Method and system for authentication via communication terminal using short message
The present invention discloses a method and a system for authentication via a communication terminal using short messages, in order to solve the problems that the content of a short message is easy to be leaked out by a proxy SP and that the loss and delay of a short message may lead to repeating user payments. The method includes: sending, by the communication terminal to a payment system via an SP 1 , a short message payment request including a payee's account identifier and a payment amount; creating, by the payment system, a payment record corresponding to the request and sending verification information to the communication terminal via an SP 2 , the verification information including the payee's account identifier and the payment amount; replying, by the communication terminal, confirmation information to the payment system via the SP 2 , upon confirming that the payee's account identifier and the payment amount in the verification information are correct; and performing, by the payment system, a payment operation. The present invention uses a dual channel (SP 1 and SP 2 ) asynchronous transmission mechanism. The situation where any one of the channel is illegally controlled and thus short message information is leaked out can be prevented and the user can cancel a repeated payment in confirmation of the payment.
1. A payment authentication method, comprising:
receiving a short message payment request that is sent by a communication terminal and forwarded by a first short message interaction subsystem, the short message payment request comprising a payee's account identifier and a payment amount;
creating a payment record corresponding to the payment request;
generating and sending verification information to a second short message interaction subsystem that is different from the first short message interaction subsystem, the verification information comprising the payee's account identifier and the payment amount and being forwarded by the second short message interaction subsystem to the communication terminal to be used for confirming whether the payee's account identifier and the payment amount in the verification information are correct, wherein the second short message interaction subsystem is selected from a plurality of second short message interaction subsystems that are each configured to forward verification information to the communication terminal;
receiving confirmation information generated by the communication terminal and forwarded by the second short message interaction subsystem, the confirmation information indicating that the payee's account identifier and the payment amount in the verification information are correct; and
performing a corresponding payment operation according to the payment record upon receiving confirmation information.
2. The method of claim 1 , wherein the second short message interaction subsystem is randomly selected from among the plurality of short message interaction subsystems.
3. The method of claim 1 , further comprising generating a record identifier when creating the payment record, the record identifier being included in the verification information; wherein the confirmation information includes the record identifier.
4. The method of claim 3 , wherein the record identifier is generated randomly and includes a combination of arbitrary number of Alphanumeric characters.
5. The method of claim 1 , further comprising checking whether an account corresponding to the communication terminal and the payee's account identifier already exists; and in the event that the account exists, creating the payment record.
6. The method of claim 1 , wherein the payee's account identifier is an account number, a communication terminal number that has a binding relationship with the account number, an email address, an account holder's name, or a Resident Identity Card number.
7. The method of claim 1 , wherein the payee's account identifier includes a payee's name that has a binding relationship with the payee's account number.
8. The method of claim 1 , further comprising returning an operation result to the communication terminal and a payee's communication terminal that has a binding relationship with the payee's account identifier.
9. A system for payment authentication, comprising:
an interface configured to receive a short message payment request that is sent by a communication terminal and forwarded by a first short message interaction subsystem, the short message payment request comprising a payee's account identifier and a payment amount;
an account management subsystem configured to:
create a payment record corresponding to the payment request;
generate verification information that is sent to a second short message interaction subsystem that is different from the first short message interaction subsystem, the verification information comprising the payee's account identifier and the payment amount and being forwarded by the second short message interaction subsystem to the communication terminal to be used for confirming whether the payee's account identifier and the payment amount in the verification information are correct, wherein the second short message interaction subsystem is selected from a plurality of second short message interaction subsystems that are each configured to forward verification information to the communication terminal;
receive confirmation information generated by the communication terminal and forwarded by the second short message interaction subsystem, the confirmation information indicating that the payee's account identifier and the payment amount in the verification information are correct; and
perform a corresponding payment operation according to the payment record upon receiving confirmation information.
10. The system of claim 9 , wherein the account management subsystem is further configured to randomly select the second short message interaction subsystem from among the plurality of short message interaction subsystems.
11. The system of claim 9 , wherein:
the account management subsystem is further configured to generate a record identifier when creating the payment record, the record identifier being included in the verification information; and
the confirmation information includes the record identifier.
12. The system of claim 11 , wherein the record identifier is generated randomly and includes a combination of arbitrary number of Alphanumeric characters.
13. The system of claim 9 , wherein the account management subsystem is further configured to:
check whether an account corresponding to the communication terminal and the payee's account identifier already exists; and
in the event that the account exists, create the payment record.
14. The system of claim 9 , wherein the payee's account identifier is an account number, a communication terminal number that has a binding relationship with the account number, an email address, an account holder's name, or a Resident Identity Card number.
15. The system of claim 9 , wherein the payee's account identifier includes a payee's name that has a binding relationship with the payee's account number.
16. The system of claim 9 , wherein the account management subsystem is further configured to return an operation result to the communication terminal and a payee's communication terminal that has a binding relationship with the payee's account identifier.