Patent Description:
With development of intelligent terminals, online transaction by using an intelligent terminal becomes popular. An existing technical solution for completing online payment is based on a user name/password or SMS message mechanism. The user name/password or SMS message mechanism is easily attacked by a payment virus, and the payment virus may read a user SMS message. The "user SMS message" herein includes a verification code for a payment transaction of a user. The payment virus may further embed malicious code into a payment application in a re-packaging manner. Consequently, software can be downloaded and installed without permission of the user, and a malicious sub package may also be installed to further steal a bank account and password of the user and steal funds in the account of the user. This greatly threatens payment security of a payment client on an intelligent terminal.

Therefore, a security problem of online payment performed by a user by using an intelligent terminal needs to be urgently resolved.

<CIT> discloses a secure payment method, a mobile device and a secure payment system. The secure payment method including steps of: transmitting an encrypted payment request packet from a payment service provider to a mobile device; receiving the encrypted payment request packet by a first operating system running within a normal domain of the mobile device; bypassing the encrypted payment request packet to a second operating system running within a secured domain on the mobile device; decrypting payment request data from the encrypted payment request packet under the secured domain; generating payment response data according to the payment request data under the secured domain; encrypting the payment response data into an encrypted payment response packet under the secured domain; bypassing the encrypted payment response packet to the first operating system under the normal domain; and, transmitting the encrypted payment response packet to the payment service provider.

In order to solve the above mentioned problem, the present invention provides a wearable electronic device according to claim <NUM>, a data processing method according to claim <NUM>, and a data processing system according to claim <NUM>, so as to resolve a security problem of online payment performed by a user by using an intelligent terminal.

According to a first aspect, an embodiment of the present invention provides a wearable electronic device, where the wearable electronic device includes: a processor, a memory, a communications unit, an input unit, and a data processing unit. The memory is configured to store software programs and modules of a first operating system and a second operating system. The processor is configured to switch the first operating system to the second operating system according to a first operation instruction that is entered by a user and received by the input unit. The communications unit is configured to receive, by using a first application supported by the second operating system, first information sent by an intelligent terminal, where the first information includes transaction data for completing online payment. The processor is further configured to determine, according to a second operation instruction that is entered by the user and received by the input unit, that the first information received by the communications unit is correct. The data processing unit is configured to perform, by using the second operating system, encryption or signature processing on the first information that is determined to be correct by the processor, to obtain second information. The communications unit is further configured to send, to the intelligent terminal by using the first application, the second information obtained by the data processing unit.

With reference to the first aspect, in a first possible implementation of the first aspect, the input unit is further configured to receive the second operation instruction entered by the user, and the second operation instruction is used to indicate that the first information is correct.

With reference to the first aspect, the communications unit is further configured to establish a communication connection to the intelligent terminal in a wireless access mode, after the first operating system is switched to the second operating system; the processor is further configured to determine, according to a service request instruction that is sent by the intelligent terminal and received by the communications unit, to run the first application supported by the second operating system; and the communications unit is further configured to send, to the intelligent terminal, a response message indicating that the first application has already been run.

With reference to any one of the foregoing possible implementations, in a third possible implementation of the first aspect, the input unit is further configured to receive the first operation instruction entered by the user, and the first operation instruction is used to switch the first operating system to the second operating system.

With reference to any one of the foregoing possible implementations, in a fourth possible implementation of the first aspect, the first operation instruction and the second operation instruction are any one type of: voice instructions, fingerprint instructions, or keyboard instructions.

According to a second aspect, an embodiment of the present invention provides a data processing method, where the method includes: switching a first operating system to a second operating system according to a received first operation instruction that is entered by a user; receiving, by using a first application supported by the second operating system, first information sent by an intelligent terminal, where the first information includes transaction data for completing online payment; determining, according to a received second operation instruction that is entered by the user, that the first information is correct; performing encryption or signature processing on the first information by using the second operating system, to obtain second information; and sending the second information to the intelligent terminal by using the first application.

With reference to the second aspect, in a first possible implementation of the second aspect, before the determining, according to a received second operation instruction that is entered by the user, that the first information is correct, the method further includes: receiving the second operation instruction, where the second operation instruction is used to indicate that the first information is correct.

With reference to the second aspect, before the receiving, by using a first application supported by the second operating system, first information sent by an intelligent terminal, the method further includes: establishing a communication connection to the intelligent terminal in a wireless access mode; determining, according to a service request instruction sent by the intelligent terminal, to run the first application supported by the second operating system; and sending, to the intelligent terminal, a response message indicating that the first application has already been run.

With reference to any one of the foregoing possible implementations, in a third possible implementation of the second aspect, before the switching a first operating system to a second operating system according to a received first operation instruction that is entered by a user, the method further includes: receiving the first operation instruction entered by the user, where the first operation instruction is used to switch the first operating system to the second operating system.

With reference to any one of the foregoing possible implementations, in a fourth possible implementation of the second aspect, the first operation instruction and the second operation instruction are any one type of: voice instructions, fingerprint instructions, or keyboard instructions.

According to a third aspect, an embodiment of the present invention provides a data processing system, where the system includes an intelligent terminal and a wearable electronic device. The intelligent terminal is configured to send first information to the wearable electronic device, where the first information includes transaction data for completing online payment. The wearable electronic device is configured to: switch the first operating system to the second operating system according to a received first operation instruction that is entered by a user; receive, by using a first application supported by the second operating system, the first information sent by the intelligent terminal; when determining that the first information is correct, perform encryption or signature processing on the first information, to obtain second information; and send the second information to the intelligent terminal.

With reference to the third aspect, the intelligent terminal is further configured to: establish a communication connection to the wearable electronic device in a wireless access mode, after the first operating system is switched to the second operating system, and send a service request instruction to the wearable electronic device, where the service request instruction is used to instruct the wearable electronic device to determine to run the first application supported by the second operating system; and the wearable electronic device is further configured to: receive the service request instruction; determine, according to the service request instruction, to run the first application supported by the second operating system; and send, to the intelligent terminal, a response message indicating that the first application has already been run.

With reference to the third aspect or the first possible implementation of the third aspect, in a second possible implementation of the third aspect, the wearable electronic device is further configured to: receive a second operation instruction entered by the user, and determine, according to the second operation instruction, that the first information is correct, where the second operation instruction is used to indicate that the first information is correct.

With reference to any one of the foregoing possible implementations, in a third possible implementation of the third aspect, the first operation instruction and the second operation instruction are any one type of: voice instructions, fingerprint instructions, or keyboard instructions.

Based on the foregoing technical solutions, according to the wearable electronic device, and the data processing method and system that are provided in the embodiments of the present invention, encryption or signature processing is performed, by using a second operating system, on first information that is used to complete online payment and sent by an intelligent terminal, to obtain second information, and the second information is fed back to the intelligent terminal, so that the intelligent terminal obtains the second information to complete the online payment, thereby resolving a security problem of online payment performed by a user by using an intelligent terminal.

The following clearly and completely describes the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Apparently, the described embodiments are some rather than all of the embodiments of the present invention. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts shall fall within the protection scope of the present invention.

It should be understood that, in the embodiments of the present invention, an intelligent terminal may be a device such as a smartphone or a tablet computer. The embodiments of the present invention set no limitation thereto.

It should further be understood that, in the embodiments of the present invention, a wearable electronic device is an intelligently designed device that is worn by a user, for example, intelligently designed clothes or accessories. Specifically, in the embodiments of the present invention, the wearable electronic device may be a device such as a smart band, a smart watch, or smart glasses. The embodiments of the present invention set no limitation thereto.

<FIG> is a schematic block diagram of a wearable electronic device <NUM> according to an embodiment of the present invention. The wearable electronic device <NUM> shown in <FIG> includes: a processor <NUM>, a memory <NUM>, a communications unit <NUM>, an input unit <NUM>, and a data processing unit <NUM>.

The memory <NUM> is configured to store software programs and modules of a first operating system and a second operating system.

The processor <NUM> is configured to switch the first operating system to the second operating system according to a first operation instruction that is entered by a user and received by the input unit <NUM>.

The communications unit <NUM> is configured to receive, by using a first application supported by the second operating system, first information sent by an intelligent terminal, where the first information includes transaction data for completing online payment.

The processor <NUM> is further configured to determine, according to a second operation instruction that is entered by the user and received by the input unit <NUM>, that the first information received by the communications unit <NUM> is correct.

The data processing unit <NUM> is configured to perform, by using the second operating system, encryption or signature processing on the first information that is determined to be correct by the processor <NUM>, to obtain second information.

The communications unit <NUM> is further configured to send, to the intelligent terminal by using the first application, the second information obtained by the data processing unit <NUM>.

Specifically, in this embodiment of the present invention, the processor <NUM> of the wearable electronic device <NUM> switches, according to the first operation instruction that is entered by the user and received by the input unit <NUM>, the frequently used first operating system such as an Android system that is stored in the memory <NUM> to the second operating system that has a security feature and that is stored in the memory <NUM>, and determines, according to the second operation instruction received by the input unit <NUM>, that the first information that is sent by the intelligent terminal and received by the communications unit <NUM> by using the first application supported by the second operating system is correct. The first information includes the transaction data for completing online payment. The data processing unit <NUM> performs, by using the second operating system, encryption or signature processing on the first information that is determined to be correct by the processor <NUM>, to obtain the second information. The communications unit <NUM> sends, to the intelligent terminal by using the first application supported by the second operating system, the second information obtained by the data processing unit <NUM>, so that the intelligent terminal obtains the second information to complete online payment.

Therefore, the wearable electronic device provided in this embodiment of the present invention performs, by using a second operating system, encryption or signature processing on first information that is used to complete online payment and sent by an intelligent terminal, to obtain second information, and feeds back the second information to the intelligent terminal, so that the intelligent terminal obtains the second information to complete the online payment, thereby resolving a security problem of online payment performed by a user by using an intelligent terminal.

It should be understood that, in this embodiment of the present invention, the security feature of the second operating system is embodied as follows: First, a startup process of the second operating system is secure, that is, step-by-step signature authentication is required during each time of startup, to ensure that the system is not tampered; second, the second operating system has a strict software entry, and a software source of the second operating system is strictly controlled by means of software auditing and code signing, to ensure that no malicious software enters; thirdly, the second operating system provides limited functions and occupies quite small memory space, and therefore, a vulnerability possibility is greatly reduced; fourthly, the second operating system does not run when the first operating system (for example, the frequently used Android system) is running, to ensure that the second operating system suffers no security attack from the first operating system; and fifthly, only this operating system provides an interface for accessing the data processing unit <NUM>, for example, the second operating system may be a simple graphics system.

It should be noted that, in this embodiment of the present invention, the wearable electronic device <NUM> shown in <FIG> further includes components such as a display unit <NUM>, a peripheral interface <NUM>, and a power supply <NUM>. The components shown in <FIG> may communicate with each other by using one or more buses. A person skilled in the art may understand that a structure of the wearable electronic device <NUM> shown in <FIG> does not constitute a limitation on the present invention. The structure may be a bus structure, or may be a star structure. The wearable electronic device <NUM> may further include more or fewer components than those shown in the figure, or combine some components, or have different component arrangements.

It should further be noted that the wearable electronic device <NUM> provided in this embodiment is merely an example, and the wearable electronic device <NUM> involved in this embodiment of the present invention may have more or fewer components than those shown in <FIG>, may combine two or more components, or may have different component configurations or settings. Each component may be implemented in hardware, software, or a combination of hardware and software that includes one or more signal processors and/or application-specific integrated circuits.

The following specifically describes all components that are included in the wearable electronic device <NUM> shown in <FIG>.

The processor <NUM> is used as a control center of the wearable electronic device, may connect to the components of the entire electronic device by using various interfaces and lines, and execute various functions of the electronic device and/or process data by running or executing a software program and/or a module stored in the memory <NUM> and by invoking data stored in the memory <NUM>.

The processor <NUM> may include an integrated circuit (Integrated Circuit, IC), for example, may include a single packaged IC, or may include multiple packaged ICs having a same function or different functions.

In this embodiment of the present invention, the processor <NUM> may include a central processing unit (Central Processing Unit, CPU), or may include a combination of a graphics processing unit (Graphic Processing Unit, GPU), a digital signal processor (Digital Signal Processor, DSP), and a control chip (for example, a baseband chip) or a field programmable gate array (Field Programmable Gate Array, FPGA) chip in the communications unit. In this embodiment of the present invention, the CPU may include a single computing core, or may include multiple computing cores. This embodiment of the present invention sets no limitation thereto.

The memory <NUM> may be configured to store a software program and a module, and the processor <NUM> executes various function applications of the wearable electronic device <NUM> and processes data by running the software program and the module that are stored in the memory <NUM>. Specifically, in this embodiment of the present invention, the memory <NUM> may store two operating systems, a first operating system is a frequently used operating system (for example, the Android system), and a second operating system is a simplified operating system (for example, a simplified graphics system). The two operating systems cannot be run at the same time, and need to be switched by using a switch (an element in the input unit). When payment is required, the user needs to actively switch the first operating system to the second operating system.

The memory <NUM> mainly includes a program storage area and a data storage area. The program storage area may store an operating system and an application program required by at least one function, for example, a sound playing program or an image playing program. The data storage area may store data (for example, audio data or a phone book) and the like that are created according to use of the electronic device.

In this embodiment of the present invention, the memory <NUM> may include a volatile memory such as a nonvolatile random access memory (Nonvolatile Random Access Memory, NVRAM), a phase change random access memory (Phase Change RAM, PRAM), and a magnetoresistive random access memory (Magnetoresistive RAM, MRAM), or may include a nonvolatile memory such as at least one magnetic disk storage device, an electrically erasable programmable read-only memory (Electrically Erasable Programmable Read-Only Memory, EEPROM), and a flash storage device, for example, a NOR flash memory (NOR flash memory) or a NAND flash memory (NAND flash memory).

The communications unit <NUM> may be configured to establish a communication channel, so that the wearable electronic device <NUM> connects to a remote server or an intelligent terminal (for example, a mobile phone or a tablet computer) by using the communication channel, sends data to the remote server or the intelligent terminal, and receives data from the remote server or the intelligent terminal.

In this embodiment of the present invention, the communications unit <NUM> may include a module used for wireless communication such as a wireless local area network (Wireless Local Area Network, WLAN) module, a Bluetooth module, a near field communication (Near Field Communication, NFC) module, or a baseband module, and a radio frequency (Radio Frequency, RF) circuit that corresponds to the communications unit and that is used for wireless local area network communication, Bluetooth communication, infrared communication, and/or cellular communications system communication.

The input unit <NUM> may be configured to implement interaction between the user and the wearable electronic device <NUM> and/or input of information entered by the user into the wearable electronic device <NUM>. For example, the input unit <NUM> may receive digit or character information that is entered by the user, to generate signal input related to user settings or function control.

Specifically, in this embodiment of the present invention, the input unit <NUM> may include a touch panel <NUM> and another input device <NUM>. The touch panel <NUM> is also referred to as a touchscreen, may collect a touch operation (for example, an operation of the user on the touch panel <NUM> or near the touch panel <NUM> by using any proper object or accessory such as a finger or a stylus) of the user on or near the touch panel <NUM>, and drive a corresponding connecting apparatus according to a preset program.

Optionally, the touch panel <NUM> may include two parts: a touch detection apparatus and a touch controller. The touch detection apparatus detects a touch position of the user, detects a signal brought by a touch operation, and transmits the signal to the touch controller. The touch controller receives touch information from the touch detection apparatus, converts the touch information into coordinates of a touch point, then sends the coordinates of the touch point to the processor <NUM>, and may receive and execute a command sent by the processor <NUM>. In addition, the touch panel <NUM> may be of multiple types such as a resistance type, a capacitance type, an infrared type, or a surface acoustic wave type.

In addition to the touch panel <NUM>, the input unit <NUM> may further include the another input device <NUM>. Specifically, the another input device <NUM> may include but is not limited to one or more of a physical keyboard, a function key (for example, a volume control key or an on/off key), a trackball, a mouse, a joystick, or the like.

The data processing unit <NUM> may implement sensitive data storage and secure computing. The data processing unit <NUM> has a built-in CPU, memory (SRAM or Flash), and chip operating system (COS), and may store a key or a digital certificate of the user. In addition, the data processing unit has a built-in algorithm engine, including a public key algorithm engine, a symmetric algorithm engine, a hash algorithm engine, and a random number generator, to implement data encryption or signature processing.

The public key algorithm engine is configured to implement public key encryption, and the public key encryption refers to using a private key that needs to be private to an unauthorized user and a public key that may be public to any user. The public key is associated with the private key, and both the two keys are unique for a communication session. Data encrypted by using the public key may be decrypted only by using the private key, and data signed by using the private key may be authenticated only by using the public key. Because data needs to be encrypted by using a key and needs to be decrypted by using another key, a public key encryption algorithm is also referred to as an asymmetric algorithm.

The symmetric algorithm engine is configured to implement symmetric encryption, and a symmetric encryption algorithm refers to using a single private key to encrypt and decrypt data. Because any one having the key may decrypt the data by using the key, it is necessary to prevent the key from being obtained by an unauthorized agent. Because a same key is used for both encryption and decryption, the symmetric encryption algorithm is also referred to as a private key encryption algorithm.

The hash algorithm engine is configured to implement hash function encryption, and a hash function is sometimes also referred to as a message-digest function, a hash function, or a hash function. In a process of hash function encryption, a key is not necessarily used, but many crypto algorithms are involved. Input data may be output as a hash value with a relatively short fixed length. This process is unidirectional, and a reverse operation is difficult to complete. In addition, a probability of generating a same hash value for two different inputs is quite small.

The random number generator is configured to generate a random number, and may generate a random encryption key during an encryption operation, so that the generated key hardly reappears. This is conducive to security of data transmission.

In this embodiment of the present invention, the data processing unit <NUM> may further support a security interface such as a <NUM> interface or a serial peripheral interface (Serial Peripheral Interface, SPI), and may also support a chip-level security detection and protection mechanism.

Specifically, in this embodiment of the present invention, the data processing unit <NUM> may store unique key information, to ensure that only information that is processed by using a key stored in the data processing unit <NUM> may be accepted by a payment organization. The data processing unit <NUM> may store a corresponding certificate and key of the user in the payment organization, and the certificate of the user is also stored on a platform side of the payment organization, so that it may be ensured, by using a unique correspondence between the certificate and the key, that a transaction is completed by an entity (the wearable electronic device <NUM>) having the key. That is, the data processing unit <NUM> may store a key (a certificate) related to payment, bank card information, and the like, and the key may totally be randomly generated in the data processing unit <NUM> and stored in the data processing unit <NUM>, so as to ensure that the key is not exported from the data processing unit <NUM>. Because the data processing unit <NUM> stores the corresponding certificate and a private key corresponding to the certificate that are of the user in the payment organization, and the private key cannot be exported, only data that is encrypted or signed by using the private key may be authenticated on a server (the payment organization is on a platform side of the server), so as to ensure that the transaction may be completed only when the data processing unit <NUM> is used.

The wearable electronic device <NUM> further includes the display unit <NUM> that may be configured to display information entered by the user, information provided for the user, and various menus of the wearable electronic device <NUM>. The display unit <NUM> may include a display panel <NUM>, and optionally, the display panel <NUM> may be configured in a form of an LCD (Liquid Crystal Display, liquid crystal display), an OLED (Organic Light-Emitting Diode, organic light-emitting diode), or the like.

Further, the touch panel <NUM> may cover the display panel <NUM>. When detecting a touch operation on or near the touch panel <NUM>, the touch panel <NUM> transmits the touch operation to the processor <NUM>, to determine a type of a touch event, and then the processor <NUM> provides corresponding visual output on the display panel <NUM> according to the type of the touch event.

Although the touch panel <NUM> and the display panel <NUM> in <FIG> are used as two independent components to implement input and output functions of the wearable electronic device <NUM>, in some embodiments, the touch panel <NUM> and the display panel <NUM> may be integrated to implement the input and output functions of the wearable electronic device <NUM>.

The wearable electronic device <NUM> further includes the peripheral interface <NUM>, which is an interface that may be configured to connect an external device and the wearable electronic device <NUM>. The external device includes but is not limited to one or more of a keyboard, a mouse, a touchpad, a trackball, a joystick, a game controller, a microphone, a display, a sound box, a power amplifier, or the like. The external device connects to the processor <NUM> of the wearable electronic device <NUM> by using the peripheral interface <NUM>, and inputs data (for example, digit or character information) into the processor <NUM> for processing, or reads data from the processor <NUM> and outputs the data to the external device by using the peripheral interface <NUM>.

In this embodiment of the present invention, the peripheral interface <NUM> includes but is not limited to a universal serial bus (Universal Serial Bus, USB) interface, a mini-USB interface, a peripheral component interconnect (Peripheral Component Interconnect, PCI) interface, an IEEE <NUM> interface, a video graphics array (Video Graphics Array, VGA) interface, a high definition multimedia interface (High Definition Multimedia Interface, HDMI), and the like, or is any one or combination of the foregoing interfaces.

The wearable electronic device <NUM> further includes the power supply <NUM> that is configured to supply power to the different components of the wearable electronic device <NUM>, to maintain operation of the components. Generally, the power supply <NUM> may be a built-in battery such as a common lithium-ion battery or a NiMH battery, or may include an external power supply that directly supplies power to the wearable electronic device <NUM>, for example, an AC adapter.

In this embodiment of the present invention, the power supply <NUM> may further include a power management system, a charging system, a power failure detection circuit, a power converter or inverter, a power status indicator (for example, a light emitting diode), and any other components related to electric energy generation, management, and distribution of the electronic device.

Optionally, in an embodiment of the present invention, the input unit <NUM> is further configured to receive the second operation instruction entered by the user, and the second operation instruction is used to indicate that the first information is correct.

Specifically, in this embodiment of the present invention, after the processor <NUM> of the wearable electronic device <NUM> switches the first operating system to the second operating system, and the communications unit <NUM> receives, by using the first application supported by the second operating system, the first information sent by the intelligent terminal, the processor <NUM> determines, according to the second operation instruction that is used to indicate that the first information is correct and that is received by the input unit <NUM>, that the first information is correct. The first information includes the transaction data for completing online payment. Further, the data processing unit <NUM> performs, by using the second operating system, encryption or signature processing on the first information that is determined to be correct by the processor <NUM>, to obtain the second information. That is, the first information received by the communications unit <NUM> may be presented on the wearable electronic device <NUM>. This may ensure authenticity of the first information.

If the transaction data is tampered with by malicious software on the intelligent terminal, tampered data may be presented on the display unit <NUM> of the wearable electronic device <NUM>. If the user finds that the transaction data is incorrect, the user may abandon a payment operation.

According to the present invention, the communications unit <NUM> is configured to establish a communication connection to the intelligent terminal in a wireless access mode, and the processor <NUM> is further configured to determine, according to a service request instruction that is sent by the intelligent terminal and received by the communications unit <NUM>, to run the first application supported by the second operating system, and the communications unit <NUM> is configured to send, to the intelligent terminal, a response message indicating that the first application has already been run.

Specifically, according to the present invention, after the processor <NUM> of the wearable electronic device <NUM> switches the first operating system to the second operating system, the communications unit <NUM> establishes the communication connection to the intelligent terminal in a wireless access mode. For example, after receiving a search message that is broadcast by the intelligent terminal according to a specified time period and a specified frequency, the wearable electronic device <NUM> sends a search response message to the intelligent terminal, and the search response message carries a Bluetooth address and clock information of the Bluetooth module of the wearable electronic device <NUM>. When the intelligent terminal receives the search response message of the wearable electronic device <NUM>, the user may tap on a screen of the intelligent terminal to establish a connection, and the intelligent terminal sends a Bluetooth address and a Bluetooth clock of the intelligent terminal to the wearable electronic device <NUM>, so that the clock of the wearable electronic device <NUM> is synchronized with that of the intelligent terminal. A Bluetooth communications link between the intelligent terminal and the wearable electronic device <NUM> is established, and the intelligent terminal randomly generates a PIN number, and sends the PIN number to the wearable electronic device <NUM>. After receiving the PIN number, the wearable electronic device <NUM> determines whether PIN numbers of the intelligent terminal and the wearable electronic device <NUM> are consistent, to verify connection validity. When the user selects "accept" on the wearable electronic device <NUM>, a Bluetooth connection is established between the intelligent terminal and the wearable electronic device <NUM>, and data interaction may be performed between the intelligent terminal and the wearable electronic device <NUM> by using Bluetooth.

After the intelligent terminal establishes the Bluetooth connection to the wearable electronic device <NUM>, the intelligent terminal sends a service request command to the wearable electronic device <NUM> to obtain a corresponding service. The processor <NUM> of the wearable electronic device <NUM> determines, according to the service request instruction that is sent by the intelligent terminal and received by the communications unit <NUM>, to run the first application supported by the second operating system, and the communications unit <NUM> sends, to the intelligent terminal, the response message indicating that the first application has already been run.

For example, the intelligent terminal sends a service request command to the wearable electronic device <NUM> to obtain a service of the Industrial and Commercial Bank of China, and according to the service request instruction that is sent by the intelligent terminal and received by the communications unit <NUM>, the processor <NUM> of the wearable electronic device <NUM> determines and runs an application of the Industrial and Commercial Bank of China that is supported by the second operating system. The communications unit <NUM> sends, to the intelligent terminal, a response message indicating that the application of the Industrial and Commercial Bank of China has already been run.

It should be understood that, in this embodiment of the present invention, the intelligent terminal may further establish a WiFi connection to the wearable electronic device <NUM>. The second operating system may support multiple payment applications. Therefore, the wearable electronic device <NUM> may determine, from the multiple payment applications and according to the service request instruction sent by the intelligent terminal, an application corresponding to the instruction, and activate the application, so as to receive the first information that includes the transaction data and that is sent by the intelligent terminal.

Optionally, in another embodiment of the present invention, the input unit <NUM> may be further configured to receive the first operation instruction entered by the user, and the first operation instruction is used to switch the first operating system to the second operating system. Specifically, in this embodiment of the present invention, before the processor <NUM> of the wearable electronic device <NUM> switches, according to the first operation instruction that is entered by the user and received by the input unit <NUM>, the frequently used first operating system to the second operating system having the security feature, the input unit <NUM> may receive the first operation instruction that is used to instruct to switch the first operating system to the second operating system.

It should be understood that, in this embodiment of the present invention, the first operation instruction and the second operation instruction may be operation instructions entered in any one of the following manners: voice input, fingerprint input, and keyboard input, that is, may be any one type of: voice instructions, fingerprint instructions, or keyboard instructions.

It should further be understood that, in this embodiment of the present invention, the input unit <NUM> may be a touch panel, or may be another human-computer interaction interface such as a substantive input key or a microphone, or may be another external information collection apparatus such as a camera. This embodiment of the present invention sets no limitation thereto.

The wearable electronic device according to the embodiment of the present invention is described above in detail with reference to <FIG>, and data processing methods according to embodiments of the present invention are described below in detail with reference to <FIG>.

<FIG> is a schematic flowchart of a data processing method <NUM> according to an embodiment of the present invention. The method <NUM> shown in <FIG> may be executed by a wearable electronic device, and the method <NUM> includes the following steps.

Switch a first operating system to a second operating system according to a received first operation instruction that is entered by a user.

Receive, by using a first application supported by the second operating system, first information sent by an intelligent terminal, where the first information includes transaction data for completing online payment.

Determine, according to a received second operation instruction that is entered by the user, that the first information is correct.

Perform encryption or signature processing on the first information by using the second operating system, to obtain second information.

Send the second information to the intelligent terminal by using the first application.

Specifically, in this embodiment of the present invention, after the frequently used first operating system such as an Android system is switched, according to the received first operation instruction that is entered by the user, to the second operating system having a security feature, the first information sent by the intelligent terminal is received by using the first application supported by the second operating system, and the first information includes the transaction data for completing online payment. It is determined, according to the received second operation instruction that is entered by the user, that the received first information is correct, and then encryption or signature processing is performed on the first information by using the second operating system, to obtain the second information. For example, the second operating system of the wearable electronic device may store unique key information, to ensure that only information that is processed by using the key may be accepted by a payment organization. The second operating system of the wearable electronic device may store a corresponding certificate and key of the user in the payment organization, and the certificate of the user is also stored on a platform side of the payment organization, so that it may be ensured, by using a unique correspondence between the certificate and the key, that a transaction is completed by an entity (the wearable electronic device) having the key. Finally, the second information obtained by means of encryption or signature processing is sent to the intelligent terminal by using the first application, so that the intelligent terminal obtains the second information to complete online payment.

Therefore, according to the data processing method provided in this embodiment of the present invention, encryption or signature processing is performed, by using a second operating system of a wearable electronic device, on first information that is used to complete online payment and sent by an intelligent terminal, to obtain second information, and the second information is fed back to the intelligent terminal, so that the intelligent terminal obtains the second information to complete the online payment, thereby resolving a security problem of online payment performed by a user by using an intelligent terminal.

Optionally, in an embodiment of the present invention, as shown in <FIG>, before <NUM>, the method <NUM> further includes the following step:.

Receive the second operation instruction entered by the user, where the second operation instruction is used to indicate that the first information is correct.

Specifically, in this embodiment of the present invention, after the first information sent by the intelligent terminal is received by using the first application supported by the second operating system, the second operation instruction that is entered by the user and used to indicate that the first information is correct may be received, and the first information includes the transaction data for completing online payment. Then, it is determined, according to the received second operation instruction, that the first information is correct. Further, encryption or signature processing is performed on the first information by using the second operating system, to obtain the second information. That is, the received first information may be presented on the wearable electronic device. This may ensure authenticity of the first information. If the transaction data is tampered with by malicious software on the intelligent terminal, tampered data may be presented on a display of the wearable electronic device. If the user finds that the transaction data is incorrect, the user may abandon a payment operation.

According to the present invention, as shown in <FIG>, before <NUM>, and after <NUM>, the method <NUM> further includes the following steps:.

Establish a communication connection to the intelligent terminal in a wireless access mode.

Determine, according to a service request instruction sent by the intelligent terminal, to run the first application supported by the second operating system.

Send, to the intelligent terminal, a response message indicating that the first application has already been run.

Specifically, in this embodiment of the present invention, after the frequently used first operating system is switched, according to the received first operation instruction that is entered by the user, to the second operating system having the security feature, the communication connection to the intelligent terminal may be established in a wireless access mode. After the intelligent terminal establishes a Bluetooth connection to the wearable electronic device, the intelligent terminal sends a service request command to the wearable electronic device to obtain a corresponding service. The wearable electronic device determines, according to the service request instruction sent by the intelligent terminal, to run the first application supported by the second operating system, and sends, to the intelligent terminal, the response message indicating that the first application has already been run.

For example, the intelligent terminal sends a service request command to the wearable electronic device to obtain a service of the Industrial and Commercial Bank of China, and according to the service request instruction sent by the intelligent terminal, the wearable electronic device determines and runs an application of the Industrial and Commercial Bank of China that is supported by the second operating system, and sends, to the intelligent terminal, a response message indicating that the application of the Industrial and Commercial Bank of China has already been run.

It should be understood that, in this embodiment of the present invention, the intelligent terminal may further establish a WiFi connection to the wearable electronic device. The second operating system may support multiple payment applications. Therefore, the wearable electronic device may determine, from the multiple payment applications and according to the service request instruction sent by the intelligent terminal, an application corresponding to the instruction, and activate the application, so as to receive the first information that includes the transaction data and that is sent by the intelligent terminal.

Optionally, in another embodiment of the present invention, as shown in <FIG>, before <NUM>, the method <NUM> further includes the following step:.

Receive the first operation instruction entered by the user, where the first operation instruction is used to instruct to switch the first operating system to the second operating system.

Specifically, in this embodiment of the present invention, before the frequently used first operating system is switched, according to the received first operation instruction, to the second operating system having the security feature, the first operation instruction used to instruct to switch the first operating system to the second operating system may be received.

It should be understood that, in this embodiment of the present invention, the first operation instruction and the second operation instruction may be any one type of: voice instructions, fingerprint instructions, or keyboard instructions.

The technical solutions of the embodiments of the present invention are described below in detail with reference to a schematic interaction diagram, shown in <FIG>, of a data processing method <NUM> according to an embodiment of the present invention. The method <NUM> shown in <FIG> includes the following steps.

A wearable electronic device switches a first operating system to a second operating system according to a received first operation instruction that is entered by a user.

Specifically, in this embodiment of the present invention, when determining that an online payment service needs to be performed, the user may enter the first operation instruction into the wearable electronic device, for example, enter an operation instruction into the wearable electronic device in a voice, keyboard, or fingerprint manner. The first operation instruction instructs the wearable electronic device to switch the frequently used first operating system such as an Android system to the second operating system having a security feature.

An intelligent terminal establishes a communication connection to the wearable electronic device in a wireless access mode.

Specifically, in this embodiment of the present invention, the intelligent terminal may establish the communication connection to the wearable electronic device in a Bluetooth or WiFi manner.

The intelligent terminal sends a service request instruction to the wearable electronic device, and the service request instruction is used to instruct the wearable electronic device to provide a related service of the Industrial and Commercial Bank of China.

The wearable electronic device receives the service request instruction sent by the intelligent terminal, and according to the service request instruction, determines and runs an application of the Industrial and Commercial Bank of China that is supported by the second operating system, so as to provide a related service of the Industrial and Commercial Bank of China.

The wearable electronic device sends, to the intelligent terminal, a response message indicating that the application of the Industrial and Commercial Bank of China has already been run, and the response message is used to indicate that the wearable electronic device may provide the related service of the Industrial and Commercial Bank of China.

After receiving the response message, the intelligent terminal sends first information to the wearable electronic device, where the first information includes transaction data for completing online payment.

The wearable electronic device receives, by using a first application supported by the second operating system, the first information sent by the intelligent terminal.

The wearable electronic device determines, according to a received second operation instruction that is entered by the user, that the first information is correct.

Specifically, in this embodiment of the present invention, the wearable electronic device receives, by using the application of the Industrial and Commercial Bank of China, the first information sent by the intelligent terminal, the first information includes the transaction data for completing online payment, and the first information may be displayed on a display of the wearable electronic device. The user may enter the second operation instruction into the wearable electronic device, for example, may enter the second operation instruction in a voice, key, or fingerprint manner, to determine that the first information is correct. If the user finds that the transaction data included in the first information is incorrect, the user may abandon a payment operation to avoid a loss.

The wearable electronic device performs encryption or signature processing on the received first information by using the second operating system, to obtain second information.

The wearable electronic device sends, to the intelligent terminal, the second information obtained by means of encryption or signature processing.

The intelligent terminal receives the second information sent by the wearable electronic device, and completes online payment according to the second information.

Specifically, in this embodiment of the present invention, the wearable electronic device may perform encryption or signature processing on the received first information by using the second operating system having the security feature, to obtain the second information, so as to ensure that only information that is processed by using a key stored in the second operating system may be accepted by a payment organization. The wearable electronic device sends, to the intelligent terminal, the second information obtained by means of encryption or signature processing, and the intelligent terminal receives the second information and sends the second information to a platform of the payment organization. The payment organization receives the second information, completes a corresponding payment transaction after verifying that the second information is correct, and may send, to the intelligent terminal, a feedback message that carries information indicating that the transaction is completed.

It should be understood that, in the embodiments of the present invention, the method <NUM> according to the embodiments of the present invention may be correspondingly executed by the wearable electronic device <NUM> according to the embodiments of the present invention, and the corresponding procedures of the methods in <FIG> are separately implemented by using the foregoing and other operations and/or functions of the modules of the wearable electronic device <NUM>. For brevity, details are not described herein.

The data processing methods according to the embodiments of the present invention are described above in detail with reference to <FIG>, and a data processing system according to an embodiment of the present invention is described below in detail with reference to <FIG>.

<FIG> is a schematic diagram of a data processing system <NUM> according to an embodiment of the present invention. The system <NUM> shown in <FIG> includes an intelligent terminal <NUM> and a wearable electronic device <NUM>.

The intelligent terminal <NUM> is configured to send first information to the wearable electronic device <NUM>, where the first information includes transaction data for completing online payment.

The wearable electronic device <NUM> is configured to: switch the first operating system to the second operating system according to a received first operation instruction that is entered by a user; receive, by using a first application supported by the second operating system, the first information sent by the intelligent terminal <NUM>; when determining that the first information is correct, perform encryption or signature processing on the first information, to obtain second information; and send the second information to the intelligent terminal <NUM>.

Therefore, according to the data processing system provided in this embodiment of the present invention, encryption or signature processing is performed, by using a second operating system of a wearable electronic device, on first information that is used to complete online payment and sent by an intelligent terminal, to obtain second information, and the second information is fed back to the intelligent terminal, so that the intelligent terminal obtains the second information to complete the online payment, thereby resolving a security problem of online payment performed by a user by using an intelligent terminal.

It should be understood that, in this embodiment of the present invention, the wearable electronic device <NUM> may correspond to the wearable electronic device <NUM> according to the embodiment of the present invention. For brevity, details are not described herein.

Optionally, in an embodiment of the present invention, the intelligent terminal <NUM> may be further configured to: establish a communication connection to the wearable electronic device <NUM> in a wireless access mode, and send a service request instruction to the wearable electronic device <NUM>, where the service request instruction is used to instruct the wearable electronic device <NUM> to determine to run the first application supported by the second operating system; and
the wearable electronic device <NUM> is further configured to: receive the service request instruction sent by the intelligent terminal <NUM>; determine, according to the service request instruction, to run the first application supported by the second operating system; and send, to the intelligent terminal <NUM>, a response message indicating that the first application has already been run.

Optionally, in another embodiment of the present invention, the wearable electronic device <NUM> is further configured to: receive a second operation instruction entered by the user, and determine, according to the second operation instruction, that the first information is correct, where the second operation instruction is used to indicate that the first information is correct.

It should be understood that, in this embodiment of the present invention, the first operation instruction and the second operation instruction are any one type of: voice instructions, fingerprint instructions, or keyboard instructions. This embodiment of the present invention sets no limitation thereto.

A person of ordinary skill in the art may be aware that, in combination with the examples described in the embodiments disclosed in this specification, units and algorithm steps may be implemented by electronic hardware, computer software, or a combination thereof. To clearly describe the interchangeability between the hardware and the software, the foregoing has generally described compositions and steps of each example according to functions.

It may be clearly understood by a person skilled in the art that, for the purpose of convenient and brief description, for a detailed working process of the foregoing system, apparatus, and unit, reference may be made to a corresponding process in the foregoing method embodiments, and details are not described herein.

For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not performed. In addition, the displayed or discussed mutual couplings or direct couplings or communication connections may be implemented through some interfaces.

The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one position, or may be distributed on multiple network units. A part or all of the units may be selected according to actual needs to achieve the objectives of the solutions of the embodiments of the present invention.

Claim 1:
A wearable electronic device (<NUM>), comprising:
a processor (<NUM>);
a memory (<NUM>);
a communications unit (<NUM>);
an input unit (<NUM>); and
a data processing unit (<NUM>), wherein
the memory (<NUM>) is configured to store software programs and modules of a first operating system and a second operating system;
the processor (<NUM>) is configured to switch the first operating system to the second operating system according to a first operation instruction that is entered by a user and received by the input unit (<NUM>);
wherein the communications unit (<NUM>) is configured to establish a communication connection to an intelligent terminal in a wireless access mode, after the first operating system is switched to the second operating system,
wherein the processor (<NUM>) is further configured to determine, according to a service request instruction that is sent by the intelligent terminal and received by the communications unit (<NUM>), to run a first application supported by the second operating system; and
the communications unit (<NUM>) is further configured to send, to the intelligent terminal, a response message indicating that the first application has already been run,
the communications unit (<NUM>) is configured to receive, by using the first application supported by the second operating system, first information sent by the intelligent terminal, wherein the first information comprises transaction data for completing online payment;
the processor (<NUM>) is further configured to determine, according to a second operation instruction that is entered by the user and received by the input unit, that the first information received by the communications unit (<NUM>) is correct;
the data processing unit (<NUM>) is configured to perform, by using the second operating system, encryption or signature processing on the first information that is determined to be correct by the processor (<NUM>), to obtain second information; and