A secure access method and device for business products

Abstract

The present application provides a method and device for secure access to business products, which first receives the business product security access requirements submitted by the business party; generates assessment requests in different directions according to the security access requirements, determines the assessment parties corresponding to the assessment requests in different directions according to the preset information, and sends the assessment requests in different directions to the corresponding assessment parties respectively; then receives the assessment results fed back by the assessment parties according to the assessment requests, determines the security optimization requirements of the business product itself and the security products that need to be connected with the business product through the assessment results; finally, according to the security access requirements of the business product, determines the joint call example configuration of the security product that the business product needs to be connected, generates the final code according to the joint call example configuration and the different pre-stored code segments, so that the business party can complete the development joint debugging according to the final code. The present application solves the problem of fragmentation of the assessment process and improves the assessment efficiency.

Description

Technical Field

[0001] The present invention relates to the field of Internet, and in particular to a method and device for secure access to a business product. Background Art

[0002] When a business product needs to access an open platform such as Alipay, there are many payment risks involved, including account theft, cheating risk, cash-out risk, money laundering risk, data leakage risk, system vulnerability risk, network attack risk, etc.

[0003] In order to deal with these risks, the platform security technology department not only provides various security protection products, including data risk control products, content security products, human-machine recognition products, etc., but also provides suggestions for business product optimization from a security perspective. The traditional business product access process is promoted by business personnel. Since the process chain of security protection service docking is relatively long and involves many people, and the internal security operation is a black box for the business party, it leads to problems such as fragmentation of the risk assessment process, difficulty in docking security products, and low efficiency of access security services. At present, there is a lack of standardized security access management methods and systems that can accelerate the docking of business products and security protection services on the basis of being able to ensure a comprehensive and effective analysis of business risks from a process perspective. Summary of the invention

[0004] In view of the above technical problems, the embodiments of this specification provide a method and device for secure access to a business product, and the technical solution is as follows:

[0005] According to a first aspect of an embodiment of this specification, a secure access method for a service product is provided, which is applied to an access management system. The method includes:

[0006] Receive business product security access requirements submitted by business parties;

[0007] Generating assessment requests in different directions according to the security access requirements, and sending the assessment requests in different directions to corresponding assessment parties respectively;

[0008] Receive the evaluation result fed back by the evaluation party according to the evaluation request, and determine the security product that the business product needs to be connected with based on the evaluation result;

[0009] According to the security access requirements, determine the connection call example configuration of the security product that the business product needs to connect to, and generate the final code according to the connection call example configuration and different pre-stored code segments, so that the business party can complete the development and joint debugging according to the final code.

[0010] According to a second aspect of an embodiment of this specification, a secure access device for a service product is provided, which is applied to an access management system. The device includes:

[0011] Demand receiving module: used to receive business product security access requirements submitted by business parties;

[0012] A request generation module is used to generate evaluation requests in different directions according to the security access requirements, and send the evaluation requests in different directions to corresponding evaluation parties respectively;

[0013] Result determination module: used to receive the evaluation result fed back by the evaluator according to the evaluation request, and determine the security product that the business product needs to be connected with according to the evaluation result;

[0014] Security docking module: used to determine the connection case configuration of the security product that the business product needs to dock with according to the security access requirements, and generate the final code according to the connection case configuration and different pre-stored code segments, so that the business party can complete the development and debugging according to the final code.

[0015] According to a third aspect of an embodiment of this specification, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, a secure access method for a service product is implemented, which is applied to an access management system, and the method includes:

[0016] Receive business product security access requirements submitted by business parties;

[0017] Generating assessment requests in different directions according to the security access requirements, and sending the assessment requests in different directions to corresponding assessment parties respectively;

[0018] Receive the evaluation result fed back by the evaluation party according to the evaluation request, and determine the security product that the business product needs to be connected with based on the evaluation result;

[0019] According to the security access requirements, determine the connection call example configuration of the security product that the business product needs to connect to, and generate the final code according to the connection call example configuration and different pre-stored code segments, so that the business party can complete the development and joint debugging according to the final code.

[0020] The technical solution provided in the embodiments of this specification provides a standardized security access management method and system, which transforms the original offline risk assessment process of business products into online management, solves the problem of fragmented assessment process, parallelizes the scattered assessment processes, and improves assessment efficiency; at the same time, it solves the problem of difficulty in joint debugging during the access of business products to security products, and accelerates the connection between business products and security products.

[0021] It should be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the embodiments of the present specification.

[0022] In addition, any embodiment in the embodiments of this specification does not need to achieve all the above-mentioned effects. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] In order to more clearly illustrate the embodiments of this specification or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the embodiments of this specification. For ordinary technicians in this field, other drawings can also be obtained based on these drawings.

[0024] Figure 1 It is a flow chart of a method for securely accessing a service product as shown in an exemplary embodiment of this specification;

[0025] Figure 2 This is a schematic diagram of a secure access method for a service product shown in an exemplary embodiment of this specification;

[0026] Figure 3 is another flow chart of a method for securely accessing a service product shown in an exemplary embodiment of this specification;

[0027] Figure 4 It is a schematic diagram of the overall process arrangement of a method for secure access to a service product shown in an exemplary embodiment of this specification;

[0028] Figure 5 It is a schematic diagram of a secure access device for a service product shown in an exemplary embodiment of this specification;

[0029] Figure 6 It is a structural schematic diagram of a computer device shown in an exemplary embodiment of this specification. DETAILED DESCRIPTION

[0030] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The implementations described in the following exemplary embodiments do not represent all implementations consistent with this specification. Instead, they are merely examples of devices and methods consistent with some aspects of this specification as detailed in the appended claims.

[0031] The terms used in this specification are for the purpose of describing specific embodiments only and are not intended to limit this specification. The singular forms "a", "the" and "the" used in this specification and the appended claims are also intended to include plural forms unless the context clearly indicates otherwise. It should also be understood that the term "and / or" used herein refers to and includes any or all possible combinations of one or more associated listed items.

[0032] It should be understood that although the terms first, second, third, etc. may be used in this specification to describe various information, this information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other. For example, without departing from the scope of this specification, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the word "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determining".

[0033] When a business product needs to access an open platform such as Alipay, there are many payment risks involved, including account theft, cheating risk, cash-out risk, money laundering risk, data leakage risk, system vulnerability risk, network attack risk, etc.

[0034] In order to deal with these risks, the platform security technology department not only provides various security protection products, including data risk control products, content security products, human-machine recognition products, etc., but also provides suggestions for business product optimization from a security perspective. The traditional business product access process is promoted by business personnel. Since the process chain of security protection service docking is relatively long and involves many people, and the internal security operation is a black box for the business party, it leads to problems such as fragmentation of the risk assessment process, difficulty in docking security products, and low efficiency of access security services. At present, there is a lack of standardized security access management methods and systems that can accelerate the docking of business products and security protection services on the basis of being able to ensure a comprehensive and effective analysis of business risks from a process perspective.

[0035] In view of the above problems, the embodiments of this specification provide a method for secure access to a service product, and a device for secure access to a service product for executing the method. The method mentioned in the embodiments of this specification is mainly applied to an access management system. The secure access method for a service product involved in this embodiment is described in detail below. Figure 1 As shown, the method may include the following steps:

[0036] S101, receiving the business product security access requirements submitted by the business party;

[0037] Security access requirements may include business scenarios of business products, project background information, etc. The access management system provides an input interface for security access requirements, through which business parties can submit security access requirements for business products.

[0038] S102, generating assessment requests in different directions according to the security access requirement, determining assessment parties corresponding to the assessment requests in different directions according to preset information, and sending the assessment requests in different directions to corresponding assessment parties respectively;

[0039] Assessment requests in different directions may at least include data risk assessment requests, security experience assessment requests, business risk assessment requests, and anti-money laundering risk assessment requests.

[0040] Specifically, data risk assessment mainly evaluates business products from the perspective of data privacy to determine whether the business products meet the requirements for sensitive data protection; security experience assessment mainly evaluates business products from a security perspective combined with user experience to determine whether the user's security experience when using business products is good; anti-money laundering assessment mainly evaluates business products from an anti-money laundering perspective to determine whether business products have loopholes that can be used for money laundering; business risk assessment mainly evaluates business products from the perspective of the risks involved in the business scenarios themselves to determine the security products that the business products need to use.

[0041] The security access system can select the direction to be evaluated in the above risk assessment based on the specific information contained in the security access requirements. Generally, in order to more comprehensively evaluate the security risks of business products, it is necessary to generate four parallel evaluation processes: data risk assessment, security experience assessment, business risk assessment, and anti-money laundering risk assessment, and send each evaluation process to the corresponding different evaluation parties.

[0042] The different assessor information corresponding to the different assessment processes is pre-configured in the access management system. When the assessor changes, the corresponding assessor information needs to be modified in the configuration information of the access management system.

[0043] S103, receiving the evaluation result fed back by the evaluation party according to the evaluation request, and determining the security optimization requirements of the business product itself and the security products that need to be connected with the business product through the evaluation result;

[0044] The evaluation results of data risk assessment, security experience assessment, and anti-money laundering risk assessment can be used to determine the security optimization requirements of the business products themselves, and business risk assessment can be used to determine the security products that the business products need to connect to. After receiving the evaluation results from the evaluator, the business management system can send the evaluation results to the business party so that the business party can complete the optimization according to the optimization requirements of the business products themselves contained in the evaluation results.

[0045] Furthermore, an adoption option can be set in the access management system so that after the evaluation results are sent to the business party, if the business party chooses to adopt all, part or none of the results, the access management system can provide a supplementary interface for each adoption option for the business party to submit the reason for the selection or to submit supplementary information about the business product for re-evaluation.

[0046] S104, determining the connection call example configuration of the security product that the business product needs to connect to according to the security access requirements of the business product, and generating final code according to the connection call example configuration and different pre-stored code segments, so that the business party completes the development and joint debugging according to the final code;

[0047] refer to Figure 2 After completing various assessments, business products and various security products are connected. The connection process can be specifically divided into the connection and use case configuration stage, the development and joint debugging stage, and the pre-release configuration and acceptance stage.

[0048] Among them, joint debugging testing refers to the collaborative testing between systems that needs to be performed before the application system goes online in order to achieve business interaction with other systems through the interface platform. The testing work is led, organized and executed by the interface platform, and is jointly participated by business product parties and security product parties.

[0049] Specifically, during the call case configuration phase, security technicians can configure according to the security access requirements of the business product to determine the call case configuration of the security product that the business product needs to connect to. During the development and debugging phase, the access management system can generate code based on the call case configuration and its own pre-stored code segments corresponding to different call cases, and push the generated code to the business party, so that the business party can complete the code development and testing related to the security access configuration.

[0050] During the pre-launch acceptance stage, the access management system can generate a pre-launch acceptance process, and push the pre-launch acceptance process to the security product party and the business party respectively, so that the security product operator can perform pre-launch configuration and the business party product can perform pre-launch effect acceptance.

[0051] This specification also provides a more specific method for securely accessing a service product. Figure 3 As shown, the method may include the following steps:

[0052] S301, receiving a business product security access requirement submitted by a business party;

[0053] S302, generating assessment requests in different directions according to the security access requirement, determining assessment parties corresponding to the assessment requests in different directions according to preset information, and sending the assessment requests in different directions to corresponding assessment parties respectively;

[0054] S303, receiving the evaluation result fed back by the evaluation party according to the evaluation request, wherein the evaluation result at least includes the business risk evaluation result of the business product, and determining the security product that the business product needs to be connected to from the perspective of the risks involved in the business scenario according to the business risk evaluation result;

[0055] S304, sending the optimization requirements of the business product itself to the business party, so that the business party can optimize the business product;

[0056] S305, receiving the evaluation result fed back by the evaluation party according to the evaluation request, wherein the evaluation result at least includes the business risk evaluation result of the business product, and determining the security product that the business product needs to be connected to from the perspective of the risks involved in the business scenario according to the business risk evaluation result;

[0057] S306, determining, according to the security access requirements of the business product, a configuration of a connection instance of a security product that the business product needs to connect to;

[0058] S307, determining different joint call cases according to the joint call case configuration, determining code segments corresponding to different joint call cases from each pre-stored code segment, and processing and splicing the code segments to generate final code;

[0059] S308: Push the final code to the business party, so that the business party can complete the development joint debugging according to the final code.

[0060] S309, generating a pre-launch acceptance process, and pushing the pre-launch acceptance process to the security product party and the business party respectively, thereby completing the pre-launch configuration and pre-launch effect acceptance.

[0061] refer to Figure 4 , which is the overall process arrangement of the secure access method for the business product provided in the embodiment of this specification during the demand access process.

[0062] Specifically, the process of connecting business scenarios to security protection services is divided into two major stages: business risk assessment and security product docking. The business risk assessment stage is divided into several sub-stages: demand submission, risk assessment, and business feedback. The system requires the product responsible person of the business party to describe the business scenario, project background information, etc. in the demand submission stage. After the demand submission is completed, the system will push the process into the risk assessment sub-stage. The system will generate four assessment processes in parallel in the risk assessment sub-stage: data risk assessment, security experience assessment, business risk assessment, and anti-money laundering risk assessment, and notify the corresponding security assessor of each assessment process to conduct risk assessment. Data risk assessment mainly gives product optimization suggestions from the perspective of data privacy, security experience assessment mainly gives product optimization suggestions from the perspective of security combined with user experience, anti-money laundering assessment mainly gives product optimization suggestions from the perspective of anti-money laundering, and business risk assessment mainly gives recommendations on security products that need to be used from the perspective of risks involved in the business scenario itself.

[0063] After the evaluation is completed, the business side product will decide whether to adopt the evaluation opinions. The business side will implement the adopted business product optimization suggestions. For the adopted security products, the system will generate three sub-stages for each security product connection: joint call case configuration, offline development joint debugging, and pre-release configuration and acceptance; during the security product joint call case configuration stage, dedicated security technicians will perform the configuration, and during the offline development joint debugging stage, the business side technology will complete the code development and testing process under the guidance of the system. During the pre-release acceptance stage, the security product operation personnel will be notified to perform pre-release configuration and the business side product will perform pre-release effect acceptance.

[0064] Corresponding to the above method embodiment, the present specification embodiment also provides a secure access device for a service product, see Figure 5 As shown, the device may include: a demand receiving module 510, a request generating module 520, a result determining module 530, and a secure docking module 540.

[0065] Requirement receiving module 510: used to receive the business product security access requirement submitted by the business party;

[0066] The request generation module 520 is used to generate evaluation requests in different directions according to the security access requirements, determine the evaluation parties corresponding to the evaluation requests in different directions according to the preset information, and send the evaluation requests in different directions to the corresponding evaluation parties respectively;

[0067] Result determination module 530: used to receive the evaluation result fed back by the evaluation party according to the evaluation request, and determine the security optimization requirements of the business product itself and the security products that need to be connected with the business product through the evaluation result;

[0068] Security docking module 540: used to determine the connection case configuration of the security product that the business product needs to dock with according to the security access requirements of the business product, and generate the final code according to the connection case configuration and different pre-stored code segments, so that the business party can complete the development and debugging according to the final code.

[0069] The embodiment of the present specification also provides a computer device, which at least includes a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the secure access method for the aforementioned service product is implemented, which is applied to an access management system, and the method at least includes:

[0070] Receive business product security access requirements submitted by business parties;

[0071] Generating assessment requests in different directions according to the security access requirements, determining assessment parties corresponding to the assessment requests in different directions according to preset information, and sending the assessment requests in different directions to corresponding assessment parties respectively;

[0072] Receive the evaluation results fed back by the evaluation party based on the evaluation request, and determine the security optimization requirements of the business product itself and the security products that need to be connected with the business product through the evaluation results;

[0073] According to the security access requirements of the business products, determine the connection instance configuration of the security products that the business products need to connect to, and generate the final code based on the connection instance configuration and different pre-stored code segments, so that the business party can complete the development and joint debugging according to the final code.

[0074] Figure 6 A more specific hardware structure diagram of a computing device provided in an embodiment of this specification is shown, and the device may include: a processor 1010, a memory 1020, an input / output interface 1030, a communication interface 1040, and a bus 1050. The processor 1010, the memory 1020, the input / output interface 1030, and the communication interface 1040 are connected to each other through the bus 1050 in the device.

[0075] The processor 1010 can be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of this specification.

[0076] The memory 1020 may be implemented in the form of ROM (Read Only Memory), RAM (Random Access Memory), static storage device, dynamic storage device, etc. The memory 1020 may store an operating system and other application programs. When the technical solutions provided in the embodiments of this specification are implemented by software or firmware, the relevant program codes are stored in the memory 1020 and are called and executed by the processor 1010.

[0077] The input / output interface 1030 is used to connect the input / output module to realize information input and output. The input / output module can be configured in the device as a component (not shown in the figure), or it can be externally connected to the device to provide corresponding functions. The input device may include a keyboard, a mouse, a touch screen, a microphone, various sensors, etc., and the output device may include a display, a speaker, a vibrator, an indicator light, etc.

[0078] The communication interface 1040 is used to connect a communication module (not shown) to realize communication interaction between the device and other devices. The communication module can realize communication through a wired mode (such as USB, network cable, etc.) or a wireless mode (such as mobile network, WIFI, Bluetooth, etc.).

[0079] The bus 1050 includes a path that transmits information between the various components of the device (eg, the processor 1010, the memory 1020, the input / output interface 1030, and the communication interface 1040).

[0080] It should be noted that, although the above device only shows the processor 1010, the memory 1020, the input / output interface 1030, the communication interface 1040 and the bus 1050, in the specific implementation process, the device may also include other components necessary for normal operation. In addition, it can be understood by those skilled in the art that the above device may also only include the components necessary for implementing the embodiments of the present specification, and does not necessarily include all the components shown in the figure.

[0081] The embodiment of the present specification also provides a computer-readable storage medium, on which a computer program is stored. When the program is executed by a processor, the secure access method for the aforementioned service product is implemented, and is applied to an access management system. The method at least includes:

[0082] Receive business product security access requirements submitted by business parties;

[0083] Generating assessment requests in different directions according to the security access requirements, determining assessment parties corresponding to the assessment requests in different directions according to preset information, and sending the assessment requests in different directions to corresponding assessment parties respectively;

[0084] Receive the evaluation results fed back by the evaluation party based on the evaluation request, and determine the security optimization requirements of the business product itself and the security products that need to be connected with the business product through the evaluation results;

[0085] According to the security access requirements of the business products, determine the connection instance configuration of the security products that the business products need to connect to, and generate the final code based on the connection instance configuration and different pre-stored code segments, so that the business party can complete the development and joint debugging according to the final code.

[0086] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0087] For the device embodiments, since they basically correspond to the method embodiments, the relevant parts can refer to the partial description of the method embodiments. The device embodiments described above are only schematic, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this specification. Ordinary technicians in this field can understand and implement it without paying creative work.

[0088] It can be known from the above description of the implementation mode that the technicians in this field can clearly understand that the embodiments of this specification can be implemented by means of software plus the necessary general hardware platform. Based on such an understanding, the technical solution of the embodiments of this specification can be essentially or the part that contributes to the prior art can be embodied in the form of a software product, which can be stored in a storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments of this specification.

[0089] The systems, devices, modules or units described in the above embodiments may be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer, which may be in the form of a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email transceiver, a game console, a tablet computer, a wearable device or a combination of any of these devices.

[0090] Each embodiment in this specification is described in a progressive manner, and the same and similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment. The device embodiment described above is merely schematic, wherein the modules described as separate components may or may not be physically separated, and the functions of each module can be implemented in the same one or more software and / or hardware when implementing the embodiment scheme of this specification. It is also possible to select some or all of the modules according to actual needs to achieve the purpose of the embodiment scheme. A person of ordinary skill in the art can understand and implement it without paying creative labor.

[0091] The above is only a specific implementation of the embodiments of this specification. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the embodiments of this specification. These improvements and modifications should also be regarded as the protection scope of the embodiments of this specification.

Claims

1. A secure access method for a service product, applied to an access management system, the method comprising: Receive business product security access requirements submitted by business parties; Generating assessment requests in different directions according to the security access requirements, and sending the assessment requests in different directions to corresponding assessment parties respectively; Receive the evaluation result fed back by the evaluation party according to the evaluation request, and determine the security product that the business product needs to be connected with based on the evaluation result; According to the security access requirements, determine the connection call example configuration of the security product that the business product needs to connect to, and generate the final code according to the connection call example configuration and different pre-stored code segments, so that the business party can complete the development and joint debugging according to the final code.

2. The method according to claim 1, before sending the evaluation requests in different directions to the corresponding evaluation parties respectively, further comprising: Determine the evaluator corresponding to the evaluation request in different directions according to the preset information.

3. The method of claim 2, further comprising: In the case where the evaluator changes, the corresponding evaluator information is updated in the preset information.

4. The method according to claim 1, wherein determining the security product that the business product needs to be connected to based on the evaluation result comprises: Sending the evaluation result to the business party so that the business party can select a target evaluation result to be adopted from the evaluation results; The security products that the business products need to be connected to are determined based on the target evaluation results.

5. The method of claim 4, further comprising: The selection reason or supplementary information about the business product submitted by the business party through the supplementary interface is received; the supplementary information is used for re-evaluation.

6. The method according to claim 1, wherein generating evaluation requests in different directions and sending the evaluation requests in different directions to corresponding evaluation parties respectively comprises: Generate parallel evaluation processes in different directions and send each evaluation process to the corresponding different evaluation parties.

7. The method according to claim 1, wherein the development joint debugging is used to realize the connection between the security product that needs to be connected with the business product and the business product.

8. The method of claim 1, further comprising: The security optimization requirements of the business product itself are determined through the evaluation results.

9. The method according to claim 8, wherein the evaluation result at least includes a data risk evaluation result, a security experience evaluation result and an anti-money laundering evaluation result of the business product; Determining the security optimization requirements of the business product itself through the evaluation results includes: Determine the optimization needs of business products from the perspective of data privacy through data risk assessment results; Determine the optimization needs of business products from the perspective of user security experience through security experience evaluation results; Determine the optimization needs of business products from an anti-money laundering perspective through anti-money laundering assessment results.

10. The method according to claim 1, wherein the receiving evaluation party determines the security product that the business product needs to be connected to based on the evaluation result fed back by the evaluation request, including: The evaluation result fed back by the evaluation party according to the evaluation request is received, and the evaluation result at least includes the business risk evaluation result of the business product, and the security product that the business product needs to be connected with is determined from the perspective of the risks involved in the business scenario according to the business risk evaluation result.

11. The method according to claim 1, wherein generating the final code according to the joint call example configuration and different pre-stored code segments so that the business party completes the development joint debugging according to the final code comprises: Determining different linkage instances according to the linkage instance configuration; Determine the code segments corresponding to different joint call examples from the pre-stored code segments, and process and splice the code segments corresponding to the different joint call examples to generate final code; The final code is pushed to the business party so that the business party can complete the development joint debugging according to the final code.

12. The method according to claim 8, after determining the security optimization requirements of the service product itself through the evaluation results, further comprising: Send the optimization requirements of the business product itself to the business party so that the business party can complete the optimization of the business product.

13. The method according to claim 1, after the service party completes the security access configuration according to the final code, further comprising: The access management system generates a pre-launch acceptance process, and pushes the pre-launch acceptance process to the security product party and the business party respectively, thereby completing the pre-launch configuration and pre-launch effect acceptance.

14. A secure access device for a service product, applied to an access management system, the device comprising: Demand receiving module: used to receive business product security access requirements submitted by business parties; A request generation module is used to generate evaluation requests in different directions according to the security access requirements, and send the evaluation requests in different directions to corresponding evaluation parties respectively; Result determination module: used to receive the evaluation result fed back by the evaluator according to the evaluation request, and determine the security product that the business product needs to be connected with according to the evaluation result; Security docking module: used to determine the connection case configuration of the security product that the business product needs to dock with according to the security access requirements, and generate the final code according to the connection case configuration and different pre-stored code segments, so that the business party can complete the development and debugging according to the final code.

15. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the program, the method according to any one of claims 1 to 13 is implemented.

16. A computer-readable storage medium having a computer program stored thereon, wherein when the program is executed by a processor, the method according to any one of claims 1 to 13 is implemented.

Images