Information marking system and payment marking method based on cloud computing

Abstract

The invention discloses an information marking system and a payment marking method based on cloud computing, and the information marking system comprises a marking module for marking data, a domain control management module for verifying the validity of a token, and a de-marking module for restoring the marked data. The marking module can output a token according to a preset token generation rule and replace original data in the marking application with the token; when the information marking system receives a mark restoration application, the domain control management module can verify the validity of the token in the mark restoration application and output a verification result, and the verification result is valid or invalid; when the information marking system receives a mark reduction application, if the verification result of the domain control management module on the token in the mark reduction application is valid, the de-marking module can output original data corresponding to the token. According to the method, marking and de-marking services are provided, and any scene needing to desensitize sensitive data can be handled.

Description

technical field [0001] The invention relates to the field of information marking, in particular to an information marking system and payment marking method based on cloud computing. Background technique [0002] In recent years, there have been frequent leaks of sensitive data such as bank card numbers around the world, and fraudulent transactions have increased significantly. With the rapid development of the mobile Internet and the payment industry, cardless payment such as mobile payment, biometric payment, and gateway payment has become the mainstream payment method in China, and has been welcomed by the majority of users due to its convenience, speed, and good experience. But problems also arise. Card-not-present payment is a card-not-present transaction, and there is no authorized ciphertext during the transaction. If sensitive information such as the card number is leaked, how can the card-issuing bank verify the legality of the transaction? Although the traditional e...

AI Technical Summary

Problems solved by technology

Encryption is to encrypt the plaintext of sensitive information into ciphertext by using the corresponding encryption algorithm, and then decrypt the ciphertext into plaintext at the node that needs to use the plaintext. The ciphertext is a string of irregular character combinations, and the scope of encryption method transformation Big, all links involved need to be remodeled, and the ciphertext is a string of garbled characters, which also affects customer experience

Hiding is to replace sensitive information with * when displaying sensitive information, and not fully display sensitive information, but in the process of transmission between systems, sensitive information in clear text is still used for transmission, because hiding is only in The data is desensitized when displaying sensitive information, but the data is not desensitized when it is transmitted between systems

Therefore, neither of these two methods is the best choice for solving sensitive data desensitization

Images