MOBILE PAYMENT PROCESSING

• US 20200134575A1
• Filed: 12/23/2019
• Published: 04/30/2020
• Est. Priority Date: 06/01/2016
• Status: Active Grant

• Current Assignee: Advanced New Technologies Company Limited (Ant Group Co., Ltd.)
• Original Assignee: Alibaba Group Holding Ltd.
• Inventors: SUN, Yuanbo
• Granted Patent: US 11,100,474 B2
• Time in Patent Office: Days
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/223 based on the use of peer-to-peer networks
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/40145 Biometric identity checks

Abstract

The present specification relates to a mobile payment method, device, and system. One example method includes enabling, by the payee device, a device authorization function using a third-party server; receiving, by the payee device, identity authentication information from a payor device, wherein the identity authentication information includes an identifier of the payor device, and wherein the payor device does not have a payment application (APP) installed; forwarding, by the payee device, the received identity authentication information to the third-party server; receiving, by the payee device, token information from the third-party server, wherein the token information corresponds to the identifier; receiving, by the payee device, a payment request from the payor device, wherein the payment request includes the identifier of the payor device and the generated token; and sending, by the payee device, payment information including the generated token and the to the third-party server for verification.

Claims

1. A computer-implemented method for processing a payment between a payor device and a payee device comprising:

enabling, by the payee device, a device authorization function using a third-party server;

receiving, by the payee device, identity authentication information from a payor device, wherein the identity authentication information includes an identifier of the payor device, and wherein the payor device does not have a payment application (APP) installed;

in response to receiving the identity authentication information, forwarding, by the payee device, the received identity authentication information to the third-party server;

receiving, by the payee device, token information from the third-party server, wherein the token information is generated by the third-party server and corresponds to the identifier of the payor device;

receiving, by the payee device, a payment request from the payor device, wherein the payment request includes the identifier of the payor device and the generated token; and

in responsive to receiving the payment request, sending, by the payee device, payment information including the generated token and the to the third-party server for verification.

2. The computer-implemented method of claim 1, wherein enabling the device authorization function at the payee device comprises:

sending, by the payee device, a request to enable a device authorization function to a third-party server, wherein the request includes a device certificate of the payee device;

receiving, by the payee device, verification method information from the third-party server after the third-party server verifies the payee device;

obtaining, by the payee device, verification data based on the verification method information from a user of the payee device;

sending, by the payee device, the verification data to the third-party server; and

receiving, by the payee device, a confirmation from the third-party sever indicating the device authorization function of the payee device has been enabled if the third-party server determines the verification data is correct.

3. The computer-implemented method of claim 2, further comprising verifying the payee device by determining whether a corresponding device certificate exists in the third-party server.

4. The computer-implemented method of claim 2, further comprising:

obtaining, account credit information corresponding to the payee device; and

determining, whether the account credit information corresponding to the payee device exceeds a predetermined threshold.

5. The computer-implemented method of claim 1, wherein the payment information includes the identifier of the payor device, an account corresponding to a payment APP running on the payee device, a payment amount corresponding to the identifier, the token information, and a device certificate of the payor device.

6. The computer-implemented method of claim 5, further comprising:

verifying, the token information and the device certificate of the payor device by determining whether the corresponding token information and the device certificate of the payor device exist in the third-party server;

in response to verifying, obtaining account information corresponding to the identifier of the payor device from the third-party server; and

transferring the payment amount from an account corresponding to the identifier of the payor device to the account corresponding to the payment APP running on the payee device.

7. The computer-implemented method of claim 6, further comprising:

if the account information is not found in the third-party server, sending prompt information to the payee device to prompt a user of the payor device to provide corresponding account information.

8. A non-transitory computer-readable storage medium coupled to one or more computers and configured with instructions executable by the one or more computers to:

enable, by the payee device, a device authorization function using a third-party server;

receive, by the payee device, identity authentication information from a payor device, wherein the identity authentication information includes an identifier of the payor device, and wherein the payor device does not have a payment application (APP) installed;

in response to receiving the identity authentication information, forward, by the payee device, the received identity authentication information to the third-party server;

receive, by the payee device, token information from the third-party server, wherein the token information is generated by the third-party server and corresponds to the identifier of the payor device;

receive, by the payee device, a payment request from the payor device, wherein the payment request includes the identifier of the payor device and the generated token; and

in responsive to receiving the payment request, send, by the payee device, payment information including the generated token and the to the third-party server for verification.

9. The non-transitory computer-readable storage medium of claim 8, wherein enabling the device authorization function at the payee device comprises:

sending, by the payee device, a request to enable a device authorization function to a third-party server, wherein the request includes a device certificate of the payee device;

receiving, by the payee device, verification method information from the third-party server after the third-party server verifies the payee device;

obtaining, by the payee device, verification data based on the verification method information from a user of the payee device;

sending, by the payee device, the verification data to the third-party server; and

receiving, by the payee device, a confirmation from the third-party sever indicating the device authorization function of the payee device has been enabled if the third-party server determines the verification data is correct.

10. The non-transitory computer-readable storage medium of claim 9, further configured with instructions executable by the one or more computers to verify the payee device by determining whether a corresponding device certificate exists in the third-party server.

11. The non-transitory computer-readable storage medium of claim 9, further configured with instructions executable by the one or more computers to:

obtain account credit information corresponding to the payee device; and

determine whether the account credit information corresponding to the payee device exceeds a predetermined threshold.

12. The non-transitory computer-readable storage medium of claim 8, wherein the payment information includes the identifier of the payor device, an account corresponding to a payment APP running on the payee device, a payment amount corresponding to the identifier, the token information, and a device certificate of the payor device.

13. The non-transitory computer-readable storage medium of claim 12, further configured with instructions executable by the one or more computers to:

verify the token information and the device certificate of the payor device by determining whether the corresponding token information and the device certificate of the payor device exist in the third-party server;

in response to verifying, obtain account information corresponding to the identifier of the payor device from the third-party server; and

transfer the payment amount from an account corresponding to the identifier of the payor device to the account corresponding to the payment APP running on the payee device.

14. The non-transitory computer-readable storage medium of claim 13, further configured with instructions executable by the one or more computers to:

if the account information is not found in the third-party server, sending prompt information to the payee device to prompt a user of the payor device to provide corresponding account information.

15. A system, comprising:

one or more computers; and

one or more computer-readable memories coupled to the one or more computers and configured with instructions executable by the one or more computers to;

enable, by the payee device, a device authorization function using a third-party server;

receive, by the payee device, identity authentication information from a payor device, wherein the identity authentication information includes an identifier of the payor device, and wherein the payor device does not have a payment application (APP) installed;

in response to receiving the identity authentication information, forward, by the payee device, the received identity authentication information to the third-party server;

receive, by the payee device, token information from the third-party server, wherein the token information is generated by the third-party server and corresponds to the identifier of the payor device;

receive, by the payee device, a payment request from the payor device, wherein the payment request includes the identifier of the payor device and the generated token; and

in responsive to receiving the payment request, send, by the payee device, payment information including the generated token and the to the third-party server for verification.

16. The system of claim 15, wherein enabling the device authorization function at the payee device comprises:

sending, by the payee device, a request to enable a device authorization function to a third-party server, wherein the request includes a device certificate of the payee device;

receiving, by the payee device, verification method information from the third-party server after the third-party server verifies the payee device;

obtaining, by the payee device, verification data based on the verification method information from a user of the payee device;

sending, by the payee device, the verification data to the third-party server; and

receiving, by the payee device, a confirmation from the third-party sever indicating the device authorization function of the payee device has been enabled if the third-party server determines the verification data is correct.

17. The system of claim 16, further configured with instructions executable by the one or more computers to verify the payee device by determining whether a corresponding device certificate exists in the third-party server.

18. The system of claim 16, further configured with instructions executable by the one or more computers to:

obtain account credit information corresponding to the payee device; and

determine whether the account credit information corresponding to the payee device exceeds a predetermined threshold.

19. The system of claim 15, wherein the payment information includes the identifier of the payor device, an account corresponding to a payment APP running on the payee device, a payment amount corresponding to the identifier, the token information, and a device certificate of the payor device.

20. The system of claim 19, further configured with instructions executable by the one or more computers to:

verify the token information and the device certificate of the payor device by determining whether the corresponding token information and the device certificate of the payor device exist in the third-party server;

in response to verifying, obtain account information corresponding to the identifier of the payor device from the third-party server; and

transfer the payment amount from an account corresponding to the identifier of the payor device to the account corresponding to the payment APP running on the payee device.