[go: up one dir, main page]
More Web Proxy on the site http://driver.im/

CN105335848A - Broadband account number payment method and system, broadband payment platform and security certification platform - Google Patents

Broadband account number payment method and system, broadband payment platform and security certification platform Download PDF

Info

Publication number
CN105335848A
CN105335848A CN201410400911.3A CN201410400911A CN105335848A CN 105335848 A CN105335848 A CN 105335848A CN 201410400911 A CN201410400911 A CN 201410400911A CN 105335848 A CN105335848 A CN 105335848A
Authority
CN
China
Prior art keywords
broadband
terminal
order
user
payment
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201410400911.3A
Other languages
Chinese (zh)
Inventor
何峣
卢燕青
杨敏维
黎艳
郭建昌
张�荣
郭茂文
宛传东
陈淑珍
杨穗珊
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Telecom Corp Ltd
Original Assignee
China Telecom Corp Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Telecom Corp Ltd filed Critical China Telecom Corp Ltd
Priority to CN201410400911.3A priority Critical patent/CN105335848A/en
Publication of CN105335848A publication Critical patent/CN105335848A/en
Pending legal-status Critical Current

Links

Landscapes

  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

The invention relates to a broadband account number payment method and system, a broadband payment platform and a security certification platform. The method comprises the following steps: receiving, by the broadband payment platform, an order applied by a first terminal, querying the broadband account number of a user according to the IP address of the first terminal, establishing the corresponding relationship between the broadband account number of the user and the order ID of the user, sending the corresponding relationship to the security certification platform, encoding the order ID to generate an audio file or a two-dimension code picture, and sending the generated audio file or two-dimension code picture to the first terminal; receiving, by the security certification platform, an order ID and a digital signature for the order ID sent by a second terminal, querying the broadband account number of the user according to the order ID, querying a digital certificate according to the broadband account number and verifying the digital signature by utilizing the digital certificate; and after the verification, receiving information, submitted by the security certification platform, for confirming the identity of the user to be legal, and completing the payment of the order on the basis of the broadband account number. According to the broadband account number payment method and system, the broadband payment platform and the security certification platform, the security of the order payment can be ensured.

Description

Broadband account payment method, system, broadband payment platform and security authentication platform
Technical Field
The present disclosure relates to the field of broadband technologies, and in particular, to a broadband account payment method, a broadband account payment system, a broadband payment platform, and a security authentication platform.
Background
The broadband charging technology of the telecom operator confirms the identity of a user through a broadband line binding technology. The bank system transmits transaction information between the two terminals through ultrasonic waves, takes out a payment account number and a password from the terminal side, and hands the payment account number and the password to a background through a public network to carry out payment. The digital signature is a public-private key asymmetric encryption and decryption technology, and carries out signature and signature verification on information so as to confirm the identity of a user. The ultrasonic wave or two-dimensional code technology has the characteristics of high confidentiality, convenience in use and the like, and is supported by a PC (personal computer) and a mobile phone. A4G or 3G-SWP (Single wire protocol) mobile phone user card in mobile communication is provided with a high-level security unit, which can ensure that a private key in the card is not read and digital signature operation can be performed in the card.
There are currently two broadband payment technologies:
fig. 1 is a schematic diagram illustrating an implementation of a conventional technology for implementing broadband payment based on a broadband internet account.
As shown in FIG. 1, the whole process from payment request to payment completion of the user can be completed only on the PC, and the security assurance depends on the broadband line binding technology, but the technology cannot ensure the operation of the user. Once the computer is controlled by hackers, it can be directly used for illegal consumption.
The technology has the advantages that: the payment account is checked back through the IP, and the account password does not need to be transmitted in the network and taken out from the terminal side.
The disadvantages of this technique are: without payment confirmation by the second terminal, once the trojan program is in the terminal, the trojan can be automatically or remotely controlled by hackers to use the terminal for illegal consumption, thereby causing the payment to be easily stolen directly from the first terminal.
Fig. 2 is a schematic implementation diagram of a conventional technology for implementing payment based on sound waves.
As shown in fig. 2, in the ultrasonic payment scheme, a second terminal is introduced for auxiliary payment, and ultrasonic waves are used for conveniently transmitting data between terminals, but the payment account and the password are taken out from the terminal side, packaged with transaction information, and transmitted to a background for payment through a public network, so that a greater security risk exists.
The technology has the advantages that: a second terminal is introduced for auxiliary payment, and data are conveniently and secretly transmitted between the terminals by using ultrasonic waves.
The disadvantages of this technique are: the account/password is sent out of the card, and the account/password is transmitted in the public network, so that unsafe factors exist.
Disclosure of Invention
The present disclosure proposes a new technical solution in view of at least one of the above problems.
The present disclosure provides, in one aspect thereof, a broadband account number payment method that can ensure security of order payment.
The present disclosure provides, in another aspect thereof, a broadband payment platform that can secure order payment.
The present disclosure provides, in yet another aspect thereof, a security authentication platform that can secure order payment.
The present disclosure provides, in still another aspect thereof, a broadband account number payment system that can secure order payment.
According to the present disclosure, there is provided a broadband account payment method, including:
the broadband payment platform receives an order applied by a user on an application website by means of a first terminal;
the broadband payment platform queries a broadband account of the user according to the IP address of the first terminal;
the broadband payment platform establishes a corresponding relation between a broadband account of a user and an order ID of the user, and sends the corresponding relation to the security authentication platform;
the broadband payment platform encodes the order ID to generate an audio file or a two-dimensional code picture, and sends the generated audio file or the two-dimensional code picture to the first terminal;
the safety certification platform receives the order ID sent by the second terminal and a digital signature of the order ID, wherein the second terminal carries out digital signature on the order ID carried in the received audio file or two-dimensional code picture;
the security authentication platform inquires a broadband account number of the user according to the received order ID, inquires a corresponding digital certificate of the user according to the inquired broadband account number of the user, and verifies the digital signature of the order ID by using a public key in the digital certificate of the user;
after the verification is passed, the broadband payment platform receives the information which is submitted by the security authentication platform and confirms that the user identity is legal, and the payment of the order is completed based on the broadband account number of the user.
In some embodiments of the present disclosure, the requested order carries the IP address of the first terminal.
In some embodiments of the present disclosure, the digitally signing, by the second terminal, the order ID carried in the received generated audio file or two-dimensional code picture includes:
the second terminal decodes the generated audio file or two-dimensional code picture after receiving the audio file or the two-dimensional code picture so as to obtain the order ID carried by the second terminal;
and carrying out digital signature on the decoded order by using a user private key in the second terminal card.
In some embodiments of the present disclosure, the method further comprises:
and the broadband payment platform returns the payment result to the first terminal.
In some embodiments of the present disclosure, the first terminal is a PC, and the second terminal is a mobile phone.
According to the present disclosure, there is also provided a broadband payment platform, comprising:
the order receiving unit is used for receiving an order applied by a user on an application website by means of a first terminal;
the account inquiry unit is used for inquiring the broadband account of the user according to the IP address of the first terminal;
the system comprises a relation establishing unit, a security authentication platform and a security authentication server, wherein the relation establishing unit is used for establishing a corresponding relation between a broadband account of a user and an order ID of the user and sending the corresponding relation to the security authentication platform;
the encoding unit is used for encoding the order ID to generate an audio file or a two-dimensional code picture and sending the generated audio file or the two-dimensional code picture to the first terminal so that the first terminal can send the order ID to the second terminal and the second terminal can carry out digital signature on the order ID;
and the feedback receiving unit is used for receiving the information which is submitted by the security authentication platform and used for confirming that the user identity is legal, and completing the payment of the order based on the broadband account number of the user.
In some embodiments of the present disclosure, the requested order carries the IP address of the first terminal.
In some embodiments of the present disclosure, the broadband payment platform further comprises:
and the result feedback unit is used for returning the payment result to the first terminal.
In some embodiments of the present disclosure, the first terminal is a PC, and the second terminal is a mobile phone.
According to the present disclosure, there is also provided a security authentication platform, comprising:
the system comprises a corresponding relation receiving unit, a broadband payment platform and a processing unit, wherein the corresponding relation receiving unit is used for receiving a corresponding relation between a broadband account of a user and an order ID of the user, which is sent by the broadband payment platform, and the broadband account of the user starting an order is inquired by the broadband payment platform according to an IP address of a first terminal submitting an order application;
the digital signature receiving unit is used for receiving the order ID sent by the second terminal and a digital signature of the order ID, wherein the second terminal carries out digital signature on the order ID carried in the audio file or the two-dimensional code picture which is obtained by the first terminal from the broadband payment platform after receiving the audio file or the two-dimensional code picture;
and the digital signature verification unit is used for querying the broadband account number of the user according to the received order ID, querying the corresponding digital certificate of the user according to the queried broadband account number of the user, verifying the digital signature of the order ID by using a public key in the digital certificate of the user, and informing a broadband payment platform of the verification result so as to complete the payment of the order.
In some embodiments of the present disclosure, the first terminal is a PC, and the second terminal is a mobile phone.
According to the disclosure, a broadband account payment system is further provided, which comprises a first terminal, a second terminal, a broadband payment platform and a security certification platform.
In the technical scheme of the disclosure, the broadband account number of the user is only transmitted in the safety interface between the safety certification platform and the broadband payment platform and is not transmitted between the platform side and the terminal side and between the platform side and the terminal, so that the payment safety is obviously improved.
Drawings
The accompanying drawings, which are included to provide a further understanding of the disclosure, are incorporated in and constitute a part of this application. In the drawings:
fig. 1 is a schematic diagram illustrating an implementation of a conventional technology for implementing broadband payment based on a broadband internet account.
Fig. 2 is a schematic implementation diagram of a conventional technology for implementing payment based on sound waves.
Fig. 3 is a schematic diagram of an application scenario of the present disclosure.
Fig. 4 is a flowchart illustrating a broadband account payment method according to an embodiment of the present disclosure.
Fig. 5 is a flowchart illustrating a broadband account payment method according to another embodiment of the present disclosure.
Fig. 6 is a schematic structural diagram of a broadband payment platform according to an embodiment of the present disclosure.
Fig. 7 is a schematic structural diagram of a security authentication platform according to an embodiment of the present disclosure.
Fig. 8 is a schematic structural diagram of a broadband account payment system according to an embodiment of the present disclosure.
Detailed Description
The present disclosure will be described below with reference to the accompanying drawings. It is to be noted that the following description is merely illustrative and exemplary in nature and is in no way intended to limit the disclosure, its application, or uses. Unless specifically stated otherwise, the relative arrangement of components and steps and numerical expressions and values set forth in the embodiments do not limit the scope of the present disclosure. Additionally, techniques, methods, and apparatus known to those skilled in the art may not be discussed in detail but are intended to be part of the specification where appropriate.
Fig. 3 is a schematic diagram of an application scenario of the present disclosure.
As shown in fig. 3, the present disclosure improves the existing broadband payment process by combining with techniques such as reverse account checking by IP address, cross-terminal ultrasonic or two-dimensional code transmission, user card digital signature, and background signature verification, and solves the security problems that the identity of the user actually performing the payment operation cannot be confirmed, and the payment account and the password are taken out at the terminal side and transmitted in the public network.
The ultrasonic wave or the two-dimensional code needs to transmit the order ID, and further, in order to improve the use experience of a user, information such as order amount, commodity name and brief supplementary remark of the commodity can be transmitted. The digital signature and signature verification mode is used for replacing the account password authentication mode. The private key of the user for digital signature can not be out of the mobile phone user card and the signature operation is completed in the card. The broadband payment platform reversely checks the broadband account of the user through the IP address of the user on the internet, and then uses the digital certificate associated with the broadband account to reliably verify the signature of the signature data. The broadband account is only transmitted in a safety interface between the safety certification platform and the broadband payment platform and is not present at a high-risk terminal side.
Fig. 4 is a flowchart illustrating a broadband account payment method according to an embodiment of the present disclosure.
As shown in fig. 4, this embodiment may include the steps of:
s402, the broadband payment platform receives an order applied by a user on an application website by means of a first terminal;
that is, the user purchases goods on an application website through a first terminal such as a PC, and the application website submits an order applied by the user to the broadband payment platform.
S404, the broadband payment platform inquires out a broadband account of the user according to the IP address of the first terminal;
it should be noted that the requested order carries the IP address of the first terminal.
After the broadband payment platform receives the order, the broadband account of the user corresponding to the IP address of the first terminal is inquired according to the IP address of the first terminal carried in the order and the corresponding relation between the IP address prestored in the broadband payment platform and the broadband account.
S406, the broadband payment platform establishes a corresponding relation between the broadband account of the user and the order ID of the user, and sends the corresponding relation to the security authentication platform.
S408, the broadband payment platform encodes the order ID to generate an audio file or a two-dimensional code picture, and the generated audio file or the two-dimensional code picture is sent to the first terminal; after receiving the encoded audio file, the first terminal decodes and plays the audio file, and at the moment, the second terminal can acquire the played audio file; or after the first terminal receives the two-dimensional code picture, the second terminal actively scans the two-dimensional code picture to acquire the order ID carried in the two-dimensional code picture.
S410, the security authentication platform receives the order ID sent by the second terminal and a digital signature of the order ID, wherein the second terminal carries out digital signature on the order ID carried in the received audio file or two-dimensional code picture after receiving the generated audio file or two-dimensional code picture;
s412, since the corresponding relationship between the broadband account of the user and the digital certificate of the user is pre-stored in the security authentication platform, and in step S406, the broadband payment platform has transmitted the corresponding relationship between the broadband account of the user and the order ID thereof to the security authentication platform, the security authentication platform may query the broadband account of the user according to the order ID received from the second terminal, query the corresponding digital certificate of the user according to the queried broadband account of the user, and verify the digital signature of the order ID by using the public key in the digital certificate of the user.
And S414, after the verification is passed, the broadband payment platform receives the information which is submitted by the security authentication platform and confirms that the user identity is legal, and completes the payment of the order based on the broadband account of the user.
In this embodiment, the broadband account of the user is only transferred in the security interface between the security authentication platform and the broadband payment platform, and is not transmitted between the platform side and the terminal side and between the terminal, so that the payment security is significantly improved.
In one embodiment, the step of digitally signing, by the second terminal, the order ID carried in the generated audio file or two-dimensional code picture after receiving the generated audio file or two-dimensional code picture may include: the second terminal decodes the generated audio file or two-dimensional code picture after receiving the audio file or the two-dimensional code picture so as to obtain the order ID carried by the second terminal; and carrying out digital signature on the decoded order by using a user private key in the second terminal card.
Further, the broadband payment platform returns the payment result to the first terminal.
In another embodiment, the first terminal may be a PC, the second terminal may be a mobile phone, but not limited thereto, the first terminal may be any terminal connected to the internet, and the second terminal may be any terminal capable of receiving an audio file or scanning a two-dimensional code picture.
Fig. 5 is a flowchart illustrating a broadband account payment method according to another embodiment of the present disclosure.
As shown in fig. 5, this embodiment may include the steps of:
s502, clicking and purchasing the commodity of the SP website on a Web browser of the PC by a user;
s504, the SP website submits an order to the operator broadband payment platform;
s506, the broadband payment platform finds out the broadband internet account of the user according to the IP address of the user, associates the account with the order information and stores the account in a database of the platform;
s508, the broadband payment platform uploads the broadband account number and order information of the user to the security authentication platform, wherein the order information comprises an order ID;
s510, the broadband payment platform simultaneously encodes the order information of the user into an ultrasonic audio file or a two-dimensional code picture and transmits the ultrasonic audio file or the two-dimensional code picture to a PCWeb browser at the user side;
s512, a security authentication client in the user mobile phone receives the ultrasonic audio or the scanning two-dimensional code picture, decodes the information and obtains order information;
s514, the user confirms payment by clicking the security authentication client in the mobile phone, and inputs the PIN code of the security authentication application in the UIM card of the mobile phone, after the PIN code is verified by the security authentication application in the card, the security authentication client in the mobile phone transmits the order information obtained by decoding to the security authentication application in the UIM card through the phone-card interface of the mobile phone operating system. The security authentication application in the card carries out digital signature on the entering order information by using a user private key in the card and returns a signature result to a security authentication client in the mobile phone through a phone-card interface;
s516, the security authentication client in the mobile phone submits a signature verification request to the security authentication platform, wherein the request comprises order information and signature data;
s518, the security authentication platform inquires out a corresponding broadband account number of the user according to the received order information, then checks out a digital certificate of the user according to the broadband account number from the platform database, uses a user public key in the digital certificate to check the signature of the signature data, and confirms the legal identity of the user after the signature passes;
s520, the security authentication platform submits a message for confirming the payment authentication identity to the broadband payment platform, wherein the message comprises a broadband account and order information;
s522, the broadband payment platform completes payment and binds the charging with the broadband account number according to the rules of time or package;
s524, the broadband payment platform returns a payment result to the SP website;
s526, the SP website returns the payment result to the PCWeb browser at the user side.
The embodiment adds the security guarantee flow of the cooperative verification of the mobile phone terminal, the UIM card and the security certification platform on the basis of keeping the original broadband payment main body flow. The security authentication platform can accurately confirm the identity of the current operator according to the corresponding relation between the broadband account and the user public key and the signature checking result of the key information; the user private key is stored on the basis of the UIM card, the private key cannot be taken out of the card, and digital signature operation is carried out in the card, so that high security of hardware U shield level can be achieved; the method has the advantages of being low in cost and high in confidentiality compared with a short message verification code and a telephone callback technology while facilitating confirmation of a user by utilizing a PC end sound card and a loudspeaker to produce sound and a mobile phone end microphone to receive sound, and transmitting detailed order information through ultrasonic waves or utilizing PC end screen display and mobile phone end camera scanning to transmit detailed order information through a two-dimensional code.
It will be understood by those skilled in the art that all or part of the steps of implementing the above method embodiments may be implemented by hardware associated with program instructions, the program may be stored in a storage medium readable by a computing device, and the program may execute the steps of the above method embodiments when executed, and the storage medium may include various media capable of storing program codes, such as ROM, RAM, magnetic disk and optical disk.
Fig. 6 is a schematic structural diagram of a broadband payment platform according to an embodiment of the present disclosure.
As shown in fig. 6, the broadband payment platform 60 in this embodiment may include an order receiving unit 602, an account querying unit 604, a relationship establishing unit 606, an encoding unit 608, and a feedback receiving unit 610. Wherein,
an order receiving unit 602, configured to receive an order applied by a user on an application website via a first terminal;
an account querying unit 604, configured to query a broadband account of the user according to the IP address of the first terminal;
a relationship establishing unit 606, configured to establish a correspondence between a broadband account of a user and an order ID of the user, and send the correspondence to a security authentication platform;
the encoding unit 608 is configured to encode the order ID to generate an audio file or a two-dimensional code picture, and send the generated audio file or two-dimensional code picture to the first terminal, so that the first terminal sends the order ID therein to the second terminal and the second terminal digitally signs the order ID;
and the feedback receiving unit 610 is configured to receive information, submitted by the security authentication platform, for confirming that the user identity is legal, and complete payment for the order based on the broadband account of the user.
In this embodiment, the broadband account of the user is only transferred in the security interface between the security authentication platform and the broadband payment platform, and is not transmitted between the platform side and the terminal side and between the terminal, so that the payment security is significantly improved.
Wherein, the applied order carries the IP address of the first terminal.
In one embodiment, the broadband payment platform further comprises: and the result feedback unit is used for returning the payment result to the first terminal.
In another embodiment, the first terminal may be a PC and the second terminal may be a mobile phone.
Fig. 7 is a schematic structural diagram of a security authentication platform according to an embodiment of the present disclosure.
As shown in fig. 7, the security authentication platform 70 in this embodiment may include a correspondence receiving unit 702, a digital signature receiving unit 704, and a digital signature verifying unit 706. Wherein,
a corresponding relationship receiving unit 702, configured to receive a corresponding relationship between a broadband account of a user and an order ID thereof, where the broadband payment platform queries the broadband account of the user who initiated the order according to an IP address of a first terminal submitting an order application;
the digital signature receiving unit 704 is configured to receive an order ID sent by the second terminal and a digital signature of the order ID, where the second terminal performs digital signature on the order ID carried in an audio file or a two-dimensional code image acquired by the first terminal from the broadband payment platform after receiving the audio file or the two-dimensional code image;
the digital signature verification unit 706 is configured to query the broadband account of the user according to the received order ID, query the corresponding digital certificate of the user according to the queried broadband account of the user, verify the digital signature of the order ID by using a public key in the digital certificate of the user, and notify the broadband payment platform of the verification result to complete payment for the order.
In this embodiment, the broadband account of the user is only transferred in the security interface between the security authentication platform and the broadband payment platform, and is not transmitted between the platform side and the terminal side and between the terminal, so that the payment security is significantly improved.
In one embodiment, the first terminal is a PC and the second terminal is a mobile phone.
Fig. 8 is a schematic structural diagram of a broadband account payment system according to an embodiment of the present disclosure.
As shown in fig. 8, the broadband account payment system 80 in this embodiment may include a first terminal 802, a second terminal 804, a broadband payment platform 806, and a security authentication platform 808. Wherein, the broadband payment platform 806 and the security authentication platform 808 can be implemented by the aforementioned embodiments.
The embodiment of the disclosure aims at solving the problem that the identity of a payer cannot be confirmed and a payment account password is taken out from a terminal side and flows in a public network in the existing broadband payment process and the ultrasonic or two-dimensional code payment process, and the payment security is loophole, provides a digital signature mode that a private key does not go out of a card to replace a mode of taking out the account password from the terminal side, and ensures that a broadband account only flows on the platform side and does not appear on the terminal side by means of a telecommunication IP reverse check broadband account technology, order information is transmitted between a user PC and a mobile phone terminal through the ultrasonic or two-dimensional code, so that the user can conveniently confirm payment information, and the user experience is improved.
The embodiments are described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments can be mutually referred to. For the apparatus embodiment, since it is substantially similar to the method embodiment, the description is relatively simple, and reference may be made to the description of the method embodiment section for the relevant points.
While the present disclosure has been described with reference to exemplary embodiments, it should be understood that the present disclosure is not limited to the exemplary embodiments described above. It will be apparent to those skilled in the art that the above-described exemplary embodiments may be modified without departing from the scope and spirit of the disclosure. The scope of the following claims is to be accorded the broadest interpretation so as to encompass all such modifications and equivalent structures and functions.

Claims (12)

1. A broadband account number payment method is characterized by comprising the following steps:
the broadband payment platform receives an order applied by a user on an application website by means of a first terminal;
the broadband payment platform queries a broadband account of the user according to the IP address of the first terminal;
the broadband payment platform establishes a corresponding relation between a broadband account of a user and an order ID of the user, and sends the corresponding relation to the security authentication platform;
the broadband payment platform encodes the order ID to generate an audio file or a two-dimensional code picture, and sends the generated audio file or the two-dimensional code picture to the first terminal;
the safety certification platform receives the order ID sent by the second terminal and a digital signature of the order ID, wherein the second terminal carries out digital signature on the order ID carried in the received audio file or two-dimensional code picture;
the security authentication platform inquires a broadband account number of the user according to the received order ID, inquires a corresponding digital certificate of the user according to the inquired broadband account number of the user, and verifies the digital signature of the order ID by using a public key in the digital certificate of the user;
after the verification is passed, the broadband payment platform receives the information which is submitted by the security authentication platform and confirms that the user identity is legal, and the payment of the order is completed based on the broadband account number of the user.
2. The broadband account payment method of claim 1, wherein the requested order carries an IP address of the first terminal.
3. The broadband account payment method of claim 1, wherein the digitally signing, by the second terminal, the order ID carried therein after receiving the generated audio file or two-dimensional code picture comprises:
the second terminal decodes the generated audio file or two-dimensional code picture after receiving the audio file or the two-dimensional code picture so as to obtain the order ID carried by the second terminal;
and carrying out digital signature on the decoded order by using a user private key in the second terminal card.
4. The broadband account payment method of claim 1, further comprising:
and the broadband payment platform returns the payment result to the first terminal.
5. The broadband account payment method of claim 1, wherein the first terminal is a PC and the second terminal is a mobile phone.
6. A broadband payment platform, comprising:
the order receiving unit is used for receiving an order applied by a user on an application website by means of a first terminal;
the account inquiry unit is used for inquiring the broadband account of the user according to the IP address of the first terminal;
the system comprises a relation establishing unit, a security authentication platform and a security authentication server, wherein the relation establishing unit is used for establishing a corresponding relation between a broadband account of a user and an order ID of the user and sending the corresponding relation to the security authentication platform;
the encoding unit is used for encoding the order ID to generate an audio file or a two-dimensional code picture and sending the generated audio file or the two-dimensional code picture to the first terminal so that the first terminal can send the order ID to the second terminal and the second terminal can carry out digital signature on the order ID;
and the feedback receiving unit is used for receiving the information which is submitted by the security authentication platform and used for confirming that the user identity is legal, and completing the payment of the order based on the broadband account number of the user.
7. The broadband payment platform of claim 6, wherein the applied order carries an IP address of the first terminal.
8. The broadband payment platform of claim 6, further comprising:
and the result feedback unit is used for returning the payment result to the first terminal.
9. The broadband payment platform of claim 6, wherein the first terminal is a PC and the second terminal is a mobile phone.
10. A secure authentication platform, comprising:
the system comprises a corresponding relation receiving unit, a broadband payment platform and a processing unit, wherein the corresponding relation receiving unit is used for receiving a corresponding relation between a broadband account of a user and an order ID of the user, which is sent by the broadband payment platform, and the broadband account of the user starting an order is inquired by the broadband payment platform according to an IP address of a first terminal submitting an order application;
the digital signature receiving unit is used for receiving the order ID sent by the second terminal and a digital signature of the order ID, wherein the second terminal carries out digital signature on the order ID carried in the audio file or the two-dimensional code picture which is obtained by the first terminal from the broadband payment platform after receiving the audio file or the two-dimensional code picture;
and the digital signature verification unit is used for querying the broadband account number of the user according to the received order ID, querying the corresponding digital certificate of the user according to the queried broadband account number of the user, verifying the digital signature of the order ID by using a public key in the digital certificate of the user, and informing a broadband payment platform of the verification result so as to complete the payment of the order.
11. The security certification platform according to claim 10, wherein the first terminal is a PC and the second terminal is a mobile phone.
12. A broadband account payment system comprising a first terminal, a second terminal, a broadband payment platform as claimed in any one of claims 6 to 9 and a security certification platform as claimed in any one of claims 10 to 11.
CN201410400911.3A 2014-08-15 2014-08-15 Broadband account number payment method and system, broadband payment platform and security certification platform Pending CN105335848A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201410400911.3A CN105335848A (en) 2014-08-15 2014-08-15 Broadband account number payment method and system, broadband payment platform and security certification platform

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201410400911.3A CN105335848A (en) 2014-08-15 2014-08-15 Broadband account number payment method and system, broadband payment platform and security certification platform

Publications (1)

Publication Number Publication Date
CN105335848A true CN105335848A (en) 2016-02-17

Family

ID=55286362

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201410400911.3A Pending CN105335848A (en) 2014-08-15 2014-08-15 Broadband account number payment method and system, broadband payment platform and security certification platform

Country Status (1)

Country Link
CN (1) CN105335848A (en)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106686001A (en) * 2017-02-27 2017-05-17 深圳兆日科技股份有限公司 Service security processing method and service security processing device
CN109840776A (en) * 2017-11-27 2019-06-04 汇智通讯有限公司 Utilize the transaction certificate authentication method and transaction verification method of ultrasonic wave identifying code
CN110738489A (en) * 2019-09-24 2020-01-31 天翼电子商务有限公司 Two-dimensional code payment anti-theft method and system, storage medium and terminal
CN112491834A (en) * 2020-11-16 2021-03-12 中国联合网络通信集团有限公司 Information authentication method and authentication server

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101051372A (en) * 2006-04-06 2007-10-10 北京易富金川科技有限公司 Method for safety verifying financial business information in electronic business
CN101794420A (en) * 2009-12-31 2010-08-04 卓望数码技术(深圳)有限公司 Payment authentication method, terminal and system
CN103116844A (en) * 2013-03-06 2013-05-22 李锦风 Near field communication payment method authenticated by both sides of deal
CN103577977A (en) * 2012-08-02 2014-02-12 中国银联股份有限公司 Method and system for on-line shopping and off-line payment
CN103839157A (en) * 2014-02-25 2014-06-04 中国联合网络通信集团有限公司 Electronic payment method, device and system

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101051372A (en) * 2006-04-06 2007-10-10 北京易富金川科技有限公司 Method for safety verifying financial business information in electronic business
CN101794420A (en) * 2009-12-31 2010-08-04 卓望数码技术(深圳)有限公司 Payment authentication method, terminal and system
CN103577977A (en) * 2012-08-02 2014-02-12 中国银联股份有限公司 Method and system for on-line shopping and off-line payment
CN103116844A (en) * 2013-03-06 2013-05-22 李锦风 Near field communication payment method authenticated by both sides of deal
CN103839157A (en) * 2014-02-25 2014-06-04 中国联合网络通信集团有限公司 Electronic payment method, device and system

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106686001A (en) * 2017-02-27 2017-05-17 深圳兆日科技股份有限公司 Service security processing method and service security processing device
CN109840776A (en) * 2017-11-27 2019-06-04 汇智通讯有限公司 Utilize the transaction certificate authentication method and transaction verification method of ultrasonic wave identifying code
CN110738489A (en) * 2019-09-24 2020-01-31 天翼电子商务有限公司 Two-dimensional code payment anti-theft method and system, storage medium and terminal
CN112491834A (en) * 2020-11-16 2021-03-12 中国联合网络通信集团有限公司 Information authentication method and authentication server
CN112491834B (en) * 2020-11-16 2023-03-24 中国联合网络通信集团有限公司 Information authentication method and authentication server

Similar Documents

Publication Publication Date Title
CN109983466B (en) Account management system and method based on block chain and storage medium
US10397004B2 (en) Distributed system for multi-function secure verifiable signer authentication
KR102375777B1 (en) Payment authentication method, device and system for on-board terminal
JP5258422B2 (en) Mutual authentication system, mutual authentication method and program
CN105099692B (en) Security verification method and device, server and terminal
CN103747012B (en) Safe verification method, the apparatus and system of network trading
CN110062382B (en) Identity verification method, client, relay equipment and server
US10045210B2 (en) Method, server and system for authentication of a person
JP2012530311A5 (en)
US11956248B2 (en) System and method for message recipient verification
WO2012111019A1 (en) Automated mobile transaction processing system and method
WO2016054924A1 (en) Identity authentication method, third-party server, merchant server and user terminal
CN104661215B (en) The means of communication and wireless device of wireless device
CN105656850B (en) Data processing method, related device and system
WO2017206524A1 (en) Electronic device control method, terminal and control system
WO2016095473A1 (en) Security call method, terminal and system, and computer storage medium
CN104883367A (en) Method for auxiliary verification login, system, and application client
CN104378368B (en) A kind of barcode scanning login method and system
CN105335848A (en) Broadband account number payment method and system, broadband payment platform and security certification platform
CN102802150A (en) Phone number validation method and system as well as terminal
CN111949958A (en) Authorization authentication method and device in Oauth protocol
KR20070105072A (en) Voice one time password authentic system and its method on the internet banking service system
CN103368831A (en) Anonymous instant messaging system based on frequent visitor recognition
CN105741116A (en) Fast payment method, apparatus and system
CN111949959A (en) Authorization authentication method and device in Oauth protocol

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20160217