CN111338611A - Electronic payment interface and method - Google Patents
Electronic payment interface and method Download PDFInfo
- Publication number
- CN111338611A CN111338611A CN201911139334.6A CN201911139334A CN111338611A CN 111338611 A CN111338611 A CN 111338611A CN 201911139334 A CN201911139334 A CN 201911139334A CN 111338611 A CN111338611 A CN 111338611A
- Authority
- CN
- China
- Prior art keywords
- payment
- transaction
- payment platform
- message
- platform
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F8/00—Arrangements for software engineering
- G06F8/30—Creation or generation of source code
- G06F8/31—Programming languages or programming paradigms
- G06F8/315—Object-oriented languages
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/04—Payment circuits
- G06Q20/06—Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/36—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
- G06Q20/367—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes
Landscapes
- Engineering & Computer Science (AREA)
- Business, Economics & Management (AREA)
- Accounting & Taxation (AREA)
- Theoretical Computer Science (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- Finance (AREA)
- Strategic Management (AREA)
- General Business, Economics & Management (AREA)
- Computing Systems (AREA)
- Computer Networks & Wireless Communication (AREA)
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
Abstract
The invention relates to the technical field of electronics, in particular to an electronic payment interface, which is characterized in that the electronic payment interface is realized by using a Microsoft Visual Studio2005 development platform and a C + + language and comprises a communication module, a transaction module, a safety module and a data storage module, wherein the payment interface is provided with a PI and a port number and maintains a CTP/IP long connection pair with the payment platform, the connection is kept with the payment platform all the time, and the port is monitored all the time and used for exchanging transaction information with the payment platform; the transaction module verifies the user name and the password after receiving the virtual currency payment request from the payment platform; the security module is connected with the SL securely, and the message communicated by the two parties is verified by using the digital signature, so that the system not only overcomes the defect that the password is easy to steal in an authentication mode, but also has the advantages of less resource occupation and simple implementation and maintenance.
Description
Technical Field
The invention relates to the technical field of electronics, in particular to an electronic payment interface and an electronic payment method.
Background
With the rapid development of the internet, electronic commerce shows vigorous vitality, the development of electronic commerce is very rapid in developed countries, transactions conducted through the internet become trend, and the development of electronic commerce requires three aspects of smooth information flow, fund flow and logistics so as to ensure the safety and speed of transactions.
Disclosure of Invention
The invention aims to provide an electronic payment interface and a method thereof aiming at the defects and shortcomings of the prior art, and the usable payment interface is designed and realized by utilizing security technologies and communication technologies such as an SL protocol, a digital certificate, a digital signature and the like.
In order to achieve the purpose, the invention adopts the technical scheme that:
the electronic payment interface is realized by utilizing a Microsoft Visual Studio2005 development platform and a C + + language and comprises a communication module, a transaction module, a safety module and a data storage module, wherein the payment interface is provided with a PI and a port number and maintains a CTP/IP long connection pair with the payment platform, the connection is kept with the payment platform all the time, and the port is monitored all the time and used for exchanging transaction information to the payment platform; the transaction module verifies the user name and the password after receiving the virtual currency payment request from the payment platform; the security module uses SL security connection and uses digital signature to verify the message of both parties.
In addition, the invention also designs an electronic payment method, which comprises the following steps:
(1) a user makes a request to a service provider;
(2) the service provider returns the relevant information to the user after obtaining the request;
(3) after the user finishes the virtual currency selection and finishes the user name and password input, sending a virtual currency payment request to the payment platform;
(4) the payment platform sends a deduction request to the virtual currency provider;
(5) the virtual currency provider returns a successful payment response;
(6) the payment platform sends a successful response of virtual currency payment to the user;
(7) the payment platform sends a request for submitting user services or products to a service provider;
(8) the service provider returns an accepted response;
(9) the service provider submits the service or product to the user and displays the information that the transaction was successful.
On the basis of the scheme, the interactive transaction information to the payment platform preferably comprises a message transceiving mechanism, a long connection mechanism, an automatic reconnection mechanism and an idle connection keep-alive mechanism, wherein the message transceiving mechanism is based on a CTP/PI connection pair established between the message transceiving mechanism and the payment platform, and a payment interface needs to provide support for a message transceiving function between the payment interface and the payment platform; the long connection mechanism payment platform and the payment interface are communicated by using long connection, and the payment platform is a communication server; the payment interface in the automatic reconnecting mechanism must be able to monitor the long connection state of the own party with the payment platform; the idle connection keep-alive mechanism is that the payment interface does not receive any information from the payment platform within a certain time, and then sends a probing message to the payment platform to detect whether the connection is normal or not.
On the basis of the above scheme, preferably, the payment platform, each VMPI and each VMI in the security module must have their own digital certificate, the public key length of all the digital certificates is 1024 bits, the public key index is 3, and the digital signature is used to verify the message communicated by both parties.
On the basis of the scheme, the payment interface is preferably designed based on an electronic payment system, the system takes a network as a center, and realizes an electronic payment function through a merchant, a consumer, a financial mechanism, a distribution center and a CA authentication mechanism, wherein the consumer accesses the Internet by using a browser, a television set-top box, a personal digital assistant and a video telephone to acquire information and purchase commodities; the merchant issues the message and accepts the order.
On the basis of the scheme, the communication between the payment interface payment platform and the payment interface is preferably carried out by using an SSL protocol, the safety of data transmission is guaranteed, after the payment interface receives the message, the encrypted data stream is analyzed, the verification is carried out by using a secret key in a digital certificate, the reliability of the message is guaranteed, on the basis of the reliability of the message, the transaction made in the message is carried out by a human background, then the transaction result is organized into the message, and the message is signed and then sent to the payment platform.
On the basis of the scheme, the transaction modules are preferably divided into three types: the method comprises the steps of consumption transaction, correction transaction and balance inquiry transaction, wherein under the premise that user validity verification is passed, responses are made to various transactions, whether the balance of a user is enough for the transaction is noticed in the consumption transaction, the user is prevented from correcting for many times in the correction transaction, all operations are used as a part of a returned response message and are sent to a payment platform when the transaction is ended, and meanwhile, the information of the transaction is also reserved in a local database and is used for offline settlement.
On the basis of the scheme, preferably, the method for safely processing the information in the transaction process by the payment interface comprises the following steps:
(1) the payment platform is kept connected with the payment platform in a long connection mode;
(2) an SL mechanism is adopted between the payment platform and the mobile terminal to ensure the safety of communication;
(3) installing a digital certificate authorized by a payment platform, and confirming the legality of the user and the transaction by using digital signature verification;
(4) establishing a database in a local server, and storing transactions and logs;
(5) the performance and the expansibility of the system are improved by using the configuration file;
(6) by using the log, information related to the transaction and error information during operation and communication are recorded, so that debugging and error detection are facilitated.
After adopting the structure, the invention has the beneficial effects that: the invention designs and realizes an available payment interface by using security technologies and communication technologies such as an SL protocol, a digital certificate, a digital signature and the like, overcomes the defect that password is easy to steal in the traditional authentication mode of teller number + password, and has the characteristics of less resource occupation, simple implementation and maintenance, strong system stability and the like.
Drawings
FIG. 1 is a schematic diagram of a payment method of the present invention;
FIG. 2 is a schematic diagram of the payment system of the present invention;
FIG. 3 is a flow chart of a payment interface of the present invention;
FIG. 4 is a flow chart of a transaction module of the present invention.
Detailed Description
The invention will be further described with reference to the accompanying drawings.
As shown in fig. 1 to 4, the electronic payment interface according to the present invention is implemented by using a microsoft visual Studio2005 development platform and C + + language, and includes a communication module, a transaction module, a security module and a data storage module, the payment interface provides a PI and a port number, and maintains a CTP/IP long connection pair with the payment platform, the connection maintains a connection with the payment platform all the time, and monitors the port all the time for exchanging transaction information with the payment platform; the transaction module verifies the user name and the password after receiving the virtual currency payment request from the payment platform; the security module uses SL security connection and uses digital signature to verify the message of both parties.
In addition, the invention also designs an electronic payment method, which comprises the following steps:
(1) a user makes a request to a service provider;
(2) the service provider returns the relevant information to the user after obtaining the request;
(3) after the user finishes the virtual currency selection and finishes the user name and password input, sending a virtual currency payment request to the payment platform;
(4) the payment platform sends a deduction request to the virtual currency provider;
(5) the virtual currency provider returns a successful payment response;
(6) the payment platform sends a successful response of virtual currency payment to the user;
(7) the payment platform sends a request for submitting user services or products to a service provider;
(8) the service provider returns an accepted response;
(9) the service provider submits the service or product to the user and displays the information that the transaction was successful.
On the basis of the scheme, the interactive transaction information to the payment platform preferably comprises a message transceiving mechanism, a long connection mechanism, an automatic reconnection mechanism and an idle connection keep-alive mechanism, wherein the message transceiving mechanism is based on a CTP/PI connection pair established between the message transceiving mechanism and the payment platform, and a payment interface needs to provide support for a message transceiving function between the payment interface and the payment platform; the long connection mechanism payment platform and the payment interface are communicated by using long connection, and the payment platform is a communication server; the payment interface in the automatic reconnecting mechanism must be able to monitor the long connection state of the own party with the payment platform; the idle connection keep-alive mechanism is that the payment interface does not receive any information from the payment platform within a certain time, and then sends a probing message to the payment platform to detect whether the connection is normal or not.
Furthermore, the payment platform, each VMPI and each VMI in the security module must have their own digital certificate, the public key length of all the digital certificates is 1024 bits, the public key index is 3, and the digital signature is used to verify the message communicated by both parties.
Furthermore, the payment interface is designed based on an electronic payment system, the system takes a network as a center, and realizes an electronic payment function through a merchant, a consumer, a financial mechanism, a distribution center and a CA authentication mechanism, wherein the consumer accesses the Internet by using a browser, a television set-top box, a personal digital assistant and a video telephone to acquire information and purchase commodities; the merchant issues the message and accepts the order.
Furthermore, the communication between the payment interface payment platform and the payment interface uses an SSL protocol to ensure the safety of data transmission, after the payment interface receives the message, the encrypted data stream is analyzed, the encrypted data stream is verified by using a secret key in a digital certificate to ensure the reliability of the message, on the basis of the reliability of the message, the transaction is transferred to a background to carry out the transaction formulated in the message, then the transaction result is organized into the message, and the message is signed and then sent to the payment platform.
Further, the transaction modules are divided into three categories: the method comprises the steps of consumption transaction, correction transaction and balance inquiry transaction, wherein under the premise that user validity verification is passed, responses are made to various transactions, whether the balance of a user is enough for the transaction is noticed in the consumption transaction, the user is prevented from correcting for many times in the correction transaction, all operations are used as a part of a returned response message and are sent to a payment platform when the transaction is ended, and meanwhile, the information of the transaction is also reserved in a local database and is used for offline settlement.
Further, the method for the payment interface to safely process the information in the transaction process is as follows:
(1) the payment platform is kept connected with the payment platform in a long connection mode;
(2) an SL mechanism is adopted between the payment platform and the mobile terminal to ensure the safety of communication;
(3) installing a digital certificate authorized by a payment platform, and confirming the legality of the user and the transaction by using digital signature verification;
(4) establishing a database in a local server, and storing transactions and logs;
(5) the performance and the expansibility of the system are improved by using the configuration file;
(6) by using the log, information related to the transaction and error information during operation and communication are recorded, so that debugging and error detection are facilitated.
The safety technical principle in the electronic payment process of the invention is as follows:
(1) asymmetric encryption technology: asymmetric encryption, also known as public key encryption, means that a key is broken down into a pair, i.e. a public key (encryption key) and a private key (decryption key). Either one of the pair of keys may be made public to others in an unsecured manner as a public key (encryption key), while the other is kept as a private key (decryption key). The public key is used to encrypt the confidential information, and the private key is used to decrypt the encrypted information. Anyone can encrypt information using a public key, but only the owner of the private key that matches the public key can decrypt the information. At present, the commonly used asymmetric encryption algorithm is the RSA algorithm, which has been recommended by the SIO/TC data encryption technical division committee s 0 as the asymmetric key data encryption standard. .
(2) The security authentication technology comprises the following steps: authentication technology is an effective method for preventing information from being falsified, deleted, reproduced, and forged, and provides a transmitted message with the ability to be verified, enabling a recipient to recognize and confirm the authenticity of the message. Its implementation includes techniques such as digital signatures, digital certificates, etc.; the digital signature technology adopts an encryption and decryption algorithm system of an encryption technology to realize digital signature on the message. The digital signature can realize the following functions that the receiver can verify that the sender can not deny the sent message after the real identity of the sender, and the receiver or an illegal person can not forge or falsify the message. When two parties dispute about the authenticity of the signature, the third party can solve the dispute Sichuan digital certificate between the two parties, and the identity of a user and the access authority to the network resource are verified by an electronic means. A set of strict identity authentication system is established by using a digital certificate and by applying cryptographic technologies such as a symmetric cryptosystem and an asymmetric cryptosystem, so that information is not stolen by other people except a sender and a receiver; the information is not tampered in the transmission process; the sender can confirm the identity of the receiver through the digital certificate; the sender cannot repudiate the own information, etc.
(3) Secure sockets, which may be referred to as cryptographic communication protocols for short. The communication (including E-mail) content can be encrypted with high intensity by using SL to prevent hackers from monitoring the communication content and even the user password; the SLs protocol is a data security protocol between TCP/PI and various application layer protocols, and can be divided into two layers. The SSL recording protocol of the lower layer is established on a reliable transmission protocol (such as CTP), and provides support for basic functions of data encapsulation, compression, MA C (MA C) and encryption and the like for a higher layer protocol; the services provided by the SSL protocol can be summarized into three aspects of legality authentication of the user and the server, encryption of data, and protection of the integrity of the data z [ ]. sLs is independent of the application protocol, and a higher layer protocol can be transparently located on top of the SL protocol.
The electronic payment system of the invention is an important component and bottleneck mouth of an electronic commerce system, which means that consumers, merchants, financial institutions and the like exchange goods or services by using a safe electronic means, namely, payment information of a novel payment means (comprising electronic cash, credit cards, debit cards, intelligent cards and the like) is safely transmitted to banks or corresponding processing mechanisms through a network to realize electronic payment.
The invention designs and realizes an available payment interface by using security technologies and communication technologies such as an SL protocol, a digital certificate, a digital signature and the like, overcomes the defect that password is easy to steal in the traditional authentication mode of teller number + password, and has the characteristics of less resource occupation, simple implementation and maintenance, strong system stability and the like.
The above description is only a preferred embodiment of the present invention, and all equivalent changes or modifications of the structure, characteristics and principles described in the present invention are included in the scope of the present invention.
Claims (8)
1. An electronic payment interface, characterized in that, the electronic payment interface is realized by using Microsoft Visual Studio2005 development platform and C + + language, including communication module, transaction module, security module and data storage module, the payment interface provides a PI and a port number, and maintains a CTP/IP long connection pair with the payment platform, the connection maintains the connection with the payment platform all the time, monitors the port all the time, used for interacting transaction information to the payment platform; the transaction module verifies the user name and the password after receiving the virtual currency payment request from the payment platform; the security module uses SL security connection and uses digital signature to verify the message of both parties.
2. An electronic payment method, characterized by: the method comprises the following steps:
(1) a user makes a request to a service provider;
(2) the service provider returns the relevant information to the user after obtaining the request;
(3) after the user finishes the virtual currency selection and finishes the person input of the user name and the password, the user sends a virtual currency payment request to a payment platform;
(4) the payment platform sends a deduction request to the virtual currency provider;
(5) the virtual currency provider returns a successful payment response;
(6) the payment platform sends a successful response of virtual currency payment to the user;
(7) the payment platform sends a request for submitting user services or products to a service provider;
(8) the service provider returns an accepted response;
(9) the service provider submits the service or product to the user and displays the information that the transaction was successful.
3. An electronic payment interface as recited in claim 1, wherein: the interactive transaction information to the payment platform comprises message receiving and sending, a long connection mechanism, an automatic reconnection mechanism and an idle connection keep-alive mechanism, wherein the message receiving and sending is based on a CTP/PI connection pair established between the message receiving and sending and the payment platform, and a payment interface needs to provide support for a message receiving and sending function between the message receiving and sending and the payment platform; the long connection mechanism payment platform and the payment interface are communicated by using long connection, and the payment platform is a communication server; the payment interface in the automatic reconnecting mechanism must be able to monitor the long connection state of the own party with the payment platform; the idle connection keep-alive mechanism is that the payment interface does not receive any information from the payment platform within a certain time, and then sends a probing message to the payment platform to detect whether the connection is normal or not.
4. An electronic payment interface as recited in claim 1, wherein: the payment platform, each VMPI and each VMI in the security module must have respective digital certificates, the public key length of all the digital certificates is 1024 bits, the public key index is 3, and the digital signature is used for verifying the message communicated by the two parties.
5. An electronic payment interface as recited in claim 1, wherein: the payment interface is designed based on an electronic payment system, the system takes a network as a center, and realizes an electronic payment function through a merchant, a consumer, a financial mechanism, a distribution center and a CA authentication mechanism, wherein the consumer accesses the Internet by using a browser, a television set-top box, a personal digital assistant and a video telephone to acquire information and purchase commodities; the merchant issues the message and accepts the order.
6. An electronic payment interface as recited in claim 2, wherein: the communication between the payment interface payment platform and the payment interface uses an SSL protocol to ensure the safety of data transmission, after the payment interface receives a message, the payment interface analyzes an encrypted data stream, and verifies the encrypted data stream by using a secret key in a digital certificate to ensure the reliability of the message, on the basis of the reliability of the message, the transaction interface changes a person to a background to perform the transaction formulated in the message, then the transaction result is organized into the message, and the message is signed and then sent to the payment platform.
7. An electronic payment interface as recited in claim 1, wherein: the transaction modules are divided into three categories: the method comprises the steps of consumption transaction, correction transaction and balance inquiry transaction, wherein under the premise that user validity verification is passed, responses are made to various transactions, whether the balance of a user is enough for the transaction is noticed in the consumption transaction, the user is prevented from correcting for many times in the correction transaction, all operations are used as a part of a returned response message and are sent to a payment platform when the transaction is ended, and meanwhile, the information of the transaction is also reserved in a local database and is used for offline settlement.
8. An electronic payment method according to claim 2 wherein: the method for safely processing information in the transaction process by the payment interface comprises the following steps:
(1) the payment platform is kept connected with the payment platform in a long connection mode;
(2) an SL mechanism is adopted between the payment platform and the mobile terminal to ensure the safety of communication;
(3) installing a digital certificate authorized by a payment platform, and confirming the legality of the user and the transaction by using digital signature verification;
(4) establishing a database in a local server, and storing transactions and logs;
(5) the performance and the expansibility of the system are improved by using the configuration file;
(6) by using the log, information related to the transaction and error information during operation and communication are recorded, so that debugging and error detection are facilitated.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911139334.6A CN111338611A (en) | 2019-11-20 | 2019-11-20 | Electronic payment interface and method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911139334.6A CN111338611A (en) | 2019-11-20 | 2019-11-20 | Electronic payment interface and method |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN111338611A true CN111338611A (en) | 2020-06-26 |
Family
ID=71183267
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201911139334.6A Withdrawn CN111338611A (en) | 2019-11-20 | 2019-11-20 | Electronic payment interface and method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111338611A (en) |
-
2019
- 2019-11-20 CN CN201911139334.6A patent/CN111338611A/en not_active Withdrawn
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US6078902A (en) | System for transaction over communication network | |
| JP6012125B2 (en) | Enhanced 2CHK authentication security through inquiry-type transactions | |
| CN101848090B (en) | Authentication device and system and method using same for on-line identity authentication and transaction | |
| CN102118251B (en) | Security authentication method for internet banking remote payment based on multi-interface intelligent safety card | |
| CN103020825B (en) | A kind of secure payment authentication method based on software client | |
| CN107609866B (en) | Electronic payment and electronic cash collection method and device based on virtual currency | |
| CN103326862B (en) | Electronically signing method and system | |
| WO2005064503A1 (en) | A safe network payment system and safe network payment authentication method | |
| CN101901517A (en) | Fingerprint payment certificate server, fingerprint payment method and system thereof | |
| TWI591553B (en) | Systems and methods for mobile devices to trade financial documents | |
| CN102202300A (en) | System and method for dynamic password authentication based on dual channels | |
| WO2012167941A1 (en) | Method to validate a transaction between a user and a service provider | |
| WO2008054407A2 (en) | Asynchronous encryption for secured electronic communications | |
| WO2015135384A1 (en) | O2o secure payment method and system, and pos terminal | |
| WO2007092577A2 (en) | A point-of-sale terminal transactions using mutating identifiers | |
| CN109741068A (en) | Internetbank inter-bank contracting method, apparatus and system | |
| CN103489104A (en) | Security payment method and system | |
| CN103353973B (en) | Banking transaction authentication method and system based on audio authentication | |
| WO2007121631A1 (en) | System and method of electronic bank safety certification based on cpk | |
| CN115760082B (en) | Digital payment processing method, device, equipment, system and medium | |
| CN105809417A (en) | Safe reliable real-time electronic payment settlement merchant terminal, user terminal, bank front-end system, system, and method | |
| CN102611702B (en) | A kind of system and method ensureing safety of network trade | |
| HK1206467A1 (en) | Internet-based secure payment system and secure payment method | |
| CN106033571A (en) | Trading method of electronic signature devices, electronic signature devices and trading system | |
| CN101521576B (en) | Method and system for identity authentication of internet user |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WW01 | Invention patent application withdrawn after publication |
Application publication date: 20200626 |
|
| WW01 | Invention patent application withdrawn after publication |