Method of authenticating biological payment device, apparatus, electronic device, and computer-readable medium

Authentication method, device, computer equipment and storage medium for biometric payment equipment

Method of Authenticating Biological Payment Device, Apparatus, Electronic Device, and Computer-readable Medium

The present application relates to the technical field of Internet communication, and in particular, to an authentication method, device, computer equipment and storage medium of a biological payment device.

With the development of bio-payment technology, bio-payment is widely used in a variety of business scenarios. Taking face-swiping payment in the biological payment scenario as an example, a specific application scenario is: after the cashier terminal obtains the payment amount, it calls the camera to collect the user's face image and sends it to the payment system. After the face image recognition is passed, the payment code is returned to the cashier terminal, and the cashier terminal initiates a payment request to the payment system according to the payment code to complete the payment.

Face-swiping payment does not require the user to operate the payment code on the terminal, but is generated by the payment system based on the face image collected by the cashier terminal. Therefore, the access cashier device needs to be authenticated to ensure the security of the user's capital account. The authentication of the traditional face payment device is a simple mapping relationship authentication. The device's signature string and device number are stored in the system properties, and the device authentication interface is called for device authentication. The payment authentication server verifies the device number, thereby realizing two-way authentication between the device and the payment system, trusting each other's identities, and establishing a two-way secure link.

In practical applications, it is relatively simple to use the mapping relationship between the signature and the device code for authentication. Another device can pretend to be a device for device authentication by migrating the device code and device signature, thus affecting the security performance of biometric payment.

According to various embodiments of the present application, an authentication method, apparatus, computer device and storage medium of a biometric payment device are provided.

An authentication method for a biometric payment device, the method comprising: obtaining a key of the device, wherein the key is a key recognized by the payment authentication server obtained through the communication between the manufacturer's device and the payment authentication server in the production stage ; Generate a signature according to the key and device information; send an authentication request to a payment authentication server based on the device information and the signature, the authentication request instructing the payment authentication server to sign the signature according to the device information Carry out verification, and generate an authentication result for the biometric payment device according to the verification result; and receive the authentication result returned by the payment authentication server, and the authentication result causes the payment authentication server to transmit based on the authenticated biometric payment device. Biological data realize biological payment.

An authentication method for a biometric payment device, comprising: receiving an authentication request sent by a biometric payment device based on a signature and device information, wherein the signature is generated by the biometric payment device according to a key and device information, and the key is a production stage A key recognized by the payment authentication server obtained through the communication between the manufacturer's device and the payment authentication server; verifying the signature according to the device information; generating an authentication result for the biometric payment device according to the verification result; and Return the authentication result to the biometric payment device to realize biometric payment based on the biometric data sent by the authenticated biometric payment device.

An authentication device for a biological payment device, the device comprises: a key acquisition module for acquiring a key of the device, wherein the key is obtained through the communication between the manufacturer's device and the payment authentication server in the production stage. a key recognized by the payment authentication server; a signature module for generating a signature based on the key and device information; an authentication module for sending an authentication request to the payment authentication server based on the device information and the signature, The authentication request instructs the payment authentication server to verify the signature according to the device information, and generates an authentication result for the biological payment device according to the verification result; a receiving module is used to receive the payment authentication server The server returns an authentication result, and the authentication result enables the payment authentication server to implement biometric payment based on the biometric data sent by the authenticated biometric payment device.

An authentication device for a biometric payment device, comprising: an authentication acquisition module for receiving an authentication request sent by the biometric payment device based on signature device information, wherein the signature is generated by the biometric payment device according to a key and device information, and the signature is The key is a key recognized by the payment authentication server obtained through the communication between the manufacturer's equipment and the payment authentication server in the production stage; the verification module is used to verify the signature according to the device information; the authentication module is used to generate the authentication result for the biological payment device according to the verification result; the sending module is used to return the authentication result to the biological payment device, so as to realize the biological payment based on the biological data sent by the authenticated biological payment device.

A computer device includes a memory and a processor, the memory stores a computer program, and the processor implements the following steps when executing the computer program: acquiring a key of the device, wherein the key is a key that has passed the production stage. A key recognized by the payment authentication server obtained by the manufacturer's device communicating with the payment authentication server; generating a signature based on the key and device information; sending an authentication request to the payment authentication server based on the device information and the signature , the authentication request instructs the payment authentication server to verify the signature according to the device information, and generate an authentication result for the biological payment device according to the verification result; receive the payment authentication server to return the authentication result, The authentication result enables the payment authentication server to implement biometric payment based on the biometric data sent by the authenticated biometric payment device.

A computer device includes a memory and a processor, the memory stores a computer program, and the processor implements the following steps when executing the computer program: receiving an authentication request sent by a biometric payment device based on a signature and device information, wherein, The signature is generated by the biometric payment device according to a key and device information, and the key is a key recognized by the payment authentication server obtained through the communication between the manufacturer's device and the payment authentication server in the production stage; according to the The device information verifies the signature; generates an authentication result for the biometric payment device according to the verification result; and returns the authentication result to the biometric payment device to realize biometric payment based on the biometric data sent by the authenticated biometric payment device.

A computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented: obtaining a key of a device, wherein the key is a production stage through the manufacturer's device and a payment authentication server. The key recognized by the payment authentication server obtained by communication with the payment authentication server; a signature is generated according to the key and the device information, and an authentication request is sent to the payment authentication server based on the signature, and the authentication request carries the device identification, so the The authentication request instructs the payment authentication server to verify the signature according to the device identification, and generates an authentication result for the biological payment device according to the verification result; receiving the payment authentication server to return the authentication result, the The authentication result enables the payment authentication server to implement biometric payment based on the biometric data sent by the authenticated biometric payment device.

A computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, realizes the following steps: receiving an authentication request sent by a biometric payment device based on a signature and device information, wherein the signature is generated by the biometric payment device. The payment device generates according to the key and device information, and the key is a key recognized by the payment authentication server obtained through the communication between the manufacturer's device and the payment authentication server in the production stage; the signature is performed according to the device information. verifying; generating an authentication result for the biometric payment device according to the verification result; and returning the authentication result to the biometric payment device to realize biometric payment based on the biometric data sent by the authenticated biometric payment device.

A computer program comprising computer instructions stored in a computer-readable storage medium. The processor of the computer device reads the computer instruction from the computer-readable storage medium, and the processor executes the computer instruction, so that the computer device performs the steps in the above method embodiments.

In order to make the purpose, technical solutions and advantages of the present application more clearly understood, the present application will be described in further detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application, but not to limit the present application.

The authentication method of the face payment device provided in this application can be applied to the application environment shown in FIG. 1 . Among them, the biometric payment device 102 communicates with the payment authentication server 104 through the network, and the biometric payment device obtains the key of the device, wherein the key is obtained through the communication between the manufacturer's device and the payment authentication server in the production stage A key recognized by the payment authentication server; a signature is generated based on the key and device information; an authentication request is sent to the payment authentication server based on the signature, the authentication request carries the device identification, and the authentication request instructs the payment authentication server to perform the signature according to the device identification. Verification, and generate the authentication result for the biometric payment device according to the verification result; the authentication result is returned by the payment authentication server, and the authentication result enables the payment authentication server to realize the biometric payment based on the biometric data sent by the authenticated biometric payment device. The biometric payment device 102 can be a cash register terminal with a device for acquiring human biometric data, including hardware devices such as a fingerprint acquisition device and an image acquisition device, and the payment authentication server 104 can be an independent server or multiple servers. A server cluster is formed to achieve this.

In one embodiment, as shown in FIG. 2 , an authentication method for a biological payment device is provided, and the method is applied to the biological payment device in FIG. 1 as an example to illustrate, including the following steps:

Step S202: Obtain the key of the device, wherein the key is a key recognized by the payment authentication server obtained through the communication between the manufacturer's device and the payment authentication server in the production stage.

Biological payment refers to a payment method that collects human biological data as payment vouchers. Human biological data includes fingerprints, face, handwriting, voice and gait. Unlike scanning code payment, which is generated by the user by operating a personal mobile phone to generate a highly private payment code, human biometric data is a kind of data that can be obtained through public means, such as collecting faces through cameras, collecting sounds through microphones, and collecting gait through cameras. . Therefore, in a certain way, the human body characteristic data is a kind of public data, which requires the bio-payment device to be authenticated to ensure the security of the payment communication link.

In order to ensure the security of bio-payment, on the one hand, ensure that the bio-payment device is a qualified device produced by a manufacturer who has passed the payment platform qualification certification, and obtain the key for authentication. When the cashier terminal is used, it communicates with the payment authentication server, generates a signature according to the key, and establishes a secure link between the biometric payment device and the payment authentication server after the payment authentication server verifies the signature.

Among them, the manufacturer refers to the manufacturer of the bio-payment device. The manufacturer obtains the qualification to produce the bio-payment device that can be certified by the payment platform through the merchant platform of the payment platform as a merchant of the payment platform. The bio-payment completed by the manufacturer The device needs to pass the acceptance of the payment platform, and then be sold to the merchant as the merchant's cashier terminal.

The manufacturer's equipment is a communication tool between the manufacturer and the payment authentication server, and is an auxiliary tool for equipment production. After the production of the biometric payment device is completed, the device key recognized by the payment authentication server is obtained through the communication between the manufacturer's device and the payment authentication server.

In one embodiment, the device key is obtained by generating a public and private key in the bio-payment device during the production phase, and exporting the public key to the manufacturer's device. Upload the public key to the payment authentication server. That is, the private key is generated and stored locally on the biometric payment device, and the public key is uploaded to the payment authentication server. Since the public key is uploaded by the qualified manufacturer's device, and the payment authentication server has a matching public key with the biometric payment device. The key, thus, the private key local to the biometric payment device is the key recognized by the payment authentication server.

In one embodiment, the device key is obtained by transferring the device information from the bio-payment device to the manufacturer's device during the production stage. Since the manufacturer has passed the qualification certification of the payment platform, the device information can be uploaded to the payment authentication server through the manufacturer's device. The payment authentication server generates the key according to the device information, and returns it to the manufacturer's device, and the manufacturer's device burns the key to the biometric payment device. Since the key is generated by the payment authentication server based on the device information, the key is recognized by the payment authentication server.

Step S204, generating a signature according to the key and device information.

Specifically, the biometric payment device generates a signature for the device information according to the key, that is, encrypts the device information with the key, and the obtained ciphertext is the signature of this transmission process. Device information refers to the information that can identify the identity of the biometric payment device, which can be device ID, device MAC address, etc.

Step S206, send an authentication request to the payment authentication server based on the device information and the signature, the authentication request instructs the payment authentication server to verify the signature according to the device information, and generate an authentication result for the biometric payment device according to the verification result.

The biometric payment device sends an authentication request to the payment authentication server based on the device information and signature. The device information sent to the payment authentication server is the same device information used by the biometric payment device to generate the signature. After the payment authentication server receives the authentication request, it obtains the decryption method corresponding to the biometric payment device according to the device ID. Verify whether the decrypted device information is consistent with the received device information, and generate an authentication result for the biometric payment device according to the verification result.

If the decrypted device information is consistent with the received device information, the signature verification is passed, the verification result of the signature verification is passed, and the authentication result of the biometric payment device is further obtained. If the device information obtained by decryption is inconsistent with the received device information, the signature verification fails, the verification result of the signature verification failure is obtained, and the authentication result of the biometric payment device verification failure is further obtained.

Step S208, receiving the authentication result returned by the payment authentication server, and the authentication result enables the payment authentication server to realize biometric payment based on the biometric data sent by the authenticated biometric payment device.

Specifically, after the payment authentication server is authenticated, the payment authentication server registers the biometric payment device that has passed the authentication, and establishes a secure link between the biometric payment device and the payment authentication server. The biological payment device collects biological data, and sends the collected biological data and device identification to the payment authentication server. The payment authentication server determines whether the biometric payment device is an authenticated device according to the device identification, and if so, matches the collected biometric data with the user's characteristic data stored in the database, and generates a payment code according to the matched user account information. , return the payment code to the biometric payment device, and the biometric payment device initiates payment to the payment authentication server according to the payment code, and the payment authentication server deducts the payment from the corresponding account. If the authentication server determines that the biometric payment device is a non-authenticated device according to the device identification, the payment request of the biometric payment device will not be processed, and it will be identified as an illegal device to ensure the security of the user's payment account.

The authentication method of the above-mentioned biological payment device, the key of the biological payment device is the key recognized by the payment authentication server obtained through the communication between the manufacturer's device and the payment authentication server in the production stage, and then use the key to generate signature information, send Verify the signature to the payment authentication server, and the signature is generated based on the key on the biometric payment device. The key has a high security level, and other terminals cannot obtain the key to generate the signature and pretend to be the device for device authentication. According to the authentication result, the payment verification server can determine which device is sending the biometric data, and whether it is a device certified by the payment platform. Only the biometric data collected by the biometric payment device authenticated by the payment verification server is used in the payment verification server. The payment code can only be obtained from the device side, thus ensuring the security performance of biological payment.

In another embodiment, the method of obtaining a key recognized by the payment authentication server through communication between the manufacturer's device and the payment authentication server in the production stage includes: generating a public key and a private key according to a key production instruction; The public key is issued to the manufacturer's device, and the manufacturer's device uploads the public key to the payment authentication server.

Specifically, after the hardware production of the biological payment device is completed, the device key needs to be configured before leaving the factory. Figure 3 shows a schematic diagram of the production environment. The biometric payment device 302 is connected with the manufacturer device 304 , and the manufacturer device 304 is connected in communication with the payment authentication server 306 .

Among them, the key production instruction refers to the instruction used to initiate the generation of the public key and the private key during the production process of the biological payment device. Specifically, after the hardware production of the bio-payment device is completed, the bio-payment device is equipped with an operating system, runs the operating system, and generates a public key and a private key according to the key production instruction.

The public key and the private key are a key pair obtained by using an asymmetric encryption algorithm. One of them is disclosed to the outside world, which is called the public key, and the other is kept by itself, which is called the private key. The key pair obtained by this algorithm is guaranteed to be unique in the world. When using a key pair, if a piece of data is encrypted with one key, it must be decrypted with the other key. For example, encryption with the private key must be decrypted with the public key, otherwise the decryption will not succeed.

In this application, the private key is held by the owner of the key pair, that is, the private key is held by the biological payment device and cannot be published, and the public key is published by the key pair holder to the payment verification server. Specifically, the manufacturer's device approved by the payment authentication server is published to the payment authentication server. Since the payment authentication server obtains the public key corresponding to the private key of the biometric payment device, the encrypted file of the private key can be decrypted. , so that the private key in the biometric payment device is recognized by the payment authentication server, and the data encrypted by the biometric payment device using the private key can be decrypted through the public key in the payment authentication server.

In this embodiment, by generating the public key and the private key in the biological payment device, the private key is not remitted, but only the public key is remitted to the payment authentication server, so that the key of the biological payment device cannot be copied, Avoid impersonation of bio-payment equipment and ensure the security of bio-payment.

In one embodiment, the biometric payment device is equipped with a Secure Element (SE). The security chip is a hardware chip independent of the main chip of the biological payment device. It can prevent external malicious analysis attacks and protect the security of core sensitive data. It has a cryptographic algorithm logic circuit in the chip, which can provide secure cryptographic algorithms to the outside world. legal services. The security chip can not only prevent logical attacks from the software layer, but also resist physical attacks. Even if it is physically destroyed and disassembled, it can also protect the safety of the data stored in it.

As shown in Figure 4, the authentication of bio-payment devices using a secure chip consists of two stages:

The first stage is the production stage: the production stage communicates with the payment authentication server through the manufacturer's equipment to obtain a key recognized by the payment authentication server.

Specifically, the biometric payment device is connected to the security chip, and the security chip of the biometric payment device is controlled to generate a public key and a private key according to the key production instruction.

Specifically, the main chip of the bio-payment device uses the key generation method of the secure chip to control the secure chip to generate a public key and a private key. Compared with the main chip of bio-payment, the security chip is a separate hardware environment. The generated public key and private key are isolated from the main chip from the hardware. Even if the main chip is attacked, the security of the key can still be ensured. Therefore, the security level of generating the public key and the private key using the secure wafer is high.

The biometric payment device transfers the public key to the manufacturer's device, and the manufacturer's device uploads the public key to the payment authentication server through a secure interface.

Specifically, according to the national encryption standard for secure chips, only the public key of the encryption key can be exported, and the private key cannot be exported. The server holds the public key of the biometric payment device, so that the payment authentication server has the ability to decrypt the data encrypted with the private key of the biometric payment device. In practical applications, the manufacturer's device uploads the device ID and public key to the payment authentication server, and the payment authentication server establishes the corresponding relationship between the device ID and the public key, which is convenient for subsequent quick search and matching to the corresponding biometric payment device. public key.

Among them, the manufacturer is certified by the payment platform and has the production qualification, so the public key uploaded by the manufacturer is recognized by the payment authentication server, and then the payment authentication server recognizes the private key corresponding to the public key. The payment authentication server establishes the corresponding relationship between the device ID and the public key, and returns the upload result to the manufacturer's device. So far, the first stage of authentication is completed, the public key is uploaded to the payment authentication server, and the private key is stored in the security chip of the biometric payment device.

The second stage is the merchant authentication stage. For the biometric payment device located on the merchant side, use the private key recognized by the payment authentication server to authenticate to the payment authentication server to establish a secure link between the biometric payment device and the payment authentication server.

Wherein, when the biometric payment device on the merchant side needs to establish a communication connection with the payment authentication server, it needs to authenticate to the payment authentication server to establish a secure communication link with the payment authentication server.

First, the biometric payment device control security chip on the merchant side generates a signature based on the private key and device information.

In this embodiment, the signature is generated in the security chip, which can prevent the signature from being migrated. Generate a signature on the device information according to the private key to prevent the device information from being tampered with during the transmission process. In order to improve the timeliness of the signature, the device information and time stamp can be signed by using the private key. Therefore, the payment verification server verifies whether the device information has been tampered with, and also verifies the validity of the time, thereby further improving the payment security. Secondly, by sending the signature to the payment authentication server, the payment authentication server obtains the public key corresponding to the private key and verifies the signature. Specifically, after receiving the authentication request, the payment authentication server obtains the corresponding public key according to the device information, uses the public key to verify the signature, decrypts the signature according to the public key to obtain the device information, and verifies the decrypted device information. Whether it is consistent with the received device information, the verification result of the signature is obtained.

At the same time, the timestamp of the signature is also verified, and the validity period of the signature is verified according to the current time and the timestamp in the signature information, which further improves payment security. If the decrypted device information is consistent with the received device information and the time is valid, the signature verification is passed, and the biometric payment device authentication result is obtained. If the device information obtained by verification and decryption is inconsistent with the received device information, or the time exceeds the validity period, the signature verification fails, and the result of biometric payment device authentication failure is obtained.

Thirdly, the payment authentication server returns an authentication result to the biometric payment device, and the authentication result enables the payment authentication server to realize biometric payment based on the biometric data sent by the authenticated biometric payment device.

Specifically, after the payment authentication server is authenticated, the payment authentication server registers the biometric payment device that has passed the authentication, and establishes a secure link between the biometric payment device and the payment authentication server. The biological payment device collects biological data, and sends the collected biological data and device identification to the payment authentication server. The payment authentication server determines whether the biometric payment device is an authenticated device according to the device identification, and if so, matches the collected biometric data with the user's characteristic data stored in the database, and generates a payment code according to the matched user account information. , return the payment code to the biometric payment device, and the biometric payment device initiates payment to the payment authentication server according to the payment code, and the payment authentication server deducts the payment from the corresponding account. If the authentication server determines that the biometric payment device is an unauthenticated device according to the device identifier, the payment request of the biometric payment device will not be processed, and it will be regarded as an illegal device to ensure the security of the user's payment account.

In this embodiment, by using the security chip, the public and private keys are generated from the isolated hardware and the signature is generated, and the public key is only remitted once, and the private key cannot be remitted, so that the key of the biological payment device cannot be copied. To avoid impersonation of bio-payment devices, the hardware isolation enables the authentication method to have the highest level of security.

In one embodiment, the biological payment device is equipped with an executable environment (Trusted Execution Environment, TEE). The executable environment draws on the idea of trusted computing technology and aims to protect security-sensitive code execution and related data information from malicious adversaries. and destruction is the basis for establishing a trusted mobile terminal platform. TEE is mainly composed of microkernel operating system, which is isolated from the rich execution environment composed of common terminal operating system. TEE can resist attacks from the software layer, and its security protection capability is lower than that of SE.

As shown in Figure 5, the authentication of a biometric payment device using an executable environment includes two stages:

The first stage is the production stage: the production stage communicates with the payment authentication server through the manufacturer's equipment to obtain a key recognized by the payment authentication server.

Specifically, the biological payment device is equipped with an executable environment, and a public key and a private key are generated based on the executable environment. Since the executable environment is composed of a microkernel operating system and is isolated from a rich execution environment composed of a common terminal operating system, the key can be isolated on the software and the security level of the key can be improved.

The biometric payment device transfers the public key to the manufacturer's device, and the manufacturer's device uploads the public key to the payment authentication server through a secure interface.

In this embodiment, the private key is generated in an executable environment, the private key cannot be exported, and the public key is only exported once and uploaded to the payment authentication server. Therefore, the payment authentication server holds the public key of the biometric payment device, so that the payment authentication server has the ability to decrypt the data encrypted by the private key of the biometric payment device. In practical applications, the manufacturer's device uploads the device ID and public key to the payment authentication server, and the payment authentication server establishes the corresponding relationship between the device ID and the public key, which is convenient for subsequent quick search and matching to the corresponding biometric payment device. public key.

Among them, the manufacturer is certified by the payment platform and has the production qualification, so the public key uploaded by the manufacturer is recognized by the payment authentication server, and then the payment authentication server recognizes the private key corresponding to the public key. The payment authentication server establishes the corresponding relationship between the device ID and the public key, and returns the upload result to the manufacturer's device. At this point, the first stage of authentication is completed, the public key is uploaded to the payment authentication server, and the private key is stored in the biometric payment device.

The second stage is the merchant authentication stage. For the biometric payment device located on the merchant side, use the private key recognized by the payment authentication server to authenticate to the payment authentication server to establish a secure link between the biometric payment device and the payment authentication server.

Wherein, when the biometric payment device on the merchant side needs to establish a communication connection with the payment authentication server, it needs to authenticate to the payment authentication server to establish a secure communication link with the payment authentication server.

First, the biometric payment device on the merchant side generates a signature based on the executable environment based on the private key and device information.

Secondly, the signature is sent to the payment authentication server, and the payment authentication server obtains the public key corresponding to the private key to verify the signature.

Thirdly, the payment authentication server returns an authentication result to the biometric payment device, and the authentication result enables the payment authentication server to realize biometric payment based on the biometric data sent by the authenticated biometric payment device.

The authentication process is the same as the authentication process based on the security chip, and will not be repeated here.

In this embodiment, by using the executable environment, the public and private keys are generated from the software and the signature is generated, and the public key is only exported once, and the private key cannot be exported, so that the key of the biological payment device cannot be copied, avoiding biological Payment devices are impersonated, and isolation from software enables authentication methods with a high level of security.

In another embodiment, for a biological payment device that does not support TEE nor SE, as shown in Figure 6, the authentication of the biological payment device includes two stages:

The first stage is the production stage. In the production stage, the manufacturer's equipment communicates with the payment authentication server to obtain a key recognized by the payment authentication server.

Specifically, the bio-payment device exports the multi-factor device information to the manufacturer's device, uploads the multi-factor device information to the payment authentication server through the manufacturer's device, and the payment authentication server generates and stores the bio-payment device according to the multi-factor device information. The dynamic link library file for the key.

Among them, the multi-factor device information includes device-related multi-factor information, that is, multiple device information, such as, including but not limited to brand name, device name, manufacturer name, product name, device MAC address, device ID, UUID (Unique Device Identifier) ), device serial number, etc.

The payment authentication server generates keys based on multi-factor device information, and uses a dynamic link library to store the keys. The dynamic link library file (SO file) is a black box, and the payment authentication server uses the encryption rules of the black box to store the key in the dynamic link library file. Since the black box rules are encrypted, the rules for generating keys in the SO file are encrypted, and the key copy of the device cannot be performed.

The payment authentication server sends the dynamic link library file storing the key to the manufacturer's device, and the manufacturer's device burns the dynamic link library file to the biometric payment device. Specifically, the biological payment device burns the dynamic link library file returned by the payment authentication server received by the manufacturer's device to the biological payment device according to the programming instruction of the manufacturer's device.

In this embodiment, for the biometric payment device that does not have a secure chip and an executable environment, the payment authentication server is used to generate the key, and the external import method is used to burn the key into the biometric payment device. Time In order to avoid the theft of the key during external import, reinforcement methods can be used to store the key in the SO file, and the SO file will be obfuscated and strengthened.

Specifically, the dynamic link library file burned into the biometric payment device will not be lost when the device is restored to the factory, ensuring that the raw key is permanently stored in the biometric payment device.

In the second stage of merchant authentication, the biometric payment device on the merchant side is authenticated to the payment authentication server using the key recognized by the payment authentication server to establish a secure link between the biometric payment device and the payment authentication server.

First, use the key stored in the dynamic link library file to encrypt the device information to generate a signature.

Second, the signature is sent to the payment authentication server, the payment authentication server. Obtain the decryption rule corresponding to the corresponding dynamic link library file, verify the signature, obtain the decrypted device information, and verify whether the decrypted device information is consistent with the received device information.

Thirdly, the payment authentication server returns an authentication result to the biometric payment device, and the authentication result enables the payment authentication server to realize biometric payment based on the biometric data sent by the authenticated biometric payment device.

In this embodiment, for the biometric payment device without SE chip and TEE, the dynamic link library file for storing the key is generated by the payment authentication server according to the multi-factor device information of the biometric payment device, and then the manufacturer's device generates the dynamic link library file for storing the key. The dynamic link library file that stores the key is imported into the biological payment device. Since the key is stored in the SO file, the encryption and decryption operations are in the SO file, and the key is generated through the SO file of the black box. The rules of the black box It is encrypted and cannot replicate the device key, thus increasing the security of the key.

Further, the payment verification server also adopts the method of obfuscation and reinforcement to improve the security level of the SO file for the SO file in which the key is stored, so that the SO file cannot be easily decompiled. The SO file is a binary file. By using an obfuscation tool to obfuscate the code of the binary file, the code sequence of the SO file is scrambled for anti-reverse protection, and the SO file is encrypted by a hardening program so that it cannot be reversely compiled, which further improves the performance of the software. key security.

The authentication method of the above-mentioned bio-payment device takes into account the security authentication of bio-payment devices with secure chips, executable environments, and non-SE and non-TEE bio-payment devices, which are almost compatible with the authentication of all bio-payment devices and have wide applicability .

The authentication method of the bio-payment device of this application takes into account the particularity of bio-payment, generates signature information by using a key with a higher security level, and sends it to the payment authentication server for verification. Other terminals cannot obtain the key to generate a signature and pretend to be The device performs device authentication. According to the authentication result, the payment verification server can determine which device is sending the biometric data, and whether it is a device certified by the payment platform. Only the biometric data collected by the biometric payment device authenticated by the payment verification server is used in the payment verification server. The payment code can only be obtained from the device side, thus ensuring the security performance of biological payment.

The authentication method of the biometric payment device of the present application can be applied to face payment, fingerprint payment, voiceprint payment, and the like.

As shown in FIG. 7 , an authentication method for a biometric payment device is provided, and the method is applied to the payment authentication server in FIG. 1 as an example for description, including:

Step S702, receiving the authentication request sent by the biometric payment device based on the signature and device information, wherein the signature is generated by the biometric payment device according to the key and the device information, and the key is obtained through the communication between the manufacturer's device and the payment authentication server in the production stage A key recognized by the payment authentication server.

Biological payment refers to a payment method that collects human biological data as payment vouchers. Human biological data includes fingerprints, face, handwriting, voice and gait. Unlike scanning code payment, which is generated by the user by operating a personal mobile phone to generate a highly private payment code, human biometric data is a kind of data that can be obtained through public means, such as collecting faces through cameras, collecting sounds through microphones, and collecting gait through cameras. . Therefore, in a certain way, the human body characteristic data is a kind of public data, which requires the bio-payment device to be authenticated to ensure the security of the payment communication link.

In order to ensure the security of bio-payment, on the one hand, ensure that the bio-payment device is a qualified device produced by a manufacturer who has passed the payment platform qualification certification, and obtain the key for authentication. When the cashier terminal is used, it communicates with the payment authentication server, generates a signature according to the key, and establishes a secure link between the biometric payment device and the payment authentication server after the payment authentication server verifies the signature.

In one embodiment, the device key is obtained by generating a public and private key in the bio-payment device during the production phase, and exporting the public key to the manufacturer's device. Upload the public key to the payment authentication server. That is, the private key is generated and stored locally on the biometric payment device, and the public key is uploaded to the payment authentication server. Since the public key is uploaded by the qualified manufacturer's device, and the payment authentication server has a matching public key with the biometric payment device. The key, thus, the private key local to the biometric payment device is the key recognized by the payment authentication server.

In one embodiment, the device key is obtained by transferring the device information from the bio-payment device to the manufacturer's device during the production stage. Since the manufacturer has passed the qualification certification of the payment platform, the device information can be uploaded to the payment authentication server through the manufacturer's device. The payment authentication server generates the key according to the device information, and returns it to the manufacturer's device, and the manufacturer's device burns the key to the biometric payment device. Since the key is generated by the payment authentication server based on the device information, the key is recognized by the payment authentication server.

Step S704, the signature is verified according to the device information.

Specifically, the biometric payment device generates a signature for the device information according to the key, that is, encrypts the device information with the key, and the obtained ciphertext is the signature of this transmission process. Device information refers to the information that can identify the identity of the biometric payment device, which can be device ID, device MAC address, etc.

The biometric payment device sends an authentication request to the payment authentication server based on the device information and signature. The device information sent to the payment authentication server is the same device information used by the biometric payment device to generate the signature. After the payment authentication server receives the authentication request, it obtains the decryption method corresponding to the biometric payment device according to the device ID. Verify whether the decrypted device information is consistent with the received device information, and generate an authentication result for the biometric payment device according to the verification result.

Step S706, generating a verification result for the biometric payment device according to the verification result.

If the decrypted device information is consistent with the received device information, the signature verification is passed, the verification result of the signature verification is passed, and the authentication result of the biometric payment device is further obtained. If the device information obtained by decryption is inconsistent with the received device information, the signature verification fails, the verification result of the signature verification failure is obtained, and the authentication result of the biometric payment device verification failure is further obtained.

Step S708, returning the authentication result to the biometric payment device to realize biometric payment based on the biometric data sent by the authenticated biometric payment device.

Specifically, after the payment authentication server is authenticated, the payment authentication server registers the biometric payment device that has passed the authentication, and establishes a secure link between the biometric payment device and the payment authentication server. The biological payment device collects biological data, and sends the collected biological data and device identification to the payment authentication server. The payment authentication server determines whether the biometric payment device is an authenticated device according to the device identification, and if so, matches the collected biometric data with the user's characteristic data stored in the database, and generates a payment code according to the matched user account information. , return the payment code to the biometric payment device, and the biometric payment device initiates payment to the payment authentication server according to the payment code, and the payment authentication server deducts the payment from the corresponding account. If the authentication server determines that the biometric payment device is a non-authenticated device according to the device identification, the payment request of the biometric payment device will not be processed, and it will be identified as an illegal device to ensure the security of the user's payment account.

The authentication method of the above-mentioned biological payment device, the key of the biological payment device is the key recognized by the payment authentication server obtained through the communication between the manufacturer's device and the payment authentication server in the production stage, and then use the key to generate signature information, send Verify the signature to the payment authentication server, and the signature is generated based on the key on the biometric payment device. The key has a high security level, and other terminals cannot obtain the key to generate the signature and pretend to be the device for device authentication. According to the authentication result, the payment verification server can determine which device is sending the biometric data, and whether it is a device certified by the payment platform. Only the biometric data collected by the biometric payment device authenticated by the payment verification server is used in the payment verification server. The payment code can only be obtained from the device side, thus ensuring the security performance of biological payment.

In another embodiment, the method of obtaining a key recognized by the payment authentication server through communication between the manufacturer's device and the payment authentication server in the production stage includes: obtaining the public key of the bio-payment device uploaded by the manufacturer's device, wherein , the public key and the private key corresponding to the public key are generated according to the key production instruction, and the public key is exported to the manufacturer's device. Specifically, after the hardware production of the biological payment device is completed, the device key needs to be configured before leaving the factory. Figure 3 shows a schematic diagram of the production environment. The biometric payment device 302 is connected with the manufacturer device 304 , and the manufacturer device 304 is connected in communication with the payment authentication server 306 .

Among them, the key production instruction refers to the instruction used to initiate the generation of the public key and the private key during the production process of the biological payment device. Specifically, after the hardware production of the bio-payment device is completed, the bio-payment device is equipped with an operating system, runs the operating system, and generates a public key and a private key according to the key production instruction.

In this application, the private key is held by the owner of the key pair, that is, the private key is held by the biological payment device and cannot be published, and the public key is the key pair holder to publish the payment verification server, specifically, The manufacturer's device approved by the payment authentication server is released to the payment authentication server. Since the payment authentication server obtains the public key corresponding to the private key of the biometric payment device, the encrypted file of the private key can be decrypted, thereby enabling The private key in the biometric payment device is recognized by the payment authentication server, and the data encrypted by the biometric payment device using the private key can be decrypted through the public key in the payment authentication server.

In this embodiment, by generating the public key and the private key in the biological payment device, the private key is not remitted, but only the public key is remitted to the payment authentication server, so that the key of the biological payment device cannot be copied, Avoid impersonation of bio-payment equipment and ensure the security of bio-payment.

In one embodiment, the biometric payment device accesses the security chip, and controls the security chip of the biometric payment device to generate the public key and the private key according to the key production instruction. The biometric payment device transfers the public key to the manufacturer's device, and the manufacturer's device uploads the public key and device ID to the payment authentication server through a secure interface. The biometric payment device control security chip on the merchant side generates a signature based on the private key and device information.

In another implementation, the biometric payment device is equipped with an executable environment, and a public key and a private key are generated based on the executable environment. The biometric payment device transfers the public key to the manufacturer's device, and the manufacturer's device uploads the public key and device ID to the payment authentication server through a secure interface. The biometric payment device on the merchant side generates a signature based on the private key and device information based on the executable environment.

Further, the payment authentication server obtains the corresponding public key, and verifies the signature according to the device information and the public key.

In another embodiment, the method of obtaining the key recognized by the payment authentication server through the communication between the manufacturer's device and the payment authentication server in the production stage includes: acquiring the multi-factor information of the bio-payment device uploaded by the manufacturer's device; The multi-factor information generates a dynamic link library file that stores the key of the biometric payment device; the dynamic link library file is sent to the manufacturer device, and the dynamic link library file instructs the manufacturer device to burn the dynamic link library file to the biopayment device. equipment.

Among them, the multi-factor device information includes device-related multi-factor information, that is, multiple device information, such as, including but not limited to brand name, device name, manufacturer name, product name, device MAC address, device ID, UUID (Unique Device Identifier) ), device serial number, etc.

The payment authentication server generates and key according to the multi-factor device information, establishes the corresponding relationship between the key and the multi-factor device information, and uses the dynamic link library to store the key and transmit it to the manufacturer's device, so that the key is imported into Bio payment device. The dynamic link library file (SO file) is a black box, and the payment authentication server uses the encryption rules of the black box to store the key in the dynamic link library file. Since the black box rules are encrypted, the rules for generating keys in the SO file are encrypted, and the key copy of the device cannot be performed.

Specifically, the biological payment device burns the dynamic link library file returned by the payment authentication server received by the manufacturer's device to the biological payment device according to the programming instruction of the manufacturer's device. The dynamic link library file burned into the biometric payment device will not be lost when the device is restored to the factory, ensuring that the raw key is permanently stored in the biometric payment device.

In this embodiment, for the biometric payment device without SE chip and TEE, the dynamic link library file for storing the key is generated by the payment authentication server according to the multi-factor device information of the biometric payment device, and then the manufacturer's device generates the dynamic link library file for storing the key. The dynamic link library file that stores the key is imported into the biological payment device. Since the key is stored in the SO file, the encryption and decryption operations are in the SO file, and the key is generated through the SO file of the black box. The rules of the black box It is encrypted and cannot replicate the device key, thus increasing the security of the key.

Further, the payment verification server obfuscates and strengthens the dynamic link library file storing the key. By using the obfuscation tool to obfuscate the code of the binary file, the code sequence of the SO file is scrambled, and the reverse protection is performed.

It should be understood that, although the steps in the flowcharts of FIGS. 2 and 4-7 are shown in sequence according to the arrows, these steps are not necessarily executed in the sequence shown by the arrows. Unless explicitly stated herein, the execution of these steps is not strictly limited in order, and these steps may be performed in other sequences. Moreover, at least a part of the steps in FIGS. 2 and 4-7 may include multiple steps or multiple stages. These steps or stages are not necessarily executed at the same time, but may be executed at different times. These steps or stages The order of execution of the steps is not necessarily sequential, but may be performed alternately or alternately with other steps or at least a portion of the steps or stages in the other steps.

In one embodiment, as shown in FIG. 8 , an authentication device for a biometric payment device is provided. The device can use a software module or a hardware module, or a combination of the two to become a part of computer equipment. The device is specifically include:

The key acquisition module 802 is used to acquire the key of the device, wherein the key is a key recognized by the payment authentication server obtained through the communication between the manufacturer's device and the payment authentication server in the production stage;

The signature module 804 is used to generate a signature according to the key and device information.

The authentication module 806 is used to send an authentication request to the payment authentication server based on the device information and the signature, the authentication request instructs the payment authentication server to verify the signature according to the device information, and generate an authentication result for the biological payment device according to the verification result;

The receiving module 808 is configured to receive the authentication result returned by the payment authentication server, and the authentication result enables the payment authentication server to realize biometric payment based on the biometric data sent by the authenticated biometric payment device.

In another embodiment, the key acquisition module includes: a key generation module, configured to generate a public key and a private key according to the key production instruction.

The key export module is used to export the public key to the manufacturer's device, and the manufacturer's device uploads the public key to the payment authentication server.

Among them, the key generation module is used to generate the public key and the private key according to the key production instruction to control the security chip of the biological payment device.

The signature module is used to control the security chip to generate a signature based on the private key and device information.

Among them, the key generation module is used to generate the public key and the private key based on the executable environment according to the key production instruction.

The signature module is used to generate signatures based on the private key and device information based on the executable environment.

In another embodiment, the key acquisition module includes:

The device information export module is used to export the multi-factor device information to the manufacturer's device, and send the multi-factor device information to the payment authentication server through the manufacturer's device, and the payment authentication server generates and stores the biological payment according to the multi-factor information. The dynamic link library file of the device's key;

The key import module is used to respond to the burning instruction of the manufacturer's device, and burn the dynamic link library file returned by the payment authentication server to the local.

In another embodiment, the dynamic link library file is an obfuscated and hardened dynamic link library file, and a signature module is used to encrypt and generate device information according to a key stored in the obfuscated and hardened dynamic link library file. sign.

An authentication device for a biological payment device, as shown in Figure 9, includes:

The authentication acquisition module 902 is used to receive the authentication request sent by the biometric payment device based on the signature device information, wherein the signature is generated by the biometric payment device according to the key and the device information, and the key is passed through the manufacturer's device and the payment authentication server in the production stage. A key recognized by the payment authentication server obtained through communication;

The verification module 904 is used to verify the signature according to the device information;

The authentication module 906 is used to generate the authentication result of the biometric payment device according to the verification result;

The sending module 908 is configured to return the authentication result to the biometric payment device, so as to realize the biometric payment based on the biometric data sent by the authenticated biometric payment device.

In another embodiment, a key acquisition module is further included for acquiring the device identification and public key of the biometric payment device uploaded by the manufacturer's device, wherein the public key and the private key corresponding to the public key are based on the key A key production instruction is generated, and the public key is exported to the producer device.

In another embodiment, the key acquisition module includes:

The device information acquisition module is used to obtain the multi-factor information of the bio-payment device uploaded by the manufacturer's device;

The key generation module is used to generate the dynamic link library file for storing the key of the biometric payment device according to the multi-factor information;

The key sending module is used to send the dynamic link library file to the manufacturer's device, and the dynamic link library file instructs the manufacturer's device to burn the dynamic link library file to the biometric payment device.

In another embodiment, a key processing module is further included, which is used for obfuscating and strengthening the dynamic link library file storing the key.

For the specific definition of the authentication device of the biological payment device, reference may be made to the definition of the authentication method of the biological payment device above, which will not be repeated here. All or part of the modules in the authentication device of the above-mentioned biological payment device can be implemented by software, hardware and combinations thereof. The above modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the corresponding operations of the above modules. .

In one embodiment, a computer device is provided, the computer device may be a server, and its internal structure diagram may be as shown in FIG. 10 . The computer equipment includes a processor, memory and a network interface connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer equipment includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, computer programs and databases. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage medium. The computer device's database is used to store bio-payment device data. The network interface of the computer device is used to communicate with an external terminal through a network connection. The computer program, when executed by the processor, implements an authentication method for a biometric payment device.

In one embodiment, a computer device is provided, the computer device may be a terminal, and its internal structure diagram may be as shown in FIG. 11 . The computer equipment includes a processor, a memory, a communication interface, a display screen and a biological data acquisition device connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer equipment includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage medium. The communication interface of the computer equipment is used for wired or wireless communication with external terminals, and the wireless communication can be realized by WIFI, operator network, NFC (Near Field Communication) or other technologies. The computer program, when executed by the processor, implements an authentication method for a biometric payment device. The display screen of the computer equipment may be a liquid crystal display screen or an electronic ink display screen, and the biological data acquisition device of the computer equipment may be an image acquisition device, or a fingerprint acquisition device and/or a sound acquisition device.

Those skilled in the art can understand that the structures shown in FIG. 10 and FIG. 11 are only block diagrams of partial structures related to the solution of the present application, and do not constitute a limitation on the computer equipment to which the solution of the present application is applied. The computer equipment may include more or fewer components than those shown in the figures, or combine certain components, or have a different arrangement of components.

In one embodiment, a computer device is also provided, including a memory and a processor, where a computer program is stored in the memory, and the processor implements the steps in the above method embodiments when the processor executes the computer program.

In one embodiment, a computer-readable storage medium is provided, which stores a computer program, and when the computer program is executed by a processor, implements the steps in the foregoing method embodiments.

In one embodiment, a computer program product or computer program is provided, the computer program product or computer program comprising computer instructions stored in a computer-readable storage medium. The processor of the computer device reads the computer instruction from the computer-readable storage medium, and the processor executes the computer instruction, so that the computer device performs the steps in the above method embodiments.

Those of ordinary skill in the art can understand that all or part of the processes in the methods of the above embodiments can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer readable In the storage medium, when the computer program is executed, it may include the processes of the above-mentioned method embodiments. Wherein, any reference to memory, storage, database or other media used in the various embodiments provided in this application may include at least one of non-volatile and volatile memory. The non-volatile memory may include Read-Only Memory (ROM), magnetic tape, floppy disk, flash memory or optical memory, and the like. Volatile memory may include random access memory (Random Access Memory, RAM) or external cache memory. By way of illustration and not limitation, RAM may be in various forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM).

The technical features of the above embodiments can be combined arbitrarily. In order to make the description simple, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction in the combination of these technical features It is considered to be the range described in this specification.

It is to be understood that the present application is not limited to the precise structures described above and illustrated in the accompanying drawings and that various modifications and changes may be made without departing from the scope thereof. The scope of this application is limited only by the appended claims.

<p>102: Bio payment device&lt;br/&gt; 104: Payment authentication server&lt;br/&gt; 302: Bio payment device&lt;br/&gt; 304: Manufacturer device&lt;br/&gt; 306: Payment authentication server&lt;br/&gt; S202~S208 :Steps&lt;br/&gt;S702~S708:Step&lt;br/&gt;802:Key acquisition module&lt;br/&gt;804:Signature module&lt;br/&gt;806:Authentication module&lt;br/&gt;808:Receiver module&lt; br/&gt;902:Authentication acquisition module&lt;br/&gt;904:Verification module&lt;br/&gt;906:Authentication module&lt;br/&gt;908:Send module</p>

In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following briefly introduces the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only the For some embodiments of the application, for those of ordinary skill in the art, other drawings can also be obtained based on these drawings without any creative effort.

FIG. 1 is an application environment diagram of an authentication method of a biological payment device in one embodiment.

FIG. 2 is a schematic flowchart of an authentication method of a biological payment device in one embodiment.

FIG. 3 is a schematic diagram of a production environment of a biological payment device in one embodiment.

FIG. 4 is a schematic flowchart of an authentication process of a biometric payment device with SE in one embodiment.

FIG. 5 is a schematic flowchart of an authentication process of a biometric payment device with TEE in one embodiment.

FIG. 6 is a schematic flowchart of an authentication process of a biological payment device without SE and TEE in one embodiment.

FIG. 7 is a schematic flowchart of an authentication method of a biological payment device in another embodiment.

FIG. 8 is a structural block diagram of an authentication device of a biological payment device in one embodiment.

FIG. 9 is a structural block diagram of an authentication device of a biological payment device in another embodiment.

FIG. 10 is an internal structure diagram of a computer device in one embodiment.

FIG. 11 is an internal structure diagram of a computer device in another embodiment.