Data verification method and device, electronic equipment and storage medium

Abstract

The application relates to a data verification method and device, electronic equipment and a storage medium. The method comprises the following steps: obtaining a first verification request sent by a target object; extracting a first parameter set from the first verification request based on a first verification protocol, wherein the first verification protocol records parameter items participating in calculation of a digest value and a preset digest algorithm, the first verification protocol is an agreement agreed with a verification server; obtaining a first target value by processing the first parameter set by using the preset digest algorithm; and generating first feedback information indicating that verification is passed in a case where the verification server cannot execute the first verification protocol and a first set saved in a local access server contains the first target value. The application provides a more adaptable data verification scheme, improves the availability and stability of data verification, and can be applied to various scenes such as cloud technology, artificial intelligence, intelligent transportation and intelligent entertainment.

Description

Technical Field

[0001] This application relates to the field of Internet communication technology, and in particular to a data verification method, apparatus, electronic device and storage medium. Background Technology

[0002] With the development of internet communication technology, various internet products have emerged, providing users with a range of functionalities. These functionalities often involve data verification, such as verifying a user's permissions, successful login, or payment status. Common technologies for this purpose involve obtaining parameters to be verified based on a verification request, and then determining whether verification is successful based on whether these parameters meet certain conditions. However, if the server executing the parameter verification logic malfunctions, it can affect the normal execution of the logic, thus impacting the user experience of these internet product functionalities. Therefore, a more adaptable data verification solution is needed. Summary of the Invention

[0003] To address at least one of the aforementioned technical problems, this application provides a data verification method, apparatus, electronic device, and storage medium:

[0004] According to a first aspect of this application, a data verification method is provided, applied to an access server, the method comprising:

[0005] Obtain the first verification request sent by the target object, wherein the target object is any one of a plurality of objects;

[0006] The first parameter set is extracted from the first verification request based on the first verification protocol. The first verification protocol records the parameter items involved in the digest value calculation and the preset digest algorithm. The first verification protocol is a protocol agreed upon with the verification server.

[0007] The first target value is obtained by processing the first parameter set using the preset digest algorithm;

[0008] If the verification server cannot execute the first verification protocol and the first set stored locally on the access server contains the first target value, a first feedback message indicating that the verification has passed is generated. The first set consists of the first digest values ​​corresponding to each of the multiple benchmark objects. The first digest values ​​are calculated based on the first verification protocol. The benchmark objects are objects among the multiple objects that have passed the verification process of the verification server in advance. The first set is generated by the verification server and sent to the access server.

[0009] According to a second aspect of this application, a data verification method is provided, applied to a business system, the business system including a verification server, a business server, and multiple access servers, the method comprising:

[0010] The target access server obtains the first verification request sent by the target object, wherein the target object is any one of a plurality of objects, and the target access server is any one of the plurality of access servers;

[0011] The target access server extracts a first parameter set from the first verification request based on a first verification protocol. The first verification protocol records the parameter items involved in the digest value calculation and a preset digest algorithm. The first verification protocol is a protocol agreed upon with the verification server.

[0012] The target access server processes the first parameter set using the preset digest algorithm to obtain a first target value;

[0013] If the verification server cannot execute the first verification protocol and the first set stored locally on the target access server contains the first target value, the target access server generates first feedback information indicating that the verification has passed, so that the business server provides target business services to the target object. The first set consists of first digest values ​​corresponding to multiple benchmark objects. The first digest values ​​are calculated based on the first verification protocol. The benchmark objects are objects among the multiple objects that have passed the verification process of the verification server in advance. The first set is generated by the verification server and sent to the target access server.

[0014] According to a third aspect of this application, a data verification device is provided, configured on an access server, the device comprising:

[0015] Acquisition module: used to acquire the first verification request sent by the target object, which is any one of multiple objects;

[0016] Extraction module: used to extract a first parameter set from the first verification request based on a first verification protocol, wherein the first verification protocol records the parameter items involved in the digest value calculation and a preset digest algorithm, and the first verification protocol is a protocol agreed upon with the verification server;

[0017] Processing module: used to process the first parameter set using the preset digest algorithm to obtain the first target value;

[0018] The generation module is used to generate first feedback information indicating that the verification has passed when the verification server cannot execute the first verification protocol and the first set stored locally on the access server contains the first target value. The first set consists of first digest values ​​corresponding to multiple benchmark objects. The first digest values ​​are calculated based on the first verification protocol. The benchmark objects are objects among the multiple objects that have passed the verification process of the verification server in advance. The first set is generated by the verification server and sent to the access server.

[0019] According to a fourth aspect of this application, an electronic device is provided, the electronic device including at least one processor and a memory communicatively connected to the at least one processor; wherein the memory stores at least one instruction or at least one program, the at least one instruction or at least one program being loaded and executed by the at least one processor to implement the data verification method as described in the first aspect, or the data verification method as described in the second aspect.

[0020] According to a fifth aspect of this application, a computer-readable storage medium is provided, wherein at least one instruction or at least one program is stored therein, the at least one instruction or at least one program being loaded and executed by a processor to implement the data verification method as described in the first aspect or the data verification method as described in the second aspect.

[0021] According to a sixth aspect of this application, a computer program product is provided, the computer program product comprising at least one instruction or at least one program segment, the at least one instruction or at least one program segment being loaded and executed by a processor to implement the data verification method as described in the first aspect, or the data verification method as described in the second aspect.

[0022] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit this application.

[0023] Implementing this application will have the following beneficial effects:

[0024] This application provides a more adaptive data verification scheme. An access server extracts a first parameter set from a received first verification request based on a first verification protocol, processes the first parameter set using a preset digest algorithm to obtain a first target value, and then, if the verification server cannot execute the first verification protocol and the first set stored locally contains the first target value, the access server generates a first feedback message indicating successful verification. This application sets up an architecture of access server and verification server, allowing the access server to continue executing parameter verification logic even if the verification server encounters an anomaly, thus improving the availability and stability of data verification. Compared to directly determining whether the parameter to be verified meets the conditions, using a preset digest algorithm to determine the digest value corresponding to the parameter to be verified, and storing the pre-calculated digest value, improves the ease of maintaining the first set and the ease of comparing digest values, thereby improving the efficiency of data verification.

[0025] Other features and aspects of this application will become clear from the following detailed description of exemplary embodiments with reference to the accompanying drawings. Attached Figure Description

[0026] To more clearly illustrate the technical solutions and advantages in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0027] Figure 1 This diagram illustrates an application environment according to an embodiment of the present application.

[0028] Figure 2 A flowchart illustrating a data verification method according to an embodiment of this application is shown;

[0029] Figure 3 A flowchart illustrating a data verification method according to an embodiment of this application is also shown;

[0030] Figure 4 A schematic diagram illustrating the process of generating a verification protocol according to an embodiment of this application is shown;

[0031] Figure 5 This diagram illustrates the architecture of an authentication scenario according to an embodiment of this application.

[0032] Figure 6 The diagram also illustrates the architecture in an authentication scenario according to embodiments of this application.

[0033] Figure 7 This illustrates the permission table according to an embodiment of this application;

[0034] Figure 8 The permission table according to an embodiment of this application is also shown;

[0035] Figure 9 This diagram illustrates a device block diagram according to an embodiment of the present application;

[0036] Figure 10 A schematic diagram of an electronic device according to an embodiment of this application is shown. Detailed Implementation

[0037] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of this application.

[0038] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or server that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or devices.

[0039] Various exemplary embodiments, features, and aspects of this application will now be described in detail with reference to the accompanying drawings. The same reference numerals in the drawings denote elements that have the same or similar functions. Although various aspects of the embodiments are shown in the drawings, they are not necessarily drawn to scale unless specifically indicated otherwise.

[0040] The term “exemplary” as used herein means “serving as an example, embodiment, or illustration.” Any embodiment illustrated herein as “exemplary” is not necessarily to be construed as superior to or better than other embodiments.

[0041] In this document, the term "and / or" is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent three cases: A alone, A and B simultaneously, and B alone. Furthermore, the term "at least one" in this document means any combination of at least two of any one or more elements. For example, including at least one of A, B, and C can mean including any one or more elements selected from the set consisting of A, B, and C.

[0042] Furthermore, to better illustrate this application, numerous specific details are provided in the following detailed description. Those skilled in the art should understand that this application can be implemented without certain specific details. In some instances, methods, means, components, and circuits well-known to those skilled in the art have not been described in detail in order to highlight the main points of this application.

[0043] Before providing a further detailed description of the embodiments of this application, the nouns and terms involved in the embodiments of this application will be explained, and the nouns and terms involved in the embodiments of this application shall be interpreted as follows.

[0044] Predicate functions are special functions used to describe the relationship between multiple conditions, thereby verifying whether input parameters meet the conditions. They accept one or more parameters, which can be exhaustively enumerated, and return the corresponding Boolean value. Their mathematical expression is: y = F(x, x1, x2, x3, ...), where the set of values ​​for y is {0, 1}. In modern program development workflows, predicate functions or predicate interfaces / services are widely used. For example: 1. auth(x, y): Determines whether user x has permission to use y; 2. is_pay(x): Determines whether user x has completed a payment; 3. is_valid_params(x, y, z): Determines whether the parameter is valid.

[0045] Please see Figure 1 , Figure 1 The diagram illustrates an application environment according to an embodiment of this application. The application environment may include a client 10 and a server 20. The client 10 and server 20 can be directly or indirectly connected via wired or wireless communication. A target object (e.g., a user) can send a first verification request to the server 20 through the client 10. The server 20 includes an access server and a verification server. The access server receives the first verification request sent by the target object, which is any one of multiple objects. Then, based on a first verification protocol, it extracts a first parameter set from the first verification request. The first verification protocol records the parameter items involved in the digest value calculation and a preset digest algorithm. The first verification protocol is a protocol agreed upon with the verification server. Furthermore, the preset digest algorithm is used to process the first parameter set to obtain a first target value. Finally, if the verification server cannot execute the first verification protocol and the first set stored locally on the access server contains the first target value, a first feedback message indicating successful verification is generated. The first set consists of the first digest value corresponding to each object, which is calculated based on the first verification protocol. The first set is generated by the verification server and sent to the access server. It should be noted that... Figure 1 This is just one example.

[0046] Client 10 can be a physical device such as a smartphone, computer (e.g., desktop computer, tablet, laptop), augmented reality (AR) / virtual reality (VR) device, digital assistant, smart voice interaction device (e.g., smart speaker), smart wearable device, smart home appliance, in-vehicle terminal, etc., or software running on the physical device, such as a computer program. The client's operating system can be Android, iOS (a mobile operating system developed by Apple), Linux, Microsoft Windows, etc.

[0047] The server-side component 20 can be a standalone physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server providing basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms. The server may include network communication units, processors, and memory, etc. The server-side component can provide backend services to the corresponding clients.

[0048] In practical applications, the data verification method provided in this application can be used in relevant internet products to support data verification involved in the functions provided by the product, such as verifying whether a user has the necessary permissions, verifying whether a user has successfully logged in, and verifying whether an order has been paid. Relevant internet products may include instant messaging applications, payment applications, video applications, e-commerce applications, etc.

[0049] It should be noted that for verification requests and other requests that are related to user information, when the embodiments of this application are applied to specific products or technologies, user permission or consent is required, and the collection, use and processing of related data must comply with the relevant laws, regulations and standards of the relevant countries and regions.

[0050] Figure 2 This diagram illustrates a flow chart of a data verification method according to an embodiment of this application. Figure 2 As shown, the method includes:

[0051] S201: Obtain the first verification request sent by the target object, wherein the target object is any one of a plurality of objects;

[0052] In this embodiment, the access server obtains a first verification request sent by the target object. The target object is any one of multiple objects. These multiple objects could be multiple users or multiple accounts. Accordingly, the target object could be a specific user or a specific account. When the target object is a user, that user can trigger the generation of the first verification request through the interactive interface provided by the client, and the first verification request is transmitted to the access server via the client. When the target object is an account, the user of that account can trigger the generation of the first verification request through the interactive interface provided by the client, and the first verification request is transmitted to the access server via the client.

[0053] The first verification request aims to request data verification for a target business service. The parameters carried in the first verification request are generally those required for data verification of the target business service. The target business service can be any of several business services. For example, user A uses application B and wants to experience business service C provided by application B (such as playing the current video in D quality). Application B's interface displays a control indicating business service C. When user A triggers this control, the first verification request is generated. In this case, the first verification request aims to request data verification for business service C, and the parameters carried in the first verification request match those required for data verification of business service C, such as user A's ID and the ID of business service C. If user A needs to log in before experiencing the business service provided by application B, application B's interface displays a control guiding user A to input or authorize the import of relevant user information. Subsequent user triggering of this control or its associated controls generates the first verification request. The relevant user information can be a combination of user A's ID and password, or user A's mobile phone number, biometric information, etc.

[0054] S202: Extract a first parameter set from the first verification request based on a first verification protocol. The first verification protocol records the parameter items involved in the digest value calculation and a preset digest algorithm. The first verification protocol is a protocol agreed upon with the verification server.

[0055] In this embodiment, the access server extracts a first parameter set from the first verification request based on a first verification protocol. Considering the need for valid responses to multiple verification requests from different objects, the verification request may also carry some fixed parameters, such as timestamps, IP information, and device information. For a first verification request aimed at requesting data verification for a target business service, a certain fixed parameter may or may not participate in the digest value calculation. The first verification protocol is an agreement between the access server and the verification server. The first verification protocol can be applied to verification requests sent by different objects for the same business service, verification requests sent by different objects for different business services, or verification requests sent by the same object for different business services.

[0056] It's understandable that the verification server is the provider of the verification service, while the access server is the caller and user. (See reference...) Figure 5 , 6 The generation and updating of the verification protocol can be handled by the verification server, which then synchronizes the current version of the verification protocol to the access server. The access server uses the current version of the verification protocol to process verification requests and obtain the corresponding digest value. If the verification server is functioning correctly, it determines whether the digest value meets the conditions to complete the verification. If the verification server malfunctions, the access server determines whether the digest value meets the conditions to complete the verification.

[0057] The first verification protocol records the parameters involved in the digest value calculation and the preset digest algorithm. The parameters involved in the digest value calculation provide the basis for extracting the first parameter set from the first verification request. The preset digest algorithm is used to process the specific parameters under each parameter. In practical applications, the first verification protocol can specify how the preset digest algorithm processes a particular parameter. For example, if the parameters involved in the digest value calculation include parameters 1-3, and the preset digest algorithm is a formula used for encryption, the first verification protocol can specify the formula positions that parameters 1-3 need to be substituted into. The first verification protocol can also describe the substituted parameters for the formula positions, allowing subsequent substitution based on the matching degree between the parameter and the description information.

[0058] S203: Process the first parameter set using the preset digest algorithm to obtain the first target value;

[0059] In this embodiment, the access server processes the first parameter set using a preset digest algorithm to obtain a first target value. Combined with the description in step S203 above, knowing the function of the preset digest algorithm, the preset digest algorithm is used to process the first parameter set to obtain the first target value. Subsequently, the first target value will replace the first parameter set in the verification process. The representation of the first parameter set by the first target value can avoid the security risks caused by the leakage of real parameters in the first parameter set, and can also improve the convenience and efficiency of verification when the first parameter set includes multiple parameters.

[0060] S204: If the verification server cannot execute the first verification protocol and the first set stored locally on the access server contains the first target value, generate first feedback information indicating that the verification has passed. The first set consists of first digest values ​​corresponding to multiple reference objects. The first digest values ​​are calculated based on the first verification protocol. The reference objects are objects among the multiple objects that have passed the verification process of the verification server in advance. The first set is generated by the verification server and sent to the access server.

[0061] In this embodiment, if the verification server cannot execute the first verification protocol and the first set stored locally on the access server contains the first target value, the access server generates first feedback information indicating that the verification has passed. The inability of the verification server to execute the first verification protocol indicates that the verification server has encountered an anomaly. The reasons for this anomaly could be that the verification server malfunctions and cannot execute the digest value verification logic that it should be performing; or that the verification server cannot directly execute the first verification protocol, or that the execution of the first verification protocol requires certain preconditions, such as an upgrade of the access server or an upgrade of the software development kit integrated with the access server.

[0062] If the first set stored locally on the access server contains the first target value, and the access server generates a first feedback message indicating successful verification, this means that the access server can execute the digest value verification logic even if the verification server cannot execute the first verification protocol. Thus, when the verification server malfunctions and cannot execute the digest value verification logic, the intervention of the access server can ensure the availability of data verification. When the verification server executes the first verification protocol based on the access server's upgrade prerequisites, the access server does not need to upgrade and can effectively respond to verification requests without upgrading.

[0063] The access server uses a first set to perform digest value verification logic. Based on this first set, the access server determines whether the first target value is the same as the digest values ​​in the set. If they are the same, a first feedback message indicating successful verification is generated; otherwise, a third feedback message indicating failed verification is generated. If the first verification request aims to request data verification for a target business service, the first feedback message will instruct the target object to provide the target business service, while the third feedback message will not instruct the target object to provide the target business service.

[0064] The first set, serving as the basis, consists of a first digest value corresponding to each benchmark object. The first digest value is calculated based on a first verification protocol. The benchmark object is an object among multiple objects that has pre-passed the verification process of the verification server. Simultaneously, the first set is generated by the verification server and sent to the access server. It can be understood that the target application can provide multiple business services to users. The first verification protocol can be applied to verification requests for multiple business services. The first verification protocol records the parameters involved in the digest value calculation and the preset digest algorithm. The multiple objects are the respective accounts of multiple users using the target application. The verification server pre-calculates the corresponding digest values ​​for the benchmark accounts among the multiple accounts that are qualified to experience any of the multiple business services based on the first verification protocol. The calculated digest values ​​constitute the first set. Taking account i as an example, account i is qualified to experience any of the multiple business services. Account i is the benchmark object. The verification server obtains the parameters related to account i for digest value calculation according to the first verification protocol, and then processes them using the preset digest algorithm to obtain the first digest value corresponding to account i. If account j (≠ i) is not qualified to experience any of the multiple business services, account j is not the base account, and the verification server does not need to calculate the digest value of account j according to the first verification protocol.

[0065] For multiple business services, an account's eligibility to use one of these services can be verified using the corresponding verification process for that service. Multiple business services can correspond to multiple verification processes. For example, the verification process for service A might verify if a user has a certain permission, service B might verify if the user has successfully logged in, and service C might verify if a user's order has been paid.

[0066] In practical applications, the users of the target application are variable, and their eligibility to experience any of the multiple business services (or their accounts) also varies. The verification server can periodically synchronize the digest values ​​of the baseline objects in the current update cycle to the access server. This synchronization can be a full synchronization or an incremental synchronization relative to the previous update cycle. The verification server can also respond to the appearance of a new baseline object or the disappearance of an existing baseline object by adding or deleting digest values ​​with the access server.

[0067] The embodiments of this application will be described in detail below.

[0068] As one possible implementation, when the verification server updates the first verification protocol to the second verification protocol, a second set and the second verification protocol sent by the verification server are received, so as to update the first set using the second set and guide the calculation of the digest value for the verification request using the second verification protocol; wherein, the second verification protocol belongs to the version file to be updated of the software development kit function integrated by the access server, the second set is generated by the verification server, the second set is composed of the second digest value corresponding to each of the reference objects, and the second digest value is calculated based on the second verification protocol.

[0069] The second verification protocol is an update of the first verification protocol and can also be applied to verification requests for multiple business services. The verification server sends the second verification protocol and the second set to the access server, aiming to guide the access server to extract the parameters to be verified from the verification request according to the second verification protocol, process the parameters to obtain the digest value, and guide the access server to execute the digest value verification logic based on the second set in the event of an anomaly in the verification server. After receiving the second verification protocol and the second set, the access server can first replace the first set currently stored locally with the second set; then, for the received verification request, it calculates the digest value according to the second verification protocol. The second set is generated by the verification server. The process of the verification server generating the second set based on the second verification protocol can be referred to the process of the verification server generating the first set based on the first verification protocol in step S204 above, and will not be repeated here.

[0070] For the second verification protocol, which is an updateable version file of the Software Development Kit (SDK) function integrated into the access server, it is understood that, under default conditions, the SDK integrated into the access server should be upgraded. This allows the access server to extract the parameters to be verified from the verification request and process them to obtain a digest value according to the second verification protocol. However, in this embodiment, the SDK integrated into the access server can bypass the upgrade (e.g., a forced upgrade) while still extracting the parameters to be verified from the verification request and processing them to obtain a digest value according to the second verification protocol. This further improves the usability and adaptability of data verification.

[0071] Furthermore, the difference between the second verification protocol and the first verification protocol is that the recorded parameter items are different. The parameter item set is composed of the parameter items recorded by the second verification protocol. The step of using the second verification protocol to guide the calculation of the digest value of the verification request may include the following steps: For the received second verification request, 1) if the candidate set covers the parameter item set, extract a second parameter set that conforms to the parameter item set from the second verification request, and process the second parameter set using the preset digest algorithm to obtain a second target value. The second verification request is sent by the target object, and the candidate set is composed of the parameter items to which the parameters carried by the second verification request belong; 2) if the candidate set does not cover the parameter item set, extract a third parameter set that conforms to the intersection of parameter items from the second verification request, and obtain a fourth parameter set that conforms to the remaining set of parameter items. Process the third parameter set and the fourth parameter set using the preset digest algorithm to obtain a second target value. The parameter item intersection is composed of the intersection of the candidate set and the parameter item set, and the remaining set of parameter items is composed of the parameter items of the parameter item set other than the parameter item intersection.

[0072] This section describes how the updated verification protocol guides the digest value calculation for verification requests. Since the first and second verification protocols differ in the parameters involved in the digest value calculation, and considering that the parameters carried in the second verification request may still belong to the same parameter categories as those in the first verification request, the parameter categories carried in the second verification request are more aligned with the requirements of the first verification protocol. Therefore, guidance may be needed to ensure this alignment with the requirements of the second verification protocol, thereby improving adaptability and flexibility.

[0073] For example, the parameter items recorded in the second verification protocol constitute a parameter item set, which includes parameter item AC. The parameter items to which the parameters carried in the second verification request belong constitute a candidate set. If the candidate set includes parameter item AE, then the candidate set covers the parameter item set. Parameter a under parameter item A, parameter b under parameter item B, and parameter c under parameter item C can be extracted from the second verification request to form a second parameter set (containing parameter ac). Then, the second parameter set is processed using a preset digest algorithm to obtain the second target value. Here, the relevant steps in step S203 above, which uses a preset digest algorithm to process the first parameter set to obtain the first target value, can be referred to, and will not be repeated here. If the candidate set includes parameter item AB or includes parameter item A and parameter item CD, the candidate set does not cover the parameter item set. Taking a candidate set including parameter items A and B as an example, parameter a under parameter item A and parameter b under parameter item B can be extracted from the second verification request to form a third parameter set (containing parameters a and b); parameter c under parameter item C can be obtained to form a fourth parameter set (containing parameter c). Parameter c can be obtained by the access server actively (e.g., the access server stores the parameter locally and retrieves it through a search), or the access server can guide the target object to provide the parameter. Then, the third and fourth parameter sets are processed using a preset digest algorithm to obtain the second target value. Here, the relevant steps in step S203 above, which uses a preset digest algorithm to process the first parameter set to obtain the first target value, can be referred to, and will not be repeated here. Of course, the first verification protocol and the second verification protocol may also differ in the preset digest algorithm used in the digest value calculation. The parameter items to which the parameters carried in the second verification request belong may still be consistent with the parameter items to which the parameters carried in the first verification request belong. In this case, no additional guidance may be needed when extracting the parameters to be verified from the second verification request. However, these extracted parameters to be verified need to be processed using the algorithm in the second verification protocol to obtain the digest value. The first verification protocol and the second verification protocol may differ in both the parameters involved in the digest value calculation and the preset digest algorithm involved in the digest value calculation. In this case, the digest value calculation is performed by combining the ideas provided above.

[0074] In addition, after obtaining the second target value, the method may further include the following steps: if the verification server cannot execute the second verification protocol and the second set stored locally on the access server contains the second target value, generate second feedback information indicating that the verification has passed. Here, the access server intervenes to ensure the availability of data verification; refer to the relevant content in the aforementioned step S204.

[0075] As can be seen from the technical solutions provided by the embodiments of this application above, the embodiments of this application provide a more adaptive data verification scheme. The access server extracts a first parameter set from the received first verification request based on a first verification protocol, and processes the first parameter set using a preset digest algorithm to obtain a first target value. Then, if the verification server cannot execute the first verification protocol and the first set stored locally contains the first target value, the access server generates first feedback information indicating that the verification has passed. The embodiments of this application set up an architecture of access server and verification server. The access server can continue to execute parameter verification logic even if the verification server encounters an anomaly, improving the availability and stability of data verification. Compared to directly determining whether the parameter to be verified meets the conditions, using a preset digest algorithm to determine the digest value corresponding to the parameter to be verified, and storing the pre-calculated digest value, can improve the ease of maintaining the first set and the ease of comparing digest values, thereby improving the efficiency of data verification.

[0076] Figure 3 This diagram illustrates a flow chart of a data verification method according to an embodiment of this application. Figure 3 As shown, this method is applied to a business system, which includes an authentication server, a business server, and multiple access servers. The method includes:

[0077] S301: The target access server obtains the first verification request sent by the target object, wherein the target object is any one of a plurality of objects, and the target access server is any one of the plurality of access servers;

[0078] S302: The target access server extracts a first parameter set from the first verification request based on a first verification protocol. The first verification protocol records the parameter items involved in the digest value calculation and a preset digest algorithm. The first verification protocol is a protocol agreed upon with the verification server.

[0079] S303: The target access server processes the first parameter set using the preset digest algorithm to obtain a first target value;

[0080] S304: If the verification server cannot execute the first verification protocol and the first set stored locally on the target access server contains the first target value, the target access server generates first feedback information indicating that the verification has passed, so that the business server provides target business services to the target object. The first set consists of first digest values ​​corresponding to multiple reference objects. The first digest values ​​are calculated based on the first verification protocol. The reference objects are objects among the multiple objects that have passed the verification process of the verification server in advance. The first set is generated by the verification server and sent to the target access server.

[0081] The verification server, business server, and access server can all be server groups. A server group may include at least one physical server and / or at least one cloud server. This application embodiment sets up an architecture of a verification server, a business server, and multiple access servers. The access servers can continue to execute parameter verification logic even if the verification server malfunctions, improving the availability and stability of data verification. Simultaneously, the allocation of servers in the architecture facilitates focusing on the development and maintenance of individual servers, improving scalability. The business system can be managed by the same entity (such as an enterprise, organization, or department); or it can be jointly managed by different entities. For example, entity 1 is responsible for the verification server and the business server, while entities 21-2N are each responsible for N access servers.

[0082] In one embodiment, such as Figure 4 As shown, the method further includes the following steps:

[0083] S401: The verification server determines the business scenario requirement information of the target access server, and the business scenario requirement information includes at least one of the following: security requirement information and performance requirement information;

[0084] S402: The verification server generates the first verification protocol that matches the business scenario requirement information.

[0085] The verification server generates a verification protocol by combining the business scenario requirements of the target access server, taking into account the security and / or performance requirements. This helps to apply a more suitable verification protocol to ensure the security and / or performance of data verification.

[0086] Business scenario requirements can be determined based on the scenario description information of the target access server. The scenario description information may include the target audience characteristics of the target access server (such as target audience profiles) and the types of business services the target access server connects to (such as transaction types, weak data query types, etc.). Generally, the greater the security inclination indicated by the target audience characteristics and the higher the security requirements indicated by the business service type, the more complex the digest algorithm used in the first verification protocol. Conversely, the greater the performance inclination indicated by the target audience characteristics and the higher the performance requirements indicated by the business service type, the simpler the digest algorithm used in the first verification protocol. In practical applications, for scenarios with lower security requirements, simple digest algorithms, such as character concatenation, can be used. These algorithms are computationally fast. For scenarios with higher security requirements, more complex algorithms, such as SHA-256 and MD5, can be used.

[0087] In one embodiment, the method may further include the following steps: the verification server periodically sends the complete set of digest values ​​for the current version, or the incremental set of digest values, to the access server, wherein the incremental set of digest values ​​is determined based on the difference between the complete set of digest values ​​for the current version and the complete set of digest values ​​for the previous version. Periodic digest value synchronization provides the access server with an accurate basis for executing digest value verification logic, thereby ensuring the accuracy and timeliness of data verification.

[0088] The data verification method provided in this application can be applied to business systems. For example... Figure 5 , 6 As shown, the business system uses a digest algorithm to process the input parameters, generating a digest value which is then used to replace the original input parameters in interaction with the provider (corresponding to the aforementioned verification server). When the number of actual input parameters specified in the verification protocol changes, the user (corresponding to the aforementioned access server) does not need to perform upgrade or change processing, improving the system's scalability. Simultaneously, by storing a local digest value set, when the provider's service becomes unavailable, the user can directly use the local digest value set for disaster recovery and degradation without blocking the user's main process, thus improving the system's disaster recovery capability.

[0089] Specifically, in this embodiment, the verification logic of the predicate function is replaced by a more general method, namely, by calculating the digest value and determining whether the digest value exists. If the mathematical expression of the predicate function in the verification logic is: y = F1(x, x1, ...), y ∈ Y{0, 1}, where F1 represents the predicate function, which accepts multiple input parameters such as x, x1, etc., and obtains the result y through the predicate function, the value set of the result y is {0, 1}. In this embodiment, elements with a value of 1 in y are placed in the set Y, F2(x, x1, ...) ∈ Y{a, b, ...}.

[0090] For example, in this embodiment of the application, a pre-defined hash algorithm F2(x,x1,...) is used to calculate the hash value b of the input parameters x,x1,... of the predicate function. When the result obtained by the predicate function F1(x,x1,...) is true, the hash value b is placed into the hash value set Y. Thus, the return result of the predicate function F1(x,x1,...) can be determined as true or false by checking whether the hash value set Y contains a value of F2(x,x1,...). It should be noted that F1 can be the black-box logic of different predicate functions, while F2 is a pre-defined general hash algorithm. The hash algorithm F2 can also be adjusted to adapt to different security and performance requirements. In practical applications, F1 can correspond to the verification process for determining the benchmark object, and F2 can correspond to the hash algorithm in the first and second verification protocols. The process of applying the embodiments of this application may include: 1. The provider of the predicate function converts the corresponding data into a digest value set Y using the digest algorithm F2; 2. The provider of the predicate function distributes set Y, and the user caches set Y locally; 3. The user calculates the digest value b of the input parameter of this request using the digest algorithm F2; 4. When the predicate function provider is normal, the digest value b is used to call the predicate function to directly obtain the result; 5. When the predicate function provider is abnormal, the digest value b is searched in the local cache set Y. If it does not exist, the corresponding predicate function is false; if it exists, the corresponding predicate function is true.

[0091] Taking authentication scenarios as an example:

[0092] 1) The authentication service (corresponding to the verification server mentioned above) uses the permission table (see reference) Figure 7 The table shown uses the hash algorithm F2 to calculate the hash value set Y of users who currently possess the corresponding permissions. Each row in the permissions table represents the permissions a user possesses, such as user X possessing permission Y, user X2 possessing permissions Y, Y1, and Y2. Each row in the permissions table is assigned a unique hash value using the hash algorithm F2.

[0093] 2) The authentication service distributes the updated digest value set Y to the user through periodic full or incremental synchronization. The user saves the updated digest value set Y locally. (See reference...) Figure 6 .

[0094] 3) The user calculates the digest value 'a' from the input parameters X and Y (whether user X has permission Y) of this request using the digest algorithm F2. (See reference...) Figure 6 .

[0095] 4) When the authentication service is normal, the digest value 'a' is used to call the authentication service to obtain the authentication result; when the authentication service is abnormal, the digest value 'a' is searched in the local digest value set Y. If it does not exist, the authentication fails; if it exists, the authentication succeeds.

[0096] 5) When the authentication service is upgraded, such as when the concept of tenant needs to be added.

[0097] a) At this point, the permission table will add the concept of tenant, which can be referenced. Figure 8 The table shown.

[0098] Each row in the permissions table represents the permissions a user possesses under a specific tenant. For example, user X has permission Y only under tenant Z, user X2 has permissions Y and Y1 under tenant Z, and user X2 has permission Y2 under tenant Z2. Each row in the permissions table is assigned a unique digest value using the digest algorithm F2.

[0099] b) The latest summary value set is synchronized and updated to the user, overwriting the previous summary value set Y.

[0100] c) The user adds a tenant parameter Z, and the input parameters are now: X, Y, Z (whether user X has permission Y under tenant Z).

[0101] d) The user calculates the digest value b using the F2 digest algorithm, which can be referenced. Figure 6 .

[0102] e) When the authentication service is normal, the digest value b is used to call the authentication service to obtain the authentication result; when the authentication service is abnormal, the digest value b is searched in the latest local digest value set Y. If it does not exist, the authentication fails; if it exists, the authentication succeeds.

[0103] The main purpose of the digest algorithm F2 in this embodiment is to transform multiple input parameters into a single substitute value, facilitating user judgment. In practical applications, predicate functions are primarily applicable to verification scenarios. In these verification scenarios, predicate functions are typically encapsulated into SDKs or application programming interfaces (APIs) for user access. In authentication systems primarily focused on authorization, X can represent a user, Y represents permissions, and the predicate function verifies whether user X has permission Y. The authentication system in this embodiment can be used by thousands of users via the SDK. As the authentication system is updated, it may require more input parameter information to enrich the authentication scenarios, such as user job information, user's tenant, etc.; or, due to monitoring needs, it may be necessary to obtain information such as the user's office network environment and IP address when using the authentication system. This often necessitates upgrading the SDK and encouraging thousands of users already using the authentication service via the SDK to switch to the upgraded SDK. Furthermore, the SDK switching process often presents problems caused by version inconsistencies, such as upgrade, promotion, and switching costs. The data verification method provided in this application can effectively reduce these costs through enhanced scalability. Furthermore, compared to the parameters to be verified, the corresponding digest values ​​also enhance data structure, allowing for batch lookups locally using the digest value set, resulting in higher efficiency. It also eliminates the strong reliance on a verification server, improving disaster recovery performance and system stability.

[0104] This application also provides a data verification device, such as... Figure 9 As shown, the data verification device 90 includes:

[0105] Acquisition module 901: used to acquire the first verification request sent by the target object, wherein the target object is any one of a plurality of objects;

[0106] Extraction module 902: used to extract a first parameter set from the first verification request based on a first verification protocol, wherein the first verification protocol records the parameter items participating in the digest value calculation and a preset digest algorithm, and the first verification protocol is a protocol agreed upon with the verification server;

[0107] Processing module 903: Used to process the first parameter set using the preset digest algorithm to obtain the first target value;

[0108] Generation module 904: When the verification server cannot execute the first verification protocol and the first set stored locally on the access server contains the first target value, it generates first feedback information indicating that the verification has passed. The first set consists of first digest values ​​corresponding to multiple benchmark objects. The first digest values ​​are calculated based on the first verification protocol. The benchmark objects are objects among the multiple objects that have passed the verification process of the verification server in advance. The first set is generated by the verification server and sent to the access server.

[0109] It should be noted that the apparatus and method embodiments described in the device embodiments are based on the same inventive concept.

[0110] In some embodiments, the functions or modules of the apparatus provided in this application can be used to perform the methods described in the above method embodiments. The specific implementation can be referred to the description of the above method embodiments, and for the sake of brevity, it will not be repeated here.

[0111] This application also provides a computer-readable storage medium storing at least one instruction or at least one program segment, which is loaded and executed by a processor to implement the above-described method. The computer-readable storage medium may be a non-volatile computer-readable storage medium.

[0112] This application also provides an electronic device, which includes at least one processor and a memory communicatively connected to the at least one processor; wherein the memory stores at least one instruction or at least one program, and the at least one instruction or at least one program is loaded and executed by the at least one processor to implement the above method.

[0113] Electronic devices can be provided as terminals, servers, or other forms of devices.

[0114] Figure 10 A block diagram of an electronic device according to an embodiment of this application is shown. For example, electronic device 1900 may be provided as a server. (Refer to...) Figure 10 The electronic device 1900 includes a processing component 1922, which further includes one or more processors, and memory resources represented by memory 1932 for storing instructions, such as application programs, that can be executed by the processing component 1922. The application programs stored in memory 1932 may include one or more modules, each corresponding to a set of instructions. Furthermore, the processing component 1922 is configured to execute instructions to perform the methods described above.

[0115] Electronic device 1900 may also include a power supply component 1926 configured to perform power management of electronic device 1900, a wired or wireless network interface 1950 configured to connect electronic device 1900 to a network, and an input / output (I / O) interface 1958. Electronic device 1900 can operate on an operating system stored in memory 1932, such as Windows Server™, Mac OS X™, Unix™, Linux™, FreeBSD™, or similar.

[0116] In an exemplary embodiment, a non-volatile computer-readable storage medium is also provided, such as a memory 1932 including computer program instructions that can be executed by a processing component 1922 of an electronic device 1900 to perform the above-described method.

[0117] This application may be a system, method, and / or computer program product. A computer program product may include a computer-readable storage medium having computer-readable program instructions loaded thereon for causing a processor to implement various aspects of this application.

[0118] Computer-readable storage media can be tangible devices capable of holding and storing instructions for use by an instruction execution device. Computer-readable storage media can be, for example—but not limited to—electrical storage devices, magnetic storage devices, optical storage devices, electromagnetic storage devices, semiconductor storage devices, or any suitable combination thereof. More specific examples (a non-exhaustive list) of computer-readable storage media include: portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), static random access memory (SRAM), portable compact disc read-only memory (CD-ROM), digital multifunction disc (DVD), memory sticks, floppy disks, mechanical encoding devices, such as punch cards or recessed protrusions storing instructions thereon, and any suitable combination thereof. The computer-readable storage media used herein are not to be construed as transient signals themselves, such as radio waves or other freely propagating electromagnetic waves, electromagnetic waves propagating through waveguides or other transmission media (e.g., light pulses through fiber optic cables), or electrical signals transmitted through wires.

[0119] The computer-readable program instructions described herein can be downloaded from computer-readable storage media to various computing / processing devices, or downloaded via a network, such as the Internet, local area network, wide area network, and / or wireless network, to an external computer or external storage device. The network may include copper transmission cables, fiber optic transmission, wireless transmission, routers, firewalls, switches, gateway computers, and / or edge servers. A network adapter card or network interface in each computing / processing device receives the computer-readable program instructions from the network and forwards them to the computer-readable storage media in the respective computing / processing device.

[0120] The computer program instructions used to perform the operations of this application may be assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, status setting data, or source code or object code written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Smalltalk, C+, etc., and conventional procedural programming languages ​​such as the "C" language or similar programming languages. The computer-readable program instructions may be executed entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving a remote computer, the remote computer may be connected to the user's computer via any type of network—including a local area network (LAN) or a wide area network (WAN)—or may be connected to an external computer (e.g., via the Internet using an Internet service provider). In some embodiments, electronic circuits, such as programmable logic circuits, field-programmable gate arrays (FPGAs), or programmable logic arrays (PLAs), are personalized by utilizing the status information of the computer-readable program instructions. These electronic circuits can execute the computer-readable program instructions to implement various aspects of this application.

[0121] Various aspects of this application are described herein with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It should be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer-readable program instructions.

[0122] These computer-readable program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing apparatus to produce a machine such that, when executed by the processor of the computer or other programmable data processing apparatus, they create means for implementing the functions / actions specified in one or more blocks of the flowchart and / or block diagram. These computer-readable program instructions can also be stored in a computer-readable storage medium that causes a computer, programmable data processing apparatus, and / or other device to operate in a particular manner; thus, the computer-readable medium storing the instructions comprises an article of manufacture that includes instructions for implementing aspects of the functions / actions specified in one or more blocks of the flowchart and / or block diagram.

[0123] Computer-readable program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other device to cause a series of operational steps to be performed on the computer, other programmable data processing apparatus, or other device to produce a computer-implemented process, thereby causing the instructions executed on the computer, other programmable data processing apparatus, or other device to perform the functions / actions specified in one or more boxes of a flowchart and / or block diagram.

[0124] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of this application. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of an instruction, which includes one or more executable instructions for implementing a specified logical function. In some alternative implementations, the functions specified in the blocks may occur in a different order than those specified in the drawings. For example, two consecutive blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can be implemented using a dedicated hardware-based system that performs the specified function or action, or using a combination of dedicated hardware and computer instructions.

[0125] The various embodiments of this application have been described above. These descriptions are exemplary and not exhaustive, nor are they limited to the disclosed embodiments. Many modifications and variations will be apparent to those skilled in the art without departing from the scope and spirit of the described embodiments. The terminology used herein is chosen to best explain the principles, practical applications, or technological improvements to the embodiments in the market, or to enable others skilled in the art to understand the embodiments disclosed herein.

Claims

1. A data verification method, characterized in that, Applied to access servers, including: The first parameter set is extracted from the first verification request based on the first verification protocol; the first verification request is sent by the target object, which is any one of multiple objects; the first verification protocol is an agreement with the verification server to record the parameter items participating in the digest value calculation and the preset digest algorithm. The first target value is obtained by processing the first parameter set using the preset digest algorithm; If the verification server cannot execute the first verification protocol and the first set stored locally contains the first target value, a first feedback message indicating that the verification has passed is generated. The first set consists of the first digest values ​​of multiple benchmark objects. The first digest values ​​are calculated based on the first verification protocol. The benchmark objects are objects among the multiple objects that have passed the verification process of the verification server in advance. The first set is generated by the verification server and sent to the access server. Specifically, if the verification server updates the first verification protocol to the second verification protocol and sends the second verification protocol to the access server, for the second verification request sent to the target object, if the candidate set covers the parameter item set, a second parameter set that conforms to the parameter item set is extracted from the second verification request, and the second parameter set is processed using the preset digest algorithm to obtain the second target value; the difference between the second verification protocol and the first verification protocol is that the recorded parameter items are different, the candidate set is composed of the parameter items to which the parameters carried by the second verification request belong, and the parameter item set is composed of the parameter items recorded by the second verification protocol; If the candidate set does not cover the parameter item set, a third parameter set that matches the parameter item intersection and a fourth parameter set that matches the parameter item remainder set are extracted from the second verification request. The third parameter set and the fourth parameter set are then processed using the preset digest algorithm to obtain the second target value. The parameter item intersection is formed by the intersection of the candidate set and the parameter item set, and the parameter item remainder set is formed by the parameter items of the parameter item set excluding the parameter item intersection.

2. The method according to claim 1, characterized in that, The method further includes: If the verification server updates the first verification protocol to the second verification protocol, the system receives the second set sent by the verification server to update the first set using the second set. The second verification protocol is an updateable version file of the software development kit (SDK) function integrated by the access server. The second set is generated by the verification server and consists of a second digest value corresponding to each benchmark object. The second digest value is calculated based on the second verification protocol.

3. The method according to claim 1, characterized in that, After obtaining the second target value, the method further includes: If the verification server cannot execute the second verification protocol and the second set stored locally on the access server contains the second target value, a second feedback message indicating that the verification has passed is generated.

4. A data verification method, characterized in that, Applied to a business system, the business system including a verification server, a business server, and multiple access servers, the method includes: The target access server obtains the first verification request sent by the target object, wherein the target object is any one of a plurality of objects, and the target access server is any one of the plurality of access servers; The target access server extracts a first parameter set from the first verification request based on a first verification protocol. The first verification protocol records the parameter items involved in the digest value calculation and a preset digest algorithm. The first verification protocol is a protocol agreed upon with the verification server. The target access server processes the first parameter set using the preset digest algorithm to obtain a first target value; If the verification server cannot execute the first verification protocol and the first set stored locally on the target access server contains the first target value, the target access server generates first feedback information indicating that the verification has passed, so that the business server provides target business services to the target object. The first set consists of the first digest values ​​of multiple reference objects, the first digest values ​​are calculated based on the first verification protocol, and the reference objects are objects that have passed the verification process of the verification server in advance. The first set is generated by the verification server and sent to the target access server. Specifically, if the verification server updates the first verification protocol to the second verification protocol and sends the second verification protocol to the target access server, for the second verification request sent to the target object, if the candidate set covers the parameter item set, the target access server extracts a second parameter set that conforms to the parameter item set from the second verification request, and processes the second parameter set using the preset digest algorithm to obtain a second target value; the difference between the second verification protocol and the first verification protocol is that the recorded parameter items are different, the candidate set is composed of the parameter items to which the parameters carried by the second verification request belong, and the parameter item set is composed of the parameter items recorded by the second verification protocol; If the candidate set does not cover the parameter item set, the target access server extracts a third parameter set that matches the parameter item intersection and a fourth parameter set that matches the parameter item remainder set from the second verification request, and processes the third parameter set and the fourth parameter set using the preset digest algorithm to obtain the second target value. The parameter item intersection is composed of the intersection of the candidate set and the parameter item set, and the parameter item remainder set is composed of the parameter items of the parameter item set other than the parameter item intersection.

5. The method according to claim 4, characterized in that, The method further includes: The verification server determines the business scenario requirements information of the target access server, and the business scenario requirements information includes at least one of the following: security requirements information and performance requirements information; The verification server generates a first verification protocol that matches the business scenario requirements.

6. The method according to claim 4, characterized in that, The method further includes: The verification server periodically sends the complete set of digest values ​​for the current version or the incremental set of digest values ​​to the target access server. The incremental set of digest values ​​is determined based on the difference between the complete set of digest values ​​for the current version and the complete set of digest values ​​for the previous version.

7. A data verification device, characterized in that, Configured on the access server, the device includes: Extraction module: used to extract a first parameter set from a first verification request based on a first verification protocol; the first verification request is sent by a target object, the target object is any one of multiple objects, and the first verification protocol is an agreement with the verification server to record the parameter items participating in the digest value calculation and a preset digest algorithm; Processing module: used to process the first parameter set using the preset digest algorithm to obtain the first target value; The generation module is used to generate first feedback information indicating that the verification has passed if the verification server cannot execute the first verification protocol and the first set stored locally contains the first target value. The first set consists of the first digest values ​​of multiple benchmark objects. The first digest values ​​are calculated based on the first verification protocol. The benchmark objects are objects among the multiple objects that have passed the verification process of the verification server in advance. The first set is generated by the verification server and sent to the access server. The device is further configured to: if the verification server updates the first verification protocol to a second verification protocol and sends the second verification protocol to the access server, for a second verification request sent to the target object, if the candidate set covers the parameter item set, extract a second parameter set that conforms to the parameter item set from the second verification request, and process the second parameter set using the preset digest algorithm to obtain a second target value; the difference between the second verification protocol and the first verification protocol is that the recorded parameter items are different, the candidate set is composed of the parameter items to which the parameters carried by the second verification request belong, and the parameter item set is composed of the parameter items recorded by the second verification protocol; If the candidate set does not cover the parameter item set, a third parameter set that matches the parameter item intersection and a fourth parameter set that matches the parameter item remainder set are extracted from the second verification request. The third parameter set and the fourth parameter set are then processed using the preset digest algorithm to obtain the second target value. The parameter item intersection is formed by the intersection of the candidate set and the parameter item set, and the parameter item remainder set is formed by the parameter items of the parameter item set excluding the parameter item intersection.

8. The apparatus according to claim 7, characterized in that, The device is also used for: If the verification server updates the first verification protocol to the second verification protocol, the system receives the second set sent by the verification server to update the first set using the second set. The second verification protocol is an updateable version file of the software development kit (SDK) function integrated by the access server. The second set is generated by the verification server and consists of a second digest value corresponding to each benchmark object. The second digest value is calculated based on the second verification protocol.

9. The apparatus according to claim 7, characterized in that, The device is also used for: After obtaining the second target value, if the verification server cannot execute the second verification protocol and the second set stored locally on the access server contains the second target value, a second feedback message indicating that the verification has passed is generated.

10. An electronic device, characterized in that, The electronic device includes at least one processor and a memory communicatively connected to the at least one processor; wherein the memory stores at least one instruction or at least one program, the at least one instruction or at least one program being loaded and executed by the at least one processor to implement the data verification method as described in any one of claims 1-3, or the data verification method as described in any one of claims 4-6.

11. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores at least one instruction or at least one program, which is loaded and executed by a processor to implement the data verification method as described in any one of claims 1-3, or the data verification method as described in any one of claims 4-6.

12. A computer program product, characterized in that, The computer program product includes at least one instruction or at least one program segment, which is loaded and executed by a processor to implement the data verification method as described in any one of claims 1-3, or the data verification method as described in any one of claims 4-6.

Images