Digital certificate filling method, device and equipment applied to U-shield test, medium and program product

Abstract

The present disclosure provides a digital certificate filling method applied to U-shield testing, which can be applied to the field of big data technology. The digital certificate filling method applied to U-shield testing comprises: generating a U-shield calling instruction; obtaining a digital certificate matched with a to-be-tested business scenario according to the U-shield calling instruction; and filling the digital certificate into a to-be-tested U-shield to realize the testing of the to-be-tested U-shield. The present disclosure also provides a digital certificate filling device, equipment, storage medium and program product applied to U-shield testing.

Description

TECHNICAL FIELD

[0001] The present disclosure relates to the technical field of computer technology and big data technology, in particular to the technical field of software testing, and more particularly to a digital certificate filling method, device, equipment, medium and program product applied to U key testing. BACKGROUND

[0002] In the application system provided by a bank or other financial service enterprise, there are a large number of business scenarios that need to insert a U key on a mobile terminal to perform normal transactions. The business scenarios that need to insert a U key for identity security verification in the general transaction process are basically very important and have high priority. In each version change process, testing and verification of these transaction scenarios are essential. However, each version change upgrade will generate a large amount of testing and verification workload. For such important and highly repetitive test scenarios, each financial enterprise usually introduces an automated testing tool or method to achieve the purpose of reducing manual workload and improving testing efficiency through automated testing. SUMMARY

[0003] In view of at least one of the technical problems existing in the U key testing process for the business scenarios (such as identity security verification) described above, the present disclosure provides a digital certificate filling method, device, equipment, medium and program product applied to U key testing, which improves the resource utilization rate of testing U keys.

[0004] The first aspect of the present disclosure provides a digital certificate filling method applied to U key testing, which comprises: generating a U key calling instruction; obtaining a digital certificate matched with a to-be-tested business scenario according to the U key calling instruction; and filling the digital certificate into a to-be-tested U key to realize testing of the to-be-tested U key.

[0005] According to the embodiments of the present disclosure, in the step of generating the U key calling instruction, the step of receiving a business test operation matched with the to-be-tested business scenario is included; and the U key calling instruction is generated in response to the business test operation.

[0006] According to the embodiments of the present disclosure, in the step of obtaining the digital certificate matched with the to-be-tested business scenario according to the U key calling instruction, the step of parsing the U key calling instruction to determine U key parsing information is included; and the digital certificate is determined according to the U key parsing information and a preset certificate extraction rule.

[0007] According to the embodiments of the present disclosure, in the step of obtaining the digital certificate matched with the to-be-tested business scenario according to the U key calling instruction, the step of generating a data extraction request in response to the U key parsing information is further included; and the digital certificate is generated according to the data extraction request.

[0008] According to an embodiment of the present disclosure, in the generating of the digital certificate according to the data extraction request, the generating comprises: obtaining target test data according to the data extraction request; and generating the digital certificate based on the target test data.

[0009] According to an embodiment of the present disclosure, in the obtaining of the target test data according to the data extraction request, the obtaining comprises: extracting a corresponding data segment from a preset test data table according to the data extraction request; and obtaining the target test data according to the data segment.

[0010] According to an embodiment of the present disclosure, in the generating of the digital certificate based on the target test data, the generating comprises: generating the digital certificate according to the target test data and a preset certificate generation rule.

[0011] According to an embodiment of the present disclosure, in the filling of the digital certificate into the U key to be tested, the filling comprises: establishing a certificate binding relationship between the digital certificate and the U key to be tested; and activating a transaction use state of the U key to be tested in response to the certificate binding relationship.

[0012] According to an embodiment of the present disclosure, before the establishing of the certificate binding relationship between the digital certificate and the U key to be tested, the method further comprises: releasing an original certificate binding relationship of the U key to be tested in response to the digital certificate.

[0013] According to an embodiment of the present disclosure, in the testing of the U key to be tested, the method further comprises: executing an automated test script matched with the to-be-tested business scenario in response to a filling operation of the digital certificate.

[0014] A second aspect of the present disclosure provides a digital certificate filling device applied to U key testing, which comprises an instruction generation module, a certificate acquisition module and a certificate filling module. The instruction generation module is configured to generate a U key calling instruction; the certificate acquisition module is configured to acquire a digital certificate matched with a to-be-tested business scenario according to the U key calling instruction; and the certificate filling module is configured to fill the digital certificate into a U key to be tested, so as to test the U key to be tested.

[0015] A third aspect of the present disclosure provides an electronic device, which comprises: one or more processors; a memory configured to store one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors are caused to execute the above-mentioned digital certificate filling method applied to U key testing.

[0016] A fourth aspect of the present disclosure further provides a computer-readable storage medium having executable instructions stored thereon, which are executed by a processor to cause the processor to execute the above-mentioned digital certificate filling method applied to U key testing.

[0017] The fifth aspect of the present disclosure also provides a computer program product comprising a computer program which, when executed by a processor, implements the above-mentioned digital certificate filling method applied to U key testing. BRIEF DESCRIPTION OF DRAWINGS

[0018] The above and other objects, features and advantages of the present disclosure will become more apparent from the following description when taken in conjunction with the accompanying drawings, in which:

[0019] Figure 1 An application scenario diagram of the digital certificate filling method, device, equipment, medium and program product applied to U key testing according to an embodiment of the present disclosure is schematically shown;

[0020] Figure 2 A flowchart of the digital certificate filling method applied to U key testing according to an embodiment of the present disclosure is schematically shown;

[0021] Figure 3 An application scenario flowchart of the digital certificate filling method applied to U key testing according to an embodiment of the present disclosure is schematically shown;

[0022] Figure 4 An application module composition diagram of the digital certificate filling method applied to U key testing according to an embodiment of the present disclosure is schematically shown;

[0023] Figure 5 A structural block diagram of the digital certificate filling device applied to U key testing according to an embodiment of the present disclosure is schematically shown; and

[0024] Figure 6 A block diagram of an electronic device suitable for implementing the digital certificate filling method applied to U key testing according to an embodiment of the present disclosure is schematically shown. DETAILED DESCRIPTION

[0025] Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings. It should be understood, however, that the description which follows is merely exemplary and is not intended to limit the scope of the present disclosure. In the following detailed description of the embodiments of the present disclosure, numerous specific details are set forth in order to provide a thorough understanding of the present disclosure. However, it would be apparent to one skilled in the art that the present disclosure can be practiced without these specific details. In other instances, descriptions of well-known structures and techniques have been omitted in order to avoid obscuring the concepts of the present disclosure.

[0026] The terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit the present disclosure. As used herein, the term "includes" and "comprising" and the like means the inclusion of the stated features, steps, operations, and / or components, but not the exclusion of one or more other features, steps, operations, or components.

[0027] All terms used herein, including technical and scientific terms, have the meanings as commonly understood by one of ordinary skill in the art unless otherwise defined. It should be noted that the terms used herein are to be interpreted as having a meaning that is consistent with the understanding of those terms by those skilled in the art, and should not be interpreted in an overly idealized or overly formal sense.

[0028] In the case of using expressions such as "at least one of A, B, and C, etc.", it should be generally interpreted that the meaning of the expression is consistent with the understanding of the expression by those skilled in the art (for example, "a system having at least one of A, B, and C" should include but is not limited to a system having A alone, a system having B alone, a system having C alone, a system having both A and B, a system having both A and C, a system having both B and C, and / or a system having A, B, and C, etc.).

[0029] The test scenario related to the U-shield physical security medium is different from the conventional test implementation. The U-shield, as a high-security identity authentication medium in the financial service industry, stores a digital certificate with a smart chip for identifying the identity of a customer, and ensures the safe use of online electronic banking and other financial services by the user. Therefore, the U-shield for security authentication needs both the U-shield physical medium (U-shield container) and the data certificate of the user's identity information.

[0030] Currently, in the process of automatically or manually performing a business scenario related to a transaction that must use a U-shield physical peripheral, a batch of test U-shields that have completed certificate production and certificate data loading are usually prepared in advance. When a U-shield is used during the test, the corresponding U-shield is connected to the computer terminal, and then the corresponding test execution work is carried out.

[0031] Specifically, taking the test of the standard authorized purchase process of the online banking public finance product of a certain financial institution as an example, during the entire test process, the tester first needs to prepare three empty test U-shield media (respectively, a finance product purchase submission shield, a finance product purchase first-level approval shield, and a finance product purchase second-level approval shield) according to the standard authorization process requirements in the finance product purchase rules; then, prepare data containing different user identity information (respectively, a group number and an account number for purchasing finance, a user account number with first-level approval authority, and a user account number with second-level approval authority); then, use the identity information data to produce security certificates in sequence; finally, bind and activate the security certificates and the physical U-shields one by one, and load the prepared security certificate data into the test U-shields, thereby obtaining the U-shields that can be used in the test process.

[0032] It can be seen that in the above test process, all the required U disk media need to be prepared in advance, and each U disk can only be bound with one security certificate. The tester needs to prepare three U disks that have completed the corresponding feature certificate and data filling in advance, insert the three U disks into the test terminal (such as a test computer) that performs the test operation at the same time, and then the corresponding test execution work can be carried out. Therefore, in the current test mode, because one corresponding U disk physical device needs to be prepared for each set of certificate data, when a new test transaction verification is added, a corresponding test U disk device also needs to be made. Obviously, when the number of scripts for automatic test execution is large, especially when multiple U disks with different user and data permissions need to be operated according to the process in an automatic test script transaction scenario, the number of test U disk devices that need to be prepared will double, but the number of test U disk devices that can be used simultaneously at the same time point is very small. Therefore, a large number of test U disk devices need to be made during the test process, the utilization rate of the test U disk devices is low, the management complexity of the test U disk devices is high, the test U disk device resources are seriously wasted, and the test efficiency is low.

[0033] To at least one of the technical problems existing in the U disk test process of the identity security verification business scenario, the present disclosure provides a digital certificate filling method, device, equipment, medium and program product applied to U disk test for improving the resource utilization rate of the test U disk.

[0034] It should be noted that the digital certificate filling method and device applied to U disk test provided by the present disclosure can be used in the field of big data technology, and can also be used in the field of finance and any field other than the field of finance, such as the field of information security technology and the field of Internet of Things technology. The application field of the digital certificate filling method and device applied to U disk test of the present disclosure is not limited.

[0035] In the technical solutions of the present disclosure, the acquisition, storage and application of user personal information comply with relevant laws and regulations, necessary security measures are taken, and public order and good customs are not violated.

[0036] Embodiments of the present disclosure provide a digital certificate filling method applied to U disk test, which comprises: generating a U disk calling instruction; obtaining a digital certificate matched with a to-be-tested business scenario according to the U disk calling instruction; and filling the digital certificate into a to-be-tested U disk to realize the test of the to-be-tested U disk.

[0037] Figure 1 The application scenario diagram of the digital certificate filling method, device, equipment, medium and program product applied to U disk test according to the embodiments of the present disclosure is schematically shown.

[0038] As Figure 1As shown, the application scenario 100 according to this embodiment can include terminal devices 101, 102, 103, a network 104, and a server 105. The network 104 is a medium for providing a communication link between the terminal devices 101, 102, 103 and the server 105. The network 104 can include various connection types, such as wired, wireless communication links, or fiber optic cables, and the like.

[0039] A user can use the terminal devices 101, 102, 103 to interact with the server 105 through the network 104 to receive or send messages, and the like. Various communication client applications can be installed on the terminal devices 101, 102, 103, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, and the like (only as examples).

[0040] The terminal devices 101, 102, 103 can be various electronic devices with display screens and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, and the like.

[0041] The server 105 can be a server providing various services, such as a background management server providing support for websites browsed by users using the terminal devices 101, 102, 103 (only as an example). The background management server can analyze and process received user requests and the like, and feed back the processing results (such as web pages, information, or data, and the like obtained or generated according to user requests) to the terminal devices.

[0042] It should be noted that the digital certificate filling method applied to U key testing provided by the embodiments of the present disclosure can generally be executed by the server 105. Correspondingly, the digital certificate filling device applied to U key testing provided by the embodiments of the present disclosure can generally be arranged in the server 105. The digital certificate filling method applied to U key testing provided by the embodiments of the present disclosure can also be executed by a server or a server cluster different from the server 105 and capable of communicating with the terminal devices 101, 102, 103 and / or the server 105. Correspondingly, the digital certificate filling device applied to U key testing provided by the embodiments of the present disclosure can also be arranged in a server or a server cluster different from the server 105 and capable of communicating with the terminal devices 101, 102, 103 and / or the server 105.

[0043] It should be understood that Figure 1 The number of terminal devices, networks, and servers in the application scenario 100 is only illustrative. According to the implementation needs, there can be any number of terminal devices, networks, and servers.

[0044] The following will be described based on the scenario described in the foregoing Figure 1 application scenario 100. Through the Figures 2-6The digital certificate filling method applied to the U key test of the disclosed embodiment is described in detail.

[0045] Figure 2 A flowchart of the digital certificate filling method applied to the U key test according to the disclosed embodiment is schematically shown.

[0046] As Figure 2 shown, the digital certificate filling method applied to the U key test of the embodiment includes operation S201 to operation S202.

[0047] In operation S201, a U key calling instruction is generated;

[0048] In operation S202, according to the U key calling instruction, a digital certificate matching a to-be-tested business scenario is obtained; and

[0049] In operation S203, the digital certificate is filled into the to-be-tested U key to implement the test of the to-be-tested U key.

[0050] In the disclosed embodiment, the test content performed by the to-be-tested U key is generally for a specific business scenario. The to-be-tested business scenario is generally a business scenario corresponding to a transaction content with a high security level such as identity security verification. Corresponding to different transaction contents or business contents of different to-be-tested business scenarios, such as regions, branches, account types, and transaction media, the corresponding to-be-tested data are also different. Therefore, in the process of testing different to-be-tested business scenarios for the same to-be-tested U key, the U key data required for different test business contents involved are different, and the bound U key digital certificate for U key test is also different.

[0051] The U key calling instruction is a calling and executing instruction of the to-be-tested data (including the data required by the digital certificate) required by the to-be-tested U key according to different to-be-tested business scenarios, which is used to implement the calling and executing of the to-be-tested data. Through the generation and calling of the U key calling instruction, the corresponding to-be-tested data can be called, so that the to-be-tested data can be used to generate a digital certificate for testing the U key, and the test content of the corresponding to-be-tested business scenario of the to-be-tested U key can be executed according to the digital certificate. The digital certificate is a digital authentication identifier for testing the customer identity information in the U key, and is one of the important identity verification technical means in the financial verification U key.

[0052] The digital certificate corresponding to the to-be-tested business scenario obtained according to the U key calling instruction is filled into the to-be-tested U key, so that the digital certificate is bound with the to-be-tested U key, thereby enabling the to-be-tested U key to have the ability to execute test data matched with the to-be-tested business scenario and to realize the testing of transaction content with high security levels such as identity security verification. It can be seen that the above method of the embodiment of the present disclosure can realize the filling of different digital certificates into the to-be-tested U key according to different to-be-tested business scenarios, so that the same to-be-tested U key can be reused in different situations to test different business scenarios.

[0053] Therefore, the above digital certificate filling method of the embodiment of the present disclosure effectively solves the problem that in the prior art, in the process of testing using a U key device in the case of automatically testing a special business scenario, a test physical U key device needs to be prepared for each set of test data, resulting in a large number of test physical U key devices, low utilization rate, and serious waste of resources. Obviously, the above method of the embodiment of the present disclosure uses a reusable U key, so that only one test U key physical device is needed for an office test terminal, greatly reducing the resource demand for test physical U key devices in the testing stage and greatly improving the resource utilization rate of the test U key.

[0054] Figure 3 An application scenario flowchart of the digital certificate filling method applied to U key testing according to the embodiment of the present disclosure is schematically shown; Figure 4 An application module composition diagram of the digital certificate filling method applied to U key testing according to the embodiment of the present disclosure is schematically shown.

[0055] As shown in Figure 3 and Figure 4 The application scenario of the digital certificate filling method applied to U key testing mainly includes an execution machine 310, a U key calling instruction analysis module 320, a U key making log recording module 330, a U key test data extraction module 340, a U key digital certificate making module 350, and a U key digital certificate binding and filling module 360, and the specific corresponding implementation functions are as follows:

[0056] As shown in Figures 2-4 According to the embodiment of the present disclosure, in the operation S201 of generating a U key calling instruction, the following is included:

[0057] Receiving a business test operation matched with the to-be-tested business scenario;

[0058] Generating a U key calling instruction in response to the business test operation.

[0059] Different to-be-tested business scenarios have different corresponding business test operation contents. The business test operation is operation information performed by a user (such as a test personnel or an operation and maintenance personnel) on different business contents of different to-be-tested business scenarios, and can be used as a test response source of the to-be-tested business scenario. That is, when the business test operation is acquired, the corresponding to-be-tested business scenario is determined, and the corresponding U key calling instruction can be determined according to the to-be-tested business scenario.

[0060] As shown in FIG. 3, Figure 3 and Figure 4 In operation S301, the execution machine 310 can generate a U key calling instruction after receiving the aforementioned business test operation corresponding to the to-be-tested business scenario. In other words, the execution machine 310 generates and sends the U key calling instruction to the U key calling instruction analysis module 320 in the process of executing the automation script to the operation process in which the U key needs to be called. The automation script is a test script using a natural language as a test script language to meet the maintainability, reliability and portability of the U key automatic test. The test script is an executable file, and the writing method conforms to the natural language description habit, is equivalent to a test case, and does not need to be converted between the test case and the test script. The maintenance of the test case is relatively simple, so as to unify the test process described by the case with the actual test operation and test result judgment.

[0061] Therefore, when the U key related operation needs to be performed in the automation test script (such as online banking login), the execution machine 310 sends the data required by the to-be-tested U key in the form of a U key calling instruction to the U key calling instruction analysis module 320. Specifically, the data required by the U key test can be called in response to the U key calling instruction, or can be directly converted by the U key calling instruction. The specific method is not limited in the embodiments of the present disclosure.

[0062] As shown in FIG. 2, Figures 2-4 According to the embodiments of the present disclosure, in operation S202, the digital certificate matched with the to-be-tested business scenario is acquired according to the U key calling instruction, including:

[0063] analyzing the U key calling instruction to determine U key analysis information;

[0064] determining the digital certificate according to the U key analysis information and a preset certificate extraction rule.

[0065] As shown in FIG. 2, Figure 3 and Figure 4As shown, the U key calling instruction parsing module 320 is mainly used for receiving and feeding back the U key calling instruction initiated by the automatic script execution tool or framework of the automatic test execution terminal, and specifically parsing (such as XML parsing) the U key calling instruction after receiving the U key calling instruction, and obtaining specific execution data in the U key calling instruction, such as region, network point, customer number, account type, and transaction medium and other transaction test information related to the business scenario to be tested. Among them, the transaction test information is the U key parsing information described above. Among them, the U key calling instruction can include execution machine name, execution machine IP, instruction sending time, test business, test environment, region, network point, customer number, account type, transaction medium, data valid time and other test related information or data, and the specific form of the communication message corresponding to the U key calling instruction is as follows:

[0066] <?xml version="1.0" encoding="UTF-8"?>

[0067] <config>

[0068] <env> 2< / env>

[0069] <zoneno> 0200< / zoneno>

[0070] <field> 01< / field>

[0071] <machine-name>Ukeytest 01< / machine-name>

[0072] <CINO_TYPE>0< / CINO_TYPE>

[0073] <media> 01< / media>

[0074] <BEGIN_TIME>2012-02-22< / BEGIN_TIME>

[0075] <END_TIME>2012-02-22< / END_TIME>

[0076] <ip> 83.25.10.12< / ip>

[0077] <SEND_TIME>2012 / 03 / 12 15:12:12< / SEND_TIME>

[0078] <config>

[0079] As shown in Figure 3 and Figure 4 As shown in operation S302, according to the obtained U key analysis information as a query basis, it can be found in the corresponding digital certificate data table in the U key production log recording module 330 whether there is a digital certificate that has met the preset certificate extraction rule. Among them, the preset certificate extraction rule is the category condition corresponding to the region, branch, customer number, account type and transaction medium in the above-mentioned U key analysis information. Different category conditions correspond to different digital certificates, and each digital certificate is stored in the certificate data table of the above-mentioned U key production log recording module 330. The certificate data table can be used to feed back the generation time, use state and the like of each digital certificate. The specific data form is shown in Table 1 as follows.

[0080] Table 1

[0081]

[0082]

[0083] Among them, the U key production log recording module 330 is mainly used for recording the U key production log, and the U key production log includes physical U key number, execution terminal IP address, production link, production result, production request time and production completion time and the like. Log information items.

[0084] As shown in Figures 2-4 According to the embodiment of the present disclosure, in operation S202, according to the U key calling instruction, the digital certificate matched with the to-be-tested business scenario is obtained, and the method further comprises the following steps:

[0085] Generating a data extraction request in response to the U key analysis information;

[0086] Generating a digital certificate according to the data extraction request.

[0087] As shown in Figure 3 and Figure 4 As shown in operation S302, when there is no data certificate that meets the above-mentioned preset certificate extraction rule in the corresponding digital certificate data table in the above-mentioned U key production log recording module 330, a corresponding data extraction request needs to be generated according to the analysis data obtained by the U key analysis information. The data extraction request initiated by the U key calling instruction analysis module 320 is an execution request information for calling the generation of the digital certificate corresponding to the to-be-tested business scenario, mainly including test environment, region, branch, customer number, account type (submission, approval), transaction medium (corresponding account, financial account, etc.), data valid time and the like. When the data extraction request is executed, the digital certificate corresponding to the to-be-tested business scenario can be obtained.

[0088] As Figures 2-4 shown, according to the embodiment of the present disclosure, in the generation of the digital certificate according to the data extraction request, comprising:

[0089] According to the data extraction request, the target test data is obtained;

[0090] Based on the target test data, the digital certificate is generated.

[0091] As Figure 3 and Figure 4 shown, in operation S303, when the U-shield test data extraction module 340 performs extraction operation on the target test data for realizing digital certificate generation according to the U-shield call instruction corresponding U-shield parsing information, the target test data is executed, which can be used to generate the digital certificate corresponding to the business scenario to be tested. Among them, the extraction operation is the execution operation of data query, combination and the like based on the preset data extraction rule. In operation S305, when the extraction of the target business data cannot be performed according to the preset data extraction rule, or the extracted business data does not conform to the preset extraction rule, it means that the data extraction operation fails, and the extraction error information such as "unable to obtain usable business data according to the extraction rule, unable to make digital certificate" can be directly fed back to the U-shield call instruction parsing module 320, and the error information is recorded to the U-shield making log recording module 330.

[0092] As Figures 2-4 shown, according to the embodiment of the present disclosure, in the obtaining of the target test data according to the data extraction request, comprising:

[0093] According to the data extraction request, the corresponding data segment is extracted from the preset test data table;

[0094] According to the data segment, the target test data is obtained.

[0095] As Figure 3 and Figure 4 shown, the U-shield test data extraction module 340 can be used to store the rule identifier related to the U-shield target test data extraction in the U-shield call instruction parsing module 320 parsed U-shield parsing information, and can also be used to store the automatic extraction script capable of automatically obtaining the corresponding target test data according to the preset extraction rule. Among them, the preset extraction rule is the data extraction rule for obtaining the account information conforming to the business scenario environment to be tested according to the customer number, account type, transaction medium and the like in the data extraction request corresponding to the U-shield parsing information in the specified business scenario environment to be tested, the rule identifier is the corresponding identifier data of the above-mentioned preset extraction rule, and the automatic extraction script is the operation script using natural language as the execution script language to meet the above-mentioned data extraction operation.

[0096] As Figure 3 and Figure 4 As shown, the U-shield call command parsing module 320 initiates a data extraction request based on the aforementioned U-shield parsing information and returns the extracted target test data. As mentioned earlier, this test data extraction request mainly includes test environment, region, branch, customer number, account type (submission, approval), transaction medium (current account, wealth management account, etc.), and data validity period. Based on the corresponding test information in the data extraction request, the module queries and retrieves the corresponding data record from a preset test data table. This data record is the aforementioned data fragment, which is the basic data unit constituting the target test data. The preset test data table is a data table of extraction rules between the corresponding target test data data fragment and the extraction test information of the data extraction request, used to record the data fragments of the test data corresponding to each test information. The module queries the corresponding data record in the extraction rule data table, executes the corresponding extraction statement on the data record to extract the data fragment, obtain the target test data (such as account information), and returns it to the U-shield call command parsing module 320. Specifically, when purchasing corporate wealth management product X using a corporate customer card, in the second environment, based on the data extraction request information such as customer number = 020090000011116, account type = submission, and transaction medium = corporate customer card, the usable target test data can be obtained as: account = 0200003309005407770.

[0097] As can be seen, the method described in this embodiment can create target test data for digital certificates based on existing test information, facilitating the generation of digital certificates and ensuring that the digital certificates used for U-shield testing meet the needs of the business scenario under test. Furthermore, the data fragment acquisition process ensures the accuracy and comprehensiveness of the target test data, automating and intelligently acquiring the target test data, improving the efficiency of digital certificate creation, and further ensuring a more accurate and stable binding between the digital certificate and the U-shield under test.

[0098] like Figures 2-4 As shown, according to an embodiment of this disclosure, the process of generating a digital certificate based on target test data includes:

[0099] Generate a digital certificate based on the target test data and preset certificate generation rules.

[0100] For the acquired target business data, a digital certificate can be generated according to the corresponding preset certificate generation rules. These preset certificate generation rules are the file creation rules for processing the target business data to generate the digital certificate. For example... Figure 3 and Figure 4 As shown, the U-shield digital certificate production module 350 produces the data certificate of the U-shield to be tested, and simultaneously judges whether the digital certificate is successfully produced in operation S304. In operation S306, if the U-shield digital certificate is not successfully produced, the U-shield calling instruction analysis module 320 is directly fed back the certificate production failure information such as "digital certificate production failure, unable to bind with the U-shield" through the message information, and the production failure information is recorded in the U-shield production log recording module 330.

[0101] Therefore, by using the target test data (such as account information) extracted by the U-shield test data extraction module 340, the U-shield digital certificate production module 350 produces the digital certificate according to the data content related to the customer number, account information and account type in the target test data according to the preset certificate generation rule, and records the generation record of the digital certificate to the U-shield production log recording module 330. The generation record mainly includes the computer terminal IP address, the digital certificate generation time, the digital certificate use state and the digital certificate corresponding business data extraction rule and the like. The record form of the U-shield production log generation record recorded in the certificate generation record data table in the U-shield production log recording module 330 is shown in Table 2.

[0102] Table 2

[0103]

[0104] Specifically, in the production process of the data certificate, according to the account information of the target test data extracted in the foregoing, the corresponding certificate medium type is selected, the certificate ID (for example: 4ZDT05182547.c.0200.0202), the authorization mode, the support mode, the certificate type, the certificate number, the mobile phone number and the operation limit are set, and the production of the digital certificate corresponding to the business scene to be tested is completed.

[0105] Therefore, through the production of the digital certificate, the U-shield to be tested of the embodiment of the present disclosure can realize reuse, thereby greatly saving the U-shield device resources, improving the device utilization rate, saving the labor cost and device cost, and also being able to improve the test efficiency of the business scene test in the case of multiple same U-shields.

[0106] As shown, Figures 2-4 According to the embodiment of the present disclosure, the digital certificate is filled into the U-shield to be tested in operation S203, which includes:

[0107] establishing the certificate binding relationship between the digital certificate and the U-shield to be tested;

[0108] activating the transaction use state of the U-shield to be tested in response to the certificate binding relationship.

[0109] As Figure 3 and Figure 4 As shown, after the U-shield digital certificate binding and injection module 360 ​​obtains the corresponding digital certificate, it can directly perform an injection operation on the digital certificate, establishing a binding relationship between the new digital certificate and the physical U-shield 370 to be tested, and activating it in response to this binding relationship, thus making the transaction applicable state of the physical U-shield 370 to be tested active, thereby completing the activation binding of the digital certificate and the U-shield to be tested. This certificate binding relationship is a link between the digital certificate and the physical U-shield 370. The injection record of the digital certificate into the physical U-shield medium can be directly recorded in the U-shield creation log recording module 330.

[0110] Therefore, the U-Shield digital certificate binding module 360 ​​establishes a certificate binding relationship between the digital certificate and the physical U-Shield by calling the device driver of the local physical U-Shield 370. This creates a link between them, enabling the invocation of the U-Shield binding management function in the preset U-Shield registration information management system. This allows the new digital certificate to be bound to the physical U-Shield 370, triggering an activation transaction for the U-Shield's usage status and activating its transaction usage state. This transaction usage state indicates that the physical U-Shield is in a state where business transaction testing can be performed.

[0111] like Figures 2-4 As shown in the embodiments of this disclosure, before establishing the certificate binding relationship between the digital certificate and the U-shield to be tested, the following steps are also included:

[0112] In response to the digital certificate, the original certificate binding relationship of the U-shield under test is removed.

[0113] like Figure 3 and Figure 4 As shown, further, during the process of injecting digital certificates, if the physical U-shield 370 involved has an already bound digital certificate, the U-shield digital certificate binding module 360 ​​needs to unbind the physical U-shield 370 and the already bound digital certificate. Then, based on the link relationship, the U-shield binding management function in the preset U-shield registration information management system is called to bind the new digital certificate to the physical U-shield 370 and trigger the activation transaction of the U-shield usage status, thus activating the transaction usage status of the physical U-shield.

[0114] like Figures 2-4 As shown in the embodiments of this disclosure, the test of the U-shield under test in operation S203 includes:

[0115] In response to the digital certificate injection operation, execute automated test scripts that match the business scenario to be tested.

[0116] like Figure 3 and Figure 4 As shown in FIG. 12, when the U-key calling instruction parsing module 320 receives the corresponding instruction of the binding activation between the physical U-key 370 and the digital certificate fed back by the U-key digital certificate binding filling module 360, the automated test execution terminal judges that the U-key to be tested has completed the preparation, and further executes the automated test script, so as to realize the business transaction test of the corresponding business scenario to be tested of the U-key to be tested.

[0117] Based on the method of the above embodiment of the present disclosure, as shown in FIG. 13, the execution machine 310 sends the U-key calling instruction to the U-key calling instruction parsing module 320. After the U-key calling instruction parsing module 320 receives the U-key calling instruction, it is judged whether there is a digital certificate of the U-key that meets the data extraction rule in the U-key calling instruction. If it meets, the U-key digital certificate and the physical U-key device are directly bound. If it does not meet, the data extraction rule is sent to the U-key test data extraction module 340. The U-key test data extraction module 340 obtains the target test data according to the data extraction request corresponding to the target test data, sends the target test data to the U-key digital certificate making module 350 for making the digital certificate, and finally the U-key digital certificate binding filling module 360 binds the obtained digital certificate and the physical U-key 370 device in the certificate binding relationship, and activates the certificate binding relationship so that the physical U-key 370 is in a transaction use state. Figure 3 and Figure 4 As shown in FIG. 13, the execution machine 310 sends the U-key calling instruction to the U-key calling instruction parsing module 320. After the U-key calling instruction parsing module 320 receives the U-key calling instruction, it is judged whether there is a digital certificate of the U-key that meets the data extraction rule in the U-key calling instruction. If it meets, the U-key digital certificate and the physical U-key device are directly bound. If it does not meet, the data extraction rule is sent to the U-key test data extraction module 340. The U-key test data extraction module 340 obtains the target test data according to the data extraction request corresponding to the target test data, sends the target test data to the U-key digital certificate making module 350 for making the digital certificate, and finally the U-key digital certificate binding filling module 360 binds the obtained digital certificate and the physical U-key 370 device in the certificate binding relationship, and activates the certificate binding relationship so that the physical U-key 370 is in a transaction use state.

[0118] Therefore, compared with the situation that each set of test data corresponds to one U-key in the U-key test process in the prior art, which causes a large number of U-key devices to be tested, low utilization rate and serious waste of resources, the digital certificate filling method of the above embodiment of the present disclosure can effectively use the reusable U-key in the process of testing using the U-key device, so that only one test U-key physical device is needed for an office test terminal to test the corresponding business scenario to be tested one by one, thereby greatly reducing the resource demand for the test physical U-key device in the test stage, and greatly improving the resource utilization rate of the test U-key.

[0119] Based on the above digital certificate filling method applied to the U-key test, the present disclosure further provides a digital certificate filling device applied to the U-key test. The device 500 will be described in detail below. Figure 5 The device 500 will be described in detail below.

[0120] Figure 5 The structure block diagram of the digital certificate filling device 500 applied to the U-key test according to the embodiment of the present disclosure is schematically shown.

[0121] As shown in FIG. 14, the device 500 applied to the U-key test comprises an execution machine 510, a U-key calling instruction parsing module 520, a U-key test data extraction module 540, a U-key digital certificate making module 550 and a U-key digital certificate binding filling module 560. Figure 5 As shown, the digital certificate filling device 500 applied to the U key test of the embodiment includes an instruction generation module 510, a certificate acquisition module 520 and a certificate filling module 530.

[0122] The instruction generation module 510 is configured to generate a U key calling instruction. In an embodiment, the instruction generation module 510 can be configured to perform the operation S201 described above, and details are not repeated here.

[0123] The certificate acquisition module 520 is configured to acquire a digital certificate matched with a business scenario to be tested according to the U key calling instruction. In an embodiment, the certificate acquisition module 520 can be configured to perform the operation S202 described above, and details are not repeated here.

[0124] The certificate filling module 530 is configured to fill the digital certificate into a U key to be tested, so as to realize the test of the U key to be tested. In an embodiment, the certificate filling module 530 can be configured to perform the operation S203 described above, and details are not repeated here.

[0125] According to embodiments of the present disclosure, any of the instruction generation module 510, the certificate acquisition module 520 and the certificate filling module 530 can be combined in one module for implementation, or any of the modules can be split into multiple modules. Alternatively, at least part of the function of one or more of the modules can be combined with at least part of the function of the other modules, and implemented in one module. According to embodiments of the present disclosure, at least one of the instruction generation module 510, the certificate acquisition module 520 and the certificate filling module 530 can be at least partially implemented as a hardware circuit, such as a field programmable gate array (FPGA), a programmable logic array (PLA), a system on chip, a system on substrate, a system on package, an application specific integrated circuit (ASIC), or any other reasonable manner of hardware or firmware that can be integrated or packaged, or implemented in any one of software, hardware and firmware or in a proper combination of any of them. Alternatively, at least one of the instruction generation module 510, the certificate acquisition module 520 and the certificate filling module 530 can be at least partially implemented as a computer program module that can perform corresponding functions when the computer program module is run.

[0126] Figure 6 The block diagram schematically shows an electronic device suitable for implementing the digital certificate filling method applied to the U key test according to embodiments of the present disclosure.

[0127] A third aspect of the present disclosure provides an electronic device, comprising: one or more processors; a memory for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors perform the above-mentioned method for digital certificate filling of a U key test.

[0128] As shown in Figure 6 The electronic device 600 according to embodiments of the present disclosure includes a processor 601, which can perform various appropriate actions and processes according to programs stored in a read-only memory (ROM) 602 or programs loaded into a random access memory (RAM) 603 from a storage section 608. The processor 601 may, for example, include a general-purpose microprocessor (e.g., a CPU), an instruction set processor, and / or a related chipset, and / or a dedicated microprocessor (e.g., an application specific integrated circuit (ASIC)), and / or the like. The processor 601 can also include an on-board memory for cache use. The processor 601 can include a single processing unit or multiple processing units for executing different actions of the method processes according to embodiments of the present disclosure.

[0129] In the RAM 603, various programs and data required for the operation of the electronic device 600 are stored. The processor 601, the ROM 602, and the RAM 603 are connected to each other via a bus 604. The processor 601 performs various operations of the method processes according to embodiments of the present disclosure by executing the programs in the ROM 602 and / or the RAM 603. Note that the programs can also be stored in one or more memories other than the ROM 602 and the RAM 603. The processor 601 can also perform various operations of the method processes according to embodiments of the present disclosure by executing the programs stored in the one or more memories.

[0130] According to embodiments of the present disclosure, the electronic device 600 can further include an input / output (I / O) interface 605, which is also connected to the bus 604. The electronic device 600 can further include one or more of the following components connected to the I / O interface 605: an input section 606 including a keyboard, a mouse, and the like; an output section 607 including a display such as a cathode ray tube (CRT), a liquid crystal display (LCD), and the like, and a speaker, and the like; a storage section 608 including a hard disk, and the like; and a communication section 609 including a network interface card such as a LAN card, a modem, and the like. The communication section 609 performs communication processing via a network such as the Internet. A drive 610 is also connected to the I / O interface 605 as necessary. A removable recording medium 611 such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, and the like is attached to the drive 610 as necessary, so that a computer program read therefrom is installed into the storage section 608 as necessary.

[0131] The present disclosure also provides a computer readable storage medium, having stored thereon executable instructions that, when executed by a processor, cause the processor to perform the above-mentioned method for digital certificate filling applied to U key testing.

[0132] The computer readable storage medium of the embodiments of the present disclosure can be included in the device / apparatus / system described in the above embodiments; or can exist separately and not be assembled into the device / apparatus / system. The above computer readable storage medium carries one or more programs, when the one or more programs are executed, the above-mentioned method according to the embodiments of the present disclosure is implemented.

[0133] According to the embodiments of the present disclosure, the computer readable storage medium can be a non-volatile computer readable storage medium, for example, can include but not limited to: portable computer diskette, hard disk, random access memory (RAM), read only memory (ROM), erasable programmable read only memory (EPROM or flash memory), portable compact disc read only memory (CD-ROM), optical storage device, magnetic storage device, or any appropriate combination of the foregoing. In the present disclosure, the computer readable storage medium can be any tangible medium containing or storing a program that can be used by or in connection with an instruction execution system, apparatus or device. For example, according to the embodiments of the present disclosure, the computer readable storage medium can include the ROM 602 and / or the RAM 603 described above and / or one or more memories other than the ROM 602 and the RAM 603.

[0134] The present disclosure also provides a computer program product, comprising a computer program which, when executed by a processor, implements the above-mentioned method for digital certificate filling applied to U key testing.

[0135] The computer program product of the embodiments of the present disclosure includes a computer program containing program codes for executing the methods shown in the flowcharts. When the computer program product is running in the computer system, the program codes are used to make the computer system implement the above-mentioned method provided by the embodiments of the present disclosure.

[0136] The above-mentioned functions defined in the system / apparatus of the embodiments of the present disclosure are executed when the computer program is executed by the processor 601. According to the embodiments of the present disclosure, the above-mentioned system, apparatus, module, unit, etc. can be implemented by computer program modules.

[0137] In one embodiment, the computer program can be tangibly embodied in a non-transitory computer readable medium, such as a tangible memory device, a magnetic or optical storage media, and the like. In another embodiment, the computer program can be tangibly embodied in a signal, such as a download signal over the Internet, or in an analog or digital broadcast channel. In either case, the computer program can be downloaded and installed by the communication portion 609 and / or installed from the removable media 611. The computer program can comprise program code, which when executed by the processor 601, carries out the systems defined in the embodiments of the present disclosure. The systems, devices, apparatus, modules, units, and the like described above can be implemented through computer program modules, according to the embodiments of the present disclosure.

[0138] In such an embodiment, the computer program can be downloaded and installed from the network through the communication portion 609 and / or installed from the removable media 611. When the computer program is executed by the processor 601, the above-described functions defined in the systems of the embodiments of the present disclosure are performed. According to the embodiments of the present disclosure, the systems, devices, apparatus, modules, units, and the like described above can be implemented through computer program modules.

[0139] According to the embodiments of the present disclosure, the program code for execution of the computer program provided by the embodiments of the present disclosure can be written in any combination of one or more programming languages, and specifically, the computer program can be implemented using a high-level procedural and / or object-oriented programming language, and / or an assembly / machine language. The programming language includes, but is not limited to, such as Java, C++, python, "C" language, or similar programming languages. The program code can be executed entirely on the user computing device, partially on the user device, partially on a remote computing device, or entirely on a remote computing device or server. In the case involving a remote computing device, the remote computing device can be connected to the user computing device through any kind of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computing device (for example, connected through the Internet using an Internet service provider).

[0140] The computer program product of the first aspect can include one or more non-transitory computer-readable media storing instructions that, when executed, cause one or more processors to perform the operations of the first aspect. The one or more non-transitory computer-readable media can include, for example, magnetic media such as one or more magnetic disks, magnetic tapes or cassettes; optical media such as one or more compact discs (CD), optical discs or discs (for example, DVD, Blu-ray Disc®, digital video disc, ultra density disc, ultra-compact disc, any optical media, etc.); semiconductor media such as solid state hard drives (for example, flash memory, solid state USB drives, etc.); any other suitable medium; or any suitable combination of media.

[0141] Those skilled in the art will understand that features of the various embodiments and / or claims of the present disclosure can be combined or / and integrated with one another, even though such a combination or integration is not expressly disclosed in the present disclosure. In particular, the features of the various embodiments and / or claims of the present disclosure can be combined and / or integrated with one another in any number of ways, without departing from the spirit and scope of the present disclosure. All such combinations and / or integrations are within the scope of the present disclosure.

[0142] The above describes embodiments of the present disclosure. However, these embodiments are merely for illustrative purposes, and are not intended to limit the scope of the present disclosure. Although each embodiment is described above separately, this does not mean that the measures in each embodiment cannot be used advantageously in combination. The scope of the present disclosure is defined by the appended claims and their equivalents. Those skilled in the art can make various substitutions and modifications without departing from the scope of the present disclosure, and all such substitutions and modifications shall fall within the scope of the present disclosure.< / config> < / config>

Claims

1. A method for digital certificate infusion applied to U-shield testing, wherein, The method comprises: generating a U key calling instruction; obtaining a digital certificate matched with a business scenario to be tested according to the U key calling instruction, the U key calling instruction being used to call the to-be-tested data required for generating the digital certificate; and filling the digital certificate into a to-be-tested U key and executing an automated test script matched with the to-be-tested business scenario; wherein, in the step of obtaining the digital certificate matched with the to-be-tested business scenario according to the U key calling instruction, the method comprises: analyzing the U key calling instruction to determine U key analysis information; determining the digital certificate according to the U key analysis information and a preset certificate extraction rule; wherein, in the step of obtaining the digital certificate matched with the to-be-tested business scenario according to the U key calling instruction, the method further comprises: generating a data extraction request in response to the U key analysis information; generating the digital certificate according to the data extraction request; wherein, the method further comprises: in the step of executing the automated test script matched with the to-be-tested business scenario, dynamically adjusting the certificate binding relationship of the to-be-tested U key according to the requirement of switching the to-be-tested business scenario, wherein, the step of dynamically adjusting the certificate binding relationship of the to-be-tested U key according to the requirement of switching the to-be-tested business scenario comprises: canceling the current certificate binding relationship of the to-be-tested U key, filling a new digital certificate into the to-be-tested U key, the new digital certificate being matched with another business scenario different from the to-be-tested business scenario.

2. The method of claim 1, wherein, In the step of generating the U key calling instruction, the method comprises: receiving a business test operation matched with the to-be-tested business scenario; generating the U key calling instruction in response to the business test operation.

3. The method of claim 1, wherein, In the step of generating the digital certificate according to the data extraction request, the method comprises: obtaining target test data according to the data extraction request; generating the digital certificate based on the target test data.

4. The method of claim 3, wherein, In the step of obtaining the target test data according to the data extraction request, the method comprises: extracting a corresponding data segment from a preset test data table according to the data extraction request; obtaining the target test data according to the data segment.

5. The method of claim 3, wherein, In the step of generating the digital certificate based on the target test data, the method comprises: generating the digital certificate according to the target test data and a preset certificate generation rule.

6. The method of claim 1, wherein, In the step of filling the digital certificate into the to-be-tested U key, the method comprises: establishing a certificate binding relationship between the digital certificate and the to-be-tested U key; activating a transaction use state of the to-be-tested U key in response to the certificate binding relationship.

7. The method of claim 6, wherein, Before the step of establishing the certificate binding relationship between the digital certificate and the to-be-tested U key, the method further comprises: canceling an original certificate binding relationship of the to-be-tested U key in response to the digital certificate.

8. A digital certificate filling device applied to U-shield test, wherein, The method comprises: an instruction generation module for generating a U key calling instruction; a certificate obtaining module for obtaining a digital certificate matched with a business scenario to be tested according to the U key calling instruction, the U key calling instruction being used to call the to-be-tested data required for generating the digital certificate; and a certificate filling module for filling the digital certificate into a to-be-tested U key and executing an automated test script matched with the to-be-tested business scenario; The certificate obtaining module is further configured to: parsing the U key calling instruction to determine U key parsing information; determining the digital certificate according to the U key parsing information and a preset certificate extraction rule; The certificate obtaining module is further configured to: generating a data extraction request in response to the U key parsing information; generating the digital certificate according to the data extraction request; The certificate filling module is further configured to: in the execution of the automatic test script matching the to-be-tested business scenario, dynamically adjusting the certificate binding relationship of the to-be-tested U key according to the requirement of switching the to-be-tested business scenario, The certificate filling module is further configured to: releasing the current certificate binding relationship of the to-be-tested U key, and filling a new digital certificate into the to-be-tested U key, the new digital certificate matching another business scenario different from the to-be-tested business scenario. 9.An electronic device, comprising: one or more processors; a storage device configured to store one or more programs, wherein the one or more programs, when executed by the one or more processors, enable the one or more processors to perform the method according to any one of claims 1-7. 10.A computer-readable storage medium having stored thereon executable instructions that, when executed by a processor, cause the processor to perform the method according to any one of claims 1-7.

Images