A method and a device for secure access to a service product

Abstract

The invention provides a method and a device for secure access to a service product. The method includes the following steps: firstly receiving a service product securing access requirement submittedby a service party; generating an evaluation request of different directions according to the security access demand, determining an evaluator corresponding to the evaluation request of the differentdirections according to preset information, and sending the evaluation request of the different directions to the corresponding evaluator respectively; receiving the evaluation result fed back by theevaluation request by the evaluation party, and determining the security optimization requirements of the business product itself through the evaluation result and the security product to be docked with the business product; finally, according to the security access requirement of the service product, determining the joint calling example configuration of the security product that the service product needs to interface, and generating the final code according to the joint calling example configuration and different code segments stored in the joint calling example configuration, so that the service party can complete the development joint debugging according to the final code. The present application solves the problem of fragmentation of the evaluation process and improves the evaluationefficiency.

Description

technical field [0001] This specification relates to the field of the Internet, and in particular to a method and device for securely accessing service products. Background technique [0002] When a certain business product needs to be connected to an open platform such as Alipay, there are many payment risks involved, including account theft, cheating risks, cash-out risks, money laundering risks, data leakage risks, system vulnerability risks, and network attack risks, etc. [0003] In order to deal with these risks, the platform security technology department not only provides various security protection products, including data risk control products, content security products, human-machine identification products, etc., but also gives suggestions on business product optimization from a security perspective. In the traditional way, the access process of business products is promoted by business personnel. Due to the relatively long process link of security protection ser...

AI Technical Summary

Problems solved by technology

In the traditional way, the access process of business products is promoted by business personnel. Due to the relatively long process link of security protection service docking, more personnel are involved, and the security internal operation is a black box for the business side, which leads to the fragmentation of the risk assessment process. , Difficulty in docking security products, low efficiency in accessing security services, etc.

At present, there is a lack of standardized security access management methods and systems. On the basis of ensuring comprehensive and effective analysis of business risks from the process, the docking of business products and security protection services is accelerated.

Images