CN103268547A - NFC Mobile Payment System with Fingerprint Authentication Mechanism - Google Patents

Abstract

The invention relates to a mobile terminal payment system with an NFC (Near Field Communication) module and a security protection mechanism based on fingerprint authentication. The NFC mobile phone payment system comprises a mobile payment terminal and payment method supporting an NFC technology, a fingerprint authentication system based on the mobile phone and a background traction system, wherein the terminal mobile phone comprises an NFC module and a fingerprint authentication module, i.e., a chip with a fingerprint authentication function; the security protection mechanism comprises a security authentication passage among a server, the transaction system and the terminal. The NFC mobile phone payment system with the fingerprint authentication mechanism adopts a fingerprint authentication way and does not use the conventional username password, so that the security and convenience practicability are higher. Compared with the existing NFC mobile phone payment technology, the NFC mobile phone payment system with the fingerprint authentication mechanism has the advantages that the fingerprint payment system is a brand-new payment mode with higher security and convenience practicality; and the fingerprint of each user is unique due to the identity uniqueness, so that the economic loss of the bank or people is avoided as the mobile phone is different from a bankcard which can be easily stolen by others to consume.

Description

NFC Mobile Payment System with Fingerprint Authentication Mechanism

technical field

The invention belongs to the technical field of near-field payment, which adds a biometric security authentication mechanism, uses a mobile phone with an NFC module and a fingerprint inspection chip, and performs interactive verification with a background server to realize pre-payment identity verification, near-field payment and confirmation of completion of payment Methods. the

Background technique

In recent years, with the vigorous development of smart phones and mobile Internet, it has also led to the emergence of a number of new mobile phone technologies. Cloud services, naked-eye 3D, and NFC are all new technology terms that have become popular in the past two years. In particular, NFC is often mentioned in some media magazines and TV advertisements, and some high-end products such as Samsung GALAXY Note II, HTC One X, Nokia Lumia920, etc. are currently equipped with NFC technology. Standard NFC has three modes: "reader", "card simulation" and "point-to-point transmission". In recent years, the popular mobile payment business belongs to the "card simulation" mode. After pairing bank cards, bus cards, membership cards, access control cards, etc. with NFC chips, they are stored in the NFC smart chip and wait to be called at any time without interfering with each other. In this way, NFC technology turns the mobile phone into a transportation card and bank card, allowing your mobile phone to "swipe" to consume like a bus card and bank card. the

NFC is the abbreviation of Near Field Communication, that is, short-range wireless communication technology. A non-contact identification and interconnection technology jointly developed by Philips and Sony, which enables short-range wireless communication between mobile devices, consumer electronics, PCs and smart control tools. NFC provides a simple, touch-based solution that enables consumers to exchange information and access content and services simply and intuitively. the

The main features of NFC technology are as follows:

(1) Wireless communication technology for short distance (within 10cm) secure communication. the

(2) Data transmission speed: 106kbit/s, 212kbit/s, 424kbit/s. the

(3) RF frequency: 13.56MHZ. the

(4) Radio frequency compatibility: ISO14443, ISO15693, Felica (contactless smart card) standards. the

Fingerprint mobile phone: The fingerprint mobile phone is to connect the fingerprint collection chip to the existing mobile phone main board, and add the fingerprint identification processing module in the main control program of the mobile phone, so that it can collect the user's fingerprint and identify it, so as to achieve the purpose of mobile phone Certain controls of operations, or provide fingerprint identity authentication functions for certain mobile services. From the first fingerprint mobile phone launched by Siemens in 1998, to the F900i fingerprint mobile phone of FUJISTU, LP3550 fingerprint mobile phone of LG, F505i fingerprint mobile phone of NTT, CoolPad 858F fingerprint mobile phone of SAMSUNG and domestic mobile phone manufacturer Yulong, it can be seen that it has become A more mature commercial product. the

Most of the existing security authentication for NFC mobile payment function adopts encryption algorithm based on cryptographic technology or real-name verification bound with terminal SIM card. Although these two methods provide certain security and protection for mobile payment, But there are still many defects, such as: the former faces the problem that the interface is difficult to store ciphertext in a unified manner, and the latter has the consequence of being arbitrarily "swiped" for consumption when the mobile phone is lost. the

Contents of the invention

The problem to be solved by the present invention is to overcome the lack of security authentication of the existing NFC mobile phone payment function, and propose that the mobile phone integrates NFC payment and fingerprint authentication modules and sensors to form a combination to improve the convenience and safety of user payment. the

In order to solve the above technical problems, the present invention provides a mobile phone terminal, including: an NFC module and a fingerprint collection chip. Among them, NFC mobile phone is already a relatively mature technology, and fingerprint mobile phone is also a commercial product, but the combination of the two is still a product worth looking forward to. the

Further, the mobile phone terminal also includes an external touch panel for collecting fingerprints, which functions as a sensor for collecting fingerprint information. the

Furthermore, when using this function for the first time, the user should first initialize and enter fingerprint information, and the function can only be used after the terminal prompts that it is successful. the

Further, the fingerprint authentication module of the mobile phone includes an internal fingerprint information analysis chip, which is used for encoding and encrypting the collected information. the

Further, among the three usage modes of mobile phone NFC, use the "read card" mode to activate the event, that is, after the mobile phone turns on the NFC function, touch the NFC payment tag of the product. the

In order to realize safe payment, the present invention also provides a mobile payment security application based on a mobile phone, which is used to interact with a remote server to verify whether the user's fingerprint information reserved in the server is true, and if true, the NFC payment function can be enabled. the

Further, this application acts as a link between a security authentication mechanism and payment business, responsible for exchanging authentication information and deciding whether to execute a transaction based on the information fed back by the server. the

Further, the application program communicates with the built-in fingerprint information analysis chip of the mobile phone and transmits signals through the internal bus of the mobile phone, and the application program transmits commands through the port of the mobile phone. the

Furthermore, there is no need for an interface between the NFC module and the fingerprint chip, and the connection action between the two is indirectly connected through a third-party authentication, that is, the mobile payment application. the

In order to ensure the security of multiple parties, the invention also provides a security authentication system and mechanism, which includes: a mobile phone payment terminal, an initial information server, and a financial transaction server. The three constitute the three major modules of the security authentication system framework, and none of them is dispensable. Among them, the mobile payment terminal includes: a fingerprint collection sensor, which exists on the surface of the mobile phone for entering information; a fingerprint information analysis and encryption chip, which is used to extract the characteristic information in the fingerprint information, and encrypt the fingerprint information according to a specific encryption algorithm, so that the fingerprint information has Even if it is stolen during the transmission process, it cannot be completely analyzed; the initial information server contains three functional modules, which are used to decode the encrypted fingerprint information, and use the inversion algorithm of the internal chip encryption algorithm of the mobile phone to accurately analyze the fingerprint Information, extract feature information; pre-stored user fingerprint feature information, after the user confirms to open the business, register his own fingerprint information as the basis for identity authentication, this information matches the feature information; compare the pre-stored fingerprint information and the fingerprint information transmitted in the transaction application, This functional module is equivalent to a judging device, which feeds back the judging result to the mobile phone security payment application after judging. the

Further, when the user opens the NFC payment service for fingerprint authentication, the fingerprint information is reserved in the bank, and the banking system integrates this information into the storage database of the initial information server, so that it can be called at any time when the verification request arrives. the

Further, the encrypted user fingerprint information can be selected based on the GPRS data traffic service provided by the mobile phone operator or the routing path generated when accessing WIFI, and the data is transmitted to the initial information server through these two communication methods. the

Further, the mobile terminal application program provides the user with the right to choose. When the user wants to terminate the transaction, he can jump out of the service by selecting the termination option in the application program. the

Further, when the fingerprint information after the comparison does not match, the application program will pop up the option of whether to verify the fingerprint information again after receiving this prompt, and if it still fails three times, the program will send the locked transaction information to the bank transaction server to terminate the user transaction. the

It can be seen that the NFC fingerprint authentication payment method is a safe and guaranteed payment method. It is a brand-new application that combines the NFC function of ordinary mobile phones with the fingerprint mobile payment security mechanism. Only the registrant himself can successfully complete the entire set of transactions. A truly secure payment mechanism. the

Description of drawings

Included is used to provide a further understanding of the present invention and is included in this application and constitutes a part of the application, illustrating the specific implementation of the present invention and explaining the present invention. In the figure:

Figure 1: Fingerprint authentication mechanism NFC mobile payment process

Figure 2: Implementation Framework for Fingerprint Authentication

Detailed ways

In order to make the technical features of the present invention more obvious and easy to understand, the present invention will be further elaborated below in conjunction with the illustrations. Please refer to Figure 1, which is a flow chart of fingerprint authentication mobile NFC payment in the present invention, and the following is a detailed description of the entire payment process. the

Step 1. The user reaches an agreement with the cooperative financial institution to open the mobile phone fingerprint payment service, and reserves the fingerprint information to the financial institution, which is kept by the initial information server. the

Step 2. Use the "read card" mode in the NFC function of the mobile phone to collide the NFC area of the mobile phone with the payment smart card or tag jointly launched by the merchant and the banking institution to activate the event. the

Step 3. At this time, the mobile phone is activated and opens the safe payment application. the

Pop up the option of whether to perform fingerprint verification. If the user decides to pay, the verification will continue. If the user wants to stop the action halfway, the request will be rejected. the

Step 4. If the user continues to make payment, put the finger on the fingerprint collection area of the mobile phone. the

Step 5. The fingerprint information collected by the mobile phone sensor is transmitted to the fingerprint verification chip through the bus. the

Step 6. The fingerprint verification chip extracts the fingerprint information and parses it into user characteristic data, and then encodes and encrypts it. the

Step 7. After the encryption is completed, the chip sends the information back to the mobile phone processor through the circuit, and the processor sends the information back to the application program through the interface. the

Step 8. The application program selects one of the two ways to transmit the fingerprint information to the initial information server through the communication network or the wireless network. the

Step 9. The server decodes the fingerprint information and extracts the user fingerprint feature information. the

Step 10. The server compares the extracted user fingerprint data with the stored initial fingerprint information. the

Step 11. If they are inconsistent, it means that the identity authentication has failed, and the server returns a failure message to the mobile application, and the transaction authentication is terminated. the

Step 12. If they are consistent, return the verification success message to the mobile application. the

Step 13. The mobile application prompts whether to proceed to the next step, and the user executes the transaction after confirmation. the

Step 14. When the payment continues, the application sends a continuation instruction to the financial settlement transaction server, and the server processes it. the

Step 15. After the transaction is successful, the server sends a success message to the mobile phone. the

Step 16. The transaction is complete. the

Please refer to Fig. 2. It is a frame diagram of the fingerprint authentication security system of the present invention, and the modularized functional structure helps to further understand the security authentication mechanism of the present invention. the

According to the division of modules from large to small, the security transaction system framework involved in the present invention is divided into a user information verification module and a financial transaction module. Among them, the secure transaction authentication system is divided into two functional entities, the mobile terminal and the initial information server. The mobile phone terminal authentication interacts with the user through the application program, and the user's fingerprint information is collected by the mobile phone fingerprint information sensor and sent to the internal fingerprint information analysis and encryption chip of the mobile phone. After the chip is encrypted, the application program contacts the bank-side fingerprint authentication server and transmits the user's fingerprint feature information to the bank's module for decoding fingerprint information. This module extracts the user's fingerprint information and sends it to the server that pre-stores the user's initial fingerprint information for comparison and verification. The judging device compares the two and makes a judgment on whether it is true, and returns the judgment result to the mobile phone application program. the

Claims (10)

1. A mobile terminal payment system with an NFC module, characterized in that it comprises: A mobile phone terminal supporting NFC near-field communication function, which realizes mobile payment by integrating the function of inductive card reader, inductive card and point-to-point communication on a single chip; Mobile security payment application, responsible for interacting with financial settlement servers, verifying and securing transaction information; The financial settlement server is authorized by financial institutions to process transactions in real time. the 2. The mobile terminal payment system according to claim 1, characterized in that it supports mobility anytime and anywhere, and any commodity that supports NFC payment can be used as its transaction object. the 3. The mobile terminal payment system according to claim 1, wherein the mobile phone security payment application is responsible for the fingerprint information collected by the interactive mobile phone fingerprint identification chip, including sending the received information to the bank background initial information database, and accepting Authentication information returned by the initial information database. the 4. The mobile terminal payment system according to claim 1, wherein the financial settlement server is authorized by the bank to process the transaction by accepting the verification information sent by the security application, that is, the signaling to activate the transaction. the 5. The security protection mechanism based on fingerprint authentication is characterized by: A mobile phone terminal with fingerprint detection function, through the embedded fingerprint extraction chip, analyze and decode the fingerprint data, and transmit the data to the mobile phone application; A fingerprint verification path is composed of a fingerprint acquisition chip, a signal propagation link, and an initial information server of a financial institution. the 6. The security protection mechanism based on fingerprint authentication according to claim 5, wherein the fingerprint authentication terminal has a communication function, that is, a mobile phone terminal, which has multiple communication links to ensure the transmission of information. the 7. The security protection mechanism based on fingerprint authentication according to claim 5, characterized in that, the fingerprint authentication terminal has a fingerprint sensor fingerboard, which can be mounted on a mobile phone like a camera or a peripheral device, and can be connected to the USB transmission line and phone connection. the 8. The security protection mechanism based on fingerprint authentication according to claim 5, characterized in that the decoded information signal transmission link can be based on communication network traffic transmission, or can be formed after the mobile phone is connected to wifi Routing transmission path. the 9. The security protection mechanism based on fingerprint authentication according to claim 5, characterized in that the initialization information server stores the user's fingerprint information, which is pre-stored when the user agrees to activate the service, and is stored when the user terminates the service. invalidated. the 10. The security protection mechanism based on fingerprint authentication according to claim 5, characterized in that comparing the fingerprint information data with the fingerprint feature data of the corresponding user stored in the fingerprint payment authentication server to authenticate the identity of the user. the

Images