# US 12,118,539 B2 · Standardisation method and apparatus for erroneous transactions

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,118,539 B2
- Document ID: US12118539B2
- Status: Granted
- Kind: B2
- Application number: 16/318,950
- Filed: 2017-10-24
- Published: 2021-01-21
- Granted: 2024-10-15
- Earliest claimed: 2016-11-29
- Assignees: China Unionpay Co., Ltd.
- Applicants: China Unionpay Co., Ltd.
- Inventors: Hongqiang Guo; Wei Li; Zhen Tang
- Web page: https://patentgrep.com/patent/US12118539B2

## CPC

- G06Q 20/382: {insuring higher security of transaction}
- G06Q 10/08: Logistics, e.g. warehousing, loading or distribution; Inventory or stock management
- G06Q 20/00: Payment architectures, schemes or protocols (apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12)
- G06Q 20/38: Payment protocols; Details thereof
- G06Q 20/3823: {combining multiple encryption tools for a transaction}
- G06Q 20/3825: {Use of electronic signatures}
- G06Q 20/3829: {involving key management}
- G06Q 40/02: Banking, e.g. interest calculation or account maintenance (credit or loans G06Q40/03)
- H04L 67/565: Conversion or adaptation of application format or content (adding application control or application functional data H04L67/561)
- G06Q 20/3821: {Electronic credentials}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A standardisation method and apparatus for erroneous transactions: receiving an erroneous service invocation request sent by a client terminal, and converting the erroneous service invocation request into a standard format exchange message; on the basis of a preset certificate database, encrypting sensitive data areas in the exchange message to generate encrypted message areas; signing key fields in the exchange message to generate signed message areas; and, by means of a two-way authenticated secure communication link, sending the exchange message comprising the encrypted message areas and the signed message areas to a UnionPay erroneous transaction network. The embodiments provide a unified interface for interfacing client terminals to access a UnionPay erroneous transaction network; each UnionPay member institution only needs to invoke the interface assembly provided in the embodiments of the present invention to be able to interface with the UnionPay erroneous transaction network, improving development efficiency and operating stability.

## Claims

### Claim 1

A standardisation method for an erroneous transaction processed using an erroneous transaction standardization assembly, wherein the erroneous transaction standardization assembly has a unified interface for interfacing client terminals of UnionPay member institutions in various operating systems with a UnionPay erroneous transaction network, wherein the method comprises:
determining, by a client terminal of a UnionPay member institution, an erroneous transaction to be processed by the UnionPay erroneous transaction network, which is a bank card erroneous service processing network of UnionPay member institutions;
receiving, by the erroneous transaction standardization assembly, an erroneous service invocation request corresponding to the erroneous transaction and sent by the client terminal via a Java universal interface which is operatable in various operating systems when the client terminal has any erroneous transaction that needs to be processed by the UnionPay erroneous transaction network, wherein specific information of the UnionPay member institution is implemented as configuration parameters of the universal interface and includes at least a UnionPay institution code, user authority, and file path;
converting, by the erroneous transaction standardization assembly, the erroneous service invocation request into an exchange message in a readable invocation form to adapt the UnionPay erroneous transaction network, wherein the erroneous service invocation request is a general program function invocation form, and a message element is input as a function invocation parameter;
on the basis of a preset certificate database, encrypting, by the erroneous transaction standardization assembly, a sensitive data area in the exchange message to generate an encrypted message area, and signing, by the erroneous transaction standardization assembly, a key field in the exchange message to generate a signed message area; and
sending, by the erroneous transaction standardization assembly, the exchange message comprising the encrypted message area and the signed message area to the UnionPay erroneous transaction network through a two-way authenticated secure communication link, to enable the UnionPay erroneous transaction network to process according to a meaning of an erroneous service expressed in the exchange message;
wherein before sending the exchange message comprising the encrypted message area and the signed message area to the UnionPay erroneous transaction network through the secure communication link, the method further comprises:
when the erroneous service invocation request comprises a credential file in a binary encoding form, decoding the credential file; and
encoding the decoded credential file by means of an encoding mode of the UnionPay erroneous transaction network.

### Claim 2 (depends on 1)

The method of claim 1, wherein the exchange message in the readable invocation format comprises an Extensible Markup Language (XML) message tag name and an XML message tag value, and the converting the erroneous service invocation request into the exchange message in the readable invocation format comprises:
converting an invocation method name of the erroneous service invocation request into the XML message tag name according to a preset corresponding relationship between an invocation method name and a message tag; and
converting an invocation method parameter of the erroneous service invocation request into the XML message tag value.

### Claim 3 (depends on 1)

The method of claim 1, wherein the preset certificate database is determined by:
extracting a server public key and a client private key in an asymmetric encryption certificate of China Financial Certificate Authority (CFCA), and determining the preset certificate database by means of the server public key and the client private key, the asymmetric encryption certificate of CFCA being used to access the UnionPay erroneous transaction network.

### Claim 4 (depends on 3)

The method of claim 3, wherein the encrypting the sensitive data area in the exchange message to generate the encrypted message area, on the basis of the preset certificate database comprises:
invoking the server public key in the preset certificate database to encrypt the sensitive data area in the exchange message to generate the encrypted message area.

### Claim 5 (depends on 3)

The method of claim 3, wherein the signing the key field in the exchange message to generate the signed message area comprises:
invoking the client private key in the preset certificate database to sign the key field in the exchange message to generate the signed message area.

### Claim 6 (depends on 3)

The method of claim 3, wherein the two-way authenticated secure communication link is determined by:
invoking the server public key and the client private key in the preset certificate database to establish the two-way authenticated secure communication link with the UnionPay erroneous transaction network according to Hyper Text Transfer Protocol over secure socket layer (HTTPS).

### Claim 7

An electronic device, comprising a processor, a memory, a transceiver and a bus interface, wherein the processor, the memory and the transceiver are connected with one another through the bus interface;
the processor is configured for determining an erroneous transaction to be processed by the UnionPay erroneous transaction network, which is a bank card erroneous service processing network of UnionPay member institutions;
the transceiver is configured for receiving an erroneous service invocation request corresponding to the erroneous transaction via a Java universal interface which is operatable in various operating systems when the client terminal has any erroneous transaction that needs to be processed by the UnionPay erroneous transaction network, wherein specific information of the UnionPay member institution is implemented as configuration parameters of the universal interface and includes at least a UnionPay institution code, user authority, and file path;
the processor is further configured for:
converting the erroneous service invocation request into an exchange message in a readable invocation form to adapt the UnionPay erroneous transaction network, wherein the erroneous service invocation request is a general program function invocation form, and a message element is input as a function invocation parameter;
on the basis of a preset certificate database, encrypting a sensitive data area in the exchange message to generate an encrypted message area; and signing a key field in the exchange message to generate a signed message area; and
sending the exchange message including the encrypted message area and the signed message area to the UnionPay erroneous transaction network through a two-way authenticated secure communication link, to enable the UnionPay erroneous transaction network to process according to a meaning of an erroneous service expressed in the exchange message;
the memory is configured for storing one or more executable programs and data used by the processor during executing operations; and
the bus interface is used for providing interfaces;
wherein the electronic device is a unified interface for interfacing the client terminals in the various operating systems with the UnionPay erroneous transaction network;
wherein the electronic device is suitable for the various operating systems and various middleware products through a Java universal interface technology;
wherein before sending the exchange message comprising the encrypted message area and the signed message area to the UnionPay erroneous transaction network through the secure communication link, the processor is further configured for:
when the erroneous service invocation request comprises a credential file in a binary encoding form, decoding the credential file; and
encoding the decoded credential file by means of an encoding mode of the UnionPay erroneous transaction network.

### Claim 8 (depends on 7)

The device of claim 7, wherein the exchange message in the readable invocation format comprises an Extensible Markup Language (XML) message tag name and an XML message tag value, and the processor converting the erroneous service invocation request into the exchange message in the readable invocation format is configured for:
converting an invocation method name of the erroneous service invocation request into the XML message tag name according to a preset corresponding relationship between an invocation method name and a message tag; and
converting an invocation method parameter of the erroneous service invocation request into the XML message tag value.

### Claim 9 (depends on 7)

The device of claim 7, wherein the preset certificate database is determined by:
extracting a server public key and a client private key in an asymmetric encryption certificate of China Financial Certificate Authority (CFCA), and determining the preset certificate database by means of the server public key and the client private key, the asymmetric encryption certificate of CFCA being used to access the UnionPay erroneous transaction network.

### Claim 10 (depends on 9)

The device of claim 9, wherein the processor encrypting the sensitive data area in the exchange message to generate the encrypted message area, on the basis of the preset certificate database is configured for:
invoking the server public key in the preset certificate database to encrypt the sensitive data area in the exchange message to generate the encrypted message area.

### Claim 11 (depends on 9)

The device of claim 9, wherein the processor signing the key field in the exchange message to generate the signed message area is configured for:
invoking the client private key in the preset certificate database to sign the key field in the exchange message to generate the signed message area.

### Claim 12 (depends on 9)

The device of claim 9, wherein the two-way authenticated secure communication link is determined by:
invoking the server public key and the client private key in the preset certificate database to establish the two-way authenticated secure communication link with the UnionPay erroneous transaction network according to Hyper Text Transfer Protocol over secure socket layer (HTTPS).

### Claim 13 (depends on 1)

A non-transitory computer readable storage medium, storing computer instructions, wherein the computer instructions enable a computer to execute the method of claim 1.

### Claim 14 (depends on 1)

A computer program product, comprising computer programs stored in a non-transitory computer readable storage medium, and the computer programs comprising program instructions, wherein when the program instructions are executed by a computer, the computer is enabled to execute the method of claim 1.

### Claim 15 (depends on 2)

The method of claim 2, wherein before sending the exchange message comprising the encrypted message area and the signed message area to the UnionPay erroneous transaction network through the secure communication link, the method further comprises:
when the erroneous service invocation request comprises a credential file in a binary encoding form, decoding the credential file; and
encoding the decoded credential file by means of an encoding mode of the UnionPay erroneous transaction network.

### Claim 16 (depends on 3)

The method of claim 3, wherein before sending the exchange message comprising the encrypted message area and the signed message area to the UnionPay erroneous transaction network through the secure communication link, the method further comprises:
when the erroneous service invocation request comprises a credential file in a binary encoding form, decoding the credential file; and
encoding the decoded credential file by means of an encoding mode of the UnionPay erroneous transaction network.

### Claim 17 (depends on 8)

The device of claim 8, wherein before sending the exchange message comprising the encrypted message area and the signed message area to the UnionPay erroneous transaction network through the secure communication link, the processor is further configured for:
when the erroneous service invocation request comprises a credential file in a binary encoding form, decoding the credential file; and
encoding the decoded credential file by means of an encoding mode of the UnionPay erroneous transaction network.

### Claim 18 (depends on 9)

The device of claim 9, wherein before sending the exchange message comprising the encrypted message area and the signed message area to the UnionPay erroneous transaction network through the secure communication link, the processor is further configured for:
when the erroneous service invocation request comprises a credential file in a binary encoding form, decoding the credential file; and
encoding the decoded credential file by means of an encoding mode of the UnionPay erroneous transaction network.