Transaction scheme for offline payment
An authentication factor is received, including an authentication key, an account information of a user, and a dynamic time factor. A bound authentication information is generated by using the authentication factor and a device information of a client device that requested the secure offline payment. The bound authentication information is transmitted to a service server system perform an offline payment authorization based on the bound authentication information. In response to a successful offline payment authorization, a graphical identifier is generated for completing the secure offline payment associated with the authentication factor, where the graphical identifier includes the bound authentication information and a dynamic password generated based on the dynamic time factor.
1. A computer-implemented method, comprising:
receiving, by a service server system, an account identity verification request from a first online client device, the account identity verification request comprising account information associated with a user of the first online client device;
receiving, by the service server system, a verification request from the first online client device for offline payment authorization;
transmitting, by the service server system to the first online client device, an authentication factor generated by performing an encryption using:
an authentication key of a user of the first online client device,
a character string comprising account information of the user and device information of the first online client device that requested a secure offline payment, and
a dynamic time factor generated based on a server time of the service server system;
receiving, by a second offline client device using a connectivity interface, the authentication factor from the first online client device, the second offline client device not having online communication with the service server system;
generating, by the second offline client device, bound authentication information by using the authentication factor and the device information of the first online client device that requested the offline payment authorization;
receiving, by the first online client device using the connectivity interface, the bound authentication information from the second offline client device;
transmitting, by the first online client device to the service server system, the bound authentication information to perform an offline payment authorization based on the bound authentication information;
in response to successful offline payment authorization, generating, by the second offline client device and based upon receiving display instruction from the first online client device, a graphical identifier for completing the secure offline payment associated with the authentication factor; and
displaying, by the second offline client device as a graphical identifier, the graphical identifier, in which a display mode of the graphical identifier is configured to switch between a bar code and a quick response code;
receiving, by the service server system, a payment request generated by a customer server system based upon scanning of the graphical identifier;
verifying, by the service server system, the bound authentication information and validity of a dynamic password according to the dynamic time factor; and
gene rating, by the service server system, a payment result of the payment request.
2. The method of claim 1 , wherein the authentication factor is generated by the service server system.
3. The method of claim 1 , wherein the dynamic password remains unchanged in a same time window, and in a next time window, the dynamic password is updated according to the dynamic time factor, to change dynamically.
4. The method of claim 1 , wherein the dynamic password is determined by using at least the authentication key of the user and the dynamic time factor.
5. A non-transitory, computer-readable medium storing one or more instructions executable by one or more processors to perform operations comprising:
receiving, by a service server system, an account identity verification request from a first online client device, the account identity verification request comprising account information associated with a user of the first online client device;
receiving, by the service server system, a verification request from the first online client device for offline payment authorization;
transmitting, by the service server system to the first online client device, an authentication factor generated by performing an encryption using:
an authentication key of a user of the first online client device,
a character string comprising account information of the user and device information of the first online client device that requested a secure offline payment, and
a dynamic time factor generated based on a server time of the service server system;
receiving, by a second offline client device using a connectivity interface, the authentication factor from the first online client device, the second offline client device not having online communication with the service server system;
generating, by the second offline client device, bound authentication information by using the authentication factor and the device information of the first online client device that requested the offline payment authorization;
receiving, by the first online client device using the connectivity interface, the bound authentication information from the second offline client device;
transmitting, by the first online client device to the service server system, the bound authentication information to perform an offline payment authorization based on the bound authentication information;
in response to successful offline payment authorization, generating, by the second offline client device and based upon receiving display instruction from the first online client device, a graphical identifier for completing the secure offline payment associated with the authentication factor; and
displaying, by the second offline client device as a graphical identifier, the graphical identifier, in which a display mode of the graphical identifier is configured to switch between a bar code and a quick response code;
receiving, by the service server system, a payment request generated by a customer server system based upon scanning of the graphical identifier;
verifying, by the service server system, the bound authentication information and validity of a dynamic password according to the dynamic time factor; and
generating, by the service server system, a payment result of the payment request.
6. The non-transitory, computer-readable medium of claim 5 , wherein the authentication factor is generated by the service server system.
7. The non-transitory, computer-readable medium of claim 5 , wherein the dynamic password remains unchanged in a same time window, and in a next time window, the dynamic password is updated according to the dynamic time factor, to change dynamically.
8. The non-transitory, computer-readable medium of claim 5 , wherein the dynamic password is determined by using at least the authentication key of the user and the dynamic time factor.
9. A computer-implemented system, comprising:
one or more processors; and
one or more computer memory devices interoperably coupled with the one or more processors and having tangible, non-transitory, machine-readable media storing instructions that, when executed by the one or more processors, perform operations comprising:
receiving, by a service server system, an account identity verification request from a first online client device, the account identity verification request comprising account information associated with a user of the first online client device;
receiving, by the service server system, a verification request from the first online client device for offline payment authorization;
transmitting, by the service server system to the first online client device, an authentication factor generated by performing an encryption using:
an authentication key of a user of the first online client device,
a character string comprising account information of the user and device information of the first online client device that requested a secure offline payment, and
a dynamic time factor generated based on a server time of the service server system;
receiving, by a second offline client device using a connectivity interface, the authentication factor from the first online client device, the second offline client device not having online communication with the service server system;
generating, by the second offline client device, bound authentication information by using the authentication factor and the device information of the first online client device that requested the offline payment authorization;
receiving, by the first online client device using the connectivity interface, the bound authentication information from the second offline client device;
transmitting, by the first online client device to the service server system, the bound authentication information to perform an offline payment authorization based on the bound authentication information;
in response to successful offline payment authorization, generating, by the second offline client device and based upon receiving display instruction from the first online client device, a graphical identifier for completing the secure offline payment associated with the authentication factor; and
displaying, by the second offline client device as a graphical identifier, the graphical identifier, in which a display mode of the graphical identifier is configured to switch between a bar code and a quick response code;
receiving, by the service server system, a payment request generated by a customer server system based upon scanning of the graphical identifier;
verifying, by the service server system, the bound authentication information and validity of a dynamic password according to the dynamic time factor; and
generating, by the service server system, a payment result of the payment request.
10. The computer-implemented system of claim 9 , wherein the authentication factor is generated by the service server system.
11. The computer-implemented system of claim 9 , wherein the dynamic password remains unchanged in a same time window, and in a next time window, the dynamic password is updated according to the dynamic time factor, to change dynamically.