A method, device, equipment and storage medium for protecting transaction privacy data

Abstract

The present invention discloses a method, device, equipment and storage medium for protecting transaction privacy data. The method comprises: in response to a transaction request of a user terminal, obtaining initiator information, transaction information and receiver information, and generating a transaction initiation message according to the initiator information and transaction information; wherein the receiver information comprises a receiver account and receiver verification information; using a first financial system public key, encrypting the transaction initiation message and the receiver account to obtain an initiation encrypted message; using a transaction platform public key, encrypting the initiation encrypted message and the receiver verification information to obtain a data encryption package, and sending the data encryption package to the transaction platform. This technical solution solves the problem of poor privacy protection of user transactions, and can effectively reduce the user transaction information that can be mastered by the transaction platform while ensuring transaction reliability.

Description

Technical Field

[0001] The present invention relates to the field of data processing technology, and in particular to a method, device, equipment and storage medium for protecting transaction privacy data. Background Art

[0002] With the rapid development of the Internet, online transactions through trading platforms have brought convenience to the production and life of the general public.

[0003] At present, as described in the patent document CN108537520B, the business process of online transactions is generally as follows: (1) the bank system receives a transaction request message sent by the transaction platform; (2) the bank system generates a third-party payment transaction request message based on the transaction request message, wherein the third-party payment transaction request message includes third-party payment information and transaction message information; (3) the bank system sends the third-party payment transaction request message to the bank channel processing subsystem of the credit card system via the online service integration platform, so that the bank channel processing subsystem processes the third-party payment transaction request message according to the third-party payment information.

[0004] However, in the prior art, when users conduct transactions through trading platforms, transaction information, such as payment accounts, receiving accounts, and transaction amounts, can be easily obtained by trading platforms, which in turn causes transaction privacy leakage and endangers user information security. Therefore, how to effectively prevent users' transaction information from being obtained by trading platforms, protect user privacy, and safeguard user information security is an urgent problem to be solved. Summary of the invention

[0005] The present invention provides a method, device, equipment and storage medium for protecting transaction privacy data to solve the problem of poor protection of user transaction privacy. While ensuring transaction reliability, it can effectively reduce the user transaction information that can be mastered by the transaction platform.

[0006] According to one aspect of the present invention, a method for protecting transaction privacy data is provided, the method being executed by a transaction protection platform, the method comprising:

[0007] In response to a transaction request from a user terminal, acquiring initiator information, transaction information and recipient information, and generating a transaction initiation message according to the initiator information and transaction information; wherein the recipient information includes a recipient account and recipient verification information;

[0008] Using the first financial system public key, encrypt the transaction initiation message and the recipient's account to obtain an initiation encrypted message;

[0009] The initiating encrypted message and the receiving party verification information are encrypted using the trading platform public key to obtain a data encryption package, and the data encryption package is sent to the trading platform.

[0010] According to another aspect of the present invention, a method for protecting transaction privacy data is provided, the method being executed by a transaction platform, the method comprising:

[0011] Receive the data encryption package sent by the transaction protection platform;

[0012] Decrypt the encrypted data package using the trading platform private key to obtain the recipient verification information and the initiating encrypted message encrypted using the first financial system public key;

[0013] If the verification is successful according to the recipient verification information, the second financial system public key is used to encrypt the initiating encrypted message, the recipient verification information and the pre-acquired transaction platform verification information to obtain a received encrypted package;

[0014] The received encrypted package is sent to a financial system so that the financial system performs account transactions according to the received encrypted package.

[0015] According to another aspect of the present invention, a device for protecting transaction privacy data is provided. The device is configured on a transaction protection platform and includes:

[0016] A transaction initiation message generation module, used to obtain initiator information, transaction information and recipient information in response to a transaction request from a user terminal, and generate a transaction initiation message according to the initiator information and transaction information; wherein the recipient information includes a recipient account and recipient verification information;

[0017] An initiating encrypted message generation module, used to encrypt the transaction initiation message and the recipient's account using the first financial system public key to obtain an initiating encrypted message;

[0018] The data encryption package sending module is used to encrypt the initiating encryption message and the receiver verification information using the public key of the trading platform to obtain a data encryption package, and send the data encryption package to the trading platform.

[0019] According to another aspect of the present invention, a device for protecting transaction privacy data is provided, the device being configured on a transaction platform and comprising:

[0020] A data encryption package receiving module, used to receive the data encryption package sent by the transaction protection platform;

[0021] An initiation encrypted message generation module is used to decrypt the data encryption package using the transaction platform private key to obtain the recipient verification information and the initiation encrypted message obtained by encrypting the first financial system public key;

[0022] A receiving encrypted package generating module, configured to encrypt the initiating encrypted message, the receiving party verification information and the pre-acquired transaction platform verification information using the second financial system public key to obtain a receiving encrypted package if the verification is successful according to the receiving party verification information;

[0023] The received encrypted package sending module is used to send the received encrypted package to the financial system so that the financial system can perform account transactions according to the received encrypted package.

[0024] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0025] at least one processor; and

[0026] a memory communicatively connected to the at least one processor; wherein,

[0027] The memory stores a computer program that can be executed by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the transaction privacy data protection method described in any embodiment of the present invention.

[0028] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the transaction privacy data protection method described in any embodiment of the present invention when executed.

[0029] The technical solution of the embodiment of the present invention can solve the problem of poor protection of user transaction privacy by encrypting the transaction privacy data in the initiator information, transaction information and recipient information using the public key of the financial system, so that the transaction platform can only obtain the recipient's verification information. While ensuring the reliability of the transaction, it can effectively reduce the user transaction information that the transaction platform can grasp.

[0030] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative work.

[0032] Figure 1 is a flow chart of a method for protecting transaction privacy data provided according to the first embodiment of the present invention;

[0033] Figure 2 is a flow chart of a method for protecting transaction privacy data provided according to Embodiment 2 of the present invention;

[0034] Figure 3 This is a schematic diagram of the structure of a device for protecting transaction privacy data provided according to Embodiment 3 of the present invention;

[0035] Figure 4 This is a schematic diagram of the structure of a device for protecting transaction privacy data provided according to a fourth embodiment of the present invention;

[0036] Figure 5 It is a structural schematic diagram of an electronic device for implementing the transaction privacy data protection method according to an embodiment of the present invention. DETAILED DESCRIPTION

[0037] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0038] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0039] Embodiment 1

[0040] Figure 1 A flowchart of a method for protecting transaction privacy data is provided for the first embodiment of the present invention. This embodiment is applicable to the protection of transaction privacy data. The method can be executed by a transaction privacy data protection device configured on a transaction protection platform. The device can be implemented in the form of hardware and / or software and can be configured in an electronic device. Figure 1 As shown, the method includes:

[0041] S110. In response to a transaction request from a user terminal, obtain initiator information, transaction information and recipient information, and generate a transaction initiation message according to the initiator information and transaction information; wherein the recipient information includes a recipient account and recipient verification information.

[0042] This solution can be executed by the transaction protection platform. When the user terminal conducts transactions through the transaction platform, it can send a transaction request to the transaction protection platform. The transaction platform can be a third-party payment platform, and the user terminal can conduct transactions such as transfers, payments, and receipts through the third-party payment platform. When the user terminal performs operations such as scanning codes, transfers, and payments on the transaction platform, in order to prevent the transaction platform from obtaining the user's transaction privacy data, the transaction protection platform can respond to the transaction request initiated by the user terminal and obtain the initiator information, transaction information, and recipient information.

[0043] Among them, the initiator can be the payer, for example, the initiator of the scan code payment is the payer. The initiator can also be the payee, for example, the initiator of the scan code payment is the payee. The initiator can also be the transfer initiator. Correspondingly, the receiver can be the payee, the payee, or the transfer receiver. The initiator information can include information such as the initiator account, transaction password, and initiator verification information. Similarly, the receiver information can include information such as the receiver account, receiver verification information, etc. Among them, the verification information can include the signature, the agreement, and the verification result of the user's biometric information. The transaction information can include information such as the transaction time, transaction account, transaction amount, and transaction type.

[0044] The transaction protection platform can generate a transaction initiation message based on the initiator information and transaction information. Taking the QR code scanning payment scenario as an example, the content of the transaction initiation message can be: payment account + payment password + payment amount. The transaction initiation message can also be attached with the payer's signature and payer's public key to increase the decryption and verification process in the information acquisition process to ensure information security.

[0045] S120: Using the first financial system public key, encrypt the transaction initiation message and the recipient account to obtain an encrypted initiation message.

[0046] The transaction protection platform can use the public key of the first financial system to encrypt the transaction initiation message and the recipient's account to generate an encrypted initiation message. The content of the encrypted initiation message can be expressed as: (transaction initiation message + recipient's account) 第一金融系统公钥加密 .

[0047] The first financial system public key may be the public key of the financial institution to which the initiator belongs. For example, if the initiator is an account of Bank A, the first financial system public key may be the public key of Bank A. To facilitate information transmission, each financial institution may also use a unified public key. For example, Bank A and Bank B both belong to a banking association. Regardless of whether the initiator is an account of Bank A or Bank B, the first financial system public key may be the UnionPay public key.

[0048] S130: Use the public key of the trading platform to encrypt the initiating encrypted message and the recipient verification information to obtain a data encryption package, and send the data encryption package to the trading platform.

[0049] After receiving the encrypted initiation message, the transaction protection platform can use the transaction platform public key to encrypt the encrypted initiation message and the recipient's verification information. The resulting encrypted data package can be expressed as: ((transaction initiation message + recipient account) 第一金融系统公钥加密 +Receiver verification information) 交易平台公钥 .

[0050] After encrypting the data using the trading platform public key, the transaction protection platform can send the data encryption package to the trading platform to conduct transactions through the trading platform.

[0051] In this solution, optionally, the initiator information includes the initiator account, transaction password, initiator verification information and the first financial system public key; the transaction information includes the transaction amount and transaction type;

[0052] Correspondingly, a transaction initiation message is generated according to the initiator information and the transaction information, including:

[0053] A transaction initiation message is generated according to the initiator account, transaction password, transaction amount, transaction type, initiator verification information and the first financial system public key.

[0054] This solution includes the initiator verification information and the first financial system public key in the transaction initiation message, which is conducive to the transaction protection platform to use the initiator verification information to verify the initiator's identity and use the first financial system public key to encrypt the transaction initiation message and the recipient's account.

[0055] Based on the above solution, optionally, after generating the transaction initiation message, the method further includes:

[0056] Verifying the identity of the initiator according to the initiator verification information in the transaction initiation message;

[0057] If the verification is successful, the transaction initiation message and the recipient's account are encrypted using the first financial system public key in the transaction initiation message to obtain an encrypted initiation message.

[0058] This solution can effectively ensure the security of transactions and information.

[0059] It should be noted that the first financial system public key and the transaction platform public key in this solution can be managed by a password management service, and the password management service can manage the public keys and private keys of all financial institutions, third-party payment platforms and user terminals.

[0060] This technical solution encrypts the transaction privacy data in the initiator information, transaction information and recipient information using the public key of the financial system, so that the trading platform can only obtain the recipient's verification information. This can solve the problem of poor protection of user transaction privacy, and effectively reduce the user transaction information that the trading platform can grasp while ensuring transaction reliability.

[0061] Embodiment 2

[0062] Figure 2 A flowchart of a method for protecting transaction privacy data is provided for the second embodiment of the present invention. This embodiment is applicable to the protection of transaction privacy data. The method can be executed by a transaction privacy data protection device configured on a transaction platform. The device can be implemented in the form of hardware and / or software, and the device can be configured in an electronic device. Figure 2 As shown, the method includes:

[0063] S210: Receive the data encryption package sent by the transaction protection platform.

[0064] This solution can be executed by the trading platform, which communicates with the transaction protection platform and receives the data encryption package that is double-encrypted by the transaction protection platform using different public keys.

[0065] S220. Decrypt the data encryption package using the transaction platform private key to obtain recipient verification information and an initiating encryption message encrypted using the first financial system public key.

[0066] The trading platform can use the trading platform private key to decrypt the data encryption package to obtain the initiating encrypted message and the recipient's verification information.

[0067] Among them, the initiation encrypted message may include a transaction initiation message and a recipient account, and the transaction initiation message may include initiator information and transaction information. The initiator information may include information such as the initiator account, transaction password, and initiator verification information. The transaction information may include information such as transaction time, transaction account, transaction amount, and transaction type. It can be understood that the initiator may be the payee, for example, the initiator of the scan code payment is the payee. The initiator may also be the payee, for example, the initiator of the scan code payment is the payee. The initiator may also be the transfer initiator. Correspondingly, the recipient may be the payee, the payee, or the transfer recipient.

[0068] S230: If the verification is successful according to the recipient verification information, the second financial system public key is used to encrypt the initiating encrypted message, the recipient verification information, and the pre-acquired transaction platform verification information to obtain a received encrypted package.

[0069] The trading platform can verify the recipient's verification information. If the verification is successful, the second financial system public key is used to encrypt the initiating encrypted message, the recipient's verification information, and the pre-acquired trading platform verification information. The recipient's verification information may include the signature, protocol, and verification results of the user's biometric information. The trading platform verification information may include the trading platform's signature, security certificate, and security protocol.

[0070] It should be noted that, since the financial institutions to which the accounts of both parties to the transaction belong may be the same or different, and the transaction paths are diverse, the second financial system public key may be the same as or different from the first financial system public key.

[0071] S240: Send the received encrypted package to a financial system, so that the financial system performs account transactions according to the received encrypted package.

[0072] The trading platform can send the received encrypted package to the financial system. The financial system may include the financial system of the financial institution to which the initiator's account belongs, the financial system of the financial institution to which the recipient's account belongs, or the financial joint system of financial institutions. The financial system can decrypt the received encrypted package layer by layer to obtain all the information required for the transaction, and then execute the transaction task according to the information required for the transaction.

[0073] In this solution, specifically, sending the received encrypted package to a financial system so that the financial system performs an account transaction according to the received encrypted package includes:

[0074] The received encrypted package is sent to the financial system so that the financial system uses the second financial system private key to decrypt the received encrypted package to obtain the initiation encrypted message and the recipient verification information; after determining that the verification is successful based on the transaction platform verification information, the first financial system private key is used to decrypt the initiation encrypted message to obtain the transaction initiation message and the recipient account, and the transaction is performed based on the transaction initiation message and the recipient account.

[0075] The financial system can determine the transaction roles of the initiator account and the recipient account according to the transaction type in the transaction initiation message, and then conduct the transaction based on the transaction role information and the transaction amount, and generate a transaction result. Taking the QR code scanning payment scenario as an example, the initiator account is the payment account and the recipient account is the payment account. The financial system can perform corresponding data processing on the payment account and the payment account according to the payment account, the payment account and the transaction amount. After the transaction task is completed, the financial system can generate a transaction result to indicate whether the transaction is successful.

[0076] In this solution, the financial system can obtain the information required for the transaction through layer-by-layer decryption, execute the transaction task, and ensure the normal operation of the transaction. It should be noted that the financial system has the legitimacy to obtain transaction privacy data. When the transaction needs to be recovered, the financial system can provide users with relevant transaction vouchers.

[0077] Based on the above solution, optionally, after sending the received encrypted package to the financial system so that the financial system performs account transactions according to the received encrypted package, the method further includes:

[0078] Receive the transaction result sent by the financial system, and feed back the transaction result to the user terminal.

[0079] After completing the transaction task, the financial system can send the transaction result to the transaction platform. After receiving the transaction result, the transaction platform can transmit the transaction result to the user terminal to prompt the user of the transaction completion status.

[0080] It should be noted that all keys in this solution can be managed by a password management service, which can manage the public and private keys of all financial institutions, third-party payment platforms and user terminals.

[0081] This technical solution encrypts the transaction privacy data in the initiator information, transaction information and recipient information using the public key of the financial system, so that the trading platform can only obtain the recipient's verification information. This can solve the problem of poor protection of user transaction privacy, and effectively reduce the user transaction information that the trading platform can grasp while ensuring transaction reliability.

[0082] Embodiment 3

[0083] Figure 3 This is a schematic diagram of the structure of a device for protecting transaction privacy data provided by the third embodiment of the present invention. The device is configured on a transaction protection platform, such as Figure 3 As shown, the device comprises:

[0084] The transaction initiation message generation module 310 is used to obtain the initiator information, transaction information and recipient information in response to the transaction request of the user terminal, and generate a transaction initiation message according to the initiator information and transaction information; wherein the recipient information includes the recipient account and recipient verification information;

[0085] The initiation encrypted message generation module 320 is used to encrypt the transaction initiation message and the recipient's account using the first financial system public key to obtain the initiation encrypted message;

[0086] The data encryption package sending module 330 is used to encrypt the initiating encryption message and the receiver verification information using the trading platform public key to obtain a data encryption package, and send the data encryption package to the trading platform.

[0087] In this solution, optionally, the initiator information includes the initiator account, transaction password, initiator verification information and the first financial system public key; the transaction information includes the transaction amount and transaction type;

[0088] Accordingly, the transaction initiation message generation module 310 is specifically used for:

[0089] A transaction initiation message is generated according to the initiator account, transaction password, transaction amount, transaction type, initiator verification information and the first financial system public key.

[0090] Based on the above solution, optionally, the device further includes:

[0091] The initiator verification module is used to verify the identity of the initiator according to the initiator verification information in the transaction initiation message; if the verification is successful, the transaction initiation message and the recipient account are encrypted using the first financial system public key in the transaction initiation message to obtain an initiation encrypted message.

[0092] The transaction privacy data protection device provided in the embodiment of the present invention can execute the transaction privacy data protection method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0093] Embodiment 4

[0094] Figure 4 This is a schematic diagram of the structure of a device for protecting transaction privacy data provided by the fourth embodiment of the present invention. The device is configured on a transaction platform, such as Figure 4 As shown, the device comprises:

[0095] The data encryption package receiving module 410 is used to receive the data encryption package sent by the transaction protection platform;

[0096] An initiating encrypted message generation module is used to decrypt the data encryption package 420 using the trading platform private key to obtain the recipient verification information and the initiating encrypted message obtained by encrypting the first financial system public key;

[0097] The receiving encrypted package generating module 430 is used to encrypt the initiating encrypted message, the receiving party verification information and the pre-acquired transaction platform verification information using the second financial system public key to obtain a receiving encrypted package if the verification is successful according to the receiving party verification information;

[0098] The received encrypted package sending module 440 is used to send the received encrypted package to the financial system so that the financial system can perform account transactions according to the received encrypted package.

[0099] In the present solution, optionally, the received encrypted package sending module 440 is specifically used to send the received encrypted package to the financial system, so that the financial system uses the second financial system private key to decrypt the received encrypted package to obtain the initiating encrypted message and the recipient verification information; after determining that the verification is successful based on the transaction platform verification information, use the first financial system private key to decrypt the initiating encrypted message to obtain the transaction initiation message and the recipient account, and perform transactions based on the transaction initiation message and the recipient account.

[0100] In a feasible solution, the device further includes:

[0101] The transaction result feedback module is used to receive the transaction result sent by the financial system and feed back the transaction result to the user terminal.

[0102] The transaction privacy data protection device provided in the embodiment of the present invention can execute the transaction privacy data protection method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0103] Embodiment 5

[0104] Figure 5A schematic diagram of an electronic device 510 that can be used to implement an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0105] like Figure 5 As shown, the electronic device 510 includes at least one processor 511, and a memory connected to the at least one processor 511 in communication, such as a read-only memory (ROM) 512, a random access memory (RAM) 513, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 511 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 512 or the computer program loaded from the storage unit 518 to the random access memory (RAM) 513. In the RAM 513, various programs and data required for the operation of the electronic device 510 can also be stored. The processor 511, the ROM 512, and the RAM 513 are connected to each other via a bus 514. An input / output (I / O) interface 515 is also connected to the bus 514.

[0106] A number of components in the electronic device 510 are connected to the I / O interface 515, including: an input unit 516, such as a keyboard, a mouse, etc.; an output unit 517, such as various types of displays, speakers, etc.; a storage unit 518, such as a disk, an optical disk, etc.; and a communication unit 519, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 519 allows the electronic device 510 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0107] The processor 511 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 511 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 511 executes the various methods and processes described above, such as a method for protecting transaction privacy data.

[0108] In some embodiments, the method for protecting transaction privacy data may be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 518. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 510 via the ROM 512 and / or the communication unit 519. When the computer program is loaded into the RAM 513 and executed by the processor 511, one or more steps of the method for protecting transaction privacy data described above may be performed. Alternatively, in other embodiments, the processor 511 may be configured to execute the method for protecting transaction privacy data in any other appropriate manner (e.g., by means of firmware).

[0109] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0110] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0111] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, device, or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices, or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0112] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0113] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0114] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0115] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0116] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A method for protecting transaction privacy data, characterized in that: The method is performed by a transaction protection platform, and includes: In response to a transaction request from a user terminal, the initiator information, transaction information and recipient information are obtained, and a transaction initiation message is generated according to the initiator information and transaction information; wherein the recipient information includes the recipient account and recipient verification information; wherein the initiator is the scan code payee or the transfer initiator; Using the first financial system public key, the transaction initiation message and the recipient's account are encrypted to obtain an initiation encrypted message; wherein the first financial system public key is the public key of the financial institution to which the initiator belongs; Using the public key of the trading platform, encrypting the initiating encrypted message and the recipient verification information to obtain a data encryption package, and sending the data encryption package to the trading platform; The initiator information includes the initiator account, transaction password, initiator verification information and the first financial system public key; the transaction information includes the transaction amount and transaction type; Correspondingly, a transaction initiation message is generated according to the initiator information and the transaction information, including: Generate a transaction initiation message according to the initiator's account, transaction password, transaction amount, transaction type, initiator's verification information and the first financial system public key; The first financial system public key and the transaction platform public key are both managed by a password management service; wherein the transaction platform is a third-party payment platform.

2. The method according to claim 1, characterized in that After generating the transaction initiation message, the method further includes: The identity of the initiator is verified according to the initiator verification information in the transaction initiation message; if the verification is successful, the transaction initiation message and the recipient account are encrypted using the first financial system public key in the transaction initiation message to obtain an encrypted initiation message.

3. A method for protecting transaction privacy data, characterized in that: The method is executed by a trading platform, and comprises: Receive the data encryption package sent by the transaction protection platform; Decrypt the encrypted data package using the trading platform private key to obtain the recipient verification information and the initiating encrypted message encrypted using the first financial system public key; If the verification is successful according to the recipient verification information, the second financial system public key is used to encrypt the initiating encrypted message, the recipient verification information and the pre-acquired transaction platform verification information to obtain a received encrypted package; Sending the received encrypted package to a financial system so that the financial system performs an account transaction according to the received encrypted package; The step of sending the received encrypted package to a financial system so that the financial system performs an account transaction according to the received encrypted package includes: The received encrypted package is sent to the financial system so that the financial system uses the second financial system private key to decrypt the received encrypted package to obtain the initiation encrypted message and the recipient verification information; after determining that the verification is successful based on the transaction platform verification information, the first financial system private key is used to decrypt the initiation encrypted message to obtain the transaction initiation message and the recipient account, and the transaction is performed based on the transaction initiation message and the recipient account.

4. The method according to claim 3, characterized in that After sending the received encrypted package to the financial system so that the financial system performs account transactions according to the received encrypted package, the method further includes: Receive the transaction result sent by the financial system, and feed back the transaction result to the user terminal.

5. A device for protecting transaction privacy data, characterized in that: The device is configured on a transaction protection platform and includes: A transaction initiation message generation module, used to respond to a transaction request from a user terminal, obtain initiator information, transaction information and recipient information, and generate a transaction initiation message according to the initiator information and transaction information; wherein the recipient information includes the recipient account and recipient verification information; wherein the initiator is a scan code payee or a transfer initiator; An initiating encrypted message generation module is used to encrypt the transaction initiation message and the recipient's account using the first financial system public key to obtain an initiating encrypted message; wherein the first financial system public key is the public key of the financial institution to which the initiator belongs; A data encryption package sending module, used to encrypt the initiating encryption message and the receiver verification information using the trading platform public key to obtain a data encryption package, and send the data encryption package to the trading platform; The initiator information includes the initiator account, transaction password, initiator verification information and the first financial system public key; the transaction information includes the transaction amount and transaction type; Accordingly, the transaction initiation message generation module is specifically used for: Generate a transaction initiation message according to the initiator's account, transaction password, transaction amount, transaction type, initiator's verification information and the first financial system public key; The first financial system public key and the transaction platform public key are both managed by a password management service; wherein the transaction platform is a third-party payment platform.

6. A device for protecting transaction privacy data, characterized in that: The device is configured on a trading platform and includes: A data encryption package receiving module, used to receive the data encryption package sent by the transaction protection platform; An initiation encrypted message generation module is used to decrypt the data encryption package using the transaction platform private key to obtain the recipient verification information and the initiation encrypted message encrypted according to the first financial system public key; wherein the first financial system public key is the public key of the financial institution to which the initiator belongs; A receiving encrypted package generating module, configured to encrypt the initiating encrypted message, the receiving party verification information and the pre-acquired transaction platform verification information using the second financial system public key to obtain a receiving encrypted package if the verification is successful according to the receiving party verification information; A received encrypted package sending module, used for sending the received encrypted package to a financial system, so that the financial system performs account transactions according to the received encrypted package; The encrypted packet receiving and sending module is specifically used for: The received encrypted package is sent to the financial system so that the financial system uses the second financial system private key to decrypt the received encrypted package to obtain the initiation encrypted message and the recipient verification information; after determining that the verification is successful based on the transaction platform verification information, the first financial system private key is used to decrypt the initiation encrypted message to obtain the transaction initiation message and the recipient account, and the transaction is performed based on the transaction initiation message and the recipient account; wherein the transaction platform is a third-party payment platform.

7. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the transaction privacy data protection method described in any one of claims 1 to 4.

8. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the transaction privacy data protection method according to any one of claims 1 to 4 when executed.

Images