tools such as mails and optical disks, and has higher transmission efficiency under the condition of effectively ensuring the transaction safety.
It should be understood that, although the steps in the flowcharts related to the embodiments as described above are sequentially displayed as indicated by arrows, the steps are not necessarily performed sequentially as indicated by the arrows. The steps are not performed in the exact order shown and described, and may be performed in other orders, unless explicitly stated otherwise. Moreover, at least a part of the steps in the flowcharts related to the embodiments described above may include multiple steps or multiple stages, which are not necessarily performed at the same time, but may be performed at different times, and the execution order of the steps or stages is not necessarily sequential, but may be rotated or alternated with other steps or at least a part of the steps or stages in other steps.
In order to facilitate understanding of the technical solutions of the present application, the present application is explained in detail with reference to specific embodiments, which can be specifically referred to with reference to fig. 8. In the scheme of the embodiment, the butt joint of the money receiving terminal and the acquiring mechanism is managed through the merchant terminal and the front-stage processing end of the acquiring mechanism together.
Firstly, a merchant terminal submits an access request of a cash register (a cash receiving terminal), and a receiving mechanism foreground processing terminal directly submits the access request to a receiving mechanism background server after receiving the request. And after receiving the access request, the receiving mechanism background server verifies the access request, if the access request passes the verification, generates a service terminal number, an activation code and a corresponding legal time limit and legal times for a collection terminal identifier carried in the access request, and records and stores the corresponding relation of the activation code, the service terminal number and the collection terminal identifier. And then the receiving mechanism background server feeds back a receiving terminal access response carrying the activation code and the service terminal number to a receiving mechanism foreground processing end. And finally, the front-stage processing end of the acquiring mechanism informs the merchant terminal of the activation code fed back by the front-stage processing end of the acquiring mechanism in a mode of mails, short messages and the like, so that the operation of acquiring the activation code is completed.
And then, the merchant terminal realizes the activation operation of the payment receiving terminal according to the acquired activation code and the service terminal number. At the moment, the collection terminal can generate a collection public key and a collection private key, the merchant terminal directly sends the activation code and the service terminal number to the collection terminal, and after the collection terminal acquires the activation code and the service terminal number, the collection terminal generates a digital signature according to the collection private key, the activation code and the collection terminal identification of the merchant terminal and sends an activation application request to the acquirer background server. The activation application request carries a service terminal number, a collection terminal identifier, an activation code, a collection public key and a digital name.
And after the receiving mechanism background server receives the activation application request, verifying the legality of the activation application request, and if the activation code is verified within the legal time limit and the legal times, the digital signature is verified successfully, and the activation code and the collection terminal number are respectively in accordance with the activation code and the collection terminal number which are correspondingly bound and stored with the service terminal number, indicating that the activation application request is verified legally. At this time, the acquirer background server activates the collection terminal and generates a terminal key for the collection terminal. And the receiving mechanism background server sends the terminal key to the receiving terminal in a mode of returning an activation response message to the receiving terminal. Meanwhile, the cash receiving terminal feeds back activation success prompt information to the merchant terminal after obtaining the activation response message.
And finally, the merchant terminal, the money receiving terminal and the acquiring mechanism background server carry out related payment according to the terminal key. In the process, when the payment receiving terminal receives a payment initiating request initiated by the merchant terminal, the terminal key is used for calling a payment interface provided by the acquiring mechanism background server, the payment initiating request is initiated to the acquiring mechanism background server, and the payment processing process initiated by the payment receiving terminal is realized through the acquiring mechanism background server. And after the payment is finished, the background server of the acquiring mechanism feeds back the prompt information of successful payment to the payment receiving terminal, and finally the prompt information is fed back to the merchant terminal by the payment receiving terminal to finish the payment.
Based on the same inventive concept, the embodiment of the application also provides a receiving terminal access processing device for realizing the receiving terminal access processing method. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme described in the method, so specific limitations in one or more embodiments of the receiving terminal access processing device provided below can be referred to the limitations on the receiving terminal access processing method in the foregoing, and details are not described herein again.
In one embodiment, as shown in fig. 9, there is provided a payee terminal access processing apparatus, including:
a request receiving module 902, configured to receive an activation application request sent by a receiving terminal; the activation application request carries a collection terminal identifier, an activation code and a service terminal number. And an activation verification module 904, configured to verify validity of the activation application request, and if the verification result is valid, activate the payee terminal and generate a terminal key for the payee terminal. An activation response module 906, configured to return an activation response message to the payee terminal; and activating the response message to carry a terminal key, wherein the terminal key is used for calling a payment interface provided by the acquiring mechanism background server by using the terminal key when the payment terminal receives the payment initiating request, and initiating the payment request to the acquiring mechanism background server to complete the payment processing process initiated by the payment terminal, and the payment request carries a payment terminal identifier.
Referring to fig. 10, in an embodiment, before the request receiving module 902 receives an activation application request sent by a receiving terminal, the receiving terminal access processing apparatus further includes:
the access request module 1002 receives a receiving terminal access request sent by a receiving mechanism foreground processing end when receiving a receiving terminal access application submitted by a merchant terminal. And the access verification module 1004 is configured to generate a corresponding activation code and a corresponding service terminal number if the receiving terminal access request passes verification, and bind and store the activation code, the service terminal number, and the receiving terminal identifier. An access response module 1006, configured to return a receiving terminal access response to a receiving mechanism foreground processing end; the receiving terminal access response carries the activation code and the service terminal number, the activation code and the service terminal number are returned to the merchant terminal by the receiving mechanism foreground processing end, and the receiving terminal obtains the activation code and the service terminal number from the merchant terminal.
In one embodiment, the access verification module 1004 is further configured to: and if the access request of the collection terminal passes the verification, generating a corresponding activation code and a service terminal number, and determining the legal time limit and the legal times of the activation code.
In an embodiment, the activation verification module 904 is further configured to obtain an activation code and a payee terminal identifier, which are stored in a corresponding binding manner, according to the service terminal number. And judging whether the identification of the collection terminal is consistent with the identification of the collection terminal which is bound and stored and whether the activation code is consistent with the activation code which is bound and stored, and if so, indicating that the activation application request is legal.
In one embodiment, the activation application request further includes a digital signature and a collection public key, wherein the digital signature is obtained by signing the activation code and the service terminal number through a collection private key, and the collection public key and the collection private key are generated by the collection terminal. The activation verification module 904 is also configured to verify the digital signature based on the received payment public key. And when the digital signature passes the verification, obtaining the activation code and the collection terminal identification which are correspondingly bound and stored according to the service terminal number. And judging whether the identification of the collection terminal is consistent with the identification of the collection terminal which is bound and stored and whether the activation code is consistent with the activation code which is bound and stored, and if so, indicating that the activation application request is legal.
In one embodiment, the activation verification module 904 is further configured to determine whether the payee terminal identifier is consistent with the payee terminal identifier of the binding store. And when the identification of the collection terminal is consistent with the identification of the collection terminal which is bound and stored, judging whether the activation code is consistent with the activation code which is bound and stored. When the activation code is consistent with the activation code stored in the binding mode, whether the current use time of the activation code is within the legal time limit or not and whether the use times of the activation code are within the legal times or not are judged. And when the current use time is within the legal time limit and the use times are within the legal times, the activation application request is legal.
The above-mentioned modules of the access processing device of the cash receiving terminal can be realized by software, hardware and their combination. The modules can be embedded in a hardware form or independent from a processor in the computer device, and can also be stored in a memory in the computer device in a software form, so that the processor can call and execute operations corresponding to the modules.
The receiving terminal access processing device receives an activation application request which is sent by a receiving terminal and carries a receiving terminal identification, an activation code and a service terminal number, then carries out validity verification on the activation application request, further activates the receiving terminal only under the condition that the activation application request is legal, and generates a terminal key for the receiving terminal. And finally, feeding back an activation response message carrying the terminal key to the collection terminal so that the collection terminal and the acquirer background server complete the payment processing process when receiving the payment initiation request. Through the scheme, the activation application request carries the cash collection terminal identification, the activation code and the service terminal number, and the validity of the activation application request can be verified during activation operation, so that accurate activation of the designated cash collection terminal is guaranteed, and the condition that the cash collection terminal is replaced randomly for activation is avoided. Meanwhile, the scheme directly issues the terminal key to the collection terminal after generating the terminal key, does not need to use external tools such as mails and optical disks, and has higher transmission efficiency under the condition of effectively ensuring the transaction safety.
Based on the same inventive concept, the embodiment of the application also provides a cash receiving terminal access device for realizing the cash receiving terminal access method. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the method, so specific limitations in one or more embodiments of the receiving terminal access device provided below can be referred to the limitations on the receiving terminal access method in the foregoing, and details are not described herein again.
In one embodiment, as shown in fig. 11, there is provided a cash receiving terminal access device, including:
the request sending module 1102 is configured to obtain the activation code and the service terminal number received by the merchant terminal, and send an activation application request to the acquirer background server. The activation application request carries a collection terminal identifier, an activation code and a service terminal number.
And the response receiving module 1104 is configured to receive an activation response message returned by the acquirer background server after the activation application request is verified to be legal, and return activation success prompt information to the merchant terminal based on the activation response message. Wherein the activation reply message carries the terminal key.
A payment request module 1106, configured to, when receiving a payment initiation request initiated by a merchant terminal, invoke a payment interface provided by an acquirer background server using a terminal key, and initiate the payment request to the acquirer background server. The payment request carries a payment receiving terminal identification.
The modules in the access device of the cash register terminal can be wholly or partially realized by software, hardware and a combination thereof. The modules can be embedded in a hardware form or independent from a processor in the computer device, and can also be stored in a memory in the computer device in a software form, so that the processor can call and execute operations corresponding to the modules.
The receiving terminal access device can carry out validity verification on the activation application request after receiving the activation application request which is sent by the receiving terminal and carries the receiving terminal identification, the activation code and the service terminal number, and can further activate the receiving terminal only under the condition that the activation application request is legal and generate the terminal key for the receiving terminal. And finally, feeding back an activation response message carrying the terminal key to the collection terminal so that the collection terminal and the acquirer background server complete the payment processing process when receiving the payment initiation request. Through the scheme, the activation application request carries the cash collection terminal identification, the activation code and the service terminal number, and the validity of the activation application request can be verified during activation operation, so that accurate activation of the designated cash collection terminal is guaranteed, and the condition that the cash collection terminal is replaced randomly for activation is avoided. Meanwhile, the scheme directly issues the terminal key to the collection terminal after generating the terminal key, does not need to use external tools such as mails and optical disks, and has higher transmission efficiency under the condition of effectively ensuring the transaction safety.
In one embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be as shown in fig. 12. The computer device includes a processor, a memory, and a network interface connected by a system bus. Wherein the processor of the computer device is configured to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program, and a database. The internal memory provides an environment for the operation of an operating system and computer programs in the non-volatile storage medium. The database of the computer device is used for storing the binding data of the cash receiving terminal identification and the merchant identification. The network interface of the computer device is used for communicating with an external terminal through a network connection. The computer program is executed by a processor to implement a cash receiving terminal access processing method.
In one embodiment, a computer device is provided, which may be a terminal, and its internal structure diagram may be as shown in fig. 13. The computer device includes a processor, a memory, a communication interface, a display screen, and an input device connected by a system bus. Wherein the processor of the computer device is configured to provide computing and control capabilities. The memory of the computer device comprises a nonvolatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of an operating system and computer programs in the non-volatile storage medium. The communication interface of the computer device is used for carrying out wired or wireless communication with an external terminal, and the wireless communication can be realized through WIFI, a mobile cellular network, NFC (near field communication) or other technologies. The computer program is executed by a processor to implement a checkout terminal access method. The display screen of the computer equipment can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer equipment can be a touch layer covered on the display screen, a key, a track ball or a touch pad arranged on the shell of the computer equipment, an external keyboard, a touch pad or a mouse and the like.
It will be appreciated by those skilled in the art that the configurations shown in fig. 12 and 13 are only block diagrams of some configurations relevant to the present disclosure, and do not constitute a limitation on the computer device to which the present disclosure may be applied, and a particular computer device may include more or less components than those shown in the figures, or may combine some components, or have a different arrangement of components.
In one embodiment, a computer device is provided, comprising a memory and a processor, the memory having a computer program stored therein, the processor implementing the following steps when executing the computer program:
receiving an activation application request sent by a collection terminal;
verifying the validity of the activation application request, if the verification result is legal, activating the money receiving terminal, and generating a terminal key for the money receiving terminal;
and returning an activation response message to the payee terminal.
In one embodiment, the processor, when executing the computer program, further performs the steps of:
and acquiring the activation code and the service terminal number received by the merchant terminal, and sending an activation application request to a background server of the acquirer.
And receiving an activation response message returned by the receiving mechanism background server after the activation application request is verified to be legal, and returning activation success prompt information to the merchant terminal based on the activation response message.
And when a payment initiating request initiated by the merchant terminal is received, calling a payment interface provided by the acquirer background server by using the terminal key, and initiating the payment request to the acquirer background server.
In one embodiment, a computer-readable storage medium is provided, having a computer program stored thereon, which when executed by a processor, performs the steps of:
receiving an activation application request sent by a collection terminal;
verifying the validity of the activation application request, if the verification result is legal, activating the money receiving terminal, and generating a terminal key for the money receiving terminal;
and returning an activation response message to the payee terminal.
In one embodiment, the computer program when executed by the processor further performs the steps of:
and acquiring the activation code and the service terminal number received by the merchant terminal, and sending an activation application request to a background server of the acquirer.
And receiving an activation response message returned by the receiving mechanism background server after the activation application request is verified to be legal, and returning activation success prompt information to the merchant terminal based on the activation response message.
And when a payment initiating request initiated by the merchant terminal is received, calling a payment interface provided by the acquirer background server by using the terminal key, and initiating the payment request to the acquirer background server.
In one embodiment, a computer program product is provided, comprising a computer program which, when executed by a processor, performs the steps of:
receiving an activation application request sent by a collection terminal;
verifying the validity of the activation application request, if the verification result is legal, activating the money receiving terminal, and generating a terminal key for the money receiving terminal;
and returning an activation response message to the payee terminal.
In one embodiment, the computer program when executed by the processor further performs the steps of:
and acquiring the activation code and the service terminal number received by the merchant terminal, and sending an activation application request to a background server of the acquirer.
And receiving an activation response message returned by the receiving mechanism background server after the activation application request is verified to be legal, and returning activation success prompt information to the merchant terminal based on the activation response message.
And when a payment initiating request initiated by the merchant terminal is received, calling a payment interface provided by the acquirer background server by using the terminal key, and initiating the payment request to the acquirer background server.
It will be understood by those skilled in the art that all or part of the processes of the methods of the embodiments described above can be implemented by hardware instructions of a computer program, which can be stored in a non-volatile computer-readable storage medium, and when executed, can include the processes of the embodiments of the methods described above. Any reference to memory, database, or other medium used in the embodiments provided herein may include at least one of non-volatile and volatile memory. The nonvolatile Memory may include Read-Only Memory (ROM), magnetic tape, floppy disk, flash Memory, optical Memory, high-density embedded nonvolatile Memory, resistive Random Access Memory (ReRAM), Magnetic Random Access Memory (MRAM), Ferroelectric Random Access Memory (FRAM), Phase Change Memory (PCM), graphene Memory, and the like. Volatile Memory can include Random Access Memory (RAM), external cache Memory, and the like. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM), among others. The databases referred to in various embodiments provided herein may include at least one of relational and non-relational databases. The non-relational database may include, but is not limited to, a block chain based distributed database, and the like. The processors referred to in the embodiments provided herein may be general purpose processors, central processing units, graphics processors, digital signal processors, programmable logic devices, quantum computing based data processing logic devices, etc., without limitation.
After receiving an activation application request which is sent by a receiving terminal and carries a receiving terminal identifier, an activation code and a service terminal number, the computer device, the storage medium and the computer program product can carry out validity verification on the activation application request, can further activate the receiving terminal only under the condition that the activation application request is legal, and can generate a terminal key for the receiving terminal. And finally, feeding back an activation response message carrying the terminal key to the collection terminal so that the collection terminal and the acquirer background server complete the payment processing process when receiving the payment initiation request. Through the scheme, the activation application request carries the cash collection terminal identification, the activation code and the service terminal number, and the validity of the activation application request can be verified during activation operation, so that accurate activation of the designated cash collection terminal is guaranteed, and the condition that the cash collection terminal is replaced randomly for activation is avoided. Meanwhile, the scheme directly issues the terminal key to the collection terminal after generating the terminal key, does not need to use external tools such as mails and optical disks, and has higher transmission efficiency under the condition of effectively ensuring the transaction safety.
The technical features of the above embodiments can be arbitrarily combined, and for the sake of brevity, all possible combinations of the technical features in the above embodiments are not described, but should be considered as the scope of the present specification as long as there is no contradiction between the combinations of the technical features.
The above-mentioned embodiments only express several embodiments of the present application, and the description thereof is more specific and detailed, but not construed as limiting the scope of the present application. It should be noted that, for a person skilled in the art, several variations and modifications can be made without departing from the concept of the present application, which falls within the scope of protection of the present application. Therefore, the protection scope of the present application shall be subject to the appended claims.