CN116957575A

CN116957575A - System, method, device, equipment and storage medium for augmented reality service payment

Info

Publication number: CN116957575A
Application number: CN202310875911.8A
Authority: CN
Inventors: 王坤; 戴宗羽; 江唐美子; 林有发; 韩书婷; 钱涨洋; 汪凡; 王海燕; 吴超; 张璇
Original assignee: Alipay Hangzhou Information Technology Co Ltd
Current assignee: Alipay Hangzhou Information Technology Co Ltd
Priority date: 2023-07-17
Filing date: 2023-07-17
Publication date: 2023-10-27

Abstract

The application relates to the technical field of augmented reality, and particularly provides a system, a method, a device, equipment and a storage medium for payment of an augmented reality service. The method for the payment of the augmented reality service comprises the steps that the augmented reality device responds to the payment operation of a user for the augmented reality service and sends a payment request to a payment authentication platform; and the payment authentication platform receives the payment request, performs security authentication based on target equipment information in the payment request, and performs commodity payment based on payment account information and commodity information in the payment request if the security authentication is determined to pass. In this way, the user can initiate a payment request through the augmented reality device, and the payment authentication platform can carry out security authentication and payment through the target device information and the payment account information, so that the user can realize the augmented reality service payment without exiting the augmented reality service process, and the complicated operation of the augmented reality service payment is simplified while the security of the payment transaction is ensured.

Description

System, method, device, equipment and storage medium for augmented reality service payment

Technical Field

The application relates to the technical field of augmented reality, in particular to a system, a method, a device, equipment and a storage medium for payment of an augmented reality service.

Background

With the development of internet technology, extended Reality (XR) has been developed. XR refers to a generic term in the fields of Virtual Reality (VR), augmented Reality (Augmented Reality, AR) and Mixed Reality (MR) technology. XR technology can mix a virtual world environment with the real world, enabling users to perceive and manipulate things in the virtual world.

When a user purchases a commodity (e.g., a play object) in an XR business scenario (e.g., an XR play scenario), the commodity is typically purchased through the token by recharging the commodity in the XR client via a cell phone.

However, in this manner, the payment process for the XR service is lengthy and often interrupts the user's XR service session (e.g., XR game session). Therefore, how to simplify the cumbersome operation of XR business payment is a problem to be solved.

Disclosure of Invention

The embodiment of the application aims to provide a method, a device, electronic equipment and a storage medium for augmented reality service payment, which are used for simplifying the payment operation of an XR service when the XR service is paid.

In a first aspect, an embodiment of the present application provides a system for payment of an augmented reality service, including an augmented reality device and a payment authentication platform, where,

the augmented reality equipment is used for responding to the payment operation of the user for the augmented reality service, sending a payment request to the payment authentication platform and receiving a payment result returned by the payment authentication platform; the payment request comprises commodity information, payment account information and target equipment information;

and the payment authentication platform is used for receiving the payment request, carrying out security authentication based on the target equipment information in the payment request, and carrying out commodity payment based on the payment account information and commodity information in the payment request if the security authentication is determined to pass.

In one embodiment, the system further comprises a service server;

the augmented reality device is used for: responding to the payment operation, sending an order creation request to a service server, receiving order payment information returned by the service server, and sending a payment request to a payment authentication platform based on the order payment information and target equipment information; the order creation request contains commodity information and user account information; the order payment information comprises commodity information and payment account information;

The service server is used for: and receiving an order creation request, acquiring payment account information corresponding to the user account information based on the locally stored payment subscription relationship, and sending order payment information to the augmented reality equipment based on commodity information and the payment account information.

In one embodiment, the order payment information further includes a payment token;

the service server is used for: sending a token request to a payment authentication platform based on user account information, payment account information and commodity information, receiving a payment token returned by the authentication platform, and sending order payment information to the augmented reality device based on the payment token;

the payment authentication platform is used for: and receiving a token request, acquiring target equipment information corresponding to the user account information according to the locally stored user binding relationship, carrying out equipment authentication based on the target equipment information, and if the equipment authentication is determined to be successful, sending a payment token to the service server.

In one embodiment, the payment authentication platform is for:

determining a device authentication state of target device information in the payment request;

if the equipment authentication state is determined to represent successful authentication, the safety authentication is determined to pass.

In one embodiment, the payment authentication platform is for:

if the payment request is determined to further contain a payment token, carrying out token authentication on the payment token;

if the token authentication is determined to pass and the equipment authentication state represents that the authentication is successful, the security authentication is determined to pass.

In one embodiment, the augmented reality device is further configured to:

the method comprises the steps of sending the online state of equipment to a payment authentication platform, receiving a challenge code returned by the payment authentication platform, signing target equipment information and the challenge code to obtain equipment signature information, and sending the equipment signature information to the payment authentication platform;

the payment authentication platform is further configured to: based on the received on-line state, sending a challenge code to the augmented reality device, and carrying out signature verification on the received device signature information, if the signature verification is confirmed to pass, and the device registration information set contains target device information, obtaining a device authentication state representing successful authentication; the device registration information set includes at least one device registration information.

In one embodiment, the payment authentication platform is for:

determining the amount to be paid according to commodity information;

Determining the account dividing amount of each payment object according to the amount to be paid and the payment proportion of each payment object correspondingly set by commodity information;

and based on the payment account information, deducting payment according to the account amount of each payment object.

In a second aspect, an embodiment of the present application provides a method for payment of an augmented reality service, where the method includes:

responding to the payment operation of the user aiming at the augmented reality service, and sending a payment request to a payment authentication platform; the payment request comprises commodity information, payment account information and target equipment information;

receiving a payment result returned by the payment authentication platform; the payment result is that the payment authentication platform carries out security authentication based on the target equipment information in the payment request, and if the security authentication is confirmed to pass, commodity payment is carried out based on the payment account information and commodity information in the payment request and then returned.

In one embodiment, in response to a payment operation of a user for an augmented reality service, sending a payment request to a payment authentication platform includes:

in response to the payment operation, sending an order creation request to a service server; the order creation request contains commodity information and user account information;

Receiving order payment information returned by the service server based on the order creation request; the order payment information comprises commodity information and payment account information; the payment account information is acquired by the service server based on a payment subscription relationship between the user account information and the payment account information;

and sending a payment request to a payment authentication platform based on the order payment information and the target device information.

In a third aspect, an embodiment of the present application provides a method for payment of an augmented reality service, where the method includes:

receiving a payment request sent by an augmented reality device; the payment request is sent by the augmented reality device in response to a payment operation of the user for the augmented reality service; the payment request comprises commodity information, payment account information and target equipment information;

performing security authentication based on target device information in the payment request;

and if the security authentication is confirmed to pass, commodity payment is carried out based on the payment account information and commodity information in the payment request.

In one embodiment, the payment request further includes a payment token; before receiving the payment request sent by the augmented reality device, the method further comprises:

receiving a token request sent by a service server; the token request is sent by the service server based on an order creation request of the augmented reality device; the token request comprises user account information, payment account information and commodity information; the order creation request contains commodity information and user account information; the payment account information is acquired by the service server based on a payment subscription relationship between the user account information and the payment account information;

Acquiring target equipment information corresponding to the user account information in the token request according to the locally stored user binding relationship;

performing device authentication based on the target device information;

if the equipment authentication is determined to be successful, sending a payment token to the service server, so that the service server sends order payment information to the augmented reality equipment based on the payment token; the augmented reality device sends a payment request to the payment authentication platform based on the order payment information and the target device information; the order payment information includes payment token, merchandise information, and payment account information.

In one embodiment, security authentication based on target device information in a payment request includes:

acquiring target equipment information in a payment request;

determining a device authentication state of the target device information;

acquiring a payment token and target equipment information in a payment request;

performing token authentication on the payment token, and determining the equipment authentication state of the target equipment information;

If the token authentication is determined to pass and the equipment authentication state characterizes authentication to be successful, the security authentication is determined to pass.

In one embodiment, before the security authentication based on the target device information in the payment request, the method further comprises:

when the online state sent by the augmented reality equipment is determined to be received, a challenge code is sent to the augmented reality equipment;

receiving device signature information sent by the augmented reality device based on the challenge code; the device signature information is obtained after signing the target device information and the challenge code;

signature verification is carried out on the equipment signature information;

if the signature verification is confirmed to pass, and the equipment registration information set contains target equipment information, acquiring an equipment authentication state representing successful authentication; the device registration information set includes at least one device registration information.

In one embodiment, commodity payment is performed based on payment account information and commodity information in a payment request, including:

determining the amount to be paid according to commodity information;

In a fourth aspect, an embodiment of the present application provides an apparatus for payment of an augmented reality service, including:

the sending unit is used for responding to the payment operation of the user for the augmented reality service and sending a payment request to the payment authentication platform; the payment request comprises commodity information, payment account information and target equipment information;

the receiving unit is used for receiving a payment result returned by the payment authentication platform; the payment result is that the payment authentication platform carries out security authentication based on the target equipment information in the payment request, and if the security authentication is confirmed to pass, commodity payment is carried out based on the payment account information and commodity information in the payment request and then returned.

In one embodiment, the transmitting unit is configured to:

In a fifth aspect, an embodiment of the present application provides an apparatus for payment of an augmented reality service, including:

the receiving unit is used for receiving the payment request sent by the augmented reality equipment; the payment request is sent by the augmented reality device in response to a payment operation of the user for the augmented reality service; the payment request comprises commodity information, payment account information and target equipment information;

an authentication unit for performing security authentication based on the target device information in the payment request;

and the payment unit is used for carrying out commodity payment based on the payment account information and commodity information in the payment request if the security authentication is confirmed to pass.

In one embodiment, the receiving unit is further configured to:

performing device authentication based on the target device information;

In one embodiment, the authentication unit is configured to:

acquiring target equipment information in a payment request;

determining a device authentication state of the target device information;

In one embodiment, the authentication unit is configured to:

In one embodiment, the authentication unit is further configured to:

signature verification is carried out on the equipment signature information;

In one embodiment, the payment unit is for:

determining the amount to be paid according to commodity information;

In a sixth aspect, an embodiment of the present application provides an electronic device, including:

a processor; and

a memory storing computer instructions for causing a processor to perform the steps of the method provided in various alternative implementations of any of the augmented reality business payments described above.

In a seventh aspect, embodiments of the present application provide a storage medium storing computer instructions for causing a computer to perform the steps of a method provided in various alternative implementations of any of the augmented reality business payments described above.

In the system, the method, the device, the equipment and the storage medium for the payment of the augmented reality service, which are provided by the embodiment of the application, a payment request is sent to a payment authentication platform in response to the payment operation of a user for the augmented reality service; the payment request comprises commodity information, payment account information and target equipment information; receiving a payment result returned by the payment authentication platform; the payment result is that the payment authentication platform carries out security authentication based on the target equipment information in the payment request, and if the security authentication is confirmed to pass, commodity payment is carried out based on the payment account information and commodity information in the payment request and then returned. Therefore, the XR equipment can directly carry out payment without exiting the XR service process, so that complicated operation of XR service payment is simplified, safety authentication and payment are carried out through the target equipment information and the payment account information, and the safety of payment transaction is ensured.

Drawings

In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings that are needed in the description of the embodiments or the prior art will be briefly described, and it is obvious that the drawings in the description below are some embodiments of the present application, and other drawings can be obtained according to the drawings without inventive effort for a person skilled in the art.

Fig. 1 is a schematic architecture diagram of a system for augmented reality business payment according to some embodiments of the application.

Fig. 2 is an interactive flow diagram of a device initialization method in accordance with some embodiments of the application.

Fig. 3 is an interactive flow chart of a device registration method in accordance with some embodiments of the application.

Fig. 4 is an interactive flow chart of a device authentication method according to some embodiments of the application.

Fig. 5 is an interactive flow chart of a payment sign-up method in accordance with some embodiments of the application.

Fig. 6 is an interactive flow chart of a user device binding method in accordance with some embodiments of the application.

Fig. 7 is a flow chart of an implementation of a method of XR service payment in accordance with some embodiments of the application.

Fig. 8 is an interactive flow chart of a method of XR service payment in accordance with some embodiments of the application.

Fig. 9 is a business architecture diagram of XR business payments in accordance with some embodiments of the application.

Fig. 10 is a block diagram of an apparatus for augmented reality business payment according to some embodiments of the present application.

Fig. 11 is a block diagram of an apparatus for payment of another augmented reality service according to some embodiments of the present application.

Fig. 12 is a schematic diagram of an electronic device according to some embodiments of the application.

Detailed Description

The following description of the embodiments of the present application will be made more apparent and fully hereinafter with reference to the accompanying drawings, in which some, but not all embodiments of the application are shown. All other embodiments, which can be made by those skilled in the art based on the embodiments of the present application without making any inventive effort, are intended to fall within the scope of the present application. In addition, the technical features of the different embodiments of the present application described below may be combined with each other as long as they do not collide with each other.

Some of the terms involved in the embodiments of the present application will be described first to facilitate understanding by those skilled in the art.

Terminal equipment: the mobile terminal, stationary terminal or portable terminal may be, for example, a mobile handset, a site, a unit, a device, a multimedia computer, a multimedia tablet, an internet node, a communicator, a desktop computer, a laptop computer, a notebook computer, a netbook computer, a tablet computer, a personal communications system device, a personal navigation device, a personal digital assistant, an audio/video player, a digital camera/camcorder, a positioning device, a television receiver, a radio broadcast receiver, an electronic book device, a game device, or any combination thereof, including the accessories and peripherals of these devices, or any combination thereof. It is also contemplated that the terminal device can support any type of interface (e.g., wearable device) for the user, etc.

And (3) a server: the cloud server can be an independent physical server, a server cluster or a distributed system formed by a plurality of physical servers, and can also be a cloud server for providing cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, basic cloud computing services such as big data and artificial intelligent platforms and the like.

In an actual XR service scenario, a user typically charges a cell phone in an XR client to obtain a token, and then purchases a commodity such as an XR game prop through the token.

However, in this way, the payment operation flow of the XR service is lengthy, and the XR service process of the user is often interrupted, so that the user experience is poor. Further, in XR scenario, funds accounting of multiple parties is usually involved, such as operators, equipment manufacturers, sites, and IP parties, and it is difficult to guarantee the credibility of payment transaction, so that payment is usually offline for accounting, which causes a problem of complicated operations of multi-party accounting during payment accounting.

Based on the defects of the related art, the embodiment of the application provides a system, a method, a device, equipment and a storage medium for the payment of an augmented reality service, which aim to simplify the payment operation of the XR service during the payment of the XR service.

Referring to fig. 1, a schematic architecture diagram of a system for payment of an augmented reality service according to an embodiment of the present application is shown. The following describes a system for augmented reality service payment according to an embodiment of the present application with reference to fig. 1.

In fig. 1, the system includes an XR device and a payment authentication platform. The XR device is equipped with an XR client (e.g., VR gaming client). The payment authentication platform is a platform for security authentication and payment.

In one embodiment, the augmented reality device is configured to send a payment request to the payment authentication platform in response to a payment operation of a user for an augmented reality service, and receive a payment result returned by the payment authentication platform; the payment request includes commodity information, payment account information and target device information. And the payment authentication platform is used for receiving the payment request, carrying out security authentication based on the target equipment information in the payment request, and carrying out commodity payment based on the payment account information and commodity information in the payment request if the security authentication is determined to pass.

As one example, a user clicks a payment key (i.e., payment operation) corresponding to a game item (i.e., augmented reality service) in a VR client in a VR device. And the VR client responds to the clicking operation and sends a payment request containing the game prop identification (namely commodity information), the payment precious account number (namely payment account number information) and the equipment serial number (namely target equipment information) to the payment authentication platform. The payment authentication platform acquires the game prop identification, the payment treasured account number and the equipment serial number in the payment request, carries out safety authentication based on the equipment serial number, and pays and purchases the game prop corresponding to the game prop identification through the payment treasured account number if the safety authentication is confirmed to pass.

In this way, in the XR game scene, the user can directly purchase XR commodity in the XR equipment, does not need to exit the XR game, does not need to recharge the token, simplifies the payment operation of XR service, improves the user XR service experience, further, the security authentication based on the target equipment information and the payment by deduction based on the payment account information, and further improves the security of service transaction.

Further, the system can also comprise a service server. The service server is a server for providing XR service for XR clients. Optionally, the payment account information may be stored locally by the XR device, or may be obtained by the service server.

In one embodiment, before sending the payment request to the payment authentication platform, the XR device may also obtain, through the service server, order payment information of the commodity to be purchased, so that the payment request may be sent based on the order payment information.

Specifically, the augmented reality device is used for: responding to the payment operation, sending an order creation request to a service server, receiving order payment information returned by the service server, and sending a payment request to a payment authentication platform based on the order payment information and target equipment information; the order creation request contains commodity information and user account information; the order payment information comprises commodity information and payment account information;

The service server is used for: receiving an order creation request, acquiring payment account information corresponding to the user account information based on a payment subscription relation between the user account information and the payment account information, and sending order payment information to the augmented reality equipment based on commodity information and the payment account information.

That is, the XR device generates an order creation request containing merchandise information and user account information in response to a payment operation by the user, and transmits the order creation request to the service server. The business server obtains commodity information and user account information in the order creation request, obtains payment account information corresponding to the user account information according to a locally stored payment subscription relationship, generates order payment information containing the commodity information and the payment account information, and sends the order payment information to the XR equipment. The XR device generates a payment request containing the order payment information and the target device information and sends the payment request to a payment authentication platform.

It should be noted that the payment subscription relationship may be an association relationship between user account information and payment account information that is established in advance.

Optionally, the order payment information may further include at least one of the following parameters: order time and order Identification (ID).

In this way, order payment information may be generated by the service server so that a deduction payment may be made through the order payment information.

In one embodiment, to improve the security of payment for subsequent transactions, in the process of generating order payment information, the service server may further obtain a payment token (token) through the payment authentication platform, so as to generate order payment information including the payment token.

Specifically, the service server is configured to: and sending a token request to the payment authentication platform based on the user account information, the payment account information and the commodity information, receiving a payment token returned by the authentication platform, and sending order payment information to the augmented reality device based on the payment token.

That is, the service server sends a token request containing user account information, payment account information, and merchandise information to the payment authentication platform. The payment authentication platform acquires user account information, payment account information and commodity information in the token request, acquires target equipment information correspondingly set by the user account information according to a locally stored user binding relationship, and performs equipment authentication based on the target equipment information. If the equipment authentication is successful, the payment authentication platform generates a payment token and sends the payment token to the service server. The business server generates order payment information comprising payment token, commodity information and payment account information, and sends the order payment information to the XR device.

It should be noted that, the user binding relationship is an association relationship between user account information and device information, which is established in advance.

Further, if it is determined that the target device information corresponding to the user account information does not exist, it is determined that the user account and the target device are not bound, user identity authentication failure is determined, and the payment flow is stopped. Optionally, in order to improve accuracy of identity verification, the target device information may be obtained from the XR device through the service server, and then it is determined whether the locally stored user binding relationship includes a corresponding relationship between the target device information and the user account information, if yes, the identity verification is determined to be successful, otherwise, it is determined that the user identity verification fails, and the payment flow is stopped.

Further, if the device authentication is determined to fail, the target device is determined to be an illegal device, and the payment flow is stopped.

Optionally, to improve transaction security, a validity period of the payment token may be set, for example, the payment token is set for N minutes and then is disabled, which is not limited herein. Wherein N is a positive number.

Thus, transaction security is improved by the preliminary authentication and payment token.

Optionally, to further improve transaction security, the payment authentication platform may perform security authentication only based on the target device information after receiving the payment request, and may also perform security authentication based on the target device information and the payment token, respectively.

In one embodiment, if security authentication is performed based on only the target device information, whether the device authentication is successful can be determined directly from the locally stored device authentication status.

Specifically, the payment authentication platform is used for: and determining the equipment authentication state of the target equipment information in the payment request, and if the equipment authentication state is determined to represent successful authentication, determining that the security authentication is passed.

That is, the payment authentication platform obtains the target device information in the payment request, and locally obtains the device authentication status stored in association with the target device information. If the payment authentication platform determines that the equipment authentication state representation authentication is successful, the security authentication is determined to pass.

Optionally, the device authentication status may be determined by real-time authentication, or may be determined by authentication when the XR device is online.

In one embodiment, if security authentication is performed based on the target device information and the payment token, it is possible to determine whether the device authentication is successful directly through the locally stored device authentication state, and determine whether the token authentication is successful through the payment token authentication.

Specifically, the payment authentication platform is used for: if the payment request also contains the payment token, carrying out token authentication on the payment token, and if the token authentication is confirmed to pass and the equipment authentication state represents that the authentication is successful, confirming that the security authentication passes.

That is, the payment authentication platform obtains the local token stored in association with the payment account information from the local, if the local token is consistent with the payment token, the token authentication is determined to pass, the device authentication state stored in association with the target device information is obtained from the local, and if the device authentication state is determined to represent successful authentication, the device authentication is determined to be successful. And if the payment authentication platform determines that the token authentication passes and the equipment authentication is successful, judging that the security authentication passes.

Thus, the security of transaction payment can be further improved through equipment authentication and token authentication.

In one embodiment, when the XR device is online, the payment authentication platform may perform device authentication on the XR device, and obtain and store a device authentication state.

Specifically, the augmented reality device is also used for: the method comprises the steps of sending the online state of equipment to a payment authentication platform, receiving a challenge code returned by the payment authentication platform, signing target equipment information and the challenge code to obtain equipment signature information, and sending the equipment signature information to the payment authentication platform;

the payment authentication platform is further configured to: signature verification is carried out on the equipment signature information, if the signature verification is passed, whether the equipment registration information set contains target equipment information is judged, and if yes, an equipment authentication state representing successful authentication is obtained; the device registration information set includes at least one device registration information.

That is, after the XR device is powered on, the online status is sent to the service server. And the service server sends the online state of the XR equipment to the payment authentication platform. The payment authentication platform sends the challenge code to the XR device via the service server. The XR equipment signs the target equipment information and the challenge code, obtains equipment signature information, and sends the equipment signature information to the payment authentication platform through the service server. And the payment authentication platform performs signature verification on the equipment signature information through the equipment certificate public key, if the signature verification is passed, judging whether the equipment registration information set contains target equipment information, and if so, obtaining an equipment authentication state representing successful authentication. The set of device registration information is a set of device registration information. Further, the XR device receives, through the service server, a device authentication result including a device authentication status sent by the payment authentication platform. Further, if the XR device determines that the device authentication fails according to the device authentication result, the device authentication process is repeatedly executed in a circulating manner until the device authentication is determined to be successful.

The device registration information is obtained after initializing and registering the XR device. In one embodiment, after device initialization, device registration is performed in the service server and device registration is performed in the payment authentication platform.

Specifically, the device initialization procedure may be: the XR equipment generates equipment certificates based on target equipment information according to preset rules, obtains equipment certificate public keys and equipment certificate private keys based on the equipment certificates, encrypts the target equipment information based on the equipment certificate private keys to obtain encrypted equipment information, and sends the encrypted equipment information and the equipment certificate public keys to the payment authentication platform through the service server. The payment authentication platform decrypts the encrypted device information through the device certificate public key to obtain target device information, and returns an initialization result to the XR device through the service server.

The preset rule is a rule for generating a digital certificate. Optionally, the XR device may also generate a device identity identifier (Trust ID, TID) according to a preset rule, and add the TID to the target device information. The TID is used to identify the device unique identity.

Specifically, the device registration process may include:

and when the service server receives the registration request of the XR equipment, registering and recording the target equipment information of the XR equipment so as to finish the registration of the XR equipment in the service server, and sending the equipment registration request to the payment authentication platform. And the payment authentication platform judges whether the XR equipment is initialized according to the target equipment information and the initialization record, if so, the payment authentication platform registers the target equipment information and returns a registration result to the service server.

Further, after the device is initialized, the XR device may further detect whether the device has been initialized again, and if so, send a registration request to determine whether the initialization has been completed before registration.

Therefore, when the XR equipment is activated, equipment authentication can be performed to acquire and store equipment authentication states, whether equipment authentication is successful or not can be directly determined in the subsequent steps, and processing efficiency is improved.

In one embodiment, because XR services typically require multiparty funds accounting, accounting-deduction payments may be made through a payment authentication platform.

Specifically, the payment authentication platform is used for: determining the amount to be paid according to commodity information; determining the account dividing amount of each payment object according to the amount to be paid and the payment proportion of each payment object correspondingly set by commodity information; and based on the payment account information, deducting payment according to the account amount of each payment object.

Optionally, the payment authentication platform may include an authentication server (e.g., ant chain) and a payment server (e.g., payment treasury server). The payment server is used for payment deduction processing and account separation processing. The authentication server is used for device initialization, device registration, security authentication, and the like.

In one embodiment, to improve the security of data transmission, to further improve the transaction security, the data may be encrypted by the sending device and then transmitted to the receiving device, and the encrypted data may be decrypted by the receiving device. The set of sending device and receiving device used for encrypting and decrypting data can be any two devices in the XR service system, and the method is not limited herein. For example, the sending device may be an XR device and the receiving device may be a payment authentication platform. Alternatively, the data encryption and decryption may be performed by using a data certificate, or any other encryption method may be used, which is not limited herein.

In the embodiment of the application, before XR service payment is carried out, equipment registration and equipment authentication are required to be carried out on XR equipment, and user equipment binding and payment subscription are carried out. In this way, through equipment registration, equipment registration information can be obtained, equipment authentication can be further carried out on XR equipment through the equipment registration information so as to judge whether the equipment is legal, and through user equipment binding, a user binding relationship between user account information and target equipment information is established, so that user identity authentication can be carried out through the user binding relationship, and through payment subscription, a payment subscription relationship between the payment account information and the user account information is established, and further, payment can be carried out through the payment subscription relationship.

Optionally, the system may further include a terminal device (e.g., a mobile phone). The terminal device may also have a payment Application installed therein, such as a payment Application (APP). In the signing process, the XR device can make payment signing through the payment application of the terminal device.

In the embodiment of the application, the user can directly initiate the payment request in the XR equipment only by authorizing the payment subscription and the user equipment binding in the initial stage. The payment authentication platform can carry out safety authentication and deduction payment through the target equipment information and the payment account information, so that a user can realize the payment of the augmented reality service without exiting the augmented reality service process and without additionally recharging and storing, the safety of the payment transaction is ensured, the complicated operation of the payment of the augmented reality service is simplified, the user experience is improved, the payment and accounting can be carried out through the payment authentication platform, the problem that a large amount of manpower and time cost are consumed by offline manual accounting is solved, the flexibility and the credibility are realized, the convenience of the payment and accounting is improved, the risk of errors existing in the existing secondary accounting is avoided, and the pain point and the user demand of the payment of the XR industry are solved.

Referring to fig. 2, an interactive flow chart of a device initialization method is shown. An XR client, a secure software development kit (Software Development Kit, SDK) and an authentication server are included in fig. 2. Wherein the XR client and the secure SDK are located on the same XR device. The following describes a method for initializing the device with reference to fig. 2, and the specific implementation flow of the method is as follows:

step 200: the XR client sends an initialization request containing target device information to the secure SDK.

In one embodiment, the XR client sends an initialization request to the secure SDK after determining that the production line assembly is complete and the power-on initialization.

The initialization request contains target equipment information. Optionally, the target device information may include a product Serial Number (SN) of the XR device, and may also include a central processor Serial Number (Central Processing Unit Number, CPU Num). In practical application, the target device information may be set according to the practical application scenario, which is not limited herein.

Step 201: the secure SDK generates a device certificate.

In one embodiment, the secure SDK obtains the target device information in the initialization request and generates a device certificate based on the target device information according to a preset rule.

Wherein the device certificate private key and the device certificate public key can be obtained and stored through the device certificate. Alternatively, the device certificate private key and the device certificate public key may be symmetric encryption keys or asymmetric encryption keys.

Optionally, the XR device may also generate a TID according to a preset rule, and add the TID to the target device information.

Step 202: the secure SDK encrypts the target device information to obtain encrypted device information.

In one embodiment, the secure SDK encrypts the target device information with the device certificate private key to obtain encrypted device information.

Step 203: the secure SDK returns encrypted device information and a device certificate public key to the XR device.

Step 204: the XR device sends the encrypted device information and the device certificate public key to an authentication server.

In one embodiment, the XR device sends encrypted device information and a device certificate public key to the service server. The service server transmits the encrypted device information and the device certificate public key to the authentication server.

Step 205: the authentication server decrypts the encrypted device information based on the device key to obtain the target device information.

Step 206: the authentication server holds the target device information and the device certificate public key.

Further, the authentication server returns an initialization result to the service server. And the service server sends the initialization result to the XR client.

In this way, the XR device may be initialized first.

After the device is initialized, the device may be registered. Referring to fig. 3, an interactive flow chart of a device registration method is shown. An XR client, a secure SDK, a service server, and an authentication server are included in fig. 3. Wherein the XR client and the secure SDK are located on the same XR device. The following describes a method for registering the device with reference to fig. 3, and the specific implementation flow of the method is as follows:

step 300: the XR client sends a reinitialization request to the secure SDK.

Step 301: the secure SDK acquires an initialization detection result.

In one embodiment, the secure SDK obtains the target device information included in the reinitialization request, and obtains an initialization state corresponding to the target device information. If it is determined that the initialization state is that the initialization is completed, an initialization detection result indicating that the initialization is completed is returned to the XR client, otherwise, the above device initialization procedure is executed, i.e. steps 200 to 206.

Step 302: and the secure SDK returns an initialization detection result to the XR client.

Step 303: the XR client sends a registration request to the service server.

In one embodiment, the XR client determines that the initialization is completed according to the initialization detection result, and sends a registration request to the service server. Wherein the registration request may contain target device information.

Step 304: the service server performs device registration recording.

In one embodiment, the service server performs registration record on the target device information to realize registration on the XR device.

Step 305: the service server sends a device registration request to the payment authentication platform.

Step 306: the payment authentication platform performs device registration recording.

In one embodiment, the payment authentication platform obtains the target device information according to the device registration request, and determines whether the XR device is initialized according to the target device information and the initialization record, if yes, the target device information is registered and recorded. Alternatively, device registration may be performed in a manner that is ant-chained. Further, target device information may be added to the device registration information set.

Further, the payment authentication platform may return the registration result to the service server.

Thus, the XR device may be registered by the service server and the authentication server.

After device registration is complete, the online XR device may be trusted authenticated. Referring to fig. 4, an interactive flow chart of a device authentication method is shown. An XR client, secure SDK, and authentication server are included in fig. 4. Wherein the XR client and the secure SDK are located on the same XR device. The following describes the method for device authentication with reference to fig. 4, and the specific implementation flow of the method is as follows:

step 400: the XR client sends the presence status to the authentication server.

In one embodiment, after the XR client is powered on, the online status is sent to the service server. The service server sends the presence status to the authentication server.

Optionally, the XR client may also periodically send presence status to the service server.

Step 401: the authentication server sends a challenge code to the XR client.

In one embodiment, the authentication server will send a challenge code to the service server. The service server sends the challenge code to the XR client.

The challenge code is also called a challenge password, and refers to a set of encrypted passwords generated by following a handshake authentication protocol, and the encrypted passwords are used for ensuring that the true passwords of users are not revealed in the transmission process so as to improve data security.

Step 402: the XR client sends an authentication encryption request to the secure SDK.

The authentication encryption request may include a challenge code and target device information.

Step 403: and signing by the secure SDK to obtain device signature information.

In one embodiment, the secure SDK signs the challenge code and the target device information with the device certificate private key to obtain device signature information.

Step 404: the secure SDK sends the device signature information to the XR client.

Step 405: the XR client sends device signature information to the authentication server.

In one embodiment, the XR client sends device signature information to the service server. The service server sends the device signature information to the authentication server.

Step 406: the authentication server performs signature verification and device authentication on the device signature information.

In one embodiment, the authentication server performs signature verification on the device signature information based on the device certificate public key, if verification is passed, the authentication server obtains target device information and challenge codes in the device signature information, and if the challenge codes are consistent with locally stored challenge codes, and the target device information is contained in the device registration information set, the authentication server determines that the device authentication is passed.

Further, the authentication server may send the device authentication result to the service server and the XR client, respectively.

Further, if the XR device determines that the authentication fails, the device authentication procedure, i.e., steps 400-406, is repeated until it is determined that the device authentication is successful.

In this way, the XR device may be device authenticated by the authentication server.

In one embodiment, the payment subscription may be made after the device authentication is completed. Referring to fig. 5, an interactive flow chart of a payment signing method is shown. An XR client, a service server, a terminal device and a payment authentication platform are included in fig. 5. Wherein the XR client is located at the XR device. The terminal device is provided with a payment application.

The method for signing up payment will be described with reference to fig. 5, and the specific implementation flow of the method is as follows:

step 500: and the XR client sends a short message link to the terminal equipment.

In one embodiment, the XR client judges whether the user is first used, if yes, the user is guided to register, user account information is obtained, after the user registration is confirmed, the user is guided to log in and pay for subscription, and then a short message link is sent to the terminal equipment based on the user account information in response to subscription request operation of the user. The short message link includes user account information, and may further include a uniform resource locator (Uniform Resource Locator, URL) for starting a payment application.

Optionally, the verification of the login password strength can be increased, so that the complexity of login verification is improved, the machine registration can be identified in an image, text and logic judgment mode, and the mobile phone number binding verification flow can be increased during login. Thus, the security of user login can be improved.

Step 501: the terminal device logs in to the payment application.

In one embodiment, the terminal device logs in the payment application through the payment account of the user and jumps to the sign-up applet in response to the user clicking on the short message link.

Step 502: and the terminal equipment sends a signing request to the payment authentication platform.

In one embodiment, the payment application verifies the identity of the user in response to an authentication operation of the user, and if the authentication operation is determined, sends a subscription request to a payment server in the payment authentication platform.

It should be noted that, any authentication operation in the embodiment of the present application may be performed by password and authentication information, or may be performed by biometric means such as face recognition, iris recognition, fingerprint recognition, and eye movement, which is not limited herein.

In the embodiment of the application, only signing and closing examples are described by using a mobile phone, and optionally, a payment signing interface can be called in an XR device to send a signing request to a payment server in a payment authentication platform so as to realize payment signing. Thus, the complex operation of payment signing is simplified, and the payment signing experience is improved.

Step 503: and the payment authentication platform performs signing processing.

In one embodiment, the payment server establishes a payment subscription relationship between the payment account information and the user account information, and realizes payment subscription.

Step 504: and the payment authentication platform returns a signing result to the service server.

Step 505: and the service server returns a signing result to the XR client.

In one embodiment, the payment server returns the signing result to the payment application, authentication server, service server, and XR client in sequence.

It should be noted that, payment subscription is completed through user protocol confirmation and subscription interaction based on the needs of the user, and is not forced to the user, and the user can cancel the configured payment subscription at any time.

In this way, a payment subscription relationship between the payment account information and the user account information can be established, and payment subscription is realized, so that in the payment step, the substitute payment can be performed based on the payment subscription relationship.

In one embodiment, the user device binding may occur after the device authentication is completed. Referring to fig. 6, an interactive flow chart of a user equipment binding method is shown. An XR client, secure SDK, and authentication server are included in fig. 6. Wherein the XR client and the secure SDK are located at the XR device. The following describes a method for binding the user equipment with reference to fig. 6, and the specific implementation flow of the method is as follows:

step 600: the XR client sends a binding encryption request to the secure SDK.

In one embodiment, the XR client may direct the user to perform user equipment binding, invoke a user equipment binding interface in response to a user equipment binding operation of the user, and send a binding encryption request to the secure SDK.

The binding encryption request may include user account information and target device information.

Further, before sending the binding encryption request, to improve security, the XR device may further guide the user to input an operation password, perform password verification in response to the password input operation of the user, and if the verification is passed, send the binding encryption request to the secure SDK.

Further, an operation password may also be preset before performing step 600. In one embodiment, the XR client may set the operation password in advance by:

And responding to the login operation of the security center of the user, logging in the security center, responding to the password setting operation of the user, acquiring an operation password input by the user, judging whether the device binding with the terminal device of the user is finished, if the device binding is not finished, executing the terminal device binding operation, if the device binding is finished, responding to the verification input operation of the user, acquiring a verification code (such as a mobile phone verification code) input by the user, if the verification code verification is successful, determining that the password setting is successful, otherwise, determining that the password setting fails. Wherein the verification code is acquired by the user through the terminal equipment.

Further, if the user forgets to operate the password, the operation password can be reset. In one embodiment, the following steps may also be employed to reset the operation code:

and responding to the login operation of the security center of the user, logging in the security center, responding to the password resetting operation of the user, acquiring a new operation password input by the user, responding to the verification input operation of the user, acquiring a verification code (such as a mobile phone verification code) input by the user, if the verification code verification is determined to be successful, determining that the password setting is successful, otherwise, determining that the password setting is failed. Further, if it is determined that the terminal device cannot be used, the verification code can be obtained in a mail mode.

Further, to increase account security, at least one of the following approaches may also be employed:

mode one: and carrying out a terminal equipment replacement binding flow according to the operation of the user so as to replace the terminal equipment bound by the user.

Mode two: and identifying whether the account number logs in different places so as to detect whether the login equipment is unbound terminal equipment or abnormal IP.

Mode three: and verifying the operation password by adopting a screen locking mode.

Mode four: when the user registers, the user is authenticated in the XR equipment through the iris, palm print and other biological characteristics of the user.

Step 601: the secure SDK encrypts based on the private key of the user certificate to obtain binding encryption information.

In one embodiment, the secure SDK generates a user certificate and encrypts the target device information and the user account information with a user certificate private key.

The public key of the user certificate and the private key of the user certificate for encryption and decryption can be obtained through the user certificate.

Step 602: the secure SDK sends the user certificate public key and the binding encryption information to the XR client.

Step 603: the XR client sends the user certificate public key and the binding encryption information to the authentication server.

In one embodiment, the XR client sends the user certificate public key and binding encryption information to the service server. The service server transmits the user certificate public key and the binding encryption information to the authentication server.

Step 604: the authentication server decrypts the binding encryption information based on the user certificate public key to obtain the binding decryption information.

The binding decryption information comprises target equipment information and user account information.

Step 605: the authentication server verifies the binding decryption information.

In one embodiment, the authentication server performs device authentication based on the target device information, and if the device authentication passes, a user binding relationship between the user account information and the target device information is established, so that the user and the XR device are bound. And if the equipment authentication fails or the equipment is decrypted, returning a binding failure result to the XR client.

Further, the authentication server may return the successful binding results including the user binding relationship to the service server and the XR client, respectively. The service server stores the user binding relationship based on the received binding success result. If the XR client receives the binding failure result, the user binding process is repeatedly executed, i.e. step 600-step 605, until the user equipment is successfully bound.

Furthermore, the user certificate can be logged out based on the unbinding operation of the user, and the user binding relation between the user account information and the target device information can be deleted through an unbinding interface provided by the payment authentication platform so as to release the trusted binding relation.

In the embodiment of the application, the secure SDK provides a key generation interface in a trusted execution environment (Trusted Execution Environment, TEE), so that the key generation interface can be invoked, a digital certificate, namely a device certificate and a user certificate, is generated by adopting a rule which is not external, an invariable key pair can be obtained, and a public key in the key pair is uploaded to a payment authentication platform, so that transmission data can be encrypted and decrypted through the key pair, and the security and the authenticity of the transmission data are ensured. And, to further improve security, the instruction to repeatedly generate the digital certificate is not processed, and the security level of the digital certificate may be set to a higher level, and the key pair may be set to a global default, and also the key pair may be set one-to-one with the device.

And after the user equipment is successfully bound and payment signing is completed, the substitute deduction payment can be carried out for the XR service. Referring to fig. 7, a flow chart of an implementation of a method for XR service payment is shown. The following describes a method for executing XR service payment by the above XR service payment system with reference to fig. 7, and the specific implementation flow of the method is as follows:

Step 700: and the XR equipment responds to the payment operation of the user for the XR service and sends a payment request to the payment authentication platform.

The payment request comprises commodity information, payment account information and target equipment information.

In one embodiment, an XR device sends an order creation request to a business server in response to a payment operation; receiving order payment information returned by the service server based on the order creation request; and sending a payment request to a payment authentication platform based on the order payment information and the target device information.

The order creation request comprises commodity information and user account information; the order payment information comprises commodity information and payment account information; the payment account information is set corresponding to the user account information.

Step 701: the payment authentication platform receives a payment request sent by the XR device.

Wherein the payment request is sent by the XR device in response to a payment operation by the user for the XR service.

In one embodiment, if the payment request further includes a payment token, the implementation procedure of step 701 further includes:

s7011: receiving a token request sent by a service server; the token request is sent by the service server based on an order creation request of the augmented reality device; the token request comprises user account information, payment account information and commodity information; the order creation request contains commodity information and user account information; the payment account information is acquired by the service server based on a payment subscription relationship between the user account information and the payment account information.

Specifically, the service server obtains commodity information and user account information in an order creation request of the XR equipment, obtains payment account information corresponding to the user account information based on the payment subscription relationship, and sends a token request containing the user account information, the payment account information and the commodity information to the payment authentication platform based on the user account information, the payment account information and the commodity information. And the payment authentication platform receives the token request sent by the service server.

S7012: and acquiring target equipment information corresponding to the user account information in the token request according to the locally stored user binding relationship.

It should be noted that, if the target device information set corresponding to the user account information is successfully obtained based on the user binding relationship, the identity authentication is determined to be successful, otherwise, the identity authentication is determined to be failed, and the payment flow is stopped.

S7013: and performing device authentication based on the target device information.

S7014: and if the equipment authentication is determined to be successful, sending a payment token to the service server.

Further, the service server sends order payment information to the XR device based on the payment token. The augmented reality device sends a payment request to a payment authentication platform based on the order payment information and the target device information.

The order payment information comprises a payment token, commodity information and payment account information.

Step 702: the payment authentication platform performs security authentication based on the target device information in the payment request.

In one embodiment, when performing security authentication, any one of the following modes may be adopted:

mode one: and performing equipment authentication only according to the target equipment information to obtain a security authentication result.

In one embodiment, target device information in a payment request is obtained; determining a device authentication state of the target device information; if the equipment authentication state is determined to represent successful authentication, the safety authentication is determined to pass.

Mode two: and authenticating according to the target equipment information and the payment token respectively to obtain a security authentication result.

In one embodiment, a payment token and target device information in a payment request are obtained; performing token authentication on the payment token, and determining the equipment authentication state of the target equipment information; if the token authentication is determined to pass and the equipment authentication state characterizes authentication to be successful, the security authentication is determined to pass.

In one embodiment, the implementation of step 702 may further include:

s7021: and when the online state sent by the augmented reality device is determined to be received, sending a challenge code to the augmented reality device.

S7022: receiving device signature information sent by the augmented reality device based on the challenge code; the device signature information is obtained after signing the target device information and the challenge code.

S7023: and carrying out signature verification on the device signature information.

S7024: if the signature verification is passed, judging whether the equipment registration information set contains target equipment information, if so, obtaining an equipment authentication state representing successful authentication; the device registration information set includes at least one device registration information.

Step 703: and if the security authentication is confirmed to pass, the payment authentication platform performs commodity payment based on the payment account information and commodity information in the payment request.

In one embodiment, the implementation of step 703 may include: determining the amount to be paid according to commodity information; determining the account dividing amount of each payment object according to the amount to be paid and the payment proportion of each payment object correspondingly set by commodity information; and based on the payment account information, deducting payment according to the account amount of each payment object.

Step 704: and the XR equipment receives a payment result returned by the payment authentication platform.

The payment result is that the payment authentication platform carries out security authentication based on target equipment information in the payment request, and if the security authentication is confirmed to pass, commodity payment is carried out based on payment account information and commodity information in the payment request and then returned.

Referring to fig. 8, an interactive flow chart of a method for XR service payment is shown. An XR client, secure SDK, service server, and payment authentication platform are included in fig. 8.

The method for XR service payment is further specifically described below with reference to fig. 8, and the specific implementation flow of the method is as follows:

step 800: the XR client sends an order creation request to the business server in response to the payment operation.

In one embodiment, the user purchases the virtual good (i.e., payment operation) by XR client click. And the XR client responds to the payment operation of the user, judges whether the user has paid for subscription based on the user account information, if so, generates an order creation request containing commodity information and the user account information, and sends the order creation request to the service server.

Step 801: the business server obtains commodity information and payment account information based on the order creation request.

In one embodiment, the service server obtains commodity information and user account information in the order creation request, and obtains payment account information corresponding to the user account information according to a locally stored payment subscription relationship.

Step 802: the service server sends a token request to the payment authentication platform.

In one embodiment, the service server generates a token request based on the user account information, the payment account information, and the merchandise information, and sends the token request to an authentication server in the payment authentication platform.

Step 803: and the payment authentication platform performs equipment authentication.

In one embodiment, the authentication server obtains user account information, payment account information and commodity information in the token request, obtains target device information set corresponding to the user account information according to a locally stored user binding relationship, and performs device authentication based on the target device information.

Step 804: the payment authentication platform generates a payment token.

Step 805: the payment authentication platform sends the payment token to the service server.

Step 806: the service server generates order payment information.

In one embodiment, the business server generates a payment order based on the merchandise information and the payment account information and generates order payment information based on the payment token and the payment order.

Optionally, the payment order may also include order time and order ID.

Step 807: the service server sends order payment information to the XR client.

Step 808: the XR client sends a signature request to the secure SDK.

In one embodiment, the XR client displays the payment order to the user and sends a signature request containing the order payment information to the secure SDK.

Step 809: the secure SDK signs based on the signature request to obtain an order payment signature.

In one embodiment, the secure SDK signs the order payment information and the target device information based on a user certificate private key.

Step 810: the secure SDK sends the order payment signature to the XR client.

Step 811: the XR client sends a payment request containing the order payment signature to the payment authentication platform.

In one embodiment, the XR client sends a payment request containing the order payment signature to the authentication server via the service server.

Alternatively, the payment token may not be signed, i.e. the payment order and the target device information are signed, and a payment request comprising the order payment signature and the payment token is sent to the authentication server.

Step 812: the payment authentication platform performs security authentication based on the payment request.

In one embodiment, the authentication server performs signature verification on the order payment signature based on a user certificate private key, if verification is passed, the payment token is compared with a locally stored payment token, if the comparison is consistent, the device authentication state is obtained based on target device information, and if the device authentication state is determined to represent successful authentication, the security authentication is determined to pass.

Further, to increase the security of the payment transaction, the same order payment session is signed only once, without repeating the signature.

Step 813: and the payment authentication platform performs deduction payment.

In one embodiment, the authentication server determines that the security authentication is passed, and sends a payment withholding request to the payment server. The payment server deducts money based on the payment deduction request. Specifically, the payment server may determine an amount to be paid according to the commodity information; determining the account dividing amount of each payment object according to the amount to be paid and the payment proportion of each payment object correspondingly set by commodity information; and based on the payment account information, deducting payment according to the account amount of each payment object.

Further, after the payment server determines that the deduction payment is successful, the payment server sends a deduction success result to the authentication server, the service server and the XR client. In one embodiment, the payment server sends a successful withholding result to the authentication server. The authentication server sends the successful deduction result to the service server. And the service server sends a successful deduction result to the XR client.

Further, if the deduction payment is determined to fail, the payment server sends a deduction failure result to the service server. And the service server sends the deduction failure result to the XR client, and guides the user to carry out payment confirmation through the payment application through the prompt information. The payment server pushes the information to be paid to a payment application of the terminal device. The payment application makes a payment in response to a payment confirmation operation by the user. And if the payment application determines that the deduction payment is successful, sending a deduction success result to the authentication server, the service server and the XR client respectively.

Further, if the withholding payment is determined to fail, before sending the withholding failure result to the service server, the payment server may further perform the withholding payment operation in a circulating manner until the withholding payment meets the stop condition. Alternatively, the stop condition may be that the payment for the substitute deduction is determined to be successful, and the repetition number may be set for the number of loops. In practical application, the set repetition number may be set according to the practical application scenario, for example, the set repetition number may be 3, which is not limited herein.

Further, the user can check the state of the order in real time through the XR equipment, namely whether the payment is successful or not, and can cancel the order to perform the order operations such as refund.

Referring to fig. 9, a service architecture diagram for XR service payment is shown. The business architecture of the above XR business payment method is described below with reference to fig. 9. Fig. 9 includes a terminal device, an XR device, a service platform, an authentication server, and a payment server.

The XR device comprises an XR client and a TEE. The TEE includes the following modules: secure SDK, secure computing module and secure storage module. The secure SDK is used to generate digital certificates. The security calculation module is used for signature, data encryption and decryption and TID generation. The secure storage module is used for data storage.

Wherein the terminal device is provided with a payment application. The user can log in the payment application through the short message link or the code scanning mode of the XR equipment, and execute the payment signing flow.

The service platform is constructed based on a service server and can comprise the following modules: account center, order management, device management, content services, and payment authentication interface. The account center is used for providing registration service of the user account. Order management is used to manage the XR business orders of users, such as order creation. The device management is used for operating password setting, account risk monitoring, trusted SDK integration and mobile phone number binding. The content service is used for providing XR business service for the XR client, and the secondary merchant is opened. The payment authentication interface is used to invoke the services of the authentication server. The XR device communicates with the service platform via a transport protocol, which may alternatively be a hypertext transfer protocol (Hyper Text Transport Protocol, HTTP) or a message queue telemetry transport protocol (Message Queuing Telemetry Transport, MQTT).

Wherein, the authentication server may comprise the following modules: device registration, device uplink, device trusted authentication, XR payment docking, and service server docking. Device registration is used to register XR devices. The device uplink is used to store registered target device information. The device trusted authentication is used for performing device authentication and payment security verification on the XR device. The XR payment docking is used to invoke the payment service of the payment server, payment proxy packaging. The service server is in butt joint with an interface of the service server and is used for providing services such as authentication and the like for the service server.

Wherein, the payment server may include the following modules: payment module, payment notification and ledger payment. The payment module is used for authorizing signing, payment deduction, refund, additional payment and order cancellation processing. The ledger payment is used to pay a corresponding ledger amount to each payment object. The payment notification is used to send a notification of the payment result.

In the embodiment of the application, a user only needs to carry out payment subscription and user equipment binding at initial authorization, and then can initiate a payment request through the augmented reality equipment, the payment authentication platform can carry out safety authentication and payment through target equipment information and payment account information, so that the user can realize the augmented reality business payment without exiting the augmented reality business process and without additionally recharging and storing, the safety of the payment transaction is ensured, the complicated operation of the augmented reality business payment is simplified, the user experience is improved, and the payment and accounting are carried out through the payment authentication platform, the problem that a great amount of manpower and time cost are consumed through manual accounting of an offline account is solved, the characteristics of flexibility and credibility are provided, the convenience of payment and accounting are improved, the risk of errors existing in the existing secondary account is avoided, and the pain point and the user demand of the XR industry payment are solved.

The user information (including but not limited to user target equipment information, user personal information and the like) and data (including but not limited to data for analysis, stored data, presented data and the like) related to the application are information and data authorized by a user or fully authorized by all parties, and the collection, use and processing of related data are required to comply with related laws and regulations and standards of related countries and regions, and are provided with corresponding operation entrances for the user to select authorization or rejection.

Based on the same inventive concept, the embodiment of the application also provides a device for the payment of the augmented reality service, and because the principle of the device and the equipment for solving the problem is similar to that of the method for the payment of the augmented reality service, the implementation of the device can refer to the implementation of the method, and the repetition is omitted. The device can be applied to electronic equipment, the type of the electronic equipment is not limited by the application, and the device can be any equipment type suitable for implementation, such as a smart phone, a tablet computer and the like, and the application is not repeated.

Referring to fig. 10, a block diagram of an apparatus for payment of an augmented reality service according to some embodiments of the present application is shown. In some embodiments, an apparatus for augmented reality business payment according to an example of the present application includes:

A sending unit 1001, configured to send a payment request to a payment authentication platform in response to a payment operation of a user for an augmented reality service; the payment request comprises commodity information, payment account information and target equipment information;

a receiving unit 1002, configured to receive a payment result returned by the payment authentication platform; the payment result is that the payment authentication platform carries out security authentication based on the target equipment information in the payment request, and if the security authentication is confirmed to pass, commodity payment is carried out based on the payment account information and commodity information in the payment request and then returned.

In one embodiment, the sending unit 1001 is configured to:

Referring to fig. 11, a block diagram of another device for augmented reality service payment according to some embodiments of the present application is shown. In some embodiments, an apparatus for augmented reality business payment according to an example of the present application includes:

a receiving unit 1101, configured to receive a payment request sent by an augmented reality device; the payment request is sent by the augmented reality device in response to a payment operation of the user for the augmented reality service; the payment request comprises commodity information, payment account information and target equipment information;

an authentication unit 1102, configured to perform security authentication based on target device information in the payment request;

and the payment unit 1103 is configured to perform commodity payment based on the payment account information and the commodity information in the payment request if the security authentication is determined to pass.

In one embodiment, the receiving unit 1101 is further configured to:

performing device authentication based on the target device information;

In one embodiment, authentication unit 1102 is configured to:

acquiring target equipment information in a payment request;

determining a device authentication state of the target device information;

In one embodiment, authentication unit 1102 is configured to:

In one embodiment, authentication unit 1102 is further configured to:

signature verification is carried out on the equipment signature information;

In one embodiment, the payment unit 1103 is configured to:

determining the amount to be paid according to commodity information;

The embodiment of the application provides electronic equipment, which comprises:

a processor; and

and a memory storing computer instructions for causing the processor to perform the method of any of the embodiments described above.

The present application provides a storage medium storing computer instructions for causing a computer to perform the method of any of the above embodiments.

Fig. 12 shows a schematic structural diagram of an electronic device 1200. Referring to fig. 12, an electronic apparatus 1200 includes: processor 1210 and memory 1220 may optionally include a power source 1230, a display unit 1240, and an input unit 1250.

The processor 1210 is a control center of the electronic device 1200, connects the various components using various interfaces and lines, and performs various functions of the electronic device 1200 by running or executing software programs and/or data stored in the memory 1220.

In the embodiment of the present application, the processor 1210 executes each step of the above embodiment when calling the computer program stored in the memory 1220.

In the alternative, processor 1210 may include one or more processing units; preferably, the processor 1210 may integrate an application processor and a modem processor, wherein the application processor primarily handles operating systems, user interfaces, applications, etc., and the modem processor primarily handles wireless communications. It will be appreciated that the modem processor described above may not be integrated into processor 1210. In some embodiments, the processor, memory, may be implemented on a single chip, and in some embodiments, they may be implemented separately on separate chips.

The memory 1220 may mainly include a storage program area and a storage data area, wherein the storage program area may store an operating system, various applications, etc.; the storage data area may store data created according to the use of the electronic device 1200, and the like. In addition, memory 1220 may include high-speed random access memory, and may also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid-state storage device, among others.

The electronic device 1200 also includes a power source 1230 (e.g., a battery) that provides power to the various components, which may be logically coupled to the processor 1210 via a power management system, thereby performing the functions of managing charge, discharge, and power consumption via the power management system.

The display unit 1240 may be used to display information input by a user or information provided to the user, various menus of the electronic device 1200, and the like, and in the embodiment of the present application, is mainly used to display a display interface of each application in the electronic device 1200, and objects such as text and pictures displayed in the display interface. The display unit 1240 may include a display panel 1241. The display panel 1241 may be configured in the form of a liquid crystal display (Liquid Crystal Display, LCD), an Organic Light-Emitting Diode (OLED), or the like.

The input unit 1250 may be used to receive information such as numbers or characters inputted by a user. The input unit 1250 may include a touch panel 1251 and other input devices 1252. Among other things, the touch panel 1251, also referred to as a touch screen, may collect touch operations thereon or thereabout by a user (e.g., operations of the user on the touch panel 1251 or thereabout using any suitable object or accessory such as a finger, stylus, etc.).

Specifically, the touch panel 1251 may detect a touch operation by a user, detect signals resulting from the touch operation, convert the signals into coordinates of contacts, send the coordinates to the processor 1210, and receive and execute commands sent from the processor 1210. In addition, the touch panel 1251 may be implemented in various types such as resistive, capacitive, infrared, and surface acoustic wave. Other input devices 1252 may include, but are not limited to, one or more of a physical keyboard, function keys (e.g., volume control keys, on-off keys, etc.), a trackball, mouse, joystick, etc.

Of course, the touch panel 1251 may overlay the display panel 1241, and when the touch panel 1251 detects a touch operation thereon or thereabout, the touch operation is transferred to the processor 1210 to determine the type of touch event, and then the processor 1210 provides a corresponding visual output on the display panel 1241 according to the type of touch event. Although in fig. 12, the touch panel 1251 and the display panel 1241 are two separate components to implement the input and output functions of the electronic device 1200, in some embodiments, the touch panel 1251 may be integrated with the display panel 1241 to implement the input and output functions of the electronic device 1200.

The electronic device 1200 may also include one or more sensors, such as a pressure sensor, a gravitational acceleration sensor, a proximity light sensor, and the like. Of course, the electronic device 1200 may also include other components such as a camera, as needed in a specific application, and these components are not shown in fig. 12 and will not be described in detail since they are not the components that are important in the embodiments of the present application.

It will be appreciated by those skilled in the art that fig. 12 is merely an example of an electronic device and is not meant to be limiting and that more or fewer components than shown may be included or certain components may be combined or different components.

For convenience of description, the above parts are described as being functionally divided into modules (or units) respectively. Of course, the functions of each module (or unit) may be implemented in the same piece or pieces of software or hardware when implementing the present application.

It should be apparent that the above embodiments are merely examples for clarity of illustration and are not limiting of the embodiments. Other variations or modifications of the above teachings will be apparent to those of ordinary skill in the art. It is not necessary here nor is it exhaustive of all embodiments. While still being apparent from variations or modifications that may be made by those skilled in the art are within the scope of the application.

Claims

1. A system for augmented reality business payment comprises an augmented reality device and a payment authentication platform, wherein,

the augmented reality device is used for responding to the payment operation of a user for the augmented reality service, sending a payment request to the payment authentication platform and receiving a payment result returned by the payment authentication platform; the payment request comprises commodity information, payment account information and target equipment information;

the payment authentication platform is used for receiving the payment request, carrying out security authentication based on target equipment information in the payment request, and carrying out commodity payment based on payment account information and commodity information in the payment request if the security authentication is confirmed to pass.

2. The system of claim 1, further comprising a service server;

the augmented reality device is configured to: responding to the payment operation, sending an order creation request to the service server, receiving order payment information returned by the service server, and sending a payment request to the payment authentication platform based on the order payment information and the target equipment information; the order creation request comprises commodity information and user account information; the order payment information comprises the commodity information and the payment account information;

The service server is used for: receiving the order creation request, acquiring payment account information corresponding to the user account information based on a locally stored payment subscription relationship, and sending the order payment information to the augmented reality device based on the commodity information and the payment account information.

3. The system of claim 2, wherein the order payment information further comprises the payment token;

the service server is used for: based on the user account information, the payment account information and the commodity information, sending a token request to the payment authentication platform, receiving a payment token returned by the authentication platform, and sending the order payment information to an augmented reality device based on the payment token;

the payment authentication platform is used for: and receiving the token request, acquiring target equipment information corresponding to the user account information according to the locally stored user binding relationship, performing equipment authentication based on the target equipment information, and if the equipment authentication is determined to be successful, transmitting the payment token to the service server.

4. The system of claim 3, the payment authentication platform to:

Determining a device authentication state of the target device information in the payment request;

and if the equipment authentication state is determined to represent successful authentication, determining that the safety authentication is passed.

5. The system of claim 4, the payment authentication platform to:

and if the token authentication is determined to pass and the equipment authentication state represents that the authentication is successful, determining that the security authentication passes.

6. The system of claim 4 or 5, the augmented reality device further to:

the method comprises the steps of sending equipment online state to a payment authentication platform, receiving a challenge code returned by the payment authentication platform, signing target equipment information and the challenge code to obtain equipment signature information, and sending the equipment signature information to the payment authentication platform;

the payment authentication platform is further configured to: based on the received online state, sending the challenge code to the augmented reality device, and carrying out signature verification on the received device signature information, if the signature verification is confirmed to pass, and the device registration information set contains the target device information, obtaining a device authentication state representing successful authentication; the device registration information set includes at least one device registration information.

7. The system of any of claims 1-5, the payment authentication platform to:

determining the amount to be paid according to the commodity information;

determining the account dividing amount of each payment object according to the amount to be paid and the payment proportion of each payment object correspondingly set by the commodity information;

8. A method of augmented reality business payment, the method comprising:

receiving a payment result returned by the payment authentication platform; and the payment result is returned after the payment authentication platform performs security authentication based on the target equipment information in the payment request and performs commodity payment based on the payment account information and commodity information in the payment request if the security authentication is determined to pass.

9. The method of claim 8, the sending a payment request to a payment authentication platform in response to a payment operation by a user for an augmented reality service, comprising:

Responding to the payment operation, and sending an order creation request to a service server; the order creation request comprises commodity information and user account information;

receiving order payment information returned by the service server based on the order creation request; the order payment information comprises the commodity information and the payment account information; the payment account information is acquired by the service server based on a payment subscription relationship between user account information and payment account information;

and sending a payment request to the payment authentication platform based on the order payment information and the target equipment information.

10. A method of augmented reality business payment, the method comprising:

receiving a payment request sent by an augmented reality device; the payment request is sent by the augmented reality device in response to a payment operation of a user for an augmented reality service; the payment request comprises commodity information, payment account information and target equipment information;

performing security authentication based on the target device information in the payment request;

11. The method of claim 10, the payment request further comprising a payment token; before receiving the payment request sent by the augmented reality device, the method further comprises:

receiving a token request sent by a service server; the token request is sent by the service server based on an order creation request of the augmented reality device; the token request comprises user account information, payment account information and commodity information; the order creation request comprises commodity information and user account information; the payment account information is acquired by the service server based on a payment subscription relationship between user account information and payment account information;

performing device authentication based on the target device information;

if the equipment authentication is determined to be successful, the payment token is sent to the service server, so that the service server sends the order payment information to the augmented reality equipment based on the payment token; and causing the augmented reality device to send the payment request to the payment authentication platform based on the order payment information and the target device information; the order payment information includes the payment token, the merchandise information, and the payment account information.

12. The method of claim 10, the securely authenticating based on the target device information in the payment request, comprising:

acquiring target equipment information in the payment request;

determining the device authentication state of the target device information;

13. The method of claim 11, the securely authenticating based on the target device information in the payment request, comprising:

acquiring a payment token and target equipment information in the payment request;

14. The method of claim 12 or 13, prior to secure authentication based on the target device information in the payment request, the method further comprising:

Signature verification is carried out on the equipment signature information;

if the signature verification is confirmed to pass, and the equipment registration information set contains the target equipment information, acquiring an equipment authentication state representing successful authentication; the device registration information set includes at least one device registration information.

15. The method of any of claims 10-13, the making a commodity payment based on the payment account information and commodity information in the payment request, comprising:

determining the amount to be paid according to the commodity information;

16. An apparatus for augmented reality business payment, the apparatus comprising:

the receiving unit is used for receiving a payment result returned by the payment authentication platform; and the payment result is returned after the payment authentication platform performs security authentication based on the target equipment information in the payment request and performs commodity payment based on the payment account information and commodity information in the payment request if the security authentication is determined to pass.

17. An apparatus for augmented reality business payment, the apparatus comprising:

the receiving unit is used for receiving the payment request sent by the augmented reality equipment; the payment request is sent by the augmented reality device in response to a payment operation of a user for an augmented reality service; the payment request comprises commodity information, payment account information and target equipment information;

an authentication unit, configured to perform security authentication based on the target device information in the payment request;

18. An electronic device, comprising:

a processor; and

memory storing computer instructions for causing the processor to perform the method of any one of claims 8-9 or 10-15.

19. A storage medium storing computer instructions for causing a computer to perform the method of any one of claims 8-9 or 10-15.