A business handling method, terminal and server

Abstract

A business processing method, terminal and server provided in the present application can be used in the field of information security technology, and two identification codes are used for secondary authentication. First, the user terminal identity is obtained through the first identification code, and then a second identification code can be generated according to the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity; in this way, the user's own identity can be used to decrypt the input interface address of the business processing system, thereby preventing other user terminals from stealing the second identification code for illegal business processing, ensuring the security of business processing, so that all business can be processed online, ensuring the security and confidentiality of online business.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a business processing method, a terminal and a server. Background Art

[0002] Currently, many bank branch services have been transferred to ATMs, but the phenomenon of queues at ATMs still exists. When users need to handle certain services, they need to wait for a long time. However, due to the security restrictions of the bank's own business, many core businesses cannot be directly added to online processing. This leads to many deficiencies. Moreover, with the accelerated pace of life, customers who have to wait in line for a long time will inevitably have negative emotions and are prone to conflicts with counter staff when handling business.

[0003] At present, the main way for banks to reduce the queue phenomenon of ATMs is to increase the number of ATMs, but ATMs are expensive, occupy a large area, and consume electricity, which all increase capital investment. The method of reducing customer queue time by increasing the number of ATMs requires more investment, including the capital investment of the ATMs themselves, the rent caused by the area occupied by the ATMs, and the corresponding maintenance funds and electricity costs.

[0004] Obviously, the current existing technology cannot solve the problem of queuing for business processing. Summary of the invention

[0005] In response to the problems in the prior art, the present application provides a business processing method, terminal and server. In order to reduce the phenomenon of queuing at ATMs, two identification codes are used for secondary authentication. First, the user terminal identity is obtained through the first identification code, and then a second identification code can be generated based on the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity; in this way, the user's own identity can be used to decrypt the input interface address of the business processing system, thereby preventing other user terminals from stealing the second identification code for illegal business processing, ensuring the security of business processing, so that all business can be processed online, ensuring the security and confidentiality of online business.

[0006] To solve at least one of the above technical problems, the present application provides the following technical solutions:

[0007] In a first aspect, the present application provides a service handling method, which is executed by a user terminal, each user terminal includes a user terminal identity, and the service handling method includes:

[0008] Scan the first identification code; the first identification code is used to obtain the user terminal identity, and then the second identification code can be generated according to the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity;

[0009] Scan the second identification code and use the user terminal identity to decrypt the input interface address of the business processing system;

[0010] Input user identity information and business requirement information into the input interface of the business processing system to complete the business processing.

[0011] In a preferred embodiment, it also includes:

[0012] Connected to the private network of a bank branch, or connected to the private network corresponding to the teller machine; the step of generating a second identification code according to the user terminal identity is performed after the server determines that the user terminal identity is in the private network.

[0013] In a preferred embodiment, it also includes:

[0014] Input the connection permission SMS verification code on the verification interface so that the server permits the user terminal to connect to the private network; wherein the connection permission SMS verification code is generated by the server after the user terminal is connected to the private network.

[0015] In a preferred embodiment, in the process of inputting user identity information and business demand information on the input interface of the business processing system, it also includes:

[0016] Heartbeat check information is sent to the server regularly or at set intervals to ensure that the server remains connected to the private network during the business processing process.

[0017] In a preferred embodiment, the first identification code and / or the second identification code is a QR code.

[0018] In a second aspect, the present application provides a service handling method, which is executed by a server, and the service handling method includes:

[0019] Obtaining a user terminal identity identifier fed back by the user terminal scanning the first identification code;

[0020] Generate a second identification code according to the user terminal identity identifier; the second identification code includes an input interface address of a business processing system encrypted using the user terminal identity identifier;

[0021] Obtain the user terminal to input user identity information and business demand information on the input interface of the business processing system to complete the business processing; wherein the user terminal scans the second identification code and uses the user terminal identity to decrypt the input interface address of the business processing system.

[0022] In a preferred embodiment, it also includes:

[0023] A first identification code is generated.

[0024] In a preferred embodiment, it also includes:

[0025] Determine whether the user terminal is in a private network, and if so, execute the step of generating a second identification code according to the user terminal identity.

[0026] In a preferred embodiment, it also includes:

[0027] Receiving a network access request sent by the user terminal;

[0028] Generate a connection permission SMS verification code according to the network access request;

[0029] The connection permission SMS verification code is sent to the user terminal via the GMS network.

[0030] In a preferred embodiment, it also includes:

[0031] The heartbeat check information sent by the user terminal is received regularly or at set intervals to ensure that the connection to the private network is maintained during the service processing.

[0032] In a preferred embodiment, the first identification code and / or the second identification code is a QR code.

[0033] In a third aspect, the present application provides a user terminal, each user terminal including a user terminal identity, the user terminal including:

[0034] A first scanning module, scanning a first identification code and a second identification code; the first identification code is used to obtain a user terminal identity, and then a second identification code can be generated according to the user terminal identity; the second identification code includes an input interface address of a business processing system encrypted with the user terminal identity;

[0035] A decryption module, using the user terminal identity to decrypt the input interface address of the business processing system;

[0036] The business processing module inputs user identity information and business demand information on the input interface of the business processing system to complete the business processing.

[0037] In a preferred embodiment, it also includes:

[0038] A network connection module is connected to the private network of a bank branch, or to the private network corresponding to an ATM; the step of generating a second identification code according to the user terminal identity is performed after the server determines that the user terminal identity is in the private network.

[0039] In a preferred embodiment, it also includes:

[0040] The verification code input module inputs the connection permission SMS verification code in the verification interface so that the server allows the user terminal to connect to the private network; wherein the connection permission SMS verification code is generated by the server after the user terminal is connected to the private network.

[0041] In a preferred embodiment, it also includes:

[0042] The heartbeat check module sends heartbeat check information to the server regularly or at set intervals during the process of inputting user identity information and business demand information in the input interface of the business processing system, so that the server can determine to maintain the connection to the private network during the business processing process.

[0043] In a preferred embodiment, the first identification code and / or the second identification code is a QR code.

[0044] In a fourth aspect, the present application provides a server, including:

[0045] An identity obtaining module, which obtains the user terminal identity fed back by the user terminal scanning the first identification code;

[0046] A second identification code generating module, generating a second identification code according to the user terminal identity identifier; the second identification code includes an input interface address of a business processing system encrypted with the user terminal identity identifier;

[0047] The business information acquisition module acquires the user identity information and business requirement information input by the user terminal in the input interface of the business processing system to complete the business processing; wherein the user terminal scans the second identification code and uses the user terminal identity to decrypt the input interface address of the business processing system.

[0048] In a preferred embodiment, it also includes:

[0049] The first identification code generation module generates a first identification code.

[0050] In a preferred embodiment, it also includes:

[0051] The network determination module determines whether the user terminal is in a private network, and if so, executes the step of generating a second identification code according to the user terminal identity.

[0052] In a preferred embodiment, it also includes:

[0053] A network access request receiving module, receiving a network access request sent by the user terminal;

[0054] A text message generation module, which generates a connection permission text message verification code according to the network access request;

[0055] The SMS sending module sends the connection permission SMS verification code to the user terminal through the GMS network.

[0056] In a preferred embodiment, it also includes:

[0057] The heartbeat check information receiving module receives the heartbeat check information sent by the user terminal regularly or at set intervals to ensure that the connection to the private network is maintained during the service processing.

[0058] In a preferred embodiment, the first identification code and / or the second identification code is a QR code.

[0059] In a fifth aspect, the present application provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the business processing method when executing the program.

[0060] In a sixth aspect, the present application provides a computer-readable storage medium having a computer program stored thereon, which implements the business processing method when executed by a processor.

[0061] It can be seen from the above technical solution that the present application provides a business processing method, terminal and server, which specifically include: scanning a first identification code; the first identification code is used to obtain a user terminal identity, and then a second identification code can be generated based on the user terminal identity; the second identification code includes an input interface address of a business processing system encrypted using the user terminal identity; scanning the second identification code, and using the user terminal identity to decrypt the input interface address of the business processing system; entering user identity information and business demand information in the input interface of the business processing system to complete business processing.

[0062] It can be seen that in order to reduce the phenomenon of queuing at ATMs, the present application adopts two identification codes for secondary authentication. First, the user terminal identity is obtained through the first identification code, and then the second identification code can be generated according to the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity; in this way, the user's own identity can be used to decrypt the input interface address of the business processing system, thereby preventing other user terminals from stealing the second identification code for illegal business processing, ensuring the security of business processing, so that all business can be processed online, ensuring the security and confidentiality of online business.

[0063] In a preferred embodiment, the present application can integrate online and offline collaboration at the same time, placing the complex business processes that currently require queuing online, and executing the business that does not require queuing offline in cooperation with the lobby manager, thereby further improving security while eliminating the need for queuing. BRIEF DESCRIPTION OF THE DRAWINGS

[0064] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0065] Figure 1 It is a structural diagram of the business processing system in an embodiment of the present application.

[0066] Figure 2 It is one of the flow charts of the business handling method in the embodiment of the present application.

[0067] Figure 3 This is the second flowchart of the business handling method in the embodiment of the present application.

[0068] Figure 4 It is a schematic diagram of the structure of a user terminal in an embodiment of the present application.

[0069] Figure 5 It is a schematic diagram of the structure of the server in the embodiment of the present application.

[0070] Figure 6 It is a schematic diagram of the structure of an electronic device in an embodiment of the present application. DETAILED DESCRIPTION

[0071] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0072] It should be noted that the business processing method, terminal and server disclosed in this application can be used in information security technology, and can also be used in any field other than information security technology. The application field of the business processing method, terminal and server disclosed in this application is not limited.

[0073] Considering that many of the services at bank branches have been transferred to ATMs, the phenomenon of queues at ATMs still exists. When users need to handle certain services, they need to wait for a long time. However, due to the security restrictions of the bank's own business, many core businesses cannot be directly added to online processing. This leads to many deficiencies. Moreover, with the accelerated pace of life, customers who have been queuing for a long time will inevitably have negative emotions and are prone to conflicts with counter staff when handling business.

[0074] At present, the main way for banks to reduce the queue phenomenon at ATMs is to increase the number of ATMs. However, ATMs are expensive, occupy a large area, and consume electricity, which increases capital investment. The method of reducing customer queue time by increasing the number of ATMs requires more investment, including the capital investment of the ATMs themselves, the rent caused by the area occupied by the ATMs, and the corresponding maintenance funds and electricity costs. Obviously, the current existing technology cannot solve the problem of business processing queues.

[0075] First, the current process of handling business through bank ATMs is explained:

[0076] 1. Select the type of business you need to handle on the ATM, insert the bank card, ID card and other required materials, and read the bank card and ID card information.

[0077] 2. Fill in the relevant information and some detailed options required to handle the business.

[0078] 3. The ATM automatically calls the bank lobby manager to confirm whether the person entering the account is the person himself / herself and to provide anti-fraud reminders.

[0079] 4. The lobby manager confirms and sets the business as available for processing through the lobby manager's dedicated terminal. The business is then completed on the bank's back-end server.

[0080] 5. Print the receipt.

[0081] It is important to note that in addition to serving people who are not good at using mobile APPs for online business operations, bank ATMs also need to provide security services for many businesses, which require the parties involved to go to a bank branch with their identity information (ID card) to handle such matters (e.g. large-value fund transfers, activation of online bank card payment functions, etc.). Therefore, steps 1 / 4 / 5 in the above steps involving identity verification cannot be omitted.

[0082] Regarding the queuing phenomenon, the most time-consuming part of handling business at the ATM is filling in information and various selection operations. On the one hand, it is time-consuming to fill in information and it is not a client that customers often operate, and there are problems with UI usability and understanding of the meaning of options. The security verification that must be performed on the ATM for these steps has been completed before, and the subsequent call to the lobby manager does not have to be completed by the ATM. The most time-consuming work of filling in information and selecting options can be transferred to the user's mobile phone, giving up the ATM as a competitive resource (it is more convenient to operate the information that you are familiar with, and if you don’t know how to fill it out, you can still ask the bank staff, and there is no one queuing behind you).

[0083] Based on the above content, the present application also provides a user terminal and a server for implementing the service handling method provided in one or more embodiments of the present application, such as Figure 1 As shown, the server S1 can be communicatively connected with the user terminal B1, and there can be multiple user terminals B1. The user terminal B1 can access the server through the bank app.

[0084] Among them, the server S1 can obtain the user terminal identity feedback by the user terminal B1 scanning the first identification code; generate a second identification code based on the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity; obtain the user identity information and business demand information input by the user terminal in the input interface of the business processing system to complete the business processing; wherein the user terminal scans the second identification code and uses the user terminal identity to decrypt the input interface address of the business processing system.

[0085] The user terminal B1 can scan a first identification code; the first identification code is used to obtain the user terminal identity, and then a second identification code can be generated based on the user terminal identity; the second identification code includes an input interface address of a business processing system encrypted using the user terminal identity; scan the second identification code, and use the user terminal identity to decrypt the input interface address of the business processing system; enter user identity information and business demand information in the input interface of the business processing system to complete business processing.

[0086] It is understandable that the user terminal may include a smart phone, a tablet electronic device, a portable computer, a desktop computer, a personal digital assistant (PDA), a smart wearable device, etc. Among them, the smart wearable device may include smart glasses, a smart watch, a smart bracelet, etc.

[0087] like Figure 1 As shown, the user terminal has a communication module, which can communicate with a remote server to achieve data transmission with the server. For example, the communication unit can send the user terminal identity to the server so that the server stores the user terminal identity.

[0088] The server and the user terminal may communicate with each other using any suitable network protocol, including network protocols that have not yet been developed on the date of filing this application. The network protocol may include, for example, TCP / IP protocol, UDP / IP protocol, HTTP protocol, HTTPS protocol, etc. Of course, the network protocol may also include, for example, RPC protocol (Remote Procedure Call Protocol) and REST protocol (Representational State Transfer) used on top of the above protocols.

[0089] The business processing method, user terminal, server electronic device and computer-readable storage medium provided in the present application use two identification codes for secondary authentication. First, the user terminal identity is obtained through the first identification code, and then a second identification code can be generated based on the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity; in this way, the user's own identity can be used to decrypt the input interface address of the business processing system, thereby preventing other user terminals from stealing the second identification code for illegal business processing, ensuring the security of business processing, so that all business can be processed online, ensuring the security and confidentiality of online business.

[0090] The details are described through the following multiple embodiments and application examples.

[0091] In order to solve the problem that users need to wait for a long time when they need to handle certain services due to queues at ATMs, but due to the security restrictions of the bank's own business, many core businesses cannot be directly added to online processing, resulting in many deficiencies. With the accelerated pace of life, customers who wait in line for a long time will inevitably have negative emotions and easily conflict with counter business personnel when handling business. This application provides an embodiment of a business handling method, see Figure 2 The method is implemented by a user terminal, and the service handling method specifically includes the following contents:

[0092] Step 101: Scan a first identification code.

[0093] In this step, the first identification code is used to obtain the user terminal identity, and then the second identification code can be generated according to the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity.

[0094] It can be understood that the user terminal identity can be understood as the unique identification information of the customer to be recommended, which can be internal identification information within the bank, such as a multi-digit letter code or a digital code, and further can be a hash value. The identity information can also be the customer's public ID, such as an identity card, social security card, etc., but the present application is not limited to this.

[0095] Furthermore, the first identification code and the second identification code may be a QR code, or other specially made encryption codes, such as a pattern converted from a hash value, that is, an internal encryption code of a bank, but the present application is not limited thereto.

[0096] For example, the second identification code can use the user's ID number combined with a random number to generate a hash value, and each character is converted into a specific pattern (such as a black and white nine-square grid) according to the hash value, which can form a complete pattern when spliced ​​together.

[0097] Step 102: Scan the second identification code and use the user terminal identity to decrypt the input interface address of the business processing system.

[0098] In the present application, for a user terminal, the first identification code and the second identification code may be scanned by a camera. In some embodiments, the user terminal may be a mobile phone, and the first identification code and the second identification code may be scanned by a camera built into the mobile phone.

[0099] Furthermore, in the present application, the set bank app can use the user terminal identity to decrypt the second identification code to obtain the decrypted input interface entry.

[0100] In this embodiment, firstly, by scanning the first identification code, the server can obtain the identity of the user terminal. Generally speaking, the first identification code and the second identification code are both generated at the bank branch. Therefore, it can be known that the user terminal is within the scope of the bank branch. By confirming the first identification code, the second identification code can be generated based on the user identity. The second identification code essentially includes encrypted content encrypted by the user identity. The encrypted content can be the import entry of the business processing system. Then, as long as the decryption authentication is passed, the business processing system can be entered. In terms of security, even if other mobile phones scan the second identification code of the real user, due to the different built-in identity, the second identification code cannot be decrypted, which means that the security of business processing is correspondingly guaranteed.

[0101] That is, scanning the first identification code is equivalent to binding the user terminal, and scanning the second identification code is equivalent to decryption authentication, so that any business can be safely performed on the user terminal without queuing.

[0102] Step 103: Input user identity information and business requirement information on the input interface of the business processing system to complete the business processing.

[0103] Specifically, you can select the corresponding business on the input interface. More specifically, you can enter your own account number, password and other information on the input interface. Due to the early security guarantees, the input interface can include most of the businesses, and businesses that could not be handled online before can also be embedded in it.

[0104] It can be seen from the above technical solution that the business processing method provided by the present application specifically includes: scanning a first identification code; the first identification code is used to obtain a user terminal identity, and then a second identification code can be generated based on the user terminal identity; the second identification code includes an input interface address of a business processing system encrypted using the user terminal identity; scanning the second identification code, and using the user terminal identity to decrypt the input interface address of the business processing system; entering user identity information and business demand information in the input interface of the business processing system to complete the business processing.

[0105] It can be seen that in order to reduce the phenomenon of queuing at ATMs, the present application adopts two identification codes for secondary authentication. First, the user terminal identity is obtained through the first identification code, and then the second identification code can be generated according to the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity; in this way, the user's own identity can be used to decrypt the input interface address of the business processing system, thereby preventing other user terminals from stealing the second identification code for illegal business processing, ensuring the security of business processing, so that all business can be processed online, ensuring the security and confidentiality of online business.

[0106] In order to further ensure the security of the service, in one or more embodiments of the present application, restrictions may be imposed through a private network, specifically, including:

[0107] Connected to the private network of a bank branch, or connected to the private network corresponding to the teller machine; the step of generating a second identification code according to the user terminal identity is performed after the server determines that the user terminal identity is in the private network.

[0108] In this embodiment, the private network connection can ensure that the user terminal is within the network limit, thereby preventing illegal users from remotely intercepting the user terminal and counterfeiting the identity of the user terminal to steal funds.

[0109] In this application, the private network can correspond to the entire bank branch, that is, a bank branch builds a private network, or it can be a corresponding private network built by an ATM. Relatively speaking, the private network built by the ATM is more secure, and the business processing is limited to the jurisdiction corresponding to the ATM.

[0110] In order to further perform network verification and ensure the security of network connection, one or more embodiments of the present application further include:

[0111] Input the connection permission SMS verification code on the verification interface so that the server permits the user terminal to connect to the private network; wherein the connection permission SMS verification code is generated by the server after the user terminal is connected to the private network.

[0112] Specifically, through SMS authentication, combined with operator services, the SMS number is a number reserved by the bank, which further improves security.

[0113] Furthermore, in order to prevent the user terminal from being stolen, face recognition authentication can be performed on the ATM to ensure that the user terminal will not be stolen. In this embodiment, the following steps are specifically included:

[0114] Get the user's facial information;

[0115] Extracting features from the user's facial information to obtain a feature set;

[0116] The feature set is compared with the reserved feature set corresponding to the user identity in the database. If the comparison is consistent, the second identification code generation step is performed.

[0117] This embodiment ensures that the user is bound to the user terminal, avoids the possibility of the user terminal being stolen, and further improves security.

[0118] In order to ensure continuous connection of the private network and ensure that the entire business handling process is in the private network, in one or more embodiments of the present application, in the process of inputting user identity information and business demand information on the input interface of the business handling system, the following is also included:

[0119] Heartbeat check information is sent to the server regularly or at set intervals to ensure that the server remains connected to the private network during the business processing process.

[0120] In specific implementation, after scanning the QR code to enter the target website, the heartbeat message check must be maintained throughout the process. If the heartbeat is interrupted, it is necessary to report the error at the front desk that you have left the bank branch and send a reminder via SMS (to prevent the phone from automatically switching to a fake wifi due to signal strength problems and being transferred to a fake phishing website without knowing it). This can ensure that the entire processing process is safe and has no hidden dangers.

[0121] It is understandable that in the entire business processing process, offline and online coupling can be combined, that is, any sub-step in the business processing process can be handled by the lobby manager of the bank branch or the corresponding teller of the ATM, and this application does not impose any restrictions.

[0122] Furthermore, if the user does not carry a user terminal, a bank branch can provide a temporary user terminal, which can be collected after authentication using one's own ID card, facial recognition, etc. In this way, the current user's identity can be entered on the temporary user terminal, thus forming a user terminal corresponding to the user.

[0123] It can be understood that after the business processing is completed, the temporary user terminal will be automatically initialized, and no user information will be left behind. The temporary user terminal is a terminal customized within the bank, which can ensure user security.

[0124] The embodiments of the present application are further described below in conjunction with specific scenarios.

[0125] The optimized process is as follows:

[0126] 1. Select the type of business you need to handle on the ATM, insert the required materials such as bank card and ID card according to the selected business type, and read the material information.

[0127] 2. The ATM prompts the user to connect to the bank branch wifi (the user needs to be prompted to connect to the branch's exclusive wifi, for details, see wifi processing related)

[0128] 3. The ATM generates a QR code for customers to scan with their mobile phones

[0129] 4. The customer uses a mobile phone to scan the QR code (the scan result needs to be opened using the bank's dedicated APP, and the bank's dedicated APP also needs to use the QR code scanning tool.), fill in the information on the web page opened by scanning the QR code, or further refine and select the type of business to be handled.

[0130] 5. After filling in the form, a QR code will pop up on the web page, prompting the user to scan it at the ATM for final information confirmation (the original lobby manager confirmation step).

[0131] 6. The original lobby manager confirmation step can be replaced by an ATM, which needs to implement the following capabilities: (1) Allow the user to confirm the operation information, and list the information filled in by the user on the screen for the user to confirm (to prevent the message from being intercepted and tampered by fake WiFi); (2) Confirm again that the user is the one who is operating, and confirm through face recognition and fingerprint that the person who is confirming the operation is the one at this time; (3) Prompt the user to prevent fraud. According to the user's operation type, in scenarios involving transfers, the user is prompted to pay attention to fraudulent situations. No prompt is required for scenarios not involving accounts; (4) If the business is to apply for a savings card or a U-shield, the ATM will spit out the card or U-shield to the user.

[0132] 7. After confirmation, an electronic receipt will be generated.

[0133] To ensure business security, the following additional content is required:

[0134] 1. QR code timeliness: The QR code must be automatically updated every half to one minute, and the code before the update will be automatically invalidated.

[0135] 2. Single validity of the QR code: In the scenario where the user scans the QR code and enters the page, the page returns a message to the ICBC server that provides the web page. After receiving the message, the server invalidates the QR code. At the same time, the ATM automatically cancels the display of the QR code and returns to the main page (the main page is the page waiting for customers to come to handle business, that is, the page before the first step of the operation). In the scenario where the user provides the QR code for the ATM to scan, the QR code on the mobile phone is invalid and no longer automatically updated. The QR code is automatically removed from the page displaying the QR code, indicating that the QR code has been used.

[0136] 3. The timeliness of the information registration page. The webpage opened by the QR code in the third step has a timeliness of half an hour to one hour. After the time expires, you need to go back to the first step and restart the business or give up.

[0137] Wi-Fi processing related:

[0138] Wi-Fi connection:

[0139] 1. Before the QR code appears, the user needs to be prompted to connect to a specific wifi (exclusive wifi for bank branches), display the wifi name to be connected and the corresponding dynamic password (randomly generated, one for each person’s single wifi connection), and remind the user to maintain the wifi throughout the process without interruption.

[0140] 2. After the user uses the corresponding dynamic password to connect to the wifi, the ATM displays a QR code for the user to scan (if the user connects to the fake wifi used by the scammer, the ATM will not respond to prevent access to fake phishing websites)

[0141] 3. After scanning the QR code to enter the target website, the heartbeat message check must be maintained throughout the process. If the heartbeat is interrupted, it is necessary to report the error at the front desk that you have left the bank branch and send a reminder via SMS (to avoid the situation where the mobile phone automatically switches to a fake wifi due to signal strength problems and is transferred to a fake phishing website without knowing it). Until the user fills in the information to generate the QR code and scans the QR code on the ATM to start the confirmation step, there is no need to maintain the heartbeat message check.

[0142] In order to prevent fake base stations from stealing information by merely acting as a relay, the messages transmitted from the client (mobile phone) to the server need to be timestamped and asymmetrically encrypted.

[0143] It can be seen that the present application provides a business processing method. In order to reduce the phenomenon of queuing at ATMs, two identification codes are used for secondary authentication. First, the user terminal identity is obtained through the first identification code, and then a second identification code can be generated based on the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity; in this way, the user's own identity can be used to decrypt the input interface address of the business processing system, thereby preventing other user terminals from stealing the second identification code for illegal business processing, ensuring the security of business processing, so that all business can be processed online, ensuring the security and confidentiality of online business.

[0144] In order to solve the problem that users need to wait for a long time when they need to handle certain services due to queues at ATMs, but due to the security restrictions of the bank's own business, many core businesses cannot be directly added to online processing, resulting in many deficiencies. With the accelerated pace of life, customers who wait in line for a long time will inevitably have negative emotions and easily conflict with counter business personnel when handling business. This application provides an embodiment of a business handling method, see Figure 3 The method is implemented by the server, and the business handling method specifically includes the following contents:

[0145] Step 201: Obtain the user terminal identity identifier fed back by the user terminal scanning the first identification code.

[0146] In this step, the first identification code is used to obtain the user terminal identity, and then the second identification code can be generated according to the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity.

[0147] It can be understood that the user terminal identity can be understood as the unique identification information of the customer to be recommended, which can be internal identification information within the bank, such as a multi-digit letter code or a digital code, and further can be a hash value. The identity information can also be the customer's public ID, such as an identity card, social security card, etc., but the present application is not limited to this.

[0148] Furthermore, the first identification code and the second identification code may be a QR code, or other specially made encryption codes, such as a pattern converted from a hash value, that is, an internal encryption code of a bank, but the present application is not limited thereto.

[0149] For example, the second identification code can use the user's ID number combined with a random number to generate a hash value, and each character is converted into a specific pattern (such as a black and white nine-square grid) according to the hash value, which can form a complete pattern when spliced ​​together.

[0150] Step 202: Generate a second identification code according to the user terminal identity identifier; the second identification code includes an input interface address of a business processing system encrypted using the user terminal identity identifier.

[0151] In the present application, for a user terminal, the first identification code and the second identification code may be scanned by a camera. In some embodiments, the user terminal may be a mobile phone, and the first identification code and the second identification code may be scanned by a camera built into the mobile phone.

[0152] Furthermore, in the present application, the set bank app can use the user terminal identity to decrypt the second identification code to obtain the decrypted input interface entry.

[0153] In this embodiment, firstly, by scanning the first identification code, the server can obtain the identity of the user terminal. Generally speaking, the first identification code and the second identification code are both generated at the bank branch. Therefore, it can be known that the user terminal is within the scope of the bank branch. By confirming the first identification code, the second identification code can be generated based on the user identity. The second identification code essentially includes encrypted content encrypted by the user identity. The encrypted content can be the import entry of the business processing system. Then, as long as the decryption authentication is passed, the business processing system can be entered. In terms of security, even if other mobile phones scan the second identification code of the real user, due to the different built-in identity, the second identification code cannot be decrypted, which means that the security of business processing is correspondingly guaranteed.

[0154] That is, scanning the first identification code is equivalent to binding the user terminal, and scanning the second identification code is equivalent to decryption authentication, so that any business can be safely performed on the user terminal without queuing.

[0155] Step 203: Obtain the user terminal to input user identity information and business demand information in the input interface of the business processing system to complete the business processing; wherein the user terminal scans the second identification code and uses the user terminal identity to decrypt the input interface address of the business processing system.

[0156] Specifically, you can select the corresponding business on the input interface. More specifically, you can enter your own account number, password and other information on the input interface. Due to the early security guarantees, the input interface can include most of the businesses, and businesses that could not be handled online before can also be embedded in it.

[0157] It can be seen from the above technical solution that the business processing method provided by the present application specifically includes: scanning a first identification code; the first identification code is used to obtain a user terminal identity, and then a second identification code can be generated based on the user terminal identity; the second identification code includes an input interface address of a business processing system encrypted using the user terminal identity; scanning the second identification code, and using the user terminal identity to decrypt the input interface address of the business processing system; entering user identity information and business demand information in the input interface of the business processing system to complete the business processing.

[0158] It can be seen that in order to reduce the phenomenon of queuing at ATMs, the present application adopts two identification codes for secondary authentication. First, the user terminal identity is obtained through the first identification code, and then the second identification code can be generated according to the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity; in this way, the user's own identity can be used to decrypt the input interface address of the business processing system, thereby preventing other user terminals from stealing the second identification code for illegal business processing, ensuring the security of business processing, so that all business can be processed online, ensuring the security and confidentiality of online business.

[0159] In order to further ensure the security of the service, in one or more embodiments of the present application, restrictions may be imposed through a private network, specifically, including:

[0160] Determine whether the user terminal is in a private network, and if so, execute the step of generating a second identification code according to the user terminal identity.

[0161] In this embodiment, the private network connection can ensure that the user terminal is within the network limit, thereby preventing illegal users from remotely intercepting the user terminal and counterfeiting the identity of the user terminal to steal funds.

[0162] In this application, the private network can correspond to the entire bank branch, that is, a bank branch builds a private network, or it can be a corresponding private network built by an ATM. Relatively speaking, the private network built by the ATM is more secure, and the business processing is limited to the jurisdiction corresponding to the ATM.

[0163] In order to further perform network verification and ensure the security of network connection, one or more embodiments of the present application further include:

[0164] Receiving a network access request sent by the user terminal;

[0165] Generate a connection permission SMS verification code according to the network access request;

[0166] The connection permission SMS verification code is sent to the user terminal via the GMS network.

[0167] In order to ensure continuous connection to the private network and ensure that the entire business processing process is within the private network, one or more embodiments of the present application also include: regularly or at set intervals receiving heartbeat check information sent by the user terminal to ensure that the private network is connected during the business processing process.

[0168] In specific implementation, after scanning the QR code to enter the target website, the heartbeat message check must be maintained throughout the process. If the heartbeat is interrupted, it is necessary to report the error at the front desk that you have left the bank branch and send a reminder via SMS (to prevent the phone from automatically switching to a fake wifi due to signal strength problems and being transferred to a fake phishing website without knowing it). This can ensure that the entire processing process is safe and has no hidden dangers.

[0169] It is understandable that in the entire business processing process, offline and online coupling can be combined, that is, any sub-step in the business processing process can be handled by the lobby manager of the bank branch or the corresponding teller of the ATM, and this application does not impose any restrictions.

[0170] Furthermore, if the user does not carry a user terminal, a bank branch can provide a temporary user terminal, which can be collected after authentication using one's own ID card, facial recognition, etc. In this way, the current user's identity can be entered on the temporary user terminal, thus forming a user terminal corresponding to the user.

[0171] It can be understood that after the business processing is completed, the temporary user terminal will be automatically initialized, and no user information will be left behind. The temporary user terminal is a terminal customized within the bank, which can ensure user security.

[0172] The embodiments of the present application are further described below in conjunction with specific scenarios.

[0173] The optimized process is as follows:

[0174] 1. Select the type of business you need to handle on the ATM, insert the required materials such as bank card and ID card according to the selected business type, and read the material information.

[0175] 2. The ATM prompts the user to connect to the bank branch wifi (the user needs to be prompted to connect to the branch's exclusive wifi, for details, see wifi processing related)

[0176] 3. The ATM generates a QR code for the customer to scan using a mobile phone. It can be understood that the QR code here includes the first QR code and the second QR code.

[0177] 4. The customer uses a mobile phone to scan the first QR code (the scan result needs to be opened using the bank's dedicated APP, and the bank's dedicated APP also needs to use the QR code scanning tool), and then scans the second QR code, fills in the information on the web page opened by scanning the second QR code, or further refines the selection of the type of business to be handled.

[0178] 5. After filling in the form, a QR code will pop up on the web page, prompting the user to scan it at the ATM for final information confirmation (the original lobby manager confirmation step).

[0179] 6. The original lobby manager confirmation step can be replaced by an ATM, which needs to implement the following capabilities: (1) Allow the user to confirm the operation information, and list the information filled in by the user on the screen for the user to confirm (to prevent the message from being intercepted and tampered by fake WiFi); (2) Confirm again that the user is the one who is operating, and confirm through face recognition and fingerprint that the person who is confirming the operation is the one at this time; (3) Prompt the user to prevent fraud. According to the user's operation type, in scenarios involving transfers, the user is prompted to pay attention to fraudulent situations. No prompt is required for scenarios not involving accounts; (4) If the business is to apply for a savings card or a U-shield, the ATM will spit out the card or U-shield to the user.

[0180] 7. After confirmation, an electronic receipt will be generated.

[0181] To ensure business security, the following additional content is required:

[0182] 1. QR code timeliness: The QR code must be automatically updated every half to one minute, and will be automatically invalidated before the update.

[0183] 2. Single validity of the QR code: In the scenario where the user scans the QR code and enters the page, the page returns a message to the ICBC server that provides the web page. After receiving the message, the server invalidates the QR code. At the same time, the ATM automatically cancels the display of the QR code and returns to the main page (the main page is the page waiting for customers to come to handle business, that is, the page before the first step of the operation). In the scenario where the user provides the QR code for the ATM to scan, the QR code on the mobile phone is invalid and no longer automatically updated. The QR code is automatically removed from the page displaying the QR code, indicating that the QR code has been used.

[0184] 3. The timeliness of the information registration page. The webpage opened by the QR code in the third step has a timeliness of half an hour to one hour. After the time expires, you need to go back to the first step and restart the business or give up.

[0185] Wi-Fi processing related:

[0186] Wi-Fi connection:

[0187] 1. Before the QR code appears, the user needs to be prompted to connect to a specific wifi (exclusive wifi for bank branches), display the wifi name to be connected and the corresponding dynamic password (randomly generated, one for each person’s single connection to the wifi), and remind the user to maintain the wifi throughout the process without interruption.

[0188] 2. After the user uses the corresponding dynamic password to connect to the wifi, the ATM displays a QR code for the user to scan (if the user connects to the fake wifi used by the scammer, the ATM will not respond to prevent access to fake phishing websites)

[0189] 3. After scanning the QR code to enter the target website, the heartbeat message check must be maintained throughout the process. If the heartbeat is interrupted, it is necessary to report the error at the front desk that you have left the bank branch and send a reminder via SMS (to avoid the situation where the mobile phone automatically switches to a fake wifi due to signal strength problems and is transferred to a fake phishing website without knowing it). Until the user fills in the information to generate the QR code and scans the QR code on the ATM to start the confirmation step, there is no need to maintain the heartbeat message check.

[0190] In order to prevent fake base stations from stealing information by merely acting as a relay, the messages transmitted from the client (mobile phone) to the server need to be timestamped and asymmetrically encrypted.

[0191] It can be seen that the present application provides a business processing method. In order to reduce the phenomenon of queuing at ATMs, two identification codes are used for secondary authentication. First, the user terminal identity is obtained through the first identification code, and then a second identification code can be generated based on the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity; in this way, the user's own identity can be used to decrypt the input interface address of the business processing system, thereby preventing other user terminals from stealing the second identification code for illegal business processing, ensuring the security of business processing, so that all business can be processed online, ensuring the security and confidentiality of online business.

[0192] In order to solve the problem that users need to wait for a long time when they need to handle certain services due to the queue at the ATM, but due to the security restrictions of the bank's own business, many core businesses cannot be directly added to the online processing, resulting in many deficiencies. With the accelerated pace of life, customers who wait in line for a long time will inevitably have negative emotions and easily conflict with the counter staff when handling business. This application provides a user terminal, see Figure 4 , specifically including the following contents:

[0193] The first scanning module 11 scans the first identification code and the second identification code; the first identification code is used to obtain the user terminal identity, and then the second identification code can be generated according to the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity.

[0194] It can be understood that the user terminal identity can be understood as the unique identification information of the customer to be recommended, which can be internal identification information within the bank, such as a multi-digit letter code or a digital code, and further can be a hash value. The identity information can also be the customer's public ID, such as an identity card, social security card, etc., but the present application is not limited to this.

[0195] Furthermore, the first identification code and the second identification code may be a QR code, or other specially made encryption codes, such as a pattern converted from a hash value, that is, an internal encryption code of a bank, but the present application is not limited thereto.

[0196] For example, the second identification code can use the user's ID number combined with a random number to generate a hash value, and each character is converted into a specific pattern (such as a black and white nine-square grid) according to the hash value, which can form a complete pattern when spliced ​​together.

[0197] The decryption module 12 uses the user terminal identity to decrypt the input interface address of the business processing system.

[0198] In the present application, for a user terminal, the first identification code and the second identification code may be scanned by a camera. In some embodiments, the user terminal may be a mobile phone, and the first identification code and the second identification code may be scanned by a camera built into the mobile phone.

[0199] Furthermore, in the present application, the set bank app can use the user terminal identity to decrypt the second identification code to obtain the decrypted input interface entry.

[0200] In this embodiment, firstly, by scanning the first identification code, the server can obtain the identity of the user terminal. Generally speaking, the first identification code and the second identification code are both generated at the bank branch. Therefore, it can be known that the user terminal is within the scope of the bank branch. By confirming the first identification code, the second identification code can be generated based on the user identity. The second identification code essentially includes encrypted content encrypted by the user identity. The encrypted content can be the import entry of the business processing system. Then, as long as the decryption authentication is passed, the business processing system can be entered. In terms of security, even if other mobile phones scan the second identification code of the real user, due to the different built-in identity, the second identification code cannot be decrypted, which means that the security of business processing is correspondingly guaranteed.

[0201] That is, scanning the first identification code is equivalent to binding the user terminal, and scanning the second identification code is equivalent to decryption authentication, so that any business can be safely performed on the user terminal without queuing.

[0202] The business processing module 13 inputs user identity information and business requirement information on the input interface of the business processing system to complete the business processing.

[0203] Specifically, you can select the corresponding business on the input interface. More specifically, you can enter your own account number, password and other information on the input interface. Due to the early security guarantees, the input interface can include most of the businesses, and businesses that could not be handled online before can also be embedded in it.

[0204] It can be seen from the above technical solution that a user terminal provided by the present application uses two identification codes for secondary authentication. First, the user terminal identity is obtained through the first identification code, and then a second identification code can be generated based on the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity; in this way, the user's own identity can be used to decrypt the input interface address of the business processing system, thereby preventing other user terminals from stealing the second identification code for illegal business processing, ensuring the security of business processing, so that all business can be processed online, ensuring the security and confidentiality of online business.

[0205] Based on the same inventive concept, in one or more embodiments of the present application, it further includes:

[0206] A network connection module is connected to the private network of a bank branch, or to the private network corresponding to an ATM; the step of generating a second identification code according to the user terminal identity is performed after the server determines that the user terminal identity is in the private network.

[0207] Based on the same inventive concept, in one or more embodiments of the present application, it further includes:

[0208] The verification code input module inputs the connection permission SMS verification code in the verification interface so that the server allows the user terminal to connect to the private network; wherein the connection permission SMS verification code is generated by the server after the user terminal is connected to the private network.

[0209] Based on the same inventive concept, in one or more embodiments of the present application, it further includes:

[0210] The heartbeat check module sends heartbeat check information to the server regularly or at set intervals during the process of inputting user identity information and business demand information in the input interface of the business processing system, so that the server can determine to maintain the connection to the private network during the business processing process.

[0211] Based on the same inventive concept, in one or more embodiments of the present application, the first identification code and / or the second identification code is a two-dimensional code.

[0212] It can be seen that in order to reduce the phenomenon of queuing at ATMs, the present application adopts two identification codes for secondary authentication. First, the user terminal identity is obtained through the first identification code, and then the second identification code can be generated according to the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity; in this way, the user's own identity can be used to decrypt the input interface address of the business processing system, thereby preventing other user terminals from stealing the second identification code for illegal business processing, ensuring the security of business processing, so that all business can be processed online, ensuring the security and confidentiality of online business.

[0213] In order to solve the problem that users need to wait for a long time when they need to handle certain services due to the queue at the ATM, but due to the security restrictions of the bank's own business, many core businesses cannot be directly added to online processing, resulting in many deficiencies. With the accelerated pace of life, customers who wait in line for a long time will inevitably have negative emotions and easily conflict with counter business personnel when handling business. This application provides a server, see Figure 5 , specifically including the following contents:

[0214] An identity obtaining module 21 is configured to obtain an identity of a user terminal fed back by the user terminal scanning a first identification code;

[0215] A second identification code generating module 22 generates a second identification code according to the user terminal identity identifier; the second identification code includes an input interface address of a business processing system encrypted with the user terminal identity identifier;

[0216] The business information acquisition module 23 acquires the user identity information and business requirement information input by the user terminal in the input interface of the business processing system to complete the business processing; wherein the user terminal scans the second identification code and uses the user terminal identity to decrypt the input interface address of the business processing system.

[0217] It can be seen from the above technical solution that a server provided by the present application uses two identification codes for secondary authentication. First, the user terminal identity is obtained through the first identification code, and then a second identification code can be generated based on the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity; in this way, the user's own identity can be used to decrypt the input interface address of the business processing system, thereby preventing other user terminals from stealing the second identification code for illegal business processing, ensuring the security of business processing, so that all business can be processed online, ensuring the security and confidentiality of online business.

[0218] Based on the same inventive concept, in one or more embodiments of the present application, it further includes:

[0219] The first identification code generation module generates a first identification code.

[0220] Based on the same inventive concept, one or more embodiments of the present application further include: a network determination module, which determines whether the user terminal is in a private network, and if so, executes the step of generating a second identification code according to the user terminal identity.

[0221] Based on the same inventive concept, in one or more embodiments of the present application, it further includes:

[0222] A network access request receiving module, receiving a network access request sent by the user terminal;

[0223] A text message generation module, which generates a connection permission text message verification code according to the network access request;

[0224] The SMS sending module sends the connection permission SMS verification code to the user terminal through the GMS network.

[0225] Based on the same inventive concept, in one or more embodiments of the present application, it further includes:

[0226] The heartbeat check information receiving module receives the heartbeat check information sent by the user terminal regularly or at set intervals to ensure that the connection to the private network is maintained during the service processing.

[0227] Based on the same inventive concept, in one or more embodiments of the present application, the first identification code and / or the second identification code is a two-dimensional code.

[0228] It can be seen that in order to reduce the phenomenon of queuing at ATMs, the present application adopts two identification codes for secondary authentication. First, the user terminal identity is obtained through the first identification code, and then the second identification code can be generated according to the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity; in this way, the user's own identity can be used to decrypt the input interface address of the business processing system, thereby preventing other user terminals from stealing the second identification code for illegal business processing, ensuring the security of business processing, so that all business can be processed online, ensuring the security and confidentiality of online business.

[0229] From the hardware level, in order to solve the problem that users need to wait for a long time when they need to handle certain services due to queues at ATMs, but due to the security restrictions of the bank's own business, many core businesses cannot be directly added to online processing, resulting in many deficiencies. With the accelerated pace of life, customers who have been queuing for a long time will inevitably have negative emotions and are prone to conflicts with counter business personnel when handling business. The present application provides an embodiment of an electronic device for implementing all or part of the content of the business handling method, and the electronic device specifically includes the following content:

[0230] Figure 6 Schematic block diagram of the device structure of the electronic device 9600 according to an embodiment of the present application. Figure 6 As shown, the electronic device 9600 may include a central processor 9100 and a memory 9140; the memory 9140 is coupled to the central processor 9100. It is worth noting that Figure 6 is exemplary; other types of structures may also be used to supplement or replace this structure to implement telecommunication functions or other functions.

[0231] In one embodiment, the business processing function may be integrated into a central processing unit. The central processing unit may be configured to perform the following control:

[0232] Step 101: Scan a first identification code.

[0233] In this step, the first identification code is used to obtain the user terminal identity, and then the second identification code can be generated according to the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity.

[0234] Step 102: Scan the second identification code and use the user terminal identity to decrypt the input interface address of the business processing system.

[0235] Step 103: Input user identity information and business requirement information on the input interface of the business processing system to complete the business processing.

[0236] It can be seen from the above technical solution that the electronic device provided by the present application uses two identification codes for secondary authentication. First, the user terminal identity is obtained through the first identification code, and then the second identification code can be generated according to the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity; in this way, the user's own identity can be used to decrypt the input interface address of the business processing system, thereby preventing other user terminals from stealing the second identification code for illegal business processing, ensuring the security of business processing, so that all business can be processed online, ensuring the security and confidentiality of online business.

[0237] In another embodiment, the server may be configured separately from the central processor 9100. For example, the server may be a chip connected to the central processor 9100, and the business processing function may be implemented through the control of the central processor.

[0238] like Figure 6 As shown, the electronic device 9600 may also include: a communication module 9110, an input unit 9120, an audio processor 9130, a display 9160, and a power supply 9170. It is worth noting that the electronic device 9600 does not necessarily have to include Figure 6 In addition, the electronic device 9600 may also include Figure 6 For components not shown, reference may be made to the prior art.

[0239] like Figure 6 As shown, the central processing unit 9100 is sometimes also referred to as a controller or an operation control, and may include a microprocessor or other processor device and / or logic device. The central processing unit 9100 receives input and controls the operation of various components of the electronic device 9600.

[0240] The memory 9140 may be, for example, one or more of a cache, a flash memory, a hard drive, a removable medium, a volatile memory, a non-volatile memory or other suitable devices. The above-mentioned information related to the failure may be stored, and a program for executing the relevant information may also be stored. The CPU 9100 may execute the program stored in the memory 9140 to implement information storage or processing, etc.

[0241] The input unit 9120 provides input to the central processing unit 9100. The input unit 9120 is, for example, a key or a touch input device. The power supply 9170 is used to provide power to the electronic device 9600. The display 9160 is used to display display objects such as images and texts. The display may be, for example, an LCD display, but is not limited thereto.

[0242] The memory 9140 may be a solid-state memory, such as a read-only memory (ROM), a random access memory (RAM), a SIM card, etc. It may also be a memory that saves information even when the power is off, can be selectively erased, and is provided with more data, examples of which are sometimes referred to as EPROMs, etc. The memory 9140 may also be some other type of device. The memory 9140 includes a buffer memory 9141 (sometimes referred to as a buffer). The memory 9140 may include an application / function storage unit 9142, which is used to store application programs and function programs or processes for executing the operation of the electronic device 9600 through the central processor 9100.

[0243] The memory 9140 may also include a data storage unit 9143 for storing data, such as contacts, digital data, pictures, sounds, and / or any other data used by the electronic device. The driver storage unit 9144 of the memory 9140 may include various drivers for communication functions of the electronic device and / or for executing other functions of the electronic device (such as messaging applications, address book applications, etc.).

[0244] The communication module 9110 is a transmitter / receiver 9110 that sends and receives signals via an antenna 9111. The communication module (transmitter / receiver) 9110 is coupled to the central processor 9100 to provide input signals and receive output signals, which may be the same as the case of a conventional mobile communication user terminal.

[0245] Based on different communication technologies, multiple communication modules 9110 may be provided in the same electronic device, such as a cellular network module, a Bluetooth module and / or a wireless LAN module, etc. The communication module (transmitter / receiver) 9110 is also coupled to a speaker 9131 and a microphone 9132 via an audio processor 9130 to provide an audio output via the speaker 9131 and receive an audio input from the microphone 9132, thereby realizing a common telecommunication function. The audio processor 9130 may include any suitable buffer, decoder, amplifier, etc. In addition, the audio processor 9130 is also coupled to the central processor 9100, so that recording can be performed on the local machine through the microphone 9132, and the sound stored on the local machine can be played through the speaker 9131.

[0246] The embodiments of the present application also provide a computer-readable storage medium capable of implementing all the steps of the business processing method in the above embodiments. The computer-readable storage medium stores a computer program. When the computer program is executed by a processor, all the steps of the business processing method in the above embodiments are implemented by the execution subject being a server or a client. For example, when the processor executes the computer program, the following steps are implemented:

[0247] Step 101: Scan a first identification code.

[0248] In this step, the first identification code is used to obtain the user terminal identity, and then the second identification code can be generated according to the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity.

[0249] Step 102: Scan the second identification code and use the user terminal identity to decrypt the input interface address of the business processing system.

[0250] Step 103: Input user identity information and business requirement information on the input interface of the business processing system to complete the business processing.

[0251] It can be seen from the above technical solution that the computer storage medium provided by the present application uses two identification codes for secondary authentication. First, the user terminal identity is obtained through the first identification code, and then a second identification code can be generated based on the user terminal identity; the second identification code includes the input interface address of the business processing system encrypted by the user terminal identity; in this way, the user's own identity can be used to decrypt the input interface address of the business processing system, thereby preventing other user terminals from stealing the second identification code for illegal business processing, ensuring the security of business processing, so that all business can be processed online, ensuring the security and confidentiality of online business.

[0252] It will be appreciated by those skilled in the art that embodiments of the present invention may be provided as methods, devices, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0253] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (apparatus), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1A device that provides the functions specified in a block or multiple blocks.

[0254] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0255] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0256] The present invention uses specific embodiments to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea. At the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present invention.

Claims

1. A business handling method, characterized in that: Executed by a user terminal, each user terminal includes a user terminal identity, and the service handling method includes: Connect to the private network of the bank branch or the private network corresponding to the ATM according to the prompt of the ATM; Scanning a first identification code generated by the teller machine; the first identification code is used to obtain the user terminal identity, and then a second identification code can be generated according to the user terminal identity; the second identification code includes an input interface address of a business processing system encrypted with the user terminal identity; Scanning a second identification code generated by the teller machine, and using the user terminal identity identifier to decrypt the input interface address of the business processing system; Input user identity information and business requirement information into the input interface of the business processing system to complete the business processing.

2. The business handling method according to claim 1, characterized in that: Also includes: Enter the connection permission SMS verification code on the verification interface so that the server allows the user terminal to connect to the private network; The connection permission SMS verification code is generated by the server after the user terminal is connected to the private network.

3. The business handling method according to claim 1, characterized in that: In the process of inputting user identity information and business demand information on the input interface of the business processing system, it also includes: Heartbeat check information is sent to the server regularly or at set intervals to ensure that the server remains connected to the private network during the business processing process.

4. The business handling method according to claim 1, characterized in that: The first identification code and / or the second identification code is a QR code.

5. A business handling method, characterized in that: Executed by the server, the business handling method includes: Obtaining a user terminal identity identifier fed back by the user terminal scanning a first identification code generated by the teller machine; Determine whether the user terminal is in a private network, and if so, execute the step of generating a second identification code according to the user terminal identity identifier; Generate a second identification code according to the user terminal identity identifier; the second identification code includes an input interface address of a business processing system encrypted using the user terminal identity identifier; Obtain the user terminal to input user identity information and business demand information on the input interface of the business processing system to complete the business processing; wherein the user terminal scans the second identification code and uses the user terminal identity to decrypt the input interface address of the business processing system.

6. The business handling method according to claim 5, characterized in that: Also includes: Receiving a network access request sent by the user terminal; Generate a connection permission SMS verification code according to the network access request; The connection permission SMS verification code is sent to the user terminal via the GMS network.

7. The business handling method according to claim 5, characterized in that: Also includes: The heartbeat check information sent by the user terminal is received regularly or at set intervals to ensure that the connection to the private network is maintained during the service processing.

8. The business handling method according to claim 5, characterized in that: The first identification code and / or the second identification code is a QR code.

9. A user terminal, characterized in that: Each user terminal includes a user terminal identity, and the user terminal includes: A first scanning module, scanning a first identification code and a second identification code generated by the teller machine; the first identification code is used to obtain a user terminal identity identifier, and then a second identification code can be generated according to the user terminal identity identifier; the second identification code includes an input interface address of a business processing system encrypted with the user terminal identity identifier; A decryption module, using the user terminal identity to decrypt the input interface address of the business processing system; A business processing module, which inputs user identity information and business requirement information on the input interface of the business processing system to complete business processing; A network connection module is connected to the private network of a bank branch, or to the private network corresponding to an ATM; the step of generating a second identification code according to the user terminal identity is performed after the server determines that the user terminal identity is in the private network.

10. The user terminal according to claim 9, characterized in that: Also includes: The verification code input module inputs the connection permission SMS verification code in the verification interface so that the server allows the user terminal to connect to the private network; wherein the connection permission SMS verification code is generated by the server after the user terminal is connected to the private network.

11. The user terminal according to claim 9, characterized in that: Also includes: The heartbeat check module sends heartbeat check information to the server regularly or at set intervals during the process of inputting user identity information and business demand information in the input interface of the business processing system, so that the server can determine to maintain the connection to the private network during the business processing process.

12. The user terminal according to claim 9, characterized in that: The first identification code and / or the second identification code is a QR code.

13. A server, characterized in that: include: An identity acquisition module, which acquires the user terminal identity feedback when the user terminal scans the first identification code generated by the teller machine; A second identification code generating module, generating a second identification code according to the user terminal identity identifier; the second identification code includes an input interface address of a business processing system encrypted with the user terminal identity identifier; A business information acquisition module, which acquires the user identity information and business requirement information input by the user terminal on the input interface of the business processing system to complete the business processing; wherein the user terminal scans the second identification code and uses the user terminal identity to decrypt the input interface address of the business processing system; The network determination module determines whether the user terminal is in a private network, and if so, executes the step of generating a second identification code according to the user terminal identity.

14. The server according to claim 13, characterized in that: Also includes: A network access request receiving module, receiving a network access request sent by the user terminal; A text message generation module, which generates a connection permission text message verification code according to the network access request; The SMS sending module sends the connection permission SMS verification code to the user terminal through the GMS network.

15. The server according to claim 13, characterized in that: Also includes: The heartbeat check information receiving module receives the heartbeat check information sent by the user terminal regularly or at set intervals to ensure that the connection to the private network is maintained during the service processing.

16. The server according to claim 13, characterized in that The first identification code and / or the second identification code is a QR code.

17. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the program, the business processing method described in any one of claims 1 to 8 is implemented.

18. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the business processing method described in any one of claims 1 to 8 is implemented.

Images