Method, apparatus, and system for secure online payment

An apparatus for performing secure payment processing, comprising:

• a first receiving unit configured to receive payment response data indicating that a payment has been completed in a settlement server and having a signature conforming to a predefined rule;
• a sending unit configured to send the payment response data to a payment verification server;
• a second receiving unit configured to receive a verification result from the payment verification server, the verification result indicating whether the payment response data has the signature conforming to the predefined rule;
• and
• a payment determining unit configured to determine, according to the verification result, whether the payment has been completed in the settlement server.

A secure payment processing method, comprising:

• sending, by a client terminal device, a payment request to a settlement server;
• completing, by the settlement server, a payment in response to the payment request and sending, by the settlement server, corresponding payment response data to the client terminal device, the payment response data indicating that the payment has been completed in the settlement server and having a signature conforming to a predefined rule;
• sending, by the client terminal device, the payment response data to a payment verification server;
• verifying, by the payment verification server, whether the payment response data has the signature conforming to the predefined rule;
• sending, by the payment verification server, a verification result to the client terminal device;
• and
• determining, by the client terminal device and according to the verification result, whether the payment has been completed in the settlement server.

A secure payment processing system, comprising:

• a client terminal device configured to send a payment request to a settlement server;
• the settlement server configured to complete a payment in response to the payment request and to send corresponding payment response data to the client terminal device, the payment response data indicating that the payment has been completed in the settlement server and having a signature conforming to a predefined rule;
• and
• a payment verification server configured to receive, from the client terminal device, the corresponding payment response data, to verify whether the payment response data has the signature conforming to the predefined rule, and to send a verification result to the client terminal device,
• wherein the client terminal device is further configured to determine, according to the verification result, whether the payment has been completed in the settlement server.