A payment system interface management method and apparatus
By obtaining domain name information and calling pre-stored encryption/decryption algorithms and login status information, the problem of low efficiency in calling different financial payment system interfaces in existing technologies is solved, and a more efficient interface calling process is achieved.
Patent Information
- Application Number
- CN202111535057.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2021-12-15
- Publication Date
- 2025-11-18
- Estimated Expiration
- 2041-12-15
AI Technical Summary
When testing different financial payment systems, existing shopping software needs to deal with their different external interfaces, encryption and decryption algorithms, and signatures, resulting in low efficiency in calling different interfaces.
By obtaining the domain name information from the API call request information, and using the pre-stored encryption/decryption algorithm and login status information, the target encryption/decryption algorithm and API parameters are called from the database. The function signature value is calculated and a valid call check is performed. If the check passes, the target API is called.
It saves the tedious encryption/decryption and login steps required for each API call, improving the efficiency of calling different APIs.
Smart Images

Figure CN114219484B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the field of electronic payment, in particular to a payment system interface management method and device. BACKGROUND
[0002] With the development of Internet technology, in order to ensure information security, especially the information security of financial payment system, different financial payment systems have their own different external interfaces and their own different encryption and decryption algorithms and complex signature security measures to prevent others from cracking their financial payment system.
[0003] However, in order to facilitate user payment, the existing shopping software supports various different financial payment systems. When testing the shopping software to connect different financial payment systems, different external interfaces of each financial payment system and different encryption and decryption algorithms and various complex signatures often need to be faced. How to manage these different security information to call different payment interfaces and improve the work efficiency of calling different interfaces is a problem that people are concerned about. SUMMARY
[0004] Therefore, the present application provides a payment system interface management method and device to improve the work efficiency of calling different interfaces.
[0005] In order to achieve the above purpose, the present scheme is as follows:
[0006] A payment system interface management method, comprising:
[0007] Obtaining interface call request information, the interface call request information containing domain name information of a target interface;
[0008] Using the domain name information to call corresponding target encryption and decryption algorithm information, target login state information and target interface parameters from the database respectively;
[0009] Using the target encryption and decryption algorithm information to obtain the encryption and decryption value of the target interface parameters;
[0010] Using the encryption and decryption value and a preset interface parameter value calculation function signature value;
[0011] Sending the encryption and decryption value, function signature value and target login state information to the target interface for legal call checking by the target interface;
[0012] If the checking is passed, the target interface is called.
[0013] Optionally, before obtaining the interface call request information, further comprising:
[0014] The user uploads the jar package corresponding to the domain name information, and the information in the jar package is stored in the database of each return interface, the jar package includes the name of each return interface corresponding to the domain name information, the encryption and decryption algorithm information corresponding to the domain name information, the function signature method, the login state information, and the interface parameters, and the return interface includes an interface information return interface, a login state information return interface, and an encryption and decryption method information return interface.
[0015] Optionally, the target encryption and decryption algorithm information, the target login state information, and the target interface parameter corresponding to the domain name information are called from the database by using the domain name information, and the calling includes:
[0016] The domain name information is sent to the interface information return interface, the login state information return interface, and the encryption and decryption method information return interface.
[0017] The target interface parameter corresponding to the domain name information is called by using the interface information return interface.
[0018] The target login state information corresponding to the domain name information is called by using the login state information return interface.
[0019] The target encryption and decryption algorithm information corresponding to the domain name information is called by using the encryption and decryption method information return interface.
[0020] Optionally, the encryption and decryption method information return interface includes an encryption method information return interface or a decryption method information return interface, and the target encryption and decryption algorithm information corresponding to the domain name information is called by using the encryption and decryption method information return interface, and the calling includes:
[0021] When the target interface parameter corresponding to the domain name information includes an encryption field, the target encryption algorithm information corresponding to the domain name information is called by using the encryption method information return interface.
[0022] When the target interface parameter corresponding to the domain name information includes a decryption field, the target decryption algorithm information corresponding to the domain name information is called by using the decryption method information return interface.
[0023] Optionally, the target encryption and decryption algorithm information includes target encryption algorithm information or target decryption algorithm information, and the encryption and decryption value of the target interface parameter is obtained by using the target encryption and decryption algorithm information, and the obtaining includes:
[0024] When the target interface parameter corresponding to the domain name information includes an encryption field, the encryption value of the target interface parameter is obtained by using the target encryption algorithm information.
[0025] When the target interface parameter corresponding to the domain name information contains a decryption field, the decryption value of the target interface parameter is obtained using the target decryption algorithm information.
[0026] Optionally, the step of calculating the function signature value using the encrypted / decrypted value and the preset interface parameter value includes:
[0027] Using the encrypted / decrypted value, the encrypted / decrypted fields in the target interface parameters are parsed to obtain the target interface parameters in plaintext state;
[0028] Based on the target interface parameters and preset interface parameter values in plaintext state, the corresponding function signature interface is called to obtain the function signature value.
[0029] A payment system interface management device, comprising:
[0030] The request acquisition unit is used to acquire interface call request information, which includes the domain name information of the target interface.
[0031] The data retrieval unit is used to retrieve the corresponding target encryption / decryption algorithm information, target login status information, and target interface parameters from the database using the domain name information.
[0032] The encryption value acquisition unit is used to obtain the encryption and decryption value of the target interface parameter using the target encryption and decryption algorithm information;
[0033] A function calculation unit is used to calculate a function signature value using the encryption / decryption value and preset interface parameter values;
[0034] The sending unit is used to send the encryption / decryption value, function signature value, and target login status information to the target interface for the target interface to perform a legitimate call check.
[0035] The calling unit is used to call the target interface after the information sending unit.
[0036] Optionally, the payment system interface management device of this application further includes:
[0037] The JAR package acquisition unit is used to acquire the JAR package uploaded by the user corresponding to each domain name information before executing the request acquisition unit 11, and store the information in the JAR package into the database of each return interface respectively. The JAR package includes the name of each return interface corresponding to the domain name information, the encryption and decryption algorithm information corresponding to the domain name information, the function signature method, the login state information, and the parameters of each interface. Each return interface includes an interface information return interface, a login state information return interface, and an encryption and decryption method information return interface.
[0038] Optionally, the data retrieval unit includes:
[0039] The interface information sending unit is used to send the domain name information to the interface information return interface, the login status information return interface, and the encryption / decryption method information return interface;
[0040] An interface parameter calling unit is used to return the target interface parameters corresponding to the domain name information using the interface information.
[0041] The login status information invocation unit is used to invoke the target login status information corresponding to the domain name information using the login status information return interface;
[0042] The encryption / decryption method invocation unit is used to invoke the target encryption / decryption algorithm information corresponding to the domain name information using the encryption / decryption method information return interface.
[0043] Optionally, the function calculation unit includes:
[0044] The field parsing unit is used to parse the encryption / decryption field in the target interface parameter using the encryption / decryption value to obtain the target interface parameter in plaintext state.
[0045] The function signature interface call unit is used to call the corresponding function signature interface based on the target interface parameters in plaintext state and the preset interface parameter values to obtain the function signature value.
[0046] As can be seen from the above technical solutions, the payment system interface management method and apparatus provided in this application obtain interface call request information, which includes the domain name information of the corresponding interface. The domain name information is used to call pre-stored corresponding target encryption / decryption algorithm information and target login state information. The target encryption / decryption algorithm information is used to obtain the encryption / decryption value of the corresponding interface. The encryption / decryption value is used to calculate and determine the function signature value. The encryption / decryption value, function signature value, and target login state information are used to perform a valid call check. If the check passes, the corresponding interface is called. This application's solution, by using the obtained domain name information to call pre-stored encryption / decryption algorithms and login state information to achieve the purpose of calling the corresponding interface, saves the cumbersome steps of inputting encryption / decryption algorithms and login state information for each interface call compared to existing technologies, thus improving the efficiency of calling different interfaces. Attached Figure Description
[0047] Figure 1 A flowchart of a payment system interface management method provided in this application embodiment;
[0048] Figure 2 Flowchart of another payment system interface management method provided in this application embodiment;
[0049] Figure 3A schematic diagram of the structure of a payment system interface management device provided in this application embodiment;
[0050] Figure 4 This is a hardware structure block diagram of a payment system interface management device disclosed in an embodiment of this application. Detailed Implementation
[0051] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.
[0052] The proposed solution can be implemented based on a terminal with data processing capabilities, such as a mobile phone, computer, server, or cloud platform.
[0053] Next, from the perspective of the terminal, we will introduce one of the payment system interface management methods of this solution, referring to... Figure 1 The process may include:
[0054] Step S100: Obtain the interface call request information.
[0055] The interface call request information includes the domain name information of the target interface.
[0056] Specifically, the terminal can obtain the interface call request information input by the technician, which includes the domain name information of the target interface.
[0057] Step S110: Using the domain name information, retrieve the corresponding target encryption / decryption algorithm information, target login status information, and target interface parameters from the database.
[0058] Specifically, the terminal's database pre-stores multiple encryption / decryption algorithm information, login status information, and interface parameters. The corresponding target encryption / decryption algorithm information, target login status information, and target interface parameters can be retrieved from the database using domain name information.
[0059] Step S120: Obtain the encryption / decryption value of the target interface parameter using the target encryption / decryption algorithm information.
[0060] Specifically, the terminal can encrypt or decrypt some fields in the target interface parameters to ensure data security, and can use the target encryption / decryption algorithm information to obtain the encryption / decryption values of the target interface parameters.
[0061] Step S130: Calculate the function signature value using the encryption / decryption value and the preset interface parameter value.
[0062] Specifically, the function signature value is one of the data used to perform legitimate call checks. The terminal can calculate the function signature value using the encryption / decryption value and preset interface parameter values.
[0063] Step S140: Send the encryption / decryption value, function signature value, and target login status information to the target interface for the target interface to perform a legitimate call check.
[0064] Specifically, the target interface can perform a legitimate call check based on the encryption / decryption value, function signature value, and target login state information. The terminal can send the encryption / decryption value, function signature value, and target login state information to the target interface for the target interface to perform a legitimate call check.
[0065] Step S150: Call the target interface.
[0066] If the valid call check of the target interface passes, then the target interface is invoked.
[0067] Specifically, once the target interface confirms that the call is valid, it can respond to the terminal's call request, and the terminal can then call the target interface.
[0068] In this embodiment, since the obtained domain name information is used to call the pre-stored encryption / decryption algorithm and login status information to achieve the purpose of calling the corresponding interface, compared with the prior art, the tedious steps of inputting encryption / decryption algorithm and login status are saved for each interface call, thus improving the work efficiency of calling different interfaces.
[0069] Furthermore, in some embodiments of this application, the information of each supported interface can be uploaded to the terminal's database in the form of a JAR file in advance, so that the relevant data can be called later when using it. Before step S100, obtaining the interface call request information, this solution may also include the following steps:
[0070] Step S160: Obtain the JAR package uploaded by the user corresponding to each domain name information, and store the information in the JAR package into the database of each return interface respectively. The JAR package includes the name of each return interface corresponding to the domain name information, the encryption and decryption algorithm information corresponding to the domain name information, the function signature method, the login state information, and the parameters of each interface. Each return interface includes an interface information return interface, a login state information return interface, and an encryption and decryption method information return interface.
[0071] Specifically, users can upload multiple JAR packages corresponding to various domain names via the terminal. The information in the JAR packages can be automatically stored in the corresponding database according to the returned interfaces, facilitating the return interfaces to call the corresponding data. The JAR packages include the names of each returned interface corresponding to the domain name information, encryption / decryption algorithm information corresponding to the domain name information, function signature methods, login status information, and parameters of each interface. Each returned interface includes an interface information return interface, a login status information return interface, and an encryption / decryption method information return interface. The interface information return interface is used to return all interface names of the calling domain and the interface parameters corresponding to each interface name. The login status information return interface is used to return the calling function of the login status information corresponding to the calling domain. The encryption / decryption method information return interface is used to return the encrypted / decrypted value obtained by encrypting / decrypting the field when the interface parameter has an encryption / decryption field.
[0072] Furthermore, the following describes step S110, which involves using the domain name information to retrieve the corresponding target encryption / decryption algorithm information, target login status information, and target interface parameters from the database. Figure 2 As shown, the process may include:
[0073] Step S111: Send the domain name information to the interface information return interface, login status information return interface, and encryption / decryption method information return interface.
[0074] Specifically, the terminal can send domain name information to the interface information return interface, login status information return interface, and encryption / decryption method information return interface, so that these interfaces can call relevant data based on the domain name information.
[0075] Step S112: Use the interface information to return the target interface parameters corresponding to the domain name information.
[0076] Specifically, the terminal can use the interface information to return the target interface parameters corresponding to the domain name information.
[0077] Step S113: Use the login status information return interface to call the target login status information corresponding to the domain name information.
[0078] Specifically, the terminal can use the login status information return interface to call the target login status information corresponding to the domain name information.
[0079] Step S114: Use the encryption / decryption method information return interface to call the target encryption / decryption algorithm information corresponding to the domain name information.
[0080] Specifically, the terminal can use the encryption / decryption method information return interface to call the target encryption / decryption algorithm information corresponding to the domain name information.
[0081] In this embodiment, the actual login status information and encryption / decryption algorithm information are cumbersome. The corresponding information is retrieved through various return interfaces, saving the step of having to input the cumbersome encryption / decryption algorithm and login status every time the interface is called.
[0082] Furthermore, in some embodiments of this application, the encryption and decryption security measures for fields differ among interfaces. Some interfaces support encrypted fields, while others support decrypted fields. To enable the reading of different encrypted and decrypted fields, the encryption and decryption method information return interface may include an encryption method information return interface or a decryption method information return interface. The process of calling the target encryption and decryption algorithm information corresponding to the domain name information using the encryption and decryption method information return interface is described below. The specific steps are as follows:
[0083] Step S1141: When the target interface parameter corresponding to the domain name information contains an encryption field, the target encryption algorithm information corresponding to the domain name information is called by returning the encryption method information.
[0084] Specifically, when the target interface supports encrypted fields, the corresponding target interface parameters can include encrypted fields, and the terminal can use the encryption method information to return the interface call to the target encryption algorithm information corresponding to the domain name information.
[0085] Step S1142: When the target interface parameter corresponding to the domain name information contains a decryption field, the decryption method information return interface is used to call the target decryption algorithm information corresponding to the domain name information.
[0086] Specifically, when the target interface supports decryption fields, the corresponding target interface parameters can include decryption fields, and the terminal can use the decryption method information to return the interface call to the target decryption algorithm information corresponding to the domain name information.
[0087] Furthermore, in this embodiment of the application, when the security and confidentiality measures of the interface are upgraded and maintained, and the encryption and decryption algorithms of the corresponding encryption and decryption fields are changed, the corresponding upgraded and maintained encryption and decryption algorithms can be added to the encryption and decryption method information return interface.
[0088] In some embodiments of this application, depending on the encryption and decryption algorithms supported by the interface, the target encryption and decryption algorithm information may include target encryption algorithm information or target decryption algorithm information. The process of obtaining the encryption and decryption value of the target interface parameter using the target encryption and decryption algorithm information in step S120 above will be described below. This process may include the following steps:
[0089] Step S121: When the target interface parameter corresponding to the domain name information contains an encrypted field, the encrypted value of the target interface parameter is obtained using the target encryption algorithm information.
[0090] Specifically, after the terminal calls the target encryption algorithm information through the interface returned by the encryption method information, it can use the target encryption algorithm information to calculate and obtain the encrypted value of the target interface parameter.
[0091] Step S122: When the target interface parameter corresponding to the domain name information contains a decryption field, the decryption value of the target interface parameter is obtained using the target decryption algorithm information.
[0092] Specifically, after the terminal calls the target decryption algorithm information through the interface returned by the decryption method information, it can use the target decryption algorithm information to calculate and obtain the decryption value of the target interface parameter.
[0093] In some embodiments of this application, the function signature value, as part of the verification data security, can be calculated by inputting a pre-agreed numerical value. The process of calculating the function signature value using the encryption / decryption value and the preset interface parameter value in step S130 is described below. The specific steps are as follows:
[0094] Step S131: Using the encryption / decryption value, parse the encryption / decryption field in the target interface parameter to obtain the target interface parameter in plaintext state.
[0095] Specifically, the terminal can use the encrypted / decrypted value to parse the encrypted / decrypted fields in the target interface parameters to obtain the target interface parameters in plaintext state.
[0096] Step S132: Based on the target interface parameters and preset interface parameter values in plaintext state, call the corresponding function signature interface to obtain the function signature value.
[0097] Specifically, the preset interface parameter value can be a pre-agreed value. The terminal can call the function signature interface corresponding to the target interface based on the target interface parameter in plaintext state and the preset interface parameter value to obtain the function signature value.
[0098] The following describes a payment system interface management device provided in an embodiment of this application. The payment system interface management device described below and the payment system interface management method described above can be referred to and correspond to each other.
[0099] like Figure 3 As shown, a schematic diagram of a payment system interface management device is disclosed, which may include:
[0100] The request acquisition unit 11 is used to acquire interface call request information, wherein the interface call request information includes the domain name information of the target interface;
[0101] Data retrieval unit 12 is used to retrieve the corresponding target encryption / decryption algorithm information, target login status information, and target interface parameters from the database using the domain name information;
[0102] The encryption value acquisition unit 13 is used to obtain the encryption and decryption value of the target interface parameter using the target encryption and decryption algorithm information;
[0103] Function calculation unit 14 is used to calculate function signature value using the encryption / decryption value and preset interface parameter value;
[0104] The sending unit 15 is used to send the encryption / decryption value, function signature value, and target login status information to the target interface for the target interface to perform a legitimate call check.
[0105] Calling unit 16 is used to call the target interface when the valid call check passes.
[0106] Optionally, the payment system interface management device of this application further includes:
[0107] The JAR package acquisition unit is used to acquire the JAR package uploaded by the user corresponding to each domain name information before executing the request acquisition unit 11, and store the information in the JAR package into the database of each return interface respectively. The JAR package includes the name of each return interface corresponding to the domain name information, the encryption and decryption algorithm information corresponding to the domain name information, the function signature method, the login state information, and the parameters of each interface. Each return interface includes an interface information return interface, a login state information return interface, and an encryption and decryption method information return interface.
[0108] Optionally, the data retrieval unit 12 may include:
[0109] The interface information sending unit is used to send the domain name information to the interface information return interface, the login status information return interface, and the encryption / decryption method information return interface;
[0110] An interface parameter calling unit is used to return the target interface parameters corresponding to the domain name information using the interface information.
[0111] The login status information invocation unit is used to invoke the target login status information corresponding to the domain name information using the login status information return interface;
[0112] The encryption / decryption method invocation unit is used to invoke the target encryption / decryption algorithm information corresponding to the domain name information using the encryption / decryption method information return interface.
[0113] Optionally, the encryption / decryption method invocation unit may include:
[0114] The encryption algorithm unit is used to call the target encryption algorithm information corresponding to the domain name information by returning the encryption method information through the interface when the target interface parameter corresponding to the domain name information contains an encryption field.
[0115] The decryption algorithm unit is used to call the target decryption algorithm information corresponding to the domain name information by returning the decryption method information through the interface when the target interface parameter corresponding to the domain name information contains a decryption field.
[0116] Optionally, the key value acquisition unit 13 may include:
[0117] The encrypted value acquisition unit is used to acquire the encrypted value of the target interface parameter by using the target encryption algorithm information when the target interface parameter corresponding to the domain name information contains an encrypted field.
[0118] The decryption value acquisition unit is used to acquire the decryption value of the target interface parameter by utilizing the target decryption algorithm information when the target interface parameter corresponding to the domain name information contains a decryption field.
[0119] Optionally, the function calculation unit 14 may include:
[0120] The field parsing unit is used to parse the encryption / decryption field in the target interface parameter using the encryption / decryption value to obtain the target interface parameter in plaintext state.
[0121] The function signature interface call unit is used to call the corresponding function signature interface based on the target interface parameters in plaintext state and the preset interface parameter values to obtain the function signature value.
[0122] The payment system interface management device provided in this application embodiment can be applied to payment system interface management equipment. The payment system interface management equipment can be a terminal. Figure 4 The hardware structure block diagram of the payment system interface management device is shown below. Figure 4 The hardware structure of the payment system interface management device may include: at least one processor 1, at least one communication interface 2, at least one memory 3, and at least one communication bus 4;
[0123] In this embodiment of the application, the number of processor 1, communication interface 2, memory 3, and communication bus 4 is at least one, and processor 1, communication interface 2, and memory 3 communicate with each other through communication bus 4;
[0124] Processor 1 may be a central processing unit (CPU), an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement embodiments of the present invention.
[0125] Memory 3 may include high-speed RAM, and may also include non-volatile memory, such as at least one disk storage device;
[0126] The memory stores a program, which the processor can call. The program is used for:
[0127] Obtain interface call request information, which includes the domain name information of the target interface;
[0128] Using the domain name information, the corresponding target encryption / decryption algorithm information, target login status information, and target interface parameters are retrieved from the database respectively;
[0129] The encryption and decryption values of the target interface parameters are obtained using the target encryption and decryption algorithm information.
[0130] The function signature value is calculated using the encryption / decryption value and the preset interface parameter value;
[0131] The encryption / decryption value, function signature value, and target login status information are sent to the target interface for the target interface to perform a legitimate call check.
[0132] If the check passes, the target interface is invoked.
[0133] Optionally, the refined and extended functions of the program can be found in the description above.
[0134] This application embodiment also provides a storage medium that can store a program suitable for execution by a processor, the program being used for:
[0135] Obtain interface call request information, which includes the domain name information of the target interface;
[0136] Using the domain name information, the corresponding target encryption / decryption algorithm information, target login status information, and target interface parameters are retrieved from the database respectively;
[0137] The encryption and decryption values of the target interface parameters are obtained using the target encryption and decryption algorithm information.
[0138] The function signature value is calculated using the encryption / decryption value and the preset interface parameter value;
[0139] The encryption / decryption value, function signature value, and target login status information are sent to the target interface for the target interface to perform a legitimate call check.
[0140] If the check passes, the target interface is invoked.
[0141] Optionally, the refined and extended functions of the program can be found in the description above.
[0142] Finally, it should be noted that in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.
[0143] The various embodiments in this specification are described in a progressive manner. Each embodiment focuses on the differences from other embodiments. The various embodiments can be combined with each other, and the same or similar parts can be referred to each other.
[0144] The above description of the disclosed embodiments enables those skilled in the art to make or use this application. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of this application. Therefore, this application is not to be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.
Claims
1. A payment system interface management method, characterized in that, include: Obtain interface call request information, which includes the domain name information of the target interface; Using the domain name information, the corresponding target encryption / decryption algorithm information, target login status information, and target interface parameters are retrieved from the database respectively; The encryption and decryption values of the target interface parameters are obtained using the target encryption and decryption algorithm information. The function signature value is calculated using the encryption / decryption value and the preset interface parameter value; The encryption / decryption value, function signature value, and target login status information are sent to the target interface for the target interface to perform a legitimate call check. If the check passes, the target interface is invoked; Before obtaining the API call request information, the process also includes: Obtain the JAR package uploaded by the user that corresponds to each domain name information, and store the information in the JAR package into the database of each return interface respectively. The JAR package includes the name of each return interface corresponding to the domain name information, the encryption and decryption algorithm information corresponding to the domain name information, the function signature method, the login state information, and the parameters of each interface. Each return interface includes an interface information return interface, a login state information return interface, and an encryption and decryption method information return interface. The step of using the domain name information to retrieve the corresponding target encryption / decryption algorithm information, target login status information, and target interface parameters from the database includes: Send the domain name information to the interface information return interface, login status information return interface, and encryption / decryption method information return interface; The interface information is used to return the target interface parameters corresponding to the domain name information for the interface call; The login status information is returned via an interface that calls the target login status information corresponding to the domain name information. The encryption / decryption method information return interface is used to call the target encryption / decryption algorithm information corresponding to the domain name information.
2. The method according to claim 1, characterized in that, The encryption / decryption method information return interface includes an encryption method information return interface or a decryption method information return interface. The step of using the encryption / decryption method information return interface to call the target encryption / decryption algorithm information corresponding to the domain name information includes: When the target interface parameters corresponding to the domain name information contain an encryption field, the encryption method information is used to return the interface to call the target encryption algorithm information corresponding to the domain name information; When the target interface parameters corresponding to the domain name information contain a decryption field, the decryption method information is used to return the interface to call the target decryption algorithm information corresponding to the domain name information.
3. The method according to claim 1, characterized in that, The target encryption / decryption algorithm information includes target encryption algorithm information or target decryption algorithm information. The step of obtaining the encryption / decryption value of the target interface parameter using the target encryption / decryption algorithm information includes: When the target interface parameter corresponding to the domain name information contains an encrypted field, the encrypted value of the target interface parameter is obtained using the target encryption algorithm information; When the target interface parameter corresponding to the domain name information contains a decryption field, the decryption value of the target interface parameter is obtained using the target decryption algorithm information.
4. The method according to claim 1, characterized in that, The calculation of the function signature value using the encryption / decryption value and preset interface parameter values includes: Using the encrypted / decrypted value, the encrypted / decrypted fields in the target interface parameters are parsed to obtain the target interface parameters in plaintext state; Based on the target interface parameters and preset interface parameter values in plaintext state, the corresponding function signature interface is called to obtain the function signature value.
5. A payment system interface management device, characterized in that, include: The request acquisition unit is used to acquire interface call request information, which includes the domain name information of the target interface. The data retrieval unit is used to retrieve the corresponding target encryption / decryption algorithm information, target login status information, and target interface parameters from the database using the domain name information; The encryption value acquisition unit is used to obtain the encryption and decryption value of the target interface parameter using the target encryption and decryption algorithm information; A function calculation unit is used to calculate a function signature value using the encryption / decryption value and preset interface parameter values; The sending unit is used to send the encryption / decryption value, function signature value, and target login status information to the target interface for the target interface to perform a legitimate call check. The invocation unit is used to invoke the target interface when the valid invocation check passes; This also includes: The JAR package acquisition unit, before executing the request acquisition unit, is used to acquire the JAR packages uploaded by the user that correspond to each domain name information, and to store the information in the JAR packages into the database of each return interface respectively. The JAR packages include the names of each return interface corresponding to the domain name information, the encryption and decryption algorithm information corresponding to the domain name information, the function signature method, the login state information, and the parameters of each interface. Each return interface includes an interface information return interface, a login state information return interface, and an encryption and decryption method information return interface. The data retrieval unit includes: The interface information sending unit is used to send the domain name information to the interface information return interface, the login status information return interface, and the encryption / decryption method information return interface; An interface parameter calling unit is used to return the target interface parameters corresponding to the domain name information using the interface information. The login status information invocation unit is used to invoke the target login status information corresponding to the domain name information using the login status information return interface; The encryption / decryption method invocation unit is used to invoke the target encryption / decryption algorithm information corresponding to the domain name information using the encryption / decryption method information return interface.
6. The apparatus according to claim 5, characterized in that, The function calculation unit includes: The field parsing unit is used to parse the encryption / decryption field in the target interface parameter using the encryption / decryption value to obtain the target interface parameter in plaintext state. The function signature interface call unit is used to call the corresponding function signature interface based on the target interface parameters in plaintext state and the preset interface parameter values to obtain the function signature value.
Citation Information
Patent Citations
Payment method and device, server and storage medium
CN112215593A
Service verification method, device and equipment and computer storage medium
CN112242901A