Multi-dimensional safety control system and method for open platform

Abstract

The invention relates to the technical field of financial transaction security management, in particular to an open platform multi-dimensional security control system and method. The method is appliedto the system, and the system comprises a server and a service platform; the server comprises the following modules: a message acquisition module used for receiving an encrypted message of a merchantand subjected to encryption and signature verification; a flow control module which is used for controlling the flow of the encrypted message sent by the merchant access server and carrying out flowlimiting processing on the access exceeding the bearing capacity of the server; a list verification module which is used for carrying out IP verification on accessed merchants; a subscription permission verification module which is used for verifying the service subscription permission of the merchant; a message decryption module which is used for decrypting the message and carrying out message signature verification after the decryption is successful; and a routing forwarding module which is used for sending the message to a service platform for service processing according to a preset routing rule. According to the invention, the fund, system and data security of the bank can be ensured in multiple dimensions.

Description

technical field [0001] The invention relates to the technical field of financial transaction security management, in particular to an open platform multi-dimensional security control system and method. Background technique [0002] So far, the open platform is the mainstream model for the development of the banking industry, and online has become an irreversible trend. The open platform, as the entrance for external merchants to access, needs to ensure the security of the bank's funds, systems and data in an all-round and multi-dimensional manner. Although all banks have implemented data encryption and decryption and signature verification during the access process, this cannot completely eliminate hidden dangers in security. Usually there are the following problems: [0003] 1. Transaction requests initiated by unauthenticated merchants and server addresses will cause financial losses; [0004] 2. The data is transmitted in plain text, and there is a risk of leakage; ...

AI Technical Summary

Problems solved by technology

[0003] 1. Transaction requests initiated by unauthenticated merchants and server addresses will cause financial losses;

[0004] 2. The data is transmitted in plain text, and there is a risk of leakage;

[0005] 3. During the transmission of the request, the data is tampered with and the normal transaction is destroyed;

[0006] 4. There is a possibility of repudiation for transactions that have already occurred;

[0007] 5. In the face of a sudden increase in traffic, the system faces the risk of downtime

Images