Financial lease internet open platform and use method

Abstract

The invention discloses a financial lease internet open platform and a use method. The open platform comprises an interface information module, a protocol information module, a service registration module, an unpacking and packing module, a desensitization restoration module, a configuration management module and the like. Secure data transmission between the open platform and the partner is ensured; the method comprises the following steps: registering information of a partner by using an open platform, associating API interface information with back-end protocol information, matching the API interface information, executing the back-end protocol information, and performing data security transmission between the partner and the open platform. According to the open platform disclosed by the invention, by formulating a secure transmission scheme and comprehensively considering multiple aspects such as identity verification, signature protection and rate limitation, the API interface is effectively prevented from being hostile attacks and unauthorized access, and the operation stability of the open platform is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of building an open Internet platform for financial leasing, and in particular to an open Internet platform for financial leasing and a method for using the same. Background Art

[0002] At present, financial technology is developing in full swing. A series of information technologies such as cloud computing, big data, blockchain, mobile Internet, and artificial intelligence have opened the door to the FinTech era, bringing new challenges and opportunities to the financial and technology industries. Financial technology has promoted the reshaping of the financial leasing ecosystem, changing many aspects of the financial ecosystem, including financial leasing institutions (suppliers), partners (demand side), market infrastructure, regulators, and laws. At present, the application scenarios of financial leasing services are becoming increasingly diverse, and a simple competitive relationship can no longer meet the requirements of the new financial leasing ecosystem. We should adhere to the concept of open financial leasing services, fully share resources (data, time, opportunities), etc. with third-party institutions, peer institutions, and even customers, and pursue the best customer experience.

[0003] Relying on Internet technology, we will open our own financial leasing services to third-party partners, and then provide services to customers across the country, creating a comprehensive online, integrated, and immersive financial leasing service. With the help of mobile Internet technology, we will open financial leasing services and open interfaces to meet the needs of different docking parties with standardized financial leasing SDKs and personalized API interfaces; build an Internet open platform, establish a service open center, provide a variety of SDK docking solutions, support secure access control, aggregate Internet capabilities, and fully open up the business capabilities of online car loans for financial leasing.

[0004] The existing open Internet financial leasing platforms have the following problems: when using the open platform to call the API interface, the correctness of the developer's URL and parameters cannot be guaranteed because the API interface description is not standard enough, which may lead to problems such as request failure and incorrect return results; in the open platform cloud service, the number of cloud service API interfaces is huge, resulting in users often lacking a consistent experience and poor mutual compatibility; in addition, in high-concurrency scenarios, the performance of API interface calls may become a problem, resulting in reduced response speed; some open platforms also have the problem that the API interface may expose application logic and resources and involve the transmission of sensitive and valuable information, resulting in reduced security of the open platform.

[0005] The patent document with application number 202110840853.6 discloses a financial leasing management system based on data processing, including a user terminal, a credit database, a data processing department, a business approval department, a data analysis department, a project storage department and a project allocation department. The user terminal is used to input a leasing application profile containing lessee identity data and first leasing data. The business approval department reviews the leasing application profile to determine the approved leasing application profile, and the data analysis department associates and clusters the standard indicator sequence and the leasing indicator sequence to obtain the difficulty score of the leasing project.

[0006] The application scheme rationally screens and sorts leasing applications, improving the efficiency of project completion; however, it also suffers from non-standard API interface descriptions, lack of secure transmission measures, and poor security.

[0007] The patent document with application number 202311029833.6 also discloses a collaborative credit method, device, and financial leasing system for financing request, including: in response to the triggering of the request for payment review node, obtaining financing application information through the front-end interface of the B-end application; based on the preset field specification verification rules, verifying the financing application information, if passed, generating a first credit approval request and sending it to the first external financial system; in response to the approval success information of the first credit approval request returned by the first external financial system, based on the preset risk control rules, performing risk assessment on the financing application information; if the result of the risk assessment is in compliance, generating a second credit approval request and sending it to the B-end application, and in response to the credit approval result of the B-end user for the second credit approval request, determining that the financing request credit is completed.

[0008] This application realizes the collaborative credit approval for financing requests, significantly improving the credit approval efficiency for financing requests. However, the interface description of the scheme is not disclosed, which may easily lead to reduced security during data transmission.

[0009] Based on the above reasons, there is a need for an open Internet financial leasing platform that provides standardized interface descriptions, unified API interface specifications, identity authentication and authorization mechanisms, performance optimization strategies, and security protection measures to solve a series of technical problems in the development and use of open platform API interfaces. Summary of the invention

[0010] In view of the above-mentioned problems, the purpose of the present invention is to provide an open Internet platform for financial leasing and a method of use, provide standardized interface descriptions, strengthen identity authentication, authorization mechanisms and performance optimization strategies and security protection measures, and ensure the smooth development of financial leasing transactions.

[0011] The embodiment of the present invention provides an Internet open platform for financial leasing and a method for using the platform.

[0012] Aspect 1: An open Internet financial leasing platform, including:

[0013] The interface information module is used to configure the information of the API interface;

[0014] The protocol information module is used to register and configure the backend protocol information;

[0015] The service registration module is used to register the associated API interface information and backend protocol information;

[0016] The unpacking and packaging module is used to unpack and package the transmitted data;

[0017] Desensitization and restoration module, used to perform desensitization and restoration processing on the transmitted data;

[0018] Configuration management module, used to register partner information, allocate keys and authorize partner API interface permissions;

[0019] Among them, data is securely transmitted between the open platform and its partners.

[0020] Second aspect: The method of using the above-mentioned financial leasing Internet open platform includes the following steps:

[0021] S1. Use the open platform to register the partner's information, allocate keys, and authorize the partner's API interface permissions;

[0022] S2. Register the associated API interface information and backend protocol information;

[0023] S3. According to the partner's call request, identify the partner, adapt the service operation framework, and match the API interface information;

[0024] S4. Based on the matching API interface information, execute the backend protocol information, unpack and assemble the data, and securely transmit the data between the partner and the open platform.

[0025] Furthermore, the identification of the partner in S3 includes identity identification and service identification;

[0026] The identity recognition is to confirm the information of the partner through the AppID and hardware information of the partner through preset configuration rules to identify the identity of the partner.

[0027] The service identification is to identify the target service of this request call through the RestFul specification and configuration.

[0028] Furthermore, the adaptation service framework in S3 includes a protocol adaptation framework and a message adaptation framework, wherein:

[0029] The protocol adaptation framework provides access protocol types, adapts the protocol rules of the partner's private adapter, and allows flexible expansion and custom development as needed;

[0030] The message adaptation framework provides the adaptation function of multiple message specifications, converting the received message format into the message format recognized by the internal system.

[0031] Furthermore, the protocol adaptation framework supports multiple communication protocol types including Socket, WebService, HTTP 1.1 / 1.0, HTTPS, MQ, CICS, TCP, JMS, SOAP, EJB, RMI, Tuxedo, and Tong-Link;

[0032] The message adaptation framework supports the adaptation function conversion of XML, SOAP, fixed-length, 8583, and JSON message specifications.

[0033] Furthermore, in said S4, data is securely transmitted between the partner and the open platform, including data securely transmitted from the partner to the open platform, and the steps are:

[0034] S41a, the partner locally generates a random key;

[0035] S42a, using the sm2 algorithm to encrypt the random key using the open platform public key;

[0036] S43a, assembling message;

[0037] S44a, encrypt the message using sm4 and a random key;

[0038] S45a, calling the open platform to transmit the assembly message;

[0039] S46a, the open platform uses the sm2 algorithm to decrypt the random key using the open platform private key;

[0040] S47a. The open platform uses sm4 to decrypt the message and obtain the original plaintext message.

[0041] Furthermore, the secure data transmission between the partner and the open platform in S4 also includes secure data transmission from the open platform to the partner, and the steps are:

[0042] S41b, the open platform uses the sm2 algorithm to encrypt the random key using the partner's public key;

[0043] S42b, encrypt the response message using the sm4 algorithm and a random key;

[0044] S43b, a response message is returned to the partner;

[0045] S44b, the partner uses the sm2 algorithm to decrypt with the private key to obtain a random secret key;

[0046] S45b. Use the sm4 algorithm and the random key to decrypt and obtain a response message.

[0047] Furthermore, when data is securely transmitted between the partner and the open platform in S4, it also includes:

[0048] The partner uses sm3 to sign the assembled message and generate a signature. The open platform uses the sm3 algorithm to generate a signature by summarizing the decrypted assembled message.

[0049] The open platform uses the SM3 algorithm to sign the response message to generate a signature, and the partner uses the SM3 algorithm to generate a signature by summarizing the decrypted response message.

[0050] Furthermore, the secure data transmission between the partner and the open platform in S4 also includes restoring the data entering the open platform and desensitizing the data leaving the open platform.

[0051] Furthermore, the data is unpacked and packaged in S4, including

[0052] After receiving the assembled message from the partner, the open platform converts the assembled message fields into metadata for unpacking; then the open platform converts the metadata into request fields for packaging according to the internal system requirements;

[0053] After receiving the response message from the internal system, the open platform converts the response message field into metadata for unpacking; then, according to the requirements of the partner, the open platform converts the metadata into response fields for packaging.

[0054] 1. The open platform of the present invention provides a standardized interface description for the API interface, which can help partners to ensure the correctness of the URL and parameters when developing and using it, accurately obtain API interface permissions, and promptly handle network connection problems, effectively avoid request failures, incorrect return results, and other problems, and improve the stability of the open platform operation.

[0055] 2. The open platform of the present invention utilizes a unified API specification. When the number of cloud service APIs is huge, it focuses on the consistent user experience and the good compatibility between partners and the open platform, which helps cloud services improve the efficiency of intercommunication between products and enables open platform cloud services to be better utilized by partners.

[0056] 3. The open platform of the present invention supports the use of batch requests to reduce the number of calls to the API interface, uses a cache mechanism to store commonly used data, and considers the use of asynchronous requests to process a large number of tasks, thereby improving the response speed of the system.

[0057] 4. The open platform of the present invention adopts a combined national secret algorithm for data transmission, which has fast encryption and decryption speeds, a small limit on the length of plaintext that can be encrypted, and secure and stable data transmission, thereby improving the operating performance of the open platform.

[0058] 5. The open platform of the present invention adopts measures such as unpacking, packaging, desensitizing and restoring for data transmission involving sensitive and valuable information, which effectively prevents API from malicious attacks and unauthorized access, and ensures the security and stability of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0059] Figure 1 This is a schematic diagram of the structure of the API interface information of the open platform of the present invention;

[0060] Figure 2 It is a schematic diagram of the configuration of the API interface information of the present invention;

[0061] Figure 3 It is a schematic diagram of the structure of the protocol information of the open platform of the present invention;

[0062] Figure 4 It is a schematic diagram of the configuration of the protocol information of the present invention;

[0063] Figure 5 A schematic diagram of the structure of service registration of the open platform of the present invention;

[0064] Figure 6 It is a schematic diagram of the structure of unpacking and packing of the open platform of the present invention;

[0065] Figure 7 The schematic diagram of the structure of the open platform of the present invention is as follows:

[0066] Figure 8 A schematic diagram of a flow chart of a method for using the open platform of the present invention;

[0067] Fig. 9 This is a schematic diagram of the data security transmission process of the open platform of the present invention;

[0068] Fig.10 This is a schematic diagram of the data desensitization and restoration process of the open platform of the present invention;

[0069] Fig.11 This is a schematic diagram of the principle structure of data unpacking and packaging of the open platform of the present invention;

[0070] Fig.12 It is a schematic diagram of the structure of the electronic device of the present invention. DETAILED DESCRIPTION

[0071] Embodiments of the present invention are described in detail below, examples of which are shown in the accompanying drawings, wherein the same or similar symbols throughout represent the same or similar elements or elements with the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present invention, and cannot be understood as limiting the present invention.

[0072] The existing open Internet financial leasing platforms often have API interfaces that are not standardized and have problems such as poor security, poor data applicability, and inadequate performance optimization. As a result, when partners call the open platform API interfaces, there are problems such as request failures and incorrect return results.

[0073] In view of the above problems, the present invention provides an open Internet financial leasing platform. Figure 1 A structural diagram of the financial leasing Internet open platform method provided in an embodiment of the present invention, wherein the open platform includes: an interface information module, a protocol information module, a service registration module, an unpacking and packaging module, a desensitizing and restoring module, and a configuration management module.

[0074] The interface information module is mainly used to configure the information of the API interface, such as Figure 2 As shown, the API interface configuration information mainly includes: defining the interface ID, describing the interface, clarifying the current version, determining the combined service, and selecting the service definition file, etc.

[0075] Partner developers can understand the API interface definition, parameter requirements, return results and other information of financial services based on the API interface configuration information, so as to develop partner applications more efficiently.

[0076] The protocol information module is mainly used to register and configure the backend protocol information; Figure 3 As shown, the backend protocol information is associated with the internal system, which can configure the backend protocol according to the partner's call request, call the internal system, and exchange data.

[0077] Figure 4 As shown, the backend protocol information configuration mainly includes access mode, protocol type, system name, protocol name and message type, as well as configuration of request parameters, response parameters and advanced parameters.

[0078] Service registration module, such as Figure 5As shown, it is mainly used to register the associated API interface information and backend protocol information. For example, the API interface with the interface ID car_incomeLoanCalc has associated backend protocols such as http_out_bank. When the partner calls the API interface with the request interface ID car_incomeLoanCalc, the open platform will provide backend protocols such as http_out_bank.

[0079] Unpacking and assembling modules, such as Figure 6 As shown, it is mainly used for unpacking and repacking the transmitted data; when the partners conduct transactions with the internal system through the open platform, they generally need to distinguish whether the message adopts a penetration transaction or an unpacking and repacking transaction.

[0080] When partners conduct transactions with internal systems through an open platform, messages do not need to be converted or mapped. In this case, there is generally no need to perform package unpacking configuration and a penetrating transaction can be used directly. When messages need to be converted and mapped, the package unpacking and assembly module is used to perform data unpacking and assembly processing.

[0081] The desensitizing and restoration module is used to desensitize and restore the transmitted data. When the open platform interacts with partners over data, requests for user privacy data may be processed through data desensitization and restoration mechanisms. Through data desensitization and restoration, the user's personal information can be protected from being leaked. For example, the desensitized and restored data may be private information such as mobile phone numbers, ID card numbers, or bank card numbers.

[0082] like Figure 7 As shown, the configuration management module mainly includes application management, general management, registration center and partner management. Through the configuration management module, various functions such as registering partner information, allocating keys, authorizing partner API interface permissions and key settings can be realized. Through the configuration management module, the open platform can be configured and managed to ensure the secure transmission of data between the open platform and partners.

[0083] like Figure 8 As shown, the present invention also discloses a method for using the above open platform, the steps comprising:

[0084] S1. Use the open platform to register the partner's information, allocate keys, and authorize the partner's API interface permissions.

[0085] During the data exchange process, the gateway of the open platform API interface will verify the calling permissions of the partner users and control the service calling permissions. If the calling permissions exist, the service will be processed normally; otherwise, if the system does not have calling permissions, the transaction will be directly rejected.

[0086] Permission configuration can utilize the configuration management module of the open platform to register partner user information, allocate keys, and authorize partner API interface permissions so that partner users obtain service call permissions. The call permissions of certain services can be allocated to a partner user application, or certain partner user applications can be prohibited from accessing certain services.

[0087] S2. Register the associated API interface information and backend protocol information.

[0088] API interface configuration information mainly includes: defining interface ID, describing interface, clarifying current version, determining combined services, and selecting service definition files, etc. Partner developers can understand the API interface definition, parameter requirements, return results, and other information of financial services based on the API interface configuration information, so as to develop partner applications more efficiently.

[0089] The backend protocol information is used to associate the internal system. It can configure the backend protocol according to the partner's call request, call the internal system, and exchange data. The backend protocol information configuration mainly includes the access mode, protocol type, system name, protocol name and message type, as well as the configuration of request parameters, response parameters and advanced parameters.

[0090] The service registration module is used to register and associate API interface information with backend protocol information. For example, the API interface with the interface ID car_incomeLoanCalc has associated backend protocols such as http_out_bank. When the partner calls the API interface with the interface ID car_incomeLoanCalc, the open platform will provide backend protocols such as http_out_bank.

[0091] S3. Based on the partner's call request, identify the partner, adapt the service operation framework, and match the API interface information.

[0092] Identify partners based on their call requests, which mainly includes identity identification and service identification.

[0093] Identity recognition is to confirm the developer's information through the developer's AppID, hardware information and other information through preset configuration rules to identify the developer's identity.

[0094] Service identification is to identify the target service of this request call through RestFul specifications and configurations; it also supports service identification based on key fields in the message content; it supports service identification in multiple message formats, such as: XML, SOAP, FIX, Json, ISO8583, SWIFT, delimiter, SOP, key-value, etc.

[0095] The adaptation service framework includes the protocol adaptation framework and the message adaptation framework, which can meet a variety of different access rules and conversion rules.

[0096] The protocol adaptation framework provides a variety of access protocol types to meet the communication protocols of different partners, can adapt to the protocol rules of the partner's private adapter, and can be flexibly expanded and customized according to actual needs.

[0097] The message adaptation framework provides adaptation functions for multiple message specifications to meet the message format requirements of different partners. At the same time, it can convert the received message format into the message format recognized by the internal system, and can also be flexibly expanded and customized according to actual needs.

[0098] The adaptation framework can quickly call the partner service bus or the interface provided by the internal system to complete the service integration between systems.

[0099] The open platform adapts to different protocols and realizes the conversion of adapted messages to meet the requirements of different partners for message formats.

[0100] The protocol adaptation framework supports multiple communication protocol types such as Socket, WebService, HTTP 1.1 / 1.0, HTTPS, MQ, CICS, TCP (short connection / long connection), JMS, SOAP (HTTP+XML), EJB, RMI, Tuxedo, Tong-Link, etc., which can meet the access requirements of different partner application systems.

[0101] The message adaptation framework supports the adaptation and conversion of XML, SOAP, fixed-length, 8583, JSON and other messages; it also supports message conversion based on a variety of expression specifications (such as XSLT, Xpath, SOAP, etc.); it also supports data parsing and format verification in predefined data formats, such as XML, XSD, DTD, etc., and supports message parsing with circular structures.

[0102] S4. Based on the matching API interface information, execute the backend protocol information, unpack and assemble the data, and securely transmit the data between the partner and the open platform.

[0103] If the partners and the open platform use plain text for transmission according to the agreement, there will be security risks. Therefore, the national secret algorithm can be used to ensure the security of the transmitted messages.

[0104] Specifically, as shown in Table 1, the national secret algorithms mainly include sm2, sm3 and sm4.

[0105] Table 1 National secret algorithm table

[0106] algorithm effect illustrate sm2 Asymmetric encryption algorithm Encrypted random key sm3 Hash Algorithm Signature processing to prevent message tampering sm4 Symmetric encryption algorithm Encrypt the message

[0107] The SM2 algorithm uses an asymmetric encryption key, which consists of two elements (i.e., a private key and a public key). These two elements form a key pair. The public key, as the name suggests, can be shared with anyone, so there is no need to worry about its secure distribution, as long as you keep the private key yourself; but the SM2 algorithm asymmetric encryption also has its defects, the encryption and decryption speeds are slow, and the length of the plaintext that can be encrypted is also limited.

[0108] The SM3 algorithm mainly uses the Hash algorithm to sign and process to prevent the message from being tampered with.

[0109] The SM4 algorithm uses a symmetric encryption algorithm with fast encryption and decryption speeds and a small limit on the length of plaintext that can be encrypted.

[0110] Combining the advantages and disadvantages of symmetric encryption and asymmetric encryption, a combination of multiple algorithms can be used to transmit data securely.

[0111] Specifically, Fig. 9 As shown, data from partners to the open platform is securely transmitted, including

[0112] The partner generates a random key locally, and then uses the SM2 algorithm to encrypt the random key using the open platform public key. It is more secure to use the asymmetric encryption SM2 algorithm to encrypt the random key; then assemble the message.

[0113] For example, assemble messages such as product plan, number of installments, amount, repayment method, etc.:

[0114] {"requestNo":"WX172014810238871119",

[0115] "projectNo":"W0001",

[0116] "merchantNo":"JX00CS",

[0117] "repaymentMethod":"1",

[0118] "productId":"xxxx",

[0119] "loanPeriods":"xx",

[0120] "yearRate":"xx",

[0121] "loanAmount":"xxx"}

[0122] Then you can use the SM3 algorithm to sign the message to generate a signature, and then use the SM4 algorithm and a random key to encrypt the message. Here, a symmetric encryption algorithm is used, which has a fast encryption speed and can encrypt a larger amount of plaintext data.

[0123] The message structure after processing includes:

[0124] {"ScrtSgn":"Signature",

[0125] "ScrtData":"Encrypted message",

[0126] "ScrtKey":"Encrypted random key"}

[0127] The partner then calls the open platform according to the agreement. After receiving the assembled message, the open platform starts to use the SM2 algorithm to use the open platform private key to decrypt the random key. After obtaining the random key, it uses SM4 to decrypt the message and obtain the plaintext message of the original assembled message. Then, the SM3 algorithm can be used to generate a signature for the decrypted response message, and then compare it with the uploaded signature.

[0128] After the above is completed, you can start calling the backend internal system to perform business logic processing and get the returned response message.

[0129] Then the data is securely transmitted from the open platform to the partners, including:

[0130] The open platform uses the SM2 algorithm to encrypt the random key with the partner's public key, and then can use the SM3 algorithm to sign the response message to generate a signature, and then use SM4 and the random key to encrypt the response message and return it to the partner. The partner first uses the SM2 algorithm to decrypt with its own private key to obtain the random key, and then uses the SM4 algorithm and the random key to decrypt the response message. Then, the SM3 algorithm can be used to summarize the decrypted response message to generate a signature, and then compare it with the uploaded signature. After the signature verification is completed, the plain text is obtained to start processing the partner's local business logic.

[0131] like Fig.10 As shown, data is securely transmitted between the partner and the open platform, and also includes restoring the data entering the open platform and desensitizing the data leaving the open platform.

[0132] When the open platform and its partners interact with each other, requests for user privacy data will be involved. For these privacy data, data desensitization and desensitization restoration mechanisms can be used to ensure that the user's personal information is secure and not leaked; desensitized data includes: mobile phone number, ID card number, bank card number and other information.

[0133] The principle of desensitizing and restoring the open platform is: for the data entering the open platform from the partners, perform data desensitizing and restoration operations; for the data going out of the open platform to the partners, perform desensitizing processing operations.

[0134] Through the above-mentioned desensitizing and restoration processing, it can be ensured that the data sent out by the open platform are all encrypted information after desensitizing processing, avoiding the leakage of customer information; when the request initiated by the partner user enters the internal system through the open platform, it will be desensitized and restored to ensure that the data obtained by the internal system is real and valid user data.

[0135] When the open platform and its partners are exchanging data, the partners generally determine whether to depacketize the message based on their needs through transactions between the open platform and its internal system.

[0136] When partners conduct transactions with internal systems through an open platform, messages do not need to be converted or mapped. In this case, there is generally no need to perform package unpacking configuration and a penetrating transaction can be used directly. When messages need to be converted and mapped, the package unpacking and assembly module is used to perform data unpacking and assembly processing.

[0137] When unpacking and packaging are adopted, after receiving the assembled message from the partner, the open platform converts the assembled message fields into metadata for unpacking; then the open platform converts the metadata into request fields for packaging according to the internal system requirements.

[0138] When the open platform receives the response message from the internal system, it converts the response message fields into metadata for unpacking; then, according to the partner's requirements, the open platform converts the metadata into response fields for packaging.

[0139] When partners conduct transactions with internal systems through an open platform (ESB), a depacketization transaction requires two depacketizations, namely, the depacketization of the partner's request message and the depacketization of the internal system's response message.

[0140] like Fig.11 As shown, a set of ESB disassembly package configuration file structures include

[0141] channel_channel name_service_service name.xml, channel to service SDO request interface configuration. This configuration file is published in the IN container, i.e. SmartESB\configs\in_conf\metadata directory.

[0142] channel_system_service_service_name.xml, system-to-service SDO response interface configuration. This configuration file is published in the OUT container, that is, in the SmartESB\configs\out_conf\metadata directory.

[0143] Furthermore, the open platform also includes an asynchronous transaction function. The open platform supports asynchronous transaction records. The open platform records each transaction requested for query and correction. If transaction logs are recorded synchronously during the transaction, the consumption of transaction execution will increase, and the dependence on the database will also increase. If there is a problem or failure in the database, the open platform may not work.

[0144] Therefore, the open platform adopts an asynchronous mechanism to record transaction flows, which is independent of the database and will not affect the operation of the open platform in the event of a short-term database failure.

[0145] The open platform also supports real-time upload of transaction flow, the upload time can be parameterized, and supports local disk storage of flow when the database is unavailable. When the database is restored and available, it supports re-storage of unstored flow. It provides complete flow migration, backup and cleanup strategies to ensure the efficiency of current flow tables and easy cleanup of historical flow tables.

[0146] Furthermore, the open platform can also record asynchronous logs. The open platform can use the API interface gateway to provide a unified asynchronous log management function, provide asynchronous log specifications and API interfaces, and use a unified asynchronous mode of logging. The log information of a complete processing process of each transaction can be sorted according to the fragment mark, which is convenient for reading and analysis. It can also support different log level definition and configuration functions, dynamically refresh the log level and log recording status switch, and log for specified services.

[0147] The present invention also provides an electronic device, Fig.12 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention, such as Fig.12 As shown, the electronic device may include: a processor, a communications interface, a memory, and a communications bus, wherein the processor, the communications interface, and the memory communicate with each other via the communications bus. The processor may call the logic instructions in the memory, for example, to execute the following method:

[0148] S1. Use the open platform to register the partner's information, allocate keys, and authorize the partner's API interface permissions;

[0149] S2. Register the associated API interface information and backend protocol information;

[0150] S3. According to the partner's call request, identify the partner, adapt the service operation framework, and match the API interface information;

[0151] S4. Based on the matching API interface information, execute the backend protocol information, unpack and assemble the data, and securely transmit the data between the partner and the open platform.

[0152] In addition, the logic instructions in the above-mentioned memory can be implemented in the form of software functional units and can be stored in a computer-readable storage medium when sold or used as an independent product. Based on such an understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art or the part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.

[0153] An embodiment of the present invention further provides a non-transitory computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the method provided in each of the above embodiments is implemented, for example, including:

[0154] S1. Use the open platform to register the partner's information, allocate keys, and authorize the partner's API interface permissions;

[0155] S2. Register the associated API interface information and backend protocol information;

[0156] S3. According to the partner's call request, identify the partner, adapt the service operation framework, and match the API interface information;

[0157] S4. Based on the matching API interface information, execute the backend protocol information, unpack and assemble the data, and securely transmit the data between the partner and the open platform.

[0158] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative labor.

[0159] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

[0160] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A financial leasing Internet open platform, characterized by: The open platform includes: The interface information module is used to configure the information of the API interface; The protocol information module is used to register and configure the backend protocol information; The service registration module is used to register the associated API interface information and backend protocol information; The unpacking and packaging module is used to unpack and package the transmitted data; Desensitization and restoration module, used to perform desensitization and restoration processing on the transmitted data; Configuration management module, used to register partner information, allocate keys and authorize partner API interface permissions; Among them, data is securely transmitted between the open platform and its partners.

2. A method for using the financial leasing Internet open platform according to claim 1, characterized in that: Includes steps: S1. Use the open platform to register the partner's information, allocate keys, and authorize the partner's API interface permissions; S2. Register the associated API interface information and backend protocol information; S3. According to the partner's call request, identify the partner, adapt the service operation framework, and match the API interface information; S4. Based on the matching API interface information, execute the backend protocol information, unpack and assemble the data, and securely transmit the data between the partner and the open platform.

3. The method for using the financial leasing Internet open platform according to claim 2 is characterized in that: Identifying the partner in S3 includes identity identification and service identification; The identification is to confirm the information of the partner through the AppID and hardware information of the partner through the preset configuration rules to identify the identity of the partner; The service identification is to identify the target service of this request call through the RestFul specification and configuration.

4. The method for using the financial leasing Internet open platform according to claim 2 is characterized in that: The adaptation service framework in S3 includes a protocol adaptation framework and a message adaptation framework, wherein: The protocol adaptation framework provides access protocol types, adapts the protocol rules of the partner's private adapter, and allows flexible expansion and custom development as needed; The message adaptation framework provides the adaptation function of multiple message specifications, converting the received message format into the message format recognized by the internal system.

5. The method for using the financial leasing Internet open platform according to claim 4 is characterized in that: The protocol adaptation framework supports multiple communication protocol types including Socket, WebService, HTTP 1.1 / 1.0, HTTPS, MQ, CICS, TCP, JMS, SOAP, EJB, RMI, Tuxedo, and Tong-Link; The message adaptation framework supports the adaptation function conversion of XML, SOAP, fixed-length, 8583, and JSON message specifications.

6. The method for using the financial leasing Internet open platform according to claim 2 is characterized in that: In S4, data is securely transmitted between the partner and the open platform, including secure data transmission from the partner to the open platform, and the steps are: S41a, the partner locally generates a random key; S42a, using the sm2 algorithm to encrypt the random key using the open platform public key; S43a, assembling message; S44a, encrypt the message using sm4 and a random key; S45a, calling the open platform to transmit the assembly message; S46a, the open platform uses the sm2 algorithm to decrypt the random key using the open platform private key; S47a. The open platform uses sm4 to decrypt the message and obtain the original plaintext message.

7. The method for using the financial leasing Internet open platform according to claim 2 is characterized in that: In S4, data is securely transmitted between the partner and the open platform, and also includes secure data transmission from the open platform to the partner, and the steps are: S41b, the open platform uses the sm2 algorithm to encrypt the random key using the partner's public key; S42b, encrypt the response message using the sm4 algorithm and a random key; S43b, a response message is returned to the partner; S44b, the partner uses the sm2 algorithm to decrypt with the private key to obtain a random secret key; S45b. Use the sm4 algorithm and the random key to decrypt and obtain a response message.

8. The method for using the financial leasing Internet open platform according to claim 6 or 7 is characterized in that: When data is securely transmitted between partners and the open platform in S4, it also includes: The partner uses sm3 to sign the assembled message and generate a signature. The open platform uses the sm3 algorithm to generate a signature by summarizing the decrypted assembled message. The open platform uses the SM3 algorithm to sign the response message to generate a signature, and the partner uses the SM3 algorithm to generate a signature by summarizing the decrypted response message.

9. The method for using the financial leasing Internet open platform according to claim 2 is characterized in that: The S4 performs secure data transmission between the partner and the open platform, and also includes restoring the data entering the open platform and desensitizing the data leaving the open platform.

10. The method for using the financial leasing Internet open platform according to claim 2 is characterized in that: The step S4 performs unpacking and packing processing on the data, including: After receiving the assembled message from the partner, the open platform converts the assembled message fields into metadata for unpacking; then the open platform converts the metadata into request fields for packaging according to the internal system requirements; After receiving the response message from the internal system, the open platform converts the response message fields into metadata for unpacking; then, according to the partner's requirements, the open platform converts the metadata into response fields for packaging.

Images