WO2016041235A1 - 电子现金数据的授权处理方法、支付处理方法及虚拟卡 - Google Patents

电子现金数据的授权处理方法、支付处理方法及虚拟卡 Download PDF

Info

Publication number
WO2016041235A1
WO2016041235A1 PCT/CN2014/089284 CN2014089284W WO2016041235A1 WO 2016041235 A1 WO2016041235 A1 WO 2016041235A1 CN 2014089284 W CN2014089284 W CN 2014089284W WO 2016041235 A1 WO2016041235 A1 WO 2016041235A1
Authority
WO
WIPO (PCT)
Prior art keywords
data
card
authorization
virtual card
virtual
Prior art date
Application number
PCT/CN2014/089284
Other languages
English (en)
French (fr)
Inventor
刘国
鲍文彬
张徵
Original Assignee
苏州海博智能***有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 苏州海博智能***有限公司 filed Critical 苏州海博智能***有限公司
Publication of WO2016041235A1 publication Critical patent/WO2016041235A1/zh

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/36—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00—Commerce

Definitions

  • the present invention relates to the field of communications technologies, and in particular, to an electronic cash data authorization processing method, a payment processing method, and a virtual card.
  • Bank cards can record the balance of electronic cash (EC), and users can use the EC stored in the bank card for consumption.
  • EC electronic cash
  • the EC exists in the form of digital information, and the electronic cash data can be recorded in an integrated circuit (IC) card.
  • IC integrated circuit
  • the IC card issued by the bank currently has an electronic cash function, and the IC card issued by the above bank is simply referred to for convenience of description.
  • the bank card For the bank card.
  • the bank card exists in the form of a physical card, and the IC card recorded with the electronic cash data can be collectively referred to as a physical card.
  • the electronic cash data can only be recorded in the physical card, when the user performs When offline trading, the information is exchanged between the physical card and the card reader to realize consumption.
  • the above offline transaction refers to a transaction that can be completed without connecting to the network, wherein the card reader is not connected to other terminals. If the user wants to authorize the electronic cash data recorded in the bank card to other users, the card can only be delivered to other users.
  • the electronic cash data cannot be authorized to other users while retaining the physical card, so that other users can perform offline transactions after the electronic cash data is authorized.
  • the invention provides an authorization processing method, a payment processing method and a virtual card for electronic cash data, so as to solve the problem that the electronic cash data cannot be authorized to other users while retaining the physical card, so that other users can authorize the electronic cash data. After the issue of offline trading.
  • the present invention provides a method for authorizing processing of electronic cash data, the method comprising: establishing a communication channel between a virtual card and a physical card; and transmitting an authorization request to the physical card through the communication channel Information, the authorization application information carries a verification code, a first virtual card carrier unique identification code, a virtual card validity period, and an application quota data; the physical card authenticates the verification code, and if the authentication is passed, the authorization is legal.
  • Generating a virtual card number generating authorization amount data and transaction limit data according to the application quota data, using the authorization key to the first virtual card carrier unique identification code, the authorized amount data, the virtual card validity period, and the
  • the transaction limit data is encrypted to obtain ciphertext data, and the virtual card number, the physical card number, the first virtual card carrier unique identification code, the authorized amount data, the virtual card validity period, the transaction limit data, and
  • the ciphertext data is digitally signed to obtain authorization data, and the authorization data is sent to the virtual Receiving the authorization data sent by the physical card, and sending physical card related data application information to the physical card; receiving entity card related data reply information returned by the physical card, and the physical card related data reply information This includes the validity period of the physical card.
  • the present invention provides a payment processing method for electronic cash data, the method comprising: establishing a communication channel between a virtual card and a card reader; and transmitting authorization data and a physical card to the card reader through the communication channel Validity period, the authorization data is authorization data obtained by the physical card using the virtual card number, the physical card number, the first virtual card carrier unique identification code, the authorized amount data, the virtual card expiration date, the transaction limit data, and the ciphertext data to be digitally signed;
  • the card reader obtains a first virtual card carrier unique identification code, an authorized amount data, a virtual card validity period, transaction limit data, and ciphertext data by using the authorization data; and decrypting the ciphertext data by using an authorization key a virtual card carrier unique identification code, when the second virtual card carrier unique identification code is identical to the first virtual card carrier unique identification code, confirming that the authorization is true; according to the authorized amount data, the intersection The easiness limit data, the expiration date of the virtual card, and the validity period of the physical
  • the present invention provides a virtual card, including: an electronic cash authorization module and an electronic cash payment module;
  • the electronic cash authorization module includes: a first channel establishing unit, configured to establish communication with the physical card a channel; an authorization application information sending unit, configured to send, by using the communication channel established by the first channel establishing unit, the authorization application information, where the authorization application information carries a verification code and the first virtual card carrier uniquely identifies a code, a virtual card expiration date, and an application quota data; an authorization data receiving unit, configured to receive authorization data sent by the physical card, where the authorization data is performed by the entity card on a verification code sent by the authorization application information sending unit After the authentication is passed, it is confirmed that the authorization is legal, the virtual card number is generated, the authorized amount data and the transaction limit data are generated according to the application quota data sent by the authorization application information sending unit, and the authorization application information is obtained by using the authorization key.
  • the first virtual card carrier unique identification code sent by the sending unit, the granting The amount data, the virtual card expiration date, and the transaction limit data are encrypted to obtain ciphertext data, and the virtual card number, the physical card number, the first virtual card carrier unique identification code, the authorized amount data, and the The virtual card validity period, the transaction limit data, and the authorization data obtained by digitally signing the ciphertext data;
  • the entity card related data application information sending unit is configured to send the entity card related data application information to the physical card;
  • the electronic cash payment module includes: a second channel establishing unit And a sending unit, configured to send, by using the communication channel established by the second channel establishing unit, the authorization data and the validity period of the physical card to the card reader, where the authorization data is a physical card.
  • the card reader obtains a first virtual card carrier unique identification code, an authorized amount data, a virtual card validity period, transaction limit data, and ciphertext data by using the authorization data; Decrypting the ciphertext data to obtain a second virtual card carrier unique identification code, and confirming that the authorization is true when the second virtual card carrier unique identification code is identical to the first virtual card carrier unique identification code;
  • the amount data, the transaction limit data, the validity period of the virtual card, and the validity period of the physical card determine whether the payment is valid, and when the judgment result is that the payment is valid, according to the virtual card number and the physical card number
  • the electronic cash data is paid, and the payment amount data is sent to the virtual card;
  • the receiving unit is configured to receive the payment amount data sent by the card reader; and the updating unit is configured to receive the payment amount according to the receiving unit Data update balance data;
  • the virtual card is used to establish a communication channel with the physical card, and the authorization application information is sent to the entity card, and the authorization application information carries the verification code, the first virtual card carrier unique identification code, and the virtual card.
  • the expiration date and the application quota data are authenticated by the entity card. If the authentication is passed, the authorization is legal, the virtual card number is generated, the authorized amount data and the transaction limit data are generated according to the application quota data, and the first virtual card is generated by using the authorization key.
  • the carrier unique identification code, the authorized amount data, the virtual card expiration date and the transaction limit data are encrypted to obtain the virtual card carrier unique identification code ciphertext data, and the virtual card number, the physical card number, the first virtual card carrier unique identification code, and the authorized amount data are used.
  • Virtual card validity period, transaction limit data virtual card carrier unique identification code and ciphertext data are digitally signed to obtain authorization data, and the authorization data is sent to the virtual card, the virtual card receives the authorization data sent by the physical card, and sends the physical card to the physical card.
  • the electronic cash data can be authorized to the virtual card while retaining the physical card, which is equivalent to authorizing the electronic cash data to the other holding the virtual card carrier.
  • the user can make offline transactions through the virtual card carrier after the electronic cash data is authorized by other users.
  • FIG. 1 is a schematic structural diagram of a physical card in an embodiment of the present invention.
  • FIG. 2 is a flowchart of an authorization processing method of electronic cash data in an embodiment of the present invention
  • FIG. 3 is a flow chart of a method for processing payment of electronic cash data in an embodiment of the present invention.
  • FIG. 4 is a schematic structural diagram of a virtual card in an embodiment of the present invention.
  • FIG. 1 is a schematic structural diagram of a physical card in an embodiment of the present invention.
  • the physical card has a microprocessor chip 101 and a memory 102.
  • the microprocessor chip 101 runs an on-chip operating system (COS, Chip Operating System).
  • COS Chip Operating System
  • the main function of the COS is to control the exchange of information between the physical card and the outside world, and manage the physical card.
  • the internal memory 102 performs processing of various commands in the physical card.
  • the memory 102 of the physical card records electronic cash data.
  • the physical card may specifically be a bank card, a bus card, a meal card, etc. The present invention does not specifically limit this.
  • the physical card includes a communication module 103 in addition to the microprocessor chip 101 and the memory 102, so that the physical card can communicate with the card reader or other terminal device through the communication module 103, and the communication module 103 can specifically For the Bluetooth communication module or the Near Field Communication (NFC) communication module, in the embodiment of the present invention, the communication module 103 can also adopt other functional modules, so that other communication modes can be supported, and two or more types can be supported. way of communication.
  • NFC Near Field Communication
  • FIG. 2 is a flowchart of an authorization processing method of electronic cash data in an embodiment of the present invention, where the method includes:
  • step 201 the virtual card establishes a communication channel with the physical card.
  • the virtual card may be implemented by being attached to a certain type of carrier.
  • the virtual card carrier may be a smart terminal device, for example, a mobile phone, a tablet computer, or the like, or may be a physical card, and the virtual card carrier should support blue. At least one of a dental communication method or an NFC communication method.
  • the smart phone is preferably used as a virtual card carrier.
  • the operating system running on the smart phone is not specifically limited, that is, the virtual card can be run on the smart device with the Android operating system. On your phone, you can also run it on a smartphone with an operating system such as WP or iOS.
  • the virtual card may be a program running on the virtual card carrier and a specific type of file.
  • the program may be an APP, a service, or the like.
  • the virtual card carrier is a smart phone, the physical card is simulated during programming, and the virtual card user interface is established.
  • virtual card COS and authorization control logic a specific type of file in the virtual card is mainly used to store the data required when the transaction occurs.
  • the physical card may have the structure shown in FIG. 1 and has a Bluetooth communication module or an NFC communication module, so that the virtual card can establish a communication channel with the physical card through the virtual card carrier in a Bluetooth communication manner or an NFC communication manner.
  • the virtual card establishes a communication channel with the physical card, and specifically includes: the virtual card establishes a communication channel with the physical card by using an NFC mode or a Bluetooth communication mode.
  • the virtual card when the virtual card communicates with the physical card, it appears as a card reading device.
  • Step 202 The virtual card sends the authorization application information to the physical card by using the communication channel established in step 201.
  • the authorization application information carries the verification code, the first virtual card carrier unique identification code, the virtual card validity period, and the application quota data.
  • the verification code may be a combination of numbers preset by the user and stored in the physical card, for example, 000000; or a combination of letters, such as AA; or a combination of letters and numbers, such as A1, which can be used by those skilled in the art. It is to be understood that the above verification code has many possible forms, which are not specifically limited in the present invention.
  • the first virtual card carrier unique identification code may be a mobile phone serial number or a Subscriber Identity Module (SIM) card number that can uniquely identify the encoded information of the virtual card carrier.
  • SIM Subscriber Identity Module
  • the virtual card validity period may be a period of time during which the virtual card is set by the user through the virtual card carrier. For example, the virtual card is valid for the period from August 1, 2014 to September 1, 2014, or The virtual card is valid from August 1, 2014 to August 2, 2014. Alternatively, the virtual card is valid from 10:00 to 00 seconds on August 1, 2014 to 10:30 on August 1, 2014. There are a plurality of specific setting forms in the 00 second, which are not limited by the present invention.
  • the virtual card is time-sensitive by setting the virtual card expiration date.
  • the application amount data is the amount data of the electronic cash for which the virtual card applies for authorization to the physical card, for example, 100 yuan.
  • step 203 the entity card authenticates the verification code.
  • Step 204 If the authentication is passed in step 203, the authorization is legal, and a virtual card number is generated.
  • the physical card can be verified by the virtual card number, and the electronic cash data is verified after being verified. Transfer.
  • Step 205 The entity card generates the authorized amount data and the transaction limit data according to the application quota data.
  • the physical card can determine whether the application quota data exceeds the electronic cash balance in the card, and if the electronic cash balance in the card is not exceeded, an authorization amount data equal to the application quota data is generated, and if the electronic cash balance in the card is exceeded, the virtual card is sent rejected. Authorization information.
  • the authorized amount data when the application quota data does not exceed the electronic cash balance in the card, the authorized amount data may also be generated in the following manner, that is, according to the preset rule, the authorized amount data may be equal to the application quota data, or may be smaller or larger than Apply for quota data.
  • the authorization amount data may be generated according to the application quota data and the virtual card validity period. For example, the correspondence between the application quota data, the virtual card validity period, and the authorization amount data may be as shown in Table 1.
  • the authorized amount data is 50 yuan; if the application quota data is 200 yuan, and the virtual card is valid for 3 months, the authorized amount The data is 500 yuan.
  • Step 206 The physical card encrypts the first virtual card carrier unique identification code, the authorized amount data, the virtual card expiration date, and the transaction limit data by using the authorization key to obtain the ciphertext data.
  • Step 207 The physical card obtains the authorization data by digitally signing using the virtual card number, the physical card number, the first virtual card carrier unique identification code, the authorized amount data, the virtual card expiration date, the transaction limit data, and the ciphertext data.
  • Step 208 The physical card sends the authorization data to the virtual card, and the virtual card receives the authorization data sent by the physical card.
  • the virtual card may store the authorization data after receiving the authorization data sent by the physical card.
  • Step 209 The virtual card sends the entity card related data application information to the entity card.
  • Step 210 The virtual card receives the physical card related data reply information returned by the physical card, and the physical card related data reply information includes the entity card validity period.
  • the virtual card may store the validity period of the physical card included in the physical card related data reply information after receiving the physical card related data reply information returned by the physical card.
  • the authorization processing method of the electronic cash data in the embodiment of the present invention establishes a communication channel between the virtual card and the physical card, and sends the authorization application information to the entity card, where the authorization application information carries the verification code and the first virtual
  • the card carrier unique identification code, the virtual card validity period and the application quota data are authenticated by the entity card. If the authentication is passed, the authorization is legal, the virtual card number is generated, and the authorized amount data and the transaction limit data are generated according to the application quota data.
  • the authorization key encrypts the first virtual card carrier unique identification code, the authorized amount data, the virtual card expiration date and the transaction limit data to obtain the virtual card carrier unique identification code ciphertext data, and uses the virtual card number, the physical card number, and the first virtual card.
  • Carrier unique identification code, authorized amount data, virtual card validity period, transaction The quota data virtual card carrier unique identification code and ciphertext data are digitally signed to obtain authorization data, and the authorization data is sent to the virtual card, the virtual card receives the authorization data sent by the entity card, and sends the entity card related data application information to the entity card, and receives
  • the physical card related data reply information returned by the physical card, and the physical card related data reply information includes the validity period of the physical card.
  • the electronic cash data can be authorized to the virtual card while retaining the physical card, which is equivalent to authorizing the electronic cash data to hold the virtual card.
  • Other users of the carrier since the authorization data sent by the physical card to the virtual card includes the authorized amount data in the authorization process, the authorized amount data may be part of the electronic cash data of the physical card, so that the physical card can be implemented Part of the electronic cash data is licensed to other users.
  • FIG. 3 is a flowchart of a method for processing payment of electronic cash data according to an embodiment of the present invention, the method includes:
  • step 301 the virtual card establishes a communication channel with the card reader.
  • the virtual card and the card reader establish a communication channel, which may specifically include: the virtual card adopts NFC mode or Bluetooth communication mode to establish a communication channel with the card reader.
  • the virtual card when the virtual card communicates with the card reader, it is represented as a physical card.
  • Step 302 The virtual card sends the authorization data and the validity period of the physical card to the card reader through the communication channel established in step 301, and the authorization data is the physical card using the virtual card number, the physical card number, the first virtual card carrier unique identification code, and the authorization.
  • the amount of data, the validity period of the virtual card, and the authorization data obtained by digitally signing the ciphertext data.
  • the transaction limit data is used to limit the maximum payment amount of each transaction of the virtual card.
  • the digital signature when an abnormal transaction is generated and "arbitration" is required, the digital signature can provide evidence but does not participate in the consumption process.
  • Step 303 The card reader obtains the first virtual card carrier unique identification code, the authorized amount data, the virtual card validity period, the transaction limit data, and the ciphertext data by using the authorization data.
  • the card reader decrypts the ciphertext data by using the authorization key to obtain the second virtual card carrier unique identification code.
  • the authorization is confirmed to be authentic.
  • the card reader can identify the legality and authenticity of the virtual card offline.
  • the card reader can be either a card reader in a conventional sense or a variety of smart terminals, such as a mobile phone or a tablet or a wearable device.
  • Step 304 The card reader determines whether the payment is valid according to the authorized amount data, the transaction limit data, the virtual card validity period, and the validity period of the physical card. When the judgment result is that the payment is valid, the electronic cash is performed according to the virtual card number and the physical card number. Data payment.
  • the card reader can identify the validity of the virtual card offline.
  • Step 305 the card reader sends the payment amount data to the virtual card.
  • Step 306 The virtual card receives the payment amount data sent by the card reader, and updates the balance data according to the payment amount data.
  • Step 307 adding transaction record information, the transaction record information including transaction time data, transaction location data, and transaction amount data.
  • FIG. 4 is a schematic structural diagram of a virtual card in an embodiment of the present invention, the virtual card includes: an electronic cash authorization module 401 and an electronic cash payment module 402;
  • the electronic cash authorization module 401 includes:
  • a first channel establishing unit 4011 configured to establish a communication channel with the physical card
  • the authorization application information sending unit 4012 is configured to send the authorization application information to the physical card by using the communication channel established by the first channel establishing unit 4011, where the authorization application information carries the verification code and the first virtual card carrier uniquely identifies Code, virtual card validity period and application quota data;
  • the authorization data receiving unit 4013 is configured to receive the authorization data sent by the physical card, where the authorization data is used by the entity card to authenticate the verification code sent by the authorization application information sending unit 4012, and is confirmed after the authentication is passed.
  • the authorization is legal, the virtual card number is generated, and the authorization amount data and the transaction limit data are generated according to the application quota data sent by the authorization application information transmitting unit 4012, and the authorization key is sent to the authorization application information sending unit 4012.
  • a virtual card carrier unique identification code, the authorized amount data, the virtual card validity period, and the transaction limit data are encrypted to obtain a virtual card carrier unique identification code ciphertext data, using the virtual card number, Entity card number, the first virtual card carrier unique identification code, the authorization amount data, the virtual card validity period, the transaction quota data, and authorization data obtained by digitally signing the ciphertext data;
  • the authorization data storage unit 4014 is configured to store the authorization data received by the authorization data receiving unit 4013;
  • the physical card related data application information sending unit 4015 is configured to send physical card related data application information to the physical card
  • the physical card related data reply information receiving unit 4016 is configured to receive physical card related data reply information returned by the physical card, where the physical card related data reply information includes a physical card expiration date;
  • the authorization data storage unit 4014 is an optional unit, and the electronic cash authorization module 401 may not include the authorization data storage unit 4014.
  • the electronic cash payment module 402 includes:
  • a second channel establishing unit 4021 configured to establish a communication channel with the card reader
  • the sending unit 4022 is configured to send, by using the communication channel established by the second channel establishing unit 4021, the authorization data and the validity period of the physical card to the card reader, where the authorization data is a virtual card using a virtual card carrier unique identification code virtual card.
  • the license number obtained by digitally signing the card number, the physical card number, the first virtual card carrier unique identification code, the authorized amount data, the virtual card expiration date, the transaction limit data, and the ciphertext data virtual card carrier unique identification code;
  • the card reader obtains a first virtual card carrier unique identification code, an authorized amount data, a virtual card expiration date, a transaction limit data virtual card carrier unique identification code, and ciphertext data by using the authorization data; using the authorization key to the virtual
  • the card carrier unique identification code ciphertext data is decrypted to obtain a second virtual card carrier unique identification code, and when the second virtual card carrier unique identification code is identical to the first virtual card carrier unique identification code, the authenticity of the authorization is confirmed Determining whether the payment is valid according to the authorized amount data, the transaction limit data, the virtual card validity period, and the validity period of the physical card, and when the judgment result is that the payment is valid, according to the virtual card number and the The physical card number is performed to perform electronic cash data payment, and the payment amount data is sent to the virtual card;
  • the receiving unit 4023 is configured to receive payment amount data sent by the card reader
  • the updating unit 4024 is configured to update the balance data according to the payment amount data received by the receiving unit 4023.
  • the transaction record adding unit 4025 is configured to add transaction record information including transaction time data, transaction place data, and transaction amount data.
  • the steps of a method or algorithm described in connection with the embodiments disclosed herein can be implemented in hardware, a software module executed by a processor, or a combination of both.
  • the software module can be placed in random access memory (RAM), memory, read only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or technical field. Any other form of storage medium known.

Landscapes

  • Business, Economics & Management (AREA)
  • Engineering & Computer Science (AREA)
  • Accounting & Taxation (AREA)
  • Physics & Mathematics (AREA)
  • Strategic Management (AREA)
  • Finance (AREA)
  • General Business, Economics & Management (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Development Economics (AREA)
  • Economics (AREA)
  • Marketing (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

本发明涉及一种电子现金数据的授权处理方法、支付处理方法及虚拟卡，该授权处理方法包括：虚拟卡与实体卡建立通讯通道；向实体卡发送授权申请信息，授权申请信息中携带有验证码、第一虚拟卡载体唯一识别码、虚拟卡有效期和申请额度数据；接收实体卡发送的授权数据，授权数据中包括授权金额数据，并向实体卡发送实体卡相关数据申请信息；接收实体卡返回的实体卡相关数据回复信息，实体卡相关数据回复信息中包括实体卡有效期。由上可见，采用本发明的授权处理方法后，可以在保留实体卡的情况下将电子现金数据授权给其他用户，以便其他用户在电子现金数据授权后可以进行脱机交易。

Description

电子现金数据的授权处理方法、支付处理方法及虚拟卡 技术领域
本发明涉及通信技术领域，尤其涉及电子现金数据的授权处理方法、支付处理方法及虚拟卡。
背景技术
当前，随着信息技术的高度发展，人们逐渐习惯使用银行卡进行***，银行卡中可以记录电子现金(EC，Electronic Cash)余额，用户可以使用银行卡中存储的EC进行消费，其中，EC为采用电子形式模拟的现金，通常应用于小额支付，用户在使用EC消费时无需输入密码。EC以数字信息形式存在，电子现金数据可以记录在集成电路(IC，Integrated Circuit Card)卡中，例如，目前银行发行的IC卡已具备电子现金功能，为描述方便将上述银行发行的IC卡简称为银行卡。
现有技术中，银行卡以实体卡片的形式存在，可将记录有电子现金数据的IC卡统称为实体卡，根据PBOC规范和QPBOC规范，电子现金数据只能记录在实体卡中，当用户进行脱机交易时，要通过实体卡与读卡器进行信息交互，从而实现消费，上述脱机交易指的是无需连接网络即可完成的交易，其中，读卡器不与其他终端联网。若用户想要将银行卡内记录的电子现金数据授权给其他用户使用，则只能将该银行卡交付给其他用户。
采用现有技术中的电子现金数据的授权处理方法，不能在保留实体卡的情况下将电子现金数据授权给其他用户，使其他用户在电子现金数据授权后进行脱机交易。
发明内容
本发明提供了一种电子现金数据的授权处理方法、支付处理方法及虚拟卡，目的是为了解决不能在保留实体卡的情况下将电子现金数据授权给其他用户，使其他用户在电子现金数据授权后进行脱机交易的问题。
为实现上述目的，第一方面，本发明提供了一种电子现金数据的授权处理方法，该方法包括：虚拟卡与实体卡建立通讯通道；通过所述通讯通道，向所述实体卡发送授权申请信息，所述授权申请信息中携带有验证码、第一虚拟卡载体唯一识别码、虚拟卡有效期和申请额度数据；所述实体卡对所述验证码进行认证，如认证通过则该授权合法，生成虚拟卡***；根据所述申请额度数据生成授权金额数据和交易限额数据，利用授权密钥对所述第一虚拟卡载体唯一识别码、所述授权金额数据、所述虚拟卡有效期和所述交易限额数据进行加密获得密文数据，利用所述虚拟卡***、实体卡***、所述第一虚拟卡载体唯一识别码、所述授权金额数据、所述虚拟卡有效期、所述交易限额数据和所述密文数据进行数字签名得到授权数据，将所述授权数据发送给所述虚拟卡；接收所述实体卡发送的所述授权数据，并向所述实体卡发送实体卡相关数据申请信息；接收所述实体卡返回的实体卡相关数据回复信息，所述实体卡相关数据回复信息中包括实体卡有效期。
第二方面，本发明提供了一种电子现金数据的支付处理方法，该方法包括：虚拟卡与读卡器建立通讯通道；通过所述通讯通道，向所述读卡器发送授权数据和实体卡有效期，所述授权数据为实体卡利用虚拟卡***、实体卡***、第一虚拟卡载体唯一识别码、授权金额数据、虚拟卡有效期、交易限额数据和密文数据进行数字签名得到的授权数据；所述读卡器通过所述授权数据获得第一虚拟卡载体唯一识别码、授权金额数据、虚拟卡有效期、交易限额数据和密文数据；采用授权密钥对所述密文数据进行解密获得第二虚拟卡载体唯一识别码，当所述第二虚拟卡载体唯一识别码与所述第一虚拟卡载体唯一识别码相同时，确认所述授权真实；根据所述授权金额数据、所述交 易限额数据、所述虚拟卡有效期和所述实体卡有效期判断该次支付是否有效，当判断结果为该次支付有效时，根据所述虚拟卡***和所述实体卡***进行电子现金数据支付，并向所述虚拟卡发送支付金额数据；接收所述读卡器发送的支付金额数据，根据所述支付金额数据更新余额数据，添加交易记录信息，所述交易记录信息包括交易时间数据、交易地点数据和交易金额数据。
第三方面，本发明提供了一种虚拟卡，该虚拟卡包括：电子现金授权模块和电子现金支付模块；所述电子现金授权模块，包括：第一通道建立单元，用于与实体卡建立通讯通道；授权申请信息发送单元，用于通过所述第一通道建立单元建立的通讯通道向所述实体卡发送授权申请信息，所述授权申请信息中携带有验证码、第一虚拟卡载体唯一识别码、虚拟卡有效期和申请额度数据；授权数据接收单元，用于接收所述实体卡发送的授权数据，所述授权数据为所述实体卡对所述授权申请信息发送单元所发送的验证码进行认证，并在认证通过后确认该授权合法，生成虚拟卡***，根据所述授权申请信息发送单元所发送的申请额度数据生成授权金额数据和交易限额数据，利用授权密钥对所述授权申请信息发送单元所发送的第一虚拟卡载体唯一识别码、所述授权金额数据、所述虚拟卡有效期和所述交易限额数据进行加密获得密文数据，利用所述虚拟卡***、实体卡***、所述第一虚拟卡载体唯一识别码、所述授权金额数据、所述虚拟卡有效期、所述交易限额数据和所述密文数据进行数字签名得到的授权数据；实体卡相关数据申请信息发送单元，用于向所述实体卡发送实体卡相关数据申请信息；实体卡相关数据回复信息接收单元，用于接收所述实体卡返回的实体卡相关数据回复信息，所述实体卡相关数据回复信息中包括实体卡有效期；所述电子现金支付模块包括：第二通道建立单元，用于与读卡器建立通讯通道；发送单元，用于通过所述第二通道建立单元建立的通讯通道，向所述读卡器发送授权数据和实体卡有效期，所述授权数据为实体卡利用虚拟卡***、实体卡***、第一虚拟卡载体唯一识别码、授权金额数据、虚拟卡有效期、交易限额数据和密文数据进行 数字签名得到的授权数据；所述读卡器通过所述授权数据获得第一虚拟卡载体唯一识别码、授权金额数据、虚拟卡有效期、交易限额数据和密文数据；采用授权密钥对所述密文数据进行解密获得第二虚拟卡载体唯一识别码，当所述第二虚拟卡载体唯一识别码与所述第一虚拟卡载体唯一识别码相同时，确认所述授权真实；根据所述授权金额数据、所述交易限额数据、所述虚拟卡有效期和所述实体卡有效期判断该次支付是否有效，当判断结果为该次支付有效时，根据所述虚拟卡***和所述实体卡***进行电子现金数据支付，并向所述虚拟卡发送支付金额数据；接收单元，用于接收所述读卡器发送的支付金额数据；更新单元，用于根据所述接收单元接收到的所述支付金额数据更新余额数据；交易记录添加单元，用于添加交易记录信息，所述交易记录信息包括交易时间数据、交易地点数据和交易金额数据。
本发明的电子现金数据的授权处理方法中，通过虚拟卡与实体卡建立通讯通道，向实体卡发送授权申请信息，授权申请信息中携带有验证码、第一虚拟卡载体唯一识别码、虚拟卡有效期和申请额度数据，由实体卡对验证码进行认证，如认证通过则该授权合法，生成虚拟卡***，根据申请额度数据生成授权金额数据和交易限额数据，利用授权密钥对第一虚拟卡载体唯一识别码、授权金额数据、虚拟卡有效期和交易限额数据进行加密获得虚拟卡载体唯一识别码密文数据，利用虚拟卡***、实体卡***、第一虚拟卡载体唯一识别码、授权金额数据、虚拟卡有效期、交易限额数据虚拟卡载体唯一识别码和密文数据进行数字签名得到授权数据，将授权数据发送给虚拟卡，虚拟卡接收实体卡发送的授权数据，并向实体卡发送实体卡相关数据申请信息，接收实体卡返回的实体卡相关数据回复信息，实体卡相关数据回复信息中包括实体卡有效期。由上可见，采用本发明的电子现金数据的授权处理方法后，可以在保留实体卡的情况下将电子现金数据授权给虚拟卡，相当于将电子现金数据授权给持有该虚拟卡载体的其他用户，以便其他用户在电子现金数据授权后可以通过该虚拟卡载体进行脱机交易。
附图说明
图1为本发明一个实施例中的实体卡结构示意图；
图2为本发明一个实施例中的电子现金数据的授权处理方法流程图；
图3为本发明一个实施例中的电子现金数据的支付处理方法流程图；
图4为本发明一个实施例中的虚拟卡结构示意图。
具体实施方式
下面通过附图和实施例，对本发明的技术方案做进一步的详细描述。
图1为本发明一个实施例中的实体卡结构示意图。该实体卡内具有微处理器芯片101和存储器102，微处理器芯片101中运行片内操作***(COS，Chip Operating System)，COS的主要功能是控制实体卡和外界的信息交换，管理实体卡内的存储器102并在实体卡内部完成各种命令的处理，上述实体卡的存储器102中记录有电子现金数据，根据实体卡的应用领域，实体卡具体可以为银行卡、公交卡、饭卡等，本发明对此不做具体限定。
较佳地，实体卡内除了具有微处理器芯片101和存储器102外，还可以包括通信模块103，以便实体卡可以通过通信模块103与读卡器或其他终端设备进行通信，通信模块103具体可以为蓝牙通信模块或近场通信(NFC，Near Field Communication)通信模块，本发明实施例中，通信模块103还可以采用其他的功能模块，以便可以支持其他的通信方式，以及可以支持两种以上的通信方式。
图2为本发明一个实施例中的电子现金数据的授权处理方法流程图，该方法包括：
步骤201，虚拟卡与实体卡建立通讯通道。
其中，虚拟卡要依附于某种载体来实现，虚拟卡载体可以为智能终端设备，例如，手机、平板电脑等，也可以为一张实体卡，虚拟卡载体应支持蓝 牙通信方式或NFC通信方式中的至少一种。
从方便用户的角度来说，优选智能手机作为虚拟卡载体，本发明实施例中，对智能手机上运行的操作***不做具体限定，也就是说，虚拟卡可以运行在具有Android操作***的智能手机上，也可以运行在具有WP或iOS等操作***的智能手机上。虚拟卡可以为虚拟卡载体上运行的程序以及特定类型的文件，该程序可以是APP、服务等类型，当虚拟卡载体为智能手机时，编程时要对实体卡进行模拟，建立虚拟卡用户界面、虚拟卡COS和授权控制逻辑，虚拟卡中特定类型的文件主要用于存储发生交易时所需的数据。
本发明实施例中，实体卡可以具有图1所示的结构，具有蓝牙通信模块或NFC通信模块，以便虚拟卡可以通过虚拟卡载体以蓝牙通信方式或NFC通信方式与实体卡建立通讯通道。
虚拟卡与实体卡建立通讯通道，具体可以包括：虚拟卡采用NFC方式或蓝牙通信方式与实体卡建立通讯通道。
本发明实施例中，虚拟卡与实体卡进行通信时表现为读卡设备。
步骤202，虚拟卡通过步骤201建立的通讯通道，向实体卡发送授权申请信息，授权申请信息中携带有验证码、第一虚拟卡载体唯一识别码、虚拟卡有效期和申请额度数据。
其中，验证码可以为由用户预先设定并存储于实体卡中的数字组合，例如000000；也可以是字母组合，例如AA；还可以是字母与数字的组合，例如A1，本领域技术人员可以想到上述验证码具有多种可能的形式，本发明对此不做具体限定。
第一虚拟卡载体唯一识别码可以为手机序列号或客户识别模块(SIM，Subscriber Identity Module)***等能够唯一识别该虚拟卡载体的编码信息。
虚拟卡有效期可以为用户通过虚拟卡载体设置的该虚拟卡有效的时间段，例如，设定虚拟卡有效期为2014年8月1日至2014年9月1日，或者， 设定虚拟卡有效期为2014年8月1日至2014年8月2日，或者，设定虚拟卡有效期为2014年8月1日10时00分00秒至2014年8月1日10时30分00秒，具体的设定形式可有多种，本发明对此不做限定。通过设定虚拟卡有效期使得虚拟卡具有时效性。
申请额度数据为虚拟卡向实体卡申请授权的电子现金的金额数据，例如，100元。
步骤203，实体卡对验证码进行认证。
步骤204，如步骤203认证通过则该授权合法，生成虚拟卡***。
本发明实施例中，当授权结束后，若用户还想将虚拟卡上的电子现金数据再转移给实体卡，可以由实体卡通过上述虚拟卡***进行验证，验证合法后再进行电子现金数据的转移。
步骤205，实体卡根据申请额度数据生成授权金额数据和交易限额数据。
其中，实体卡可以判断申请额度数据是否超出卡内电子现金余额，若没有超出卡内电子现金余额，则生成等于申请额度数据的授权金额数据，若超出卡内电子现金余额，则虚拟卡发送拒绝授权信息。
本发明实施例中，当申请额度数据没有超出卡内电子现金余额时，还可以采用下述方式生成授权金额数据，即根据预设规则，授权金额数据可以等于申请额度数据，也可以小于或大于申请额度数据。具体可以根据申请额度数据结合虚拟卡有效期生成授权金额数据，例如，申请额度数据、虚拟卡有效期和授权金额数据的对应关系可以如表一所示。
表一
Figure PCTCN2014089284-appb-000001
Figure PCTCN2014089284-appb-000002
由表一可知，若申请额度数据为30元，且虚拟卡有效期为1个月，则授权金额数据为50元；若申请额度数据为200元，且虚拟卡有效期为3个月，则授权金额数据为500元。
步骤206，实体卡利用授权密钥对第一虚拟卡载体唯一识别码、授权金额数据、虚拟卡有效期和交易限额数据进行加密获得密文数据。
步骤207，实体卡利用虚拟卡***、实体卡***、第一虚拟卡载体唯一识别码、授权金额数据、虚拟卡有效期、交易限额数据和密文数据进行数字签名得到授权数据。
步骤208，实体卡将授权数据发送给虚拟卡，虚拟卡接收实体卡发送的授权数据。
其中，虚拟卡在接收实体卡发送的授权数据后，可以将上述授权数据进行存储。
步骤209，虚拟卡向实体卡发送实体卡相关数据申请信息。
步骤210，虚拟卡接收实体卡返回的实体卡相关数据回复信息，实体卡相关数据回复信息中包括实体卡有效期。
其中，虚拟卡在接收实体卡返回的实体卡相关数据回复信息后，可以将实体卡相关数据回复信息中包括的实体卡有效期进行存储。
由上述处理过程可知，本发明实施例的电子现金数据的授权处理方法中，通过虚拟卡与实体卡建立通讯通道，向实体卡发送授权申请信息，授权申请信息中携带有验证码、第一虚拟卡载体唯一识别码、虚拟卡有效期和申请额度数据，由实体卡对验证码进行认证，如认证通过则该授权合法，生成虚拟卡***，根据申请额度数据生成授权金额数据和交易限额数据，利用授权密钥对第一虚拟卡载体唯一识别码、授权金额数据、虚拟卡有效期和交易限额数据进行加密获得虚拟卡载体唯一识别码密文数据，利用虚拟卡***、实体卡***、第一虚拟卡载体唯一识别码、授权金额数据、虚拟卡有效期、交易 限额数据虚拟卡载体唯一识别码和密文数据进行数字签名得到授权数据，将授权数据发送给虚拟卡，虚拟卡接收实体卡发送的授权数据，并向实体卡发送实体卡相关数据申请信息，接收实体卡返回的实体卡相关数据回复信息，实体卡相关数据回复信息中包括实体卡有效期。由上可见，采用本发明的电子现金数据的授权处理方法后，一方面，可以在保留实体卡的情况下将电子现金数据授权给虚拟卡，相当于将电子现金数据授权给持有该虚拟卡载体的其他用户；另一方面，由于授权过程中，实体卡发送给虚拟卡的授权数据中包含授权金额数据，该授权金额数据可以为实体卡的部分电子现金数据，因此可以实现将实体卡内的部分电子现金数据授权给其他用户。
图3为本发明一个实施例中的电子现金数据的支付处理方法流程图，该方法包括：
步骤301，虚拟卡与读卡器建立通讯通道。
其中，虚拟卡与读卡器建立通讯通道，具体可以包括：虚拟卡采用NFC方式或蓝牙通信方式与读卡器建立通讯通道。
本发明实施例中，虚拟卡与读卡器进行通信时表现为一张实体卡。
步骤302，虚拟卡通过步骤301所建立的通讯通道，向读卡器发送授权数据和实体卡有效期，授权数据为实体卡利用虚拟卡***、实体卡***、第一虚拟卡载体唯一识别码、授权金额数据、虚拟卡有效期、和密文数据进行数字签名后得到的授权数据。
其中，交易限额数据用于限定虚拟卡每次交易的最高支付金额。
本发明实施例中，当产生异常交易并需要"仲裁"时，数字签名可以提供证据，但不参与消费过程。
步骤303，读卡器通过授权数据获得第一虚拟卡载体唯一识别码、授权金额数据、虚拟卡有效期、交易限额数据和密文数据。读卡器采用授权密钥对密文数据进行解密获得第二虚拟卡载体唯一识别码，当第二虚拟卡载体唯一识别码与第一虚拟卡载体唯一识别码相同时，确认授权真实。
本发明实施例中，读卡器可以脱机识别虚拟卡的合法性与真实性。
需要说明，读卡器既可以是常规意义上的读卡器，也可以是各种智能终端，比如手机或平板电脑或穿戴式设备。
步骤304，读卡器根据授权金额数据、交易限额数据、虚拟卡有效期和实体卡有效期判断该次支付是否有效，当判断结果为该次支付有效时，根据虚拟卡***和实体卡***进行电子现金数据支付。
本发明实施例中，读卡器可以脱机识别虚拟卡的有效性。
步骤305，读卡器向虚拟卡发送支付金额数据。
步骤306，虚拟卡接收读卡器发送的支付金额数据，根据支付金额数据更新余额数据。
步骤307，添加交易记录信息，交易记录信息包括交易时间数据、交易地点数据和交易金额数据。
图4为本发明一个实施例中的虚拟卡结构示意图，虚拟卡包括：电子现金授权模块401和电子现金支付模块402；
所述电子现金授权模块401，包括：
第一通道建立单元4011，用于与实体卡建立通讯通道；
授权申请信息发送单元4012，用于通过所述第一通道建立单元4011建立的通讯通道向所述实体卡发送授权申请信息，所述授权申请信息中携带有验证码、第一虚拟卡载体唯一识别码、虚拟卡有效期和申请额度数据；
授权数据接收单元4013，用于接收所述实体卡发送的授权数据，所述授权数据为所述实体卡对所述授权申请信息发送单元4012所发送的验证码进行认证，并在认证通过后确认该授权合法，生成虚拟卡***，根据所述授权申请信息发送单元4012所发送的申请额度数据生成授权金额数据和交易限额数据，利用授权密钥对所述授权申请信息发送单元4012所发送的第一虚拟卡载体唯一识别码、所述授权金额数据、所述虚拟卡有效期和所述交易限额数据进行加密获得虚拟卡载体唯一识别码密文数据，利用所述虚拟卡***、 实体卡***、所述第一虚拟卡载体唯一识别码、所述授权金额数据、所述虚拟卡有效期、所述交易限额数据和所述密文数据进行数字签名得到的授权数据；
授权数据存储单元4014，用于存储所述授权数据接收单元4013接收到的授权数据；
实体卡相关数据申请信息发送单元4015，用于向所述实体卡发送实体卡相关数据申请信息；
实体卡相关数据回复信息接收单元4016，用于接收所述实体卡返回的实体卡相关数据回复信息，所述实体卡相关数据回复信息中包括实体卡有效期；
其中，授权数据存储单元4014为可选单元，电子现金授权模块401可以不包括授权数据存储单元4014。
所述电子现金支付模块402包括：
第二通道建立单元4021，用于与读卡器建立通讯通道；
发送单元4022，用于通过所述第二通道建立单元4021建立的通讯通道，向所述读卡器发送授权数据和实体卡有效期，所述授权数据为实体卡利用虚拟卡载体唯一识别码虚拟卡***、实体卡***、第一虚拟卡载体唯一识别码、授权金额数据、虚拟卡有效期、交易限额数据和密文数据虚拟卡载体唯一识别码进行数字签名得到的授权数据；
所述读卡器通过所述授权数据获得第一虚拟卡载体唯一识别码、授权金额数据、虚拟卡有效期、交易限额数据虚拟卡载体唯一识别码和密文数据；采用授权密钥对所述虚拟卡载体唯一识别码密文数据进行解密获得第二虚拟卡载体唯一识别码，当所述第二虚拟卡载体唯一识别码与所述第一虚拟卡载体唯一识别码相同时，确认所述授权真实；根据所述授权金额数据、所述交易限额数据、所述虚拟卡有效期和所述实体卡有效期判断该次支付是否有效，当判断结果为该次支付有效时，根据所述虚拟卡***和所述实体卡***进行电子现金数据支付，并向所述虚拟卡发送支付金额数据；
接收单元4023，用于接收所述读卡器发送的支付金额数据；
更新单元4024，用于根据所述接收单元4023接收到的所述支付金额数据更新余额数据。
交易记录添加单元4025，用于添加交易记录信息，所述交易记录信息包括交易时间数据、交易地点数据和交易金额数据。
专业人员应该还可以进一步意识到，结合本文中所公开的实施例描述的各示例的单元及算法步骤，能够以电子硬件、计算机软件或者二者的结合来实现，为了清楚地说明硬件和软件的可互换性，在上述说明中已经按照功能一般性地描述了各示例的组成及步骤。这些功能究竟以硬件还是软件方式来执行，取决于技术方案的特定应用和设计约束条件。专业技术人员可以对每个特定的应用来使用不同方法来实现所描述的功能，但是这种实现不应认为超出本发明的范围。
结合本文中所公开的实施例描述的方法或算法的步骤可以用硬件、处理器执行的软件模块，或者二者的结合来实施。软件模块可以置于随机存储器(RAM)、内存、只读存储器(ROM)、电可编程ROM、电可擦除可编程ROM、寄存器、硬盘、可移动磁盘、CD-ROM、或技术领域内所公知的任意其它形式的存储介质中。
以上所述的具体实施方式，对本发明的目的、技术方案和有益效果进行了进一步详细说明，所应理解的是，以上所述仅为本发明的具体实施方式而已，并不用于限定本发明的保护范围，凡在本发明的精神和原则之内，所做的任何修改、等同替换、改进等，均应包含在本发明的保护范围之内。

Claims (8)

  1. 一种电子现金数据的授权处理方法，其特征在于，所述方法包括：
    虚拟卡与实体卡建立通讯通道；
    通过所述通讯通道，向所述实体卡发送授权申请信息，所述授权申请信息中携带有验证码、第一虚拟卡载体唯一识别码、虚拟卡有效期和申请额度数据；
    所述实体卡对所述验证码进行认证，如认证通过则该授权合法，生成虚拟卡***；根据所述申请额度数据生成授权金额数据和交易限额数据，利用授权密钥对所述第一虚拟卡载体唯一识别码、所述授权金额数据、所述虚拟卡有效期和所述交易限额数据进行加密获得密文数据，利用所述虚拟卡***、实体卡***、所述第一虚拟卡载体唯一识别码、所述授权金额数据、所述虚拟卡有效期、所述交易限额数据和所述密文数据进行数字签名得到授权数据，将所述授权数据发送给所述虚拟卡；
    接收所述实体卡发送的所述授权数据，并向所述实体卡发送实体卡相关数据申请信息；
    接收所述实体卡返回的实体卡相关数据回复信息，所述实体卡相关数据回复信息中包括实体卡有效期。
  2. 如权利要求1所述的方法，其特征在于，所述虚拟卡与实体卡建立通讯通道，具体包括：虚拟卡采用近场通信NFC方式或蓝牙通信方式与实体卡建立通讯通道。
  3. 一种电子现金数据的支付处理方法，其特征在于，所述方法包括：
    虚拟卡与读卡器建立通讯通道；
    通过所述通讯通道，向所述读卡器发送授权数据和实体卡有效期，所述授权数据为实体卡利用虚拟卡***、实体卡***、第一虚拟卡载体唯一识别码、授权金额数据、虚拟卡有效期、交易限额数据和密文数据进行数字签名得到的授权数据；
    所述读卡器通过所述授权数据获得第一虚拟卡载体唯一识别码、授权金额数据、虚拟卡有效期、交易限额数据和密文数据；采用授权密钥对所述密文数据进行解密获得第二虚拟卡载体唯一识别码，当所述第二虚拟卡载体唯一识别码与所述第一虚拟卡载体唯一识别码相同时，确认所述授权真实；根据所述授权金额数据、所述交易限额数据、所述虚拟卡有效期和所述实体卡有效期判断该次支付是否有效，当判断结果为该次支付有效时，根据所述虚拟卡***和所述实体卡***进行电子现金数据支付，并向所述虚拟卡发送支付金额数据；
    接收所述读卡器发送的支付金额数据，根据所述支付金额数据更新余额数据，添加交易记录信息，所述交易记录信息包括交易时间数据、交易地点数据和交易金额数据。
  4. 如权利要求3所述的方法，其特征在于，所述虚拟卡与读卡器建立通讯通道，具体包括：虚拟卡采用近场通信NFC方式或蓝牙通信方式与读卡器建立通讯通道。
  5. 一种虚拟卡，其特征在于，所述虚拟卡包括：电子现金授权模块和电子现金支付模块；
    所述电子现金授权模块，包括：
    第一通道建立单元，用于与实体卡建立通讯通道；
    授权申请信息发送单元，用于通过所述第一通道建立单元建立的通讯通道向所述实体卡发送授权申请信息，所述授权申请信息中携带有验证码、第一虚拟卡载体唯一识别码和申请额度数据；
    授权数据接收单元，用于接收所述实体卡发送的授权数据，其中，所述实体卡对所述授权申请信息发送单元所发送的验证码进行认证，并在认证通过后确认该授权合法，生成虚拟卡***，根据所述授权申请信息发送单元所发送的申请额度数据生成授权金额数据和交易限额数据，利用授权密钥对所述第一虚拟卡载体唯一识别码、所述授权金额数据和所述交易限额数据进行 加密获得虚拟卡载体唯一识别码密文数据，利用所述虚拟卡***、实体卡***、所述第一虚拟卡载体唯一识别码、所述授权金额数据、所述交易限额数据和所述密文数据进行数字签名得到所述授权数据；
    所述电子现金支付模块包括：
    第二通道建立单元，用于与读卡器建立通讯通道；
    发送单元，用于通过所述第二通道建立单元建立的通讯通道，向所述读卡器发送授权数据；
    所述读卡器通过所述授权数据获得第一虚拟卡载体唯一识别码、授权金额数据、交易限额数据、虚拟卡载体唯一识别码和密文数据；采用授权密钥对所述虚拟卡载体唯一识别码密文数据进行解密获得第二虚拟卡载体唯一识别码，当所述第二虚拟卡载体唯一识别码与所述第一虚拟卡载体唯一识别码相同时，确认所述授权真实；根据所述授权金额数据和所述交易限额数据判断该次支付是否有效，当判断结果为该次支付有效时，根据所述虚拟卡***和所述实体卡***进行电子现金数据支付，并向所述虚拟卡发送支付金额数据；
    接收单元，用于接收所述读卡器发送的支付金额数据；
    更新单元，用于根据所述接收单元接收到的所述支付金额数据更新余额数据。
  6. 如权利要求5所述的虚拟卡，其中所述电子现金授权模块包括实体卡相关数据申请信息发送单元，用于向所述实体卡发送实体卡相关数据申请信息；实体卡相关数据回复信息接收单元，用于接收所述实体卡返回的实体卡相关数据回复信息，所述实体卡相关数据回复信息中包括实体卡有效期；在电子现金支付模块中，发送单元向读卡器发送实体卡有效期，读卡器根据所述实体卡有效期判断该次支付是否有效。
  7. 如权利要求5所述的虚拟卡，其中所述授权申请信息发送单元向实体 卡发送的授权申请信息包括虚拟卡有效期；所述授权数据接收单元接收的授权数据中，利用授权密钥对虚拟卡有效期加密得到虚拟卡载体唯一识别码密文数据；所述电子现金支付模块中，读卡器通过授权数据获得虚拟卡有效期，并且根据所述虚拟卡有效期判断该次支付是否有效。
  8. 如权利要求5所述的虚拟卡，其中所述电子现金支付模块包括交易记录添加单元，用于添加交易记录信息，所述交易记录信息包括交易时间数据、交易地点数据和交易金额数据。
PCT/CN2014/089284 2014-09-17 2014-10-23 电子现金数据的授权处理方法、支付处理方法及虚拟卡 WO2016041235A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201410474519.3 2014-09-17
CN201410474519.3A CN105427106B (zh) 2014-09-17 2014-09-17 电子现金数据的授权处理方法、支付处理方法及虚拟卡

Publications (1)

Publication Number Publication Date
WO2016041235A1 true WO2016041235A1 (zh) 2016-03-24

Family

ID=55505294

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2014/089284 WO2016041235A1 (zh) 2014-09-17 2014-10-23 电子现金数据的授权处理方法、支付处理方法及虚拟卡

Country Status (2)

Country Link
CN (1) CN105427106B (zh)
WO (1) WO2016041235A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110619225A (zh) * 2019-09-04 2019-12-27 无锡市公安局 适合公安动态管控的从业人员电子身份卡生成方法
CN113205642A (zh) * 2021-04-25 2021-08-03 多点(深圳)数字科技有限公司 一种基于实体预付卡的防盗刷方法

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108156594A (zh) * 2017-12-26 2018-06-12 上海展扬通信技术有限公司 一种实现虚拟卡的方法及终端
CN112241880A (zh) * 2019-07-17 2021-01-19 天地融科技股份有限公司 一种基于电子现金的脱机交易方法和***
CN112241879A (zh) * 2019-07-17 2021-01-19 天地融科技股份有限公司 一种基于电子现金的脱机交易方法和***
CN111178896B (zh) * 2019-12-05 2021-09-21 腾讯科技（深圳）有限公司 乘车支付方法、装置及存储介质
CN112837054A (zh) * 2021-03-26 2021-05-25 中国工商银行股份有限公司 一种网上支付方法及装置
CN113766429A (zh) * 2021-09-09 2021-12-07 深圳市雪球科技有限公司 设备定位方法、装置、设备、钱包和存储介质

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101414370A (zh) * 2008-12-15 2009-04-22 阿里巴巴集团控股有限公司 利用虚拟卡提高支付安全的支付方法、***及支付平台
CN101918964A (zh) * 2007-12-11 2010-12-15 Xs创新控股有限公司 用于向接收者发送货币的***和方法
US20140057703A1 (en) * 2004-10-01 2014-02-27 Global Cash Access, Inc. System and method for integrated multiple source player cash access
CN103886455A (zh) * 2012-12-19 2014-06-25 Nxp股份有限公司 数字钱包设备以及包括虚拟卡和数字钱包设备的***

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1758291A (zh) * 2004-07-02 2006-04-12 招商银行股份有限公司 银行卡临时授权***及其处理方法
US20070156606A1 (en) * 2005-12-29 2007-07-05 Larry Kane Method of securing a check transaction
KR100681929B1 (ko) * 2005-12-30 2007-02-12 (주)한창시스템 이동 통신 단말기용 외장형 장치 및 이를 이용한 ｎｆｃ통신 방법
US9286561B2 (en) * 2012-05-29 2016-03-15 Stratos Technologies, Inc. Payment card and methods
CN102883047A (zh) * 2012-08-31 2013-01-16 惠州Tcl移动通信有限公司 实现智能移动终端数据安全的方法及***
CN103297436B (zh) * 2013-06-14 2016-01-20 大连三通科技发展有限公司 一种电子授权方法及***

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20140057703A1 (en) * 2004-10-01 2014-02-27 Global Cash Access, Inc. System and method for integrated multiple source player cash access
CN101918964A (zh) * 2007-12-11 2010-12-15 Xs创新控股有限公司 用于向接收者发送货币的***和方法
CN101414370A (zh) * 2008-12-15 2009-04-22 阿里巴巴集团控股有限公司 利用虚拟卡提高支付安全的支付方法、***及支付平台
CN103886455A (zh) * 2012-12-19 2014-06-25 Nxp股份有限公司 数字钱包设备以及包括虚拟卡和数字钱包设备的***

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110619225A (zh) * 2019-09-04 2019-12-27 无锡市公安局 适合公安动态管控的从业人员电子身份卡生成方法
CN110619225B (zh) * 2019-09-04 2023-04-14 无锡市公安局 适合公安动态管控的从业人员电子身份卡生成方法
CN113205642A (zh) * 2021-04-25 2021-08-03 多点(深圳)数字科技有限公司 一种基于实体预付卡的防盗刷方法
CN113205642B (zh) * 2021-04-25 2023-04-14 多点(深圳)数字科技有限公司 一种基于实体预付卡的防盗刷方法

Also Published As

Publication number Publication date
CN105427106B (zh) 2021-07-20
CN105427106A (zh) 2016-03-23

Similar Documents

Publication Publication Date Title
WO2016041235A1 (zh) 电子现金数据的授权处理方法、支付处理方法及虚拟卡
KR102242218B1 (ko) 사용자 인증 방법 및 장치, 및 웨어러블 디바이스 등록 방법 및 장치
RU2710897C2 (ru) Способы безопасного генерирования криптограмм
JP6704919B2 (ja) 支払いトークンのセキュリティを確保する方法
CN103873244B (zh) 基于指纹识别的移动支付中的身份认证方法和***
US9647840B2 (en) Method for producing a soft token, computer program product and service computer system
US20170364911A1 (en) Systems and method for enabling secure transaction
TWI775820B (zh) 移動支付轉授權方法、及利用該方法實現的支付系統
WO2020020329A1 (zh) 一种支持匿名或实名的离线交易的数字钱包及使用方法
CN107730240B (zh) 多因子多信道id认证和交易控制及多选项支付***及方法
ES2896274T3 (es) Método, dispositivo, servidor y sistema para autenticar a un usuario
US11341232B2 (en) Smart card as a security token
JP2015138545A (ja) 電子支払システム及び電子支払方法
US20230133418A1 (en) Personalised, server-specific authentication mechanism
CN112805737A (zh) 用于令牌邻近交易的技术
KR20130008125A (ko) 사용자의 결제수단과 동적 매핑된 결제식별번호를 이용한 결제
WO2015168878A1 (zh) 支付方法和装置以及支付要素处理方法和装置
EP3485600B1 (en) Method for providing secure digital signatures
US11880840B2 (en) Method for carrying out a transaction, corresponding terminal, server and computer program
US20230237172A1 (en) Data broker
US20240129139A1 (en) User authentication using two independent security elements
JP6515080B2 (ja) 情報処理システム、情報処理方法、及びプログラム
ES2971660T3 (es) Procedimiento para llevar a cabo una transacción, terminal, servidor y programa informático correspondiente
KR20130008124A (ko) 금융기관 별로 동적 매핑된 결제식별번호를 이용한 결제
JP6720380B2 (ja) 情報処理システム、情報処理方法、及びプログラム

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 14902187

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205 DATED 24/05/2017)

122 Ep: pct application non-entry in european phase

Ref document number: 14902187

Country of ref document: EP

Kind code of ref document: A1