Scan and pay method and device utilized in mobile apparatus

• US 10,990,957 B2
• Filed: 05/01/2019
• Issued: 04/27/2021
• Est. Priority Date: 01/03/2017
• Status: Active Grant

• Current Assignee: Advanced New Technologies Company Limited (Ant Group Co., Ltd.)
• Original Assignee: Advanced New Technologies Company Limited (Ant Group Co., Ltd.)
• Inventors: Lu, Yicheng, Chen, Shuai, Chen, Tao, Xia, Jupeng, Wang, Ning
• Primary Examiner(s): Niquette, Robert R
• Application Number:
  US16/400,550
• Publication Number:
  US 20190259021A1
• Time in Patent Office: 727 Days
• Field of Search: 705 35- 45
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3274 using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
• CPC Class Codes: G06Q 20/3276 using a pictured code, e.g. barcode or QR-code, being read by the M-device
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/40145 Biometric identity checks

Abstract

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for a scan-to-pay method are provided. One of the methods includes: receiving a payment request from an operator of a mobile device; and generating a payment code based on the payment request, wherein the payment code comprises first information and second information, with the first information associated with an payment account, and the second information associated with at least one recent behavioral biometric signature of the operator and at least one historical behavioral biometric signature recorded in the mobile device. This scan-to-pay method provides robust risk control with substantially reduced cost, therefore it provides a more friendly user experience on a scan-to-pay application over its conventional counterparts.

Claims

1. A scan-to-pay method for a mobile device, comprising:

collecting, by the mobile device, at least one historical behavioral biometric signature;

storing, on the mobile device, the at least one historical behavioral biometric signature;

receiving, by the mobile device, a payment request from an operator of the mobile device; and

generating, by the mobile device, a payment code based on the payment request, wherein the payment code comprises a redundant number, wherein the generating a payment code based on the payment request comprises;

changing a value of the redundant number;

determining, based on the payment request, first information and second information, the first information being associated with a payment account, and the second information being associated with at least one recent behavioral biometric signature of the operator collected by the mobile device within a set time range of the payment request, and the at least one historical behavioral biometric signature, wherein the at least one historical behavioral biometric signature and the at least one recent behavioral biometric signature each include at least one of a posture to hold the mobile device, and finger pressing characteristics, the second information comprising a determination result of whether the operator is an owner of the mobile device based on a comparison of the at least one recent behavioral biometric signature and the at least one historical behavioral biometric signature;

determining an identifier value corresponding to the second information according to a mapping relationship between the second information and the identifier value; and

generating, based on the identifier value, the first information, and the redundant number, the payment code, wherein at least one digit in the payment code corresponds to the identifier value.

2. The method of claim 1, further comprising:

activating an online identity verification process to the operator of the mobile device if the determination result is that a probability of the operator being the owner of the mobile device is lower than a set threshold, and the mobile device is in an offline payment state.

3. The method of claim 1, wherein, before generating the payment code based on the payment request, the method further comprising changing the mapping relationship between the second information and the identifier value.

4. The method of claim 1, wherein both of the at least one recent behavioral biometric signature and the at least one historical behavioral biometric signature further comprise at least one of a Remote Procedure Call (RPC) protocol request record and a browse log.

5. The method of claim 1, wherein the at least one recent behavioral biometric signature comprises a recent browse log, the at least one historical behavioral biometric signature comprises a historical browse log, and

wherein the second information comprises:

a determination result of whether the recent browse log is distinct from the historical browse log.

6. The method of claim 1, wherein the at least one recent behavioral biometric signature comprises a recent Remote Procedure Call (RPC) protocol request record, the at least one historical behavioral biometric signature comprises a historical RPC protocol request record, and

wherein the second information comprises:

a determination result of whether the recent RPC protocol request record is distinct from the historical RPC protocol request record.

7. A device comprises one or more processors and one or more non-transitory machine-readable memories coupled to the one or more processors and configured with instructions executable by the one or more processors to cause the device to perform operations comprising:

collecting at least one historical behavioral biometric signature;

storing the at least one historical behavioral biometric signature;

receiving a payment request from an operator of a mobile device; and

generating a payment code based on the payment request, wherein the payment code comprises a redundant number, wherein the generating a payment code based on the payment request comprises;

changing a value of the redundant number;

determining, based on the payment request, first information and second information, the first information being associated with a payment account, and the second information being associated with at least one recent behavioral biometric signature of the operator collected within a set time range of the payment request, and the at least one historical behavioral biometric signature, wherein the at least one historical behavioral biometric signature and the at least one recent behavioral biometric signature each include at least one of a posture to hold the mobile device, and finger pressing characteristics, the second information comprising a determination result of whether the operator is an owner of the mobile device based on a comparison of the at least one recent behavioral biometric signature and the at least one historical behavioral biometric signature;

determining an identifier value corresponding to the second information according to a mapping relationship between the second information and the identifier value; and

generating, based on the identifier value, the first information, and the redundant number, the payment code, wherein at least one digit in the payment code corresponds to the identifier value.

8. The device of claim 7, wherein the operations further comprises:

activating an online identity verification process to the operator of the mobile device if the determination result is that a probability of the operator being the owner of the mobile device is lower than a set threshold, and the mobile device is in an offline payment state.

9. The device of claim 7, wherein both of the at least one recent behavioral biometric signature and the at least one historical behavioral biometric signature further comprise at least one of a Remote Procedure Call (RPC) protocol request record and a browse log.

10. The device of claim 7, wherein the at least one recent behavioral biometric signature comprises a recent browse log, the at least one historical behavioral biometric signature comprises a historical browse log, and

wherein the second information comprises:

a determination result of whether the recent browse log is distinct from the historical browse log.

11. The device of claim 7, wherein the at least one recent behavioral biometric signature comprises a recent Remote Procedure Call (RPC) protocol request record, the at least one historical behavioral biometric signature comprises a historical RPC protocol request record, and

wherein the second information comprises:

a determination result of whether the recent RPC protocol request record is distinct from the historical RPC protocol request record.

12. A non-transitory computer-readable storage medium having instructions stored thereon executable by a processor to cause the processor to perform operations, comprising:

collecting, by a mobile device, at least one historical behavioral biometric signature;

storing, on the mobile device, the at least one historical behavioral biometric signature;

receiving, by the mobile device, a payment request from an operator of the mobile device; and

generating, by the mobile device, a payment code based on the payment request, wherein the payment code comprises a redundant number, wherein the generating a payment code based on the payment request comprises;

changing a value of the redundant number;

determining, based on the payment request, first information and second information, the first information being associated with a payment account, and the second information being associated with at least one recent behavioral biometric signature of the operator collected by the mobile device within a set time range of the payment request, and the at least one historical behavioral biometric signature, wherein the at least one historical behavioral biometric signature and the at least one recent behavioral biometric signature each include at least one of a posture to hold the mobile device, and finger pressing characteristics, the second information comprising a determination result of whether the operator is an owner of the mobile device based on a comparison of the at least one recent behavioral biometric signature and the at least one historical behavioral biometric signature;

determining an identifier value corresponding to the second information according to a mapping relationship between the second information and the identifier value; and

generating, based on the identifier value, the first information, and the redundant number, the payment code, wherein at least one digit in the payment code corresponds to the identifier value.

13. The storage medium of claim 12, wherein the operations further comprise:

activating an online identity verification process to the operator of the mobile device if the determination result is that a probability of the operator being the owner of the mobile device is lower than a set threshold, and the mobile device is in an offline payment state.

14. The storage medium of claim 12, wherein, before generating the payment code based on the payment request, the operations further comprising changing the mapping relationship between the second information and the identifier value.

15. The storage medium of claim 12, wherein both of the at least one recent behavioral biometric signature and the at least one historical behavioral biometric signature further comprise at least one of a Remote Procedure Call (RPC) protocol request record and a browse log.

16. The storage medium of claim 12, wherein the at least one recent behavioral biometric signature comprises a recent browse log, the at least one historical behavioral biometric signature comprises a historical browse log, and

wherein the second information comprises:

a determination result of whether the recent browse log is distinct from the historical browse log.

17. The storage medium of claim 12, wherein the at least one recent behavioral biometric signature comprises a recent Remote Procedure Call (RPC) protocol request record, the at least one historical behavioral biometric signature comprises a historical RPC protocol request record, and

wherein the second information comprises:

a determination result of whether the recent RPC protocol request record is distinct from the historical RPC protocol request record.