Verification method, device, electronic device and storage medium

Abstract

The present disclosure is about a verification method, device, electronic device and storage medium, which relates to the field of information security technology and at least solves the problem of low security existing in the related technology. The verification method includes: obtaining the credential information of the target resource transfer credential; wherein the target resource transfer credential is a resource transfer credential successfully accepted by the business server; determining the first resource transfer callback information of the target resource transfer credential, the first resource transfer callback information is configured with at least one parameter item to be verified; wherein the information content corresponding to the parameter item to be verified is different from the credential information; sending the first resource transfer callback information to the business server, and receiving the first callback result information; determining the first verification result based on the first callback result information, the first verification result is used to characterize whether the business server has performed data processing on at least one parameter item to be verified.

Description

Technical Field

[0001] The present disclosure relates to the field of information security technology, and in particular to a verification method, device, electronic device and storage medium. Background Art

[0002] After the user account completes the resource transfer on the application, the resource transfer server will inform the business server in the form of a resource transfer callback notification. After receiving the resource transfer callback notification, the business server needs to perform data processing on the callback information in the resource transfer callback notification to prevent malicious and false resource transfer callbacks. If the business server does not perform data processing on the resource transfer callback information, the security of the resource transfer will be low. However, in the related art, it is not clear whether the business server performs data processing on the resource transfer callback information, so the security is low. Summary of the invention

[0003] The present disclosure provides a verification method, device, electronic device and storage medium to at least solve the problem of low security in the related art. The technical solution of the present disclosure is as follows:

[0004] According to a first aspect of an embodiment of the present disclosure, a verification method is provided, including: obtaining credential information of a target resource transfer credential; the target resource transfer credential is a resource transfer credential successfully accepted by a business server; determining first resource transfer callback information of the target resource transfer credential; the first resource transfer callback information is configured with at least one parameter item to be verified, and the information content corresponding to the parameter item to be verified is different from the credential information; sending the first resource transfer callback information to the business server, and receiving first callback result information; the first callback result information is result information obtained by the business server based on the first resource transfer callback information; determining a first verification result based on the first callback result information; the first verification result is used to characterize whether the business server has performed verification processing on at least one parameter item to be verified in the first resource transfer callback information.

[0005] In a possible implementation, obtaining credential information of a target resource transfer credential includes: obtaining pre-set verification configuration information, the verification configuration information including at least a plurality of parameter items to be verified and a resource transfer credential identifier; and obtaining credential information of a target resource transfer credential corresponding to the resource transfer credential identifier.

[0006] In another possible implementation, determining the first verification result based on the first callback result information includes: when the first callback result information indicates that the verification is successful, determining that the first verification result is that the business server has not performed data processing on at least one parameter item to be verified; when the first callback result information indicates that the verification has failed, determining that the first verification result is that the business server has performed data processing on at least one parameter item to be verified.

[0007] In another possible implementation, when the first callback result information indicates that the verification is successful, the method further includes: sending an alarm message.

[0008] In another possible implementation, when the first callback result information indicates a verification failure, the method further includes: determining second resource transfer callback information of the target resource transfer credential, the second resource transfer callback information being configured with at least one parameter item to be verified; wherein the parameter item to be verified configured in the second resource transfer callback information is different from the parameter item to be verified configured in the first resource transfer callback information; sending the second resource transfer callback information to the business server, and receiving second callback result information; the second callback result information is result information obtained by the business server based on the second resource transfer callback information; determining a second verification result based on the second callback result information; the second verification result is used to indicate whether the business server has performed verification processing on at least one parameter item to be verified in the second resource transfer callback information.

[0009] In another possible implementation, the parameter item to be verified includes at least one of a signature parameter item, a false resource transfer credential parameter item, a false verification parameter item, a false user account parameter item, and a repeated callback parameter item.

[0010] In another possible implementation, when the parameter item to be verified includes a signature parameter item, determining the first resource transfer callback information of the target resource transfer credential includes: generating first signature information, the content of the first signature information is different from the signature information in the credential information; based on the first signature information, determining the first resource transfer callback information.

[0011] In another possible implementation, when the parameter item to be verified includes a false resource transfer credential parameter item, determining the first resource transfer callback information of the target resource transfer credential includes: generating first resource transfer information, the content of the first resource transfer information is different from the resource transfer information in the credential information; based on the first resource transfer information, determining the first resource transfer callback information.

[0012] In another possible implementation, when the parameter item to be verified includes a false verification parameter item, determining the first resource transfer callback information of the target resource transfer credential includes: generating false verification information of the target resource transfer credential based on the credential information; determining the first resource transfer callback information, the first resource transfer callback information including the false verification information.

[0013] In another possible implementation, when the parameter item to be verified includes a false user account parameter item, determining the first resource transfer callback information of the target resource transfer credential includes: generating first user account information, the content of the first user account information is different from the user account information in the credential information; based on the first user account information, determining the first resource transfer callback information.

[0014] In another possible implementation, when the parameter item to be verified includes a repeated callback parameter item, determining the first resource transfer callback information of the target resource transfer credential includes: configuring the number of callbacks for the first resource transfer callback information to be N times, where N is a positive integer greater than 1; sending the first resource transfer callback information to the business server includes: sending the first resource transfer callback information N times to the business server.

[0015] According to a second aspect of an embodiment of the present disclosure, a verification device is provided, including: an acquisition module, configured to execute acquisition of credential information of a target resource transfer credential; the target resource transfer credential is a resource transfer credential successfully accepted by a business server; a determination module, configured to execute determination of first resource transfer callback information of the target resource transfer credential, the first resource transfer callback information being configured with at least one parameter item to be verified, and the information content corresponding to the parameter item to be verified is different from the credential information; a sending module, configured to execute sending of the first resource transfer callback information to the business server, and receive first callback result information; the first callback result information is result information obtained by the business server based on the first resource transfer callback information; a verification module, configured to execute determination of a first verification result based on the first callback result information; the first verification result is used to characterize whether the business server has performed verification processing on at least one parameter item to be verified in the first resource transfer callback information.

[0016] In a possible implementation, the acquisition module is further configured to execute: acquiring preset verification configuration information, the verification configuration information including multiple parameter items to be verified and a resource transfer credential identifier; acquiring credential information of a target resource transfer credential corresponding to the resource transfer credential identifier.

[0017] In another possible implementation, the verification module is specifically configured to execute: when the first callback result information indicates that the verification is successful, determining that the first verification result is that the business server has not performed data processing on at least one parameter item to be verified; when the first callback result information indicates that the verification has failed, determining that the first verification result is that the business server has performed data processing on at least one parameter item to be verified.

[0018] In another possible implementation manner, when the first callback result information indicates that the verification is successful, the sending module is further configured to execute: sending an alarm message.

[0019] In another possible implementation, when the first callback result information indicates a verification failure, the determination module is further configured to execute: determining the second resource transfer callback information of the target resource transfer credential, the second resource transfer callback information being configured with at least one parameter item to be verified; wherein the parameter item to be verified configured in the second resource transfer callback information is different from the parameter item to be verified configured in the first resource transfer callback information; the sending module is further configured to execute: sending the second resource transfer callback information to the business server, and receiving second callback result information; the second callback result information is the result information obtained by the business server based on the second resource transfer callback information; the verification module is further configured to execute: determining a second verification result based on the second callback result information; the second verification result is used to indicate whether the business server has performed verification processing on at least one parameter item to be verified in the second resource transfer callback information.

[0020] In another possible implementation, the parameter item to be verified includes at least one of a signature parameter item, a false resource transfer credential parameter item, a false verification parameter item, a false user account parameter item, and a repeated callback parameter item.

[0021] In another possible implementation, when the parameter item to be verified includes a signature parameter item, the determination module is specifically configured to execute: generate first signature information, the content of the first signature information is different from the signature information in the credential information; based on the first signature information, determine the first resource transfer callback information.

[0022] In another possible implementation, when the parameter item to be verified includes a false resource transfer credential parameter item, the determination module is specifically configured to execute: generate first resource transfer information, the content of the first resource transfer information is different from the resource transfer information in the credential information; based on the first resource transfer information, determine the first resource transfer callback information.

[0023] In another possible implementation, when the parameter items to be verified include structured query language SQL injection parameter items, the determination module is specifically configured to execute: generating false verification information of the target resource transfer credential based on the credential information; determining the first resource transfer callback information, the first resource transfer callback information including the false verification information.

[0024] In another possible implementation, when the parameter items to be verified include false user account parameter items, the determination module is specifically configured to execute: generating first user account information, the content of the first user account information is different from the user account information in the credential information; and determining first resource transfer callback information based on the first user account information.

[0025] In another possible implementation, when the parameter item to be verified includes a repeated callback parameter item, the determination module is specifically configured to execute: configuring the number of callbacks for the first resource transfer callback information to be N times, where N is a positive integer greater than 1; the sending module is specifically configured to execute: sending the first resource transfer callback information N times to the business server.

[0026] According to a third aspect of an embodiment of the present disclosure, an electronic device is provided, comprising: a processor; a memory for storing processor executable instructions; wherein the processor is configured to execute instructions to implement the verification method of the above-mentioned first aspect and any possible implementation manner thereof.

[0027] According to a fourth aspect of an embodiment of the present disclosure, a computer-readable storage medium is provided. When instructions in the computer-readable storage medium are executed by a processor of an electronic device, the electronic device is enabled to execute the verification method in the above-mentioned first aspect and any possible implementation method thereof.

[0028] According to a fifth aspect of an embodiment of the present disclosure, a computer program product is provided. The computer program product includes computer instructions. When the computer instructions are executed on an electronic device, the electronic device executes the verification method of the first aspect and any possible implementation manner thereof.

[0029] The technical solution provided by the embodiments of the present disclosure brings at least the following beneficial effects: determining the first resource transfer callback information of the target resource transfer credential, and configuring at least one parameter item to be verified for the first resource transfer callback information, so that the first resource transfer callback information is configured with information content different from the credential information of the target resource transfer credential, that is, sending a resource transfer callback information configured with false information to the business server, so as to realize judging whether the business server has performed verification processing on at least one parameter item to be verified based on the first callback result information returned by the business server, and then judging whether the callback verification logic of the business server is reasonable, so as to timely adjust the callback verification logic of the business server when the callback verification logic of the business server is unreasonable, thereby improving the security of the business server and avoiding the defect of low security of the business server due to unreasonable callback verification logic.

[0030] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] The drawings herein are incorporated into and constitute a part of the specification, illustrate embodiments consistent with the present disclosure, and together with the description are used to explain the principles of the present disclosure, and do not constitute improper limitations on the present disclosure.

[0032] Figure 1is a flow chart of a verification method according to an exemplary embodiment;

[0033] Figure 2 is a flow chart showing another verification method according to an exemplary embodiment;

[0034] Figure 3 is a flow chart showing another verification method according to an exemplary embodiment;

[0035] Figure 4 is a flow chart showing another verification method according to an exemplary embodiment;

[0036] Figure 5 is a flow chart showing another verification method according to an exemplary embodiment;

[0037] Figure 6 is a flow chart showing another verification method according to an exemplary embodiment;

[0038] Figure 7 is an interactive schematic diagram of a verification method according to an exemplary embodiment;

[0039] Figure 8 is a block diagram of a verification device according to an exemplary embodiment;

[0040] Fig. 9 It is a block diagram of an electronic device according to an exemplary embodiment. DETAILED DESCRIPTION

[0041] In order to enable ordinary persons in the art to better understand the technical solutions of the present disclosure, the technical solutions in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the accompanying drawings.

[0042] It should be noted that the terms "first", "second", etc. in the specification and claims of the present disclosure and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present disclosure described herein can be implemented in an order other than those illustrated or described herein. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present disclosure. Instead, they are merely examples of devices and methods consistent with some aspects of the present disclosure as detailed in the appended claims.

[0043] Before introducing the verification method provided by the present disclosure in detail, a brief introduction is first given to the application scenarios and implementation environment involved in the present disclosure.

[0044] First, the application scenarios involved in the present disclosure are briefly introduced.

[0045] After the user account purchases a product on the application, the business server will first deduct the product inventory and then call the resource transfer server to initiate the order. Furthermore, the user account initiates a resource transfer request through the resource transfer server. After the user account completes the resource transfer, the resource transfer server will inform the business server in the form of a resource transfer callback notification. After receiving the resource transfer callback notification, the business server will accept the request and perform subsequent process operations, such as issuing products to the user account.

[0046] Furthermore, in order to ensure the security of funds and prevent malicious and false resource transfer callbacks, after receiving the resource transfer callback notification, the business server needs to perform data processing on the resource transfer callback information in the resource transfer callback notification, for example, perform information matching verification on the resource transfer callback information, and perform signature verification on the signature information in the resource transfer callback notification. At the same time, since the resource transfer callback is performed in the form of http, in order to prevent duplicate resource issuance caused by network jitter, etc., the business server needs to perform idempotent processing on the resource transfer callback information. Once the business server does not perform data processing on the resource transfer callback information, the security of resource transfer will be reduced. However, in the related art, the resource transfer server is not clear whether the business server has performed data processing on the resource transfer callback information, so the security of resource transfer is low.

[0047] In response to the above problems, the present disclosure provides a verification method, which determines the first resource transfer callback information of the target resource transfer credential, and configures at least one parameter item to be verified for the first resource transfer callback information, so that the first resource transfer callback information is configured with information content different from the credential information of the target resource transfer credential, that is, a resource transfer callback information configured with false information is sent to a business server, so as to determine whether the business server has performed data processing on at least one parameter item to be verified based on the first callback result information returned by the business server, and then determine whether the callback verification logic of the business server is reasonable, so that when the callback verification logic of the business server is unreasonable, the callback verification logic of the business server can be adjusted in time to improve the security of the business server and reduce the problem of low security of resource transfer caused by unreasonable callback verification logic of the business server.

[0048] Next, the implementation environment (implementation architecture) involved in the present disclosure is briefly introduced below.

[0049] The verification method provided in the embodiments of the present disclosure can be applied to electronic devices. The electronic device can be a terminal device or a server. The terminal device can be a smart phone, a tablet computer, a PDA, a vehicle terminal, a desktop computer, a laptop computer, etc. The server can be any server or server cluster, which is not limited in the present disclosure.

[0050] In addition, it should be noted that the user information involved in this disclosure (including but not limited to the credential information of the resource transfer credential, user personal information, etc.) is all information authorized by the user or fully authorized by all parties.

[0051] For ease of understanding, the verification method provided by the present disclosure is specifically introduced below with reference to the accompanying drawings.

[0052] Figure 1 FIG. 1 is a flow chart of a verification method according to an exemplary embodiment, which is used in an electronic device. Figure 1 As shown, the verification method includes the following S101-S104.

[0053] In S101, the credential information of the target resource transfer credential is obtained.

[0054] The target resource transfer certificate is a resource transfer certificate successfully accepted by the business server.

[0055] In one implementation, after a user account purchases a commodity on an application and completes resource transfer, the resource transfer server sends a target resource transfer callback message of the target resource transfer credential of the user account completing resource transfer to the business server, so as to notify the business server of the resource transfer result of the user account. After receiving the target resource transfer callback message, the business server returns a callback success message of the target resource transfer callback message to the resource transfer server, and the callback success message is used to indicate that the business server has successfully accepted the target callback message, and will subsequently issue the purchased commodity to the target user account.

[0056] Optionally, the credential information of the target resource transfer credential includes at least one of user account information, resource transfer information, target resource transfer callback information, business party information, and signature information.

[0057] In one embodiment, the user account information includes a user account identifier and user address information. The resource transfer information includes a resource transfer voucher identifier, a resource transfer amount, resource transfer account information, and commodity information. The target resource transfer callback information includes a callback identifier. The business party information includes a business party identifier.

[0058] In a possible implementation, obtaining credential information of a target resource transfer credential includes: obtaining pre-set verification configuration information; the verification configuration information includes at least a plurality of parameter items to be verified and a resource transfer credential identifier; and obtaining credential information of a target resource transfer credential corresponding to the resource transfer credential identifier.

[0059] In one embodiment, when the callback success information of the target resource transfer callback information is received, it indicates that the business server has successfully accepted the target resource transfer callback information. However, the electronic device does not know whether the business server has performed verification processing on the target resource transfer callback information, that is, whether the information content of the target resource transfer callback information has been verified, for example, whether the signature information in the target resource transfer callback information has been verified, whether idempotent processing has been performed on repeated callbacks, etc. Therefore, the electronic device starts the test environment and calls the resource transfer callback verification service to verify whether the business server has performed verification processing on the target resource transfer callback information.

[0060] Optionally, after the target resource transfer credential receives the callback success information of the first resource transfer callback information, the configuration server obtains the verification configuration information. For example, the verification configuration information can be manually set and then input into the configuration server. Further, after the electronic device starts the test environment, that is, after calling the resource transfer callback verification service, the preset verification configuration information is obtained from the configuration server.

[0061] In one embodiment, after the electronic device calls the resource transfer callback verification service, it obtains the verification configuration information. The verification configuration information is the verification configuration information of the preset target resource transfer credential, which at least includes a plurality of parameter items to be verified and a resource transfer credential identifier. Since the verification configuration information is the verification configuration information of the preset target resource transfer credential, the resource transfer credential identifier in the verification configuration information is the identifier of the target resource transfer credential. After obtaining the configuration information, the electronic device obtains the credential information of the target resource transfer credential corresponding to the resource transfer credential identifier.

[0062] Optionally, the parameter items to be verified include at least one of a signature parameter item, a false resource transfer credential parameter item, a repeated callback parameter item, a false verification parameter item, and a false user account parameter item. By configuring at least one of the multiple parameter items to be verified for the first resource transfer callback information, it is possible to verify whether the business server has verified at least one of the signature information, resource transfer credential information, false verification information, user account information, and repeated callback information. When the business server fails to verify the aforementioned information, the callback verification logic of the business server is adjusted in time to avoid the business server omitting the verification of important data and causing economic losses. Furthermore, when multiple parameter items to be verified are configured for the first resource transfer callback information, the verification efficiency of the business server can be improved.

[0063] It can be understood that the parameter item to be verified refers to whether the service server to be verified has verified the parameter item to be verified. For example, when the parameter item to be verified includes a false resource transfer credential parameter item, the first resource transfer callback information is used to verify whether the service server has verified the false resource transfer credential parameter item on the first resource transfer callback information.

[0064] In the above embodiment, by obtaining verification configuration information, pre-set parameter items to be verified are obtained, so that the resource transfer callback processing logic of the business server can be verified according to the parameter items to be verified, and the business server can be verified in a targeted manner, thereby improving the accuracy and rationality of the verification method.

[0065] In S102, first resource transfer callback information of the target resource transfer credential is determined;

[0066] The first resource transfer callback information is configured with at least one parameter item to be verified, and the information content corresponding to the parameter item to be verified is different from the credential information. That is, the information content corresponding to the parameter item to be verified in the first resource transfer callback information is different from the real information content of the target resource transfer credential, or in other words, the information content corresponding to the parameter item to be verified in the first resource transfer callback information is false content.

[0067] Optionally, the first resource transfer callback information is configured with one or more of signature information, resource transfer information, false verification information, user account information and callback number information.

[0068] Optionally, the verification method further includes: configuring a correspondence between parameter items and information. The electronic device determines the information content corresponding to the parameter item to be verified according to the pre-configured correspondence between the parameter item and the information. For example, the signature parameter item corresponds to the signature information, the false resource transfer credential parameter item corresponds to the resource transfer information, the repeated callback parameter item corresponds to the callback number information, the false verification parameter item corresponds to the false verification information, and the false user account parameter item corresponds to the user account information.

[0069] In one implementation, the correspondence between the parameter item and the information includes the correspondence between the parameter item identifier and the information identifier. For example, the signature parameter item identifier corresponds to the signature information identifier one by one.

[0070] In one embodiment, the electronic device determines the following information based on the correspondence between pre-configured parameter items and information: the information content corresponding to the signature parameter item is the content of the signature information, the information content corresponding to the false resource transfer credential parameter is the content of the resource transfer information, the information content corresponding to the repeated callback parameter item is the content of the callback times information, the information content corresponding to the false verification parameter item is the content of the false verification information in the resource transfer callback information, and the information content corresponding to the false user account parameter item is the content of the user account information.

[0071] By configuring the parameters to be verified for the first resource transfer callback information, the first resource transfer callback information can verify whether the service server performs verification on the parameter items to be verified.

[0072] Optionally, after acquiring the credential information of the target resource transfer credential, the electronic device constructs false resource transfer callback information to obtain the first resource transfer callback information.

[0073] In one implementation, the electronic device changes the information content of the target information in the credential information, such as changing the information content of the signature information in the credential information, obtaining the target signature information, and generating the first resource transfer callback information based on the target signature information. It can be seen that the content of the target signature information in the first resource transfer callback information is different from the signature information in the credential information. At this time, the parameter item to be verified configured in the first resource transfer callback information is a signature parameter item, and the information content corresponding to the signature parameter item (i.e., the content of the target signature information) is different from the signature information in the credential information.

[0074] In another embodiment, after obtaining the credential information of the target resource transfer credential, the parameter items to be verified to be executed are determined. For example, the parameter items to be verified to be executed can be determined according to the verification configuration information, or the parameter items to be verified to be executed can be determined according to the preset parameter items to be verified. After determining the parameter items to be verified, for example, it is determined that the parameter items to be verified include false resource transfer credential parameter items, the information content corresponding to the parameter items to be verified in the credential information is obtained, that is, the content of the resource transfer information corresponding to the false resource transfer credential parameter item, and the content of the resource transfer information in the credential information is changed to obtain the target resource transfer information. After obtaining the target resource transfer information, the electronic device generates a first resource transfer callback information according to the target resource transfer information. It can be seen that the content of the target resource transfer information in the first resource transfer callback information is different from the resource transfer information in the credential information.

[0075] It should be noted that the changes in the above implementation include modifying the content of information and deleting the content of information.

[0076] In S103, first resource transfer callback information is sent to the service server, and first callback result information is received.

[0077] The first callback result information is result information obtained by the service server based on the first resource transfer callback information.

[0078] Optionally, the verification configuration information also includes a service identifier.

[0079] In one implementation, the electronic device sends first resource transfer callback information to a service server corresponding to the service identifier, and receives first callback result information returned by the service server in response to the first resource transfer callback information.

[0080] By sending the first resource transfer callback information configured with the parameter items to be verified to the business server, it is verified whether the business server performs verification processing on the parameter items to be verified configured by the first resource transfer callback information. Further, the business server performs verification processing on the parameter items to be verified configured by the first resource transfer callback information, including: the business server performs verification on the information content corresponding to the parameter items to be verified. For example, the first resource transfer callback information configured with the false user account parameter items is sent to the business server to verify whether the business server performs verification on the false user account parameter items. Specifically, the business server performs verification on the false user account parameter items, including: the business server performs verification on the information content corresponding to the false user account parameter items (i.e., the content of the user account information).

[0081] In S104, a first verification result is determined based on the first callback result information, where the first verification result is used to indicate whether the service server has performed verification processing on at least one parameter item to be verified in the first resource transfer callback information.

[0082] Optionally, after receiving the first callback result information, the electronic device determines the first verification result according to the content represented by the first callback result information. Specifically, when the first callback result information represents successful verification, the first verification result is determined to be that the business server has not performed verification processing on at least one parameter item to be verified, that is, the business server has not passed the verification; when the callback result information represents a verification failure, the first verification result is determined to be that the business server has performed verification processing on at least one parameter item to be verified, that is, the business server has passed the verification.

[0083] In one embodiment, the first resource transfer callback information is configured with at least one parameter item to be verified. When the first callback result information indicates successful verification, it means that the business server has not verified that the information content corresponding to at least one parameter item to be verified is different from the credential information of the target resource transfer credential, that is, it has not been verified that the information content corresponding to at least one parameter item to be verified is false information. Therefore, it is determined that there is a problem with the business implementation logic (that is, the callback verification logic) of the business server for the resource transfer callback information, that is, the business server has failed the verification.

[0084] In one embodiment, the first resource transfer callback information is configured with at least one parameter item to be verified. When the first callback result information indicates a verification failure, it means that the business server has verified that the information content corresponding to at least one parameter item to be verified is different from the credential information of the target resource transfer credential, that is, it is verified that the information content corresponding to at least one parameter item to be verified is false information. Therefore, it is determined that there is no problem with the business implementation logic (that is, callback verification logic) of the business server for the resource transfer callback information, that is, the business server has passed the verification.

[0085] In the above embodiment, the content represented by the first callback result information is used to determine whether the business server has performed verification processing on the parameter items to be verified configured in the first resource transfer callback information, thereby determining whether the processing logic of the business server for the resource transfer callback is reasonable, and then obtaining the verification result of the business server callback verification logic.

[0086] In a possible implementation manner, when the first callback result information indicates that the verification is successful, the verification method further includes: sending an alarm message.

[0087] Optionally, when the first callback result information indicates successful verification, that is, the business server does not perform data processing on at least one parameter item to be verified configured in the first resource transfer callback information, the electronic device sends an alarm message to the target device for the target device to display the alarm message.

[0088] In the above embodiment, when the first callback result information indicates that the verification is successful, an alarm message is sent to remind the business server that it has not performed data processing on at least one parameter item to be verified, so that it can be discovered and processed in time.

[0089] In the above embodiment, by determining the first resource transfer callback information of the target resource transfer credential and configuring at least one parameter item to be verified for the first resource transfer callback information, the first resource transfer callback information is configured with information content different from the credential information of the target resource transfer credential, that is, a resource transfer callback information configured with false information is sent to the business server, so as to determine whether the business server has performed verification processing on at least one parameter item to be verified based on the first callback result information returned by the business server, and then determine whether the callback verification logic of the business server is reasonable, so that when the callback verification logic of the business server is unreasonable, the callback verification logic of the business server can be adjusted in time to improve the security of the business server.

[0090] In one possible implementation, combining Figure 1 ,like Figure 2 As shown, in the case where the callback result information indicates that the verification has failed, the verification method further includes: S105-S107.

[0091] In S105, second resource transfer callback information of the target resource transfer credential is determined, and the second resource transfer callback information is configured with at least one parameter item to be verified.

[0092] The parameter item to be verified configured in the second resource transfer callback information is different from the parameter item to be verified configured in the first resource transfer callback information.

[0093] In one embodiment, the parameter items to be verified configured in the second resource transfer callback information are different from the parameter items to be verified configured in the first resource transfer callback information, including: the number of parameter items to be verified is different. For example, the first resource transfer callback information is configured with three parameter items to be verified, and the second resource transfer callback information is configured with two parameter items to be verified.

[0094] In another embodiment, the parameter item to be verified configured in the second resource transfer callback information is different from the parameter item to be verified configured in the first resource transfer callback information, including: the identifier of the parameter item to be verified is different. For example, the first resource transfer callback information is configured with a signature parameter item, and the second resource transfer callback information is configured with a false resource transfer credential parameter item.

[0095] In another implementation, the parameter items to be verified configured in the second resource transfer callback information are different from the parameter items to be verified configured in the first resource transfer callback information, including: the number of parameter items to be verified is different, and the identifiers of the parameter items to be verified are different.

[0096] In S106, second resource transfer callback information is sent to the service server, and second callback result information is received.

[0097] The second callback result information is the result information obtained by the business server based on the second resource transfer callback information.

[0098] Optionally, the electronic device sends the second resource transfer callback information to the service server to verify whether the service server performs verification on the parameters to be verified configured in the second resource transfer callback information, thereby more comprehensively verifying whether the callback verification logic of the service server is reasonable.

[0099] In S107 , a second verification result is determined based on the second callback result information.

[0100] The second verification result is used to indicate whether the service server has performed verification processing on at least one parameter item to be verified in the second resource transfer callback information.

[0101] Optionally, a principle for the electronic device to determine the second verification result based on the second callback result information is the same as a principle for the electronic device to determine the first verification result based on the first callback result information, and is not described in detail herein.

[0102] In the above embodiment, when the callback result information indicates a verification failure, that is, the callback verification logic of the business server for the first resource transfer callback information is reasonable, the electronic device sends a second resource transfer callback information, and configures a parameter item to be verified for the second resource transfer callback information that is different from the parameter item to be verified for the first resource transfer callback information, thereby continuing to verify whether the business server has performed verification processing on other parameter items to be verified, and further accurately verifies the callback verification logic of the business server.

[0103] In another possible implementation, when the parameter item to be verified includes a signature parameter item, Figure 1 ,like Figure 3 As shown, S102 includes: S102a-S102b.

[0104] In S102a, first signature information is generated, and the content of the first signature information is different from the signature information in the credential information.

[0105] Optionally, when the parameter item to be verified includes a signature parameter item, the first resource transfer callback information is configured with first signature information.

[0106] Optionally, according to the correspondence between pre-configured parameter items and information, when the parameter items to be verified include signature parameter items, the information content corresponding to the parameter items to be verified includes the content of the signature information, that is, the content of the signature information configured in the first resource transfer callback information is different from the signature information in the credential information.

[0107] Optionally, the electronic device changes the content of the signature information in the credential information to generate the first signature information. Since the signature information in the credential information is real signature information, the first signature information generated by changing the content of the real signature information is false signature information different from the content of the real signature information.

[0108] In one implementation, the electronic device changes the content of the signature information in the credential information by modifying a portion of the signature information in the credential information to generate the first signature information.

[0109] In another implementation, the electronic device changes the content of the signature information in the credential information by modifying the content of the signature information in the target credential information to empty information to generate the first signature information, that is, the content of the first signature information is empty information.

[0110] It can be understood that the content of the first signature information is empty information, that is, the first resource transfer callback information is not configured with signature information.

[0111] In S102b, first resource transfer callback information is determined based on the first signature information.

[0112] Optionally, the electronic device determines the first resource transfer callback information based on the first signature information, so that the first resource transfer callback information is configured with the first signature information.

[0113] It should be noted that the first resource transfer callback information is only configured with one signature information, namely, the first signature information, which does not include other signature information that is the same as the signature information in the credential information.

[0114] In the above embodiment, by configuring the first resource transfer callback information with a parameter item to be verified including a signature parameter item, it is possible to verify whether the business server has performed verification on the signature parameter item. Therefore, when the business server has not performed verification on the signature parameter item, the callback verification logic of the business server is adjusted in time to ensure that the business server can perform verification on the signature information corresponding to the signature parameter item, thereby preventing malicious and false resource transfer callbacks and improving the security of funds.

[0115] In another possible implementation manner, when the parameter item to be verified includes a false resource transfer credential parameter item, Figure 1 ,like Figure 4 As shown, S102 includes: S102c-S102d.

[0116] In S102c, first resource transfer information is generated, and the content of the first resource transfer information is different from the resource transfer information in the credential information.

[0117] The first resource transfer information includes at least one or more of a resource transfer voucher identifier, a resource transfer amount, and a user account identifier.

[0118] Optionally, when the parameter item to be verified includes a false resource transfer credential parameter item, the first resource transfer callback information is configured with the first resource transfer information.

[0119] Optionally, according to the correspondence between pre-configured parameter items and information, when the parameter item to be verified includes a false resource transfer credential parameter item, the information content corresponding to the parameter item to be verified includes the content of the resource transfer information, that is, the content of the resource transfer information configured by the first resource transfer callback information is different from the resource transfer information in the credential information.

[0120] Optionally, the electronic device changes the content of the resource transfer information in the credential information to generate the first resource transfer information. Since the resource transfer information in the credential information is real resource transfer information, the first resource transfer information generated by changing the content of the resource transfer information is false resource transfer information different from the real resource transfer information.

[0121] In one embodiment, the electronic device changes the content of the resource transfer information in the credential information, which may be to modify part of the resource transfer information in the credential information, for example, to modify at least one of the resource transfer credential identifier, the resource transfer credential amount, or the user account identifier information in the resource transfer information to generate the first resource transfer information.

[0122] In another embodiment, the electronic device changes the content of the resource transfer information in the credential information, which may be to modify the content of the resource transfer information in the credential information to empty information, for example, modifying the resource transfer credential identifier, resource transfer amount or user account identifier information in the resource transfer information to empty information to generate first resource transfer information, that is, the content of the resource transfer credential identifier, resource transfer amount or user account identifier information in the first resource transfer information is empty information.

[0123] In S102d, first resource transfer callback information is determined based on the first resource transfer information.

[0124] Optionally, the electronic device determines the first resource transfer callback information based on the first resource transfer information, so that the first resource transfer callback information is configured with the first resource transfer information.

[0125] In the above embodiment, by configuring the first resource transfer callback information with a parameter item to be verified including a false resource transfer credential parameter item, it is realized to verify whether the business server has performed verification on the false resource transfer credential parameter item. Therefore, when the business server does not perform verification on the false resource transfer credential parameter item, the callback verification logic of the business server is adjusted in time to ensure that the business server can perform verification on the resource transfer information corresponding to the false resource transfer credential parameter item, to prevent the user account from actually not performing a resource transfer, but performing a malicious callback through forged data. The business server does not perform verification on the resource transfer information, causing the business server to mistakenly believe that the user account has successfully transferred the resources, and ship goods to the user, causing financial losses.

[0126] In another possible implementation manner, when the parameter item to be verified includes a false verification parameter item, Figure 1 ,like Figure 5 As shown, S102 includes: S102e-S102f.

[0127] In S102e, false verification information of the target resource transfer credential is generated according to the credential information.

[0128] The false verification information includes a structured query language SQL statement. By including the structured query language SQL statement in the false verification information, SQL injection of the first resource transfer callback information is achieved, and then it is determined whether the business server performs SQL injection verification on the first resource transfer callback information.

[0129] Optionally, when the parameter item to be verified includes a false verification parameter item, the first resource transfer callback information is configured with false verification information.

[0130] In one embodiment, according to the pre-configured correspondence between parameter items and information, when the parameter items to be verified include false verification parameter items, the information content corresponding to the parameter items to be verified includes the content of false verification information. Since the target resource transfer voucher is a real resource transfer voucher, the historical resource transfer callback information in the voucher information does not include false verification information, while the first resource transfer callback information is configured with false verification information. Therefore, the false verification information content corresponding to the false verification parameter item is different from the content of the historical resource transfer callback information in the voucher information.

[0131] Optionally, the electronic device generates false verification information of the target resource transfer voucher according to the resource transfer amount in the voucher information and / or the historical resource transfer callback identifier of the target resource transfer voucher.

[0132] In S102f, first resource transfer callback information is determined, where the first resource transfer callback information includes false verification information.

[0133] Optionally, the electronic device determines that the first resource transfer callback information includes false verification information to verify whether the service server verifies the false verification parameter item.

[0134] In the above embodiment, by configuring the first resource transfer callback information with a parameter item to be verified including a false verification parameter item, it is realized to verify whether the business server has performed verification on the false verification parameter item. Therefore, when the business server has not performed verification on the false verification parameter item, the callback verification logic of the business server is adjusted in time to ensure that the business server can perform verification on the false verification information corresponding to the false verification parameter item, thereby preventing malicious and false resource transfer callbacks and improving the security of funds.

[0135] In another possible implementation manner, when the parameter item to be verified includes a false user account parameter item, Figure 1 ,like Figure 6 As shown, S102 includes: S102g-S102h.

[0136] In S102g, first user account information is generated, and the content of the first user account information is different from the user account information in the credential information.

[0137] Optionally, in a case where the parameter item to be verified includes a false user account parameter item, the first resource transfer callback information is configured with the first user account information.

[0138] Optionally, according to the correspondence between pre-configured parameter items and information, when the parameter items to be verified include false user account parameter items, the information content corresponding to the parameter items to be verified includes the content of user account information, that is, the content of the user account information configured in the first resource transfer callback information is different from the user account information in the credential information.

[0139] Optionally, the electronic device changes the content of the user account information in the credential information to generate the first user account information. Since the user account information in the credential information is real user account information, the first user account information generated by changing the content of the user account information is false user account information different from the real user account information.

[0140] In one implementation, the electronic device changes the content of the user account information in the credential information by modifying part of the user account information in the credential information, for example, modifying the user account identifier, user address information, etc. in the user account information to generate the first user account information.

[0141] In S102h, first resource transfer callback information is determined based on the first user account information.

[0142] Optionally, the electronic device determines the first resource transfer callback information based on the first user account information, so that the first resource transfer callback information is configured with the first user account information.

[0143] In the above embodiment, by configuring the first resource transfer callback information with a parameter item to be verified including a false user account parameter item, it is realized to verify whether the business server has performed verification on the false user account parameter item. Therefore, when the business server has not performed verification on the false user account parameter item, the callback verification logic of the business server is adjusted in time to ensure that the business server can perform verification on the user account information corresponding to the false user account parameter item, so as to avoid using wrong user account information for resource transfer callback, and the business server does not perform verification on the user account information corresponding to the false user account parameter item before shipping, resulting in the goods being shipped to the wrong user account, causing economic losses.

[0144] In another possible implementation, when the parameter item to be verified includes a repeated callback parameter item, S102 includes: step one, and S103 includes: step two.

[0145] In step 1, the callback number of the first resource transfer callback information is configured to be N times, where N is a positive integer greater than 1.

[0146] Optionally, when the parameter item to be verified includes a repeated callback parameter item, the number of callbacks configured by the first resource transfer callback information is N times.

[0147] Optionally, according to the correspondence between the pre-configured parameter items and the information, when the parameter items to be verified include repeated callback parameter items, the information content corresponding to the parameter items to be verified includes content with a callback count of N times, that is, the content of the callback count information configured in the first resource transfer callback information is different from the callback count information in the voucher information. Since the target resource transfer voucher is a real resource transfer voucher and the number of target resource transfer vouchers is 1, the target resource transfer voucher performs a resource transfer callback information with a single callback count. Therefore, the content of the callback count information corresponding to the parameter items to be verified is different from the callback count of the historical resource transfer callback information in the voucher information.

[0148] In step 2, first resource transfer callback information is sent to the service server N times.

[0149] Optionally, the electronic device sends N first resource transfer callback information to the service server to verify whether the service server has performed verification processing on the repeated callback parameter items, for example, performing idempotent processing.

[0150] In one embodiment, after sending the second resource transfer callback information N times to the business server, the number of first callback result information received is greater than or equal to 2, that is, the business server successfully accepts at least two first resource transfer callback messages, and this indicates that the business server did not perform verification on the repeated callback parameter items, for example, did not perform idempotent processing on the resource transfer callback information. At this time, the business server needs to perform at least 2 delivery operations for the target resource transfer voucher, resulting in duplicate delivery.

[0151] In the above embodiment, by configuring the first resource transfer callback information with a parameter item to be verified including a repeated callback parameter item, it is realized to verify whether the business server has performed verification on the repeated callback parameter item. Therefore, when the business server has not performed verification on the repeated callback parameter item, the callback verification logic of the business server is adjusted in time to ensure that the business server can perform verification on the signature information corresponding to the repeated callback parameter item, so as to avoid repeated sending of resource transfer callback information due to network jitter and the like when performing resource transfer callback in http form, causing the business server to repeatedly issue resources and cause economic losses.

[0152] In a specific implementation, the process of generating the target resource transfer certificate is as follows: Figure 7 The specific steps include:

[0153] Step 1: The terminal device sends a purchase request to the service server.

[0154] In one implementation, the user account sends a purchase request to the service server via a terminal device, for example, by clicking a "buy" control on a display screen of the terminal device.

[0155] Step 2: The business server receives the purchase request and sends an order request to the resource transfer server.

[0156] In one implementation, after receiving the purchase request sent by the user account through the terminal device, the business server sends an order request to the resource transfer server to obtain resource transfer information.

[0157] Step 3: The resource transfer server receives the order request and sends resource transfer information to the business server.

[0158] In one implementation, after receiving the order request from the business server, the resource transfer server returns resource transfer information to the business server, where the resource transfer information at least includes a resource transfer credential identifier and order success information.

[0159] Step 4: The business server receives the resource transfer information and sends the resource transfer credential identifier to the terminal device.

[0160] In one implementation, after receiving the resource transfer information sent by the resource transfer server, the service server sends the resource transfer credential identifier in the resource transfer information to the terminal device, so that the terminal device can perform resource transfer.

[0161] Step 5: The terminal device receives the resource transfer credential identifier and sends a resource transfer request to the resource transfer server.

[0162] In one implementation, the terminal device receives the resource transfer credential identifier sent by the service server, and sends a resource transfer request to the resource transfer server based on the resource transfer credential identifier to transfer resources for the commodity in the purchase request.

[0163] Step 6: The resource transfer server receives the resource transfer request and sends a resource transfer message to the terminal device.

[0164] In one implementation, after receiving the resource transfer request sent by the terminal device, the resource transfer server generates a resource transfer message based on the resource transfer request and returns the resource transfer message to the terminal device.

[0165] Step 7: The terminal device receives the resource transfer message and performs resource transfer based on the resource transfer message.

[0166] In one implementation, after receiving the resource transfer message sent by the resource transfer server, the terminal device starts a resource transfer service provider based on the resource transfer message to perform resource transfer.

[0167] Step 8: The terminal device receives the resource transfer success information.

[0168] In one implementation, after the terminal device completes the resource transfer, the resource transfer service provider sends resource transfer success information to the terminal device via the service provider server.

[0169] It should be noted that the above steps 1 to 8 are the actual process of purchasing goods by the user account, and the information involved is all real information, such as resource transfer information, user account information, etc.

[0170] Furthermore, after the terminal device completes the payment, the process of the user account purchasing the product ends and enters the resource transfer callback process, such as Figure 7 As shown, the specific steps include:

[0171] Step 1: The resource transfer server receives third resource transfer callback information.

[0172] In one implementation, the resource transfer service provider sends third resource transfer callback information to the resource transfer server through the server, wherein the third resource transfer callback information may be asynchronous resource transfer callback information to notify the resource transfer server that the user account has completed resource transfer.

[0173] Step 2: The resource transfer server sends fourth resource transfer callback information to the business server.

[0174] In one implementation, after determining that the user account has completed the resource transfer, the resource transfer server sends fourth resource transfer callback information to the business server to notify the business server that the user account has completed the resource transfer and the delivery process can be carried out.

[0175] Step 3: The service server receives the fourth resource transfer callback information and performs verification processing on the fourth resource transfer callback information.

[0176] In one embodiment, the verification process at least includes verifying the signature information, resource transfer information, false verification information, and user account information in the fourth resource transfer callback information, and performing idempotent processing on the fourth resource transfer callback information to prevent repeated requests due to network jitter.

[0177] Step 4: When the callback is successful, the business server updates the resource transfer result of the purchase request.

[0178] In one embodiment, when the business server verifies the signature information, resource transfer information, false verification information, and user account information, all verifications are successful, indicating that the resource transfer is authentic and valid. The business server updates the resource transfer result of the purchase request to a successful resource transfer and delivers the goods to the user account.

[0179] Furthermore, in order to verify whether the business server verifies the signature information, resource transfer information, false verification information, user account information, and whether the fourth resource transfer callback information is idempotently processed, the electronic device starts the resource transfer callback verification service in the test environment to verify the business server, such as Figure 7 As shown, the specific steps include:

[0180] Step 1: The electronic device sends a configuration acquisition request to request verification configuration information.

[0181] In one embodiment, the configuration server pre-stores verification configuration information for the target resource transfer credential. For example, the verification configuration information may be manually input into the configuration server, or the verification configuration information may be automatically generated by the configuration server based on the credential information of the target resource transfer credential.

[0182] Step 2: The electronic device receives pre-set verification configuration information.

[0183] The verification configuration information at least includes the parameter item to be verified and the resource transfer credential identifier.

[0184] In one implementation, the electronic device receives verification configuration information sent by the configuration server to determine which parameter items need to be verified for the service area. For example, the format of the configuration information is as follows:

[0185]

[0186] Step 3: The electronic device sends a credential acquisition request to the resource transfer server to request the credential information of the target resource transfer credential.

[0187] In one implementation, after receiving the verification configuration information, the electronic device sends a credential acquisition request to the resource transfer server, requesting to acquire the credential information of the target resource transfer credential corresponding to the resource transfer credential identifier.

[0188] Step 4: The electronic device receives the credential information of the target resource transfer credential.

[0189] Among them, the target resource transfer certificate is a resource transfer certificate that has been successfully accepted by the business server. The specific acceptance process is as mentioned above and will not be repeated here.

[0190] Step 5: The electronic device determines the first resource transfer callback information of the target resource transfer certificate.

[0191] The first resource transfer callback information is configured with at least one parameter item to be verified, and the information content corresponding to the parameter item to be verified is different from the credential information.

[0192] Step six: The electronic device sends first resource transfer callback information to the service server.

[0193] In one implementation, after determining the parameter item to be verified in the first resource transfer callback information, the electronic device sends the first resource transfer callback information to the business service area.

[0194] Step 7: The electronic device receives the first callback result information returned by the service server.

[0195] Step eight: The electronic device determines a verification result of the service server based on the first callback result information.

[0196] In one implementation, after receiving the first callback result information, the electronic device determines whether the service server performs verification processing on at least one parameter to be verified in the first resource transfer callback information.

[0197] Further, the business server verifies at least one parameter item to be verified in the first resource transfer callback information, that is, the verification result of the business server is passed, and the electronic device determines the second resource transfer callback information to continue to verify the business server.

[0198] Furthermore, when the business server fails to verify at least one parameter item to be verified in the first resource transfer callback information, that is, the verification result of the business server is failure to pass the verification, the electronic device sends an alarm message.

[0199] The technical solution provided by the above-mentioned embodiments of the present disclosure brings at least the following beneficial effects: determining the first resource transfer callback information of the target resource transfer credential, and configuring at least one parameter item to be verified for the first resource transfer callback information, so that the first resource transfer callback information is configured with information content different from the credential information of the target resource transfer credential, that is, sending a resource transfer callback information configured with false information to the business server, so as to realize, based on the first callback result information returned by the business server, judging whether the business server has performed verification processing on at least one parameter item to be verified, and then judging whether the callback verification logic of the business server is reasonable, so that when the callback verification logic of the business server is unreasonable, the callback verification logic of the business server can be adjusted in time to improve the security of the business server and reduce the problem of low security of resource transfer caused by unreasonable callback verification logic of the business server.

[0200] The above mainly introduces the solution provided by the embodiment of the present application from the perspective of the method. In order to realize the above functions, it includes hardware structures and / or software modules corresponding to the execution of each function. Those skilled in the art should easily realize that, in combination with the units and algorithm steps of each example described in the embodiments disclosed herein, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in the form of hardware or computer software driving hardware depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of the present application.

[0201] The disclosed embodiment also provides a verification device.

[0202] Figure 8 is a block diagram of a verification device according to an exemplary embodiment. Figure 8 The verification device 800 includes an acquisition module 801, a determination module 802, a sending module 803 and a verification module 804.

[0203] The acquisition module 801 is configured to execute the acquisition of the credential information of the target resource transfer credential; the target resource transfer credential is the resource transfer credential successfully accepted by the business server. Figure 1 , the acquisition module 801 can be used to execute S101.

[0204] The determination module 802 is configured to execute the first resource transfer callback information for determining the target resource transfer credential, wherein the first resource transfer callback information is configured with at least one parameter item to be verified, and the information content corresponding to the parameter item to be verified is different from the credential information. Figure 1 , the determination module 802 can be used to execute S102.

[0205] The sending module 803 is configured to execute sending the first resource transfer callback information to the business server and receive the first callback result information; the first callback result information is the result information obtained by the business server based on the first resource transfer callback information. Figure 1 , the sending module 803 can be used to execute S103.

[0206] The verification module 804 is configured to determine a first verification result based on the first callback result information, where the first verification result is used to indicate whether the service server has performed verification processing on at least one parameter item to be verified in the first resource transfer callback information. Figure 1 , the verification module 804 can be used to execute S104.

[0207] In a possible implementation, the acquisition module is further configured to execute: acquiring preset verification configuration information, the verification configuration information including multiple parameter items to be verified and a resource transfer credential identifier; acquiring credential information of a target resource transfer credential corresponding to the resource transfer credential identifier.

[0208] In another possible implementation, the verification module is specifically configured to execute: when the first callback result information indicates that the verification is successful, determining that the first verification result is that the business server has not performed data processing on at least one parameter item to be verified; when the first callback result information indicates that the verification has failed, determining that the first verification result is that the business server has performed data processing on at least one parameter item to be verified.

[0209] In another possible implementation manner, when the first callback result information indicates that the verification is successful, the sending module is further configured to execute: sending an alarm message.

[0210] In another possible implementation, when the first callback result information indicates a verification failure, the determination module is further configured to execute: determining the second resource transfer callback information of the target resource transfer credential, the second resource transfer callback information being configured with at least one parameter item to be verified; wherein the parameter item to be verified configured in the second resource transfer callback information is different from the parameter item to be verified configured in the first resource transfer callback information; the sending module is further configured to execute: sending the second resource transfer callback information to the business server, and receiving second callback result information; the second callback result information is the result information obtained by the business server based on the second resource transfer callback information; the verification module is further configured to execute: determining a second verification result based on the second callback result information; the second verification result is used to indicate whether the business server has performed verification processing on at least one parameter item to be verified in the second resource transfer callback information.

[0211] In another possible implementation, the parameter item to be verified includes at least one of a signature parameter item, a false resource transfer credential parameter item, a false verification parameter item, a false user account parameter item, and a repeated callback parameter item.

[0212] In another possible implementation, when the parameter item to be verified includes a signature parameter item, the determination module is specifically configured to execute: generate first signature information, the content of the first signature information is different from the signature information in the credential information; based on the first signature information, determine the first resource transfer callback information.

[0213] In another possible implementation, when the parameter item to be verified includes a false resource transfer credential parameter item, the determination module is specifically configured to execute: generate first resource transfer information, the content of the first resource transfer information is different from the resource transfer information in the credential information; based on the first resource transfer information, determine the first resource transfer callback information.

[0214] In another possible implementation, when the parameter items to be verified include false verification parameter items, the determination module is specifically configured to execute: generating false verification information of the target resource transfer credential based on the credential information; determining the first resource transfer callback information, the first resource transfer callback information including false verification information.

[0215] In another possible implementation, when the parameter items to be verified include false user account parameter items, the determination module is specifically configured to execute: generating first user account information, the content of the first user account information is different from the user account information in the credential information; and determining first resource transfer callback information based on the first user account information.

[0216] In another possible implementation, when the parameter item to be verified includes a repeated callback parameter item, the determination module is specifically configured to execute: configuring the number of callbacks for the first resource transfer callback information to be N times, where N is a positive integer greater than 1; the sending module is specifically configured to execute: sending the first resource transfer callback information N times to the business server.

[0217] Regarding the device in the above embodiment, the specific manner in which each module performs operations has been described in detail in the embodiment of the method, and will not be elaborated here.

[0218] Fig. 9 FIG. 1 is a block diagram of an electronic device according to an exemplary embodiment. Fig. 9 As shown, the electronic device 900 includes but is not limited to: a processor 901 and a memory 902 .

[0219] The memory 902 is used to store executable instructions of the processor 901. It is understandable that the processor 901 is configured to execute instructions to implement the above embodiment. Figures 1 to 7 The verification method shown in any one of the items.

[0220] It should be noted that those skilled in the art can understand that Fig. 9 The electronic device structure shown in the figure does not constitute a limitation on the electronic device, and the electronic device may include Fig. 9 More or fewer components may be shown, or certain components may be combined, or the components may be arranged differently.

[0221] The processor 901 is the control center of the electronic device. It uses various interfaces and lines to connect various parts of the entire electronic device. By running or executing software programs and / or modules stored in the memory 902 and calling data stored in the memory 902, it performs various functions of the electronic device and processes data, thereby monitoring the electronic device as a whole. The processor 901 may include one or more processing units; optionally, the processor 901 may integrate an application processor and a modem processor, wherein the application processor mainly processes the operating system, user interface, and application programs, and the modem processor mainly processes wireless communications. It is understandable that the above-mentioned modem processor may not be integrated into the processor 901.

[0222] The memory 902 can be used to store software programs and various data. The memory 902 can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, an application program required by at least one functional module (such as an acquisition module, a determination module, a sending module, and a verification module, etc.). In addition, the memory 902 can include a high-speed random access memory, and can also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other volatile solid-state storage devices.

[0223] In an exemplary embodiment, the present disclosure also provides a computer-readable storage medium including instructions, such as a memory 902 including instructions, and the instructions can be executed by a processor 901 of an electronic device 900 to complete the above embodiment. Figures 1 to 7 The verification method shown in any one of the items.

[0224] In actual implementation, the processing functions of the acquisition module 801, the determination module 802, the sending module 803 and the verification module 804 can be Fig. 9 The processor 901 shown calls the program code in the memory 902 to implement. The specific execution process can be referred to Figures 1 to 7 The description of any of the verification methods shown will not be repeated here.

[0225] Optionally, the computer-readable storage medium may be a non-temporary computer-readable storage medium, for example, the non-temporary computer-readable storage medium may be a read-only memory (ROM), a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, etc.

[0226] In an exemplary embodiment, the present disclosure also provides a computer program product including one or more instructions, which can be executed by the processor 901 of the electronic device 900 to complete the above-mentioned embodiment. Figures 1 to 7 The verification method shown in any one of the items.

[0227] It should be noted that when the instructions in the above-mentioned computer-readable storage medium or one or more instructions in the computer program product are executed by the processor 901 of the electronic device 900, each process of the above-mentioned verification method embodiment is implemented, and the above-mentioned embodiment can be achieved. Figures 1 to 7 The same technical effect as the verification method shown in any of the items will not be repeated here to avoid repetition.

[0228] Those skilled in the art will readily appreciate other embodiments of the present disclosure after considering the specification and practicing the invention disclosed herein. This application is intended to cover any variations, uses, or adaptations of the present disclosure that follow the general principles of the present disclosure and include common knowledge or customary techniques in the art that are not disclosed in the present disclosure. The specification and examples are intended to be exemplary only, and the true scope and spirit of the present disclosure are indicated by the following claims.

[0229] It should be understood that the present disclosure is not limited to the exact structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims

1. A verification method, characterized in that: include: Obtain the credential information of the target resource transfer credential; The target resource transfer certificate is a resource transfer certificate successfully accepted by the business server; Determine first resource transfer callback information of the target resource transfer credential; The first resource transfer callback information is configured with at least one parameter item to be verified, and the information content corresponding to the parameter item to be verified is different from the credential information; Sending the first resource transfer callback information to the business server, and receiving first callback result information; the first callback result information is result information obtained by the business server based on the first resource transfer callback information; When the first callback result information indicates that the verification is successful, determining that the first verification result is that the business server does not perform data processing on the at least one parameter item to be verified; The first verification result is used to indicate whether the service server has performed verification processing on at least one parameter item to be verified in the first resource transfer callback information; When the first callback result information indicates that verification has failed, it is determined that the first verification result is that the service server has performed data processing on the at least one parameter item to be verified.

2. The verification method according to claim 1, characterized in that: Get the target resource transfer credential information, including: Acquire preset verification configuration information; the verification configuration information at least includes the parameter item to be verified and the resource transfer credential identifier; Acquire the credential information of the target resource transfer credential corresponding to the resource transfer credential identifier.

3. The verification method according to claim 1, characterized in that: When the first callback result information indicates that the verification is successful, the method further includes: sending an alarm message.

4. The verification method according to claim 1, characterized in that: In the case where the first callback result information indicates that the verification has failed, the method further includes: Determine second resource transfer callback information of the target resource transfer credential, wherein the second resource transfer callback information is configured with at least one parameter item to be verified; wherein the parameter item to be verified configured in the second resource transfer callback information is different from the parameter item to be verified configured in the first resource transfer callback information; sending the second resource transfer callback information to the business server, and receiving second callback result information; the second callback result information is result information obtained by the business server based on the second resource transfer callback information; A second verification result is determined based on the second callback result information; the second verification result is used to indicate whether the service server has performed verification processing on at least one parameter item to be verified in the second resource transfer callback information.

5. The verification method according to claim 1, characterized in that: The parameter item to be verified includes at least one of a signature parameter item, a false resource transfer credential parameter item, a false verification parameter item, a false user account parameter item, and a repeated callback parameter item.

6. The verification method according to claim 5, characterized in that: In the case where the parameter item to be verified includes a signature parameter item, the first resource transfer callback information for determining the target resource transfer credential includes: Generate first signature information, wherein the content of the first signature information is different from the signature information in the credential information; The first resource transfer callback information is determined based on the first signature information.

7. The verification method according to claim 5, characterized in that: In the case where the parameter item to be verified includes a false resource transfer credential parameter item, the first resource transfer callback information for determining the target resource transfer credential includes: generating first resource transfer information, wherein the content of the first resource transfer information is different from the resource transfer information in the credential information; The first resource transfer callback information is determined based on the first resource transfer information.

8. The verification method according to claim 5, characterized in that: In the case where the parameter item to be verified includes a false verification parameter item, the first resource transfer callback information for determining the target resource transfer credential includes: Generating false verification information of the target resource transfer credential based on the credential information; The first resource transfer callback information is determined, where the first resource transfer callback information includes the false verification information.

9. The verification method according to claim 5, characterized in that: In the case where the parameter item to be verified includes a false user account parameter item, the first resource transfer callback information for determining the target resource transfer credential includes: generating first user account information, wherein the content of the first user account information is different from the user account information in the credential information; The first resource transfer callback information is determined based on the first user account information.

10. The verification method according to claim 5, characterized in that: In the case where the parameter item to be verified includes a repeated callback parameter item, the first resource transfer callback information for determining the target resource transfer credential includes: Configure the callback number of the first resource transfer callback information to N times, where N is a positive integer greater than 1; The sending the first resource transfer callback information to the service server includes: Sending the first resource transfer callback information to the service server N times.

11. A verification device, characterized in that: include: An acquisition module, configured to execute acquisition of credential information of a target resource transfer credential; The target resource transfer certificate is a resource transfer certificate successfully accepted by the business server; A determination module is configured to execute first resource transfer callback information for determining the target resource transfer credential, wherein the first resource transfer callback information is configured with at least one parameter item to be verified, and information content corresponding to the parameter item to be verified is different from the credential information; a sending module, configured to execute sending the first resource transfer callback information to the business server, and receive first callback result information; the first callback result information is result information obtained by the business server based on the first resource transfer callback information; A verification module is configured to determine, when the first callback result information indicates that the verification is successful, that the first verification result is that the business server does not perform data processing on the at least one parameter item to be verified; When the first callback result information indicates a verification failure, the first verification result is determined to be that the business server has performed data processing on the at least one parameter item to be verified; the first verification result is used to indicate whether the business server has performed verification processing on at least one parameter item to be verified in the first resource transfer callback information.

12. The verification device according to claim 11, characterized in that: The acquisition module is further configured to execute: Acquire preset verification configuration information; the verification configuration information at least includes a plurality of the parameter items to be verified and a resource transfer credential identifier; Acquire the credential information of the target resource transfer credential corresponding to the resource transfer credential identifier.

13. The verification device according to claim 11, characterized in that: When the first callback result information indicates that the verification is successful, the sending module is further configured to execute: sending an alarm message.

14. The verification device according to claim 11, characterized in that: In the case where the first callback result information indicates that the verification fails, The determination module is further configured to execute: determining second resource transfer callback information of the target resource transfer credential, wherein the second resource transfer callback information is configured with at least one parameter item to be verified; the parameter item to be verified configured in the second resource transfer callback information is different from the parameter item to be verified configured in the first resource transfer callback information; The sending module is further configured to execute: sending the second resource transfer callback information to the business server, and receiving second callback result information; the second callback result information is result information obtained by the business server based on the second resource transfer callback information; The verification module is further configured to execute: determining a second verification result based on the second callback result information; the second verification result is used to indicate whether the service server has performed verification processing on at least one parameter item to be verified in the second resource transfer callback information.

15. The verification device according to claim 11, characterized in that: The parameter item to be verified includes at least one of a signature parameter item, a false resource transfer credential parameter item, a false verification parameter item, a false user account parameter item, and a repeated callback parameter item.

16. The verification device according to claim 15, characterized in that: In a case where the parameter item to be verified includes the signature parameter item, the determining module is specifically configured to execute: Generate first signature information, wherein the content of the first signature information is different from the signature information in the credential information; The first resource transfer callback information is determined based on the first signature information.

17. The verification device according to claim 15, characterized in that: In the case where the parameter item to be verified includes the false resource transfer credential parameter item, the determining module is specifically configured to execute: generating first resource transfer information, wherein the content of the first resource transfer information is different from the resource transfer information in the credential information; The first resource transfer callback information is determined based on the first resource transfer information.

18. The verification device according to claim 15, characterized in that: In the case where the parameter item to be verified includes the false verification parameter item, the determining module is specifically configured to execute: Generating false verification information of the target resource transfer credential based on the credential information; The first resource transfer callback information is determined, where the first resource transfer callback information includes the false verification information.

19. The verification device according to claim 15, characterized in that: In a case where the parameter item to be verified includes the false user account parameter item, the determining module is specifically configured to execute: generating first user account information, wherein the content of the first user account information is different from the user account information in the credential information; The first resource transfer callback information is determined based on the first user account information.

20. The verification device according to claim 15, characterized in that: In a case where the parameter item to be verified includes the repeated callback parameter item, the determining module is specifically configured to execute: Configure the callback number of the first resource transfer callback information to N times, where N is a positive integer greater than 1; The sending module is specifically configured to execute: Sending the first resource transfer callback information to the service server N times.

21. An electronic device, characterized in that: include: processor; a memory for storing instructions executable by the processor; The processor is configured to execute the instructions to implement the verification method according to any one of claims 1 to 10.

22. A computer-readable storage medium, characterized in that: When the instructions in the computer-readable storage medium are executed by a processor of an electronic device, the electronic device is enabled to perform the verification method as claimed in any one of claims 1 to 10.

23. A computer program product, characterized in that The computer program product comprises computer instructions, and when the computer instructions are executed on an electronic device, the electronic device is caused to perform the verification method according to any one of claims 1 to 10.

Images