Transaction processing system and method

Abstract

The present invention discloses a transaction processing system and method, which relates to the field of cryptographic algorithm technology, and comprises: a bank application software receives a transaction request initiated by a customer, and forwards the transaction request to a security unit; the security unit encrypts sensitive information in the transaction request according to a first key of the security unit, generates a verification code for transaction element information in the transaction request according to a second key of the security unit, generates a transaction request protocol and sends it to the bank application software; the bank application software forwards the transaction request protocol to a bank back-end system; the bank back-end system parses the transaction request protocol, verifies the verification code of the transaction element information in the transaction request according to the second key of the security unit, decrypts the encrypted sensitive information in the transaction request according to the first key of the security unit after the verification is passed, and processes the transaction according to the verified and decrypted transaction request. The present invention realizes accurate and secure transmission of transaction information between the security unit and the bank back-end system.

Description

Technical Field

[0001] The present invention relates to the field of cryptographic algorithm technology, and in particular to a transaction processing system and method. Background Art

[0002] A security unit is a piece of hardware that can provide secure storage for private information and secure execution of important programs. It is physically independent, uses secure protocols to communicate with the outside world, and has its own independent execution environment and secure storage. Currently, the interaction between the bank's back-end system and the security unit is usually transmitted through application software (APP / SDK) installed on the device. The risk of this method is that the information interaction between the bank's back-end system and the security unit may be intercepted or tampered with by the application software, posing a major security risk.

[0003] To address the above problems, no effective solution has been proposed yet. Summary of the invention

[0004] The embodiment of the present invention provides a transaction processing system for realizing accurate and secure transmission of information between a security unit and a bank backend system. The system includes:

[0005] Security units, bank back-end systems and bank application software, including:

[0006] Bank application software, used to receive transaction requests initiated by customers and forward the transaction requests to the security unit; receive the transaction request protocol returned by the security unit and forward the transaction request protocol to the bank's back-end system;

[0007] The security unit is used to encrypt sensitive information in the transaction request according to the first key of the security unit, generate a verification code for the transaction element information in the transaction request according to the second key of the security unit; generate a transaction request protocol according to the encrypted and verification code-generated transaction request and send it to the bank application software;

[0008] The bank's back-end system is used to parse the transaction request protocol, verify the verification code of the transaction element information in the transaction request according to the second key of the security unit, and after the verification is passed, decrypt the encrypted sensitive information in the transaction request according to the first key of the security unit, and process the transaction according to the verified and decrypted transaction request.

[0009] An embodiment of the present invention provides a transaction processing method for realizing accurate and secure transmission of information between a security unit and a bank backend system. The method comprises:

[0010] The bank application software receives the transaction request initiated by the customer and forwards the transaction request to the security unit;

[0011] The security unit encrypts the sensitive information in the transaction request according to the first key of the security unit, and generates a verification code for the transaction element information in the transaction request according to the second key of the security unit; generates a transaction request protocol according to the encrypted and verification code-generated transaction request and sends it to the bank application software;

[0012] The bank application software receives the transaction request protocol returned by the security unit and forwards the transaction request protocol to the bank backend system;

[0013] The bank's back-end system parses the transaction request protocol, verifies the check code of the transaction element information in the transaction request based on the second key of the security unit, and after the verification is passed, decrypts the encrypted sensitive information in the transaction request based on the first key of the security unit, and processes the transaction based on the verified and decrypted transaction request.

[0014] An embodiment of the present invention further provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the above-mentioned transaction processing method is implemented when the processor executes the computer program.

[0015] An embodiment of the present invention further provides a computer-readable storage medium, which stores instructions for executing the transaction processing method.

[0016] The embodiment of the present invention comprises the following steps: the bank application software receives a transaction request initiated by a customer and forwards the transaction request to a security unit; the security unit encrypts sensitive information in the transaction request according to a first key of the security unit and generates a verification code for transaction element information in the transaction request according to a second key of the security unit; generates a transaction request protocol according to the encrypted transaction request after the verification code is generated and sent to the bank application software; the bank application software receives the transaction request protocol returned by the security unit and forwards the transaction request protocol to a bank back-end system; the bank back-end system parses the transaction request protocol and verifies the verification code of the transaction element information in the transaction request according to the second key of the security unit, after the verification is passed, decrypts the encrypted sensitive information in the transaction request according to the first key of the security unit, processes the transaction according to the verified and decrypted transaction request, and then encrypts and decrypts the transaction information, generates the verification code and verifies the verification code based on the first key and the second key by the security unit and the bank back-end system, thereby realizing accurate and secure transmission of transaction information between the security unit and the bank back-end system, avoiding the risk of the application software intercepting or tampering with the transaction information, and improving the accuracy and security of transaction processing. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the prior art descriptions. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. In the drawings:

[0018] Figure 1 A schematic diagram of a transaction processing system structure in an embodiment of the present invention;

[0019] Figure 2 A schematic diagram of a transaction processing method flow in an embodiment of the present invention;

[0020] Figure 3 A schematic diagram of a transaction result feedback process in an embodiment of the present invention;

[0021] Figure 4 for Figure 1 Schematic diagram of the specific process of step 203;

[0022] Figure 5 It is a schematic diagram of a specific embodiment process in an embodiment of the present invention. DETAILED DESCRIPTION

[0023] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0024] Those skilled in the art will appreciate that the embodiments of the present invention may be implemented as a system, device, method or computer program product. Therefore, the present invention may be implemented in the following forms, namely: complete hardware, complete software (including firmware, resident software, microcode, etc.), or a combination of hardware and software.

[0025] As used below, the term "unit" or "module" may be a combination of software and / or hardware that implements a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, implementation in hardware, or a combination of software and hardware is also possible and contemplated.

[0026] The embodiment of the present invention provides a transaction processing system for realizing accurate and secure transmission of information between a security unit and a bank backend system. Figure 1 FIG. 1 is a schematic diagram of a transaction processing system structure in an embodiment of the present invention. Figure 1 As shown, the system includes:

[0027] Security unit 01, bank backend system 02 and bank application software 03, including:

[0028] The bank application software 03 is used to receive the transaction request initiated by the customer and forward the transaction request to the security unit 01; receive the transaction request protocol returned by the security unit 01 and forward the transaction request protocol to the bank back-end system 02;

[0029] The security unit 01 is used to encrypt sensitive information in the transaction request according to the first key of the security unit, and to generate a verification code for the transaction element information in the transaction request according to the second key of the security unit; and to generate a transaction request protocol according to the encrypted and verification code-generated transaction request and send it to the bank application software 03;

[0030] The bank back-end system 02 is used to parse the transaction request protocol, verify the verification code of the transaction element information in the transaction request according to the second key of the security unit, and after the verification is passed, decrypt the encrypted sensitive information in the transaction request according to the first key of the security unit, and process the transaction according to the verified and decrypted transaction request.

[0031] like Figure 1 As shown, the embodiment of the present invention is as follows: the bank application software receives the transaction request initiated by the customer and forwards the transaction request to the security unit; the security unit encrypts the sensitive information in the transaction request according to the first key of the security unit, and generates a verification code for the transaction element information in the transaction request according to the second key of the security unit; generates a transaction request protocol according to the encrypted transaction request after the verification code is generated and sent to the bank application software; the bank application software receives the transaction request protocol returned by the security unit and forwards the transaction request protocol to the bank back-end system; the bank back-end system parses the transaction request protocol, verifies the verification code of the transaction element information in the transaction request according to the second key of the security unit, and after the verification is passed, decrypts the encrypted sensitive information in the transaction request according to the first key of the security unit, and processes the transaction according to the verified and decrypted transaction request, and then encrypts or decrypts the transaction information, generates a verification code or verifies the verification code based on the first key and the second key through the security unit and the bank back-end system, thereby realizing accurate and secure transmission of transaction information between the security unit and the bank back-end system, avoiding the risk of the application software intercepting or tampering with the transaction information, and improving the accuracy and security of transaction processing.

[0032] like Figure 1 As shown, in one embodiment, the security unit 01 includes a plurality of security units, each of which corresponds to a first key and a second key;

[0033] The bank backend system 02 stores the first key and the second key of the plurality of security units 01 .

[0034] During specific implementation, the bank application software 03 is the entrance for customer operations and is responsible for connecting the security unit 01 and the bank's back-end system 02, receiving and forwarding messages and transaction protocols, and ensuring information security and validity. The security unit 01 is responsible for terminal transaction processing. The security unit 01 may include multiple security units, each of which corresponds to a set of keys, including a first key and a second key, wherein the first key is used for encryption and the second key is used to generate a verification code. The first key and the second key may be symmetric keys, and the bank's back-end system 02 stores the first keys and second keys of multiple security units 01.

[0035] After receiving the transaction request initiated by the customer, the bank application software 03 calls the interface provided by the security unit 01 and forwards the transaction request to the security unit 01 .

[0036] The security unit 01 generates a transaction request protocol according to the transaction request. Specifically, the security unit 01 first encrypts the sensitive information in the transaction request according to the first key of the security unit, wherein the sensitive information may include: account information, customer information, etc., and may also include other information. Encryption can prevent the sensitive information from being leaked. Then, a verification code is generated for the transaction element information in the transaction request according to the second key of the security unit, wherein the transaction element information may include: transaction time, transaction amount, transaction random number, etc., and may also include other information. Generating the verification code can prevent the transaction information from being tampered with. Then, a transaction request protocol is generated according to the encrypted and verified transaction request. The transaction protocol is recognizable by the security unit and includes a transaction request interface in an agreed format and corresponding response data. Finally, the transaction request protocol is sent to the bank application software 03.

[0037] In one embodiment, the banking application software 03 is specifically used for:

[0038] Receive the transaction request protocol returned by the security unit 01, and generate a transaction request message according to the message format corresponding to the bank backend system 02;

[0039] Forward the transaction request message to the bank's back-end system 02.

[0040] During specific implementation, after receiving the transaction request protocol, the bank application software 03 first generates a transaction request message according to the message format corresponding to the bank back-end system 02, and forwards the transaction request message to the bank back-end system 02. The bank back-end system 02 extracts the transaction request protocol from the transaction request message, and then parses the transaction request protocol, and verifies the verification code of the transaction element information in the transaction request according to the second key of the security unit 01. After the verification is passed, it can be determined that the transaction element information is true and accurate. Then, the encrypted sensitive information in the transaction request is decrypted using the first key of the security unit, and the transaction is processed and completed according to the verified and decrypted transaction request.

[0041] In one embodiment, the bank backend system 02 is further used to: obtain a transaction processing result after processing the transaction, encrypt sensitive information in the transaction processing result according to the first key of the security unit, and generate a verification code for the transaction element information in the transaction processing result according to the second key of the security unit; generate a transaction processing result protocol according to the encrypted and verification code-generated transaction processing result and the transaction protocol format of the security unit and send it to the bank application software;

[0042] The bank application software 03 is also used to: receive the transaction processing result protocol returned by the bank back-end system 02, forward the transaction processing result protocol to the security unit 01 corresponding to the transaction processing result protocol; and display the verified and decrypted transaction processing result to the user;

[0043] Security unit 01 is also used to: parse the transaction processing result protocol, verify the verification code of the transaction element information in the transaction processing result according to the second key of the security unit, and after the verification, decrypt the encrypted sensitive information in the transaction processing result according to the first key of the security unit, and return the verified and decrypted transaction processing result to the bank application software.

[0044] In specific implementation, when the bank backend system 02 obtains a transaction processing result or initiates a new transaction request after processing the transaction, it also encrypts the sensitive information in the transaction processing result or the new transaction request according to the first key of the security unit, and then generates a verification code for the transaction element information in the transaction processing result or the new transaction request according to the second key of the security unit. Then, the transaction processing result or the new transaction request after encryption and verification code generation is formatted according to the transaction protocol format that can be recognized by the security unit 01, and a transaction processing result protocol or a new transaction request protocol is generated. The transaction processing result protocol or the new transaction request protocol is encapsulated as a message and sent to the bank application software 03.

[0045] After receiving the message returned by the bank backend system 02, the bank application software 03 first reads the transaction processing result protocol or the new transaction request protocol in the message, calls the transaction processing result protocol or the new transaction request protocol to call the interface of the corresponding security unit 01, and forwards the transaction processing result protocol or the new transaction request protocol to the security unit 01.

[0046] The security unit 01 can parse the transaction processing result protocol or the new transaction request protocol, verify the verification code of the transaction element information in the transaction processing result or the new transaction request according to the second key of the security unit, and after the verification is passed, decrypt the encrypted sensitive information in the transaction processing result or the new transaction request according to the first key of the security unit, and return the verified and decrypted transaction processing result or new transaction request to the bank application software 02. The bank application software 02 displays the verified and decrypted transaction processing result to the user, or executes subsequent transaction processing operations.

[0047] The embodiment of the present invention is based on the above-mentioned transaction mechanism. The transaction information is encrypting or decrypting based on the first key by the security unit and the bank's back-end system, thereby realizing the secure transmission of the transaction information between the security unit and the bank's back-end system. The transaction information is verified by generating a verification code or verifying a verification code based on the second key, thereby realizing the accurate transmission of the transaction information between the security unit and the bank's back-end system, ensuring the privacy and authenticity of the information transmitted between the security unit and the bank's back-end system, avoiding the risk of application software intercepting or tampering with the transaction information, and thereby improving the accuracy and security of transaction processing.

[0048] Based on the same inventive concept, the present invention also provides a transaction processing method in the following embodiments. Since the principle of solving the problem in the transaction processing method is similar to that in the transaction processing method system, the implementation of the method can refer to the implementation of the system, and the repeated parts will not be repeated.

[0049] The embodiment of the present invention provides a transaction processing method for realizing accurate and secure transmission of information between a security unit and a bank backend system. Figure 2 FIG. 1 is a schematic diagram of a transaction processing method flow in an embodiment of the present invention. Figure 2 As shown, the method includes:

[0050] Step 201: The bank application software receives a transaction request initiated by a customer and forwards the transaction request to a security unit;

[0051] Step 202: The security unit encrypts the sensitive information in the transaction request according to the first key of the security unit, and generates a verification code for the transaction element information in the transaction request according to the second key of the security unit; generates a transaction request protocol according to the encrypted and verification code-generated transaction request and sends it to the bank application software;

[0052] Step 203: The bank application software receives the transaction request protocol returned by the security unit, and forwards the transaction request protocol to the bank backend system;

[0053] Step 204: The bank backend system parses the transaction request protocol, verifies the verification code of the transaction element information in the transaction request according to the second key of the security unit, and after the verification is passed, decrypts the encrypted sensitive information in the transaction request according to the first key of the security unit, and processes the transaction according to the verified and decrypted transaction request.

[0054] In one embodiment, the security unit includes a plurality of security units, each of which corresponds to a first key and a second key;

[0055] The bank backend system stores first keys and second keys of multiple security units.

[0056] Figure 3 FIG. 1 is a schematic diagram of a transaction result feedback process in an embodiment of the present invention. Figure 3 As shown, in one embodiment, the method may further include:

[0057] Step 301: After processing the transaction, the bank backend system obtains the transaction processing result, encrypts the sensitive information in the transaction processing result according to the first key of the security unit, and generates a verification code for the transaction element information in the transaction processing result according to the second key of the security unit; generates a transaction processing result protocol according to the encrypted and verification code-generated transaction processing result and the transaction protocol format of the security unit and sends it to the bank application software;

[0058] Step 302: The bank application software receives the transaction processing result protocol returned by the bank backend system, and forwards the transaction processing result protocol to the security unit corresponding to the transaction processing result protocol;

[0059] Step 303: The security unit parses the transaction processing result protocol, verifies the verification code of the transaction element information in the transaction processing result according to the second key of the security unit, and after the verification is passed, decrypts the encrypted sensitive information in the transaction processing result according to the first key of the security unit, and returns the verified and decrypted transaction processing result to the bank application software;

[0060] Step 304: The bank application software displays the verified and decrypted transaction processing result to the user.

[0061] Figure 4 for Figure 2 The schematic diagram of the specific process of step 203 is as follows: Figure 4 As shown, in one embodiment, in step 203, the bank application software receives the transaction request protocol returned by the security unit and forwards the transaction request protocol to the bank backend system, including:

[0062] Step 401: receiving the transaction request protocol returned by the security unit, and generating a transaction request message according to the message format corresponding to the bank backend system;

[0063] Step 402: Forward the transaction request message to the bank's backend system.

[0064] It should be noted that although the operations of the method of the present invention are described in a specific order in the drawings, this does not require or imply that the operations must be performed in this specific order, or that all the operations shown must be performed to achieve the desired results. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step, and / or one step may be decomposed into multiple steps.

[0065] An embodiment of the present invention further provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the above-mentioned transaction processing method is implemented when the processor executes the computer program.

[0066] An embodiment of the present invention further provides a computer-readable storage medium, which stores instructions for executing the transaction processing method.

[0067] A specific example is given below to facilitate understanding of how to implement the present invention.

[0068] Figure 5 Schematic diagram of a specific embodiment process in the embodiment of the present invention, such as Figure 5 As shown, the following steps are included:

[0069] Step 501: the bank application software receives a transaction request initiated by a customer, calls the interface provided by the security unit, and forwards the transaction request to the security unit;

[0070] Step 502: The security unit encrypts the sensitive information in the transaction request according to the first key of the security unit, generates a verification code for the transaction element information in the transaction request according to the second key of the security unit, generates a transaction request protocol according to the encrypted and verification-coded transaction request, and sends the transaction request protocol to the bank application software;

[0071] Step 503: After receiving the transaction request protocol, the bank application software generates a transaction request message according to the message format corresponding to the bank backend system, and forwards the transaction request message to the bank backend system;

[0072] Step 504: the bank backend system extracts the transaction request protocol from the transaction request message, parses the transaction request protocol, verifies the checksum of the transaction element information in the transaction request according to the second key of the security unit, and after the verification is passed, decrypts the encrypted sensitive information in the transaction request using the first key of the security unit, and processes and completes the transaction according to the verified and decrypted transaction request;

[0073] Step 505: After processing the transaction, the bank backend system obtains a transaction processing result or initiates a new transaction request, encrypts the sensitive information in the transaction processing result or the new transaction request according to the first key of the security unit, generates a verification code for the transaction element information in the transaction processing result or the new transaction request according to the second key of the security unit, formats the encrypted transaction processing result or the new transaction request after the verification code is generated according to the transaction protocol format recognizable by the security unit, generates a transaction processing result protocol or a new transaction request protocol, and encapsulates the transaction processing result protocol or the new transaction request protocol into a message and sends it to the bank application software;

[0074] Step 506: After receiving the message returned by the bank backend system, the bank application software reads the transaction processing result protocol or the new transaction request protocol in the message, calls the transaction processing result protocol or the new transaction request protocol to call the interface of the corresponding security unit, and forwards the transaction processing result protocol or the new transaction request protocol to the security unit;

[0075] Step 507: The security unit: parses the transaction processing result protocol or the new transaction request protocol, verifies the verification code of the transaction element information in the transaction processing result or the new transaction request according to the second key of the security unit, and after the verification is passed, decrypts the encrypted sensitive information in the transaction processing result or the new transaction request according to the first key of the security unit, and returns the verified and decrypted transaction processing result or the new transaction request to the bank application software;

[0076] Step 508: Bank application software: displays the verified and decrypted transaction processing results to the user, or executes subsequent transaction processing operations.

[0077] In summary, the embodiment of the present invention is as follows: the bank application software receives the transaction request initiated by the customer and forwards the transaction request to the security unit; the security unit encrypts the sensitive information in the transaction request according to the first key of the security unit, and generates a verification code for the transaction element information in the transaction request according to the second key of the security unit; generates a transaction request protocol according to the encrypted transaction request after the verification code is generated and sent to the bank application software; the bank application software receives the transaction request protocol returned by the security unit and forwards the transaction request protocol to the bank back-end system; the bank back-end system parses the transaction request protocol, verifies the verification code of the transaction element information in the transaction request according to the second key of the security unit, and after the verification is passed, decrypts the encrypted sensitive information in the transaction request according to the first key of the security unit, and processes the transaction according to the verified and decrypted transaction request, and then encrypts and decrypts the transaction information based on the first key and the second key, generates the verification code and verifies the verification code, thereby realizing accurate and secure transmission of transaction information between the security unit and the bank back-end system, avoiding the risk of the application software intercepting or tampering with the transaction information, and improving the accuracy and security of transaction processing.

[0078] Although the present invention provides method operation steps as described in the embodiments or flowcharts, more or fewer operation steps may be included based on conventional or non-creative labor. The order of steps listed in the embodiments is only one way of executing the order of many steps and does not represent the only execution order. When the actual device or client product is executed, it can be executed in sequence or in parallel according to the method shown in the embodiments or the drawings (for example, in a parallel processor or multi-threaded processing environment).

[0079] It should be understood by those skilled in the art that the embodiments of this specification may be provided as methods, devices (systems) or computer program products. Therefore, the embodiments of this specification may take the form of complete hardware embodiments, complete software embodiments or embodiments combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0080] The present invention is described with reference to flowcharts and / or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as a combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0081] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0082] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0083] Each embodiment in this specification is described in a progressive manner, and the same and similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment. In this article, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that there is any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such a process, method, article or device. The orientation or position relationship indicated by the terms "upper", "lower", etc. is based on the orientation or position relationship shown in the drawings, which is only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation of the present invention. Unless otherwise expressly specified and limited, the terms "installed", "connected" and "connected" should be understood in a broad sense. For example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be a connection between the two components. For those of ordinary skill in the art, the specific meanings of the above terms in the present invention can be understood according to the specific circumstances. It should be noted that the embodiments of the present invention and the features in the embodiments can be combined with each other in the absence of conflict. The present invention is not limited to any single aspect, nor to any single embodiment, nor to any combination and / or permutation of these aspects and / or embodiments. Moreover, each aspect and / or embodiment of the present invention can be used alone or in combination with one or more other aspects and / or embodiments thereof.

[0084] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein by equivalents. These modifications or replacements do not make the essence of the corresponding technical solutions deviate from the scope of the technical solutions of the embodiments of the present invention, and they should all be included in the scope of the claims and specification of the present invention.

Claims

1. A transaction processing system, characterized in that: include: Security units, bank back-end systems and bank application software, including: Bank application software, used to receive transaction requests initiated by customers and forward the transaction requests to the security unit; receive the transaction request protocol returned by the security unit and forward the transaction request protocol to the bank's back-end system; The security unit is used to encrypt sensitive information in the transaction request according to the first key of the security unit, generate a verification code for the transaction element information in the transaction request according to the second key of the security unit; generate a transaction request protocol according to the encrypted and verification code-generated transaction request and send it to the bank application software; The bank backend system is used to parse the transaction request protocol, verify the verification code of the transaction element information in the transaction request according to the second key of the security unit, decrypt the encrypted sensitive information in the transaction request according to the first key of the security unit after the verification, and process the transaction according to the verified and decrypted transaction request; The security unit includes a plurality of security units, each security unit corresponds to a first key and a second key; The bank backend system stores a first key and a second key of a plurality of security units; The bank backend system is also used to: obtain the transaction processing result after processing the transaction, encrypt the sensitive information in the transaction processing result according to the first key of the security unit, and generate a verification code for the transaction element information in the transaction processing result according to the second key of the security unit; generate a transaction processing result protocol based on the encrypted and verification code-generated transaction processing result and the transaction protocol format of the security unit and send it to the bank application software; The bank application software is also used to: receive the transaction processing result protocol returned by the bank's back-end system, forward the transaction processing result protocol to the security unit corresponding to the transaction processing result protocol; display the verified and decrypted transaction processing result to the user; The security unit is also used to: parse the transaction processing result protocol, verify the verification code of the transaction element information in the transaction processing result according to the second key of the security unit, and after the verification is passed, process the transaction according to the first key of the security unit.

2. The system according to claim 1, characterized in that Banking application software is specifically used for: Receive the transaction request protocol returned by the security unit, and generate a transaction request message according to the message format corresponding to the bank's back-end system; Forward the transaction request message to the bank's back-end system.

3. A transaction processing method, characterized in that: include: The bank application software receives the transaction request initiated by the customer and forwards the transaction request to the security unit; The security unit encrypts the sensitive information in the transaction request according to the first key of the security unit, and generates a verification code for the transaction element information in the transaction request according to the second key of the security unit; generates a transaction request protocol according to the encrypted and verification code-generated transaction request and sends it to the bank application software; The bank application software receives the transaction request protocol returned by the security unit and forwards the transaction request protocol to the bank backend system; The bank backend system parses the transaction request protocol, verifies the verification code of the transaction element information in the transaction request according to the second key of the security unit, and after the verification is passed, decrypts the encrypted sensitive information in the transaction request according to the first key of the security unit, and processes the transaction according to the verified and decrypted transaction request; The security unit includes a plurality of security units, each security unit corresponds to a first key and a second key; The bank backend system stores a first key and a second key of a plurality of security units; Also includes: After the bank's back-end system processes the transaction, it obtains the transaction processing result, encrypts the sensitive information in the transaction processing result according to the first key of the security unit, and generates a verification code for the transaction element information in the transaction processing result according to the second key of the security unit; based on the encrypted and verification code-generated transaction processing result and the transaction protocol format of the security unit, generates a transaction processing result protocol and sends it to the bank's application software; The bank application software receives the transaction processing result protocol returned by the bank backend system, and forwards the transaction processing result protocol to the security unit corresponding to the transaction processing result protocol; The security unit parses the transaction processing result protocol, verifies the checksum of the transaction element information in the transaction processing result according to the second key of the security unit, and after the verification is passed, decrypts the encrypted sensitive information in the transaction processing result according to the first key of the security unit, and returns the verified and decrypted transaction processing result to the bank application software; The banking application software displays the verified and decrypted transaction processing results to the user.

4. The method according to claim 3, characterized in that The bank application software receives the transaction request protocol returned by the security unit and forwards the transaction request protocol to the bank backend system, including: Receive the transaction request protocol returned by the security unit, and generate a transaction request message according to the message format corresponding to the bank's back-end system; Forward the transaction request message to the bank's back-end system.

5. A computer device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 3 to 4 is implemented.

6. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program for executing the method according to any one of claims 3 to 4.

Images