Packet processing method, apparatus and device

Abstract

The message processing method, device and equipment provided by the embodiments of the present application are applied to a branch system, the branch system is provided with a software development kit (SDK), the SDK is provided with an encryption key, the method comprises the following steps: a first message to be processed can be determined; a symmetric key is obtained through the SDK; the encrypted private key is decrypted through the SDK by using the symmetric key, so that the decrypted private key corresponding to the encrypted private key is obtained; the first message is processed through the SDK by using the decrypted private key, so that a target message corresponding to the first message is obtained. In the above process, the automatic switching of the head office system and the branch system can be realized based on the software development kit (SDK), so that the business response time of the branch system is reduced, and the efficiency of information transmission is improved.

Description

Technical Field

[0001] This application relates to the field of computer technology, and in particular to a message processing method, apparatus, and device. Background Technology

[0002] Encryption and decryption processes can effectively ensure information security and prevent information leakage during transmission.

[0003] In related technologies, public key infrastructure platforms can be used to encrypt and decrypt information transmission processes within an enterprise. However, in this process, the public key infrastructure platform is typically deployed only in the head office system. When multiple branch systems need to transmit information, they frequently need to call the public key infrastructure platform located in the head office system, resulting in long business response times. This makes it impossible to meet the information transmission needs of branch systems with stringent performance requirements for business response time, leading to low efficiency in information transmission. Summary of the Invention

[0004] This application provides a message processing method, apparatus, and device that can automatically switch between the head office system and the branch system based on an SDK, thereby reducing the business response time of the branch system and improving the efficiency of information transmission.

[0005] In a first aspect, embodiments of this application provide a message processing method applied to a branch system, wherein the branch system is equipped with a software development kit (SDK) and the SDK contains an encryption key, and the method includes:

[0006] Identify the first message to be processed;

[0007] Obtain the symmetric key using the SDK;

[0008] The SDK uses the symmetric key to decrypt the encrypted private key to obtain the decrypted private key corresponding to the encrypted private key.

[0009] The SDK processes the first message using the decrypted private key to obtain the target message corresponding to the first message.

[0010] In one possible implementation, obtaining the symmetric key via the SDK includes:

[0011] Obtain the message information of the first message or the processing time of the first message by the head office system. The message information includes the type of the first message or the maximum receivable delay of the first message.

[0012] The symmetric key is obtained through the SDK based on the message information or the processing time.

[0013] In one possible implementation, obtaining the symmetric key via the SDK based on the message information or the processing time includes:

[0014] When the message information meets the first preset condition or the processing time is greater than or equal to the first preset time, the symmetric key is obtained through the SDK;

[0015] The first preset condition includes at least one of the following: the type of the first message is a preset type, and the maximum receivable delay is less than or equal to the preset delay.

[0016] In one possible implementation, before obtaining the processing time of the first message by the head office system, the method further includes:

[0017] A message processing request is sent to the head office system, the message processing request including the first message.

[0018] In one possible implementation, obtaining the symmetric key via the SDK includes:

[0019] Determine whether the symmetric key exists in the SDK;

[0020] If so, then obtain the symmetric key from the SDK;

[0021] If not, request the symmetric key from the head office system and store the symmetric key in the SDK.

[0022] In one possible implementation, before obtaining the symmetric key from the SDK, the method further includes:

[0023] Request the symmetric key from the head office system;

[0024] The symmetric key is stored in the SDK.

[0025] In one possible implementation, the first message is processed using the decrypted private key via the SDK to obtain the target message corresponding to the first message, including:

[0026] If the first message is a message to be encrypted, then the first message is encrypted using the decrypted private key to obtain the target message, which is the encrypted version of the first message;

[0027] If the first message is a message to be decrypted, then the first message is decrypted using the decrypted private key to obtain the target message, which is the decrypted message of the first message.

[0028] Secondly, embodiments of this application provide a message processing apparatus applied to a branch system. The branch system includes a software development kit (SDK) containing an encryption key, and comprises a first determining module, an acquiring module, a decryption module, and a second determining module.

[0029] The first determining module is used to determine the first message to be processed;

[0030] The acquisition module is used to acquire the symmetric key through the SDK;

[0031] The decryption module is used to decrypt the encrypted private key using the symmetric key via the SDK to obtain the decrypted private key corresponding to the encrypted private key.

[0032] The second determining module is used to process the first message using the decrypted private key through the SDK to obtain the target message corresponding to the first message.

[0033] In one possible implementation, the acquisition module is specifically used for:

[0034] Obtain the message information of the first message or the processing time of the first message by the head office system. The message information includes the type of the first message or the maximum receivable delay of the first message.

[0035] The symmetric key is obtained through the SDK based on the message information or the processing time.

[0036] In one possible implementation, the acquisition module is specifically used for:

[0037] When the message information meets the first preset condition or the processing time is greater than or equal to the first preset time, the symmetric key is obtained through the SDK;

[0038] The first preset condition includes at least one of the following: the type of the first message is a preset type, and the maximum receivable delay is less than or equal to the preset delay.

[0039] In one possible implementation, the acquisition module is specifically used for:

[0040] A message processing request is sent to the head office system, the message processing request including the first message.

[0041] In one possible implementation, the acquisition module is specifically used for:

[0042] Determine whether the symmetric key exists in the SDK;

[0043] If so, then obtain the symmetric key from the SDK;

[0044] If not, request the symmetric key from the head office system and store the symmetric key in the SDK.

[0045] In one possible implementation, the acquisition module is specifically used for:

[0046] Request the symmetric key from the head office system;

[0047] The symmetric key is stored in the SDK.

[0048] In one possible implementation, the second determining module is specifically used for:

[0049] If the first message is a message to be encrypted, then the first message is encrypted using the decrypted private key to obtain the target message, which is the encrypted version of the first message;

[0050] If the first message is a message to be decrypted, then the first message is decrypted using the decrypted private key to obtain the target message, which is the decrypted message of the first message.

[0051] Thirdly, embodiments of this application provide a message processing device, including: a processor and a memory;

[0052] The memory is used to store computer programs;

[0053] The processor is configured to execute a computer program stored in the memory to implement the method as described in any of the first aspects.

[0054] Fourthly, embodiments of this application provide a computer-readable storage medium storing computer-executable instructions, which, when executed by a processor, are used to implement the method described in any of the first aspects.

[0055] Fifthly, embodiments of this application provide a computer program product, including a computer program that, when executed by a processor, implements the method described in any of the first aspects.

[0056] The message processing method, apparatus, and device provided in this application can determine a first message to be processed; obtain a symmetric key through an SDK; decrypt the encrypted private key using the symmetric key through the SDK to obtain a decrypted private key corresponding to the encrypted private key; and process the first message using the decrypted private key through the SDK to obtain a target message corresponding to the first message. In the above process, automatic switching between the head office system and branch system can be achieved based on the SDK, thereby reducing the business response time of the branch system and improving the efficiency of information transmission. Attached Figure Description

[0057] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0058] Figure 1 A schematic diagram illustrating the application scenarios provided in the embodiments of this application;

[0059] Figure 2 A flowchart illustrating a message processing method provided in an embodiment of this application;

[0060] Figure 3 A flowchart illustrating a message processing method based on the first judgment method provided in an embodiment of this application;

[0061] Figure 4 A flowchart illustrating a message processing method based on the second judgment method provided in an embodiment of this application;

[0062] Figure 5 A schematic diagram of the structure of a message processing apparatus provided in an embodiment of this application;

[0063] Figure 6 This is a schematic diagram of the hardware structure of the message processing device provided in the embodiments of this application.

[0064] The accompanying drawings illustrate specific embodiments of this application, which will be described in more detail below. These drawings and descriptions are not intended to limit the scope of the concept in any way, but rather to illustrate the concept of this application to those skilled in the art through reference to particular embodiments. Detailed Implementation

[0065] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0066] Figure 1 This is a schematic diagram illustrating an application scenario provided in an embodiment of this application. Please refer to [link / reference]. Figure 1 The system includes message processing device 101 and message processing device 102. Message processing device 101 is equipped with a branch system, which includes a determination device, private key encryption escrow, and a software development kit (SDK). Message processing device 102 is equipped with a head office system, which includes a public key infrastructure platform and an encryption platform.

[0067] The determining device in message device 101 can be used to determine the first message to be processed. After obtaining the first message to be processed by the determining device, the branch system can process the first message in the following two ways:

[0068] The first method involves sending a message processing request to the public key infrastructure platform through a determining device to process the first message and thus obtain the target message.

[0069] In the second method, the branch system pre-sends a request to the encryption platform to obtain the symmetric key via private key encryption escrow, and stores the symmetric key in the SDK. After obtaining the symmetric key, the SDK can receive message processing requests sent by the determining device, and use the symmetric key to decrypt the encrypted private key to obtain the decrypted private key. The SDK then uses the decrypted private key to process the first message to obtain the target message.

[0070] In related technologies, public key infrastructure platforms can be used to encrypt and decrypt information transmission processes within an enterprise. However, in this process, the public key infrastructure platform is typically deployed only in the head office system. When multiple branch systems need to transmit information, they frequently need to call the public key infrastructure platform located in the head office system, resulting in long business response times. This makes it impossible to meet the information transmission needs of branch systems with stringent performance requirements for business response time, leading to low efficiency in information transmission.

[0071] In this embodiment, automatic switching between the head office system and the branch system can be achieved based on the SDK, enabling rapid response to message information, thereby reducing the business response time of the branch system and improving the efficiency of information transmission.

[0072] The method described in this application will now be illustrated through specific embodiments. It should be noted that the following embodiments may exist independently or in combination with each other; identical or similar content will not be repeated in different embodiments.

[0073] Figure 2 This is a flowchart illustrating a message processing method provided in an embodiment of this application. Please refer to... Figure 2 The method may include:

[0074] S201. Determine the first message to be processed.

[0075] The executing entity in this application embodiment can be a message processing device in a branch system, or a message processing apparatus installed in the message processing device. The message processing apparatus can be implemented by software, or by a combination of software and hardware.

[0076] Optionally, the first message can be either a message to be encrypted or a message to be decrypted.

[0077] The first message to be processed can be obtained from multiple business systems, such as personal business systems, institutional business systems, and internal management systems.

[0078] S202. Obtain the symmetric key through the SDK.

[0079] The implementation method for obtaining the symmetric key through the SDK can be as follows: obtain the message information of the first message or the processing time of the first message by the head office system. The message information includes the type of the first message or the maximum receivable delay of the first message; obtain the symmetric key through the SDK based on the message information or the processing time.

[0080] Optionally, the type of the first message can be classified according to the type of business system that sends the first message. For example, for some business systems that have strict requirements on business response time, the type of the first message sent by these business systems can be regarded as type 1, and the type of the first message sent by business systems other than these business systems can be regarded as type 2.

[0081] Optionally, the maximum receivable delay for the first message can be a preset delay, for example, the maximum receivable delay can be 5 milliseconds.

[0082] S203. Use the SDK to decrypt the encrypted private key using a symmetric key to obtain the decrypted private key corresponding to the encrypted private key.

[0083] Optionally, upon receiving a message processing request, it can first determine whether the first message in the message processing request is a message to be encrypted or a message to be decrypted. If so, S203 is executed; otherwise, the first message can be processed directly through the SDK.

[0084] Optionally, for multiple first messages, when each first message needs to be encrypted or decrypted, S202 to S203 need to be executed repeatedly to obtain the decrypted private key.

[0085] S204. The first message is processed using the decrypted private key via the SDK to obtain the target message corresponding to the first message.

[0086] The target message can be either an encrypted message or a decrypted message of the first message.

[0087] Optionally, the target message corresponding to the first message can be obtained in the following ways: if the first message is a message to be encrypted, then the first message is encrypted using the decrypted private key to obtain the target message, which is the encrypted message of the first message; if the first message is a message to be decrypted, then the first message is decrypted using the decrypted private key to obtain the target message, which is the decrypted message of the first message.

[0088] Optionally, the encryption or decryption processing of the first message can be one or more of the following methods: 24 / 7 encryption / decryption, digital envelope encryption / decryption, asymmetric encryption / decryption, and symmetric encryption / decryption.

[0089] The message processing method provided in this application can be applied to a branch system. The branch system has an SDK containing an encryption key. The method includes: determining a first message to be processed; obtaining a symmetric key through the SDK; decrypting the encrypted private key using the symmetric key through the SDK to obtain a decrypted private key; and processing the first message using the decrypted private key through the SDK to obtain the target message corresponding to the first message. In the above process, automatic switching between the head office system and the branch system can be achieved based on the SDK, thereby reducing the business response time of the branch system and improving the efficiency of information transmission.

[0090] In practical applications, once the first message is identified, the branch system can process the first message in two ways:

[0091] The first processing path is as follows: The branch system sends a message processing request to the head office system, which then processes the first message to obtain the target message.

[0092] The second processing path: The branch system can be equipped with an SDK, which can receive message processing requests and process the first message to obtain the target message.

[0093] Optionally, one or both of the following two judgment methods can be used to switch between the two processing paths mentioned above in a timely manner, so as to improve the processing efficiency of the first message:

[0094] The first judgment method: determine whether the message information of the first message meets the first preset condition;

[0095] The second method of judgment is to determine whether the processing time of the first message by the head office system is greater than or equal to the first preset time.

[0096] Below, in conjunction with Figure 3 and Figure 4 The detailed process of message processing based on the two judgment methods described above will be explained separately.

[0097] Figure 3 This is a flowchart illustrating a message processing method based on the first judgment method provided in an embodiment of this application. Please refer to... Figure 3 The method may include:

[0098] S301. Determine the first message to be processed.

[0099] It should be noted that the execution process of S301 can be found in the execution process of S201, and will not be repeated here.

[0100] S302. Obtain the message information of the first message.

[0101] The message information corresponding to the first message can be obtained by parsing the first message. The message information may include the type of the first message or the maximum acceptable delay of the first message.

[0102] S303. Determine whether the message information meets the first preset condition.

[0103] If so, the first message will be processed through the second processing path. For specific execution steps, please refer to S304 to S309.

[0104] If not, the first message will be processed through the first processing path. For specific execution steps, please refer to S310 to S311.

[0105] The first preset condition may include at least one of the following: the type of the first message is a preset type, and the maximum receivable delay is less than or equal to the preset delay.

[0106] For example, the type of the first message can include type 1, type 2, and type 3, with type 1 being the default. When the type of the first message is type 1, it can be processed through the second processing path; when the type of the first message is type 2 or type 3, it can be processed through the first processing path.

[0107] S304. Receive message processing requests through the software development kit in the branch system.

[0108] S305. Determine whether a symmetric key exists in the software development kit.

[0109] If so, then execute S306 to S307;

[0110] If not, execute S308 to S309 first, then execute S306 to S307.

[0111] S306. Using a software development kit, the encrypted private key is decrypted using a symmetric key to obtain the decrypted private key corresponding to the encrypted private key.

[0112] It should be noted that the execution process of S306 can be found in the execution process of S203, and will not be repeated here.

[0113] S307. Using the software development kit and the decrypted private key, process the first message to obtain the target message corresponding to the first message.

[0114] Optionally, the target message can be an encrypted message of the first message or a decrypted message of the first message.

[0115] S308. Request the symmetric key from the head office system.

[0116] Optionally, the branch system can be configured with private key encryption escrow and an SDK, while the head office system can be configured with an encryption platform. This encryption platform can provide 24 / 7 security services such as encryption / decryption, transcryption, digest calculation, and key management.

[0117] In practical applications, the SDK can contain encryption keys. To ensure the security of these encryption keys, the corresponding symmetric key can be stored in the encryption platform. For any branch system's SDK, when it needs to obtain the symmetric key corresponding to its encryption key, it can send a request to the head office's encryption platform via private key escrow. Upon receiving the request, the encryption platform can verify the branch system's identity. After successful verification, it can send the symmetric key corresponding to the encryption key to the SDK.

[0118] S309. Store the symmetric key in the software development kit.

[0119] Optionally, the symmetric key can be stored in the SDK's configuration file.

[0120] S310, Send a message processing request to the head office system.

[0121] The message processing request may include the first message. The message processing request may be an encryption request for the first message or a decryption request for the first message.

[0122] In practical applications, the head office system can be equipped with a public key infrastructure platform, and the branch system can directly send message processing requests to the public key infrastructure platform and process the first message through the public key infrastructure platform to obtain the target message.

[0123] For example, suppose the message processing request is an encryption processing request for the first message. The branch system sends the encryption processing request for the first message to the public key infrastructure platform. The public key infrastructure platform verifies the encryption processing request for the first message. After the verification is successful, the public key infrastructure platform can encrypt the first message to obtain the ciphertext of the first message and return the ciphertext to the branch system.

[0124] S311. The head office system processes the first message through the public infrastructure platform to obtain the target message corresponding to the first message.

[0125] The message processing method provided in this application can be applied to branch systems. The branch system has an SDK containing an encryption key. The method involves: determining a first message to be processed; obtaining a symmetric key through the SDK; decrypting the encrypted private key using the symmetric key to obtain a decrypted private key; and processing the first message using the decrypted private key to obtain the target message corresponding to the first message. In this process, automatic switching between the head office system and the branch system can be achieved based on the SDK, thereby reducing the business response time of the branch system and improving the efficiency of information transmission.

[0126] Figure 4 This is a flowchart illustrating a message processing method based on the second judgment method provided in an embodiment of this application. Please refer to... Figure 4 The method may include:

[0127] S401. Determine the first message to be processed.

[0128] S402. Send a message processing request to the head office system.

[0129] It should be noted that the execution process of S402 can be found in the execution process of S310, and will not be repeated here.

[0130] S403. Obtain the processing time of the first message from the head office system.

[0131] Optionally, the processing time of the first message can be calculated as follows: obtain the sending time of the first message and the current processing time of the first message; determine the processing time of the first message as the difference between the current processing time of the first message and the sending time of the first message.

[0132] S404. Determine whether the processing time is greater than or equal to the first preset time.

[0133] If not, the first message will be processed through the first processing path. For specific execution steps, please refer to S405.

[0134] If so, the first message will be processed through the second processing path. For specific execution steps, please refer to S406 to S411.

[0135] For example, the first preset duration is 5 milliseconds. When the processing duration is less than 5 milliseconds, the first message can be processed through the first processing path. When the processing duration is greater than or equal to 5 milliseconds, the second processing path is switched to process the first message through the second processing path.

[0136] S405. The head office system processes the first message through the public infrastructure platform to obtain the target message corresponding to the first message.

[0137] S406. Receive message processing requests through the software development kit in the branch system.

[0138] S407. Determine whether a symmetric key exists in the software development kit.

[0139] If so, then execute S408 to S409;

[0140] If not, execute S410 to S411 first, then execute S408 to S409.

[0141] S408. Using a software development kit, the encrypted private key is decrypted using a symmetric key to obtain the decrypted private key corresponding to the encrypted private key.

[0142] S409. Using the software development kit, the decrypted private key is used to process the first message to obtain the target message corresponding to the first message.

[0143] S410. Request the symmetric key from the head office system.

[0144] S411. Store the symmetric key in the software development kit.

[0145] The message processing method provided in this application involves: determining a first message to be processed; obtaining a symmetric key through an SDK; decrypting the encrypted private key using the symmetric key via the SDK to obtain a decrypted private key; and processing the first message using the decrypted private key via the SDK to obtain a target message corresponding to the first message. In this process, automatic switching between the head office system and branch systems can be achieved based on the SDK, thereby reducing the business response time of the branch system and improving the efficiency of information transmission.

[0146] Figure 5 This is a schematic diagram of a message processing apparatus provided in an embodiment of this application. Please refer to... Figure 5 The message processing device 10 includes a first determining module 11, an acquiring module 12, a decryption module 13, and a second determining module 14, wherein...

[0147] The first determining module 11 is used to determine the first message to be processed;

[0148] The acquisition module 12 is used to acquire a symmetric key through the SDK;

[0149] The decryption module 13 is used to decrypt the encrypted private key using the symmetric key through the SDK to obtain the decrypted private key corresponding to the encrypted private key.

[0150] The second determining module 14 is used to process the first message using the decrypted private key through the SDK to obtain the target message corresponding to the first message.

[0151] The message processing apparatus provided in this application embodiment can execute the technical solution shown in the above method embodiment. Its implementation principle and beneficial effects are similar, and will not be described again here.

[0152] In one possible implementation, the acquisition module 12 is specifically used for:

[0153] Obtain the message information of the first message or the processing time of the first message by the head office system. The message information includes the type of the first message or the maximum receivable delay of the first message.

[0154] The symmetric key is obtained through the SDK based on the message information or the processing time.

[0155] In one possible implementation, the acquisition module 12 is specifically used for:

[0156] When the message information meets the first preset condition or the processing time is greater than or equal to the first preset time, the symmetric key is obtained through the SDK;

[0157] The first preset condition includes at least one of the following: the type of the first message is a preset type, and the maximum receivable delay is less than or equal to the preset delay.

[0158] In one possible implementation, the acquisition module 12 is specifically used for:

[0159] A message processing request is sent to the head office system, the message processing request including the first message.

[0160] In one possible implementation, the acquisition module 12 is specifically used for:

[0161] Determine whether the symmetric key exists in the SDK;

[0162] If so, then obtain the symmetric key from the SDK;

[0163] If not, request the symmetric key from the head office system and store the symmetric key in the SDK.

[0164] In one possible implementation, the acquisition module 12 is specifically used for:

[0165] Request the symmetric key from the head office system;

[0166] The symmetric key is stored in the SDK.

[0167] In one possible implementation, the second determining module 14 is specifically used for:

[0168] If the first message is a message to be encrypted, then the first message is encrypted using the decrypted private key to obtain the target message, which is the encrypted version of the first message;

[0169] If the first message is a message to be decrypted, then the first message is decrypted using the decrypted private key to obtain the target message, which is the decrypted message of the first message.

[0170] Figure 6 This is a schematic diagram of the hardware structure of the message processing device provided in an embodiment of this application. Please refer to... Figure 6 The message processing device 20 may include a processor 21 and a memory 22. The processor 21 and the memory 22 can communicate; for example, the processor 21 and the memory 22 communicate via a communication bus 23.

[0171] The memory 22 is used to store computer-executed instructions;

[0172] The processor 21 is used to execute computer execution instructions stored in the memory 22, so that the processor 21 performs the message processing method as shown in the above method embodiment.

[0173] Optionally, the message processing device 20 may also include a communication interface, which may include a transmitter and / or a receiver.

[0174] Optionally, the aforementioned processor can be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), etc. The general-purpose processor can be a microprocessor or any conventional processor. The steps of the method disclosed in the embodiments of this application can be directly implemented by a hardware processor, or implemented by a combination of hardware and software modules within the processor.

[0175] This application provides a readable storage medium storing a computer program; the computer program is used to implement the message processing method as described in any of the above embodiments.

[0176] This application provides a computer program product, which includes instructions that, when executed, cause a computer to perform the above-described message processing method.

[0177] All or part of the steps in the above method embodiments can be implemented by hardware related to program instructions. The aforementioned program can be stored in a readable memory. When the program is executed, it performs the steps of the above method embodiments; and the aforementioned memory (storage medium) includes: read-only memory (ROM), RAM, flash memory, hard disk, solid-state drive, magnetic tape, floppy disk, optical disk, and any combination thereof.

[0178] This application describes embodiments with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It should be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processing unit of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processing unit of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0179] It is understood that the various numerical designations used in the embodiments of this application are merely for descriptive convenience and are not intended to limit the scope of the embodiments of this application.

[0180] In this application, the term "comprising" and its variations can refer to non-limiting inclusion; the term "or" and its variations can refer to "and / or". The terms "first", "second", etc., in this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. In this application, "multiple" refers to two or more. "And / or" describes the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, and B existing alone. The character " / " generally indicates that the preceding and following related objects have an "or" relationship.

[0181] Obviously, those skilled in the art can make various modifications and variations to the embodiments of this application without departing from the spirit and scope of this application. Therefore, if these modifications and variations to the embodiments of this application fall within the scope of the claims of this application and their equivalents, this application also intends to include these modifications and variations.

Claims

1. A message processing method, characterized in that, Applied to a branch system, wherein the branch system is equipped with a software development kit (SDK) and the SDK contains an encryption key, the method includes: Identify the first message to be processed; Obtain the message information of the first message or the processing time of the first message by the head office system; When the message information meets the first preset condition or the processing time is greater than or equal to the first preset time, the symmetric key is obtained through the SDK; wherein, the message information includes the maximum receivable delay of the first message, and the first preset condition includes the maximum receivable delay being less than or equal to a preset delay; The SDK uses the symmetric key to decrypt the encrypted private key to obtain the decrypted private key corresponding to the encrypted private key. The first message is processed using the decrypted private key via the SDK to obtain the target message corresponding to the first message; When the message information does not meet the first preset condition or the processing time is less than the first preset time, the head office system processes the first message through the public infrastructure platform to obtain the target message corresponding to the first message.

2. The method according to claim 1, characterized in that, Before obtaining the processing time of the first message by the head office system, the following steps are also included: A message processing request is sent to the head office system, the message processing request including the first message.

3. The method according to claim 1, characterized in that, Obtaining the symmetric key through the SDK includes: Determine whether the symmetric key exists in the SDK; If so, then obtain the symmetric key from the SDK; If not, request the symmetric key from the head office system and store the symmetric key in the SDK.

4. The method according to claim 3, characterized in that, Before obtaining the symmetric key in the SDK, the following steps are also included: Request the symmetric key from the head office system; The symmetric key is stored in the SDK.

5. The method according to claim 1, characterized in that, The SDK processes the first message using the decrypted private key to obtain the target message corresponding to the first message, including: If the first message is a message to be encrypted, then the first message is encrypted using the decrypted private key to obtain the target message, which is the encrypted version of the first message; If the first message is a message to be decrypted, then the first message is decrypted using the decrypted private key to obtain the target message, which is the decrypted message of the first message.

6. A message processing apparatus, characterized in that, Applied to a branch system, the branch system is equipped with a Software Development Kit (SDK), which contains an encryption key. The device includes: a first determining module, an acquiring module, a decryption module, and a second determining module, wherein... The first determining module is used to determine the first message to be processed; The acquisition module is used to acquire the message information of the first message or the processing time of the first message by the head office system; and, when the message information meets a first preset condition or the processing time is greater than or equal to a first preset time, acquire a symmetric key through the SDK; wherein, the message information includes the maximum receivable delay of the first message, and the first preset condition includes the maximum receivable delay being less than or equal to a preset delay. The decryption module is used to decrypt the encrypted private key using the symmetric key via the SDK to obtain the decrypted private key corresponding to the encrypted private key. The second determining module is used to process the first message using the decrypted private key through the SDK to obtain the target message corresponding to the first message; When the message information does not meet the first preset condition or the processing time is less than the first preset time, the head office system processes the first message through the public infrastructure platform to obtain the target message corresponding to the first message.

7. A message processing device, characterized in that, include: Processor and memory; The memory is used to store computer programs; The processor is configured to execute a computer program stored in the memory to implement the method as described in any one of claims 1 to 5.

8. A computer-readable storage medium, characterized in that, in, The computer-readable storage medium stores computer-executable instructions that, when executed by a processor, are used to implement the method described in any one of claims 1 to 5.

Images