# US 9,438,586 B2 · Method and system for processing operation request

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 9,438,586 B2
- Document ID: US9438586B2
- Status: Granted
- Kind: B2
- Application number: 14/781,354
- Filed: 2014-04-01
- Published: 2016-02-04
- Granted: 2016-09-06
- Earliest claimed: 2013-04-03
- Assignees: Tendyron Corporation
- Applicants: Tendyron Corporation
- Inventors: Dongsheng Li
- Web page: https://patentgrep.com/patent/US9438586B2

## CPC

- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards
- G06Q 20/34: using cards, e.g. integrated circuit [IC] cards or magnetic cards
- G06Q 20/352: {Contactless payments by cards}
- G06Q 20/382: {insuring higher security of transaction}
- G06Q 20/3825: {Use of electronic signatures}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)}
- H04L 63/12: {Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

A method for processing an operation request includes: detecting by a terminal an operation request, and sending an operation request message to a smart card; receiving by the smart card the operation request message, storing by the smart card the operation request message, generating by the smart card a joint password, generating a signature message, sending by the smart card at least the signature message to the terminal; outputting by the smart card a prompt message about the joint password, if the smart card detects that the smart card is disconnected from the terminal after the terminal obtains the signature message; receiving by the terminal the joint password, using the joint password as a password to be verified, notifying a verification device by the terminal to verify the signature message, and triggering by the verification device a procedure responding to the operation request if the signature message is successfully verified.

## Claims

### Claim 1

A method for processing an operation request, comprising:
detecting by a terminal an operation request from a user, and sending by the terminal an operation request message of the user to a smart card;
receiving by the smart card the operation request message output from the terminal, storing by the smart card the operation request message, generating by the smart card a joint password according to a password generating strategy pre-stored locally, and after obtaining the joint password, generating by the smart card a signature message according to the operation request message and the joint password, and sending by the smart card at least the signature message to the terminal;
outputting by the smart card a prompt message about the joint password, if the smart card detects that the smart card is disconnected from the terminal after the terminal obtains the signature message;
receiving by the terminal the joint password corresponding to the prompt message, using the joint password corresponding to the prompt message as a password to be verified, notifying a verification device by the terminal to verify the signature message according to the password to be verified and the operation request message, and triggering by the verification device a procedure responding to the operation request if the signature message is successfully verified.

### Claim 2 (depends on 1)

The method according to claim 1, wherein generating a signature message according to the operation request message and the joint password comprises:
obtaining a content adjustment strategy of the operation request message, and processing a content of the operation request message according to the content adjustment strategy of the operation request message to obtain an adjusted operation request message; and/or obtaining a content adjustment strategy of the joint password, and adjusting a content of the joint password according to the content adjustment strategy of the joint password to obtain an adjusted joint password; and
obtaining the signature message by signing any one of following combinations:
the adjusted operation request message and the joint password;
the operation request message and the adjusted joint password;
the adjusted operation request message and the adjusted joint password.

### Claim 3 (depends on 2)

The method according to claim 2, further comprising:
notifying the terminal of the content adjustment strategy used for adjusting the operation request message; or
notifying the terminal of the content adjustment strategy used for adjusting the joint password; or
notifying the terminal of the content adjustment strategy used for adjusting the operation request message and the content adjustment strategy used for adjusting the joint password.

### Claim 4 (depends on 2)

The method according to claim 2, wherein processing a content of the operation request message according to the content adjustment strategy of the operation request message to obtain an adjusted operation request message comprises:
if the content adjustment strategy of the operation request message is to encrypt the operation request message, then obtaining an encryption algorithm corresponding to the operation request according to a pre-stored encryption algorithm allocation strategy, encrypting the operation request according to the encryption algorithm to obtain an encrypted operation request, and using the encrypted operation request as the adjusted operation request message.

### Claim 5 (depends on 2)

The method according to claim 2, wherein adjusting a content of the joint password according to the content adjustment strategy of the joint password to obtain an adjusted joint password comprises:
if the content adjustment strategy of the joint password is to encrypt the joint password, then obtaining an encryption algorithm corresponding to the joint password according to a pre-stored encryption algorithm allocation strategy, encrypting the joint password according to the encryption algorithm to obtain an encrypted joint password, and outputting the encrypted joint password as the adjusted joint password;
if the content adjustment strategy of the joint password is to add a random number to the joint password, then obtaining the random number according to a preset random number generating strategy, obtaining a random number combination strategy corresponding to the joint password according to preset random number combination strategies, processing the joint password according to the random number and the random number combination strategy to obtain the adjusted joint password, and notifying the terminal of the random number and the random number combination strategy used for adjusting the joint password;
if the content adjustment strategy of the joint password is to add a random number to the joint password and to encrypt the joint password added with the random number, then obtaining the random number according to a preset random number generating strategy, obtaining a random number combination strategy corresponding to the joint password according to preset random number combination strategies, processing the joint password according to the random number and the random number combination strategy to obtain a processed joint password, obtaining an encryption algorithm corresponding to the processed joint password according to a pre-stored encryption algorithm allocation strategy, encrypting the processed joint password according to the encryption algorithm to obtain an encrypted and processed joint password, outputting the encrypted and processed joint password as the adjusted joint password, and notifying the terminal of the random number and the random number combination strategy used for adjusting the joint password;
if the content adjustment strategy of the joint password is to encrypt the joint password so as to obtain an encrypted joint password and to add a random number to the encrypted joint password, then obtaining an encryption algorithm corresponding to the joint password according to a pre-stored encryption algorithm allocation strategy, encrypting the joint password according to the encryption algorithm to obtain the encrypted joint password, obtaining the random number according to a preset random number generating strategy, obtaining a random number combination strategy corresponding to the encrypted joint password according to preset random number combination strategies, processing the encrypted joint password according to the random number and the random number combination strategy to obtain an encrypted and processed joint password, outputting the encrypted and processed joint password as the adjusted joint password, and notifying the terminal of the random number and the random number combination strategy used for adjusting the joint password.

### Claim 6 (depends on 1)

The method according to claim 1, wherein outputting by the smart card a prompt message about the joint password comprises:
verifying an identity of a requester requesting to output the joint password according to a preset identity verification strategy; and
outputting the joint password if the identity is successfully verified.

### Claim 7 (depends on 1)

The method according to claim 1, wherein the password to be verified is obtained in any of following ways:
detecting information input via an input device of the terminal to obtain a detecting result, and obtaining the password to be verified according to the detecting result;
if the smart card displays barcode information or graphic information of the joint password via a display screen, scanning the barcode information or graphic information of the joint password to obtain the password to be verified;
establishing a contactless communication connection with the smart card, receiving the joint password sent by the smart card via the contactless communication connection, and using the joint password as the password to be verified.

### Claim 8 (depends on 1)

The method according to claim 1, wherein the verification device is built into the terminal and/or a background server.

### Claim 9 (depends on 8)

The method according to claim 8, wherein notifying a verification device by the terminal to verify the signature message according to the password to be verified and the operation request message comprises any of following ways:
directly verifying the signature message by the verification device in the terminal according to the password to be verified and the operation request message; or
sending by the terminal at least the password to be verified, the operation request message and the signature message to the verification device in the background server, and instructing the verification device in the background server to verify the signature message according to the password to be verified and the operation request message.

### Claim 10 (depends on 9)

The method according to claim 9, further comprising:
if the signature message is to be verified by the verification device in the background server, obtaining by the terminal the content adjustment strategy of the joint password from the smart card, in which the joint password processed according to the content adjustment strategy of the joint password is used for generating the signature message, and/or obtaining by the terminal the content adjustment strategy of the operation request message from the smart card, in which the operation request message processed according to the content adjustment strategy of the operation request message is used for generating the signature message; and
sending by the terminal the content adjustment strategy of the joint password and/or the content adjustment strategy of the operation request message to the verification device in the background server for verifying the signature message.

### Claim 11

A method for processing an operation request, comprising:
detecting by a terminal an operation request from a user, and sending by the terminal an operation request message of the user to a smart card;
receiving by the smart card the operation request message output from the terminal, signing by the smart card the operation request message according to a preset signature generating strategy to obtain a signature message, generating by the smart card a joint password according to a password generating strategy pre-stored locally, adjusting by the smart card a content of the joint password according to a preset joint password adjustment strategy to obtain an adjusted joint password, and sending by the smart card the adjusted joint password and the signature message to the terminal;
outputting by the smart card a prompt message about the joint password, if the smart card detects that the smart card is disconnected from the terminal after the terminal obtains the signature message and the adjusted joint password;
receiving by the terminal the joint password corresponding to the prompt message, using the joint password corresponding to the prompt message as a password to be verified, notifying a verification device by the terminal to verify the signature message and the password to be verified, and triggering by the verification device a procedure responding to the operation request if the signature message and the password to be verified are successfully verified.

### Claim 12 (depends on 11)

The method according to claim 11, wherein adjusting a content of the joint password according to a preset joint password adjustment strategy to obtain an adjusted joint password comprises:
if the joint password adjustment strategy is to encrypt the joint password, then obtaining an encryption algorithm corresponding to the joint password according to a pre-stored encryption algorithm allocation strategy, encrypting the joint password according to the encryption algorithm to obtain an encrypted joint password, and outputting the encrypted joint password as the adjusted joint password;
if the joint password adjustment strategy is to add a random number to the joint password, then obtaining the random number according to a preset random number generating strategy, obtaining a random number combination strategy corresponding to the joint password according to preset random number combination strategies, processing the joint password according to the random number and the random number combination strategy to obtain a processed joint password, outputting the processed joint password as the adjusted joint password, and notifying the terminal of the random number and the random number combination strategy used for adjusting the joint password;
if the joint password adjustment strategy is to add a random number to the joint password and to encrypt the joint password added with the random number, then obtaining the random number according to a preset random number generating strategy, obtaining a random number combination strategy corresponding to the joint password according to preset random number combination strategies, processing the joint password according to the random number and the random number combination strategy to obtain a processed joint password, obtaining an encryption algorithm corresponding to the processed joint password according to a pre-stored encryption algorithm allocation strategy, encrypting the processed joint password according to the encryption algorithm to obtain an encrypted and processed joint password, outputting the encrypted and processed joint password as the adjusted joint password, and notifying the terminal of the random number and the random number combination strategy used for adjusting the joint password;
if the joint password adjustment strategy is to encrypt the joint password so as to obtain an encrypted joint password and to add a random number to the encrypted joint password, then obtaining an encryption algorithm corresponding to the joint password according to a pre-stored encryption algorithm allocation strategy, encrypting the joint password according to the encryption algorithm to obtain the encrypted joint password, obtaining the random number according to a preset random number generating strategy, obtaining a random number combination strategy corresponding to the encrypted joint password according to preset random number combination strategies, processing the encrypted joint password according to the random number and the random number combination strategy to obtain an encrypted and processed joint password, outputting the encrypted and processed joint password as the adjusted joint password, and notifying the terminal of the random number and the random number combination strategy used for adjusting the joint password.

### Claim 13 (depends on 11, 12)

The method according to claim 11 or 12, wherein the verification device is built into the terminal and/or a background server.

### Claim 14 (depends on 13)

The method according to claim 13, wherein notifying a verification device by the terminal to verify the signature message and the password to be verified comprises any of:
verifying the password to be verified and the signature message respectively by the verification device in the terminal;
sending by the terminal at least the password to be verified, the operation request message and the signature message to the verification device in the background server, and instructing the verification device in the background server to verify the password to be verified and the signature message;
verifying the password to be verified by the verification device in the terminal, sending by the terminal at least the signature message, the password to be verified and the operation request message to the background server, if the password to be verified is successfully verified, and instructing the verification device in the background server to verify the signature message;
verifying the signature message by the verification device in the terminal, sending by the terminal at least the password to be verified to the background server, if the signature message is successfully verified, and instructing the verification device in the background server to verify the password to be verified.

### Claim 15

A system for processing an operation request, wherein the system comprises a terminal, a smart card and a verification device, the terminal comprises a first sending module and a notifying module, the smart card comprises a first generating module, a second generating module, an adjusting module, a second sending module and an output module, and the verification device comprises a trigger module, in which,
the first sending module is configured to send an operation request message of a user to the smart card after detecting an operation request from the user;
the first generating module is connected with the first sending module and configured to generate a signature message by signing the operation request message according to a preset signature generating strategy after obtaining the operation request message output from the terminal;
the second generating module is configured to generate a joint password according to a password generating strategy pre-stored locally;
the adjusting module is connected with the second generating module and configured to adjust a content of the joint password according to a preset joint password adjustment strategy to obtain an adjusted joint password;
the second sending module is connected with the first generating module and the adjusting module respectively and configured to send the adjusted joint password and the signature message to the terminal;
the output module is configured to output a prompt message about the joint password, if the smart card detects that the smart card is disconnected from the terminal after the terminal obtains the signature message and the adjusted joint password;
the notifying module is configured to use the joint password corresponding to the prompt message as a password to be verified after receiving the joint password corresponding to the prompt message, and to notify the verification device to verify the signature message and the password to be verified;
the trigger module is configured to trigger a procedure responding to the operation request if the signature message and the password to be verified are successfully verified.

### Claim 16 (depends on 15)

The system according to claim 15, wherein the adjusting module is configured to adjust the content of the joint password in any of following ways:
if the joint password adjustment strategy is to encrypt the joint password, then obtaining an encryption algorithm corresponding to the joint password according to a pre-stored encryption algorithm allocation strategy, encrypting the joint password according to the encryption algorithm to obtain an encrypted joint password, and outputting the encrypted joint password as the adjusted joint password;
if the joint password adjustment strategy is to add a random number to the joint password, then obtaining the random number according to a preset random number generating strategy, obtaining a random number combination strategy corresponding to the joint password according to preset random number combination strategies, processing the joint password according to the random number and the random number combination strategy to obtain a processed joint password, outputting the processed joint password as the adjusted joint password, and notifying the terminal of the random number and the random number combination strategy used for adjusting the joint password;
if the joint password adjustment strategy is to add a random number to the joint password and to encrypt the joint password added with the random number, then obtaining the random number according to a preset random number generating strategy, obtaining a random number combination strategy corresponding to the joint password according to preset random number combination strategies, processing the joint password according to the random number and the random number combination strategy to obtain a processed joint password, obtaining an encryption algorithm corresponding to the processed joint password according to a pre-stored encryption algorithm allocation strategy, encrypting the processed joint password according to the encryption algorithm to obtain an encrypted and processed joint password, outputting the encrypted and processed joint password as the adjusted joint password, and notifying the terminal of the random number and the random number combination strategy used for adjusting the joint password;
if the joint password adjustment strategy is to encrypt the joint password so as to obtain an encrypted joint password and to add a random number to the encrypted joint password, then obtaining an encryption algorithm corresponding to the joint password according to a pre-stored encryption algorithm allocation strategy, encrypting the joint password according to the encryption algorithm to obtain the encrypted joint password, obtaining the random number according to a preset random number generating strategy, obtaining a random number combination strategy corresponding to the encrypted joint password according to preset random number combination strategies, processing the encrypted joint password according to the random number and the random number combination strategy to obtain an encrypted and processed joint password, outputting the encrypted and processed joint password as the adjusted joint password, and notifying the terminal of the random number and the random number combination strategy used for adjusting the joint password.

### Claim 17 (depends on 15)

The system according to claim 15, wherein the verification device is built into the terminal and/or a background server.

### Claim 18 (depends on 17)

The system according to claim 17, wherein the verification device is configured to verify the password to be verified and the signature message in any of following ways:
verifying the password to be verified and the signature message respectively by the verification device in the terminal;
sending by the terminal at least the password to be verified, the operation request message and the signature message to the verification device in the background server, and instructing the verification device in the background server to verify the password to be verified and the signature message;
verifying the password to be verified by the verification device in the terminal, sending by the terminal at least the signature message, the password to be verified and the operation request message to the background server if the password to be verified is successfully verified, and instructing the verification device in the background server to verify the signature message;
verifying the signature message by the verification device in the terminal, sending by the terminal at least the password to be verified to the background server if the signature message is successfully verified, and instructing the verification device in the background server to verify the password to be verified.

### Claim 19 (depends on 3)

The method according to claim 3, wherein processing a content of the operation request message according to the content adjustment strategy of the operation request message to obtain an adjusted operation request message comprises:
if the content adjustment strategy of the operation request message is to encrypt the operation request message, then obtaining an encryption algorithm corresponding to the operation request according to a pre-stored encryption algorithm allocation strategy, encrypting the operation request according to the encryption algorithm to obtain an encrypted operation request, and using the encrypted operation request as the adjusted operation request message.

### Claim 20 (depends on 3)

The method according to claim 3, wherein adjusting a content of the joint password according to the content adjustment strategy of the joint password to obtain an adjusted joint password comprises:
if the content adjustment strategy of the joint password is to encrypt the joint password, then obtaining an encryption algorithm corresponding to the joint password according to a pre-stored encryption algorithm allocation strategy, encrypting the joint password according to the encryption algorithm to obtain an encrypted joint password, and outputting the encrypted joint password as the adjusted joint password;
if the content adjustment strategy of the joint password is to add a random number to the joint password, then obtaining the random number according to a preset random number generating strategy, obtaining a random number combination strategy corresponding to the joint password according to preset random number combination strategies, processing the joint password according to the random number and the random number combination strategy to obtain the adjusted joint password, and notifying the terminal of the random number and the random number combination strategy used for adjusting the joint password;
if the content adjustment strategy of the joint password is to add a random number to the joint password and to encrypt the joint password added with the random number, then obtaining the random number according to a preset random number generating strategy, obtaining a random number combination strategy corresponding to the joint password according to preset random number combination strategies, processing the joint password according to the random number and the random number combination strategy to obtain a processed joint password, obtaining an encryption algorithm corresponding to the processed joint password according to a pre-stored encryption algorithm allocation strategy, encrypting the processed joint password according to the encryption algorithm to obtain an encrypted and processed joint password, outputting the encrypted and processed joint password as the adjusted joint password, and notifying the terminal of the random number and the random number combination strategy used for adjusting the joint password;
if the content adjustment strategy of the joint password is to encrypt the joint password so as to obtain an encrypted joint password and to add a random number to the encrypted joint password, then obtaining an encryption algorithm corresponding to the joint password according to a pre-stored encryption algorithm allocation strategy, encrypting the joint password according to the encryption algorithm to obtain the encrypted joint password, obtaining the random number according to a preset random number generating strategy, obtaining a random number combination strategy corresponding to the encrypted joint password according to preset random number combination strategies, processing the encrypted joint password according to the random number and the random number combination strategy to obtain an encrypted and processed joint password, outputting the encrypted and processed joint password as the adjusted joint password, and notifying the terminal of the random number and the random number combination strategy used for adjusting the joint password.