Open platform multi-dimensional security control system and method

Abstract

The invention relates to the technical field of financial transaction security management, and in particular to an open platform multi-dimensional security control system and method. The method is applied to the system, and the system includes a server and a business platform. The server includes the following modules: Module: used to accept encrypted messages from merchants that have been encrypted and verified by signature; flow control module: used to control the flow of encrypted messages sent by merchants accessing the server, and limit the flow of access beyond the server's capacity; list schools Verification module: used to verify the IP of the visiting merchants; subscription authority verification module: used to verify the service subscription authority of the merchants; message decryption module: used to decrypt the message, and after the decryption is successful Perform message signature verification; routing forwarding module: used to send messages to the business platform for business processing according to preset routing rules. The invention can guarantee the security of funds, systems and data of the bank in multiple dimensions.

Description

technical field [0001] The invention relates to the technical field of financial transaction security management, in particular to an open platform multi-dimensional security control system and method. Background technique [0002] So far, open platforms have been the mainstream model for the development of the banking industry, and onlineization has become an irreversible trend. As the entrance to external merchants, the open platform needs to ensure the security of the bank's funds, systems and data in all aspects and multiple dimensions. Although each bank has implemented data encryption and decryption and signature verification during the access process, this does not completely eliminate security risks. Usually there are the following problems: [0003] 1. Transaction requests initiated by unauthenticated merchants and server addresses will result in loss of funds; [0004] 2. The data is transmitted in plain text, and there is a risk of leakage; [0005] 3. During ...

AI Technical Summary

Problems solved by technology

[0003] 1. Transaction requests initiated by unauthenticated merchants and server addresses will cause financial losses;

[0004] 2. The data is transmitted in plain text, and there is a risk of leakage;

[0005] 3. During the transmission of the request, the data is tampered with and the normal transaction is destroyed;

[0006] 4. There is a possibility of repudiation for transactions that have already occurred;

[0007] 5. In the face of a sudden increase in traffic, the system faces the risk of downtime

Images