CN105787711A - Message authentication method, message authentication device, and message authentication system based on confirmation code - Google Patents

Message authentication method, message authentication device, and message authentication system based on confirmation code Download PDF

Info

Publication number
CN105787711A
CN105787711A CN201410822164.2A CN201410822164A CN105787711A CN 105787711 A CN105787711 A CN 105787711A CN 201410822164 A CN201410822164 A CN 201410822164A CN 105787711 A CN105787711 A CN 105787711A
Authority
CN
China
Prior art keywords
confirmation code
authentication
buffer memory
encryption
party payment
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201410822164.2A
Other languages
Chinese (zh)
Other versions
CN105787711B (en
Inventor
曹列忠
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Advanced Nova Technology Singapore Holdings Ltd
Original Assignee
Alibaba Group Holding Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Alibaba Group Holding Ltd filed Critical Alibaba Group Holding Ltd
Priority to CN201911426901.6A priority Critical patent/CN111260343B/en
Priority to CN201410822164.2A priority patent/CN105787711B/en
Publication of CN105787711A publication Critical patent/CN105787711A/en
Application granted granted Critical
Publication of CN105787711B publication Critical patent/CN105787711B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Landscapes

  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

The invention discloses a message authentication method and a message authentication device based on a confirmation code. The authentication method is used for a payment system of an authentication system. The authentication system comprises a third party payment platform. The message authentication method is characterized in that a confirmation code input by a user and a message to be authenticated can be received; the confirmation code can be correspondingly stored in a cache; the cache is used to store the confirmation code in the preset time; the message to be authenticated can be transmitted to the third party payment platform, and after the prompting information returned by the third party payment platform is received, the payment system can be triggered to jump to the password verification interface for the display according to the prompting information; when the response to the payment passwords input by the user on the password authentication interface is provided, and the authentication is passed, and the confirmation code stored in the cache and the message to be authenticated can be transmitted to the third party payment platform to realize the authentication, and then the confirmation code can be deleted from the cache. According to the invention, the authentication success rate can be improved.

Description

Based on the information authentication method of confirmation code, Apparatus and system
Technical field
The application relates to internet data processing technology field, particularly to a kind of based on the information authentication method of confirmation code, Apparatus and system.
Background technology
At present, in international credit card payment process, the means of payment is divided into 3D to pay and the non-3D means of payment.Wherein, 3D payment is the holder's online transaction safety for ensureing international credit card that international credit card tissue (such as Visa, MasterCard, JCB) is released, and emits an online credit card payment security service of transaction in order to take precautions against online puppet.
In the prior art, 3D payment process needs user to pass through input bank card number, card effect duration and confirmation code etc., to trigger, to international payments system, the request of payment, international payments system then pays to Third-party payment platform application 3D, after treating the information that Third-party payment platform returns this user, international payments system jumps to the password authentification interface of credit card issuer further according to the credit card issuer information that information is illustrated, after user inputs payment cipher again, the result can be then forwarded to international payments system by credit card issuer, with trigger international payments system to Third-party payment platform initiate authorized application, thus realizing the authentication of the associated card information to bank card.
Summary of the invention
But inventor finds in research process, due to Third-party payment industry data safety criterion (PaymentCardIndustryDataSecurityStandard, PCIDSS) do not allow international payments system storage user at the beginning to the confirmation code (CVN) of international payments system input, so, international payments system after initiate authorized application to Third-party payment platform in, just the confirmation code that user inputs at the beginning cannot be passed to Third-party payment platform.And in 3D payment process, if final Third-party payment platform cannot get the confirmation code that user inputs at the beginning, also just cannot realize information authentication.Therefore, the successful efficiency of prior art information authentication in implementation process is very low, further, also have impact on the experience that user uses 3D to pay.
Technical problems to be solved in this application are to provide a kind of information authentication method based on confirmation code, in order to avoid in prior art owing to international payments system can not store the low success rate of problem of information authentication that confirmation code causes as far as possible, further, moreover it is possible to promote user and use the 3D experience paid.
Present invention also provides a kind of information authentication device based on confirmation code and information authentication system, in order to ensure said method realization in practice and application.
In order to solve the problems referred to above, this application discloses a kind of information authentication method based on confirmation code, including:
Described method for authenticating is applied in the payment system in right discriminating system, and described right discriminating system also includes: Third-party payment platform;Described method includes:
Receive the confirmation code that is currently entered of user and treat authentication information;
Described confirmation code correspondence is stored to buffer memory;Wherein, described buffer memory for storing described confirmation code in Preset Time;
By described treat authentication information send to described Third-party payment platform and receive described Third-party payment platform return information after, with reference to described information trigger described payment system jump to a password authentification interface for display;
The payment cipher inputted at described password authentification interface in response to user is by verifying, by the confirmation code in described buffer memory with described treat that authentication information sends to described Third-party payment platform to realize authenticating, and deletes described confirmation code in described buffer memory.
This application discloses a kind of information authentication device based on confirmation code, including:
Described device is integrated in the payment system in right discriminating system, and described right discriminating system also includes Third-party payment platform, and described device includes:
Receiver module, for receiving confirmation code that user is currently entered and treating authentication information;
Cache module, for storing described confirmation code correspondence to buffer memory;Wherein, described buffer memory for storing described confirmation code in Preset Time;
Trigger module, for by described treat authentication information send to described Third-party payment platform and receive described Third-party payment platform return information after, with reference to described information trigger described payment system jump to a password authentification interface for display;
Sending module, for the payment cipher that input at described password authentification interface in response to user by verifying, by the confirmation code in described buffer memory with described treat that authentication information sends to described Third-party payment platform to realize authenticating;
Removing module, for deleting described confirmation code in described buffer memory.
This application discloses a kind of information authentication system based on confirmation code, including:
Including aforesaid information authentication device, and, Third-party payment platform.
Compared with prior art, the application includes advantages below:
In the embodiment of the present application, international payments system stores, by arranging an independent spatial cache, the confirmation code that user starts to input most, and from buffer memory, this confirmation code is deleted again after authentication completes, thus the requirement of PCIDSS can be met, also can avoid the low success rate of problem of information authentication in prior art as far as possible, further, moreover it is possible to promote user and use the 3D experience paid.
Certainly, the arbitrary product implementing the application it is not absolutely required to reach all the above advantage simultaneously.
Accompanying drawing explanation
In order to be illustrated more clearly that the technical scheme in the embodiment of the present application, below the accompanying drawing used required during embodiment is described is briefly described, apparently, accompanying drawing in the following describes is only some embodiments of the application, for those of ordinary skill in the art, under the premise not paying creative work, it is also possible to obtain other accompanying drawing according to these accompanying drawings.
Fig. 1 is the flow chart of the information authentication embodiment of the method based on confirmation code of the application;
Fig. 2 is the application scene Organization Chart in actual applications;
Fig. 3 is the structural representation of the information authentication device embodiment based on confirmation code of the application.
Detailed description of the invention
Below in conjunction with the accompanying drawing in the embodiment of the present application, the technical scheme in the embodiment of the present application is clearly and completely described, it is clear that described embodiment is only some embodiments of the present application, rather than whole embodiments.Based on the embodiment in the application, the every other embodiment that those of ordinary skill in the art obtain under not making creative work premise, broadly fall into the scope of the application protection.
The application can be used in numerous general or special purpose calculation element environment or configuration.Such as: personal computer, server computer, handheld device or portable set, laptop device, multi-processor device, the distributed computing environment including any of the above device or equipment etc..
The application can described in the general context of computer executable instructions, for instance program module.Usually, program module includes performing particular task or realizing the routine of particular abstract data type, program, object, assembly, data structure etc..The application can also be put into practice in a distributed computing environment, in these distributed computing environment, the remote processing devices connected by communication network perform task.In a distributed computing environment, program module may be located in the local and remote computer-readable storage medium including storage device.
With reference to Fig. 1, it is shown that the flow chart of a kind of information authentication embodiment of the method based on confirmation code of the application, the method for authenticating of the embodiment of the present application can apply in the international payments system in right discriminating system, and this right discriminating system can also include: Third-party payment platform;The present embodiment may comprise steps of:
Step 101: receive the confirmation code that is currently entered of user and treat authentication information.
First, international payments system receives the confirmation code of user's input and treats authentication information, wherein, treats that authentication information includes the information such as bank card number, bank card effect duration, and the security code of the fixing figure place that confirmation code is the bank card back side, for instance the credit card 3 stationary digital " 567 " behind.Wherein, the bank card in the embodiment of the present application can be the credit card or the debit card with confirmation code.And international payments system refers to and carries out the international payments system of information authentication with international credit card issuer.
Step 102: described confirmation code correspondence is stored to buffer memory;Wherein, described buffer memory for storing described confirmation code in Preset Time.
In the embodiment of the present application, international payments system can be separately provided a buffer memory for of short duration storage confirmation code, and in order to avoid not meeting the regulation of PCIDSS, in this buffer memory, confirmation code can only be present in this buffer memory in Preset Time.Such as, the one section of set time (such as 1 hour) preset, or, to treat the trigger instants that authentication information successful authentication is trigger condition, if namely treating authentication information successful authentication at step 104, trigger the deletion of confirmation code in buffer memory.
Wherein it is possible to be understood by, buffer memory can be the memory space one piece independent within international payments system, it is also possible to be the separate server etc. being connected with international payments system.
Step 103: by described treat authentication information send to described Third-party payment platform and receive described Third-party payment platform return information after, with reference to described information trigger described payment system jump to a password authentification interface for display.
With reference to shown in Fig. 2, it is being a scene structure figure in practical application for the embodiment of the present application.International payments system 201 will confirm that code stores in the process to buffer memory, the information such as bank card number and effect duration also can be sent to coupled Third-party payment platform 202, Third-party payment platform 202 is after receiving the information such as bank card number and effect duration, can judge that this bank card is either with or without registering, if had, then returning an information to international payments system, browser is jumped to the password authentification interface of this bank card and shows user by prompting international payments system.
Step 104: the payment cipher inputted at described password authentification interface in response to user is by verifying, by the confirmation code in described buffer memory with described treat that authentication information sends to described Third-party payment platform to realize authenticating.
User can input the payment cipher of the bank card of oneself and send to the credit card issuer of bank card and be verified at password authentification interface, if the verification passes, credit card issuer can transmit verification result to international payments system, and trigger international payments system with this result and it was once stored confirmation code in the buffer, bank card number and effect duration wait that authentication information sends to described Third-party payment platform, Third-party payment platform can according to confirmation code with treat to authenticate the 3D that this user currently initiates by authentication information whether pay request effective, thus realizing authentication.
Step 105: delete described confirmation code in described buffer memory.
Then international payments system deletes the confirmation code of storage in the buffer.
Visible, in the embodiment of the present application, international payments system stores, by arranging an independent spatial cache, the confirmation code that user starts to input most, and from buffer memory, this confirmation code is deleted again after authentication completes, thus the requirement of PCIDSS can be met, also can avoid the low success rate of problem of information authentication in prior art, further, moreover it is possible to promote user and use the 3D experience paid as far as possible.
In order to facilitate those skilled in the art's understanding to the application process that realizes in actual applications, a specific example is described below.
Step A1: international payments system receives the confirmation code that is currently entered of user and treats authentication information.
Wherein, step A1 to realize process similar with step 101, do not repeat them here.
At this object lesson or, the process that realizes of step 102 can include step A2~step A3.
Step A2: international payments system will confirm that code is encrypted according to the Third-party payment industry data safety criterion PCIDSS AES approved, and store corresponding with current business mark for the confirmation code after encryption to buffer memory.
International payments system is after receiving confirmation code, in the present example, stores to buffer memory after will confirm that code encryption again.Wherein, international payments system can adopt the PCIDSS AES approved to be encrypted, and stores corresponding with current business mark for the confirmation code after encryption to buffer memory.Wherein, current business is designated: international payments system is the identification information for uniquely identifying current authentication services that Client-initiated current 3D payment transaction generates.Such as, it is the serial number etc. of a regular length.Shown in table 1, for the storage mode of the confirmation code after the encryption of storage in buffer memory, wherein, key is current business mark, and value is the confirmation code after encryption.
Table 1
Key Value
Current business identifies CVN information after encryption
Step A3: the encryption key of employing is stored to key management infrastructure KMI system by international payments system.
In the present example, the encryption key in step A2, confirmation code encryption adopted can also be stored to KMI (KeyMangementInfrastruture, key management infrastructure) by international payments system.Wherein, for the convenient use to confirmation code, it is possible to adopt unified encryption key that confirmation code is encrypted.
This example and the embodiment shown in Fig. 1 also differ in that, this example includes step A4:
Step A4: the mission bit stream of described confirmation code is preserved to data base by international payments system, the mission bit stream of described confirmation code may include that described current business mark, described confirmation code preserves in the buffer Preset Time and the authentication status of current business.
In the present example, the mission bit stream relevant to confirmation code can also be stored to data base by international payments system, and this data base can adopt any memory space of international payments system to realize.Wherein, the authentication status of current business mark, Preset Time that confirmation code preserves in the buffer and current business, for instance authenticate or do not authenticate.When initial preservation, authentication status is and does not authenticate.
Table 2
Payment_order_id Trigger_time Status
Current business identifies Preset Time The state whether consumed
Subsequently enter step A5: by described treat authentication information send to described Third-party payment platform and receive described Third-party payment platform return information after, international payments system with reference to described information trigger described payment system jump to a password authentification interface for display.
It is understood that step A5 and step 103 to realize process identical, do not repeat them here.
It should be noted that in the present example, step 104 can include step A6~step A8.
Step A6: the payment cipher inputted at described password authentification interface in response to user passes through to verify, international payments system reads the confirmation code after the encryption of correspondence according to described current business mark from described buffer memory, and obtains encryption key from described KMI system.
First, if the user while the payment cipher of password authentification interface input has passed through the checking of credit card issuer, so international payments system is after the notification message receiving credit card issuer, the confirmation code after the encryption of correspondence can be got according to current business mark from table 1, and the encryption key adopted when encrypting into confirmation code can be got from KMI system.
Step A7: international payments system adopts described encryption key that the confirmation code after described encryption is decrypted, and is confirmed code.
International payments system re-uses encryption key and the confirmation code after encryption is decrypted, thus obtaining unencrypted confirmation code.
Step A8: international payments system will confirm that code and treats that authentication information sends to Third-party payment platform to realize authentication.
International payments system will confirm that code, bank card number and effect duration wait that authentication information sends and realize authenticating to Third-party payment platform.
Step A9: whether international payments system real-time judge current time arrives the Preset Time that confirmation code is deleted, if it is, enter step A0.
After authenticating successfully, international payments system judges whether current time arrives the Preset Time deleting confirmation code, for instance whether arrive 1 hour.If in table 1, storage is a trigger condition, for instance treat authentication information successful authentication, then then judge whether step A8 has authenticated successfully in this step.If it is understood that current time does not also arrive the Preset Time that confirmation code is deleted, then not carrying out any operation.
Step A10: international payments system is according to the confirmation code after encryption corresponding in buffer memory described in described current business identifier lookup.
If arriving the Preset Time deleting confirmation code, then from buffer memory, search the confirmation code after the encryption of correspondence again according to current business mark.
Step A11: international payments system deletes the confirmation code after described encryption in described buffer memory, and the authentication status of described current business is revised as completes in the database.
International payments system deletes the confirmation code after encryption more in the buffer, after deleting successfully, just no longer has confirmation code in buffer memory, and the authentication status in table 2 is revised as from data base and completes.
For aforesaid embodiment of the method, in order to be briefly described, therefore it is all expressed as a series of combination of actions, but those skilled in the art should know, the application is not by the restriction of described sequence of movement, because according to the application, some step can adopt other orders or carry out simultaneously.Secondly, those skilled in the art also should know, embodiment described in this description belongs to preferred embodiment, necessary to involved action and module not necessarily the application.
The method that based on the information authentication embodiment of the method for confirmation code provide a kind of with above-mentioned the application is corresponding, referring to Fig. 3, present invention also provides a kind of information authentication device embodiment based on confirmation code, in the present embodiment, device can be integrated in the payment system in right discriminating system, this right discriminating system can also include Third-party payment platform, and this device may include that
Receiver module 301, for receiving confirmation code that user is currently entered and treating authentication information.
Cache module 302, for storing described confirmation code correspondence to buffer memory;Wherein, described buffer memory for storing described confirmation code in Preset Time.
Trigger module 303, for by described treat authentication information send to described Third-party payment platform and receive described Third-party payment platform return information after, with reference to described information trigger described payment system jump to a password authentification interface for display.
Sending module 304, for the payment cipher that input at described password authentification interface in response to user by verifying, by the confirmation code in described buffer memory with described treat that authentication information sends to described Third-party payment platform to realize authenticating.
Removing module 305, for deleting described confirmation code in described buffer memory.
Optionally, in various embodiments, described cache module 302 specifically may include that
Encryption submodule, for being encrypted described confirmation code according to the Third-party payment industry data safety criterion PCIDSS AES approved;First sub module stored, for storing corresponding with current business mark for the confirmation code after encryption to buffer memory;Described current business is designated: the identification information for the current authentication services of unique mark that described payment system generates;With, the second sub module stored, for storing the encryption key of employing to key management infrastructure KMI system;
Then corresponding described sending module, 304 specifically may include that
Reading submodule, for reading the confirmation code after corresponding encryption according to described current business mark from described buffer memory;Obtain submodule, for obtaining encryption key from described KMI system;Deciphering submodule, for adopting described encryption key that the confirmation code after described encryption is decrypted, is confirmed code;With, send submodule, for by described confirmation code and described treat authentication information send to described Third-party payment platform with realizes authenticate.
Optionally, in various embodiments, this device can also include:
Preserving task module, for the mission bit stream of described confirmation code being preserved to data base, the mission bit stream of described confirmation code includes: the authentication status of described current business mark, the erasing time of described confirmation code and current business;Then corresponding described removing module 305, specifically may include that
Judge submodule, for judging whether current time arrives the erasing time of described confirmation code;Described erasing time is: the one period of set time preset, or, with the described trigger instants treating that authentication information successful authentication is trigger condition;Search submodule, for when the result of described judgement submodule is for being, according to the confirmation code after encryption corresponding in buffer memory described in described current business identifier lookup;Delete submodule, be used for the confirmation code after deleting described encryption in described buffer memory;With, revise submodule, complete in the database the authentication status of described current business being revised as.
In the embodiment of the present application, international payments system stores, by arranging an independent spatial cache, the confirmation code that user starts to input most, and from buffer memory, this confirmation code is deleted again after authentication completes, thus the requirement of PCIDSS can be met, also can avoid the low success rate of problem of information authentication in prior art as far as possible, further, moreover it is possible to promote user and use the 3D experience paid.
The embodiment of the present application additionally provides a kind of international payments system based on confirmation code, and this system can include the information authentication device shown in Fig. 3, and, Third-party payment platform.
In the embodiment of the present application, international payments system stores, by arranging an independent spatial cache, the confirmation code that user starts to input most, and from buffer memory, this confirmation code is deleted again after authentication completes, thus the requirement of PCIDSS can be met, also can avoid the inefficient problem of information authentication success in prior art as far as possible, further, moreover it is possible to promote user and use the 3D experience paid.
It should be noted that each embodiment in this specification all adopts the mode gone forward one by one to describe, what each embodiment stressed is the difference with other embodiments, between each embodiment identical similar part mutually referring to.For device class embodiment, due to itself and embodiment of the method basic simlarity, so what describe is fairly simple, relevant part illustrates referring to the part of embodiment of the method.
Finally, it can further be stated that, in this article, the relational terms of such as first and second or the like is used merely to separate an entity or operation with another entity or operating space, and not necessarily requires or imply the relation that there is any this reality between these entities or operation or sequentially.And, term " includes ", " comprising " or its any other variant are intended to comprising of nonexcludability, so that include the process of a series of key element, method, article or equipment not only include those key elements, but also include other key elements being not expressly set out, or also include the key element intrinsic for this process, method, article or equipment.When there is no more restriction, statement " including ... " key element limited, it is not excluded that there is also other identical element in including the process of described key element, method, article or equipment.
Above provided herein is described in detail based on the information authentication method of confirmation code, Apparatus and system, principle and the embodiment of the application are set forth by specific case used herein, and the explanation of above example is only intended to help and understands the present processes and core concept thereof;Simultaneously for one of ordinary skill in the art, according to the thought of the application, all will change in specific embodiments and applications, in sum, this specification content should not be construed as the restriction to the application.

Claims (9)

1. the information authentication method based on confirmation code, it is characterised in that described method for authenticating is applied in the payment system in right discriminating system, and described right discriminating system also includes: Third-party payment platform;Described method includes:
Receive the confirmation code that is currently entered of user and treat authentication information;
Described confirmation code correspondence is stored to buffer memory;Wherein, described buffer memory for storing described confirmation code in Preset Time;
By described treat authentication information send to described Third-party payment platform and receive described Third-party payment platform return information after, with reference to described information trigger described payment system jump to a password authentification interface for display;
The payment cipher inputted at described password authentification interface in response to user is by verifying, by the confirmation code in described buffer memory with described treat that authentication information sends to described Third-party payment platform to realize authenticating, and deletes described confirmation code in described buffer memory.
2. method according to claim 1, it is characterised in that described described confirmation code is stored to buffer memory, particularly as follows:
Described confirmation code is encrypted according to the Third-party payment industry data safety criterion PCIDSS AES approved, and store corresponding with current business mark for the confirmation code after encryption to buffer memory, and the encryption key of employing is stored to key management infrastructure KMI system;Described current business is designated: the identification information for the current authentication services of unique mark that described payment system generates;
Then corresponding, described by the confirmation code in described buffer memory with described treat that authentication information sends to described Third-party payment platform to realize authenticating, including:
From described buffer memory, the confirmation code after the encryption of correspondence is read according to described current business mark;
Encryption key is obtained from described KMI system;
Adopt described encryption key that the confirmation code after described encryption is decrypted, be confirmed code;
By described confirmation code and described treat authentication information send to described Third-party payment platform with realizes authenticate.
3. method according to claim 2, it is characterised in that after receiving the confirmation code that is currently entered of user and treating authentication information, also include:
Being preserved to data base by the mission bit stream of described confirmation code, the mission bit stream of described confirmation code includes: described current business identifies, deletes the Preset Time of described confirmation code and the authentication status of current business;
In described buffer memory, described confirmation code is deleted described in then, including:
Judge whether current time arrives the Preset Time deleting described confirmation code, if it is, according to the confirmation code after encryption corresponding in buffer memory described in described current business identifier lookup;
Described buffer memory deletes the confirmation code after described encryption, and the authentication status of described current business is revised as completes in the database.
4. method according to claim 3, it is characterised in that described Preset Time is: the one period of set time preset, or, with the described trigger instants treating that authentication information successful authentication is trigger condition.
5. the information authentication device based on confirmation code, it is characterised in that described device is integrated in the payment system in right discriminating system, and described right discriminating system also includes Third-party payment platform, and described device includes:
Receiver module, for receiving confirmation code that user is currently entered and treating authentication information;
Cache module, for storing described confirmation code correspondence to buffer memory;Wherein, described buffer memory for storing described confirmation code in Preset Time;
Trigger module, for by described treat authentication information send to described Third-party payment platform and receive described Third-party payment platform return information after, with reference to described information trigger described payment system jump to a password authentification interface for display;
Sending module, for the payment cipher that input at described password authentification interface in response to user by verifying, by the confirmation code in described buffer memory with described treat that authentication information sends to described Third-party payment platform to realize authenticating;
Removing module, for deleting described confirmation code in described buffer memory.
6. device according to claim 5, it is characterised in that described cache module includes:
Encryption submodule, for being encrypted described confirmation code according to the Third-party payment industry data safety criterion PCIDSS AES approved;
First sub module stored, for storing corresponding with current business mark for the confirmation code after encryption to buffer memory;Described current business is designated: the identification information for the current authentication services of unique mark that described payment system generates;
Second sub module stored, for storing the encryption key of employing to key management infrastructure KMI system;
Then described sending module, including:
Reading submodule, for reading the confirmation code after corresponding encryption according to described current business mark from described buffer memory;
Obtain submodule, for obtaining encryption key from described KMI system;
Deciphering submodule, for adopting described encryption key that the confirmation code after described encryption is decrypted, is confirmed code;
Send submodule, for by described confirmation code and described treat authentication information send to described Third-party payment platform with realizes authenticate.
7. device according to claim 5, it is characterised in that also include:
Preserving task module, for being preserved to data base by the mission bit stream of described confirmation code, the mission bit stream of described confirmation code includes: described current business identifies, deletes the Preset Time of described confirmation code and the authentication status of current business;
Then described removing module, including:
Judge submodule, for judging whether current time arrives the Preset Time deleting described confirmation code;
Search submodule, for when the result of described judgement submodule is for being, according to the confirmation code after encryption corresponding in buffer memory described in described current business identifier lookup;
Delete submodule, be used for the confirmation code after deleting described encryption in described buffer memory;
Amendment submodule, completes for the authentication status of described current business being revised as in the database.
8. device according to claim 5, it is characterised in that described Preset Time is: the one period of set time preset, or, with the described trigger instants treating that authentication information successful authentication is trigger condition.
9. the information authentication system based on confirmation code, it is characterised in that include the information authentication device as described in claim 5~8 any one, and, Third-party payment platform.
CN201410822164.2A 2014-12-24 2014-12-24 Information authentication method, device and system based on confirmation code Active CN105787711B (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CN201911426901.6A CN111260343B (en) 2014-12-24 2014-12-24 Information authentication method, device and system based on confirmation code
CN201410822164.2A CN105787711B (en) 2014-12-24 2014-12-24 Information authentication method, device and system based on confirmation code

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201410822164.2A CN105787711B (en) 2014-12-24 2014-12-24 Information authentication method, device and system based on confirmation code

Related Child Applications (1)

Application Number Title Priority Date Filing Date
CN201911426901.6A Division CN111260343B (en) 2014-12-24 2014-12-24 Information authentication method, device and system based on confirmation code

Publications (2)

Publication Number Publication Date
CN105787711A true CN105787711A (en) 2016-07-20
CN105787711B CN105787711B (en) 2020-01-10

Family

ID=56377889

Family Applications (2)

Application Number Title Priority Date Filing Date
CN201410822164.2A Active CN105787711B (en) 2014-12-24 2014-12-24 Information authentication method, device and system based on confirmation code
CN201911426901.6A Active CN111260343B (en) 2014-12-24 2014-12-24 Information authentication method, device and system based on confirmation code

Family Applications After (1)

Application Number Title Priority Date Filing Date
CN201911426901.6A Active CN111260343B (en) 2014-12-24 2014-12-24 Information authentication method, device and system based on confirmation code

Country Status (1)

Country Link
CN (2) CN105787711B (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106603815A (en) * 2016-11-15 2017-04-26 青岛海信移动通信技术股份有限公司 Message processing method and device
CN109685508A (en) * 2018-12-27 2019-04-26 北京微播视界科技有限公司 Processing method, device, electronic equipment and the readable storage medium storing program for executing of transaction data
CN111245774A (en) * 2018-11-29 2020-06-05 阿里巴巴集团控股有限公司 Resource request processing method, device and system

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070027820A1 (en) * 2005-07-28 2007-02-01 Amir Elharar Methods and systems for securing electronic transactions
CN102509213A (en) * 2011-11-16 2012-06-20 上海翰鑫信息科技有限公司 System and method for remote payment and trade, mobile terminal and subscriber identity module (SIM) card
CN102622828A (en) * 2011-02-01 2012-08-01 福建新大陆电脑股份有限公司 Payment terminal capable of realization of splittable combination of secure payment and mobile payment and payment method thereof
CN103186857A (en) * 2011-12-31 2013-07-03 ***股份有限公司 Bank card payment method and system
CN103456050A (en) * 2013-07-22 2013-12-18 金硕澳门离岸商业服务有限公司 Electronic confirmation method and system

Family Cites Families (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20010037314A1 (en) * 2000-03-30 2001-11-01 Ishikawa Mark M. System, method and apparatus for authenticating the distribution of data
CN1619560A (en) * 2004-12-09 2005-05-25 中国工商银行 Card data business system used for payment on net and its method
CN1667632A (en) * 2005-05-08 2005-09-14 郑茵 Method of mobile payment based on payment confirmation codes
JP4885629B2 (en) * 2006-06-29 2012-02-29 フェリカネットワークス株式会社 Financial card system, communication device, authentication terminal, authentication method, and program.
CN101276448A (en) * 2007-03-29 2008-10-01 阿里巴巴集团控股有限公司 Payment system and method performing trading with identification card including IC card
CN101324942A (en) * 2007-06-13 2008-12-17 阿里巴巴集团控股有限公司 Payment system and method performing trade by identification card including IC card
CN101414370A (en) * 2008-12-15 2009-04-22 阿里巴巴集团控股有限公司 Payment method, system and payment platform capable of improving payment safety by virtual card
EP2382536B1 (en) * 2009-01-29 2018-04-25 Fortress Applications Ltd. System and methods for encryption with authentication integrity
EP2199965A1 (en) * 2009-04-22 2010-06-23 Euro-Wallet B.V. Payment transaction client, server and system
CN102223354B (en) * 2010-04-14 2015-05-13 阿里巴巴集团控股有限公司 Network payment authentication method, server and system
CN102609826B (en) * 2012-01-10 2015-07-22 武汉家事易农业科技有限公司 Logistics distribution system and method
CN103093341B (en) * 2012-12-27 2016-02-24 惠州市德赛工业研究院有限公司 A kind of safe payment method based on RFID intelligence payment system

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070027820A1 (en) * 2005-07-28 2007-02-01 Amir Elharar Methods and systems for securing electronic transactions
CN102622828A (en) * 2011-02-01 2012-08-01 福建新大陆电脑股份有限公司 Payment terminal capable of realization of splittable combination of secure payment and mobile payment and payment method thereof
CN102509213A (en) * 2011-11-16 2012-06-20 上海翰鑫信息科技有限公司 System and method for remote payment and trade, mobile terminal and subscriber identity module (SIM) card
CN103186857A (en) * 2011-12-31 2013-07-03 ***股份有限公司 Bank card payment method and system
CN103456050A (en) * 2013-07-22 2013-12-18 金硕澳门离岸商业服务有限公司 Electronic confirmation method and system

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106603815A (en) * 2016-11-15 2017-04-26 青岛海信移动通信技术股份有限公司 Message processing method and device
CN111245774A (en) * 2018-11-29 2020-06-05 阿里巴巴集团控股有限公司 Resource request processing method, device and system
CN111245774B (en) * 2018-11-29 2023-09-26 阿里巴巴集团控股有限公司 Resource request processing method, device and system
CN109685508A (en) * 2018-12-27 2019-04-26 北京微播视界科技有限公司 Processing method, device, electronic equipment and the readable storage medium storing program for executing of transaction data

Also Published As

Publication number Publication date
CN111260343B (en) 2023-07-07
CN111260343A (en) 2020-06-09
CN105787711B (en) 2020-01-10

Similar Documents

Publication Publication Date Title
US11170379B2 (en) Peer forward authorization of digital requests
KR102613422B1 (en) Transaction messaging
KR102141836B1 (en) Two factor authentication
US9864983B2 (en) Payment method, payment server performing the same and payment system performing the same
US10049357B2 (en) System and method of processing PIN-based payment transactions via mobile devices
US11157905B2 (en) Secure on device cardholder authentication using biometric data
CN106716916B (en) Authentication system and method
US20150066778A1 (en) Digital card-based payment system and method
CN104040933A (en) Differential client-side encryption of information originating from client
EP3186739B1 (en) Secure on device cardholder authentication using biometric data
US20150363774A1 (en) Methods and systems for permissions management with enhanced security
CN109120571B (en) System and method for authorized use of citizen personal data
US11855985B2 (en) Protected user information verification system
US9246677B2 (en) Method and system for secure data communication between a user device and a server
JP7267278B2 (en) Payment card authentication
CN105787711A (en) Message authentication method, message authentication device, and message authentication system based on confirmation code
KR20130095363A (en) A cash remittance method based on digital codes using hash function and electronic signature
US20140090040A1 (en) System and method for real time secure image based key generation using partial polygons assembled into a master composite image
TWI528302B (en) System and Method of Application for Wallet
CN109816525A (en) A kind of data processing method and its device, medium, terminal
CN110365646B (en) Method and device for associating entity to first server
KR101571126B1 (en) Apparatus and method for user authentication
CN109472667B (en) Aviation ticket management method and device
US20200273037A1 (en) Payment-system-based user authentication and information access system and methods
CN105117904A (en) Mobile terminal payment transaction method, mobile terminal, service provider, and system

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
REG Reference to a national code

Ref country code: HK

Ref legal event code: DE

Ref document number: 1226184

Country of ref document: HK

GR01 Patent grant
GR01 Patent grant
TR01 Transfer of patent right

Effective date of registration: 20200925

Address after: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman Islands

Patentee after: Innovative advanced technology Co.,Ltd.

Address before: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman Islands

Patentee before: Advanced innovation technology Co.,Ltd.

Effective date of registration: 20200925

Address after: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman Islands

Patentee after: Advanced innovation technology Co.,Ltd.

Address before: Cayman Islands Grand Cayman capital building, a four storey No. 847 mailbox

Patentee before: Alibaba Group Holding Ltd.

TR01 Transfer of patent right
TR01 Transfer of patent right

Effective date of registration: 20240223

Address after: Guohao Times City # 20-01, 128 Meizhi Road, Singapore

Patentee after: Advanced Nova Technology (Singapore) Holdings Ltd.

Country or region after: Singapore

Address before: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman Islands

Patentee before: Innovative advanced technology Co.,Ltd.

Country or region before: Cayman Islands

TR01 Transfer of patent right