Information marking system and payment marking method based on cloud computing

Abstract

The present invention discloses an information marking system and a payment marking method based on cloud computing. The information marking system includes a marking module for marking data, a domain control management module for verifying the validity of a token, and a de-marking module for restoring the marked data. When the information marking system receives a marking application, the marking module can output a token according to a preset token generation rule, and replace the original data in the marking application with the token; when the information marking system receives a marking restoration application, the domain control management module can verify the validity of the token in the marking restoration application and output a verification result, which is valid or invalid; when the information marking system receives a marking restoration application, if the verification result of the domain control management module for the token in the marking restoration application is valid, the de-marking module can output the original data corresponding to the token. The present invention provides marking and de-marking services, which can cope with any scenario where sensitive data needs to be desensitized.

Description

Technical Field

[0001] The present invention relates to the field of information marking, and in particular to an information marking system and a payment marking method based on cloud computing. Background Art

[0002] In recent years, sensitive data leakage incidents such as bank card numbers have occurred frequently around the world, and fraudulent transactions have increased significantly. With the rapid development of mobile Internet and the payment industry, cardless payments such as mobile payment, biometric payment, and gateway payment have become the mainstream payment methods in China, and have been welcomed by the majority of users due to their convenience, speed, and good experience. However, problems also arise. Cardless payment is a cardless transaction, and there is no authorization ciphertext during the transaction. If sensitive information such as the card number is leaked, how can the issuing bank verify the legitimacy of the transaction? Although traditional encryption methods can be implemented, all links involved in the transaction process need to be transformed, which has a long cycle, high cost, and high price, and also affects the user experience.

[0003] In June 2016, the People's Bank of China issued the "Notice on Further Strengthening Bank Card Risk Management", which clearly required that: from December 1, 2016, all commercial banks and payment institutions should use payment tokenization technology to desensitize information such as bank card numbers, card verification codes, and payment institution payment accounts, so as to control information leakage and fraudulent transaction risks from the source. After that, many documents issued by the People's Bank of China repeatedly required that "commercial banks should use payment tokenization technology." It can be seen that the central bank attaches great importance to protecting sensitive information such as bank card numbers (account numbers), and payment tokenization technology is the best technical means determined by the central bank to solve the problem of cardless transaction verification.

[0004] Payment tokenization technology is the latest technology officially released by EMVCo, the international chip card standard organization, in 2014. The principle is to use a unique value (i.e., payment token) to replace the traditional bank card number (PAN) for transaction verification, while ensuring that the application scope of the value is limited to a specific merchant, channel or device. Payment tokens can be used in all aspects of bank card transactions, and like existing transactions based on bank card numbers, they can be used across banks in the industry. It can be desensitized without reducing usability and ensuring customer experience, so it has received widespread attention from financial institutions as soon as it was launched.

[0005] Traditionally, there are two ways to desensitize data: encryption and hiding. Encryption is to encrypt sensitive information plaintext into ciphertext by using the corresponding encryption algorithm, and then decrypt the ciphertext into plaintext at the node where the plaintext is needed. The ciphertext is a string of irregular character combinations. The encryption method has a wide range of transformation, and all the links involved must be transformed. The ciphertext is a string of garbled characters, which also affects the customer experience. Hiding is to replace some bits of sensitive information with asterisks when displaying sensitive information, so that the sensitive information is not fully displayed. However, during the transmission between systems, the sensitive information is still transmitted in plaintext. Since hiding only desensitizes the data when displaying sensitive information, it does not desensitize the data when transmitting between systems. Therefore, neither of these two methods is the best choice to solve the problem of desensitizing sensitive data. Summary of the invention

[0006] The purpose of the present invention is to provide a cloud computing-based information marking system and payment marking method that can achieve sensitive data protection.

[0007] To achieve the above object, the technical solution adopted by the present invention is as follows:

[0008] An information marking system based on cloud computing, the information marking system comprising:

[0009] A tokenization module, which is configured to be able to tag data. When the information tagging system receives a tagging application, the tokenization module can output a token according to a preset token generation rule and replace the original data in the tagging application with the token;

[0010] A domain control management module, which is configured to verify the validity of a token. When the information marking system receives a marking restoration application, the domain control management module can verify the validity of the token in the marking restoration application and output a verification result, which is valid or invalid.

[0011] The de-tokenization module is configured to be able to restore the marked data. When the information marking system receives a marking restoration application, if the domain control management module verifies that the token in the marking restoration application is valid, the de-tokenization module can output the original data corresponding to the token.

[0012] Furthermore, the token generation rule includes: the generated token includes part of the original data corresponding to itself.

[0013] Furthermore, the validity of the token includes usage time and / or limit and / or usage channel and / or number of uses.

[0014] Furthermore, the tokenization module is also configured to be able to change the token information. When the information tagging system receives a token information change request, the tokenization module can replace the token in the token information change request and / or the original data corresponding to the token;

[0015] The tokenization module is also configured to be able to perform token information query and / or token declaration lifecycle management.

[0016] Furthermore, the tag application, the tag restoration application, and the token information change request all originate from external service requesters, and the service requesters include personal electronic channels and / or corporate electronic channels and / or payment systems and / or IBPS and / or China UnionPay and / or Open Banking.

[0017] Furthermore, the detokenization module is also configured to be able to perform token risk notification and / or token restoration query.

[0018] Further, the information marking system further comprises a risk control module, and the risk control module is configured to be able to perform risk control on the process of the information marking system processing the marking application and / or the marking restoration application;

[0019] The risk control module is also connected to an external telecommunications fraud system and / or a big data anti-fraud platform.

[0020] Furthermore, the domain control management module is also configured to be able to perform TR registration and / or TR audit and / or TR information maintenance and / or TR domain control management and / or channel management and / or scenario management and / or domain control information query.

[0021] Furthermore, the information marking system also includes a system management module and a bypass service module, the system management module is configured to be able to perform UAS authentication synchronization and / or basic parameter management and / or dictionary management and / or scheduled task management and / or transaction monitoring and / or data source monitoring and / or log monitoring; the bypass service module is configured to be able to apply for marking and / or restore marking and / or marking bypass and / or bypass transaction query.

[0022] A payment marking method based on the information marking system described above, an external service requester processes payment business through the payment marking method, the payment marking method includes: in response to the service requester obtaining a token, the service requester sends the token to the information marking system, so that the information marking system restores the token to original data and sends it to the service requester, and then the service requester can perform subsequent payment business according to the original data.

[0023] The advantages of the present invention are as follows: by replacing the original elements, i.e., the original data, with a Token, a token very similar to the original elements can be generated, which can be summarized as "a fake body very similar to the real body". Further, some features of the original elements can be retained according to actual conditions, and the customer experience is not affected when displayed. At the same time, using this token in the transmission process helps prevent the leakage of sensitive information in the transmission process. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0025] Figure 1 is a working schematic diagram of the payment marking method provided by an embodiment of the present invention;

[0026] Figure 2 is a schematic diagram of the architecture of an information marking system provided by an embodiment of the present invention;

[0027] Figure 3 is a principle block diagram of an information marking system provided by an embodiment of the present invention;

[0028] Figure 4 It is a principle block diagram of the middle platform public technical components provided by an embodiment of the present invention;

[0029] Figure 5 is a principle block diagram of a tokenization module provided by an embodiment of the present invention;

[0030] Figure 6 is a principle block diagram of a de-tokenization module provided in an embodiment of the present invention;

[0031] Figure 7 It is a principle block diagram of a domain control management module provided by an embodiment of the present invention;

[0032] Figure 8 is a principle block diagram of a risk control module provided by an embodiment of the present invention;

[0033] Fig. 9 is a principle block diagram of a system management module provided by an embodiment of the present invention;

[0034] Fig.10 is a principle block diagram of a bypass service module provided by an embodiment of the present invention;

[0035] Fig.11 It is an architecture diagram of the information marking system provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0036] In order to enable those skilled in the art to better understand the scheme of the present invention, and to more clearly understand the purpose, technical scheme and advantages of the present invention, the technical scheme in the embodiment of the present invention is clearly and completely described below in conjunction with specific embodiments and with reference to the accompanying drawings. It should be noted that the implementation methods not shown or described in the accompanying drawings are forms known to those skilled in the art. In addition, although demonstrations of parameters containing specific values ​​may be provided herein, it should be understood that the parameters do not need to be exactly equal to the corresponding values, but may be approximated to the corresponding values ​​within an acceptable error tolerance or design constraint. Obviously, the described embodiments are only embodiments of a part of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work should belong to the scope of protection of the present invention. In addition, the terms "including" and "having" in the specification and claims of the present invention and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, device, product or equipment containing a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or equipment.

[0037] In one embodiment of the present invention, a cloud computing-based information tagging system, namely a TSP system, is provided. The TSP system is based on a cloud computing platform. For a specific architecture diagram, see Fig.11 ,like Figure 3 As shown, the information marking system includes a marking module, a domain control management module, and a de-marking module. The marking module is configured to mark data, the domain control management module is configured to verify the validity of the token, and the de-marking module is configured to restore the marked data.

[0038] When the information marking system receives a marking application, the tokenization module can output a token according to the preset token generation rules and replace the original data in the marking application with the token; when the information marking system receives a marking restoration application, the domain control management module can verify the validity of the token in the marking restoration application and output the verification result, which is valid or invalid; when the information marking system receives a marking restoration application, if the domain control management module verifies that the verification result of the token in the marking restoration application is valid, the de-tokenization module can output the original data corresponding to the token.

[0039] Through this TSP system, tags can be divided into payment tags, account tags, contract tags, authorization tags, identity tags and other types according to their purpose, which greatly expands the scenarios for tag use and can meet the protection of sensitive information in various types and scenarios.

[0040] Specifically, the tag application process includes: the tag requester system, i.e., the service requester, i.e., the tag requester TR, applies for registration with the TSP system. After registration, the sensitive information to be marked is sent to the TSP system. The TSP system generates a token for the sensitive information according to the type of tag applied for and the rules of the corresponding type in the TSP system. At the same time, domain control information is sent when applying, such as the validity period, limit, usage channel, and number of times of use of the specified token. These will be checked by domain control when de-marking. When applying for a tag, the risk control module is connected to control the risk of the tag application process. De-marking process: After the sensitive data is marked with a token, the token will be used to transmit it in the scene. When de-marking is required, the de-marking request system sends the token to the TSP system to apply for a restore token. The TSP performs a domain control check on the token. After the domain control check passes, the real data is returned to the requesting system. The requesting system obtains the restored data for subsequent business logic operations.

[0041] like Figure 2 As shown, both the marking application and the marking restoration application originate from an external service requester, namely the marking requester system, namely the marking requester TR. The service requester includes personal electronic channels and / or corporate electronic channels and / or payment systems and / or IBPS and / or NetUnion and / or Open Banking, but the scope of protection of the present invention is not limited thereto.

[0042] In one embodiment of the present invention, the token generation rule includes: the generated token includes part of the original data corresponding to itself. The token generation rule can be configured in the TSP system, such as marking the card number (16 digits), and the rule can be set as the card handle (6 digits) + currency (2 digits) + random part (6 digits) + check digit (2 digits). This rule is that the token is consistent with the card handle of the original element, and a fake body that looks very much like the real body is generated. The advantage is that when interacting with other peripheral systems, other systems can still identify our bank's token through the card handle, such as UnionPay payment scenarios, to achieve compatibility. In addition, the validity of the token includes the usage time limit and / or limit and / or usage channel and / or number of uses, which does not limit the protection scope of the present invention.

[0043] In one embodiment of the present invention, the tokenization module is also configured to be able to change the token information. When the information tagging system receives a token information change request, the tokenization module can replace the token in the token information change request and / or the original data corresponding to the token. Specifically, when an external service requester sends a token information change request to the information tagging system, if the token information change request includes replacing the token, the tokenization module adjusts the token accordingly; if the token change requirement is caused by a change in the original data, then when the token information change request is made, the tokenization module adjusts the token and the original data corresponding to the token accordingly.

[0044] In one embodiment of the present invention, Figure 3 , 4 As shown, the information tagging system also includes the middle platform public technology components and risk control modules; Figure 5 As shown, the tokenization module is also configured to be able to perform token information query and / or token declaration lifecycle management; Figure 6 As shown, the de-tokenization module is also configured to enable token risk notification and / or token restoration query; Figure 7 As shown, the domain control management module is also configured to be able to perform TR registration and / or TR audit and / or TR information maintenance and / or TR domain control management and / or channel management and / or scenario management and / or domain control information query; as Figure 8 As shown, the risk control module is configured to be able to perform risk control on the process of the information marking system processing the marking application and / or the marking restoration application. At the same time, the risk control module is also connected to the external telecommunications fraud system and / or the big data anti-fraud platform for risk sharing; Fig. 9 As shown, the system management module is configured to be able to perform UAS authentication synchronization and / or basic parameter management and / or dictionary management and / or scheduled task management and / or transaction monitoring and / or data source monitoring and / or log monitoring; as Fig.10 As shown, the bypass service module is configured to be able to perform application marking and / or restoration marking and / or marking bypass and / or bypass transaction query.

[0045] In one embodiment of the present invention, the TSP system is a system that provides labeling services for the entire bank, such as Figure 2 As shown, it is divided into front-end and back-end:

[0046] (1) TSP front-end: After business and technical personnel log in to the Unified Authentication System (UAS), they enter the TSP system business management subsystem to perform operations such as system management, parameter setting, query statistics, etc.

[0047] (2) TSP backend: It is divided into eight microservices, including system management, web services, tokenization, de-tokenization, risk control, domain control management, data preparation and large-screen display. System management is connected to the bank's unified authentication system (UAS) to implement user authentication and single sign-on.

[0048] In this embodiment, the TSP system is used in conjunction with an external tag service requester (TR) and a risk control system:

[0049] (1) Tag service requester (TR): The requester who needs tag service inside or outside the bank, such as various electronic channels, payment systems, open banks, etc.; the required tag service is realized through the relevant API interfaces such as tokenization and de-tokenization provided by TSP.

[0050] (2) Risk control system: systems related to the bank’s existing risk control system, such as telecommunications fraud systems, big data anti-fraud platforms, etc. TSP shares fraud information and risk information through API interfaces such as blacklist query and push, and risk data synchronization.

[0051] In this embodiment, the TSP system includes business management, TR management, token management, risk control, identity authentication, domain control, guarantee level, data preparation and system management. The functional modules are shown in the following table:

[0052]

[0053] In one embodiment of the present invention, a payment marking method based on the information marking system described above is provided, and an external service requester processes payment transactions through the payment marking method. The payment marking method includes: in response to the service requester obtaining a token, the service requester sends the token to the information marking system, so that the information marking system restores the token to the original data and sends it to the service requester, and then the service requester can perform subsequent payment transactions based on the original data.

[0054] Specifically, Figure 1 As shown, the marking application process: the marking requester system, i.e. the service requester, i.e. the marking requester TR, sends the original element information that needs to be marked to the marking service provider system TSP, i.e. the information marking system. The marking service provider TR marks the original element according to the information type of the original element that currently needs to be marked according to the corresponding token generation rules. After the marking is completed, the token is returned to the marking requester system. The marking requester system returns the token to the APP for use.

[0055] like Figure 1As shown, the transaction marking process is the payment process: in the payment scenario, the user presents the payment code to the merchant, and the merchant obtains the token, which is also transmitted during the transmission process. When the acquiring system transfers the payment request to the bank for clearing, the clearing system will send the token to the information marking system. After the domain control management module of the information marking system verifies the validity of the token, it will be de-tokenized and then restored to its original elements, that is, the original data, that is, the real account or card number, and returned to the clearing system for subsequent clearing operations.

[0056] The concept of the payment marking method embodiment is the same as the working process of the information marking system in the above embodiment. The entire content of the above information marking system embodiment is incorporated into the payment marking method embodiment by full reference and will not be repeated here.

[0057] The present invention adopts payment tokenization technology, and can completely solve the problems existing in the prior art by building a self-built in-bank information tagging system, namely the TSP system. The TSP system provides tagging and de-tagging services, and can be used in any scenario where sensitive data needs to be desensitized, and completes a tagging and de-tagging process along with the usage scenario. In the process of building the TSP system, it can be divided into payment tags, account tags, contract tags, authorization tags, identity tags and other types according to the purpose of use, which expands the use scenarios of payment tags.

[0058] By building a TSP system by yourself, you can provide services for other systems. As an infrastructure, based on the cloud computing platform, it meets the characteristics of high availability, high concurrency, and high performance. It adopts a multi-center multi-active architecture to provide 7*24 continuous services to ensure business continuity. In addition, since payment tags can be used in various links in various transaction scenarios, they can be used across industries like existing transactions based on sensitive information in plain text. It can desensitize without reducing availability and ensure customer experience. At the same time, the transformation cost of this TSP system is low, it is easy to access, and can meet the data security of the entire system interaction process.

[0059] The above description is only a preferred embodiment of the present invention, and does not limit the patent scope thereof. Any equivalent structure or equivalent process transformation made by using the contents of the present invention specification and drawings, directly or indirectly applied in other related technical fields, is also included in the patent protection scope of the present invention.

Claims

1. An information marking system based on cloud computing, characterized in that: The information marking system comprises: A tokenization module, which is configured to be able to mark data. When the information marking system receives a marking application, the tokenization module can output a token according to a preset token generation rule, and replace the original data in the marking application with the token; the token generation rule includes: the generated token includes part of the original data corresponding to itself; the token generation rule includes setting a rule for marking a 16-digit card number as a 6-digit card handle + a 2-digit currency + a 6-digit random part + a 2-digit check digit, wherein the token is consistent with the card handle of the original data; The tokenization module is also configured to be able to change the token information. When the information tagging system receives a token information change request, if the token information change request includes replacing the token, the tokenization module adjusts the token accordingly; if the token change requirement is caused by a change in the original data, when the token information change request is made, the tokenization module adjusts the token and the original data corresponding to the token accordingly; A domain control management module, which is configured to verify the validity of a token. When the information marking system receives a marking restoration application, the domain control management module can verify the validity of the token in the marking restoration application and output a verification result, which is valid or invalid. a de-tokenization module configured to restore the marked data. When the information marking system receives a marking restoration application, if the domain control management module verifies that the token in the marking restoration application is valid, the de-tokenization module can output the original data corresponding to the token; A risk control module, wherein the risk control module is configured to perform risk control on the process of the information marking system processing the marking application and / or the marking restoration application; the risk control module is also connected to an external telecommunications fraud system and / or a big data anti-fraud platform; A system management module, wherein the system management module is configured to enable UAS authentication synchronization, basic parameter management, dictionary management, scheduled task management, transaction monitoring, data source monitoring, and log monitoring; A bypass service module, wherein the bypass service module is configured to be able to perform application marking, restoration marking, marking bypass and bypass transaction query.

2. The information marking system according to claim 1, characterized in that: The validity of the token includes usage time and / or limit and / or usage channel and / or number of uses.

3. The information marking system according to claim 1, characterized in that: The tokenization module is also configured to be able to perform token information query and / or token declaration lifecycle management.

4. The information marking system according to claim 3, characterized in that: The tag application, the tag restoration application, and the token information change request all originate from external service requesters, and the service requesters include personal electronic channels and / or corporate electronic channels and / or payment systems and / or IBPS and / or China UnionPay and / or Open Banking.

5. The information marking system according to claim 1, characterized in that: The detokenization module is also configured to enable token risk notification and / or token restoration query.

6. The information marking system according to claim 1, characterized in that: The domain control management module is also configured to be able to perform TR registration and / or TR audit and / or TR information maintenance and / or TR domain control management and / or channel management and / or scenario management and / or domain control information query.

7. A payment marking method based on the information marking system of claim 1, characterized in that: An external service requester processes payment transactions through the payment marking method, which includes: in response to the service requester obtaining a token, the service requester sends the token to an information marking system, so that the information marking system restores the token to original data and sends it to the service requester, and then the service requester can perform subsequent payment transactions based on the original data.

Images