A high availability method and device for directly connecting to a bank terminal
By designing the relationship between the configuration switch and the bank campus address in the client configuration file, and storing the verification file in the bank authentication server, the communication interruption problem caused by a single data center failure is solved, and the disaster is realized The rapid response and business recovery meet the needs of business continuity.
Patent Information
- Application Number
- CN202110727971.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2021-06-29
- Publication Date
- 2024-12-31
- Estimated Expiration
- 2041-06-29
AI Technical Summary
In real-time transactions in the securities industry, a single data center failure or disaster causes interruption of the communication link between the client and the bank, affecting the availability of transaction processes and business continuity.
The relationship between different configuration switches and different park addresses on the bank side is pre-designed in the client configuration file, and the verification files are stored in the authentication servers of different parks on the bank side, and the verification files are accessed by sending verification files to the addresses associated with the valid configuration switch. Request, judge the access result to switch configuration switches, ensure timely response and business recovery in the event of a disaster.
It realizes rapid response and business recovery in the event of a disaster, ensuring that key business between customers and the banking side will be restored to the minimum acceptable level within the specified time, and meeting the recovery time goal (RTO).
Smart Images

Figure CN113450206B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of anomaly detection, and more particularly to a high-availability method and device directly connected to a bank terminal. Background Art
[0002] With the rapid development of mobile Internet and globalization, the continuous operation of business services around the clock has become the goal of banking IT construction and corporate management. For real-time transactions such as stocks and futures in the securities industry, every second of business stagnation may bring huge losses. The securities industry's demand for business continuity is much higher than other industries. How to reduce or even eliminate the impact of normal and abnormal downtime on business availability and achieve business continuity has become a problem of particular concern to enterprises.
[0003] With the large-scale centralization of data in the domestic banking industry, most banks have begun to create multiple data centers. Under normal conditions, information systems work together across regions and provide services for business access in parallel; in the event of a failure or disaster in a single data center, systems in other data centers can take over key or all business operations, achieving a mutual backup effect and enabling users to "not perceive failures."
[0004] However, currently, clients directly connected to the bank side (such as brokerage clients) mainly rely on dedicated lines for communication, and the brokerage side is only configured with one IP address of the bank side, and the load balancing of specific transactions is implemented by the bank side. When a single data center on the bank side fails or a disaster occurs, the communication link from the client to the bank side may be interrupted, affecting the online transaction. Summary of the invention
[0005] This article is used to solve the problem in the prior art that the client and the bank are connected via only one IP address. When a device corresponding to the IP address fails or a disaster occurs, it will affect the communication between the client and the bank, and further affect the transaction.
[0006] In order to solve the above technical problems, the first aspect of the present invention provides a high availability method for directly connecting to a bank end, pre-designing a configuration file of a client, wherein the configuration file includes associations between different configuration switches and addresses of different campuses of the bank end, and there is a valid configuration switch among all the configuration switches, and the authentication servers of different campuses of the bank end store verification files sent by the client, and the method includes:
[0007] Sending a verification file access request to the address associated with the valid configuration switch;
[0008] Receive the access result from the bank, determine whether the access result is consistent with the verification file, and if the determination result is no, switch the valid configuration switch.
[0009] As a further embodiment of this invention, switching the effective configuration switch includes:
[0010] A verification file access request is sent to the addresses associated with the remaining configuration switches in a preset order until a configuration switch whose access result is consistent with the verification file is found, and the configuration switch whose access result is consistent with the verification file is taken as a valid configuration switch.
[0011] As a further embodiment of this invention, the high availability method of directly connecting to the bank side also includes:
[0012] Receive abnormal park information sent by the bank;
[0013] Determining whether the address associated with the valid configuration switch is the address of an abnormal campus;
[0014] If the judgment result is yes, the effective configuration switch is switched.
[0015] As a further embodiment of this invention, the process of determining the abnormal park information sent by the bank includes:
[0016] The authentication servers in each park on the bank side monitor the business processing software and hardware of this park and other parks;
[0017] Determine abnormal park information based on monitoring results;
[0018] Send abnormal park information to the client.
[0019] As a further embodiment of this invention, sending abnormal park information to the client includes:
[0020] According to the abnormal park information, obtain the customer list of the abnormal park;
[0021] The abnormal campus information is sent to the clients in the client list.
[0022] As a further embodiment of this invention, the high availability method of directly connecting to the bank side also includes:
[0023] If the access result is consistent with the verification file and the address associated with the valid configuration switch is the address of the abnormal campus, or the access result is inconsistent with the verification file and the address associated with the valid configuration switch is not the address of the abnormal campus, then query the last M transactions with the bank end to determine whether the M transactions are abnormal. If there is an abnormality, switch the valid configuration switch.
[0024] As a further embodiment of this invention, after receiving the abnormal park information sent by the bank, it also includes:
[0025] Determine whether the same abnormal park information is received within a predetermined time period;
[0026] If the judgment result is no, then the step of judging whether the address associated with the valid configuration switch is the address of an abnormal campus is performed; if the judgment result is yes, then the received abnormal campus information is discarded.
[0027] In a second aspect, a high-availability device directly connected to a bank end is provided, which is arranged in a client end, wherein the client end is designed with a configuration file, wherein the configuration file includes an association relationship between different configuration switches and communication addresses of different parks of the bank end, and there is a valid configuration switch among all the configuration switches, and the authentication servers of different parks of the bank end store verification files sent by the client end, including:
[0028] A test module, used for sending a verification file access request to an address associated with a valid configuration switch;
[0029] The analysis module is used to receive the access result of the bank end, determine whether the access result is consistent with the verification file, and if the judgment result is no, switch the valid configuration switch; if the judgment result is yes, execute the transaction process between the client and the bank end.
[0030] According to a third aspect of the present invention, a computer device is provided, comprising a memory, a processor, and a computer program stored in the memory, wherein when the computer program is executed by the processor, the computer program executes instructions of the high availability method for directly connecting to a bank end as described in any of the aforementioned embodiments.
[0031] In a fourth aspect, a computer storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor of a computer device, the computer program executes instructions of the high-availability method for directly connecting to a bank end as described in any of the aforementioned embodiments.
[0032] The high availability method and device for directly connecting to the bank end provided in this article configure different configuration switches in the configuration file of the client to be associated with different campus addresses of the bank end, and there is a valid configuration switch among all the configuration switches, and the verification files sent by the client are pre-stored in the authentication servers of different campuses of the bank end. Before executing the transaction process, the client first sends a verification file access request to the address associated with the valid configuration switch; receives the access result of the bank end, and determines whether the access result is consistent with the verification file. If the judgment result is no, it means that there is an abnormality in the device or campus where the configuration switch associated address is located or a disaster has occurred. In this case, the valid configuration switch is switched. If the judgment result is yes, the transaction process between the client and the bank end is executed, and it can respond immediately when a disaster occurs, ensuring that the key business of the customer and the bank end is restored to the minimum acceptable level within the specified time (meeting the required RTO: Recovery Time Object).
[0033] In order to make the above and other purposes, features and advantages of this article more obvious and easy to understand, the following specifically cites preferred embodiments and describes them in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS
[0034] In order to more clearly illustrate the technical solutions in the embodiments of this article or the prior art, the drawings required for use in the embodiments or the prior art descriptions are briefly introduced below. Obviously, the drawings described below are only some embodiments of this article. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.
[0035] Figure 1 A schematic diagram showing the association relationship between the configuration switch and the campus address in the embodiment of this article is shown;
[0036] Figure 2 A first flow chart of a high availability method for directly connecting to a bank terminal according to an embodiment of this document is shown;
[0037] Figure 3 A second flow chart of the high availability method for directly connecting to a bank terminal according to an embodiment of this document is shown;
[0038] Figure 4 A flowchart showing the process of the bank sending abnormal park information in the embodiment of this article is shown;
[0039] Figure 5 A third flow chart of the high availability method for directly connecting to a bank terminal according to an embodiment of this document is shown;
[0040] Figure 6 A fourth flow chart of the high availability method for directly connecting to a bank terminal according to an embodiment of this document is shown;
[0041] Figure 7 The structural diagram of the high-availability device directly connected to the bank end of the embodiment of this article is shown;
[0042] Figure 8 A flowchart showing a high availability method for directly connecting to a bank terminal according to a specific embodiment of this document is shown;
[0043] Fig. 9 A structural diagram of a computer device according to an embodiment of this invention is shown.
[0044] Description of the accompanying symbols:
[0045] 710. Test module;
[0046] 720, analysis module;
[0047] 902. Computer equipment;
[0048] 904, processor;
[0049] 906. Memory;
[0050] 908, driving mechanism;
[0051] 910, input / output module;
[0052] 912. Input device;
[0053] 914. Output device;
[0054] 916. Presentation equipment;
[0055] 918. Graphical user interface;
[0056] 920, network interface;
[0057] 922, communication link;
[0058] 924. Communication bus. DETAILED DESCRIPTION
[0059] The following will be combined with the drawings in the embodiments of this article to clearly and completely describe the technical solutions in the embodiments of this article. Obviously, the described embodiments are only part of the embodiments of this article, not all of the embodiments. Based on the embodiments of this article, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of this article.
[0060] This specification provides method operation steps as described in the embodiments or flow charts, but more or fewer operation steps may be included based on routine or non-creative work. The order of steps listed in the embodiments is only one way of executing the order of many steps and does not represent the only execution order. When the system or device product is executed in practice, it can be executed in the order of the method shown in the embodiments or the drawings or in parallel.
[0061] The high-availability method and device for direct connection to a bank described in this article can be used in the financial field for direct connection to enterprise management, and can also be used in any field other than the financial field. The application field of the high-availability method and device for direct connection to a bank disclosed in this article is not limited.
[0062] The high availability method and device for direct connection to the bank side described in this article are applicable to all customers who access the bank side API interface through a dedicated line connection.
[0063] The client described in this article refers to the server or application of the enterprise directly connected to the bank side. The enterprise directly connected to the bank side has business dealings with the bank side, such as securities companies. The bank side refers to the bank's data center, including multiple parks (such as Beijing, Shanghai, Guangzhou, etc.). Multiple servers are deployed in each park to respond to client transaction requests. The IP network segments of servers in different parks are inconsistent, that is, the IP addresses are different.
[0064] In the prior art, clients directly connected to the bank side (such as brokerage clients) mainly rely on dedicated lines for communication, and the brokerage side is only configured with one IP address of the bank side, and the load balancing of specific transactions is implemented by the bank side. When a single data center on the bank side fails or a disaster occurs, the communication link from the client to the bank side may be interrupted, affecting the online transaction.
[0065] In order to solve the above technical problems, in one embodiment of this invention, a high availability method for directly connecting to a bank end is provided. Before the implementation of this method, the following work needs to be done in advance:
[0066] A configuration file of the client is pre-designed, which includes the association between different configuration switches and different campus addresses of the bank end, and there is a valid configuration switch among all the configuration switches. The authentication servers of different campuses of the bank end store the verification files sent by the client.
[0067] The configuration switch is an identifier representing different campus addresses of the bank end, which can be composed of letters, numbers, words, etc. The address of the campus is, for example, an IP address. The association relationship between different configuration switches of the configuration file and different campus addresses of the bank end is shown in Table 1.
[0068] Table 1
[0069]
[0070]
[0071] Table 1 is only an example. In specific implementation, the park and address can be set according to actual conditions. Figure 1 As shown, when the effective configuration switch is 0, address A is used to communicate with the A campus on the bank side; when the effective configuration switch is 1, address B is used to communicate with the B campus on the bank side; when the configuration switch is set to 2, address C is used to communicate with the C campus on the bank side.
[0072] The verification file is sent by the client to the authentication server of each park on the bank side in advance. The verification file can be named by the customer code, for example, a txt file, and the file content can be a combination of numbers, letters, etc. The file size is not less than 20 characters. This document does not specifically limit the format, specific content and size of the verification file. During the specific implementation, it can be set according to the needs. The authentication server of each park is used to authenticate the client, specifically for responding to the client's request to access the verification file, refer to the subsequent embodiments.
[0073] Specifically, Figure 2 As shown in the figure, the high availability methods for direct connection to the bank include:
[0074] Step 210: Send a verification file access request to an address associated with a valid configuration switch.
[0075] In this step, the address associated with the valid configuration switch is the address of the bank-side campus, and the verification file access request at least includes the requested verification file identifier (such as a name) for requesting the bank-side campus to return the verification file.
[0076] In some implementations, the verification file access request is in the form of http, for example, http: / / IP:port / **.txt, where IP is the address associated with the valid configuration switch, that is, the bank campus address, port is the port information of the address associated with the valid configuration switch, and ** is the verification file identifier, which is used to uniquely locate the verification file.
[0077] When this step is implemented, it can be executed when the client is turned on, or it can be executed at predetermined time intervals (such as every day), which is not limited in this article.
[0078] Step 220, receive the access result from the bank side, and determine whether the access result is consistent with the verification file. If the judgment result is no, it means that there is an abnormality or a disaster (such as power outage, downtime, etc.) in the device or park where the configuration switch associated address is located, then execute step 230. If the judgment result is yes, it means that the address of the bank-side park to which the client is currently connected is valid, then execute step 240.
[0079] Step 230, switching the effective configuration switch.
[0080] Step 240, executing the transaction process between the client and the bank.
[0081] During specific implementation, in order to facilitate recording of the customers served by the bank-side park, the transaction flow sent by the client to the bank also includes client information.
[0082] Furthermore, in order to avoid misjudgment, after the above steps 210 to 220 are executed for a predetermined number of times (for example, 3 times), if the predetermined number of times all determine that the access result is inconsistent with the verification file, step 230 is executed.
[0083] In this step, the process of switching the effective configuration switch includes: switching the effective configuration switch according to a preset configuration switch sequence, for example, if the configuration switch sequence is configuration switch 0, configuration switch 1 and configuration switch 2, and the current effective configuration switch is 0, then switching the effective configuration switch is to replace the effective configuration switch 0 with the effective configuration switch 1.
[0084] In a specific implementation of this invention, in order to ensure the switching efficiency of the effective configuration switch and the effectiveness of the newly switched effective configuration switch, in step 220, the process of switching the effective configuration switch includes:
[0085] A verification file access request is sent to the addresses associated with the remaining configuration switches in a preset order until a configuration switch whose access result is consistent with the verification file is found, and the configuration switch whose access result is consistent with the verification file is taken as a valid configuration switch.
[0086] The preset sequence is the sequence of pre-configuration of the configuration switches. In this sequence, the verification file access request is sent to the addresses associated with the configuration switches after the effective configuration switch in turn. For example, the configuration switch sequence is configuration switch 0, configuration switch 1, and configuration switch 2. The current effective configuration switch is configuration switch 0. When the effective configuration switch is switched in this embodiment, the verification file access request needs to be sent according to the address associated with the next configuration switch 1 of the effective configuration switch 0 to determine whether the access result is consistent with the verification file. If not, the verification file access request continues to be sent to the address associated with configuration switch 2, and the access result is verified to be consistent with the verification file. If not, an alarm message is sent to the operation and maintenance personnel so that the operation and maintenance personnel can detect whether the configuration file is incorrect.
[0087] This embodiment can identify the risks of servers in the bank's campus by actively detecting the validity of the bank's campus address through the client, respond immediately when a disaster occurs, ensure that the connection between the customer and the bank is real-time and effective, and thereby restore key services to the minimum acceptable level within the specified time.
[0088] In one embodiment of the present invention, in addition to actively detecting the validity of the campus address of the bank side through the client, the validity of the campus address of the bank side can also be detected by parsing the abnormal campus information sent by the bank side, that is, the validity of the campus address is detected by the bank side, specifically, Figure 3 As shown, the high availability method of directly connecting to the bank side also includes:
[0089] Step 250, receiving abnormal park information sent by the bank.
[0090] In this step, the abnormal park information can be determined by each park on the bank side monitoring the park or other parks. The abnormal park information at least includes the park identification (such as name, number, etc.) on the bank side.
[0091] Step 260, determine whether the address associated with the valid configuration switch is the address of the abnormal campus. If the judgment result is yes, it means that the address associated with the current valid switching switch cannot communicate, then execute step 230. If the judgment result is no, there is no need to switch the valid configuration switch.
[0092] In this step, in some embodiments, Figure 4 As shown, the process of determining the abnormal park information sent by the bank includes:
[0093] Step 410: the authentication server of each park on the bank side monitors the business processing software and hardware of the park and other parks.
[0094] In this step, the business processing software and hardware include: application process or service port. The authentication server of each park on the bank side is provided with a monitoring program, which can monitor the business processing software and hardware of this park and other parks.
[0095] The monitoring results include normal monitoring and abnormal monitoring. For a park that reports abnormal monitoring, it can be determined that the park is an abnormal park.
[0096] Step 420, determining abnormal park information based on the monitoring results.
[0097] In detail, the abnormal park information at least includes: identification information of the abnormal park.
[0098] Step 430, sending abnormal park information to the client.
[0099] In this step, the abnormal park information is sent to all clients directly connected to the bank end.
[0100] In a further embodiment, in order to improve the pertinence of sending abnormal park information and reduce the processing pressure of the client, in this step, sending the abnormal park information to the client includes:
[0101] (1) Based on the abnormal park information, obtain the customer list of the abnormal park.
[0102] When an abnormality occurs in a certain park, the authentication servers of other parks will detect it as monitoring abnormality. At this time, the authentication servers of normal parks will automatically trigger access to the database server of the bank to obtain the list of customers who have accessed the abnormal park at the current time. The customer list can be determined from the transaction flow sent by the client.
[0103] Specifically, refer to the monitoring results recorded by the monitoring matrix in Table 2 and Table 3 (normal monitoring results are recorded as 1, abnormal monitoring results are recorded as 0, or normal monitoring results are recorded as 0, abnormal monitoring results are recorded as 1). There are the following two situations in Table 2 and Table 3:
[0104] In the first case, when the server process of Park B is abnormal, the authentication servers of Parks A and C cannot receive the monitoring results, and the monitoring results of Park B itself are also abnormal.
[0105] In the second case, when the service process of Park B is normal but a park-level failure occurs and the park becomes an isolated island, both Park A and Park C cannot receive the monitoring results, and Park B detects that the results of its own detection are normal.
[0106] In the first case, the authentication servers of parks A and C can immediately query the database server on the bank side to confirm the list of customers who have accessed park B.
[0107] For the second situation, the authentication servers of the three parks A, B, and C will all trigger a query to the database server. Among them, the authentication servers of parks A and C determine that park B is abnormal, and the authentication servers of park B determine that parks A and C are abnormal. However, since an abnormality really occurred in park B, it cannot send a query request to the database server, thus avoiding erroneous feedback of the monitoring results.
[0108] Table 2
[0109]
[0110] Table 3
[0111]
[0112] (2) Sending the abnormal park information to the clients in the client list.
[0113] Abnormal park information can be sent in the form of park-level abnormal notification (for example, a certain park is abnormal, please switch as soon as possible).
[0114] In one embodiment of the present invention, in order to avoid conflicts between the client's active detection of the validity of the bank's campus address and the bank's detection of the validity of the campus address, for example, the client believes that the bank's address A is normal, and the bank initiates abnormal campus information to inform the bank that the address A is abnormal; the client believes that the bank's address A is abnormal, but does not receive the abnormal campus information initiated by the bank, such as Figure 5 As shown, the high availability method of directly connecting to the bank side also includes:
[0115] Step 270, when the access result is consistent with the verification file and the address associated with the valid configuration switch is the address of the abnormal campus, or the access result is inconsistent with the verification file and the address associated with the valid configuration switch is not the address of the abnormal campus, query the last M transactions that occurred with the bank end, determine whether the M transactions are abnormal, and if there is an abnormality, switch the valid configuration switch.
[0116] Here, M is a positive integer, for example, three, and the specific value can be determined according to actual conditions.
[0117] In one embodiment of the present invention, in order to avoid the client from repeatedly executing the step of determining whether the address associated with the valid configuration switch is the address of an abnormal campus, Figure 6 As shown, after the above step 250 receives the abnormal park information sent by the bank, it also includes:
[0118] Step 250', determining whether the same abnormal park information is received within a predetermined time period;
[0119] If the judgment result is no, then execute step 260 to determine whether the address associated with the valid configuration switch is the address of the abnormal campus. If the judgment result is yes, then discard the received abnormal campus information.
[0120] This embodiment can improve the processing efficiency of the client and reduce unnecessary processing processes.
[0121] Based on the same inventive concept, this article also provides a high-availability device directly connected to a bank end, as described in the following embodiments. Since the principle of solving the problem by the high-availability device directly connected to a bank end is similar to the high-availability method directly connected to a bank end, the implementation of the high-availability device directly connected to a bank end can refer to the high-availability method directly connected to a bank end, and the repeated parts will not be repeated.
[0122] A high-availability device directly connected to the bank end is set in the client. The client is designed with a configuration file, which includes the association between different configuration switches and communication addresses of different parks on the bank end, and there is a valid configuration switch among all the configuration switches. The authentication servers of different parks on the bank end store the verification files sent by the client.
[0123] Specifically, Figure 7 As shown, the high-availability device directly connected to the bank side includes:
[0124] The testing module 710 is configured to send a verification file access request to an address associated with a valid configuration switch.
[0125] The analysis module 720 is used to receive the access result from the bank side, determine whether the access result is consistent with the verification file, and if the judgment result is no, switch the valid configuration switch; if the judgment result is yes, execute the transaction process between the client and the bank side.
[0126] In this embodiment, different configuration switches are configured in the configuration file of the client to be associated with different campus addresses of the bank side, and there is a valid configuration switch among all the configuration switches. The verification files sent by the client are pre-stored in the authentication servers of different campuses of the bank side. Before executing the transaction process, the client first sends a verification file access request to the address associated with the valid configuration switch; receives the access result of the bank side, and determines whether the access result is consistent with the verification file. If the determination result is no, it means that there is an abnormality in the device or campus where the configuration switch associated address is located or a disaster has occurred. In this case, the valid configuration switch is switched. If the determination result is yes, the transaction process between the client and the bank side is executed. It can respond immediately when a disaster occurs, ensuring that the key business of the customer and the bank side is restored to the minimum acceptable level within the specified time.
[0127] In one embodiment of the present invention, an authentication server for each park of a bank is also provided, including:
[0128] The monitoring module is used to monitor the application processes or service ports of this park and other parks;
[0129] A monitoring result analysis module is used to determine abnormal park information based on the monitoring results; an abnormal park access module is used to obtain a customer list of the abnormal park based on the abnormal park information;
[0130] The abnormal information sending module is used to send the abnormal park information to the client in the customer list.
[0131] In order to more clearly explain the technical solution of this article, a specific embodiment is described in detail below. Before the implementation of this embodiment, the client configuration file needs to be designed in advance, wherein the configuration file includes the association relationship between different configuration switches and different campus addresses of the bank end, and there is a valid configuration switch among all configuration switches. It is also necessary to send the verification file to the authentication server of different campuses of the bank end in advance.
[0132] Specifically, Figure 8 As shown in the figure, the high availability methods for direct connection to the bank include:
[0133] Step 810, the client periodically sends a verification file access request http: / / A:port / **.txt to the bank-side campus A server according to the address associated with the valid configuration switch, where the bank-side campus A is the campus to which the address associated with the valid configuration switch belongs.
[0134] Step 820: The server in the bank's park A receives the verification file access request, obtains the verification file from the database according to the verification file access request, and sends the verification file to the client.
[0135] In step 830, the client receives the verification file sent by the server of the bank park A, and determines whether the verification file sent by the bank is consistent with the verification file sent to the bank in advance. If they are inconsistent, execute step 840; if they are consistent, execute step 850.
[0136] Step 840: Switch the effective configuration switch. Specifically, the process of switching the effective configuration switch includes:
[0137] A verification file access request is sent to the addresses associated with the remaining configuration switches in a preset order until a configuration switch whose access result is consistent with the verification file is found, and the configuration switch whose access result is consistent with the verification file is taken as a valid configuration switch.
[0138] Step 850, execute the transaction process between the client and the bank, that is, the client sends the transaction flow to the bank's park A server, and the bank's park A server responds to the transaction flow.
[0139] Step 860, the authentication server of each park on the bank side monitors the business processing software and hardware of the park and other parks; determines the abnormal park information based on the monitoring results; obtains the customer list of the abnormal park based on the abnormal park information; and sends the abnormal park information to the client in the customer list.
[0140] Step 870, the client receives the abnormal campus information sent by each campus of the bank, and determines whether the address associated with the valid configuration switch is the address of the abnormal campus. If the address associated with the valid configuration switch is the address of the abnormal campus, return to step 840.
[0141] If the judgment result of step 870 is that the address associated with the valid configuration switch is not the address of the abnormal campus, the judgment result of step 830 is that the verification file sent by the bank side is inconsistent with the verification file sent to the bank side in advance, or if the judgment result of step 870 is that the address associated with the valid configuration switch is the address of the abnormal campus, and the judgment result of step 830 is that the verification file sent by the bank side is consistent with the verification file sent to the bank side in advance, then execute step 880.
[0142] Step 880, the client queries the last M transactions with the bank to determine whether the M transactions are abnormal. If there are any abnormalities, execute step 840.
[0143] In this embodiment, steps 810 to 850 and steps 860 to 870 may be executed simultaneously, and the execution order thereof is not limited herein.
[0144] This embodiment ensures that the client address configuration switch can be automatically switched when a disaster occurs through bidirectional detection means at the bank end and the client end. The system supports high availability and has high disaster recovery capabilities, significantly improving the level of application automation emergency response.
[0145] In one embodiment of the present invention, a computer device is further provided for executing the high availability method for directly connecting to a bank terminal as described in any of the above embodiments. Specifically, Fig. 9 As shown, the computer device 902 may include one or more processors 904, such as one or more central processing units (CPUs), each of which may implement one or more hardware threads. The computer device 902 may also include any memory 906, which is used to store any kind of information such as code, settings, data, etc. Non-limitingly, for example, the memory 906 may include any one or more combinations of the following: any type of RAM, any type of ROM, flash memory device, hard disk, optical disk, etc. More generally, any memory may use any technology to store information. Further, any memory may provide volatile or non-volatile retention of information. Further, any memory may represent a fixed or removable component of the computer device 902. In one case, when the processor 904 executes an associated instruction stored in any memory or a combination of memories, the computer device 902 may perform any operation of the associated instruction. The computer device 902 also includes one or more drive mechanisms 908 for interacting with any memory, such as a hard disk drive mechanism, an optical disk drive mechanism, etc.
[0146] The computer device 902 may also include an input / output module 910 (I / O) for receiving various inputs (via input devices 912) and for providing various outputs (via output devices 914). A specific output mechanism may include a presentation device 916 and an associated graphical user interface 918 (GUI). In other embodiments, the input / output module 910 (I / O), the input device 912, and the output device 914 may not be included, and the computer device 902 may be used as a computer device in a network. The computer device 902 may also include one or more network interfaces 920 for exchanging data with other devices via one or more communication links 922. One or more communication buses 924 couple the components described above together.
[0147] The communication link 922 may be implemented in any manner, for example, through a local area network, a wide area network (e.g., the Internet), a point-to-point connection, etc., or any combination thereof. The communication link 922 may include any combination of hardwired links, wireless links, routers, gateway functions, name servers, etc. governed by any protocol or combination of protocols.
[0148] Corresponds to Figure 2-Figure 6 The method in this article also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the above method are executed.
[0149] The embodiment of the present invention also provides a computer readable instruction, wherein when the processor executes the instruction, the program therein causes the processor to execute the following Figures 2 to 6 The method shown.
[0150] It should be understood that in the various embodiments of this document, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this document.
[0151] It should also be understood that in the embodiments of this article, the term "and / or" is only a description of the association relationship of the associated objects, indicating that three relationships may exist. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.
[0152] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this article.
[0153] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.
[0154] In the several embodiments provided herein, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of the units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, or can be electrical, mechanical or other forms of connection.
[0155] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the embodiments of this article.
[0156] In addition, each functional unit in each embodiment of this invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit may be implemented in the form of hardware or in the form of software functional unit.
[0157] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this article is essentially or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of this article. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.
[0158] Specific embodiments are used in this article to illustrate the principles and implementation methods of this article. The description of the above embodiments is only used to help understand the methods and core ideas of this article. At the same time, for general technicians in this field, according to the ideas of this article, there will be changes in the specific implementation methods and application scopes. In summary, the content of this specification should not be understood as a limitation on this article.
Claims
1. A high availability method for directly connecting to a bank end, characterized in that: A configuration file of the client is pre-designed, wherein the configuration file includes associations between different configuration switches and addresses of different campuses of the bank end, and there is a valid configuration switch among all the configuration switches. The authentication servers of different campuses of the bank end store verification files sent by the client. The method includes: Sending a verification file access request to the address associated with the valid configuration switch; Receiving the access result from the bank, and determining whether the access result is consistent with the verification file; Receive abnormal park information sent by the bank; Determining whether the address associated with the valid configuration switch is the address of an abnormal campus; If the access result is consistent with the verification file and the address associated with the valid configuration switch is the address of the abnormal park, or if the access result is inconsistent with the verification file and the address associated with the valid configuration switch is not the address of the abnormal park, query the last M transactions with the bank end to determine whether the M transactions are abnormal, and if there is an abnormality, switch the valid configuration switch; If the access result is inconsistent with the verification file and the address associated with the valid configuration switch is the address of the abnormal park, switching the valid configuration switch; If the access result is consistent with the verification file and the address associated with the valid configuration switch is not the address of the abnormal campus, the transaction process between the client and the bank is executed.
2. The high availability method for directly connecting to a bank terminal as claimed in claim 1, characterized in that: Toggle valid configuration switches, including: A verification file access request is sent to the addresses associated with the remaining configuration switches in a preset order until a configuration switch whose access result is consistent with the verification file is found, and the configuration switch whose access result is consistent with the verification file is taken as a valid configuration switch.
3. The high availability method for directly connecting to a bank terminal as claimed in claim 1, characterized in that: The process of determining the abnormal park information sent by the bank includes: The authentication servers in each park on the bank side monitor the business processing software and hardware of this park and other parks; Determine abnormal park information based on monitoring results; Send abnormal park information to the client.
4. The high availability method for directly connecting to a bank terminal as claimed in claim 3, characterized in that: Send abnormal park information to the client, including: According to the abnormal park information, obtain the customer list of the abnormal park; The abnormal campus information is sent to the clients in the client list.
5. The high availability method for directly connecting to a bank terminal as claimed in claim 1, characterized in that: After receiving the abnormal park information sent by the bank, it also includes: Determine whether the same abnormal park information is received within a predetermined time period; If the judgment result is no, then the step of judging whether the address associated with the valid configuration switch is the address of an abnormal campus is performed; if the judgment result is yes, then the received abnormal campus information is discarded.
6. A high-availability device directly connected to a bank terminal, characterized in that: Set in the client, the client is designed with a configuration file, the configuration file includes the association relationship between different configuration switches and communication addresses of different parks on the bank side, and there is a valid configuration switch among all the configuration switches, and the authentication servers of different parks on the bank side store the verification files sent by the client, including: A test module, used for sending a verification file access request to an address associated with a valid configuration switch; An analysis module, used for receiving the access result from the bank, and determining whether the access result is consistent with the verification file; It also includes a unit that implements the following functions: receiving abnormal park information sent by the bank end; Determining whether the address associated with the valid configuration switch is the address of an abnormal campus; If the access result is consistent with the verification file and the address associated with the valid configuration switch is the address of the abnormal park, or if the access result is inconsistent with the verification file and the address associated with the valid configuration switch is not the address of the abnormal park, query the last M transactions with the bank end to determine whether the M transactions are abnormal, and if there is an abnormality, switch the valid configuration switch; If the access result is inconsistent with the verification file and the address associated with the valid configuration switch is the address of the abnormal park, switching the valid configuration switch; If the access result is consistent with the verification file and the address associated with the valid configuration switch is not the address of the abnormal campus, the transaction process between the client and the bank is executed.
7. A computer device comprising a memory, a processor, and a computer program stored in the memory, characterized in that: When the computer program is executed by the processor, the computer program executes the instructions of the method according to any one of claims 1 to 5.
8. A computer storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor of a computer device, the computer program executes instructions of the method according to any one of claims 1 to 5.
