A secure access method and device for a service product

Abstract

This application provides a method and device for secure access to business products, which first receive the security access requirements of business products submitted by the business party; generate evaluation requests in different directions according to the security access requirements, and determine the corresponding The evaluator who evaluates the request in different directions sends the evaluation request in different directions to the corresponding evaluator respectively; then receives the evaluation result fed back by the evaluator according to the evaluation request, and determines the security optimization requirements of the business product itself through the evaluation result, The security product that needs to be connected with the business product; finally, according to the security access requirements of the business product, determine the joint use case configuration of the security product that the business product needs to be connected with, and generate according to the joint use case configuration and its own pre-stored different code segments The final code, so that the business side can complete the development joint debugging according to the final code. This application solves the problem of fragmentation in the evaluation process and improves the evaluation efficiency.

Description

technical field [0001] This specification relates to the field of the Internet, and in particular to a method and device for securely accessing service products. Background technique [0002] When a certain business product needs to be connected to an open platform such as Alipay, there are many payment risks involved, including account theft, cheating risks, cash-out risks, money laundering risks, data leakage risks, system vulnerability risks, and network attack risks, etc. [0003] In order to deal with these risks, the platform security technology department not only provides various security protection products, including data risk control products, content security products, human-machine identification products, etc., but also gives suggestions on business product optimization from a security perspective. In the traditional way, the access process of business products is promoted by business personnel. Due to the relatively long process link of security protection ser...

AI Technical Summary

Problems solved by technology

In the traditional way, the access process of business products is promoted by business personnel. Due to the relatively long process link of security protection service docking, more personnel are involved, and the security internal operation is a black box for the business side, which leads to the fragmentation of the risk assessment process. , Difficulty in docking security products, low efficiency in accessing security services, etc.

At present, there is a lack of standardized security access management methods and systems. On the basis of ensuring comprehensive and effective analysis of business risks from the process, the docking of business products and security protection services is accelerated.

Images