The present application relates to the field of Internet technologies, and in particular, to a payment binding management method, a payment server, a client, and a system.
Most of current online payment solutions depend on security of terminal devices such as a mobile phone. Normally, a third-party payment account is bound to a mobile phone number of a user. When the user requests payment, a payment server sends a short message verification code to a mobile phone terminal of the user. After the user reads the short message verification code from the mobile phone terminal and inputs correctly and submits the short message verification code by using a payment client or a payment web page, the payment server checks the verification code, and performs a real payment operation only after the checking succeeds. If the mobile phone of the user is lost, online payment may have a huge security risk. Although most online payment solutions further check a payment password in addition to checking the short message verification code, the payment password of the user is also insecure when the mobile phone of the user is lost. A main reason is that current mainstream payment solutions all provide a function of retrieving the payment password by using a short message verification code of the user. Therefore, once the mobile phone of the user is lost, two defenses, namely the payment password and the short message verification code, are both very likely at risk of being ruined completely.
The above deficiencies and other problems (e.g., security issues) associated with the conventional approach of making online payment are reduced or eliminated by the present application disclosed below. In some embodiments, the present application is implemented in a computer server that has one or more processors, memory and one or more modules, programs or sets of instructions stored in the memory for performing multiple functions and communicating with a client device (e.g., smartphone) that has one or more processors, memory and one or more modules, programs or sets of instructions stored in the memory for performing multiple functions. Instructions for performing these functions may be included in a computer program product configured for execution by one or more processors.
One aspect of the present application involves a method for managing multiple payment-bound terminals at a computer server having one or more processors and memory storing program modules to be executed by the one or more processors. The computer server receives a payment binding change request submitted by a client application from a requesting terminal, where the payment binding change request carries a payment account and terminal identification information of a target payment-bound terminal. If the target payment-bound terminal is registered as a secondary payment-bound terminal of the payment account, the computer server sends verification information to the target payment-bound terminal and returns prompt information to the client application. The prompt information is used to prompt a user of the client application to input and return the verification information sent to the target payment-bound terminal. If the verification information returned by the client application matches the verification information sent to the target payment-bound terminal, the computer server sets the target payment-bound terminal as a primary payment-bound terminal of the payment account.
Another aspect of the present application involves a computer server including one or more processors, memory, one or more program modules stored in the memory and to be executed by the one or more processors. The program modules further include instructions for: receiving a payment binding change request submitted by a client application from a requesting terminal, where the payment binding change request carries a payment account and terminal identification information of a target payment-bound terminal; determining that the target payment-bound terminal is a secondary payment-bound terminal of the payment account according to the terminal identification information of the target payment-bound terminal; sending verification information to the target payment-bound terminal according to the terminal identification information of the target payment-bound terminal and returning prompt information to the client application, where the prompt information is used to prompt a user of the client application to input the verification information and return the verification information to the server; receiving the verification information returned by the client application in response to the prompt information and comparing the verification information returned by the client application with the verification information sent to the target payment-bound terminal; and in accordance with a determination that the verification information returned by the client application matches the verification information sent to the target payment-bound terminal, setting the target payment-bound terminal as a primary payment-bound terminal of the payment account.
Another aspect of the present application involves a non-transitory computer readable storage medium stores one or more program modules in connection with a computer server having one or more processors, the program modules including instructions for execution by one or more processors. The instructions, when executed by the one or more processors, cause the computer server to perform operations including: receiving a payment binding change request submitted by a client application from a requesting terminal, where the payment binding change request carries a payment account and terminal identification information of a target payment-bound terminal; determining that the target payment-bound terminal is a secondary payment-bound terminal of the payment account according to the terminal identification information of the target payment-bound terminal; sending verification information to the target payment-bound terminal according to the terminal identification information of the target payment-bound terminal and returning prompt information to the client application, where the prompt information is used to prompt a user of the client application to input the verification information and return the verification information to the server; receiving the verification information returned by the client application in response to the prompt information and comparing the verification information returned by the client application with the verification information sent to the target payment-bound terminal; and in accordance with a determination that the verification information returned by the client application matches the verification information sent to the target payment-bound terminal, setting the target payment-bound terminal as a primary payment-bound terminal of the payment account.
Various advantages of the present application are apparent in light of the descriptions below.
The aforementioned features and advantages of the present application as well as additional features and advantages thereof will be more clearly understood hereinafter as a result of a detailed description of preferred embodiments when taken in conjunction with the drawings.
To describe the technical solutions according to the embodiments of the present application or in the prior art more clearly, the accompanying drawings for describing the embodiments or the prior art are introduced briefly in the following. Apparently, the accompanying drawings in the following description are only some embodiments of the present application, and persons of ordinary skill in the art can derive other drawings from the accompanying drawings without creative efforts.
Like reference numerals refer to corresponding parts throughout the several views of the drawings.
Reference will now be made in detail to embodiments, examples of which are illustrated in the accompanying drawings. In the following detailed description, numerous specific details are set forth in order to provide a thorough understanding of the subject matter presented herein. But it will be apparent to one skilled in the art that the subject matter may be practiced without these specific details. In other instances, well-known methods, procedures, components, and circuits have not been described in detail so as not to unnecessarily obscure aspects of the embodiments.
The technical solution of the present application will be clearly and completely described in the following with reference to the accompanying drawings. It is obvious that the embodiments to be described are only a part rather than all of the embodiments of the present application. All other embodiments obtained by persons of ordinary skill in the art based on the embodiments of the present application without creative efforts shall fall within the protection scope of the present application.
A client in the embodiments of the present application may be an application software process run in a user terminal, such as an instant messaging client, a social networking services (SNS) client and an Internet payment client. The client application may log in to a corresponding payment server by using a login account input by a user, so as to perform payment binding management. The user terminal may include a client-side device such as a personal computer, a smartphone (such as an Android mobile phone and an iOS mobile phone), a tablet computer, a handheld computer, a mobile client-side device (MID), or a wearable smart device.
S101: A payment server obtains a payment binding change request submitted by a client application from a requesting terminal, where the payment binding change request carries a payment account and terminal identification information of a target payment-bound terminal.
In specific implementation, the terminal identification information of the target payment-bound terminal may include a mobile directory number (MDN) number, an international mobile equipment identification number (IMEI), a mobile subscriber identification number (MSIN), or other identification information that can represent identity information of the terminal device, for example an apple ID. The client application may be run in the target payment-bound terminal, and may also be independent of the target payment-bound terminal and run in a first user terminal, where the first user terminal may be another client-side device, for example a personal computer. The terminal identification information of the target payment-bound terminal may be input by a user, and when the client application is run in the target payment-bound terminal, the terminal identification information may also be obtained by reading firmware information of the target payment-bound terminal. The payment account is an account, designated by the user of the client application, for payment, such as a bank account for payment, an Alipay account, and a Tenpay account. In an alternative embodiment, a login account of the client application may be the same as the payment account.
S102: The payment server determines, according to the terminal identification information of the target payment-bound terminal, that the target payment-bound terminal is a secondary payment-bound terminal of the payment account.
In specific implementation, the payment server may set the target payment-bound terminal as a secondary payment-bound terminal of the payment account in advance according to a request of the client application. For example, a payment-bound terminals list is created for the payment account, and records terminal identification information of all user terminals having an established binding relationship with the payment account; one of the payment-bound terminals is a current primary payment-bound terminal, and the other payment-bound terminals are secondary payment-bound terminals; when the payment server receives a payment request submitted by the client application and regarding the payment account, the payment server sends verification information only to the primary payment-bound terminal of the payment account to perform payment verification. After receiving the payment binding change request submitted by the client application, the payment server first determines, according to the terminal identification information of the target payment-bound terminal, whether the target payment-bound terminal is a secondary payment-bound terminal of the payment account; if yes, executes the following Step S103; otherwise, may return error prompt information to the client application.
S103: The payment server sends verification information to the target payment-bound terminal according to the terminal identification information of the target payment-bound terminal, and returns prompt information to the client application, where the prompt information is used to prompt the user of the client application to input the verification information.
Specifically, the payment server may send the verification information to the target payment-bound terminal directly according to the terminal identification information of the target payment-bound terminal, and for example, the terminal identification information is an MDN number or information including the MDN number, so that the payment server may send the verification information, by using a short message or a multimedia message, to the target payment-bound terminal through the MDN number; in an alternative embodiment, the payment server may also obtain contact information of the target payment-bound terminal according to correspondence between the terminal identification information of the target payment-bound terminal and the contact information, so as to send the verification information to the target payment-bound terminal by using the obtained contact information, where the correspondence between the terminal identification information and the contact information may be obtained by using an available algorithm for mapping information, and the correspondence between the two may also be stored in advance in the payment server, so as to achieve better confidentiality of personal information.
S104: The payment server obtains the verification information returned by the client application in response to the prompt information, and compares the verification information returned by the client application with the verification information sent to the target payment-bound terminal.
In specific implementation, the user of the client application may view the verification information, sent by the payment server, on the target payment-bound terminal, and input the verification information into the client application, so that the client application may send the verification information to the payment server in response to the prompt information accordingly. After receiving the verification information returned by the client application, the payment server checks the verification information returned by the client application and the verification information sent before by the payment server to the target payment-bound terminal, for example, to check whether they are consistent; if yes, the comparison is passed, and S105 is executed; otherwise, error prompt information may be returned to the client application.
S105: If the comparison is passed (e.g., the verification information returned by the client application matches the verification information sent to the target payment-bound terminal), the payment server sets the target payment-bound terminal as the primary payment-bound terminal of the payment account according to the payment binding change request.
Specifically, the payment server may delete a current primary payment-bound terminal of the payment account, and then set the terminal identification information of the target payment-bound terminal as the primary payment-bound terminal of the payment account, so as to set the target payment-bound terminal as the primary payment-bound terminal of the payment account. After the setting succeeds, the payment server may send a notification message to the client application, to notify that the binding relationship is changed, and verification information for payment will be sent to the target payment-bound terminal during a next payment.
In an alternative embodiment, in the method shown in
11) The payment server obtains an adding payment-bound terminal request submitted by the client application, where the adding payment-bound terminal request carries the payment account and the terminal identification information of the target payment-bound terminal.
12) The payment server obtains terminal identification information of the then-primary payment-bound terminal of the payment account.
13) The payment server sends verification information to the then-primary payment-bound terminal according to the terminal identification information of the then-primary payment-bound terminal, and returns prompt information to the client application, where the prompt information is used to prompt the user of the client application to input the verification information and return the verification information to the server.
14) The payment server obtains the verification information returned by the client application in response to the prompt information, and compares the verification information returned by the client application with the verification information sent to the then-primary payment-bound terminal.
15) If the comparison is passed (e.g., the second verification information returned by the client application matches the second verification information sent to the then-primary payment-bound terminal), the payment server adds the target payment-bound terminal as a secondary payment-bound terminal of the payment account according to the adding payment-bound terminal request. Therefore optionally, before adding the target payment-bound terminal as a secondary payment-bound terminal of the payment account according to the adding payment-bound terminal request, the payment server may further determine first whether the payment account currently has a primary payment-bound terminal; if the payment account currently has a primary payment-bound terminal, set the target payment-bound terminal as a secondary payment-bound terminal of the payment account; otherwise, set the target payment-bound terminal as the primary payment-bound terminal of the payment account.
Through Steps 11) to 15), the payment server sets the target payment-bound terminal as the secondary payment-bound terminal of the payment account, so as to rapidly set the target payment-bound terminal as the primary payment-bound terminal of the payment account when needed later.
It can be seen that the payment binding management method described in
In some embodiments, a user may proactively replace a primary payment-bound terminal with a secondary payment-bound terminal temporarily for security reasons. For example, a user may register two mobile phones as payment-bound terminals with his/her bank account. A first mobile phone is for domestic use and registered as the primary payment-bound terminal while a second one is for international use and registered as the secondary payment-bound terminal. When the user travels abroad, he/she may carry only the second mobile phone and leaves the first one at home. In this case, the user may temporarily replace the first mobile phone with the second mobile phone as the primary payment-bound terminal and then reverse their binding relationship with the payment account after returns home. In this case, the user may log into his/her payment account to change the binding relationship or take the actions as described above in connection with
In some other embodiments, the user may accidentally lose one of his/her secondary payment-bound terminals. In order to protect the user from adverse actions initiated from a lost secondary payment-bound terminal, the user has to be promptly notified of such events. This is especially important if the user does not carry the lost secondary payment-bound terminal all the time. In this case, after receiving the payment binding change request, the server sends an alert message to the then-primary (i.e., current) payment-bound terminal. Upon receipt of the alert message, the current payment-bound terminal generates a display like the one shown in
Note that the requesting terminal and the target payment-bound terminal may be the same or different. For example, the requesting terminal may be a personal computer and the target payment-bound terminal is a mobile phone.
S301: A client submits a payment binding change request to a payment server, where the payment binding change request carries a payment account and terminal identification information of a target payment-bound terminal, so that the payment server sends verification information to the target payment-bound terminal according to the terminal identification information of the target payment-bound terminal, and returns prompt information to the client application.
S302: The client application receives the prompt information returned by the payment server, where the prompt information is used to prompt a user of the client application to input the verification information and return the verification information to the server.
S303: The client application sends the verification information, input in response to the prompt information by the user, to the payment server, so that the payment server checks the verification information returned by the client application and the verification information sent in advance to the target payment-bound terminal by the payment server; if the comparison is passed, the payment server sets the target payment-bound terminal as a primary payment-bound terminal of the payment account according to the payment binding change request.
In an alternative embodiment, in the method shown in
21) The client application submits an adding payment-bound terminal request to the payment server, where the adding payment-bound terminal request carries the payment account and the terminal identification information of the target payment-bound terminal, so that the payment server sends verification information to the primary payment-bound terminal of the payment account, and returns prompt information to the client application.
22) The client application receives the prompt information returned by the payment server, where the prompt information is used to prompt the user of the client application to input the verification information.
23) The client application sends the verification information, input in response to the prompt information by the user, to the payment server, so that the payment server checks the verification information returned by the client application and the verification information sent in advance to the primary payment-bound terminal by the payment server; if the comparison is passed, the payment server adds the target payment-bound terminal as a secondary payment-bound terminal of the payment account according to the adding payment-bound terminal request. Therefore optionally, before adding the target payment-bound terminal as a secondary payment-bound terminal of the payment account according to the adding payment-bound terminal request, the payment server may further determine first whether the payment account currently has a primary payment-bound terminal; if the payment account currently has a primary payment-bound terminal, set the target payment-bound terminal as a secondary payment-bound terminal of the payment account; otherwise, set the target payment-bound terminal as the primary payment-bound terminal of the payment account.
Through Steps 21) to 23), the client application requests the payment server to set the target payment-bound terminal as the secondary payment-bound terminal of the payment account, so as to rapidly set the target payment-bound terminal as the primary payment-bound terminal of the payment account when needed later.
It can be seen that the payment binding management method described in
S401: A client submits a payment binding change request to a payment server, where the payment binding change request carries a payment account and terminal identification information of a target payment-bound terminal.
S402: The payment server determines, according to the terminal identification information of the target payment-bound terminal, that the target payment-bound terminal is a secondary payment-bound terminal of the payment account.
S403: The payment server sends verification information to the target payment-bound terminal according to the terminal identification information of the target payment-bound terminal.
S404: The payment server returns prompt information to the client application, where the prompt information is used to prompt a user of the client application to input the verification information and return the verification information to the server.
S405: The client application sends the verification information, input in response to the prompt information by the user, to the payment server.
S406: The payment server checks the verification information returned by the client application and the verification information sent in advance to the target payment-bound terminal by the payment server, and if the comparison is passed, sets the target payment-bound terminal as a primary payment-bound terminal of the payment account according to the payment binding change request.
It can be seen that the payment binding management method described in
S501: A client submits an adding payment-bound terminal request to a payment server, where the adding payment-bound terminal request carries a payment account and terminal identification information of a target payment-bound terminal.
S502: The payment server sends verification information to a primary payment-bound terminal of the payment account.
In specific implementation, the payment server may obtain terminal identification information of the primary payment-bound terminal of the payment account, so as to send the verification information to the primary payment-bound terminal of the payment account according to the terminal identification information.
S503: The payment server returns prompt information to the client application, where the prompt information is used to prompt a user of the client application to input the verification information and return the verification information to the server.
S504: The client application sends the verification information, input in response to the prompt information by the user, to the payment server.
S505: The payment server compares the verification information returned by the client application with the verification information sent to the primary payment-bound terminal, and if the comparison is passed, adds the target payment-bound terminal as a secondary payment-bound terminal of the payment account according to the adding payment-bound terminal request. Therefore optionally, before adding the target payment-bound terminal as a secondary payment-bound terminal of the payment account according to the adding payment-bound terminal request, the payment server may further determine first whether the payment account currently has a primary payment-bound terminal; if the payment account currently has a primary payment-bound terminal, set the target payment-bound terminal as a secondary payment-bound terminal of the payment account; otherwise, set the target payment-bound terminal as the primary payment-bound terminal of the payment account.
S506: The client application submits a payment binding change request to the payment server, where the payment binding change request carries the payment account and the terminal identification information of the target payment-bound terminal.
S507: The payment server determines, according to the terminal identification information of the target payment-bound terminal, that the target payment-bound terminal is a secondary payment-bound terminal of the payment account.
S508: The payment server sends verification information to the target payment-bound terminal according to the terminal identification information of the target payment-bound terminal.
S509: The payment server returns prompt information to the client application, where the prompt information is used to prompt the user of the client application to input the verification information.
S510: The client application sends the verification information, input in response to the prompt information by the user, to the payment server.
S511: The payment server checks the verification information returned by the client application and the verification information sent in advance to the target payment-bound terminal by the payment server, and if the comparison is passed, sets the target payment-bound terminal as the primary payment-bound terminal of the payment account according to the payment binding change request.
S512: The client application submits a payment request to the payment server, where the payment request includes the payment account and order information.
S513: The payment server sends verification information to the primary payment-bound terminal of the payment account.
In specific implementation, the payment server may obtain terminal identification information of the primary payment-bound terminal of the payment account, so as to send the verification information to the primary payment-bound terminal of the payment account according to the terminal identification information. In this embodiment, the primary payment-bound terminal of the payment account is the target payment-bound terminal.
S514: The payment server returns prompt information to the client application, where the prompt information is used to prompt the user of the client application to input the verification information.
S515: The client application sends the verification information to the payment server in response to the prompt information.
S516: The payment server compares the verification information returned by the client application with the verification information sent to the primary payment-bound terminal, and if the comparison is passed, the payment server performs a payment operation according to the payment request.
It can be seen that the payment binding management method described in
The receiving unit 601 is configured to obtain a payment binding change request submitted by a client application from a requesting terminal, where the payment binding change request carries a payment account and terminal identification information of a target payment-bound terminal.
In specific implementation, the terminal identification information of the target payment-bound terminal may include a mobile directory number (MDN) number, an international mobile equipment identification number (IMEI), a mobile subscriber identification number (MSIN), or other identification information that can represent identity information of the terminal device, for example an apple ID. The client application may be run in the target payment-bound terminal, and may also be independent of the target payment-bound terminal and run in a first user terminal, where the first user terminal may be another client-side device, for example a personal computer. The terminal identification information of the target payment-bound terminal may be input by a user, and when the client application is run in the target payment-bound terminal, the terminal identification information may also be obtained by reading firmware information of the target payment-bound terminal. The payment account is an account, designated by the user of the client application, for payment, such as a bank account for payment, an Alipay account, and a Tenpay account. In an alternative embodiment, a login account of the client application may be the same as the payment account.
The determining unit 602 is configured to determine, according to the terminal identification information of the target payment-bound terminal, whether the target payment-bound terminal is a secondary payment-bound terminal of the payment account.
In specific implementation, the payment server may set the target payment-bound terminal as a secondary payment-bound terminal of the payment account in advance according to a request of the client application. For example, a payment-bound terminals list is created for the payment account, and records terminal identification information of all user terminals having an established binding relationship with the payment account; one of the payment-bound terminals is a current primary payment-bound terminal, and the other payment-bound terminals are secondary payment-bound terminals; when the payment server receives a payment request submitted by the client application and regarding the payment account, the payment server sends verification information only to the primary payment-bound terminal of the payment account to perform payment verification. After the receiving unit 601 receives the payment binding change request submitted by the client application, the determining unit 602 determines, according to the terminal identification information of the target payment-bound terminal, whether the target payment-bound terminal is a secondary payment-bound terminal of the payment account; if yes, triggers the sending unit 603 to send verification information to the target payment-bound terminal; otherwise, may trigger the sending unit 603 to return error prompt information to the client application.
The sending unit 603 is configured to: when a determination result of the determining unit 602 is yes, send the verification information to the target payment-bound terminal according to the terminal identification information of the target payment-bound terminal, and return prompt information to the client application, where the prompt information is used to prompt the user of the client application to input the verification information.
Specifically, the sending unit 603 may send the verification information to the target payment-bound terminal directly according to the terminal identification information of the target payment-bound terminal, and for example, the terminal identification information is an MDN number or information including the MDN number, so that the sending unit 603 may send the verification information, by using a short message or a multimedia message, to the target payment-bound terminal through the MDN number; in an alternative embodiment, the sending unit 603 may also obtain contact information of the target payment-bound terminal according to correspondence between the terminal identification information of the target payment-bound terminal and the contact information, so as to send the verification information to the target payment-bound terminal by using the obtained contact information, where the correspondence between the terminal identification information and the contact information may be obtained by using an available algorithm for mapping information, and the correspondence between the two may also be stored in advance in the payment server, so as to achieve better confidentiality of personal information.
The receiving unit 601 is further configured to obtain the verification information sent in response to the prompt information by the client application.
In specific implementation, the user of the client application may view the verification information, sent by the payment server, on the target payment-bound terminal, and input the verification information into the client application, so that the client application may send the verification information to the payment server in response to the prompt information accordingly.
The payment server further includes: a checking unit 604, configured to check the verification information returned by the client application and the verification information sent to the target payment-bound terminal by the sending unit 603, for example, so as to check whether they are consistent, where if they are consistent, the comparison is passed; and if the checking is not passed, the checking unit 604 may further trigger the sending unit 603 to return error prompt information to the client application; and a binding relationship setting unit 605, configured to: when the checking by the checking unit 604 is successful, set the target payment-bound terminal as the primary payment-bound terminal of the payment account according to the payment binding change request.
Specifically, the binding relationship setting unit 605 may delete a current primary payment-bound terminal of the payment account, and then set the terminal identification information of the target payment-bound terminal as the primary payment-bound terminal of the payment account, so as to set the target payment-bound terminal as the primary payment-bound terminal of the payment account. After the setting succeeds, the binding relationship setting unit 605 may further trigger the sending unit 603 to send a notification message to the client application, to notify that the binding relationship is changed, and verification information for payment will be sent to the target payment-bound terminal during a next payment.
In an alternative embodiment, before obtaining the payment binding change request submitted by the user, the receiving unit 601 may be further configured to obtain an adding payment-bound terminal request submitted by the client application, where the adding payment-bound terminal request carries the payment account and the terminal identification information of the target payment-bound terminal.
Correspondingly, the payment server further includes: a searching unit 606, configured to obtain terminal identification information of the primary payment-bound terminal of the payment account.
Correspondingly, the sending unit 603 is further configured to send verification information to the primary payment-bound terminal according to the terminal identification information of the primary payment-bound terminal, and return prompt information to the client application, where the prompt information is used to prompt the user of the client application to input the verification information.
The receiving unit 601 is further configured to obtain the verification information sent in response to the prompt information by the client application.
The checking unit 604 is further configured to check the verification information returned by the client application and the verification information sent to the primary payment-bound terminal by the sending unit 603.
The binding relationship setting unit 605 is further configured to: when the checking by the checking unit 604 is successful, set the target payment-bound terminal as a secondary payment-bound terminal of the payment account according to the adding payment-bound terminal request. Therefore optionally, before adding the target payment-bound terminal as a secondary payment-bound terminal of the payment account according to the adding payment-bound terminal request, the binding relationship setting unit 605 may further determine first whether the payment account currently has a primary payment-bound terminal; if the payment account currently has a primary payment-bound terminal, set the target payment-bound terminal as a secondary payment-bound terminal of the payment account; otherwise, set the target payment-bound terminal as the primary payment-bound terminal of the payment account.
In an alternative embodiment, the receiving unit 601 is further configured to obtain a payment request submitted by the client application, where the payment request includes the payment account and order information.
Correspondingly, the payment server further includes: a searching unit 606, configured to obtain terminal identification information of the primary payment-bound terminal of the payment account.
The sending unit 603 is further configured to send verification information to the primary payment-bound terminal of the payment account according to the terminal identification information, and return prompt information to the client application, where the prompt information is used to prompt the user of the client application to input the verification information.
The receiving unit 601 is further configured to obtain the verification information sent in response to the prompt information by the client application.
The checking unit 604 is further configured to check the verification information returned by the client application and the verification information sent to the primary payment-bound terminal by the sending unit.
The payment server further includes: a payment operating unit 607, configured to perform a payment operation according to the payment request when the checking by the checking unit is successful.
It can be seen that, by using the payment server 600 shown in
In the payment server 700 shown in
Therefore, in an alternative embodiment, if it is determined, according to the terminal identification information of the target payment-bound terminal, that the target payment-bound terminal is not a secondary payment-bound terminal of the payment account, or the checking by the payment server fails, error prompt information is returned to the client application by using the network interface 704.
In an embodiment, the processor 701 may further execute the following operations by calling the payment binding management program stored in the memory 705: using the network interface 704 to obtain an adding payment-bound terminal request submitted by the client application, where the adding payment-bound terminal request carries the payment account and the terminal identification information of the target payment-bound terminal; obtaining terminal identification information of the primary payment-bound terminal of the payment account; using the network interface 704 to send verification information to the primary payment-bound terminal according to the terminal identification information of the primary payment-bound terminal, and return prompt information to the client application, where the prompt information is used to prompt the user of the client application to input the verification information; and using the network interface 704 to obtain the verification information returned by the client application in response to the prompt information, and check the verification information returned by the client application and the verification information sent to the primary payment-bound terminal, and if the comparison is passed, adding the target payment-bound terminal as a secondary payment-bound terminal of the payment account according to the adding payment-bound terminal request. Therefore optionally, before the adding the target payment-bound terminal as a secondary payment-bound terminal of the payment account according to the adding payment-bound terminal request, it may be further determined first whether the payment account currently has a primary payment-bound terminal; if the payment account currently has a primary payment-bound terminal, the target payment-bound terminal is set as a secondary payment-bound terminal of the payment account; otherwise, the target payment-bound terminal may be set as the primary payment-bound terminal of the payment account.
In an embodiment, the processor 701 may further execute the following operations by calling the payment binding management program stored in the memory 705: using the network interface 704 to obtain a payment request submitted by the client application, where the payment request includes a payment account and order information; obtaining terminal identification information of the primary payment-bound terminal of the payment account; using the network interface 704 to send verification information to the primary payment-bound terminal of the payment account according to the terminal identification information, and return prompt information to the client application, where the prompt information is used to prompt the user of the client application to input the verification information; and using the network interface 704 to obtain the verification information returned by the client application in response to the prompt information, and check the verification information returned by the client application and the verification information sent to the primary payment-bound terminal; if the comparison is passed, performing a payment operation according to the payment request.
It can be seen that, by using the payment server 700 shown in
The sending unit 801 is configured to submit a payment binding change request to a payment server, where the payment binding change request carries a payment account and terminal identification information of a target payment-bound terminal, so that the payment server sends verification information to the target payment-bound terminal according to the terminal identification information of the target payment-bound terminal, and returns prompt information to a client.
In specific implementation, the terminal identification information of the target payment-bound terminal may include a mobile directory number (MDN) number, an international mobile equipment identification number (IMEI), a mobile subscriber identification number (MSIN), or other identification information that can represent identity information of the terminal device, for example an apple ID. The client application may be run in the target payment-bound terminal, and may also be independent of the target payment-bound terminal and run in a first user terminal, where the first user terminal may be another client-side device, for example a personal computer. The terminal identification information of the target payment-bound terminal may be input by a user, and when the client application is run in the target payment-bound terminal, the terminal identification information may also be obtained by reading firmware information of the target payment-bound terminal. The payment account is an account, designated by the user of the client application, for payment, such as a bank account for payment, an Alipay account, and a Tenpay account. In an alternative embodiment, a login account of the client application may be the same as the payment account.
The receiving unit 802 is configured to receive the prompt information returned by the payment server, where the prompt information is used to prompt the user of the client application to input the verification information.
The sending unit 801 is further configured to send the verification information, input in response to the prompt information by the user, to the payment server, so that the payment server checks the verification information returned by the client application and the verification information sent in advance to the target payment-bound terminal by the payment server; if the comparison is passed, the payment server sets the target payment-bound terminal as a primary payment-bound terminal of the payment account according to the payment binding change request.
In an alternative embodiment, before submitting the payment binding change request to the payment server, the sending unit 801 is further configured to submit an adding payment-bound terminal request to the payment server, where the adding payment-bound terminal request carries the payment account and the terminal identification information of the target payment-bound terminal, so that the payment server sends verification information to the primary payment-bound terminal of the payment account, and returns prompt information to the client application.
Correspondingly, the receiving unit 802 is further configured to receive the prompt information returned by the payment server, where the prompt information is used to prompt the user of the client application to input the verification information.
The sending unit 801 is further configured to send the verification information, input in response to the prompt information by the user, to the payment server, so that the payment server checks the verification information returned by the client application and the verification information sent in advance to the primary payment-bound terminal by the payment server; if the comparison is passed, the payment server adds the target payment-bound terminal as a secondary payment-bound terminal of the payment account according to the adding payment-bound terminal request.
It can be seen that, by using the client application 800 shown in
In the user terminal 900 shown in
In an embodiment, the processor 901 may further execute the following operations by calling the client application stored in the memory 905: using the network interface 904 to submit an adding payment-bound terminal request to the payment server, where the adding payment-bound terminal request carries the payment account and the terminal identification information of the target payment-bound terminal, so that the payment server sends verification information to the primary payment-bound terminal of the payment account, and returns prompt information to the client application; using the network interface 904 to receive the prompt information returned by the payment server, where the prompt information is used to prompt the user of the client application to input the verification information; and using the network interface 904 to send the verification information, input in response to the prompt information by the user, to the payment server, so that the payment server checks the verification information returned by the client application and the verification information sent in advance to the primary payment-bound terminal by the payment server; if the comparison is passed, the payment server adds the target payment-bound terminal as a secondary payment-bound terminal of the payment account according to the adding payment-bound terminal request.
It should be noted that, the user terminal 900 of this embodiment may be the target payment-bound terminal, and may also be a first user terminal independent of the target payment-bound terminal, where the first user terminal may be another client-side device, for example a personal computer.
It can be seen that, by using the user terminal 900 shown in
The first user terminal 1001 is configured to submit a payment binding change request to the payment server 1002, where the payment binding change request carries a payment account and terminal identification information of the target payment-bound terminal.
The payment server 1002 is configured to obtain the payment binding change request, determine, according to the terminal identification information of the target payment-bound terminal, whether the target payment-bound terminal 1003 is a secondary payment-bound terminal of the payment account, and if yes, send verification information to the target payment-bound terminal 1003 according to the terminal identification information of the target payment-bound terminal, and return prompt information to the first user terminal 1001, where the prompt information is used to prompt a user of the first user terminal 1001 to input the verification information.
The first user terminal 1001 is further configured to send the verification information, input in response to the prompt information by the user, to the payment server.
The payment server 1002 is further configured to check the verification information sent by the first user terminal 1001 and the verification information sent in advance to the target payment-bound terminal 1003 by the payment server, and if the comparison is passed, set the target payment-bound terminal 1003 as a primary payment-bound terminal of the payment account according to the payment binding change request.
In an alternative embodiment, the payment binding management system may further include a current primary payment-bound terminal 1004 of the payment account. Before submitting the payment binding change request to the payment server 1002, the first user terminal 1001 is further configured to submit an adding payment-bound terminal request to the payment server 1002, where the adding payment-bound terminal request carries the payment account and the terminal identification information of the target payment-bound terminal.
Correspondingly, the payment server 1002 is further configured to obtain the adding payment-bound terminal request submitted by the first user terminal 1001, send verification information to the primary payment-bound terminal 1004 of the payment account, and return prompt information to the first user terminal 1001, where the prompt information is used to prompt the user of the first user terminal 1001 to input the verification information.
The first user terminal 1001 is further configured to receive the prompt information returned by the payment server 1002, and send the verification information, input in response to the prompt information by the user, to the payment server 1002.
The payment server 1002 is further configured to obtain the verification information sent in response to the prompt information by the first user terminal 1001, check the verification information sent by the first user terminal 1001 and the verification information sent by the primary payment-bound terminal 1004 of the payment account, and if the comparison is passed, set the target payment-bound terminal 1003 as a secondary payment-bound terminal of the payment account according to the adding payment-bound terminal request.
In an alternative embodiment, the payment server 1002 is further configured to return error prompt information to the first user terminal 1001 when it is determined, according to the terminal identification information of the target payment-bound terminal, that the target payment-bound terminal is not a secondary payment-bound terminal of the payment account or when the checking fails.
It can be seen that, by using the payment binding management system shown in
The client application is configured to submit a payment binding change request to the payment server 1102, where the payment binding change request carries a payment account and terminal identification information of the target payment-bound terminal.
The payment server 1102 is configured to obtain the payment binding change request, determine, according to the terminal identification information of the target payment-bound terminal, whether the target payment-bound terminal 1101 is a secondary payment-bound terminal of the payment account, and if yes, send verification information to the target payment-bound terminal 1101 according to the terminal identification information of the target payment-bound terminal, and return prompt information to the client application, where the prompt information is used to prompt a user of the client application to input the verification information and return the verification information to the server.
The client application is further configured to send the verification information, input in response to the prompt information by the user, to the payment server.
The payment server 1102 is further configured to check the verification information returned by the client application and the verification information sent in advance to the target payment-bound terminal 1101 by the payment server, and if the comparison is passed, set the target payment-bound terminal 1101 as a primary payment-bound terminal of the payment account according to the payment binding change request.
In an alternative embodiment, the payment binding management system may further include a current primary payment-bound terminal 1103 of the payment account.
Before submitting the payment binding change request to the payment server 1102, the client application is further configured to submit an adding payment-bound terminal request to the payment server 1102, where the adding payment-bound terminal request carries the payment account and the terminal identification information of the target payment-bound terminal.
Correspondingly, the payment server 1102 is further configured to obtain the adding payment-bound terminal request submitted by the client application, send verification information to the primary payment-bound terminal 1103 of the payment account, and return prompt information to the client application, where the prompt information is used to prompt the user of the client application to input the verification information.
The client application is further configured to receive the prompt information returned by the payment server 1102, and send the verification information, input in response to the prompt information by the user, to the payment server 1102.
The payment server 1102 is further configured to obtain the verification information returned by the client application in response to the prompt information, and check the verification information returned by the client application and the verification information sent to the primary payment-bound terminal 1103, and if the comparison is passed, set the target payment-bound terminal 1101 as a secondary payment-bound terminal of the payment account according to the adding payment-bound terminal request.
In an alternative embodiment, the payment server 1102 is further configured to return error prompt information to the client application when it is determined, according to the terminal identification information of the target payment-bound terminal, that the target payment-bound terminal is not a secondary payment-bound terminal of the payment account or when the checking fails.
It can be seen that, by using the payment binding management system shown in
While particular embodiments are described above, it will be understood it is not intended to limit the present application to these particular embodiments. On the contrary, the present application includes alternatives, modifications and equivalents that are within the spirit and scope of the appended claims. Numerous specific details are set forth in order to provide a thorough understanding of the subject matter presented herein. But it will be apparent to one of ordinary skill in the art that the subject matter may be practiced without these specific details. In other instances, well-known methods, procedures, components, and circuits have not been described in detail so as not to unnecessarily obscure aspects of the embodiments.
The terminology used in the description of the present application herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the present application. As used in the description of the present application and the appended claims, the singular forms “a,” “an,” and “the” are intended to include the plural forms as well, unless the context clearly indicates otherwise. It will also be understood that the term “and/or” as used herein refers to and encompasses any and all possible combinations of one or more of the associated listed items. It will be further understood that the terms “includes,” “including,” “comprises,” and/or “comprising,” when used in this specification, specify the presence of stated features, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, operations, elements, components, and/or groups thereof.
As used herein, the term “if” may be construed to mean “when” or “upon” or “in response to determining” or “in accordance with a determination” or “in response to detecting,” that a stated condition precedent is true, depending on the context. Similarly, the phrase “if it is determined [that a stated condition precedent is true]” or “if [a stated condition precedent is true]” or “when [a stated condition precedent is true]” may be construed to mean “upon determining” or “in response to determining” or “in accordance with a determination” or “upon detecting” or “in response to detecting” that the stated condition precedent is true, depending on the context.
Although some of the various drawings illustrate a number of logical stages in a particular order, stages that are not order dependent may be reordered and other stages may be combined or broken out. While some reordering or other groupings are specifically mentioned, others will be obvious to those of ordinary skill in the art and so do not present an exhaustive list of alternatives. Moreover, it should be recognized that the stages could be implemented in hardware, firmware, software or any combination thereof.
The foregoing description, for purpose of explanation, has been described with reference to specific embodiments. However, the illustrative discussions above are not intended to be exhaustive or to limit the present application to the precise forms disclosed. Many modifications and variations are possible in view of the above teachings. The embodiments were chosen and described in order to best explain the principles of the present application and its practical applications, to thereby enable others skilled in the art to best utilize the present application and various embodiments with various modifications as are suited to the particular use contemplated.
Number | Date | Country | Kind |
---|---|---|---|
201310586668.4 | Nov 2013 | CN | national |
This application is a continuation application of PCT Patent Application No. PCT/CN2014/079644, entitled “PAYMENT BINDING MANAGEMENT METHOD, PAYMENT SERVER, CLIENT, AND SYSTEM” filed on Jun. 11, 2014, which claims priority to Chinese Patent Application No. 201310586668.4, entitled “PAYMENT BINDING MANAGEMENT METHOD, PAYMENT SERVER, CLIENT, AND SYSTEM,” filed Nov. 19, 2013, both of which are incorporated by reference in their entirety.
Number | Date | Country | |
---|---|---|---|
Parent | PCT/CN2014/079644 | Jun 2014 | US |
Child | 14458122 | US |