Image File Verification Method and Device in Bank Credit Risk Control Scenario

Abstract

The present invention discloses a method and device for verifying image files in a bank credit risk control scenario, which can be used in the financial field or other technical fields. The method comprises: obtaining an image file compression package sent by a channel party; performing physical verification on the image file compression package; after the physical verification passes, performing file anti-counterfeiting verification and file data verification on the image file in the image file compression package; after the file anti-counterfeiting verification and file data verification pass, signing and accepting the image file, and uploading the signed and accepted image file to a preset image platform. The present invention realizes closed-loop verification of loan contract image files, performs risk management on image files involved in the interaction process with third-party systems, and reduces the non-performing loan rate and potential legal disputes.

Description

Technical Field

[0001] The present invention relates to the field of credit risk control, and in particular to a method and device for verifying image files in a bank credit risk control scenario. Background Art

[0002] In the process of conducting credit operations, banks will conduct financing business through third-party channels (channel parties), such as supply chain factoring business. They can initiate financing application business through channels such as bank corporate online banking, third-party supply chain platforms, and core enterprise ERP systems. As the financing instructions enter the credit, the corresponding image files are also submitted to the credit. The image files include credit authorization letters, loan contracts, withdrawal notices, credit resolutions, business licenses and other image files. However, the verification of these image files is often done manually. The verification personnel need to review and check each image file one by one to see if it meets the requirements. This is time-consuming and labor-intensive, and there is a risk of misjudgment due to human negligence. The existing technology lacks a more efficient and accurate solution for verifying the credit image files sent by the channel party. Summary of the Invention

[0003] In order to solve at least one technical problem in the above-mentioned background technology, the present invention proposes a method and device for image file verification in a bank credit risk control scenario.

[0004] To achieve the above objectives, according to one aspect of the present invention, a method for verifying image files in a bank credit risk control scenario is provided, the method comprising:

[0005] Get the compressed image file package sent by the channel;

[0006] Performing physical verification on the compressed image file package;

[0007] After the physical verification is passed, the image file in the image file compression package is subjected to file anti-counterfeiting verification and file data verification;

[0008] After the document anti-counterfeiting verification and document data verification are passed, the image file is signed and stamped, and the image file with the signed and stamped acceptance is uploaded to the preset image platform.

[0009] Optionally, the image file verification method in the bank credit risk control scenario also includes:

[0010] Upon receiving the image verification request sent by the channel party, performing access authentication on the channel party;

[0011] After the access authentication is passed, the image file compression package corresponding to the image verification request is stored in a local temporary storage area.

[0012] Optionally, the performing physical verification on the compressed image file package specifically includes:

[0013] Performing MD5 verification on the compressed image file package;

[0014] The compressed image file package is checked for anti-compression package bombs.

[0015] Optionally, performing file anti-counterfeiting verification on the image file in the image file compression package specifically includes:

[0016] The electronic signature of each image file is verified.

[0017] Optionally, performing file anti-counterfeiting verification on the image file in the image file compression package specifically includes:

[0018] Extracting a document signing sequence from the image file;

[0019] The order in which the documents are signed is verified.

[0020] Optionally, performing file data verification on the image file in the image file compression package specifically includes:

[0021] extracting business data from the image file;

[0022] The business data is verified.

[0023] Optionally, the compressed image file package sent by the acquisition channel specifically includes:

[0024] The compressed image file package is obtained from the local temporary storage area.

[0025] To achieve the above-mentioned object, according to another aspect of the present invention, there is provided an image file verification device in a bank credit risk control scenario, the device comprising:

[0026] An image file compression package acquisition unit, used to acquire the image file compression package sent by the channel party;

[0027] A compressed package physical verification unit, configured to perform physical verification on the compressed package of the image file;

[0028] A file verification unit, configured to perform file anti-counterfeiting verification and file data verification on the image file in the image file compression package after the physical verification is passed;

[0029] The signature storage unit is used to sign and seal the image file after the document anti-counterfeiting verification and document data verification are passed, and upload the signed and sealed image file to a preset image platform.

[0030] In order to achieve the above-mentioned purpose, according to another aspect of the present invention, a computer device is also provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the steps of the image file verification method in the above-mentioned bank credit risk control scenario are implemented.

[0031] In order to achieve the above-mentioned purpose, according to another aspect of the present invention, a computer-readable storage medium is further provided, on which a computer program / instruction is stored. When the computer program / instruction is executed by a processor, the steps of the image file verification method in the above-mentioned bank credit risk control scenario are implemented.

[0032] In order to achieve the above-mentioned purpose, according to another aspect of the present invention, a computer program product is also provided, including a computer program / instruction, which, when executed by a processor, implements the steps of the image file verification method in the above-mentioned bank credit risk control scenario.

[0033] The beneficial effects of the present invention are:

[0034] The present invention first performs physical verification on the compressed image file package. After passing the physical verification, the image file in the compressed image file package is subjected to document anti-counterfeiting verification and document data verification. After passing the document anti-counterfeiting verification and document data verification, the image file is signed and stamped, and the signed and stamped image file is uploaded to a preset image platform. The present invention can efficiently and accurately verify the credit image files sent by the channel party, achieving closed-loop verification of loan contract image files, and implementing risk management for image files involved in the interaction with third-party systems, thereby reducing the non-performing loan rate and potential legal disputes. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative work. In the drawings:

[0036] Figure 1 This is a first flow chart of an image file verification method in a bank credit risk control scenario according to an embodiment of the present invention;

[0037] Figure 2 This is a second flow chart of the image file verification method in a bank credit risk control scenario according to an embodiment of the present invention;

[0038] Figure 3 This is the third flow chart of the image file verification method in the bank credit risk control scenario according to an embodiment of the present invention;

[0039] Figure 4 This is a fourth flow chart of the image file verification method in a bank credit risk control scenario according to an embodiment of the present invention;

[0040] Figure 5 This is the fifth flow chart of the image file verification method in the bank credit risk control scenario according to an embodiment of the present invention;

[0041] Figure 6 This is a schematic diagram of the credit system's image receiving channel;

[0042] Figure 7 It is the overall flow chart of the method of the present invention;

[0043] Figure 8 This is a schematic diagram of the external image verification request message structure;

[0044] Figure 9 This is a schematic diagram of MD5 verification;

[0045] Figure 10 It is a schematic diagram of electronic signature verification;

[0046] Figure 11 It is a schematic diagram of business data extraction;

[0047] Figure 12 This is a structural block diagram of an image file verification device in a bank credit risk control scenario according to an embodiment of the present invention;

[0048] Figure 13 Schematic diagram of a computer device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0049] In order to enable those skilled in the art to better understand the solutions of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the embodiments described are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts should fall within the scope of protection of the present invention.

[0050] It will be understood by those skilled in the art that embodiments of the present invention may be provided as methods, systems, or computer program products. Thus, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware. Furthermore, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0051] It should be noted that the terms "including" and "having" and any variations thereof in the specification and claims of the present invention and the above-mentioned drawings are intended to cover non-exclusive inclusions. For example, a process, method, system, product or apparatus comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or are inherent to these processes, methods, products or apparatuses.

[0052] It should be noted that, in the absence of conflict, the embodiments and features of the embodiments of the present invention can be combined with each other. The present invention will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0053] It should be noted that the acquisition, storage, use, and processing of data in the technical solution of this application comply with the relevant provisions of national laws and regulations.

[0054] It should be noted that the image file verification method and device in the bank credit risk control scenario of the present invention can be used in the financial field, and can also be used in any field other than the financial field. The application field of the image file verification method and device in the bank credit risk control scenario of the present invention is not limited.

[0055] The existing technology for image file verification in bank credit risk control scenarios has the following problems and shortcomings:

[0056] 1. The manual review process requires reviewing and checking each image one by one to see if it meets the requirements. This is time-consuming and labor-intensive, and there is a risk of misjudgment due to human negligence. There is also a lack of auxiliary review tools.

[0057] 2. The automatic approval process often simply determines whether there is an image file and the corresponding image type, but does not conduct further verification of the content of the image file and whether it is suitable for this financing application, which leads to certain approval loopholes.

[0058] 3. File transfer processes, such as images and PDF files, may be tampered with during the financing initiation or transmission process.

[0059] 4. For image documents of signatures, such as electronic signatures, the signatory information may not be the subject of this financing application.

[0060] 5. Lack of acceptance confirmation. After the credit system receives the image file, the credit is transferred or submitted to the image platform, but there is a lack of acceptance signature, which poses a risk of image files being replaced.

[0061] like Figure 6 As shown, the existing technical solutions mainly rely on simple image interface docking, directly receiving request messages and image files, decompressing them, and directly transferring them for storage or submitting them to the image platform. The disadvantages of the existing technology are:

[0062] 1. MD5 verification is not performed on the image file, which poses the risk of tampering by man-in-the-middle attacks.

[0063] 2. No zip bomb verification is performed on the image file to save bandwidth and compress the zip transmission. There may be a risk of the zip bomb causing the application server disk to be full.

[0064] 3. The image document has been electronically signed, but there is no verification whether the signatory is the entity that is financing this credit.

[0065] 4. Image files are often contract texts output by credit. After the contract texts are signed and stamped, there is a lack of verification and anti-counterfeiting to determine whether the contract texts have been tampered with or replaced.

[0066] 5. Image contract documents and key business data verification, such as interest rate, loan amount, repayment date, interest calculation method, etc., need to match this credit financing application.

[0067] 6. Lack of signature verification for credit acceptance image documents. Direct transfer and storage or submission to a third-party image platform may result in tampering and replacement.

[0068] The present invention provides a method and device for automatically verifying image files suitable for bank credit risk control scenarios. It mainly solves a series of problems that may exist in key image files such as factoring loan contracts and credit authorization letters when third-party channels apply for credit financing business from banks, such as illegal signing entities, tampering and replacement of image files, and failure to verify signatures after receiving image files.

[0069] Figure 7 It is the overall flow chart of the method of the present invention, such as Figure 7 As shown, the image file verification method in the bank credit risk control scenario of the present invention specifically includes five steps: access authentication, physical verification, logical verification, receiving signatures, and uploading image platforms.

[0070] Figure 1 This is the first flow chart of the image file verification method in the bank credit risk control scenario according to an embodiment of the present invention. Figure 1 As shown, in one embodiment of the present invention, the image file verification method in the bank credit risk control scenario of the present invention includes steps S101 to S104.

[0071] Step S101: Obtain the compressed image file package sent by the channel party.

[0072] Step S102: Physically verify the compressed image file package.

[0073] This step is mainly for some hard checks on the file itself.

[0074] Step S103: After the physical verification is passed, the image file in the image file compression package is subjected to file anti-counterfeiting verification and file data verification.

[0075] This step is mainly to verify whether it meets actual business needs.

[0076] Step S104: After the document anti-counterfeiting verification and the document data verification are passed, the image file is signed and stamped, and the signed and stamped image file is uploaded to a preset image platform.

[0077] like Figure 2 As shown, in one embodiment of the present invention, the image file verification method in the bank credit risk control scenario of the present invention further includes steps S201 to S202.

[0078] Step S201: upon receiving the image verification request sent by the channel party, performing access authentication on the channel party.

[0079] When the present invention receives an image verification request sent by an external channel, it first performs authentication processing, including user name and password, request decryption and analysis, involving key message structures such as Figure 8 The incoming file list message includes key information required for MD5 verification, electronic signature verification, anti-counterfeiting verification, and business data verification.

[0080] Step S202: After the access authentication is passed, the compressed image file package corresponding to the image verification request is stored in a local temporary storage area.

[0081] In one embodiment of the present invention, the step S101 of obtaining the compressed image file sent by the channel party specifically includes:

[0082] The compressed image file package is obtained from the local temporary storage area.

[0083] like Figure 3 As shown, in one embodiment of the present invention, the physical verification of the image file compression package in the above step S102 specifically includes steps S301 and S302.

[0084] Step S301: perform MD5 verification on the compressed image file package.

[0085] like Figure 9 As shown, MD5 is a commonly used information digest algorithm that can generate a 128-bit triplet and can be used to confirm the consistency of information transmission. Image files do not require strict encryption algorithm verification like user passwords.

[0086] In one embodiment of the present invention, the present invention not only performs MD5 verification on the image file compression package, but also performs MD5 verification on each image file in the image file compression package.

[0087] Step S302: performing anti-compression package bomb verification on the image file compression package.

[0088] In one embodiment of the present invention, the image file compression package of the present invention is a Zip compression package. The present invention requires anti-compression package bomb verification (i.e., Zip bomb verification). A Zip bomb refers to a compressed file with a high compression ratio. Although credit systems and other systems may have restrictions on the size of file uploads, when a high-compression file arrives at a credit system, it will recursively decompress the file in the background, causing the CPU, memory, disk, and other files to continuously run at high load, producing a DDOS denial of service attack-like effect. Therefore, the present invention is implemented by using the JDK ZipInputStream tool that comes with Java. Each time a compressed file is received, it is necessary to determine whether the expected file size after decompression and the disk space occupied by the compressed file are normal.

[0089] In one embodiment of the present invention, the anti-counterfeiting verification of the image file in the image file compressed package in step S103 specifically includes:

[0090] The electronic signature of each image file is verified.

[0091] In one embodiment of the present invention, the image file of the present invention is specifically a PDF file. Figure 10 This is a schematic diagram of electronic signature verification. The present invention is based on PDF files and uses hash algorithms and encryption algorithms to implement PDF file signatures and achieve PDF file tamper-proof features. Currently, PDF electronic signature technology is a common technology in the industry. When an encrypted contract PDF file is transmitted to a credit system, the open source Java itext5 tool is used to verify whether the PDF file signature is valid, the signer and other information, so as to determine whether the signer is a related party of this financing application. If an unrelated party appears or the related party is missing, the image verification of this financing application will be rejected and subsequent financing application operations will be terminated.

[0092] like Figure 4 As shown, in one embodiment of the present invention, the anti-counterfeiting verification of the image file in the image file compression package in step S103 specifically includes steps S401 and S402.

[0093] Step S401: extracting the document signing sequence from the image file.

[0094] Step S402: verify the order in which the documents are signed.

[0095] Assume that the original PDF text of the contract is provided by a business system such as a credit system, and then transmitted to relevant platforms through an interface, such as corporate online banking, a supply chain platform, a core enterprise ERP system, etc. The flow order is often fixed. After the document is signed, it will eventually return to the credit system to complete the closed loop.

[0096] The order of document signing is based on the principle of signature verification by the transferor. Taking online banking as an example, the order is as follows:

[0097] Original signature (system signature), the credit system outputs the original PDF, i.e. the starting signature

[0098] Bank signature (business signature), the credit system outputs the PDF business contract, which is the bank business signature

[0099] Online banking signature (system signature), online banking system receipt signature, represents the signature at the online banking system level.

[0100] Transaction signature (business signature), the financing enterprise signs on the online banking side to indicate the completion of the transaction.

[0101] Acceptance signature (system signature). After the transaction is completed, the credit system receives and adds the acceptance signature to complete the closed loop.

[0102] The above sequence is a fixed execution sequence. Once the sequence of the intermediate links is incorrect or missing, the financing application will be rejected.

[0103] The present invention can extract the file signing sequence from the image file through the open source Java itext5 tool, and then verify the file signing sequence.

[0104] like Figure 5 As shown, in one embodiment of the present invention, the file data verification of the image file in the image file compression package in the above step S103 specifically includes steps S501 and S502.

[0105] Step S501: extracting business data from the image file.

[0106] Step S502: verify the business data.

[0107] File data verification is mainly based on the rationality of the business data in the PDF file, and solves problems such as business data tampering or mismatching with the current financing application. For example: a financing application, the financing amount is 1 million, the LPR interest rate is 4.45%, the floating basis point is -20, and the number of periods is 360. Under normal circumstances, the original PDF contract should also have the corresponding value. However, since the transaction link is out of the credit system, when the PDF signature is transferred back to the credit system, key contract elements may be tampered with, such as the floating point number of -30, which can easily lead to legal disputes and other problems.

[0108] File data verification is implemented as follows:

[0109] 1. Key coordinate verification: Through the form of keywords, with the help of the open source Java itext5 tool, the horizontal and vertical coordinates of the keywords in the PDF file are read and matched with the horizontal and vertical coordinate values preset in the system. The error value threshold can be customized. The error value mainly solves the error caused by long numbers, such as the text shifting backward.

[0110] 2. Key data verification: After verifying the accuracy of key data and reading the PDF key value, it is matched with the business data of the approved process of the credit system. For example, Figure 11 shown.

[0111] The present invention scans the specified content in the PDF file through the pre-input "key value, previous sentence, and next sentence", parses the content between the sentences, and matches and verifies it with the record value in the system database. If the verification does not match, the loan operation of this financing application will be rejected, and the instruction will be returned to the customer manager for confirmation.

[0112] In one embodiment of the present invention, the present invention may first convert the image file into text, and then extract the business data from the text based on a preset regular expression for business data extraction.

[0113] The image file verification method in the bank credit risk control scenario of the present invention has the following advantages over the prior art:

[0114] 1. Strengthen management and control, implement closed-loop verification of contract image files, and conduct risk management on image files involved in the interaction with third-party systems to reduce non-performing loan rates and potential legal disputes.

[0115] 2. Security is enhanced. Security management is carried out from the main links such as initiation, transmission, transaction, and acceptance, filling the verification gap of traditional credit image receiving third-party channels.

[0116] 3. Easy to expand. The present invention is relatively independent and can enrich the risk control verification rules of image files based on different business scenarios, and provide automatic verification services for image files to business systems such as credit.

[0117] 4. Improve efficiency. As an image-assisted tool for account managers to approve contracts, it can further improve the accuracy and efficiency of approval.

[0118] 5. Unified standards, image files, especially the automated verification of key contract text images, provide standardized automatic verification models or specifications.

[0119] It should be noted that the steps shown in the flowcharts of the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and that, although a logical order is shown in the flowcharts, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0120] Based on the same inventive concept, an embodiment of the present invention also provides an image file verification device in a bank credit risk control scenario, which can be used to implement the image file verification method in the bank credit risk control scenario described in the above embodiment, as described in the following embodiment. Since the principle of solving the problem by the image file verification device in the bank credit risk control scenario is similar to that of the image file verification method in the bank credit risk control scenario, the embodiment of the image file verification device in the bank credit risk control scenario can refer to the embodiment of the image file verification method in the bank credit risk control scenario, and the repeated parts will not be repeated. As used below, the term "unit" or "module" can be a combination of software and / or hardware that implements a predetermined function. Although the device described in the following embodiments is preferably implemented in software, implementation in hardware, or a combination of software and hardware, is also possible and conceived.

[0121] Figure 12 This is a structural block diagram of an image file verification device in a bank credit risk control scenario according to an embodiment of the present invention. Figure 12 As shown, in one embodiment of the present invention, the image file verification device in the bank credit risk control scenario of the present invention includes:

[0122] The image file compressed package obtaining unit 1 is used to obtain the image file compressed package sent by the channel party;

[0123] A compressed package physical verification unit 2, configured to perform physical verification on the compressed package of the image file;

[0124] A file verification unit 3 is used to perform file anti-counterfeiting verification and file data verification on the image file in the image file compression package after the physical verification is passed;

[0125] The signature storage unit 4 is used to add a signature and acceptance seal to the image file after the document anti-counterfeiting verification and the document data verification are passed, and upload the signed and accepted image file to a preset image platform.

[0126] In one embodiment of the present invention, the image file verification device in the bank credit risk control scenario of the present invention further includes:

[0127] an access authentication unit, configured to perform access authentication on the channel party upon receiving an image verification request sent by the channel party;

[0128] The temporary storage unit is used to store the compressed image file package corresponding to the image verification request in a local temporary storage area after the access authentication is passed.

[0129] In one embodiment of the present invention, the compressed package physical verification unit 2 specifically includes:

[0130] MD5 verification module, used for performing MD5 verification on the image file compression package;

[0131] The anti-compression package bomb verification module is used to perform an anti-compression package bomb verification on the image file compression package.

[0132] In one embodiment of the present invention, the file verification unit 3 specifically includes:

[0133] The electronic signature verification module is used to verify the electronic signature of each image file.

[0134] In one embodiment of the present invention, the file verification unit 3 specifically includes:

[0135] A document signing sequence acquisition module, configured to extract the document signing sequence from the image file;

[0136] The file signing sequence verification module is used to verify the file signing sequence.

[0137] In one embodiment of the present invention, the file verification unit 3 specifically includes:

[0138] A business data extraction module, used for extracting business data from the image file;

[0139] The business data verification module is used to verify the business data.

[0140] In one embodiment of the present invention, the image file compressed package obtaining unit 1 is specifically configured to obtain the image file compressed package from the local temporary storage area.

[0141] In order to achieve the above object, according to another aspect of the present application, a computer device is also provided. Figure 13 As shown, the computer device includes a memory, a processor, a communication interface and a communication bus. The memory stores a computer program that can be run on the processor. When the processor executes the computer program, the steps in the above embodiment method are implemented.

[0142] The processor may be a central processing unit (CPU). The processor may also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, or a combination of the above chips.

[0143] Memory, as a non-transitory computer-readable storage medium, can be used to store non-transitory software programs, non-transitory computer-executable programs, and units, such as the corresponding program units in the above-described method embodiments of the present invention. The processor executes the non-transitory software programs, instructions, and modules stored in memory to perform various processor functions and work data processing, thereby implementing the methods in the above-described method embodiments.

[0144] The memory may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created by the processor, etc. In addition, the memory may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. In some embodiments, the memory may optionally include a memory remotely located relative to the processor, and these remote memories may be connected to the processor via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0145] The one or more units are stored in the memory, and when executed by the processor, perform the method in the above embodiment.

[0146] The specific details of the above-mentioned computer device can be understood by referring to the corresponding descriptions and effects in the above-mentioned embodiments, and will not be repeated here.

[0147] In order to achieve the above-mentioned purpose, according to another aspect of the present application, a computer-readable storage medium is further provided, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed in a computer processor, the steps in the image file verification method in the above-mentioned bank credit risk control scenario are implemented. It can be understood by those skilled in the art that all or part of the processes in the above-mentioned embodiment method can be implemented by instructing the relevant hardware through a computer program, and the program can be stored in a computer-readable storage medium, and when the program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only memory (ROM), a random access memory (RAM), a flash memory (Flash Memory), a hard disk drive (HDD) or a solid-state drive (SSD), etc.; the storage medium can also include a combination of the above-mentioned types of memory.

[0148] In order to achieve the above-mentioned purpose, according to another aspect of the present application, a computer program product is also provided, including a computer program / instruction, which, when executed by a processor, implements the steps of the image file verification method in the above-mentioned bank credit risk control scenario.

[0149] Obviously, those skilled in the art will appreciate that the modules or steps of the present invention described above can be implemented using a general-purpose computing device. They can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they can be implemented using program code executable by a computing device, which can then be stored in a storage device and executed by the computing device. Alternatively, they can be fabricated into separate integrated circuit modules, or multiple modules or steps can be fabricated into a single integrated circuit module for implementation. Thus, the present invention is not limited to any specific combination of hardware and software.

[0150] The foregoing description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Those skilled in the art will readily appreciate that various modifications and variations of the present invention are possible. Any modifications, equivalent substitutions, or improvements made within the spirit and principles of the present invention are intended to be within the scope of protection of the present invention.

Claims

1. A method for verifying image files in a bank credit risk control scenario, characterized in that: include: Get the compressed image file package sent by the channel; Performing MD5 verification on the image file compression package and the image files in the image file compression package; wherein the MD5 is used to confirm the consistency of information transmission of the image file compression package and the image files in the image file compression package; Performing anti-compression package bomb verification on the image file compression package; After the MD5 check and the anti-compression package bomb check are passed, the image file in the image file compression package is subjected to file anti-counterfeiting verification; wherein the image file includes a PDF file in the financing initiation or transmission process; The performing of anti-counterfeiting verification on the image files in the image file compression package includes verifying the electronic signature of each image file, or extracting the document signing sequence from the image file and verifying the document signing sequence; Verifying the electronic signature of each image file includes verifying whether the PDF file signature is valid and whether the signer is a party to the financing application using a Java itext5 tool; wherein the PDF file signature is implemented using a hash algorithm and an encryption algorithm; If the PDF document signature is invalid or the signer is not a relevant party or the relevant party is missing, the financing application will be rejected; The extracting the document signing sequence from the image file and verifying the document signing sequence includes extracting the document signing sequence from the image file using a Java itext5 tool and then verifying the document signing sequence; If the order of signing the documents is inconsistent with the preset order of signing the documents, the financing application operation will be rejected; where the PDF file is provided by the credit system and transmitted to the relevant platform party through the interface, the preset order of signing the documents is the original signature of the PDF original output by the credit system, the bank signature of the PDF business contract output by the credit system, the online banking signature representing the receipt at the online banking system level, the transaction signature representing the completion of the transaction when the financing enterprise signs and seals the online banking terminal, and the acceptance signature received and signed by the credit system after the transaction is completed; Reading the horizontal and vertical coordinates of the keywords of the PDF file, and matching and verifying the horizontal and vertical coordinates of the keywords of the PDF file with preset horizontal and vertical coordinate values, or, after reading the key value of the PDF file, matching and verifying the key value of the PDF file with approved process business data; wherein the key value of the PDF file is converted into text, and then the key value is extracted from the text based on a preset regular expression for business data extraction; If the verification does not match, the loan disbursement operation of the credit financing application will be rejected; If the verification matches, the file data verification is confirmed to be successful; After the document anti-counterfeiting verification and document data verification are passed, the image file is signed and stamped, and the image file with the signed and stamped acceptance is uploaded to the preset image platform.

2. The image file verification method in the bank credit risk control scenario according to claim 1 is characterized in that: Also includes: Upon receiving the image verification request sent by the channel party, performing access authentication on the channel party; After the access authentication is passed, the image file compression package corresponding to the image verification request is stored in a local temporary storage area.

3. The image file verification method in the bank credit risk control scenario according to claim 2 is characterized in that: The compressed image file package sent by the acquisition channel specifically includes: The compressed image file package is obtained from the local temporary storage area.

4. An image file verification device in a bank credit risk control scenario, characterized in that: include: An image file compression package acquisition unit, used to acquire the image file compression package sent by the channel party; A compressed package physical verification unit, configured to perform an MD5 check on the image file compressed package and the image files in the image file compressed package; wherein the MD5 is used to confirm the consistency of information transmission of the image file compressed package and the image files in the image file compressed package; Performing anti-compression package bomb verification on the image file compression package; A file verification unit, configured to perform anti-counterfeiting verification on the image file in the compressed image file package after the MD5 verification and the anti-compression package bomb verification pass; wherein the image file includes a PDF file in the process of financing initiation or transmission; The performing of anti-counterfeiting verification on the image files in the image file compression package includes verifying the electronic signature of each image file, or extracting the document signing sequence from the image file and verifying the document signing sequence; Verifying the electronic signature of each image file includes verifying whether the PDF file signature is valid and whether the signer is a party to the financing application using a Java itext5 tool; wherein the PDF file signature is implemented using a hash algorithm and an encryption algorithm; If the PDF document signature is invalid or the signer is not a relevant party or the relevant party is missing, the financing application will be rejected; The extracting the document signing sequence from the image file and verifying the document signing sequence includes extracting the document signing sequence from the image file using a Java itext5 tool and then verifying the document signing sequence; If the order of signing the documents is inconsistent with the preset order of signing the documents, the financing application operation will be rejected; where the PDF file is provided by the credit system and transmitted to the relevant platform party through the interface, the preset order of signing the documents is the original signature of the PDF original output by the credit system, the bank signature of the PDF business contract output by the credit system, the online banking signature representing the receipt at the online banking system level, the transaction signature representing the completion of the transaction when the financing enterprise signs and seals the online banking terminal, and the acceptance signature received and signed by the credit system after the transaction is completed; The file verification unit is further configured to read the horizontal and vertical coordinates of the keywords of the PDF file and match and verify the horizontal and vertical coordinates of the keywords of the PDF file with preset horizontal and vertical coordinate values, or, after reading the key value of the PDF file, match and verify the key value of the PDF file with the business data of the approved process; wherein the key value of the PDF file is obtained by converting the PDF file into text and then extracting the key value from the text based on a preset regular expression for business data extraction; if the verification does not match, the loan disbursement operation of the credit financing application is rejected; if the verification matches, the file data verification is confirmed to have passed; The signature storage unit is used to sign and seal the image file after the document anti-counterfeiting verification and document data verification are passed, and upload the signed and sealed image file to a preset image platform.

5. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 3 are implemented.

6. A computer-readable storage medium having a computer program / instruction stored thereon, characterized in that: When the computer program / instructions are executed by a processor, the steps of the method according to any one of claims 1 to 3 are implemented.

7. A computer program product comprising a computer program / instructions, characterized in that When the computer program / instructions are executed by a processor, the steps of the method according to any one of claims 1 to 3 are implemented.

Images