CN104732396A - Payment control method and device - Google Patents

Abstract

The embodiment of the invention discloses a payment control method and device. Wherein the method comprises the following steps: acquiring a first face image after the starting operation of the payment application is triggered; matching the first face image with a preset second face image, and determining whether the first face image is legal or not according to a matching result; if the first facial image is determined to be legitimate, payment using the payment application is allowed. According to the technical scheme provided by the embodiment of the invention, the legal verification of the identity information of the facial features of the user is added before the payment verification, so that the payment by other people using the payment application on the terminal can be effectively prevented, and the safety and the reliability of the terminal payment are greatly improved.

Description

A payment control method and device

technical field

The embodiments of the present invention relate to the technical field of communications, and in particular, to a payment control method and device.

Background technique

In the era of mobile Internet, online shopping has brought a lot of convenience to people, and people have gradually adapted to buying their favorite products online. At the same time, for the convenience of people using the Internet to pay, many banks or Internet companies have released installation files such as APK (Android Package, Android installation package). The user can install the installation file on a terminal (such as a smart phone) to obtain a payment application, and then use the payment application to obtain and send the payment verification information entered by the user for a payment transaction (such as mobile phone recharge, transfer, shopping), Make a payment. Among them, the payment verification information is usually: a password plus a verification code; or a dynamic password (the password is updated every once in a while); or, in the case of a small payment, it may only include the password for convenience of payment.

Since the payment operation involves the user's property and personal information, people have paid more and more attention to the security issues brought about by the payment. However, various payment methods based on the above-mentioned payment applications may bring certain risks, especially for payment methods that only contain passwords. The payment can be successfully completed, so it will bring economic losses to the user, and the security is poor.

Contents of the invention

Embodiments of the present invention provide a payment control method and device to improve the security and reliability of terminal payment.

On the one hand, an embodiment of the present invention provides a payment control method, the method comprising:

After triggering the start operation of the payment application, collecting the first face image;

Matching the first human face image with a preset second human face image, and determining whether the first human face image is legal according to the matching result;

If it is determined that the first human face image is legal, the payment application is allowed to be used for payment.

On the other hand, an embodiment of the present invention also provides a payment control device, which includes:

An image acquisition unit, configured to acquire the first face image after triggering the start operation of the payment application;

An image legal verification unit, configured to match the first face image with a preset second face image, and determine whether the first face image is legal according to the matching result;

A payment control unit, configured to allow payment using the payment application if the image legality verification unit determines that the first face image is legal.

In the embodiment of the present invention, after the start-up operation of the payment application is triggered, the payment application is not directly used for payment, but the face image is collected first, and the collected face image is legally verified. Only use the payment application to pay if it is passed, so that even if someone else obtains the user's payment verification information (such as payment password) and the terminal held by illegal means, the payment cannot be completed smoothly, because the correct person must be entered face image. The technical solution provided by the embodiment of the present invention adds the legal verification of the identity information of the user's facial features before the payment verification, which can effectively prevent others from using the payment application on the terminal to make payment, thereby greatly improving the security of terminal payment and reliability.

Description of drawings

FIG. 1 is a schematic flowchart of a payment control method provided in Embodiment 1 of the present invention;

Fig. 2 is a schematic flow diagram of a payment control method provided in Embodiment 2 of the present invention;

FIG. 3 is a schematic flowchart of a payment control method provided by Embodiment 3 of the present invention;

FIG. 4 is a schematic structural diagram of a payment control device provided by Embodiment 4 of the present invention.

detailed description

The present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, but not to limit the present invention. In addition, it should be noted that, for the convenience of description, only some structures related to the present invention are shown in the drawings but not all structures.

Embodiment one

Fig. 1 is a schematic flowchart of a payment control method provided by Embodiment 1 of the present invention. The method can be executed by a payment control device, which is realized by a software program and can be built into a terminal installed with a payment application such as a smart phone, a tablet computer, a notebook computer, a desktop computer or a personal digital assistant. The payment control device can exist independently of the payment application, or can be a part of the payment application and be provided in the payment application. Referring to Figure 1, the payment control method provided in this embodiment specifically includes the following operations:

Operation 110. After the start operation of the payment application is triggered, collect the first human face image.

Exemplarily, the start operation of the payment application may be a click operation on the icon of the payment application displayed on the terminal desktop; or a specific gesture operation acting on the terminal, for example, when the terminal is a smart phone, the gesture operation It can be shaking the smartphone several times, or tilting the smartphone beyond a set angle, etc. After receiving the startup operation, the camera provided on the terminal may be turned on, and the camera may be used to collect face images to obtain the first face image. Wherein, the camera may be a front camera, a rear camera or a rotating camera. In a preferred implementation of this embodiment, if the camera equipped on the terminal is a rotating camera, you can first turn on the rotating camera equipped on the terminal, and when the rotating camera is not in the preset front state, control the rotation The camera is rotated so that the rotating camera is in the front state.

Operation 120: Match the first human face image with a preset second human face image, and determine whether the first human face image is legitimate according to the matching result.

In this embodiment, in order to ensure payment security to a greater extent, before using the payment application for payment verification, face recognition and matching operations are added to verify the legitimacy of the identity of the payment user who triggers the payment application. Different from fingerprint recognition and red film recognition, the advantage of face recognition is that its cost is low and it has the characteristics of being undetectable, which makes the recognition method not offensive, and it is not easy to be noticed because it is not easy to attract people's attention. cheat. Face recognition can make full use of the camera already equipped on the terminal to obtain face image information under visible light, while fingerprint recognition or iris recognition requires an additional electronic pressure sensor to collect fingerprints, or use infrared rays to collect iris images, These special collection methods not only cost a lot of money, but are also easy to be detected, making it more likely to be deceived by camouflage.

Exemplarily, matching the first human face image with the preset second human face image may be specifically: performing face recognition on the first human face image, so as to extract the features of the first human face region contained therein; Calculate the similarity between the obtained first face region feature and the second face region feature included in the second face image, and use the similarity as a matching result. Correspondingly, determining whether the first human face image is legal according to the matching result may be: if the similarity is greater than a set threshold, determine that the first human face is legal; otherwise, determine that the first human face is not legal.

Wherein, the preset second face image may be a face image obtained by turning on the camera terminal on the terminal to collect images when the payment application is installed on the terminal for the first time. Of course, it can also be the face image entered by the terminal holder when setting encryption for the payment application installed on the terminal in the security management setting function of the terminal.

Considering that when performing face matching, there may be discrepancies between the legal first face image and the preset second face image, such as shaved beard, changed hairstyle, added glasses, changed Any facial expression may make the matching degree between two face images of the same user low, resulting in errors in legal verification. Therefore, in order to ensure the accuracy of legal verification and avoid the failure of legal face image verification, for example, when collecting the first face image, multiple first face images can be continuously collected, and then each of the collected The first human face image is matched with the preset second human face image respectively, as long as there is a first human face image with a matching degree greater than the set threshold, the result that the first human face image is legal is obtained, which means that this The legal verification of the payment user's identity was successful. Of course, on the basis of the above face image recognition and matching, other verification methods (such as email verification method) can also be combined to jointly realize the verification of the legitimacy of the user who triggers the payment application, so as to ensure the accuracy of verification and the security of payment sex.

It should be noted that the above operation 120 may be performed locally on the terminal, or may be performed by a cloud (that is, a server) capable of establishing a communication connection with the terminal, which is not specifically limited in this embodiment.

Operation 130, if it is determined that the first human face image is legal, allow the payment application to be used for payment.

In a specific implementation of this embodiment, the payment control method is executed by a payment control device independent of the payment application, and then the payment application is allowed to be used for payment, which may be specifically: opening the payment application, making the payment application in a working state, and Make a payment. Preferably, in this embodiment, if it is determined that the first human face image is illegal, no operation is performed, or a failure prompt is given according to a preset payment application legality verification failure prompt method.

In another specific implementation of this embodiment, the payment control method is executed by a payment control device that is a part of the payment application. After the start operation of the payment application is triggered, the started payment application will first display the payment interface, and then Executing the above operation 110-operation 130, wherein the payment application is allowed to be used for payment, may specifically be: displaying a password payment interface, and making payment. Preferably, in this embodiment, if it is determined that the first human face image is illegal, the password payment interface is refused to be displayed, and a failure prompt is given according to the preset method of prompting failure of legal verification of the payment application.

In this embodiment, after the start-up operation of the payment application is triggered, the payment application is not directly used for payment, but the face image is collected first, and the collected face image is legally verified. Only use the payment application to pay under the circumstances, so that even if others obtain the user's payment verification information (such as payment password) and the terminal held by illegal means, the payment cannot be completed smoothly, because the correct face must be entered Images will do. The technical solution provided by this embodiment adds the legal verification of the identity information of the user's facial features before the payment verification, which can effectively prevent others from using the payment application on the terminal to make payment, thereby greatly improving the security and safety of terminal payment. reliability.

Embodiment two

Fig. 2 is a schematic flowchart of a payment control method provided in Embodiment 2 of the present invention. On the basis of the above-mentioned first embodiment, this embodiment combines the identity verification method of face image recognition with email verification to supplement the legality verification of the payment user's identity. Referring to Figure 2, the payment control method provided in this embodiment specifically includes the following operations:

Operation 210. After the start operation of the payment application is triggered, collect the first human face image.

Operation 220, matching the first human face image with a preset second human face image, and determining whether the first human face image is legal according to the matching result.

If it is determined that the first face image is legitimate, then perform operation 250; otherwise, perform operation 230.

Operation 230, sending an email containing the first verification code to a preset email account.

In this embodiment, when the terminal installs the payment application for the first time, the email account input by the user may be obtained in advance through the human-computer interaction interface and stored. When the first face image is illegal, the stored email account is read, and a verification code is randomly generated as the first verification code, and sent to the email account by email.

Operation 240, collect the input second verification code, and verify the second verification code based on the first verification code, so as to determine whether the second verification code is legal. If it is determined that the second verification code is valid, perform operation 250; otherwise, end.

Specifically, verifying the second verification code based on the first verification code includes: matching the first verification code with the second verification code; legitimate.

In a preferred implementation of this embodiment, if it is determined that the second verification code is invalid, in addition to ending the process directly, a failure prompt may also be given according to the preset payment application legality verification failure prompt method.

Operation 250, allowing the payment application to be used for payment.

In the technical solution provided by this embodiment, after using the face recognition technology to verify that the first face image is illegal, the identity verification of the payment user will be performed again in the form of mailbox verification. Face image recognition is not accurate, which leads to the disadvantages of identity verification errors; on the other hand, if the payment user who triggers the payment application is a relative or friend authorized by the terminal holder, he can also pass the identity verification based on the mailbox verification method. The legal verification of the system makes the payment control strategy more reasonable, which can not only ensure security but also facilitate payment.

Embodiment three

Fig. 3 is a schematic flowchart of a payment control method provided by Embodiment 3 of the present invention. This embodiment provides a preferred embodiment based on all the above embodiments. Referring to Figure 3, the payment control method provided in this embodiment specifically includes:

Operation 300. When installing the payment application for the first time, the terminal turns on the front camera to take pictures, obtains a second face image, and obtains an email account through the human-computer interaction interface.

Operation 301. The terminal uploads the obtained second face image and email account to the database on the cloud. After the cloud receives the second face image and the email account, it will establish a corresponding relationship between the two and the terminal.

In operation 302, the terminal detects whether the payment interface of the payment application is opened. If yes, perform operation 303 , otherwise continue to perform operation 302 .

Operation 303, the terminal turns on the front camera to take pictures, obtains the first face image, and uploads the first face image to the cloud.

Operation 304. The cloud searches the database for and acquires a second face image corresponding to the terminal, and uses an image fuzzy recognition technology to match the first face image with the second face image.

Operation 305, the cloud determines whether the first human face image is legal according to the matching result.

If yes, perform operation 309 , otherwise perform operation 306 .

In operation 306, the cloud searches the database for and obtains the email account corresponding to the terminal, and sends an email containing the first verification code to the email account. Go to operation 307.

Operation 307, the terminal collects the input second verification code, and reports the second verification code to the cloud. Execute operation 308 .

In operation 308, the cloud verifies the second verification code based on the first verification code, so as to determine whether the second verification code is legal. If it is determined that the second verification code is valid, perform operation 309 ; otherwise, perform operation 310 .

Operation 309, the cloud sends the verification success prompt information to the terminal, and the terminal displays a password payment interface to make payment.

Operation 310, refuse to display the password payment interface, and give an error prompt, and end.

In this embodiment, the legal verification operation of the face image and the verification code is performed by the cloud, which can greatly save the terminal memory resources and speed up the processing speed of the terminal processor for other applications.

Embodiment Four

Fig. 4 is a schematic structural diagram of a payment control device provided in Embodiment 4 of the present invention. Referring to Fig. 4, the specific structure of the payment control device is as follows:

An image acquisition unit 410, configured to acquire the first human face image after triggering the start operation of the payment application;

An image legality verification unit 420, configured to match the first face image with a preset second face image, and determine whether the first face image is legal according to the matching result;

The payment control unit 430 is configured to allow payment using the payment application if the image legality verification unit 420 determines that the first face image is legal.

Exemplarily, the payment control device provided in this embodiment further includes:

Mailbox legal verification unit 440, for: if described image legal verification unit 420 determines that described first face image is not legal, then send the mail that contains the first verification code to the preset mailbox account; a verification code, verifying the second verification code based on the first verification code to determine whether the second verification code is legal;

The payment control unit 430 is further configured to allow payment using the payment application if the mailbox legality verification unit 440 determines that the second verification code is legal.

Exemplarily, the payment control device provided in this embodiment further includes:

The setting unit 400 is configured to set the second face image and email account when the payment application is installed for the first time before the image acquisition unit 410 captures the first face image.

On the basis of the above technical solution, for example, the image acquisition unit 410 is specifically configured to: control the front camera to take pictures, and obtain the first face image;

The image legal verification unit 420 is configured to: perform face recognition on the first face image to extract the first face region features contained therein; calculate the obtained first face region features and the obtained The similarity between the second human face region features included in the second human face image is used as the matching result.

On the basis of the above technical solution, for example, the device is applied to the payment application;

The image collection unit 410 is specifically configured to: collect the first face image after the startup operation of the payment application is triggered, and the payment application after startup displays the payment interface;

The payment control unit 430 is specifically configured to display a password payment interface and make payment when it is determined that the payment is legal.

The above-mentioned product can execute the method provided by any embodiment of the present invention, and has corresponding functional modules and beneficial effects for executing the method.

Note that the above are only preferred embodiments of the present invention and applied technical principles. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and that various obvious changes, readjustments and substitutions can be made by those skilled in the art without departing from the protection scope of the present invention. Therefore, although the present invention has been described in detail through the above embodiments, the present invention is not limited to the above embodiments, and can also include more other equivalent embodiments without departing from the concept of the present invention, and the present invention The scope is determined by the scope of the appended claims.

Claims (10)

1. A payment control method, characterized in that, comprising: After triggering the start operation of the payment application, collecting the first face image; Matching the first human face image with a preset second human face image, and determining whether the first human face image is legal according to the matching result; If it is determined that the first human face image is legal, the payment application is allowed to be used for payment. 2. The method according to claim 1, wherein, after determining whether the first human face image is legal according to the matching result, further comprising: If it is determined that the first face image is illegal, then send an email containing the first verification code to a preset email account; Collecting the input second verification code, and verifying the second verification code based on the first verification code, to determine whether the second verification code is legal; If it is determined that the second verification code is legal, the payment application is allowed to be used for payment. 3. The method according to claim 2, characterized in that, before collecting the first face image, further comprising: when installing the payment application for the first time, setting the second face image and mailbox account. 4. The method according to any one of claims 1-3, wherein collecting the first face image comprises: controlling the front camera to take pictures to obtain the first face image; Matching the first face image with the preset second face image, including: Performing face recognition on the first face image to extract the features of the first face region contained therein; the calculated first face region features and the second person contained in the second face The similarity between the features of the face regions is used as the matching result. 5. The method according to any one of claims 1-3, characterized in that, after triggering the startup operation of the payment application, collecting the first human face image includes: After triggering the startup operation of the payment application, and after the payment application after startup displays the payment interface, collect the first face image; Allowing payment by using the payment application includes: when it is determined that it is legal, the payment application displays a password payment interface to perform payment. 6. A payment control device, characterized in that it comprises: An image acquisition unit, configured to acquire the first face image after triggering the start operation of the payment application; An image legal verification unit, configured to match the first face image with a preset second face image, and determine whether the first face image is legal according to the matching result; A payment control unit, configured to allow payment using the payment application if the image legality verification unit determines that the first face image is legal. 7. The device according to claim 6, further comprising: The mailbox legal verification unit is used for: if the image legal verification unit determines that the first face image is not legal, then send an email containing the first verification code to the preset mailbox account; collect the input second verification code , verifying the second verification code based on the first verification code to determine whether the second verification code is legal; The payment control unit is further configured to allow payment using the payment application if the email verification unit determines that the second verification code is legal. 8. The device according to claim 7, further comprising: A setting unit is configured to set the second face image and email account when the payment application is installed for the first time before the image acquisition unit collects the first face image. 9. The device according to any one of claims 6-8, wherein the image acquisition unit is specifically configured to: control the front camera to take pictures to obtain the first face image; The image legal verification unit is configured to: perform face recognition on the first face image to extract the first face region features contained therein; calculate the obtained first face region features and the The degree of similarity between the features of the second face region included in the second face image is used as a matching result. 10. The device according to any one of claims 6-8, wherein the device is applied to the payment application; The image collection unit is specifically configured to: collect the first face image after the startup operation of the payment application is triggered, and the payment application after startup displays the payment interface; The payment control unit is specifically configured to display a password payment interface and make payment when it is determined to be legal.