A method and system for controlling the validity of a two-dimensional code

Verify customer identity through the human-computer interactive interface and generate QR codes with timestamps and random numbers, limiting the number of scans and valid time, solving the problem of QR codes lacking timeliness and number of control, and improving information security and business risks control.

CN110929816BActive Publication Date: 2024-12-24PING AN TECH (SHENZHEN) CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN201910987384.3
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2019-10-17
Publication Date
2024-12-24
Estimated Expiration
2039-10-17

AI Technical Summary

Technical Problem

The QR codes in the existing industry system lack timeliness and frequency control, resulting in serious information leakage and security risks.

Method used

Receive customer's biological information characteristics and operation information through the human-computer interactive interface, judge the operational legality, and generate an associated QR code. The QR code contains a unique identifier and time stamp, limits the number of scans and effective time, and prevents illegal scanning and abuse.

Benefits of technology

Effectively avoid leakage of sensitive information, reduce the risk of QR code being replaced by illegal elements, improve information confidentiality and business security, reduce the possibility of fraud, limit the scope of QR code use, and prevent account managers from handling without monitoring environments business.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN110929816B_ABST
    Figure CN110929816B_ABST
Patent Text Reader

Abstract

The present invention discloses a method for generating a two-dimensional code, and a method for controlling the validity of a two-dimensional code of the present invention, comprising the following steps: receiving a customer operation carrying the customer's biometric information characteristics and operation information through a human-computer interaction interface, and judging whether the customer operation is legal; if legal, generating two-dimensional code associated information; generating a two-dimensional code according to the two-dimensional code associated information, wherein the two-dimensional code is associated with a two-dimensional code unique identifier and the two-dimensional code associated information; the two-dimensional code unique identifier is a combination of a timestamp and a random number; counting the number of times the two-dimensional code is scanned, and when the number of times the two-dimensional code is scanned is equal to a preset maximum number of scans, identifying the two-dimensional code as an invalid two-dimensional code.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to a two-dimensional code generation method, and in particular to a two-dimensional code validity control method. Background Art

[0002] Two-dimensional barcodes (2-dimensional barcodes) cleverly use the concept of "0" and "1" bit streams that form the internal logic basis of computers in code compilation, and automatically read through image input devices or photoelectric scanning devices to realize automatic information processing: it has certain verification functions, etc. It also has the function of automatically identifying information in different rows and processing graphic rotation change points.

[0003] In the fields of media communication, anti-counterfeiting traceability, business card social networking, corporate marketing and electronic payment, QR codes are used as carriers of information. The defects of traditional information transmission methods based on QR codes: As information carriers, the URLs and other links carried by QR codes have security concerns, such as QR code viruses and QR code Trojans. The information receiver cannot identify the information publisher. Criminals can use QR code generators to create QR codes according to their own wishes and hide traps in them.

[0004] In addition, many systems use real-time QR codes as the entry point for customers to handle business. QR codes are an open information storage method in the industry. If the QR code is a link, and the link carries important parameters or personal information on the page, there will be a risk of information leakage. For example, there are QR codes on movie tickets, train tickets, etc. If they are discarded at will, it is easy to cause personal information leakage. QR codes are used as credentials, such as using QR codes to get movie tickets. If the QR codes are used by others, it will cause losses.

[0005] Some QR codes in existing industry systems have no timeliness and control over the number of times they are used, resulting in serious security risks such as information leakage. Summary of the invention

[0006] The main technical problem solved by the present invention is to provide a method for controlling the validity of a two-dimensional code, which can solve the problem that the two-dimensional codes in the existing industry system have no timeliness and the number of times are controlled, resulting in serious security risks caused by information leakage.

[0007] In order to solve the above technical problems, a technical solution adopted by the present invention is to provide a method for controlling the validity of a two-dimensional code, the steps of which are as follows:

[0008] Receive customer operations that carry the customer's biometric information and operation information through the human-computer interaction interface, and determine whether the customer operation is legal; if legal, generate QR code related information;

[0009] Generate a QR code according to the QR code associated information, wherein the QR code is associated with a QR code unique identifier and the QR code associated information; the QR code unique identifier is a combination of a timestamp and a random number;

[0010] The number of times the QR code is scanned is counted, and when the number of times the QR code is scanned is equal to a preset maximum number of scans, the QR code is identified as an invalid QR code.

[0011] Among them, the system pre-configuration information is queried to see whether the customer has an in-transit work order. If so, it is judged to be illegal; if not, it is judged to be legal;

[0012] Check in the system pre-configuration information whether the customer manager account specified by the customer is invalid. If it is invalid, it is judged to be illegal; if it is not invalid, it is judged to be legal;

[0013] In the system pre-configuration information, check whether the customer's legal age meets the age requirements. If so, it is judged to be illegal; if not, it is judged to be legal.

[0014] The steps to determine whether the customer's operation is legal include:

[0015] In the system pre-configuration information, it is queried whether the customer belongs to a specific customer group. If so, it is judged to be legal.

[0016] The step of generating a QR code according to the QR code associated information includes:

[0017] Extracting one or more sub-information in the QR code associated information as specific display information;

[0018] The specific display information is combined with the QR code to generate a QR code image, and the specific display information is displayed in the middle of the QR code image.

[0019] This also includes timing the generation time of the QR code, and

[0020] When the number of times the QR code is scanned is less than the maximum number of scans, and the QR code generation time is less than the QR code validity time, the QR code is recognized as a valid QR code;

[0021] When the number of times the QR code is scanned is equal to the maximum number of scans, and the QR code generation time is less than the QR code validity time, the QR code is identified as an invalid QR code;

[0022] When the number of times a QR code is scanned is less than the maximum number of scans, and the QR code generation time is equal to the QR code validity time, the QR code is identified as an invalid QR code.

[0023] The method also includes steps of preventing the first terminal from cheating, which are as follows:

[0024] Requesting authentication information from the first terminal at a set time interval, and obtaining a hardware identification code of the first terminal through the authentication information;

[0025] When any terminal scans the QR code, the hardware identification code of the terminal is obtained;

[0026] Comparing the hardware identification code of the terminal with the hardware identification code of the first terminal to determine whether the terminal is the first terminal;

[0027] If it is determined that the terminal is the first terminal, the operation of the terminal is prohibited.

[0028] The method further includes limiting the scanning location of the second terminal, which is as follows:

[0029] When the second terminal scans the QR code, the location information of the second terminal is obtained;

[0030] Comparing the location information of the second terminal with the pre-stored scanning location limit range to determine whether the second terminal is located within the scanning location limit range;

[0031] If the second terminal is outside the defined range of the scanning location, the operation of the second terminal is prohibited.

[0032] In order to solve the above technical problems, the present invention also adopts a technical solution: providing a risk control system for the validity of a business two-dimensional code, comprising:

[0033] A human-computer interaction device for displaying an interactive interface and collecting biometric information characteristics of customers;

[0034] A QR code database, used to store QR code related information, QR code unique identifier and QR code image;

[0035] A counting module, used to store the maximum scanning number, count the number of times the associated QR code is scanned, and compare the number of times the QR code is scanned with the maximum scanning number;

[0036] The timing module is used to store the effective time of the QR code, to time the generation time of the associated QR code, and to compare the generation time of the QR code with the effective time of the QR code.

[0037] In order to solve the above technical problems, the present invention also adopts a technical solution: providing a computer device, comprising:

[0038] one or more processors;

[0039] A memory, used to store one or more programs, so that one or more processors can implement any one of the two-dimensional code validity control methods of claims 1-7.

[0040] In order to solve the above technical problems, the present invention also adopts a technical solution: providing a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, a risk control method for the validity of a business QR code according to any one of claims 1 to 7 is implemented.

[0041] A method for controlling the validity of a QR code in the above scheme:

[0042] 1. Customers can input their biometric information (including face or fingerprints) and operation information (including identification of ID cards) through the human-computer interaction interface, and then the system will compare and judge the legitimacy of the customer's operation, which can effectively avoid the leakage of sensitive information and ensure the accuracy and security of the QR code-related information;

[0043] 2. The QR code is associated with a unique QR code identifier and the QR code associated information, wherein the unique QR code identifier is composed of a timestamp plus a random number, and the QR code associated information and the QR code image are both in the form of links in a specific format, which can reduce the risk of the QR code being replaced by criminals, reduce the possibility of users being defrauded when scanning the code, and improve the security of the QR code;

[0044] 3. The generated QR code has a limit on the number of times it can be scanned. When the number of times the QR code is scanned equals the preset maximum number of scans, the QR code will be identified as an invalid QR code, which can improve the confidentiality of information and reduce business risks. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] In order to more clearly illustrate the scheme of the present invention, a brief introduction is given below to the drawings required for use in the description of the embodiments. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0046] Figure 1 It is a flow chart of an embodiment of a method for controlling the validity of a two-dimensional code;

[0047] Figure 2 A flow chart of steps for preventing a first terminal from cheating;

[0048] Figure 3 A flowchart of steps for limiting the scanning location of the second terminal;

[0049] Figure 4 A structural system for risk control of business QR code validity in one embodiment of the present invention;

[0050] Figure 5 is a basic structural block diagram of a computer device in one embodiment of the present invention;

[0051] Figure 6 use Figure 1 An example diagram of a QR code image style generated by a method for controlling the validity of a QR code. DETAILED DESCRIPTION

[0052] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by technicians in the technical field of this application; the terms used in the specification of the application herein are only for the purpose of describing specific embodiments and are not intended to limit this application; the terms "including" and "having" and any variations thereof in the specification and claims of this application and the above-mentioned drawings are intended to cover non-exclusive inclusions. The terms "first", "second", etc. in the specification and claims of this application or the above-mentioned drawings are used to distinguish different objects, not to describe a specific order.

[0053] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various locations in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0054] The present invention is described in detail below with reference to the accompanying drawings and embodiments.

[0055] See also Figure 1 , Figure 1 The present invention is a flowchart of an embodiment of a method for controlling the validity of a two-dimensional code.

[0056] It should be noted that if there are substantially the same results, the method of the present invention is not limited to Figure 1 The process sequence shown is limited to the following steps:

[0057] A method for controlling the validity of a two-dimensional code in this embodiment comprises the following steps:

[0058] S101: receiving a customer operation carrying the customer's biometric information and operation information through a human-computer interaction interface, and determining whether the customer operation is legal; if legal, generating QR code associated information;

[0059] Among them, customer biometric information includes face, fingerprint, voiceprint and even iris, etc., which are used to uniquely identify the customer. It is collected and saved in the system database when creating a customer account, and operation information is user information entered by the customer other than the customer's biometric information, that is, other information reserved by the customer when creating a customer account as part of the system pre-configuration information, including customer name, ID card identification information, password, mobile phone number, verification code, and specific unlock pattern and other information.

[0060] The so-called customer operation refers to the process in which the customer inputs the customer's biometric information and operation information into the system through the human-computer interaction interface. The customer's operations on the human-computer interaction interface include entering fingerprints according to the prompts of the human-computer interaction interface, submitting identification documents and / or making specific actions. In this process, the system calls the customer's biometric information and operation information associated with the customer account in the database for comparison and judgment to confirm the identity of the customer. If all information is judged to be consistent after comparison, the customer's operation is judged to be legal. Therefore, the customer needs to confirm himself in advance through optical recognition, face recognition, or / and fingerprint recognition, and other identification methods to prevent illegal generation of QR codes. After confirming that he is the customer, the system generates QR code associated information.

[0061] In short, step S101 is the pre-process for generating a QR code: that is, judging whether the customer's operation is legal based on the customer's biometric information characteristics and the customer's operation information on the human-computer interaction interface, and generating QR code associated information on the premise that the customer's operation is legal. The QR code associated information is stored in the database and is used to generate the QR code and associate it with the QR code based on a unique identification tag or link.

[0062] The QR code associated information generated above may include: account manager ID, customer name, business type name, user ID card, and business type ID.

[0063] S102: Generate a two-dimensional code according to the two-dimensional code associated information, wherein the two-dimensional code is associated with a two-dimensional code unique identifier and the two-dimensional code associated information; the two-dimensional code unique identifier is a combination of a timestamp and a random number;

[0064] Among them, the system generates a QR code image and associates it with a QR code unique identifier and QR code information. The QR code unique identifier is composed of a timestamp and a random number. The QR code associated information and the QR code image exist in the form of links in a specific format, and the above-mentioned QR code unique identifier, QR code associated information and QR code image are stored in the QR code data table of the database, which stores multiple QR codes in a certain order.

[0065] Specifically, the QR code associated information is in the form of a link, such as: http: / / system domain name / pafenqi / appUser / appUser! auth.json? userId = account manager id & codeUUID = & busType Id = business type id & cusId = user id & tmSta = timestamp; the QR code image is in the form of a link, such as: http: / / system domain name / ygxb2 / Erweima / 20190307 / 16 / 5A563FCACF60B3EE8FD.png; the generated QR code image style is as follows: Figure 6 shown.

[0066] S103: Counting the number of times the two-dimensional code is scanned, and when the number of times the two-dimensional code is scanned is equal to a preset maximum number of scans, identifying the two-dimensional code as an invalid two-dimensional code.

[0067] The generated QR code also includes a number limit, that is, the QR code is associated with a counting module stored in the system, and the counting module is the maximum scanning number of the corresponding QR code. When the QR code is scanned once, the maximum scanning number in the counting module is reduced by 1, until the maximum scanning number in the counting module is zero, at which time the QR code is invalid; or when the QR code is scanned once, the number of times the QR code is scanned in the counting module is increased by 1, until the number of times the QR code is scanned is equal to the maximum scanning number, at which time the QR code is invalid;

[0068] If the business needs to be processed again, step S101 should be repeated to regenerate a new QR code.

[0069] After the customer or other person selects a service in step S101, a corresponding QR code and a corresponding counting module are generated. According to different service types, different maximum scanning times are preset in the counting module. The customer scans the QR code until the QR code is invalid. The invalidation warning is displayed on the human-computer interaction interface to remind the customer or account manager to regenerate the QR code.

[0070] Furthermore, the system pre-configuration information is queried to see whether the customer has an in-transit work order. If so, it is judged to be illegal; if not, it is judged to be legal;

[0071] Check in the system pre-configuration information whether the customer manager account specified by the customer is invalid. If it is invalid, it is judged to be illegal; if it is not invalid, it is judged to be legal;

[0072] In the system pre-configuration information, check whether the customer's legal age meets the age requirements. If so, it is judged to be illegal; if not, it is judged to be legal.

[0073] Specifically, some customers may have handled business before, so there may be work order information for the customer's business changes in the system. Therefore, when the customer performs customer operations through the human-computer interaction interface and makes a new business request, the system should query the system pre-configuration information in the database to see whether there is any business associated with the customer that has been handled but not effective (in-transit work order) before responding to the new business request. If an in-transit work order is found, the new business will not be responded to. Therefore, if it is found that the customer has an in-transit work order, the customer's operation is illegal.

[0074] At the same time, the database also stores the information of all account managers (including those in office, resigned, on-the-job, etc.). The information of on-the-job account managers is displayed on the human-computer interaction interface for customers to choose as needed. Customers can also designate account managers they are familiar with to handle business. However, due to resignation, function change, etc., some account managers' previous accounts will be invalid. Therefore, when the customer selects the account manager to handle business, the account manager's information will be compared with the account manager's information in the system pre-configured information in the database. If the account manager cannot be found or the account manager resigns, leaves the job, or changes position, the account manager's account is invalid, and no QR code will be generated. It will be displayed on the human-computer interaction interface as the reason for the failure to generate the QR code.

[0075] Similarly, when general users conduct property-related business, they should have civil capacity and reach the legal age or not exceed a certain age. The business age processing conditions are compared against the system pre-configured information stored in the database reserved by the customer when the customer account is created. If the customer's age is younger than the fixed age in the business processing conditions, the above conditions are not met, and this reason is displayed on the human-computer interaction interface as the reason for the failure to generate the QR code; the customer needs to change the information or choose other methods to handle the business based on the failure information fed back by the human-computer interaction interface.

[0076] Furthermore, the steps for determining whether the customer operation is legal include:

[0077] In the system pre-configuration information, it is queried whether the customer belongs to a specific customer group. If so, it is judged to be legal.

[0078] Specifically, for some services, only specific customers or specific customer groups can handle them. Therefore, the pre-process of generating a QR code also includes determining the information of specific customers or specific customer groups, storing the specific customer or specific customer group information in the database as part of the system pre-configuration information, and querying whether the specific customer list and the specific customer group list are associated with the customer account. After the customer confirms that the information is valid, if the specific customer list and the specific customer group list are found to be associated with the customer account, it is determined that the customer belongs to a special customer or a special customer group.

[0079] The database stores the information of all account managers (including those currently employed, resigned, on-the-job, etc.) as part of the system pre-configuration information. If the account manager cannot be found in the database or the account manager resigns, leaves the job, or changes position, the account of the account manager will be invalid, while the account of the on-the-job account manager will be valid, that is, a valid account manager account. For example, on-the-job VIP account managers and one-to-one account managers should determine whether the customers they serve are special customers or in the list of special customer groups when generating business QR codes. After the customer confirms that the information is valid, it will be further determined whether the customer belongs to a special customer or a special customer group, so as to open up more permissions to the account manager or create more business options for the user.

[0080] Furthermore, the step of generating a QR code according to the QR code associated information includes:

[0081] Extracting one or more sub-information in the QR code associated information as specific display information;

[0082] The specific display information is combined with the QR code to generate a QR code image, and the specific display information is displayed in the middle of the QR code image.

[0083] Specifically, when a QR code image is generated, specific display information can be displayed in the middle of the QR code image as needed. The specific display information comes from the QR code associated information. One or two sub-information is selected from the QR code associated information and displayed in the middle of the QR code image as needed.

[0084] For example, if it is necessary to display the customer's name and the type of business being handled, the customer information and business type information in the QR code-related information are retrieved, and the text is generated into an image format and attached to the middle of the QR code image to remind the customer of the business they are handling, so that the account manager can quickly identify whether the information is incorrect when providing business guidance.

[0085] Furthermore, it also includes timing the generation time of the QR code, and

[0086] When the number of times the QR code is scanned is less than the maximum number of scans, and the QR code generation time is less than the QR code validity time, the QR code is recognized as a valid QR code;

[0087] When the number of times the QR code is scanned is equal to the maximum number of scans, and the QR code generation time is less than the QR code validity time, the QR code is identified as an invalid QR code;

[0088] When the number of times a QR code is scanned is less than the maximum number of scans, and the generation time of the QR code is equal to the validity time of the QR code, the QR code is identified as an invalid QR code.

[0089] Specifically, the generated QR code also includes a time limit, that is, the QR code is associated with a timing module stored in the system, and the counting module is the life of the corresponding QR code, that is, the effective time of the QR code. When the QR code is generated, the timing starts in the timing module until the effective time of the QR code is exhausted, at which time the QR code is invalid. If the business needs to be handled again, step S101 should be repeated to regenerate a new QR code. When the timing module and the counting module act at the same time, the one that reaches the expiration condition of the QR code first shall prevail.

[0090] After the customer or other person selects a service in step S101, a corresponding QR code and a corresponding timing module are generated. Different times are preset in the timing module according to different service types, and the QR code has different QR code validity times. After the QR code is generated, the corresponding timing module starts timing until the QR code validity time expires. In this case, the QR code becomes invalid, and an invalidation warning may be displayed on the human-computer interaction interface to remind the customer or account manager to regenerate the QR code.

[0091] For example, the browser of a device that has accessed a QR code will record the number of successful visits, and add cookies when accessing the page to record the number of visits (counting module), with a validity period of one year (timing module). If the number is equal to the threshold (i.e. the maximum number of scans), access is not allowed, and an email is sent to notify the system manager, providing early warning for such frequently accessed devices and situations.

[0092] See also Figure 2 , Figure 2 A flow chart of steps for preventing a first terminal from cheating.

[0093] Furthermore, the method further includes a step of preventing the first terminal from cheating, which is specifically as follows:

[0094] S201: Requesting authentication information from the first terminal at a set time interval, and obtaining a hardware identification code of the first terminal through the authentication information;

[0095] S202: When any terminal scans the QR code, a hardware identification code of the terminal is obtained;

[0096] That is, after any terminal scans the QR code, the terminal establishes communication with the system, and the system requests the terminal to send the first terminal's own hardware identification code to the system. After receiving the above request, the first terminal includes its own hardware identification code in the information packet sent to the system and sends it.

[0097] S203: Compare the hardware identification code of the terminal with the hardware identification code of the first terminal to determine whether the terminal is the first terminal;

[0098] Since the hardware identification code of the first terminal has been saved in the system at a certain frequency interval in step S201, when the first terminal is assumed to be a device held by the business personnel themselves, the first terminal is configured to be unable to access services that are only for customers, and the hardware identification code of any terminal is obtained by scanning the QR code. Since the hardware identification code is unique, it can be determined whether any terminal is the first terminal. In addition, since the number of business personnel is plural, the number of first terminals should not be understood as only one.

[0099] S204: If it is determined that the terminal is the first terminal, prohibiting the operation of the terminal.

[0100] Specifically, the first terminal is a device held by the business personnel themselves. Because the generated QR code also includes device restrictions, in order to prevent business personnel from cheating, the business personnel are required to authenticate their own devices at regular intervals and save the authentication information in the database. When scanning the QR code, the device information (hardware identification code) of the QR code is also sent. The device information of the QR code is compared with the pre-stored business personnel device information. If they are the same, it is determined that the business personnel is operating it themselves, and a prompt will be given or an alarm message will be sent through the system to other responsible personnel for notification.

[0101] For example, the QR code of the installment system is scanned by the customer under the guidance of the account manager, and the account manager (business personnel) cannot use their own devices to scan the code. By saving the device information when logging in and comparing it with the device information of the business, it is determined whether the account manager personally handles the work order. If it is determined that the account manager scans the code with his own device, a prompt will be prompted that the operation is not allowed.

[0102] See also Figure 3 , Figure 3 A flow chart of steps for limiting the scanning location of the second terminal.

[0103] Furthermore, the method further includes a step of limiting the scanning location of the second terminal, which is specifically as follows:

[0104] S301: When the second terminal scans the QR code, the location information of the second terminal is obtained;

[0105] The second terminal should turn on the positioning function by default and be able to obtain its own positioning information in real time. After the second terminal scans the QR code, the second terminal establishes communication with the system, and the system requests the second terminal to send its own positioning information to the system. After receiving the above request, the second terminal includes its own real-time positioning information in the information packet sent to the system.

[0106] S302: Compare the positioning information of the second terminal with the pre-stored scanning location limit range to determine whether the second terminal is located within the scanning location limit range;

[0107] The human-computer interaction devices are placed in various locations, and the service range of each human-computer interaction device is stored in the system in the form of an electronic map. When the system obtains the positioning information of the second terminal, it determines whether the positioning information falls within the service range of the human-computer interaction device with which it interacts.

[0108] S303: If the second terminal is outside the limited range of the scanning location, prohibiting the operation of the second terminal.

[0109] Specifically, the second terminal corresponds to a device held by the customer himself. Because the generated QR code also includes location range restrictions, some services can only be handled at specific locations such as business halls. Therefore, when scanning the QR code, the positioning information of the device scanning the QR code is sent at the same time. The positioning information of the scanned QR code is compared with the preset positioning information. If the device positioning information is within the preset positioning information range, it is deemed valid, otherwise it is invalid.

[0110] If the organization has turned on GPS range control, the URL link corresponding to the QR code will detect the location information of the scanning device and calculate the distance between the location and the business hall. If it is within the specified range, the interface will be allowed to be opened to handle business. If it exceeds the range, a prompt will be displayed saying "Please go to the business hall to handle business."

[0111] A method for controlling the validity of a QR code in the above scheme: through the preliminary information generated by the initial user verification process, the accuracy and security of the QR code-related information are ensured to prevent information leakage; the autonomy of account managers in handling business is reduced, the risk of account manager fraud is reduced, and the security of business handling is improved; the risk of QR codes being replaced by criminals is reduced, and the possibility of users being defrauded when scanning the code is reduced; the scope of use of QR codes is limited, and the abuse of QR codes is eliminated by locating the scanning location, and the account managers can be prevented from handling business in an environment without monitoring; the confidentiality of information is improved through restrictions on the number of times and time.

[0112] See also Figure 4 , Figure 4 A schematic diagram of a structural system for risk control of the validity of a business QR code in one embodiment of the present invention.

[0113] In order to solve the above technical problems, the present invention also adopts a technical solution: providing a risk control system for the validity of a business two-dimensional code, comprising:

[0114] Human-computer interaction device 401, used to display an interactive interface and collect biometric information characteristics of the customer;

[0115] The human-computer interaction device 401 provides a human-computer interaction interface, through which the customer's biometric information characteristics and the customer's operation information on the human-computer interaction interface are collected. The above-mentioned customer biometric information includes biological information such as face and fingerprint. The customer's operation information on the human-computer interaction interface includes specific actions made according to the prompts of the human-computer interaction interface, identification of identity documents submitted, etc., to confirm that it is the customer himself. Therefore, the customer needs to confirm himself in advance through OCR recognition, face recognition, or / and fingerprint recognition, and other recognition methods to prevent illegal generation of QR codes. After confirming that it is the customer himself, the system generates QR code associated information.

[0116] A QR code database 402, used to store QR code related information, QR code unique identifiers and QR code images;

[0117] It is also used to store other information associated with the QR code, including customer information, business personnel information, account manager information, customer groups, and various business processing conditions.

[0118] The counting module 403 is used to store the maximum scanning times, count the scanning times of the associated two-dimensional code, and compare the scanning times of the two-dimensional code with the maximum scanning times;

[0119] Because the generated QR code also includes a number limit, that is, the QR code is associated with a counting module, and the counting module is the maximum number of scans of the corresponding QR code. When the QR code is scanned once, the maximum number of scans in the counting module is reduced by 1 until the maximum number of scans in the counting module is zero, at which time the QR code is invalid; or when the QR code is scanned once, the number of times the QR code is scanned in the counting module is increased by 1 until the number of times the QR code is scanned is equal to the maximum number of scans, at which time the QR code is invalid;

[0120] The timing module 404 is used to store the effective time of the QR code, and to time the generation time of the associated QR code, and to compare the generation time of the QR code with the effective time of the QR code.

[0121] Because the generated QR code also includes a time limit, that is, the QR code is associated with a timing module stored in the system, and the counting module corresponds to the lifespan of the QR code, that is, the valid time of the QR code. When the QR code is generated, the timing starts in the timing module until the valid time of the QR code is exhausted. At this time, the QR code is invalid. If the business needs to be handled again, step S101 should be repeated to regenerate a new QR code.

[0122] To solve the above technical problems, the embodiment of the present invention also provides a computer device. Figure 5 , Figure 5 The figure is a basic structural block diagram of a computer device in one embodiment of the present invention.

[0123] The computer device 5 includes a memory 51, a processor 52, and a network interface 53 that are interconnected and communicated through a system bus. It should be noted that the figure only shows a computer device 5 having components 51-53, but it should be understood that it is not required to implement all the components shown, and more or fewer components can be implemented instead. Among them, those skilled in the art can understand that the computer device here is a device that can automatically perform numerical calculations and / or information processing according to pre-set or stored instructions, and its hardware includes but is not limited to microprocessors, application specific integrated circuits (Application Specific Integrated Circuit, ASIC), programmable gate arrays (Field-Programmable Gate Array, FPGA), digital processors (Digital Signal Processor, DSP), embedded devices, etc.

[0124] Computer devices can be computing devices such as desktop computers, notebooks, PDAs, and cloud servers. Computer devices can interact with users through keyboards, mice, remote controls, touch pads, or voice control devices.

[0125] The memory 51 includes at least one type of readable storage medium, and the readable storage medium includes flash memory, hard disk, multimedia card, card-type memory (for example, SD or DX memory, etc.), random access memory (RAM), static random access memory (SRAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), programmable read-only memory (PROM), magnetic memory, magnetic disk, optical disk, etc. In some embodiments, the memory 51 can be an internal storage unit of the computer device 5, such as a hard disk or memory of the computer device 5. In other embodiments, the memory 51 can also be an external storage device of the computer device 5, such as a plug-in hard disk equipped on the computer device 5, a smart memory card (SmartMedia Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), etc. Of course, the memory 51 can also include both the internal storage unit of the computer device 5 and its external storage device. In this embodiment, the memory 51 is generally used to store the operating system and various application software installed on the computer device 5, such as the program code of the X method, etc. In addition, the memory 51 can also be used to temporarily store various data that have been output or are to be output.

[0126] The processor 52 may be a central processing unit (CPU), a controller, a microcontroller, a microprocessor, or other data processing chips in some embodiments. The processor 52 is generally used to control the overall operation of the computer device 5. In this embodiment, the processor 52 is used to run the program code stored in the memory 51 or process data, such as running the program code of the X method.

[0127] The network interface 53 may include a wireless network interface or a wired network interface, and the network interface 53 is generally used to establish a communication connection between the computer device 5 and other electronic devices.

[0128] The present invention also provides another embodiment, that is, a computer-readable storage medium is provided, the computer-readable storage medium stores an X program, and the X program can be executed by at least one processor to enable the at least one processor to perform the steps of the above-mentioned X method.

[0129] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course can also be implemented by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, a magnetic disk, or an optical disk), and includes a number of instructions for a terminal device (which can be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to execute the methods of various embodiments of the present invention.

[0130] Obviously, the embodiments described above are only some embodiments of the present invention, rather than all embodiments. The preferred embodiments of the present invention are given in the accompanying drawings, but they do not limit the patent scope of the present invention. The present invention can be implemented in many different forms. On the contrary, the purpose of providing these embodiments is to make the understanding of the disclosure of the present invention more thorough and comprehensive. Although the present invention has been described in detail with reference to the aforementioned embodiments, for those skilled in the art, it is still possible to modify the technical solutions recorded in the aforementioned specific embodiments, or to perform equivalent replacements for some of the technical features therein. Any equivalent structure made using the contents of the specification and drawings of the present invention, directly or indirectly used in other related technical fields, is also within the scope of patent protection of the present invention.

Claims

1. A method for controlling the validity of a two-dimensional code, characterized in that: Here are the steps: Receive customer operations that carry customer biometric information and operation information through a human-computer interaction interface, and determine whether the customer operations are legal; if legal, generate QR code associated information; Generate a two-dimensional code according to the two-dimensional code associated information, wherein the two-dimensional code is associated with a two-dimensional code unique identifier and the two-dimensional code associated information; the two-dimensional code unique identifier is a combination of a timestamp and a random number; Counting the number of times the two-dimensional code is scanned, and when the number of times the two-dimensional code is scanned is equal to a preset maximum number of scans, identifying the two-dimensional code as an invalid two-dimensional code; Preventing the first terminal from cheating, the specific steps include: Requesting authentication information from the first terminal at a set time interval, and obtaining a hardware identification code of the first terminal through the authentication information; When any terminal scans the QR code, the hardware identification code of the terminal is obtained; Comparing the hardware identification code of the terminal with the hardware identification code of the first terminal to determine whether the terminal is the first terminal, the first terminal is a device owned by the business personnel themselves, and the first terminal is configured to be unable to access services only for customers; If it is determined that the terminal is the first terminal, prohibiting the operation of the terminal; Limit the scanning location of the second terminal. The specific steps include: When the second terminal scans the QR code, the location information of the second terminal is obtained, and the second terminal corresponds to the device held by the customer; Comparing the location information of the second terminal with the pre-stored scanning location limit range to determine whether the second terminal is located within the scanning location limit range; If the second terminal is outside the scan location limit, the operation of the second terminal is prohibited.

2. A method for controlling the validity of a two-dimensional code according to claim 1, characterized in that: The steps of determining whether the customer operation is legal include: Check whether the customer has an in-transit work order in the system pre-configuration information. If so, it is judged to be illegal; if not, it is judged to be legal; Inquiring whether the customer manager account designated by the customer is invalid in the system pre-configuration information, and if so, judging it as illegal; if not, judging it as legal; In the system pre-configuration information, it is queried whether the legal age of the customer meets the age requirement. If so, it is judged to be illegal; if not, it is judged to be legal.

3. A method for controlling the validity of a two-dimensional code according to claim 1, characterized in that: The steps of determining whether the customer operation is legal include: In the system pre-configuration information, it is queried whether the customer belongs to a specific customer group. If so, it is determined to be legal.

4. A method for controlling the validity of a two-dimensional code according to claim 1, characterized in that: The step of generating a QR code according to the QR code associated information comprises: Extracting one or more sub-information in the QR code associated information as specific display information; The specific display information is combined with the two-dimensional code to generate a picture of the two-dimensional code, and the specific display information is displayed in the middle of the picture of the two-dimensional code.

5. A method for controlling the validity of a two-dimensional code according to claim 1, characterized in that: It also includes timing the generation time of the two-dimensional code, and When the number of times the two-dimensional code is scanned is less than the maximum number of scans, and the time when the two-dimensional code is generated is less than the valid time of the two-dimensional code, the two-dimensional code is identified as a valid two-dimensional code; When the number of times the two-dimensional code is scanned is equal to the maximum number of scans, and the generation time of the two-dimensional code is less than the validity time of the two-dimensional code, the two-dimensional code is identified as an invalid two-dimensional code; When the number of times the two-dimensional code is scanned is less than the maximum number of scans, and the generation time of the two-dimensional code is equal to the validity time of the two-dimensional code, the two-dimensional code is identified as an invalid two-dimensional code.

6. A risk control system for the validity of a business QR code, characterized in that: The risk control system for the validity of the business two-dimensional code implements the control method for the validity of the two-dimensional code according to any one of claims 1 to 5, and the risk control system for the validity of the business two-dimensional code includes: A human-computer interaction device for displaying an interactive interface and collecting biometric information characteristics of customers; A QR code database, used to store QR code related information, QR code unique identifier and QR code image; A counting module, used to store the maximum scanning number, count the number of times the associated two-dimensional code is scanned, and compare the number of times the two-dimensional code is scanned with the maximum scanning number; The timing module is used to store the effective time of the two-dimensional code, and to time the generation time of the associated two-dimensional code, and to compare the generation time of the two-dimensional code with the effective time of the two-dimensional code.

7. A computer device, characterized in that: include, one or more processors; A memory, used to store one or more programs, so that one or more processors can implement any one of the two-dimensional code validity control methods of claims 1-5.

8. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method for controlling the validity of a two-dimensional code according to any one of claims 1 to 5 is implemented.