SECURE MOBILE PAYMENT PROCESSING

• US 20110131102A1
• Filed: 11/22/2010
• Published: 06/02/2011
• Est. Priority Date: 11/27/2009
• Status: Active Grant

• Current Assignee: Advanced New Technologies Company Limited (Ant Group Co., Ltd.)
• Original Assignee: Alibaba Group Holding Ltd.
• Inventors: Wang, Ruihua
• Granted Patent: US 9,530,126 B2
• Time in Patent Office: Days
• US Class Current: 705/16
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction

Abstract

A system for processing payment data includes a payer terminal, a recipient terminal, and a payment server. The payer terminal is adapted to return, to the recipient terminal, encrypted payment request data upon reception of the recipient information transmitted from the recipient terminal, wherein the payment request data comprises payer information, recipient information and a payment amount. The recipient terminal is adapted to forward the encrypted payment request data and the payment amount to the payment server. The payment server is adapted to verify the encrypted payment request data and the payment amount, to perform a payment according to a verification result, and to return encrypted payment result data to the recipient terminal. The recipient terminal is further adapted to return the encrypted payment result data to the payer terminal.

Claims

1. A method for processing payment data, comprising:

transmitting recipient information to a payer terminal;

receiving encrypted payment request data returned from the payer terminal;

forwarding the encrypted payment request data and a first payment amount to a payment server, wherein the encrypted payment request data comprises payer information, the recipient information, and a second payment amount;

receiving encrypted payment result data from the payment server, the encrypted payment result data indicating whether a payment is successfully made by the payment server; and

returning the encrypted payment result data to the payer terminal.

2. The method according to claim 1, wherein the method is performed by a recipient terminal that is not capable of decrypting the encrypted payment request data.

3. The method according to claim 1, further comprising receiving, from the payment server, a payment serial number that uniquely identifies the current payment;

and

wherein the recipient information transmitted to the payer terminal comprises the payment serial number.

4. The method according to claim 1, wherein:

the recipient information transmitted to the payer terminal includes a recipient generated payment amount; and

the encrypted payment request data returned from the payer terminal comprises the recipient generated payment amount as the encrypted payment amount.

5. The method according to claim 1, wherein:

the second payment amount is input by the payer terminal; and

the encrypted payment request data returned from the payer terminal comprises the payment amount.

6. A payment terminal comprising:

a processor configured to;

transmit recipient information to a payer terminal;

receive encrypted payment request data returned from the payer terminal;

forward the encrypted payment request data and a first payment amount to a payment server, wherein the encrypted payment request data comprises payer information, the recipient information, and a second payment amount;

receive encrypted payment result data from the payment server, the encrypted payment result data indicating whether a payment is successfully made by the payment server; and

return the encrypted payment result data to the payer terminal; and

a memory coupled to the processor, configured to provide the processor with instructions.

7. A method for processing payment data, comprising:

receiving encrypted payment request data and a first payment amount transmitted from a recipient terminal, wherein the encrypted payment request data is based on payment request data returned from a payer terminal upon receiving recipient information transmitted from the recipient terminal, and comprises payer information, the recipient information and a second payment amount;

verifying the encrypted payment request data and the second payment amount;

making a payment according to a result of the verification; and

returning an encrypted payment result data to the recipient terminal.

8. The method according to claim 7, further comprising:

predefining an encryption function;

encrypting the payment request data into the encrypted payment request data using the encryption function; and

encrypting the payment result data into the encrypted payment result data using the encryption function.

9. The method according to claim 7, further comprising:

pre-storing a recipient account number, a payer account number and a payment password; and

providing the recipient terminal with a payment serial number identifying uniquely a current payment, and storing the payment serial number; and

wherein the recipient information comprises the payment serial number and the recipient account number; and

the payer information comprises the payer account number and the payment password.

10. The method according to claim 7, wherein verifying the encrypted payment request data and the payment amount and making the payment according to a verification result comprises:

decrypting the encrypted payment request data into the decrypted payer account number, payment password, recipient account number, payment serial number and payment amount by using the predefined encryption function;

determining whether the decrypted payer account number, payment password, recipient account number and payment serial number are consistent respectively with the pre-stored payer account number, payment password, recipient account number and payment serial number and whether the decrypted payment amount is consistent with the received payment amount; and

if all the data is consistent, making the payment in the payment amount, and generating the payment result data of a payment success; and

if the data is inconsistent, cancelling the payment.

11. The method according to claim 7, wherein after the encrypted payment result data is returned to the recipient terminal, the method further comprises:

deleting the payment serial number; and

the encrypted payment result data indicates whether the payment is successfully made, the payer information, the recipient information and the payment amount.

12. A payment server comprising:

a processor configured to;

receive encrypted payment request data and a first payment amount transmitted from a recipient terminal, wherein the encrypted payment request data is based on payment request data returned from a payer terminal upon receiving recipient information transmitted from the recipient terminal, and comprises payer information, the recipient information and a second payment amount;

verify the encrypted payment request data and the second payment amount;

make a payment according to a result of the verification; and

return an encrypted payment result data to the recipient terminal; and

a memory coupled to the processor, configured to provide the processor with instructions.

13. A method for processing payment data, comprising:

receiving recipient information transmitted from a recipient terminal;

returning to the recipient terminal encrypted payment request data comprising payer information, the recipient information and a payment amount, the encrypted payment request data being forwarded by the recipient terminal to a payment server to be verified; and

receiving encrypted payment result data from the payment server, the encrypted payment result data being generated based on verification of the encrypted payment request data and whether a payment is successfully made.

14. The method according to claim 13, wherein the encrypted payment result data is returned directly from the payment server.

15. The method according to claim 13, wherein the encrypted payment result data is received from a recipient terminal that received the encrypted payment result data from the payment server and forwarded the encrypted payment result data.

16. A payer terminal comprising:

a processor configured to;

receive recipient information transmitted from a recipient terminal;

return to the recipient terminal encrypted payment request data comprising payer information, the recipient information and a payment amount, the encrypted payment request data being forwarded by the recipient terminal to a payment server to be verified; and

receive encrypted payment result data from the payment server, the encrypted payment result data being generated based on verification of the encrypted payment request data and whether a payment is successfully made; and

a memory coupled to the processor, configured to provide the processor with instructions.

17. A system for processing payment data, comprising a payer terminal, a recipient terminal and a payment server, wherein:

the payer terminal is adapted to return, to the recipient terminal, encrypted payment request data upon reception of the recipient information transmitted from the recipient terminal, wherein the payment request data comprises payer information, recipient information and a payment amount;

the recipient terminal is adapted to forward the encrypted payment request data and the payment amount to the payment server;

the payment server is adapted to verify the encrypted payment request data and the payment amount, to perform a payment according to a verification result and to return encrypted payment result data to the recipient terminal; and

the recipient terminal is further adapted to return the encrypted payment result data to the payer terminal.