Data processing method, device, server and storage medium

Abstract

The embodiment of the present application discloses a data processing method, device, server and storage medium. It belongs to the field of computer technology. The method includes: receiving business demand information sent by a server, the business demand information is sent by the server after receiving a business request sent by a first client in an electronic device; verifying the electronic device, and verifying the server; if the electronic device and the server pass the verification, sending the business demand information to the second client in the electronic device, so that the second client obtains the user information corresponding to the business demand information, the second client is the client corresponding to the verification system; receiving the user information sent by the second client, and sending the user information to the server. Therefore, the above-mentioned method avoids the risk of user information being stolen in the process of the first client directly sending the user information to the server.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and more specifically, to a data processing method, device, server, and storage medium. Background Art

[0002] With the advancement of computer technology, electronic device users increasingly rely on applications within their devices to complete tasks. For example, they can use client applications within their devices to make payments or transfer money. However, these applications can be infected with Trojans, posing a risk of user information being stolen during communication. Summary of the Invention

[0003] In view of the above problems, the present application proposes a data processing method, device, server and storage medium to improve the above problems.

[0004] In the first aspect, the present application provides a data processing method, which is applied to a verification system, and the method includes: receiving business demand information sent by a server, wherein the business demand information is sent by the server after receiving a business request sent by a first client in an electronic device; verifying the electronic device and verifying the server; if the electronic device and the server pass the verification, sending the business demand information to a second client in the electronic device, so that the second client obtains user information corresponding to the business demand information, and the second client is the client corresponding to the verification system; receiving the user information sent by the second client, and sending the user information to the server.

[0005] In the second aspect, the present application provides a data processing method, which is applied to a second client in an electronic device, and the method includes: receiving business requirement information sent by a verification system, and the business requirement information is sent by the verification system after the verification system verifies the electronic device and successfully verifies the server after receiving the business requirement information sent by the server, wherein the server sends the business requirement information to the verification system after receiving the business request sent by the first client in the electronic device; obtains user information corresponding to the business requirement information; and sends the user information to the verification system, so that the verification system sends the user information to the server.

[0006] In a third aspect, the present application provides a data processing method, which is applied to a server, and the method includes: receiving a business request sent by a first client in an electronic device; sending business requirement information corresponding to the business request to a verification system, so that the verification system can verify the electronic device and the server, and after successful verification, sending the business requirement information to a second client in the electronic device, so that the second client can obtain user information corresponding to the business requirement information and return the user information to the verification system; receiving the user information forwarded by the verification system

[0007] In a fourth aspect, the present application provides a data processing device that runs on a verification system, and the device includes: a server communication unit, a verification unit, and an electronic device communication unit. The server communication unit is used to receive business demand information sent by the server, and the business demand information is sent by the server after receiving a business request sent by a first client in the electronic device; the verification unit is used to verify the electronic device and the server; the electronic device communication unit is used to send the business demand information to the second client in the electronic device if the electronic device and the server pass the verification, so that the second client obtains the user information corresponding to the business demand information, and the second client is the client corresponding to the verification system; the server communication unit is also used to receive the user information sent by the second client and send the user information to the server.

[0008] In a fifth aspect, the present application provides a data processing device running on a second client in an electronic device, the device comprising: an information receiving unit, a user information acquiring unit, and an information sending unit.

[0009] An information receiving unit is used to receive business requirement information sent by a verification system, wherein the business requirement information is sent by the verification system after the verification system verifies the electronic device and successfully verifies the server after receiving the business requirement information sent by the server, wherein the server sends the business requirement information to the verification system after receiving the business request sent by the first client in the electronic device; a user information acquisition unit is used to obtain user information corresponding to the business requirement information; an information sending unit is used to send the user information to the verification system, so that the verification system sends the user information to the server.

[0010] In a sixth aspect, the present application provides a server comprising a processor and a memory; one or more programs are stored in the memory and configured to be executed by the processor to implement the above method.

[0011] In a seventh aspect, the present application provides a computer-readable storage medium, in which program code is stored, wherein the above method is executed when the program code is executed by a processor.

[0012] The present application provides a data processing method, device, server and storage medium. After a first client in an electronic device sends a service request to a server, the server will send the service requirement information corresponding to the service request to a verification system. Correspondingly, the verification system will verify the electronic device and the server after receiving the service requirement information sent by the server. If the electronic device and the server pass the verification, the service requirement information is sent to the second client in the electronic device so that the second client obtains the user information corresponding to the service requirement information, and receives the user information sent by the second client to send the user information to the server. Thus, through the above-mentioned method, the verification system can return the service requirement information corresponding to the service requested by the electronic device to the second client in the electronic device after completing the verification of both the electronic device and the server, so that the second client can obtain the user information corresponding to the service requirement information, and then forward it to the server through the service system, thereby avoiding the risk of user information being stolen in the process of the first client directly sending the user information to the server. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present application. For those skilled in the art, other drawings can be obtained based on these drawings without creative work.

[0014] Figure 1 A schematic diagram showing an application environment involved in an embodiment of the present application is shown;

[0015] Figure 2 A flow chart of a data processing method proposed in one embodiment of the present application is shown;

[0016] Figure 3 A flowchart of a data processing method proposed in another embodiment of the present application is shown;

[0017] Figure 4 A schematic diagram showing verification link information in an embodiment of the present application is shown;

[0018] Figure 5 Another schematic diagram showing verification link information in an embodiment of the present application is shown;

[0019] Figure 6A schematic diagram showing another embodiment of the present application showing verification link information;

[0020] Figure 7 A flow chart of a data processing method proposed in another embodiment of the present application is shown;

[0021] Figure 8 A schematic diagram of a user information input interface in an embodiment of the present application is shown;

[0022] Figure 9 A flowchart of a data processing method proposed in another embodiment of the present application is shown;

[0023] Figure 10 A timing diagram of a data processing method proposed in an embodiment of the present application is shown;

[0024] Figure 11 A structural block diagram of a data processing device proposed in an embodiment of the present application is shown;

[0025] Figure 12 A structural block diagram of a data processing device proposed in another embodiment of the present application is shown;

[0026] Figure 13 A structural block diagram of a data processing device proposed in another embodiment of the present application is shown;

[0027] Figure 14 A structural block diagram of a data processing device proposed in another embodiment of the present application is shown;

[0028] Figure 15 A structural block diagram of an electronic device for executing a data processing method according to an embodiment of the present application is shown;

[0029] Figure 16 A storage unit for storing or carrying program codes for implementing a data processing method according to an embodiment of the present application is shown. DETAILED DESCRIPTION

[0030] The following will be combined with the drawings in the embodiments of this application to clearly and completely describe the technical solutions in the embodiments of this application. Obviously, the embodiments described are only part of the embodiments of this application, not all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of this application.

[0031] With the development of computer technology, the Internet has become an indispensable tool for users. When using electronic devices, users can use them to complete various tasks via the Internet. For example, they can use their electronic devices to access various text or image materials on the Internet. Another example is using their electronic devices to conduct online shopping.

[0032] When users use electronic devices to complete tasks, they usually rely on applications in the electronic devices. For example, when accessing certain business platforms, they use the business platform client in the electronic device to access the business platform. In addition, when accessing the business platform, relatively sensitive user information may be sent to the business platform through the business platform client. For example, the user's payment account number, payment password, etc. After studying the relevant clients, the inventors found that the relevant business platform clients also have the risk of user information transmitted by the client being stolen during communication with the business platform.

[0033] Specifically, when a service platform client transmits user information to the service platform, the user information may be transmitted to the service platform in a form-based format. However, a Trojan may be implanted in the service platform client, or in the electronic device where the client is located. This Trojan may then steal the information transmitted by the service platform client in the form-based format, resulting in the theft of user information.

[0034] Therefore, the inventors have proposed the data processing method, device, server and storage medium provided in the present application. In this method, after the first client in the electronic device sends a service request to the server, the server will send the service requirement information corresponding to the service request to the verification system. Correspondingly, the verification system will verify the electronic device and the server after receiving the service requirement information sent by the server. If the electronic device and the server pass the verification, the service requirement information is sent to the second client in the electronic device so that the second client obtains the user information corresponding to the service requirement information, and receives the user information sent by the second client to send the user information to the server.

[0035] Therefore, through the above-mentioned method, the verification system can return the business demand information corresponding to the business requested by the electronic device to the second client in the electronic device after completing the verification of both the electronic device and the server, so that the second client can obtain the user information corresponding to the business demand information, and then forward it to the server through the business system, thereby avoiding the risk of user information being stolen in the process of the first client directly sending the user information to the server.

[0036] Before further describing the embodiments of the present application in detail, an application environment involved in the embodiments of the present application is introduced.

[0037] like Figure 1 As shown, Figure 1 FIG2 is a schematic diagram of an application environment involved in an embodiment of the present application, wherein the application environment includes an electronic device 100 , a server 200 and a verification system 300 .

[0038] The electronic device 100 is used by a user and includes a first client 110 and a second client 120. The first client 110 is a client corresponding to the server 200, while the second client 120 is a client corresponding to the verification system 300. The first client 110 can communicate with the server 200. For example, the first client 110 can send a service request to the server to trigger the server 200 to complete the service requested by the user. The second client 120 can also communicate with the verification system 300. For example, the second client 120 can obtain user information and send the user information to the verification system, which then forwards the information to the server 200. The first client 110 and the second client 120 can be two independent applications, or the second client 120 can be a plug-in provided in the first client 110. For example, the first client 110 can be an information browsing application, while the second client 120 can be a plug-in embedded in the information browsing application.

[0039] Exemplarily, the electronic device 100 may be a smart phone, a tablet computer, a laptop computer, a desktop computer, a smart speaker, a smart watch, etc.

[0040] Server 200 is a server that performs business processing. Server 200 can be an independent physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms.

[0041] Verification system 300 can be a system for verifying servers and electronic devices. This system can be built on a blockchain. Furthermore, verification system 300 can include a Public Key Infrastructure (PKI) to implement functions such as the generation, management, storage, distribution, and revocation of keys and certificates based on public key cryptography. Furthermore, if verification system 300 is built on a blockchain, the PKI can also be built on a blockchain. For example, the PKI included in the verification system can be implemented using methods such as Namecoin, CertLedger, and Blockstack.

[0042] In this embodiment, CertLedger is used as an example. CertLedger is used to verify, store, and revoke TLS certificates and manage trusted CA certificates in a blockchain-based manner. The purpose is to make the life cycle of certificate issuance and revocation clearer and eliminate various man-in-the-middle attacks. In addition, due to defects and inadequate implementations in different TLS clients, it also aims to unify the certificate verification process of all TLS clients. CertLedger manages PKI functions through state objects. A state object is a digital document consisting of data and immutable smart contract code that manages the data. Each state object has a unique address in the blockchain. The state change of an asset is triggered by a transaction and tracked through a state object. CertLedger consists of the following state objects:

[0043] The Trusted CAs State Object stores the set of trusted CA certificates and the smart contract code used to add a new CA certificate as "trusted" or change the status of an existing CA certificate to "untrusted".

[0044] The Domain State Object stores and manages the status of all TLS certificates and their revocation. It uses the trusted CAs state object when building a trusted path for a TLS certificate. It also sets the necessary code to change the status of a TLS certificate to "revoked."

[0045] The Account State Object stores the CertLedger token balance of a CertLedger entity and is controlled by the account's private key. This state object is used to create and trigger all transactions in CertLedger.

[0046] The CertLedger Token State Object is the source of the initial token supply. It contains the smart contract code used to determine the initial owners of the token supply, transfer tokens between different account state objects, and allow a state object to transfer a certain amount of tokens from a given account state object.

[0047] The Fraud Report State Object stores fraud reports about CAs in the Trusted CAs State Object. These reports include evidence of fraudulent behavior by CAs that may have issued valid but fraudulent certificates.

[0048] The embodiments of the present application will be described in detail below with reference to the accompanying drawings.

[0049] See also Figure 2 , Figure 2 FIG. 1 is a flow chart of a data processing method according to an embodiment of the present application. The data processing method according to the embodiment is applied to a verification system. The method includes:

[0050] S110: receiving service requirement information sent by the server, where the service requirement information is sent by the server after receiving a service request sent by a first client in the electronic device.

[0051] The first client can be understood as the client corresponding to the server. The client corresponding to the server can be understood as the server that completes the request triggered by the client. For example, if a data query request is triggered in the client, the client will send the data query request to the corresponding server, and the corresponding server will then complete the actual data query operation and return the data query result to the client corresponding to the server. For another example, if a payment request is triggered in the client, the client will send the payment request to the corresponding server, and the corresponding server will then execute the specific payment operation.

[0052] In this embodiment, when the first client generates a business request, it will send the business request to the corresponding server. After receiving the business request sent by the first client, the server will determine the business requirement information corresponding to the business request. Among them, the business requirement information is the information that the user needs to submit to the server in the process of completing the business. For example, if the business request sent by the first client to the server is a payment request, the server will determine what information the user needs to submit to the server in order to complete the operation corresponding to the payment request, and then determine the business requirement information corresponding to the payment request. For example, the business requirement information corresponding to the payment request may include information such as the user's payment account and payment password.

[0053] In the embodiment of the present application, after determining the service requirement information, the server does not directly return the determined service requirement information to the first client, but sends it to the verification system, which then receives the service requirement information sent by the server.

[0054] S120: Verify the electronic device and the server.

[0055] After receiving the service request information from the server, the verification system will first verify the electronic device and the server. Since some information between the first client and the server is transmitted through the verification system, the verification system will verify the electronic device and the server separately to facilitate the verification system to determine whether the electronic device and the server communicating with it are legitimate.

[0056] As a method, the server and the electronic device can be pre-registered in the verification system. Then, during the registration process, the verification system can assign identity credentials to the electronic device and the server, so that in the subsequent identity authentication process, the verification system can perform verification through the identity credentials provided by the electronic device and the server.

[0057] Optionally, the identity credential can be an electronic certificate carrying an assigned signature. This electronic certificate can be generated and distributed by the public key infrastructure (PKI) mentioned above. In this manner, verifying the electronic device includes verifying the electronic device's signature; if the signature passes verification by the verification system, the electronic device is deemed verified.

[0058] Correspondingly, verifying the server includes: verifying the signature of the server; if the signature passes the verification of the verification system, it is determined that the server has passed the verification.

[0059] Optionally, the verification system includes a blockchain-based authentication library, and the identity credentials assigned by the verification system to the electronic device and the server can be stored in the authentication library. The blockchain-based authentication library can make the data stored in the authentication library less susceptible to tampering, thereby improving the effectiveness of subsequent authentication processes based on the identity credentials in the authentication library.

[0060] Optionally, for an electronic device, the identification information of the electronic device and the identity credential assigned to the electronic device can be stored in the authentication library in correspondence. The identification information is information used by the user to uniquely identify the electronic device. Exemplarily, the identification information of the electronic device can be the physical address of the electronic device, the mobile phone number bound to the electronic device, or the user account bound to the electronic device. Optionally, in the case where the identity credential is a signature assigned to the electronic device, the verification system will store the signature in correspondence with the identification information of the electronic device in the authentication library.

[0061] Then verifying the signature of the electronic device may include: obtaining the signature of the electronic device, querying whether there is a correspondence between the signature and the identification information of the electronic device in the authentication library; if there is a correspondence between the signature and the identification information of the electronic device in the authentication library, determining that the signature of the electronic device has passed the verification.

[0062] In this embodiment, there are multiple ways to obtain the signature of the electronic device.

[0063] As a method, the first client can send the signature and identification information of its electronic device to the server simultaneously when sending a business request to the server. Then, when the server sends business demand information to the verification system, it can also send the signature and identification information of the electronic device where the first client is located to the verification system so that the verification system can obtain the identification information and signature of the electronic device.

[0064] Alternatively, when a server receives a service request from a first client of an electronic device, it can obtain the network address of the electronic device. When the server sends service request information to the verification system, it can also transmit the network address of the electronic device to the verification system. The verification system can then send a signature acquisition instruction to a second client corresponding to the network address. The second client corresponding to the network address will then obtain a local signature and return it to the verification system for verification. It is understood that the second client corresponding to the network address can also be understood as the second client in the electronic device where the first client is located.

[0065] It should be noted that, as shown in the above content, the verification system may have multiple ways to obtain the signature of the electronic device. In order to facilitate the verification system to quickly identify the content carried in the information sent by the server. Optionally, when the server sends data to the verification system, it can also add an information content identifier to the sent data. The information content identifier is used to characterize what specific information is carried in the data sent at that time. After receiving the data sent by the server, the verification system can determine whether the signature and identification information of the electronic device can be directly obtained from the data through the information content identifier carried in the data, and then the verification system can determine which method to adopt to obtain the signature and identification information of the electronic device.

[0066] Similarly, when the verification system includes an authentication library, verifying the server's signature may include: obtaining the server's signature; querying whether the authentication library stores a correspondence between the signature and the server's domain name; if there is a correspondence in the authentication library, determining that the server's signature passes verification.

[0067] Among them, as a way, when the server sends business demand information to the verification system, it can also simultaneously send the server's signature to the verification system so that the verification system can verify it.

[0068] Then, during the verification process of the electronic device or server, if the electronic device or the verification server fails to pass the verification successfully, it indicates that the electronic device or the server will have a security risk, or it indicates that the electronic device and the server are not registered in the verification system. The verification system will no longer execute subsequent processing steps and will disconnect the communication connection with the server and the electronic device.

[0069] It should be noted that in the embodiments of this application, the aforementioned authentication library is established using a blockchain-based approach. Blockchain is a novel application model for computer technologies, including distributed data storage, peer-to-peer transmission, consensus mechanisms, and encryption algorithms. Blockchain is essentially a decentralized database, a series of data blocks generated using cryptographic methods. Each data block contains information about a batch of network transactions, which is used to verify the validity of the information (to prevent counterfeiting) and generate the next block. Blockchain can include an underlying blockchain platform, a platform product service layer, and an application service layer.

[0070] The underlying blockchain platform can include processing modules such as user management, basic services, smart contracts, and operation monitoring. Among them, the user management module is responsible for the identity information management of all blockchain participants, including maintaining public and private key generation (account management), key management, and maintaining the correspondence between the user's real identity and the blockchain address (authority management), etc., and under authorization, it supervises and audits the transactions of certain real identities and provides risk control rule configuration (risk control audit); the basic service module is deployed on all blockchain node devices to verify the validity of business requests, and records valid requests to storage after consensus is reached. For a new business request, the basic service first adapts the interface for parsing and authentication (interface adaptation), and then encrypts the business information through the consensus algorithm (consensus management). The smart contract module is responsible for the registration, issuance, triggering and execution of contracts. Developers can define the contract logic in a programming language and publish it to the blockchain (contract registration). According to the logic of the contract terms, the contract logic is triggered by calling keys or other events to trigger execution. The contract logic is completed and the contract upgrade and cancellation functions are also provided. The operation monitoring module is mainly responsible for the deployment, configuration modification, contract setting, cloud adaptation and real-time status visualization output of the product during the product release process, such as alarms, network monitoring, and node device health monitoring.

[0071] S130: If the electronic device and the server pass the verification, the service requirement information is sent to the second client in the electronic device so that the second client obtains user information corresponding to the service requirement information. The second client is a client corresponding to the verification system.

[0072] If the server and electronic device successfully pass verification, the verification system determines that both are registered devices and can then send the service requirement information to the second client. After receiving the service requirement information, the second client can obtain the user information corresponding to the service requirement information. For example, if the service requirement information includes a payment account and payment password, the second client will obtain the user's payment account and payment password as user information.

[0073] S140: Receive user information sent by the second client, and send the user information to the server.

[0074] After receiving the user information sent by the second client, the verification system will return the received user information to the server, so that the server can complete the business operation corresponding to the business request after obtaining the user information. For example, if the business request is a payment request, the user information obtained by the second client can be the payment account and payment password mentioned above. After receiving the payment account and payment password forwarded by the verification system, the server will perform the operation corresponding to the payment request.

[0075] Furthermore, after the server completes the service operation corresponding to the service request, it can return the operation result to the first client.

[0076] This embodiment provides a data processing method in which, after a first client in an electronic device sends a service request to a server, the server sends service requirement information corresponding to the service request to a verification system. Correspondingly, after receiving the service requirement information sent by the server, the verification system verifies the electronic device and the server. If the electronic device and the server pass verification, the verification system sends the service requirement information to a second client in the electronic device, allowing the second client to obtain user information corresponding to the service requirement information. The verification system then receives the user information sent by the second client and sends the user information to the server.

[0077] Therefore, through the above-mentioned method, the verification system can return the business demand information corresponding to the business requested by the electronic device to the second client in the electronic device after completing the verification of both the electronic device and the server, so that the second client can obtain the user information corresponding to the business demand information, and then forward it to the server through the business system, thereby avoiding the risk of user information being stolen in the process of the first client directly sending the user information to the server.

[0078] See also Figure 3 , Figure 3 FIG. 1 is a flow chart of a data processing method according to an embodiment of the present application. The data processing method according to the embodiment is applied to a verification system. The method includes:

[0079] S210: receiving service requirement information sent by the server, where the service requirement information is sent by the server after receiving a service request sent by a first client in the electronic device.

[0080] S220: Generate verification connection information.

[0081] It should be noted that in the embodiments of the present application, the verification operation for the electronic device and the server can be performed directly by the verification system after receiving the business requirement information sent by the server, or it can be triggered by the user of the electronic device. In order to facilitate the triggering by the user of the electronic device, the verification system can generate verification connection information. The verification connection information is information that can be displayed on the second client so that the user can trigger the verification system to start verifying the electronic device and the server.

[0082] Furthermore, in this embodiment, whether the verification system directly verifies the electronic device and the server after receiving the business requirement information sent by the server, or triggers the verification of the electronic device and the server by generating verification connection information can be determined in various ways.

[0083] As a way, the frequency of business requests initiated by the electronic device can be used to determine which method the verification system uses to trigger the verification of the electronic device and the server, and then determine whether the verification system needs to generate verification connection information after receiving the business demand information. It should be noted that some illegal electronic devices or electronic devices implanted with Trojans may initiate business requests at a higher frequency. Correspondingly, in this case, the server will also send business demand information to the verification system at a higher frequency. If the verification system directly starts to verify the electronic device and the server in this case, it will cause the verification system to consume higher resources on verification. And because the business request may be sent by an illegal electronic device or an electronic device infected with a Trojan, the resources consumed by the verification system for verification will be wasted.

[0084] In this way, to avoid wasting resources, the verification system can store the service request sending frequency of the electronic device to be verified, and then determine whether to generate verification connection information based on the stored service request frequency. The electronic device to be verified is the electronic device that triggers the server to send service request information to the verification system.

[0085] Optionally, if the verification system obtains that the service request sending frequency of the electronic device to be verified is lower than the frequency threshold, it can directly start to verify the electronic device and the server after receiving the service demand information sent by the server. It should be noted that if the service request sending frequency of the electronic device to be verified is lower than the frequency threshold, it indicates that the electronic device is most likely not an illegal electronic device. Then it is determined that the service request of the electronic device is normally triggered by the user, and then the electronic device and the server can be directly verified to improve the overall processing efficiency.

[0086] Optionally, if the verification system obtains that the frequency of business requests sent by the electronic device to be verified is not less than the frequency threshold, verification connection information can be generated after receiving the business demand information sent by the server. It should be noted that if the frequency of business requests sent by the electronic device to be verified is not less than the frequency threshold, it indicates that the frequency of business requests sent by the electronic device is high, and then the business requests sent by the electronic device are more likely to be sent by a Trojan horse or an illegal program in an illegal electronic device. In order to further determine whether the electronic device to be verified is legal, verification connection information can be generated for the electronic device.

[0087] S230: Sending verification connection information to the second client in the electronic device.

[0088] When a first client in an electronic device sends a service request to a server, the server obtains the network address of the electronic device and sends it to the verification system. The verification system can then determine to which second client to send the verification connection information based on the obtained network address.

[0089] In this embodiment, the verification connection information may be sent to the second client in various ways.

[0090] As a way, the verification connection information can be directly sent to the second client. In this way, the second client can directly display the verification connection information itself.

[0091] Alternatively, the verification connection information can be added to a medium information, and then the verification connection information can be sent to the second client by sending the medium information to the second client. Optionally, the medium information can be a QR code, and sending the verification connection information to the second client in the electronic device includes: generating a QR code carrying the verification connection information; and sending the QR code to the second client in the electronic device.

[0092] S240: If a feedback message indicating that the verification connection information is triggered is received, the electronic device is verified, and the server is verified.

[0093] As described above, the verification system may send the verification connection information to the second client in different ways. Accordingly, correspondingly, there may be different ways to trigger the verification connection information in the second client.

[0094] As a way, if the verification connection information is sent directly to the second client, the second client can directly display the verification connection information. Figure 4As shown, interface 10 may be an operation interface corresponding to the first client, and the user of the electronic device may trigger the aforementioned service request through the operation interface 10 of the first client. Then, after the second client receives the verification connection information sent by the verification system, it may display interface 11 so as to directly display the verification connection information in interface 11. In this manner, if a touch operation acting on the verification connection information in interface 11 is detected, it may be determined that the verification connection information in interface 11 has been triggered, and the second client may then send a feedback message to the verification system.

[0095] Optionally, in this manner, if the verification system directly sends the verification connection information to the second client, the second client may display a verification trigger control in addition to directly displaying the verification connection information in the aforementioned manner. If a touch operation acting on the verification trigger control is detected, it is determined that the verification connection information is triggered. For example, Figure 5 As shown, the second client can display the interface 12 after receiving the verification connection information, and display the verification trigger control 13 in the interface 12. If it is detected that the verification trigger control 13 is touched, it is determined that the verification connection information is triggered.

[0096] As another way, the verification system can send the verification connection information to the second client through the medium information. For example, if the medium information is a QR code, Figure 6 As shown, if the verification system adds the verification connection information to the QR code and transmits it to the second client, the second client can display the interface 14 and directly display the QR code carrying the verification connection information in the interface 14.

[0097] It should be noted that, as shown in the above content, the verification system may directly send the verification connection information to the second client, or it may be added to the medium information and transmitted to the second client. In order for the second client to accurately understand the method by which the verification system transmits the verification connection information, the verification system may transmit the verification method identifier at the same time as it transmits the verification connection information to the second client. The verification method identifier is used to inform the second client how the verification system transmits the verification connection information this time. After the client receives the verification connection information and the verification method identifier corresponding to the verification connection information, the second client can use the verification method identifier to obtain the verification connection information from the second client. Figures 4 to 5 The corresponding display mode of the verification connection information is determined in . Optionally, the verification system can add the verification mode identifier to the data header of the data sending the verification connection information.

[0098] S250: If the electronic device and the server pass the verification, the service requirement information is sent to the second client in the electronic device so that the second client obtains user information corresponding to the service requirement information. The second client is a client corresponding to the verification system.

[0099] S260: Receive user information sent by the second client, and send the user information to the server.

[0100] As a method, when the second client sends the user information to the verification system, the user information may be sent in a form-based format. For example, the user information may be sent based on an Html (Hyper Text Markup Language) form. The verification system may configure the type of form used when sending the user information, so as to configure the second client to only send the user information based on a specified type of form. Then, after receiving the user information sent by the second client, the verification system may detect the type of form that sent the user information. If it is detected that the form is not of the specified type, it is determined that the user information may have been tampered with, and the received user information may be discarded. If it is detected that the form is of the specified type, it is determined that the user information has not been tampered with, and it may be sent to the server normally.

[0101] This embodiment provides a data processing method, so that the verification system can return the business demand information corresponding to the business requested by the electronic device to the second client in the electronic device after completing the verification of both the electronic device and the server through the aforementioned method, so that the second client can obtain the user information corresponding to the business demand information, and then forward it to the server through the business system, thereby avoiding the risk of user information being stolen in the process of directly sending the user information to the server by the first client. In addition, in this embodiment, the verification system will first send a verification connection information to the second client in the electronic device, and then will trigger the verification of the electronic device and the server only after the second client returns a feedback message indicating that the verification connection information has been triggered, thereby improving the effectiveness of the verification system in verifying the electronic device and the server.

[0102] See also Figure 7 , Figure 7 FIG. 1 is a flow chart of a data processing method according to an embodiment of the present application. The data processing method according to the embodiment is applied to a second client in an electronic device. The method includes:

[0103] S310: Receive business requirement information sent by the verification system. The business requirement information is sent by the verification system after receiving the business requirement information sent by the server, verifying the electronic device and successfully verifying the server. The server sends the business requirement information to the verification system after receiving the business request sent by the first client in the electronic device.

[0104] Among them, as shown in the above content, in addition to receiving the business demand information sent by the verification system, the second client may also receive the verification connection information sent by the verification system before receiving the business demand information. It should be noted that the server needs to establish a communication connection with the second client in the process of sending information to the second client, and then send information based on the established communication connection. Then as a way, in order to facilitate the verification system to send information to the second client more promptly when it needs to, the second client in the electronic device can establish a communication connection with the verification system in advance, so that when the verification system needs to send information to the second client, it does not need to perform the operation of establishing a communication connection, but can send information to the second client through the pre-established communication connection.

[0105] As one approach, the second client can begin running and establish a communication connection with the verification system after the electronic device is turned on. It should be noted that the second client is the client corresponding to the verification system, and the purpose of the second client can be to establish communication between the verification system and the electronic device. If the second client establishes a communication connection with the verification system after the electronic device is turned on, the verification system can send information to the second client more promptly when needed.

[0106] As another way, the second client can establish a communication connection with the verification system after detecting that the first client has started running. As shown in the above content, the second client can be a client for information transmission between the electronic device and the verification system, so the second client can start running after detecting that a client (for example, the first client) that needs to transmit information is started. Optionally, after the second client is installed locally, it can detect the startup of the application in the electronic device after being given permission by the electronic device. If it is detected that an application that needs to be transmitted by the second client is started, the second client will establish a communication connection with the verification system.

[0107] Optionally, the second client may locally store a list of applications that require information transmission by the second client. Upon detecting that an application has been launched, the second client may query whether the launched application is one of the applications on the list. If so, the second client will establish a communication connection with the verification system. Furthermore, after establishing a communication connection with the verification system, the second client may also monitor the running status of applications in the electronic device in real time. If it detects that no application on the list is currently running, the second client may disconnect the communication connection with the verification system.

[0108] Exemplarily, the list of applications that require information transmission by the second client includes application A, application B, and application C. If application A, application B, and application C are not in the running state, the second client may not establish a communication connection with the verification system. If the second client detects that application A is started, it will establish a communication connection with the verification system. Afterwards, if application B is also started while application A is still in the running state, the second client will still maintain a communication connection with the verification system. Afterwards, if it is detected that application B is closed and application A is still in the running state, the second client will continue to maintain a communication connection with the verification system. If the second client subsequently detects that application A is also closed, and the second client detects that no application in the list is running, the second client will disconnect the communication connection with the verification system.

[0109] S320: Obtain user information corresponding to the business demand information.

[0110] In the embodiment of the present application, the second client can obtain user information in multiple ways.

[0111] As a method, the second client can display a user information input interface after receiving the business requirement information, and display a corresponding information input area in the user information input interface according to the business requirement information, so that the user can input information in the information input area. Correspondingly, the second client will use the information input by the user as the user information corresponding to the business requirement information. For example, Figure 8 As shown, in the user information input interface 15 displayed on the second client, information input areas corresponding to the payment account and the payment password are displayed.

[0112] It should be noted that, in the embodiment of the present application, the service requirement information sent by the server to the verification system may also include a link address to which the user information needs to be submitted. In this manner, the second client can optionally display the link address included in the service requirement information on the user information input interface. Displaying the link address facilitates the user's determination of whether the link address actually belongs to the server to which the service request was sent.

[0113] As another approach, the electronic device may pre-store the user's personal information. In this approach, the second client may directly obtain the user information corresponding to the business demand information from the personal information stored in the electronic device.

[0114] S330: Send the user information to the verification system, so that the verification system sends the user information to the server.

[0115] As a method, before receiving the business demand information sent by the verification system, it also includes: receiving the verification connection information sent by the verification system; if it is detected that the verification connection information is triggered, sending feedback information to the verification system to enable the verification system to verify the electronic device and the server.

[0116] Among them, optionally, receiving the verification connection information sent by the verification system includes: receiving a QR code carrying the verification connection information; if it is detected that the verification connection information is triggered, sending feedback information to the verification system, including: if an identification instruction for the QR code is detected, determining that the verification connection information is triggered, and sending feedback information to the verification system.

[0117] A data processing method provided in this embodiment, in a case where a second client corresponding to a verification system is provided in an electronic device, the verification system can, through the aforementioned method, return the business demand information corresponding to the business requested by the electronic device to the second client in the electronic device after completing the verification of both the electronic device and the server, so that the second client can obtain the user information corresponding to the business demand information, and then forward it to the server through the business system, thereby avoiding the risk of user information being stolen in the process of the first client directly sending the user information to the server.

[0118] See also Figure 9 , Figure 9 FIG. 1 is a flow chart of a data processing method proposed in an embodiment of the present application. This embodiment provides a data processing method applied to a server, and the method includes:

[0119] S410: Receive a service request sent by a first client in an electronic device.

[0120] S420: Send business requirement information corresponding to the business request to the verification system, so that the verification system can verify the electronic device and the server, and after successful verification, send the business requirement information to the second client in the electronic device, so that the second client can obtain user information corresponding to the business requirement information and return the user information to the verification system.

[0121] S430: Receive user information forwarded by the verification system.

[0122] A data processing method provided in this embodiment does not directly return the business demand information to the first client after the server receives a business request sent by a first client in an electronic device. Instead, it first sends it to a verification system. After the verification system completes verification of both the electronic device and the server, it sends the business demand information sent by the server to a second client in the electronic device. The second client then obtains user information corresponding to the business demand information, and then forwards the user information to the server through the verification system, thereby avoiding the risk of user information being stolen in the process of the first client directly sending the user information to the server.

[0123] See also Figure 10 , Figure 10 The figure shows a timing diagram of a data processing method proposed in one embodiment of the present application, and the overall flow of the data processing method in the embodiment of the present application is introduced through the timing diagram.

[0124] S510: The first client sends a service request to the server.

[0125] S520: The server obtains business requirement information corresponding to the business request.

[0126] S530: The server sends the business requirement information to the verification system.

[0127] S540: The verification system verifies the electronic device and the server.

[0128] S550: If the electronic device and the server pass the verification, the verification system sends the service requirement information to the second client.

[0129] S560: The second client obtains user information corresponding to the service demand information.

[0130] S570: The second client sends user information to the verification system.

[0131] S580: The verification system sends the user information to the server.

[0132] See also Figure 11 , Figure 11FIG. 6 is a block diagram of a data processing device 600 according to an embodiment of the present application. The data processing device 600 according to the embodiment of the present application is operated in a verification system. The device 600 includes:

[0133] The server communication unit 610 is configured to receive service requirement information sent by the server. The service requirement information is sent by the server after receiving a service request sent by a first client in the electronic device.

[0134] The verification unit 620 is used to verify the electronic device and the server.

[0135] The electronic device communication unit 630 is used to send service requirement information to the second client in the electronic device if the electronic device and the server pass the verification, so that the second client obtains user information corresponding to the service requirement information. The second client is the client corresponding to the verification system.

[0136] The server communication unit 610 is further configured to receive user information sent by the second client and send the user information to the server.

[0137] As one approach, the verification unit 620 is specifically configured to verify the signature of the electronic device; if the signature passes verification by the verification system, the electronic device is determined to have passed verification. As one approach, the verification unit 620 is specifically configured to verify the signature of the server; if the signature passes verification by the verification system, the server is determined to have passed verification.

[0138] Optionally, the verification system includes an authentication library established based on the blockchain, and a verification unit 620, which is specifically used to obtain the signature of the server; query whether the authentication library stores a correspondence between the signature and the server's domain name; if there is a correspondence in the authentication library, it is determined that the server's signature has passed the verification.

[0139] like Figure 12 As shown, the verification trigger unit 640 is configured to generate verification connection information and send the verification connection information to the second client in the electronic device. In this manner, the verification unit 620 is specifically configured to, upon receiving a feedback message after the verification connection information is triggered, verify the electronic device and the server. Optionally, the verification trigger unit 640 is specifically configured to generate a QR code carrying the verification connection information and send the QR code to the second client in the electronic device.

[0140] See also Figure 13 , Figure 13 FIG. 1 is a block diagram of a data processing device 700 according to an embodiment of the present application. In this embodiment, the data processing device 700 is provided as a second client running in an electronic device. The device 700 includes:

[0141] The information receiving unit 710 is used to receive business requirement information sent by the verification system. The business requirement information is sent by the verification system after it verifies the electronic device and successfully verifies the server after receiving the business requirement information sent by the server. The server sends the business requirement information to the verification system after receiving the business request sent by the first client in the electronic device.

[0142] The user information acquisition unit 720 is configured to acquire user information corresponding to the service requirement information.

[0143] The information sending unit 730 is used to send user information to the verification system, so that the verification system sends the user information to the server.

[0144] As a method, the device 700 also includes: a connection triggering unit 740, which is used to receive verification connection information sent by the verification system; if it is detected that the verification connection information is triggered, feedback information is sent to the verification system to enable the verification system to verify the electronic device and the server.

[0145] Optionally, the connection triggering unit 740 is specifically configured to receive a QR code carrying verification connection information. Correspondingly, if a recognition instruction for the QR code is detected, it is determined that the verification connection information is triggered and feedback information is sent to the verification system.

[0146] As one approach, the second client is a plug-in provided in the first client.

[0147] See also Figure 14 , Figure 14 FIG. 8 is a block diagram of a data processing device 800 according to an embodiment of the present application. The data processing device 800 provided in this embodiment runs on a server. The device 800 includes:

[0148] The first communication unit 810 is configured to receive a service request sent by a first client in the electronic device;

[0149] The second communication unit 820 is configured to send service requirement information corresponding to the service request to the verification system, so that the verification system can verify the electronic device and the server, and after successful verification, send the service requirement information to the second client in the electronic device, so that the second client can obtain user information corresponding to the service requirement information and return the user information to the verification system;

[0150] The second communication unit 820 is further configured to receive user information forwarded by the verification system.

[0151] A data processing device provided in this embodiment enables the verification system to return the business demand information corresponding to the business requested by the electronic device to the second client in the electronic device after completing the verification of both the electronic device and the server in the aforementioned manner, so that the second client can obtain the user information corresponding to the business demand information, and then forward it to the server through the business system, thereby avoiding the risk of user information being stolen in the process of the first client directly sending the user information to the server.

[0152] It should be noted that the device embodiment in this application corresponds to the aforementioned method embodiment. The specific principles in the device embodiment can be found in the contents of the aforementioned method embodiment and will not be repeated here.

[0153] The following will be combined Figure 15 An electronic device provided by this application is described.

[0154] See also Figure 15 Based on the above data processing method, the embodiments of the present application also provide another electronic device 200 including a processor 102 capable of executing the above data processing method. The electronic device 200 may be a smartphone, tablet computer, computer, or portable computer. The electronic device 200 also includes a memory 104 and a network module 106. The memory 104 stores a program capable of executing the content of the above embodiments, and the processor 102 can execute the program stored in the memory 104.

[0155] The processor 102 may include one or more cores for processing data and a message matrix unit. The processor 102 utilizes various interfaces and circuits to connect various components within the electronic device 200. It executes instructions, programs, code sets, or instruction sets stored in the memory 104, and accesses data stored in the memory 104 to perform various functions and process data within the electronic device 200. Optionally, the processor 102 may be implemented using at least one of the following hardware forms: a digital signal processing (DSP), a field-programmable gate array (FPGA), or a programmable logic array (PLA). The processor 102 may integrate one or a combination of a central processing unit (CPU), a graphics processing unit (GPU), and a modem. The CPU primarily handles the operating system, user interface, and application programs; the GPU is responsible for rendering and drawing display content; and the modem handles wireless communications. It is understood that the modem may not be integrated into the processor 102 and may be implemented separately via a communication chip.

[0156] The memory 104 may include a random access memory (RAM) or a read-only memory (ROM). The memory 104 may be used to store instructions, programs, codes, code sets, or instruction sets. The memory 104 may include a program storage area and a data storage area, wherein the program storage area may store instructions for implementing an operating system, instructions for implementing at least one function (such as a touch function, a sound playback function, an image playback function, etc.), instructions for implementing the following various method embodiments, etc. The data storage area may also store data created by the terminal 100 during use (such as a phone book, audio and video data, chat history data), etc.

[0157] The network module 106 is used to receive and transmit electromagnetic waves, converting electromagnetic waves into electrical signals, thereby communicating with a communication network or other devices. For example, the network module 106 can transmit broadcast data or parse broadcast data transmitted by other devices. The network module 106 may include various existing circuit components for performing these functions, such as an antenna, a radio frequency transceiver, a digital signal processor, an encryption / decryption chip, a subscriber identity module (SIM) card, a memory, and the like. The network module 106 can communicate with various networks such as the Internet, an intranet, or a wireless network, or communicate with other devices via a wireless network. The wireless network may include a cellular telephone network, a wireless local area network, or a metropolitan area network. For example, the network module 106 can exchange information with a base station.

[0158] Please refer to Figure 16 , which shows a block diagram of a computer-readable storage medium provided in an embodiment of the present application. The computer-readable medium 1100 stores program code, which can be called by a processor to execute the method described in the above method embodiment.

[0159] Computer-readable storage medium 1100 may be an electronic memory such as flash memory, EEPROM (Electrically Erasable Programmable Read-Only Memory), EPROM, hard disk, or ROM. Alternatively, computer-readable storage medium 1100 may include a non-transitory computer-readable storage medium. Computer-readable storage medium 1100 may have storage space for program code 1110 for executing any of the method steps described above. These program codes may be read from or written to one or more computer program products. Program code 1110 may be compressed, for example, in a suitable form.

[0160] The present application also provides a computer program product or computer program, which includes computer instructions stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium and executes the computer instructions, causing the computer device to perform the above-described data processing method.

[0161] In summary, the present application provides a data processing method, device, server and storage medium. After the first client in the electronic device sends a service request to the server, the server will send the service requirement information corresponding to the service request to the verification system. Correspondingly, the verification system will verify the electronic device and the server after receiving the service requirement information sent by the server. If the electronic device and the server pass the verification, the service requirement information is sent to the second client in the electronic device so that the second client obtains the user information corresponding to the service requirement information, and receives the user information sent by the second client to send the user information to the server. Thus, through the above-mentioned method, the verification system can return the service requirement information corresponding to the service requested by the electronic device to the second client in the electronic device after completing the verification of both the electronic device and the server, so that the second client can obtain the user information corresponding to the service requirement information, and then forward it to the server through the service system, thereby avoiding the risk of user information being stolen in the process of the first client directly sending the user information to the server.

[0162] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A data processing method, characterized in that: Applied to a verification system, the method comprises: Receiving service requirement information sent by a server, wherein the service requirement information is sent by the server after receiving a service request sent by a first client in the electronic device; the service requirement information is information that a user needs to submit to the server in the process of completing the service; authenticating the electronic device and authenticating the server; If the electronic device and the server pass the verification, the service requirement information is sent to a second client in the electronic device, so that the second client obtains user information corresponding to the service requirement information, and the second client is a client corresponding to the verification system; Receive the user information sent by the second client, and send the user information to the server.

2. The method according to claim 1, characterized in that The verifying the electronic device includes: Verifying the signature of the electronic device; If the signature passes the verification of the verification system, it is determined that the electronic device passes the verification.

3. The method according to claim 1, characterized in that The verifying the server includes: Verifying the signature of the server; If the signature passes the verification of the verification system, it is determined that the server passes the verification.

4. The method according to claim 3, characterized in that The verification system includes an authentication library established based on the blockchain; the verification of the signature of the server includes: Obtaining a signature of the server; Querying whether the authentication library stores a corresponding relationship between the signature and the domain name of the server; If the corresponding relationship exists in the authentication library, it is determined that the signature of the server passes the verification.

5. The method according to claim 1, characterized in that Before verifying the electronic device and verifying the server, the method further includes: Generate verification connection information; Sending the verification connection information to a second client in the electronic device; If a feedback message is received after the verification connection information is triggered, the electronic device is verified, and the server is verified.

6. The method according to claim 5, characterized in that The sending the verification connection information to the second client in the electronic device includes: Generate a QR code carrying the verification connection information; The QR code is sent to a second client in the electronic device.

7. A data processing method, characterized in that: Applied to a second client in an electronic device, the method comprises: Receiving business requirement information sent by the verification system, the business requirement information is sent by the verification system after the verification system verifies the electronic device and successfully verifies the server after receiving the business requirement information sent by the server, wherein the server sends the business requirement information to the verification system after receiving the business request sent by the first client in the electronic device; the business requirement information is information that the user needs to submit to the server in the process of completing the business; Obtaining user information corresponding to the business demand information; The user information is sent to the verification system, so that the verification system sends the user information to the server.

8. The method according to claim 7, characterized in that The receiving of the business requirement information sent by the verification system also includes: Receiving verification connection information sent by the verification system; If it is detected that the verification connection information is triggered, feedback information is sent to the verification system, so that the verification system can verify the electronic device and the server.

9. The method according to claim 8, characterized in that The receiving the verification connection information sent by the verification system includes: receiving a QR code carrying the verification connection information; If it is detected that the verification connection information is triggered, sending feedback information to the verification system includes: If an instruction to identify the two-dimensional code is detected, it is determined that the verification connection information is triggered, and feedback information is sent to the verification system.

10. The method according to claim 7, characterized in that The second client is a plug-in provided in the first client.

11. A data processing method, characterized in that: Applied to a server, the method comprises: Receiving a service request sent by a first client in an electronic device; Sending business requirement information corresponding to the business request to the verification system, so that the verification system can verify the electronic device and the server, and after successful verification, sending the business requirement information to the second client in the electronic device, so that the second client can obtain user information corresponding to the business requirement information, and return the user information to the verification system; the business requirement information is information that the user needs to submit to the server in the process of completing the business; Receive the user information forwarded by the verification system.

12. A data processing device, characterized in that: Running on a verification system, the device comprises: The server communication unit is used to receive the service demand information sent by the server, wherein the service demand information is sent by the server after receiving the service request sent by the first client in the electronic device; the service demand information is the information that the user needs to submit to the server in the process of completing the service; A verification unit, used to verify the electronic device and the server; An electronic device communication unit, configured to send the service requirement information to a second client in the electronic device if the electronic device and the server pass the verification, so that the second client obtains user information corresponding to the service requirement information, and the second client is a client corresponding to the verification system; The server communication unit is further configured to receive the user information sent by the second client and send the user information to the server.

13. A data processing device, characterized in that: A second client running in an electronic device, the device comprising: An information receiving unit, used to receive business demand information sent by the verification system, wherein the business demand information is sent by the verification system after the verification system verifies the electronic device and successfully verifies the server after receiving the business demand information sent by the server, wherein the server sends the business demand information to the verification system after receiving the business request sent by the first client in the electronic device; the business demand information is information that the user needs to submit to the server in the process of completing the business; A user information acquisition unit, used to acquire user information corresponding to the business demand information; An information sending unit is used to send the user information to the verification system, so that the verification system sends the user information to the server.

14. A server, characterized in that: The method comprises a processor and a memory; one or more programs are stored in the memory and configured to be executed by the processor to implement any one of the methods of claims 1-6.

15. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores program code, wherein when the program code is executed by a processor, the method according to any one of claims 1 to 6 is executed.

Images