Data processing method and apparatus, device, and storage medium
By generating and using identity verification tokens in the internet banking system, the cumbersome process of opening an internet bank card account has been solved, and an efficient account opening process has been achieved.
Patent Information
- Application Number
- CN202110009760.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2021-01-05
- Publication Date
- 2026-02-06
- Estimated Expiration
- 2041-05-15
AI Technical Summary
Opening an online bank card account is cumbersome and inefficient.
The first server generates an identity verification token and asynchronously transmits it to the second server. The second server then sets up a financial account based on the token, reducing the frequency of users uploading identity verification documents in real time.
It improved the efficiency of opening financial accounts, simplified user operations, and reduced server load.
Smart Images

Figure CN114722374B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the technical field of computer, in particular to a data processing method, device, equipment and storage medium. BACKGROUND
[0002] With the rapid development of Internet, cloud computing and big data technologies, Internet banks have also emerged. Internet banks can absorb deposits, issue loans and do settlement and payment, etc.; and serve the world, with simple processes, convenient, efficient and reliable services, which is the inevitable development direction of future banks. Users can complete the opening operation of Internet bank cards in various network environments.
[0003] However, the current user opening operation is cumbersome and inefficient. Therefore, how to quickly open an Internet bank card and improve efficiency is a problem to be solved. SUMMARY
[0004] The embodiments of the present application provide a data processing method, device, equipment and storage medium, which can improve the efficiency of opening a financial account.
[0005] The embodiments of the present application provide a data processing method suitable for a first server, which is a server set up for a payment platform, comprising:
[0006] When receiving an identity proof query request for a target user from a second server, query the identity proof of the target user, the second server being a server set up for a financial institution;
[0007] When the identity proof of the target user is found to exist in the first server, generate an identity proof token of the target user, the identity proof token being used to represent that the identity proof of the target user exists in the first server;
[0008] Send the identity proof token of the target user to the second server, so that the second server sets up a financial account for the target user according to the identity proof token;
[0009] Receive an identity proof acquisition request from the second server, the identity proof acquisition request including the identity proof token;
[0010] Acquire the identity proof of the target user according to the identity proof token;
[0011] Send the identity proof to the second server, so that the second server opens a financial account according to the identity proof.
[0012] The embodiments of the present application provide a data processing method suitable for a second server, which is a server set up for a financial institution, comprising:
[0013] Receive an opening request of a target user;
[0014] based on the account opening request of the target user, sending an identity proof query request for the target user to a first server, the first server being a server set up for a payment platform;
[0015] receiving an identity proof token sent by the first server, the identity proof token being used to represent that the identity proof of the target user exists in the first server;
[0016] setting up a financial account for the target user according to the identity proof token;
[0017] sending an identity proof acquisition request to the first server, the identity proof acquisition request including the identity proof token;
[0018] when receiving the identity proof of the first server, completing the opening of the financial account of the target user.
[0019] The embodiment of the application further provides a data processing apparatus, comprising:
[0020] a query unit, configured to query the identity proof of the target user when receiving an identity proof query request for the target user sent by a second server, the second server being a server set up for a financial institution;
[0021] a generation unit, configured to generate an identity proof token of the target user when it is queried that the identity proof of the target user exists in the first server, the identity proof token being used to represent that the identity proof of the target user exists in the first server;
[0022] a sending unit, configured to send the identity proof token of the target user to the second server, so that the second server sets up a financial account for the target user according to the identity proof token;
[0023] a receiving unit, configured to receive an identity proof acquisition request of the second server, the identity proof acquisition request including the identity proof token;
[0024] an acquisition unit, configured to acquire the identity proof of the target user according to the identity proof token;
[0025] the sending unit is further configured to send the identity proof to the second server, so that the second server opens a financial account for the target user according to the identity proof.
[0026] In some embodiments, the identity proof token has a validity period, and the acquisition unit is specifically configured to:
[0027] verify whether the identity proof token is within the validity period;
[0028] when the identity proof token is within the validity period, acquire the identity proof of the target user;
[0029] When the identity certificate token is not within the validity period, the identity certificate of the target user is rejected, and the second server is fed back rejection information.
[0030] In some embodiments, the first server stores a generation time corresponding to the identity certificate token, and the obtaining unit is specifically configured to:
[0031] When the time difference between the current time and the generation time is not greater than the validity period, the identity certificate token is within the validity period.
[0032] When the time difference between the current time and the generation time is greater than the validity period, the identity certificate token is not within the validity period.
[0033] In some embodiments, the data processing apparatus is further configured to:
[0034] When it is queried that the identity certificate of the target user does not exist in the first server, the second server is fed back query failure information, so that the second server prompts the target user to upload the identity certificate according to the query failure information.
[0035] In some embodiments, the data processing apparatus is further configured to:
[0036] Obtain the identity certificate of the target user;
[0037] According to the identity certificate, the identity authentication interface is called to perform identity authentication processing on the target user, and the identity authentication interface is provided by an institution managing the identity certificate;
[0038] When the target user identity authentication processing is passed, the identity certificate of the target user is stored.
[0039] In some embodiments, the generation unit is configured to:
[0040] Obtain the target token from the token bucket as the identity certificate token of the target user, the tokens in the token bucket are generated at a fixed rate, and the number of tokens in the token bucket does not exceed a preset token number threshold.
[0041] In some embodiments, the data processing apparatus is further configured to:
[0042] When the identity certificate fails to be sent to the second server, the step of receiving the identity certificate obtaining request sent by the second server is performed.
[0043] In some embodiments, the second server is equipped with an Internet banking system, the first server is equipped with a payment system of instant messaging software, and the identity certificate is an identity card image, and the data processing apparatus is further configured to:
[0044] When receiving a query request of the Internet banking system for the identity card image of the target user, the identity card image of the target user is queried.
[0045] When it is queried that the identity card image of the target user exists in the payment system of the instant messaging software, an identity token of the target user is generated, and the identity token is used to represent that the identity card image of the target user exists in the payment system of the instant messaging software;
[0046] The identity token of the target user is sent to the Internet banking system, so that the Internet banking system establishes the Internet banking account for the target user according to the identity token;
[0047] The identity card image acquisition request of the Internet banking system is received, and the identity card image acquisition request includes the identity token;
[0048] The identity card image of the target user is acquired according to the identity token;
[0049] The identity card image is sent to the Internet banking system, so that the Internet banking system opens the Internet banking account of the target user according to the identity card image.
[0050] The embodiment of the application also provides a data processing device, comprising:
[0051] A receiving unit is configured to receive an account opening request of a target user;
[0052] A sending unit is configured to send an identity token query request for the target user to a first server according to the account opening request of the target user, and the first server is a server established for a payment platform;
[0053] The receiving unit is further configured to receive the identity token sent by the first server, and the identity token is used to represent that the identity token of the target user exists in the first server;
[0054] An establishment unit is configured to establish a financial account for the target user according to the identity token;
[0055] The sending unit is further configured to send an identity token acquisition request to the first server, and the identity token acquisition request includes the identity token;
[0056] An opening unit is configured to complete the opening of the financial account of the target user when the identity token of the target user is received from the first server.
[0057] In some embodiments, the data processing device is further configured to:
[0058] Receive query failure information fed back by the first server;
[0059] According to the query failure information, the target user is prompted to upload the identity token.
[0060] In some embodiments, the data processing device is further configured to:
[0061] When the identity proof of the first server is not received, the step of sending an identity proof obtaining request to the first server is performed.
[0062] The embodiment of the present application further provides an electronic device, comprising a memory which stores a plurality of instructions; and a processor which loads the instructions from the memory to perform the steps in any of the data processing methods provided by the embodiment of the present application.
[0063] The embodiment of the present application further provides a computer readable storage medium which stores a plurality of instructions, and the instructions are suitable for being loaded by a processor to perform the steps in any of the data processing methods provided by the embodiment of the present application.
[0064] The embodiment of the present application can query the identity proof of the target user when receiving an identity proof query request of the second server for the target user; generate an identity proof token of the target user when the identity proof of the target user exists in the first server; send the identity proof token of the target user to the second server, so that the second server sets up a financial account for the target user according to the identity proof token; receive an identity proof obtaining request of the second server, and the identity proof obtaining request comprises the identity proof token; obtain the identity proof of the target user according to the identity proof token; and send the identity proof to the second server, so that the second server opens the financial account according to the identity proof.
[0065] In the present application, when the second server sets up a financial account for the target user, the second server can send an identity proof query request to the first server; after the first server receives the identity proof query request, the first server can query whether the identity proof of the target user exists, and when the identity proof exists, the first server sends an identity proof token to the second server; the second server can set up a financial account for the target user according to the token; and the second server can asynchronously obtain the identity proof according to the token, without the target user uploading the identity proof in real time, and the operation is simple. Therefore, the efficiency of opening the financial account is improved. BRIEF DESCRIPTION OF DRAWINGS
[0066] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following will briefly introduce the drawings needed to be used in the embodiment description. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can also be obtained by those skilled in the art without any creative effort based on these drawings.
[0067] Figure 1a is a scene schematic diagram of the data processing method provided by the embodiment of the present application;
[0068] Figure 1b is a schematic diagram of data sharing connection provided by the embodiment of the present application;
[0069] Figure 1c is a structural schematic diagram of a blockchain provided by an embodiment of the present application;
[0070] Figure 1d is a flow schematic diagram of a data processing method provided by an embodiment of the present application;
[0071] Figure 2a is another flow schematic diagram of a data processing method provided by an embodiment of the present application;
[0072] Figure 2b is a scenario schematic diagram of an application opening account provided by an embodiment of the present application;
[0073] Figure 3 is a flow schematic diagram of a data processing method provided by an embodiment of the present application applied in an opening internet bank account scenario;
[0074] Figure 4 is a first structural schematic diagram of a data processing apparatus provided by an embodiment of the present application;
[0075] Figure 5 is another structural schematic diagram of a data processing apparatus provided by an embodiment of the present application;
[0076] Figure 6 is a structural schematic diagram of a first server provided by an embodiment of the present application. DETAILED DESCRIPTION
[0077] The technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work fall within the scope of protection of the present application.
[0078] The embodiments of the present application provide a data processing method, apparatus, device and storage medium.
[0079] The embodiments of the present application also provide a data processing system, which includes the data processing apparatus provided by the embodiments of the present application, such as the data processing apparatus suitable for the first server, the data processing apparatus suitable for the second server, etc.
[0080] In some embodiments, the data processing system can be composed of one or more data processing devices suitable for the first server and data processing devices suitable for the second server. For example, the data processing system can be composed of one data processing device suitable for the first server and one data processing device suitable for the second server; for another example, the data processing system can be composed of one data processing device suitable for the first server and multiple data processing devices suitable for the second server.
[0081] The first server can be a single server or a server cluster composed of multiple servers, and the second server can also be a single server or a server cluster composed of multiple servers.
[0082] For example, referring to Figure 1a A scenario diagram of a data processing system is provided, which can specifically include a first server and a second server. The first server is a server set up for a payment platform, which can be a payment platform of an instant messaging software, a payment platform of an e-commerce software, etc., such as a payment system of WeChat. The second server is a server set up for a financial institution, which can be an Internet bank, an Internet securities company, etc.
[0083] The data processing system can also include a data storage device and a user terminal. The data storage device can be a server installed with a database, which can be the first server, part of the first server cluster, or a server set up by the payment platform. The data storage device can also be a storage medium, such as a floppy disk, a hard disk, an optical disk, etc. The user terminal can be a mobile terminal, a server, etc. The electronic device is installed with software having a payment platform, such as an instant messaging software (e.g., WeChat). The mobile terminal can include a mobile phone, a tablet computer, a smart Bluetooth device, a notebook computer, or a personal computer (PC), etc.
[0084] In Figure 1aIn this invention, a target user can send an account opening request to a second server via a user terminal. Upon receiving the request, the second server sends an identity verification query request to a first server. When the first server receives this query, it searches for the target user's identity verification in a data storage device. If the target user's identity verification is found in the data storage device, an identity verification token is generated and sent to the second server. The second server receives the token and establishes a financial account for the target user based on it. Simultaneously, it sends an identity verification retrieval request, including the identity verification token, to the first server via an asynchronous task. The first server receives this request, retrieves the target user's identity verification from the data storage device based on the token, and sends the identity verification to the second server. When the second server receives the identity verification from the first server, the financial account opening for the target user is complete. This embodiment of the invention allows for asynchronous identity verification based on the token, eliminating the need for the target user to upload their own identity verification, thus simplifying the operation and improving the efficiency of opening a financial account.
[0085] The following sections provide detailed descriptions of each example. It should be noted that the sequence numbers of the following embodiments are not intended to limit the preferred order of the embodiments.
[0086] In some embodiments, Figure 1a The data processing system shown can be used Figure 1b The data sharing connection method shown refers to the ability for nodes to share data. This data processing system can include multiple nodes 101, and the multiple nodes 101 can refer to... Figure 1a The system comprises a first server, a second server, and data storage devices. Each node 101, during normal operation, receives input information and maintains shared data within the data processing system based on this information. To ensure interoperability within the data processing system, information connections exist between each node, enabling information transmission between them. For example, when any node in the data processing system receives input information, other nodes in the system retrieve this input information according to a consensus algorithm and store it as part of the shared data, ensuring data consistency across all nodes. Data processing.
[0087] Each node in the data processing system stores the same blockchain. A blockchain consists of multiple blocks; see [link to blockchain documentation]. Figure 1cThe blockchain is composed of multiple blocks, the initial block includes a block header and a block body, the input information feature value, the version number, the timestamp and the difficulty value are stored in the block header, and the input information is stored in the block body; the next block of the initial block takes the initial block as a parent block, the next block also includes a block header and a block body, the input information feature value of the current block, the block header feature value of the parent block, the version number, the timestamp and the difficulty value are stored in the block header, and the next block is taken as an example, so that the block data stored in each block in the blockchain is associated with the block data stored in the parent block, and the security of the input information in the block is ensured.
[0088] In the embodiment, a data processing method suitable for a first server is provided, as shown in the figure, the specific process of the data processing method can be as follows: Figure 1d
[0089] 101, when receiving the identity proof query request of the second server for the target user, querying the identity proof of the target user.
[0090] The identity proof query request is used to request the first server to query whether there is an identity proof of the target user. The identity proof query request can include but is not limited to the identity of the second server and the user identity of the target user; the identity of the second server can be used to identify the financial institution, such as the ID (Identity Document) of the Internet bank; the user identity can be used to represent the user identity of the target user in the payment platform, such as the WeChat number.
[0091] The identity proof can be used to prove the identity of the holder, and the specific form is not limited, for example, it can be an identity card image (such as a copy, a scan or a photo of an identity card), or it can be a future development of a certificate that can prove the identity of the holder. The first server can query whether there is an identity proof of the target user in the data storage device as shown in the figure; for example, the first server can query whether there is an identity proof in the data storage device according to the user identity of the target user. Figure 1a
[0092] Optionally, the first server can receive the identity proof query request of the second server for the target user through wireless hot spot, Bluetooth or network communication.
[0093] Optionally, before receiving the identity proof query request of the second server for the target user, the first server further performs the following steps.
[0094] The first server obtains the target user's identity verification. For example, the target user can apply to register for a payment platform through a user terminal. When registering for the payment platform, the target user can upload their identity verification through the user terminal and send the identity verification to the first server, which then receives the identity verification.
[0095] The first server uses the identity certificate to call an authentication interface to perform authentication processing on the target user. This authentication interface is provided by an organization that manages identity certificates. This organization could be a public security management agency, and the authentication interface is developed and provided by that agency. Calling this interface allows for authentication processing, such as verifying the validity of the target user's identity certificate and whether the identity certificate matches the target user (holder).
[0096] When processing target user authentication, the target user's identity certificate is stored. In one implementation, the target user's identity certificate can be stored in a data storage device; for example, in a database, which can be a relational database or a non-relational database, and this embodiment of the invention is not limited thereto. In another implementation, it can be... Figure 1c The blockchain shown is used to store the identity verification of the target user. The first server and the server corresponding to the institution can act as nodes in the data processing system, and the identity verification of the target user can be used as input information. After the identity verification is successful, the identity verification is stored in the blockchain.
[0097] For example, a target user opens an instant messaging application on their terminal, enters the payment system, applies to register for the payment system, and uploads an identity photo. The user terminal sends the application request and the ID photo to a first server. After receiving the application and ID photo, the first server calls the identity verification interface to verify the target user's identity. If the verification is successful, the target user's identity certificate is stored in the database.
[0098] 102. When the identity certificate of the target user is found in the first server, generate the identity certificate token of the target user.
[0099] The identity verification token is used to represent the identity verification of the target user in the first server; the identity verification token is a random string, and the specific implementation method for generating the identity verification token is not limited, and may include, but is not limited to, the following implementation methods.
[0100] In some embodiments, the identity verification token is randomly generated by the first server when it finds that the target user's identity verification exists in the first server.
[0101] In some embodiments, when the target user's identity verification is found on the first server, a target token can be obtained from the token bucket as the target user's identity verification token. The target token can be any token in the token bucket. Tokens in the token bucket are generated at a fixed rate, which represents the periodic addition of tokens to the token bucket. The number of tokens in the token bucket does not exceed a preset token count threshold, which represents the size of the token bucket. This threshold can adaptively change according to the overall load of the first server or can be preset, such as by manual configuration by the operations system. This method of generating identity verification tokens can be called the token bucket algorithm. If there are tokens in the token bucket, sending an identity verification token to the second server is allowed; otherwise, sending an identity verification token to the second server is not allowed. Therefore, the token bucket algorithm can be used to control the amount of data sent over the network and allow for bursty data transmission. This ensures that the traffic to the first server does not exceed its maximum load, effectively preventing server crashes.
[0102] Optionally, when the first server finds that the target user's identity verification does not exist, the first server sends a query failure message to the second server, so that the second server can prompt the target user to upload their identity verification based on the query failure message. The query failure message indicates that the target user's identity verification does not exist on the first server.
[0103] As shown above, when the target user's identity verification is found on the first server, the second server can obtain the target user's identity verification through the identity verification token. This eliminates the need for the target user to upload their identity verification in real time, simplifying the process and reducing the frequency of user identity verification, thus improving user experience. Furthermore, the second server does not need to call the authentication interface to verify the target user's identity verification, reducing server load and improving the efficiency of opening financial accounts.
[0104] 103. Send the target user's identity verification token to the second server so that the second server can set up a financial account for the target user based on the identity verification token.
[0105] For details on how the second server establishes a financial account for the target user based on the identity verification token, please refer to [link / reference]. Figure 2a Step 204 in the data processing method shown will not be repeated here.
[0106] 104. Receive an identity verification request from the second server, which includes an identity verification token.
[0107] In some embodiments, sending an identity verification token to the second server is equivalent to granting the second server the right to obtain identity verification from the first server. Therefore, the first server will only respond to the second server's request if the identity verification request includes an identity verification token; otherwise, it will not respond to the second server's request.
[0108] 105. Obtain the target user's identity verification based on the identity verification token.
[0109] Optionally, the identity verification token has an expiration date, which represents the duration for which the second server has the right to obtain identity verification using the token. When the first server receives an identity verification request from the second server, it may also perform the following steps.
[0110] The first server verifies whether the identity verification token is within its validity period. The validity period can be preset, such as 1 hour, 12 hours, or 24 hours; this embodiment of the invention does not impose any limitations. Optionally, the specific implementation of the first server's verification of the identity verification token's validity period is not limited. For example, the first server stores the generation time corresponding to the identity verification token, which represents the time when the identity verification token was generated. For instance, the first server maintains a token information table, as shown in Table 1. This token information table may include, but is not limited to, the identity verification token, the generation time corresponding to the token, the user identifier of the target user corresponding to the token, and the identity verification certificate corresponding to the token. The token information table is shown in Table 1.
[0111] Identity proof token Time of generation User identification Identity proof … Token 1 19 / 6 / 10 12:30:12 xxxxx xxxx …
[0112] Table 1
[0113] After receiving the identity verification request from the second server, the first server can obtain the current time and compare it with the generation time. If the time difference between the current time and the generation time is not greater than the validity period, the identity verification token is valid; if the time difference between the current time and the generation time is greater than the validity period, the identity verification token is not valid.
[0114] When the identity verification token is valid, the first server obtains the target user's identity verification. For example, the first server retrieves the identity verification corresponding to the identity verification token from the data storage device.
[0115] When the identity verification token is expired, the system refuses to obtain the target user's identity verification and sends a rejection message to the second server. This rejection message indicates to the second server that the identity verification token is no longer valid. Therefore, the second server can only obtain the target user's identity verification from the first server when the identity verification token is valid, thus improving the security of the entire data processing system.
[0116] 106. Send identity verification to the second server so that the second server can open the target user's financial account based on the identity verification.
[0117] Optionally, network jitter may affect data communication between the first and second servers, such as packet loss. When the first server fails to send identity verification to the second server, it executes the step of receiving the identity verification retrieval request sent by the second server. Therefore, during network jitter, the second server can re-obtain the target user's identity verification based on the identity verification token, improving the success rate of ultimately obtaining identity verification and increasing the efficiency of opening a financial account.
[0118] The data processing solution provided in this invention can be applied to various scenarios for opening financial accounts. For example, taking the opening of an internet bank account as an example, in this scenario, a target user can apply to open an internet bank account through the instant messaging software on the user's terminal. After receiving the target user's account opening request, the internet bank system (second server) can query whether the target user's identity certificate exists through the payment system of the instant messaging software (first server). If the identity certificate exists, a token is returned. The internet bank system can then establish an internet bank account for the target user based on this token. Furthermore, the identity certificate can be obtained asynchronously based on the token, eliminating the need for the target user to upload their identity certificate in real time, thus simplifying the operation. The solution provided in this invention can reduce the frequency of users uploading identity certificates, improve user experience, and the asynchronous acquisition of identity certificates can reduce the server load, thereby improving the efficiency of opening financial accounts.
[0119] As can be seen from the above, the embodiments of the present invention can, upon receiving a query request from the second server for the identity verification of a target user, query the target user's identity verification; if the target user's identity verification exists in the first server, generate an identity verification token for the target user; send the target user's identity verification token to the second server so that the second server can establish a financial account for the target user based on the identity verification token; receive an identity verification retrieval request from the second server, the identity verification retrieval request including the identity verification token; retrieve the target user's identity verification based on the identity verification token; and send the identity verification to the second server so that the second server can open a financial account based on the identity verification. This improves the efficiency of opening a financial account.
[0120] Therefore, after the target user's identity verification is completed, the first server can store the identity verification certificate in the database. When the second server requests to query the target user's identity verification certificate, it can return an identity verification token, which the second server can use to establish a financial account. The second server can also asynchronously retrieve the target user's identity verification certificate based on this token. This reduces the frequency of users uploading identity verification certificates and the frequency of calling the authentication interface, thus simplifying user operations, reducing server load, and improving the efficiency of opening financial accounts.
[0121] In this embodiment, a data processing method is provided, applicable to a second server, such as... Figure 2a As shown, the specific flow of this data processing method can be as follows:
[0122] 201. Receive the account opening request from the target user.
[0123] The target user can be any user using a user terminal. The account opening request can be a request initiated by the target user through the user terminal to open a financial account. The financial account can be a basic bank account, a general bank account, or a temporary bank account; or other financial accounts, such as stock accounts, wealth management accounts, etc., which are not limited in this embodiment of the invention. The account opening request may include, but is not limited to, the target user's basic information (such as name, contact information, etc.) and user identifier.
[0124] For example, such as Figure 2b As shown, the target user opens the instant messaging software installed on their terminal and enters the payment system. The payment system's user interface displays a link to the internet bank. Clicking this link leads to the internet bank's account opening interface. After filling in basic information, the user can click the "Apply for Account" button to submit an account opening application. The user terminal responds to the user's action by sending the account opening application to a second server (the internet bank system). The second server then receives the target user's account opening request.
[0125] 202. Based on the target user's account opening request, send an identity verification request for the target user to the first server.
[0126] For example, after receiving an account opening request from a target user, the second server responds to the request. When it detects that the target user's identity verification is required, it sends an identity verification query request to the first server.
[0127] 203. Receive the identity verification token sent by the first server. The identity verification token is used to represent the identity verification of the target user in the first server.
[0128] Optionally, when the target user's identity verification does not exist on the first server, the second server receives a query failure message from the first server and prompts the target user to upload identity verification based on the message. The query failure message indicates that the target user's identity verification does not exist on the first server. For example, upon receiving the query failure message from the first server, the second server notifies the user terminal that the target user needs to upload identity verification; the user terminal displays an identity verification upload interface, which prompts the target user to upload identity verification.
[0129] 204. Establish financial accounts for target users based on identity verification tokens.
[0130] This section describes the actions performed after identity verification to establish a financial account for the target user. These actions may include, but are not limited to, assigning an account number (bank card number) to the target user and prompting the user to set a password. However, the financial account is not yet fully activated; no notification of successful account activation will be sent to the target user. Upon receiving the identity verification token from the first server, the target user's identity verification process is considered complete, and the second server can then begin executing the actions following the successful verification. This eliminates the need to wait for the verification result, thus improving the efficiency of opening a financial account.
[0131] 205. Send an identity verification request to the first server, the identity verification request including an identity verification token.
[0132] It should be noted that the second server can place the identity verification request sent to the first server into an asynchronous task queue, waiting for the tasks ahead in the queue to complete before executing. That is, steps 204 and 205 can be executed simultaneously, or step 204 can be executed first and then step 205, or step 205 can be executed first and then step 204; this embodiment of the invention does not impose any restrictions. Therefore, the second server can asynchronously obtain identity verification via identity verification tokens during off-peak hours, reducing server load.
[0133] Optionally, when the identity verification token included in the identity verification request is not valid, the second server receives a rejection message from the first server. This rejection message indicates to the second server that the identity verification token is not valid. After receiving the rejection message, the second server can send another identity verification query request to the first server, thereby obtaining a new, valid identity verification token, which can then be used to obtain the target user's identity verification. Alternatively, the second server can notify the user terminal that the target user needs to upload their identity verification; the user terminal displays an identity verification upload interface, prompting the target user to upload their identity verification. Therefore, the second server can only obtain the target user's identity verification from the first server when the identity verification token is valid, thus improving the security of the entire data processing system.
[0134] 206. Upon receiving the identity verification from the first server, complete the activation of the target user's financial account.
[0135] Optionally, after the target user's financial account is successfully opened, the second server can send a message to the user terminal indicating that the financial account has been successfully opened. The user terminal will then display a message indicating that the target user's financial account has been successfully opened through the account opening success interface.
[0136] Optionally, network jitter may affect data communication between the first and second servers, such as packet loss. When the second server does not receive the identity verification from the first server, it executes the step of sending an identity verification retrieval request to the first server. Therefore, during network jitter, the second server can re-obtain the target user's identity verification based on the identity verification token, which can improve the success rate of ultimately obtaining identity verification and increase the efficiency of opening a financial account.
[0137] As can be seen from the above, the embodiments of the present invention can receive an account opening request from a target user; based on the target user's account opening request, send an identity verification query request for the target user to a first server, the first server being a server established by the payment platform; receive an identity verification token sent by the first server, the identity verification token being used to indicate that the target user's identity verification exists in the first server; establish a financial account for the target user based on the identity verification token; send an identity verification retrieval request to the first server, the identity verification retrieval request including the identity verification token; and when the identity verification is received from the first server, the opening of the target user's financial account is completed. This improves the efficiency of opening a financial account.
[0138] Therefore, in this embodiment, when the second server establishes a financial account for a target user, it can send an identity verification query request to the first server. If the first server has the identity verification, the second server receives the identity verification token sent by the first server. The second server can then establish a financial account for the target user based on this token. Furthermore, the second server can asynchronously obtain the identity verification based on this token, eliminating the need for the target user to upload their identity verification in real time, thus simplifying the operation. This improves the efficiency of opening a financial account.
[0139] The method described in the above embodiments will be further described in detail below.
[0140] In this embodiment, we will take the example of a first server running WeChat's payment system (hereinafter referred to as the payment system) and a second server running an internet banking system, for reference... Figure 3 The schematic diagram of the data processing system shown illustrates the method of this embodiment of the invention in detail.
[0141] like Figure 3 As shown, the first server can be a server cluster, which also includes a server with a database installed. The data processing system also includes a user terminal with WeChat installed, which can be a smartphone. The data processing system further includes a third server, which provides an authentication interface and can be established by a public security management agency that manages identity verification.
[0142] like Figure 3 As shown, the specific process of a data processing method is as follows:
[0143] 301. The target user sends a request to register for WeChat Pay through their user terminal.
[0144] 302. The user terminal prompts the target user to upload an image of their ID card (such as a photo of their ID card) and sends the ID card image to the payment system.
[0145] 303. The payment system calls the authentication interface of the third server to perform authentication processing on the target user based on the ID card image.
[0146] 304. When the target user's identity verification is successful, the payment system stores the target user's ID card image in the database. Optionally, if the target user's identity verification is unsuccessful, the target user's registration request is ignored.
[0147] 305. The target user sends an account opening request to the internet banking system through their user terminal, requesting the activation of an internet Class II card (financial account). The internet Class II card is a type of virtual bank card issued by the internet bank. Users requesting to activate an internet Class II card are required to upload an image of their ID card and successfully complete identity verification.
[0148] 306. Based on the account opening request of the target user, the Internet banking system sends an identity verification request to the payment system. The identity verification request is used to request the first server to check whether the target user's ID card image exists.
[0149] 307. When the payment system receives a query request for the identity verification of a target user, it queries the database to see if the target user's ID card image exists, that is, whether the target user successfully uploaded an ID card image when applying for WeChat Pay registration.
[0150] 308. When the target user's ID card image is found in the database, the payment system generates an identity verification token for the target user. For example, the payment system generates the target user's token (identity verification token) according to the token bucket algorithm.
[0151] 309. The payment system sends a token to the internet banking system so that the internet banking system can set up an internet Class II card for the target user based on the token.
[0152] 310. Once the internet banking system receives the token, it can set up an internet-based Class II credit card for the target user.
[0153] 311. The internet banking system sends an identity verification request to the payment system to asynchronously obtain the target user's ID card image. This identity verification request includes a token.
[0154] 312. The payment system retrieves the target user's ID card image from the database based on the token.
[0155] 313. The payment system sends an ID card image to the internet banking system. Correspondingly, when the internet banking system receives the ID card image from the payment system, it completes the activation of the target user's internet Class II card.
[0156] 314. The internet banking system sends a notification to the user terminal that the card opening was successful. The user terminal displays a message on the account opening success screen indicating that the target user's Internet Class II card has been successfully activated.
[0157] As can be seen from the above, the embodiments of the present invention can, when receiving an identity verification query request from an internet banking system for a target user, query the target user's identity verification; when the target user's identity verification is found in the WeChat payment system, generate an identity verification token for the target user; send the target user's identity verification token to the internet banking system so that the internet banking system can establish a financial account for the target user based on the identity verification token; receive an identity verification acquisition request from the internet banking system, the identity verification acquisition request including the identity verification token; acquire the target user's identity verification based on the identity verification token; and send the identity verification to the internet banking system so that the internet banking system can open a financial account based on the identity verification.
[0158] Therefore, when setting up a financial account for a target user, the internet banking system can send an ID card image query request to WeChat's payment system. Upon receiving the request, WeChat's payment system can check if an ID card image of the target user exists. If an image exists, it sends an ID card image token to the internet banking system. The internet banking system can then use this token to set up the financial account for the target user. Furthermore, it can asynchronously obtain the ID card image based on this token, eliminating the need for the target user to upload an image, simplifying the process. This significantly improves the efficiency of opening an internet banking account.
[0159] To better implement the above methods, embodiments of the present invention also provide a data processing device, which can be integrated into an electronic device, such as a terminal or a server. The terminal can be a mobile phone, tablet computer, smart Bluetooth device, laptop computer, personal computer, or similar device; the server can be a single server or a server cluster composed of multiple servers.
[0160] For example, in this embodiment, the method of the present invention will be described in detail by taking the data processing device specifically integrated into the first server as an example.
[0161] For example, such as Figure 4 As shown, the data processing device may include a query unit 401, a generation unit 402, a sending unit 403, a receiving unit 404, and an acquisition unit 405, as follows:
[0162] (a) Query Unit 401:
[0163] The query unit 401 is used to query the identity certificate of the target user when it receives a query request for the identity certificate of the target user from the second server. The second server is a server set up by a financial institution.
[0164] In some embodiments, the query unit 401 can also be used to perform the following steps:
[0165] If the first server does not contain the target user's identity verification, a query failure message is sent to the second server, so that the second server can prompt the target user to upload identity verification based on the query failure message.
[0166] (ii) Generation unit 402:
[0167] The generation unit 402 is used to generate an identity token for the target user when the identity certificate of the target user is found in the first server. The identity token is used to represent that the identity certificate of the target user exists in the first server.
[0168] In some embodiments, the generation unit 402 can also be used to perform the following steps:
[0169] The target token is obtained from the token bucket as the identity verification token for the target user. The tokens in the token bucket are generated at a fixed rate, and the number of tokens in the token bucket does not exceed a preset token number threshold.
[0170] (III) Transmitting Unit 403:
[0171] The sending unit 403 is used to send the target user's identity verification token to the second server so that the second server can set up a financial account for the target user based on the identity verification token.
[0172] (iv) Receiving unit 404:
[0173] Receiving unit 404 is used to receive an identity verification request from the second server, the identity verification request including an identity verification token;
[0174] (V) Acquisition Unit 405:
[0175] The acquisition unit 405 is used to obtain the identity verification of the target user based on the identity verification token.
[0176] In some embodiments, the identity verification token has an expiration date, and the obtaining unit 405 may also be used to perform the following steps:
[0177] Verify whether the identity verification token is valid;
[0178] When the identity verification token is valid, obtain the target user's identity verification.
[0179] When the identity verification token expires, the system refuses to obtain the target user's identity verification and sends a rejection message to the second server.
[0180] In some embodiments, the first server stores the generation time corresponding to the identity verification token, and the acquisition unit 405 can also be used to perform the following steps:
[0181] The identity verification token is valid as long as the time difference between the current time and the generation time is not greater than the validity period.
[0182] The identity verification token is not valid if the time difference between the current time and the generation time is greater than the expiration date.
[0183] (vi) Transmitting unit 403:
[0184] The sending unit 403 is also used to send an identity certificate to the second server so that the second server can open a financial account for the target user based on the identity certificate.
[0185] In some embodiments, the data processing apparatus may further be used to perform the following steps:
[0186] Obtain the target user's identity verification;
[0187] The identity verification interface is retrieved based on the identity certificate to perform identity verification processing on the target user. The identity verification interface is provided by the organization that manages the identity certificate.
[0188] When processing through target user authentication, store the target user's identity credentials.
[0189] In some embodiments, the data processing apparatus may further be used to perform the following steps:
[0190] If sending identity verification to the second server fails, execute the step of receiving the identity verification retrieval request sent by the second server.
[0191] In some embodiments, the second server is equipped with an internet banking system, the first server is equipped with a payment system of instant messaging software, the identity verification is an ID card image, and the data processing device is further used to perform the following steps:
[0192] When a query request for a target user's ID card image is received from the internet banking system, the target user's ID card image is queried.
[0193] When the payment system of the instant messaging software finds the ID card image of the target user, an identity verification token for the target user is generated. The identity verification token is used to verify that the payment system of the instant messaging software contains the ID card image of the target user.
[0194] Send the target user's identity verification token to the internet banking system so that the internet banking system can set up an internet banking account for the target user based on the identity verification token;
[0195] Receives a request to obtain an ID card image from an internet banking system. The ID card image request includes an identity verification token.
[0196] Obtain the target user's ID card image based on the identity verification token;
[0197] Send an ID card image to the internet banking system so that the internet banking system can open an internet banking account for the target user based on the ID card image.
[0198] As can be seen from the above, the embodiments of the present invention can, upon receiving a query request from the second server for the identity verification of a target user, query the target user's identity verification; if the target user's identity verification exists in the first server, generate an identity verification token for the target user; send the target user's identity verification token to the second server so that the second server can establish a financial account for the target user based on the identity verification token; receive an identity verification retrieval request from the second server, the identity verification retrieval request including the identity verification token; retrieve the target user's identity verification based on the identity verification token; and send the identity verification to the second server so that the second server can open a financial account based on the identity verification. This improves the efficiency of opening a financial account.
[0199] Therefore, after the target user's identity verification is completed, the first server can store the identity verification certificate in the database. When the second server requests to query the target user's identity verification certificate, it can return an identity verification token, which the second server can use to establish a financial account. The second server can also asynchronously retrieve the target user's identity verification certificate based on this token. This reduces the frequency of users uploading identity verification certificates and the frequency of calling the authentication interface, thus simplifying user operations, reducing server load, and improving the efficiency of opening financial accounts.
[0200] To better implement the above methods, embodiments of the present invention also provide a data processing device, which can be integrated into an electronic device, such as a terminal or a server. The terminal can be a mobile phone, tablet computer, smart Bluetooth device, laptop computer, personal computer, or similar device; the server can be a single server or a server cluster composed of multiple servers.
[0201] For example, in this embodiment, the method of the present invention will be described in detail by taking the data processing device specifically integrated into the second server as an example.
[0202] For example, such as Figure 5 As shown, the data processing device may include a receiving unit 501, a sending unit 502, a setting unit 503, and an activation unit 504, as follows:
[0203] (a) Receiving unit 501:
[0204] The receiving unit 501 is used to receive the account opening request of the target user.
[0205] (II) Transmitting Unit 502:
[0206] The sending unit 502 is used to send an identity verification query request for the target user to the first server based on the target user's account opening request. The first server is a server set up by the payment platform.
[0207] The receiving unit 501 is also used to receive an identity verification token sent by the first server, the identity verification token being used to represent the identity verification of the target user in the first server.
[0208] (III) Establishing Unit 503:
[0209] Unit 503 is used to set up a financial account for a target user based on an identity verification token.
[0210] The sending unit 502 is also used to send an identity verification request to the first server, the identity verification request including an identity verification token.
[0211] (iv) Unit 504
[0212] The activation unit 504 is used to activate the target user's financial account when the identity certificate of the first server is received.
[0213] In some embodiments, the receiving unit 501 is further configured to perform the following steps:
[0214] Receive query failure information from the first server;
[0215] The query failure message prompts the target user to upload proof of identity.
[0216] In some embodiments, the sending unit 502 is further configured to perform the following steps:
[0217] If the identity verification is not received from the first server, execute the step of sending an identity verification request to the first server.
[0218] As can be seen from the above, the embodiments of the present invention can receive an account opening request from a target user; based on the target user's account opening request, send an identity verification query request for the target user to a first server, the first server being a server established by the payment platform; receive an identity verification token sent by the first server, the identity verification token being used to indicate that the target user's identity verification exists in the first server; establish a financial account for the target user based on the identity verification token; send an identity verification retrieval request to the first server, the identity verification retrieval request including the identity verification token; and when the identity verification is received from the first server, the opening of the target user's financial account is completed. This improves the efficiency of opening a financial account.
[0219] Therefore, in this embodiment, when the second server establishes a financial account for a target user, it can send an identity verification query request to the first server. If the first server has the identity verification, the second server receives the identity verification token sent by the first server. The second server can then establish a financial account for the target user based on this token. Furthermore, the second server can asynchronously obtain the identity verification based on this token, eliminating the need for the target user to upload their identity verification in real time, thus simplifying the operation. This improves the efficiency of opening a financial account.
[0220] In practice, each of the above units can be implemented as an independent entity or can be arbitrarily combined to be implemented as the same or several entities. For the specific implementation of each of the above units, please refer to the previous method embodiments, which will not be repeated here.
[0221] This invention also provides an electronic device, which can be a terminal, a server, or other similar devices. The terminal can be a mobile phone, tablet computer, smart Bluetooth device, laptop computer, personal computer, etc.; the server can be a single server or a server cluster composed of multiple servers, etc.
[0222] In some embodiments, the data processing apparatus may also be integrated into multiple electronic devices, such as multiple servers, with the data processing method of the present invention being implemented by the multiple servers.
[0223] In this embodiment, the electronic device will be described in detail as the first server. For example, as shown below... Figure 6 As shown, it illustrates a structural schematic diagram of the first server involved in an embodiment of the present invention, specifically:
[0224] The first server may include components such as a processor 601 with one or more processing cores, a memory 602 with one or more computer-readable storage media, a power supply 603, an input module 604, and a communication module 605. Those skilled in the art will understand that... Figure 6 The first server structure shown does not constitute a limitation on the first server and may include more or fewer components than shown, or combine certain components, or have different component arrangements. Wherein:
[0225] The processor 601 is the control center of the first server, connecting various parts of the first server via various interfaces and lines. It performs various functions and processes data by running or executing software programs and / or modules stored in the memory 602, and by calling data stored in the memory 602, thereby performing overall detection of the first server. In some embodiments, the processor 601 may include one or more processing cores; in some embodiments, the processor 601 may integrate an application processor and a modem processor, wherein the application processor mainly handles the operating system, user interface, and applications, and the modem processor mainly handles wireless communication. It is understood that the modem processor may also not be integrated into the processor 601.
[0226] The memory 602 can be used to store software programs and modules. The processor 601 executes various functional applications and data processing by running the software programs and modules stored in the memory 602. The memory 602 may mainly include a program storage area and a data storage area. The program storage area may store the operating system, application programs required for at least one function (such as sound playback function, image playback function, etc.), etc.; the data storage area may store data created according to the use of the first server, etc. In addition, the memory 602 may include high-speed random access memory, and may also include non-volatile memory, such as at least one disk storage device, flash memory device, or other volatile solid-state storage device. Accordingly, the memory 602 may also include a memory controller to provide the processor 601 with access to the memory 602.
[0227] The first server also includes a power supply 603 that supplies power to the various components. In some embodiments, the power supply 603 can be logically connected to the processor 601 through a power management system, thereby enabling functions such as charging, discharging, and power consumption management through the power management system. The power supply 603 may also include one or more DC or AC power supplies, recharging systems, power fault detection circuits, power converters or inverters, power status indicators, and other arbitrary components.
[0228] The first server may also include an input module 604, which can be used to receive input numeric or character information and generate keyboard, mouse, joystick, optical or trackball signal inputs related to user settings and function control.
[0229] The first server may also include a communication module 605. In some embodiments, the communication module 605 may include a wireless module. The first server can use the wireless module of the communication module 605 to perform short-range wireless transmission, thereby providing users with wireless broadband Internet access. For example, the communication module 605 can be used to help users send and receive emails, browse web pages, and access streaming media.
[0230] Although not shown, the first server may also include a display unit, etc., which will not be described in detail here. Specifically, in this embodiment, the processor 601 in the first server loads the executable files corresponding to the processes of one or more applications into the memory 602 according to the following instructions, and the processor 601 runs the applications stored in the memory 602 to realize various functions, as follows:
[0231] When a query request for the target user's identity verification is received from the second server (a server established by a financial institution), the system queries the target user's identity verification. If the target user's identity verification is found on the first server, an identity verification token for the target user is generated. This token is used to verify the existence of the target user's identity verification on the first server. The system then sends the target user's identity verification token to the second server, enabling the second server to establish a financial account for the target user based on the token. The system also receives an identity verification retrieval request from the second server, which includes the identity verification token. The system retrieves the target user's identity verification based on the token and sends the identity verification to the second server, enabling the second server to open a financial account for the target user based on the identity verification.
[0232] For example, in some embodiments, the identity verification token has an expiration date and can also achieve the following functions:
[0233] Verify if the identity verification token is valid; if the identity verification token is valid, obtain the target user's identity verification; if the identity verification token is not valid, refuse to obtain the target user's identity verification and send a rejection message to the second server.
[0234] For example, in some embodiments, the first server stores the generation time corresponding to the identity verification token, and can also achieve the following functions:
[0235] The identity verification token is valid if the time difference between the current time and the generation time is not greater than the validity period; otherwise, the identity verification token is not valid.
[0236] For example, in some embodiments, the following functions can also be achieved:
[0237] If the first server does not contain the target user's identity verification, a query failure message is sent to the second server, so that the second server can prompt the target user to upload identity verification based on the query failure message.
[0238] For example, in some embodiments, the following functions can also be achieved:
[0239] Obtain the target user's identity certificate; based on the identity certificate, call the identity verification interface to perform identity verification processing on the target user. The identity verification interface is provided by the organization that manages identity certificates; when the target user's identity verification processing is successful, store the target user's identity certificate.
[0240] For example, in some embodiments, the following functions can also be achieved:
[0241] The target token is obtained from the token bucket as the identity verification token for the target user. The tokens in the token bucket are generated at a fixed rate, and the number of tokens in the token bucket does not exceed a preset token number threshold.
[0242] For example, in some embodiments, the following functions can also be achieved:
[0243] If sending identity verification to the second server fails, execute the step of receiving the identity verification retrieval request sent by the second server.
[0244] For example, in some embodiments, the second server is equipped with an internet banking system, the first server is equipped with a payment system of instant messaging software, the identity verification is an ID card image, and the following functions can also be achieved:
[0245] When a query request for a target user's ID card image is received from the internet banking system, the system queries the target user's ID card image. If the target user's ID card image is found in the instant messaging software's payment system, an identity verification token is generated to verify that the target user's ID card image exists in the instant messaging software's payment system. The identity verification token is then sent to the internet banking system so that the internet banking system can establish an internet banking account for the target user based on the identity verification token. The system also receives an ID card image retrieval request from the internet banking system, which includes the identity verification token. The target user's ID card image is retrieved based on the identity verification token. Finally, the ID card image is sent to the internet banking system so that the internet banking system can open the target user's internet banking account based on the ID card image.
[0246] For details on the implementation of each of the above operations, please refer to the previous examples, which will not be repeated here.
[0247] As can be seen from the above, in this invention, when the second server establishes a financial account for a target user, it can send an identity verification query request to the first server. Upon receiving the request, the first server can check if the target user's identity verification exists. If it does, it sends an identity verification token to the second server. The second server can then establish the financial account for the target user based on this token. Furthermore, it can asynchronously obtain the identity verification based on the token, eliminating the need for the target user to upload their identity verification in real time, thus simplifying the operation. This improves the efficiency of opening a financial account.
[0248] Those skilled in the art will understand that all or part of the steps in the various methods of the above embodiments can be performed by instructions, or by instructions controlling related hardware. These instructions can be stored in a computer-readable storage medium and loaded and executed by a processor.
[0249] To this end, embodiments of the present invention provide a computer-readable storage medium storing a plurality of instructions that can be loaded by a processor to execute steps in any of the data processing methods provided in the embodiments of the present invention. For example, the instructions can execute the following steps:
[0250] When a query request for the identity verification of the target user is received from the second server, the identity verification of the target user is queried. The second server is a server set up by a financial institution.
[0251] When the target user's identity certificate is found in the first server, an identity certificate token for the target user is generated. The identity certificate token is used to represent that the target user's identity certificate exists in the first server.
[0252] Send the target user's identity verification token to the second server so that the second server can set up a financial account for the target user based on the identity verification token;
[0253] Receive an identity verification request from the second server, the identity verification request including an identity verification token;
[0254] Obtain the target user's identity verification based on the identity verification token;
[0255] Send proof of identity to the second server so that the second server can open a financial account based on the proof of identity.
[0256] The storage medium may include: read-only memory (ROM), random access memory (RAM), disk or optical disk, etc.
[0257] According to one aspect of this application, a computer program product or computer program is provided, comprising computer instructions stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium and executes the computer instructions, causing the computer device to perform the methods provided in the various optional implementations of opening an internet banking account or opening an internet Class II credit card as described in the above embodiments.
[0258] Since the instructions stored in the storage medium can execute the steps of any data processing method provided in the embodiments of the present invention, the beneficial effects that any data processing method provided in the embodiments of the present invention can achieve can be realized, as detailed in the preceding embodiments, and will not be repeated here.
[0259] The foregoing has provided a detailed description of a data processing method, apparatus, electronic device, and computer-readable storage medium provided by embodiments of the present invention. Specific examples have been used to illustrate the principles and implementation methods of the present invention. The descriptions of the above embodiments are only for the purpose of helping to understand the method and core ideas of the present invention. At the same time, those skilled in the art will recognize that, based on the ideas of the present invention, there will be changes in the specific implementation methods and application scope. Therefore, the content of this specification should not be construed as a limitation of the present invention.
Claims
1. A data processing method applicable to a first server, wherein the first server is a server established by a payment platform, characterized in that, include: When a query request for the identity verification of a target user is received from a second server, the identity verification of the target user is queried. The second server is a server established by a financial institution. When the identity certificate of the target user is found in the first server, an identity certificate token of the target user is generated. The identity certificate token is used to represent that the identity certificate of the target user exists in the first server. The identity certificate token is a credential granted by the first server to the second server to obtain the identity certificate of the target user. The target user's identity verification token is sent to the second server so that the second server can set up a financial account for the target user based on the identity verification token; The system receives an identity verification request from the second server, the identity verification request including the identity verification token; wherein the second server places the step of sending the identity verification request to the first server into an asynchronous task queue, so as to asynchronously obtain the identity verification of the target user according to the task order of the asynchronous task queue; Obtain the target user's identity verification based on the identity verification token; The identity verification is sent to the second server so that the second server can open the target user's financial account based on the identity verification.
2. The data processing method as described in claim 1, characterized in that, The identity verification token has an expiration date, and obtaining the target user's identity verification based on the identity verification token includes: Verify whether the identity verification token is within its validity period; When the identity verification token is valid, obtain the identity verification of the target user; When the identity verification token is not valid, the system refuses to obtain the target user's identity verification and sends a rejection message to the second server.
3. The data processing method as described in claim 2, characterized in that, The first server stores the generation time corresponding to the identity verification token. Verifying whether the identity verification token is within its validity period includes: The identity verification token is valid when the time difference between the current time and the generation time is not greater than the validity period. The identity verification token is not valid if the time difference between the current time and the generation time is greater than the validity period.
4. The data processing method as described in claim 1, characterized in that, Also includes: If the first server does not have the target user's identity verification, a query failure message is sent to the second server so that the second server can prompt the target user to upload identity verification based on the query failure message.
5. The data processing method as described in claim 1, characterized in that, Before receiving the identity verification query request from the second server for the target user, the process also includes: Obtain the identity verification of the target user; The identity verification interface is retrieved based on the identity certificate to perform identity verification processing on the target user. The identity verification interface is provided by an organization that manages identity certificates. When the target user authentication process is completed, the target user's identity certificate is stored.
6. The data processing method as described in claim 1, characterized in that, The generation of the target user's identity verification token includes: The target token is obtained from the token bucket as the identity verification token of the target user. The tokens in the token bucket are generated at a fixed rate, and the number of tokens in the token bucket does not exceed a preset token number threshold.
7. The data processing method as described in claim 1, characterized in that, Also includes: If sending the identity verification to the second server fails, the step of receiving the identity verification retrieval request sent by the second server is executed.
8. The data processing method as described in claim 1, characterized in that, The second server is equipped with an internet banking system, the first server is equipped with a payment system from instant messaging software, the identity verification is an image of an ID card, and the data processing method further includes: When a query request for a target user's ID card image is received from the internet banking system, the target user's ID card image is queried; When the ID card image of the target user is found in the payment system of the instant messaging software, an identity verification token for the target user is generated. The identity verification token is used to represent that the ID card image of the target user exists in the payment system of the instant messaging software. Send the target user's identity verification token to the internet banking system so that the internet banking system can set up an internet banking account for the target user based on the identity verification token; Receive an ID card image acquisition request from the internet banking system, wherein the ID card image acquisition request includes the identity verification token; Obtain the target user's ID card image based on the identity verification token; The ID card image is sent to the internet banking system so that the internet banking system can open the target user's internet banking account based on the ID card image.
9. A data processing method applicable to a second server, wherein the second server is a server established by a financial institution, characterized in that, include: Receive account opening requests from target users; Based on the account opening request of the target user, an identity verification request for the target user is sent to the first server, which is a server set up by the payment platform; The server receives an identity verification token sent by the first server, the identity verification token being used to represent the existence of the target user's identity verification in the first server; the identity verification token is a credential granted by the first server to the second server to obtain the target user's identity verification. A financial account is established for the target user based on the identity verification token; Send an identity verification request to the first server, the identity verification request including the identity verification token; wherein, the step of sending the identity verification request to the first server is placed in an asynchronous task queue, so as to asynchronously obtain the identity verification of the target user according to the task order of the asynchronous task queue; Upon receiving the identity verification from the first server, the financial account of the target user is activated.
10. The data processing method as described in claim 9, characterized in that, Also includes: Receive query failure information from the first server; The query failure message prompts the target user to upload proof of identity.
11. The data processing method as described in claim 9, characterized in that, Also includes: If the identity certificate is not received from the first server, the step of sending an identity certificate acquisition request to the first server is executed.
12. A data processing apparatus, suitable for a first server, wherein the first server is a server established by a payment platform, characterized in that, include: The query unit is used to query the identity certificate of the target user when it receives a query request from the second server for the identity certificate of the target user. The second server is a server established by a financial institution. The generation unit is configured to generate an identity verification token for the target user when the identity verification of the target user is found in the first server. The identity verification token is used to represent that the identity verification of the target user exists in the first server. The identity verification token is a credential granted by the first server to the second server to obtain the identity verification of the target user. A sending unit is configured to send the target user's identity verification token to the second server, so that the second server can establish a financial account for the target user based on the identity verification token; A receiving unit is configured to receive an identity verification request from the second server, the identity verification request including the identity verification token; wherein the second server places the step of sending the identity verification request to the first server into an asynchronous task queue, so as to asynchronously obtain the identity verification of the target user according to the task order of the asynchronous task queue; The acquisition unit is used to acquire the identity verification of the target user based on the identity verification token; The sending unit is further configured to send the identity certificate to the second server so that the second server can open the financial account based on the identity certificate.
13. A data processing apparatus suitable for a second server, wherein the second server is a server established by a financial institution, characterized in that, include: The receiving unit is used to receive account opening requests from target users. The sending unit is used to send an identity verification query request for the target user to a first server based on the target user's account opening request. The first server is a server set up by the payment platform. The receiving unit is further configured to receive an identity verification token sent by the first server, the identity verification token being used to indicate that the target user's identity verification exists in the first server; the identity verification token is a credential granted by the first server to the second server to obtain the target user's identity verification; A setup unit is used to set up a financial account for the target user based on the identity verification token; The sending unit is further configured to send an identity verification acquisition request to the first server, the identity verification acquisition request including the identity verification token; wherein, the step of sending the identity verification acquisition request to the first server is placed in an asynchronous task queue, so as to asynchronously obtain the identity verification of the target user according to the task order of the asynchronous task queue; The activation unit is used to activate the target user's financial account upon receiving the identity verification from the first server.
14. An electronic device, characterized in that, The method includes a processor and a memory, the memory storing multiple instructions; the processor loads instructions from the memory to perform steps in the data processing method as described in any one of claims 1 to 8; and / or, the processor loads instructions from the memory to perform steps in the data processing method as described in any one of claims 9 to 11.
15. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a plurality of instructions adapted for loading by a processor to perform the steps of the data processing method according to any one of claims 1 to 8, and / or, the instructions adapted for loading by a processor to perform the steps of the data processing method according to any one of claims 9 to 11.
16. A computer program product, characterized in that, The computer program product includes a computer program that, when executed by a processor, comprises the steps of the data processing method as described in any one of claims 1 to 8; and / or, when executed by a processor, comprises the steps of the data processing method as described in any one of claims 9 to 11.
Citation Information
Patent Citations
Personal information sharing, personal information sharing method and identity authentication method
CN104717073A
Terminal access system server data processing method and authentication server
CN109005159A