Traceability code management method, device and electronic device based on identity verification

Abstract

The present application provides a traceability code management method, device and electronic device based on identity verification, which relates to identity verification process traceability technology, the method comprising: extracting the identity verification information of the target user from the target service request when receiving a target service request for a target service sent by a user device, and sending an identity verification request to the identity verification system based on the identity verification information; receiving an identity verification response fed back by the identity verification system, and generating target service data based on the target traceability code carried in the identity verification response and the target result data of the target service generated for the target service request; and sending the service data to the user device. The traceability code management method, device and electronic device based on identity verification provided in the present application are used to trace the detailed process of each online identity verification by adding a traceability code.

Description

Technical Field

[0001] The present application relates to identity verification process traceability technology, and in particular to a traceability code management method, device and electronic equipment based on identity verification. Background Art

[0002] Online identity verification is the process of verifying and confirming personal or corporate identities through the Internet. It ensures the authenticity and legality of users' online activities by verifying the information provided by users (such as name, ID number, company name, and unified social credit code) and identity documents (such as ID card, business license, etc.) online.

[0003] During the online identity verification process, improper use of the query and verification interface by the business system may cause user privacy leakage and credit loss. For example, using the interface for illegal or unreasonable purposes will seriously infringe upon the user's legitimate rights and interests.

[0004] Based on this, there is an urgent need for a mechanism that can trace the source of online identity verification in order to trace the detailed process of each online identity verification. Summary of the invention

[0005] The purpose of this application is to provide a traceability code management method, device and electronic device based on identity verification, which is used to trace the detailed process of each online identity verification by adding a traceability code.

[0006] In a first aspect, the present application provides a traceability code management method based on identity verification, comprising:

[0007] Upon receiving a target service request for a target service sent by a user device, extract the identity verification information of the target user from the target service request, and send an identity verification request to the identity verification system based on the identity verification information; receive an identity verification response fed back by the identity verification system, and generate target service data based on the target traceability code carried in the identity verification response and the target result data of the target service generated for the target service request; send the service data to the user device; wherein the target traceability code is generated by the identity verification system based on the first target information; the first target information includes: the platform identifier of the service system, the service identifier of the target service, a timestamp identifier, the identity identifier of the target user, and a random number.

[0008] Optionally, the target business data is generated based on the target traceability code carried in the identity verification response and the target result data of the target business generated for the target business request, including: calling the digital certificate request interface of the digital certificate issuing system with the target traceability code and the identity verification information as input parameters; receiving the target digital certificate generated by the digital certificate issuing system based on the target traceability code and the identity verification information, and generating the target business data based on the target digital certificate; wherein the target certificate includes: a standard area and an extended area; the standard area is used to store certificate information, and the extended area is used to store the target traceability code.

[0009] In a second aspect, the present application provides a traceability code management method based on identity verification, including:

[0010] Receive an identity verification request sent by a business system for a target business, and extract the identity verification information of a target user from the identity verification request; obtain a platform identifier of the business system, a business identifier of the target business, a timestamp identifier generated based on the current time, an identity identifier of the target user, and a random number generated based on a preset random number algorithm; process the platform identifier, the business identifier, the timestamp identifier, the identity identifier and the random number according to a preset traceability code generation rule to obtain a target traceability code.

[0011] Optionally, the method also includes: receiving an identity verification and tracing request sent by the traceability verification system in response to a traceability code verification request submitted by a user device, and extracting the target traceability code from the identity verification and tracing request; parsing the target traceability code, and if the parsing is successful, generating second target information related to the target traceability code; sending the second target information to the traceability verification system; wherein the second target information includes at least one of the following: the traceability code verification result, the platform identifier, the business identifier, the timestamp identifier, the identity identifier, and the identity verification information.

[0012] Optionally, the target traceability code is parsed, and if the parsing is successful, second target information related to the target traceability code is generated, including: obtaining a target identity level of the user account on the user device, and filtering out information matching the target identity level from the second target information to generate third target information.

[0013] Optionally, the filtering out information matching the target identity level from the second target information to generate the third target information includes: when the target identity level is the first level, based on the traceability code verification result, the platform identifier, the business identifier, the timestamp identifier, the identity identifier, and the identity verification information, generating the third target information; when the target identity level is the second level, based on the traceability code verification result, the platform identifier, the business identifier, the timestamp identifier, and the identity identifier, generating the third target information; when the target identity level is the third level, based on the traceability code verification result.

[0014] In a third aspect, the present application also provides a traceability code management device based on identity verification, including:

[0015] The first extraction module is used to extract the identity verification information of the target user from the target service request sent by the user device for the target service; the first sending module is used to send an identity verification request to the identity verification system based on the identity verification information; the first receiving module is used to receive the identity verification response fed back by the identity verification system; the first generation module is used to generate the target service data based on the target traceability code carried in the identity verification response and the target result data of the target service generated for the target service request; the first sending module is also used to send the service data to the user device; wherein the target traceability code is generated by the identity verification system based on the first target information; the first target information includes: the platform identifier of the service system, the service identifier of the target service, the timestamp identifier, the identity identifier of the target user, and a random number.

[0016] Optionally, the first sending module is also used to call the digital certificate request interface of the digital certificate issuing system using the target traceability code and the identity verification information as input parameters; the first receiving module is also used to receive the target digital certificate generated by the digital certificate issuing system based on the target traceability code and the identity verification information; the first generating module is specifically used to generate the target business data based on the target digital certificate; wherein, the target certificate includes: a standard area and an extended area; the standard area is used to store certificate information, and the extended area is used to store the target traceability code.

[0017] The traceability code management device based on identity verification provided by the present application, when receiving a target service request for a target service sent by a user device, extracts the identity verification information of the target user from the target service request, and sends an identity verification request to the identity verification system based on the identity verification information; receives the identity verification response fed back by the identity verification system, and generates target service data based on the target traceability code carried in the identity verification response and the target result data of the target service generated for the target service request; sends the service data to the user device; wherein the target traceability code is generated by the identity verification system based on the first target information; the first target information includes: the platform identifier of the service system, the service identifier of the target service, the timestamp identifier, the identity identifier of the target user, and a random number. In this way, the detailed process of each online identity verification can be traced by adding a traceability code.

[0018] In a fourth aspect, the present application also provides another traceability code management device based on identity verification, including:

[0019] The second receiving module is used to receive an identity verification request sent by the business system for the target business; the second extraction module is used to extract the identity verification information of the target user from the identity verification request; the data acquisition module is used to obtain the platform identifier of the business system, the business identifier of the target business, the timestamp identifier generated based on the current time, the identity identifier of the target user, and the random number generated based on a preset random number algorithm; the second generation module is used to process the platform identifier, the business identifier, the timestamp identifier, the identity identifier and the random number according to the preset traceability code generation rules to generate a target traceability code.

[0020] Optionally, the second receiving module is further used to receive an identity verification and tracing request sent by the traceability verification system in response to a traceability code verification request submitted by a user device; the second extraction module is further used to extract the target traceability code from the identity verification and tracing request; the second generation module is further used to parse the target traceability code, and if the parsing is successful, generate second target information related to the target traceability code; the second sending module is further used to send the second target information to the traceability verification system; wherein the second target information includes at least one of the following: the traceability code verification result, the platform identifier, the business identifier, the timestamp identifier, the identity identifier, and the identity verification information.

[0021] Optionally, the data acquisition module is further used to obtain a target identity level of the user account on the user device; the second generation module is specifically used to filter out information matching the target identity level from the second target information to generate third target information.

[0022] Optionally, the second generation module is specifically used to generate the third target information based on the traceability code verification result, the platform identifier, the business identifier, the timestamp identifier, the identity identifier, and the identity verification information when the target identity level is the first level; the second generation module is specifically used to generate the third target information based on the traceability code verification result, the platform identifier, the business identifier, the timestamp identifier, and the identity identifier when the target identity level is the second level; the second generation module is specifically used to generate the third target information based on the traceability code verification result when the target identity level is the third level.

[0023] The present application also provides a computer program product, including a computer program / instruction, which, when executed by a processor, implements the steps of the traceability code management method based on identity verification as described in any one of the first aspect or the second aspect above.

[0024] The present application also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the steps of the traceability code management method based on identity verification as described in any one of the first aspect or the second aspect above are implemented.

[0025] The present application also provides a computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a processor, the steps of the traceability code management method based on identity verification as described in any one of the first aspect or the second aspect above are implemented.

[0026] An embodiment of the present application also provides a traceability code management system based on identity verification, the system comprising: a business system and an identity verification system; the business system is used to implement the traceability code management method based on identity verification as described in any one of the first aspects above; the identity verification system is used to implement the traceability code management method based on identity verification as described in any one of the second aspects above.

[0027] The traceability code management method, device and electronic device based on identity verification provided by the present application, when receiving a target service request for a target service sent by a user device, extracts the identity verification information of the target user from the target service request, and sends an identity verification request to the identity verification system based on the identity verification information; receives the identity verification response fed back by the identity verification system, and generates target service data based on the target traceability code carried in the identity verification response and the target result data of the target service generated for the target service request; sends the service data to the user device; wherein the target traceability code is generated by the identity verification system based on the first target information; the first target information includes: the platform identifier of the service system, the service identifier of the target service, the timestamp identifier, the identity identifier of the target user, and a random number. In this way, the detailed process of each online identity verification can be traced by adding a traceability code. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] In order to more clearly illustrate the technical solutions in the present application or the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0029] Figure 1 It is a flowchart of the traceability code management method based on identity verification provided by this application;

[0030] Figure 2 It is one of the flow diagrams of the traceability code management method based on identity verification provided by this application;

[0031] Figure 3 This is a schematic diagram of the traceability code issuance process provided by this application;

[0032] Figure 4 Schematic diagram of the application process for a digital certificate with an embedded identity verification traceability code provided for this application;

[0033] Figure 5 This is the second flow chart of the traceability code management method based on identity verification provided by this application;

[0034] Figure 6 This is a schematic diagram of the traceability code backtracking process provided by this application;

[0035] Figure 7 This is one of the structural diagrams of the traceability code management device based on identity verification provided by this application;

[0036] Figure 8This is the second structural diagram of the traceability code management device based on identity verification provided by this application;

[0037] Fig. 9 It is a schematic diagram of the structure of the electronic device provided by this application. DETAILED DESCRIPTION

[0038] In order to make the purpose, technical solutions and advantages of this application clearer, the technical solutions in this application will be clearly and completely described below in conjunction with the drawings in this application. Obviously, the described embodiments are part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0039] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable under appropriate circumstances, so that the embodiments of the present application can be implemented in an order other than those illustrated or described here, and the objects distinguished by "first", "second", etc. are generally of one type, and the number of objects is not limited. For example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the connected objects, and the character " / " generally indicates that the objects associated with each other are in an "or" relationship.

[0040] During the online identity verification process, the business system sends scenario information to the data source service, which solidifies the scenario information of each transaction on the business side. However, there are the following problems:

[0041] (1) Relying on the business system to upload scene information automatically poses a risk of data accuracy. Downstream companies may transmit inaccurate scene information due to negligence, error, or deception, thereby affecting the accuracy of scene information collection.

[0042] (2) Business systems are reluctant to transmit too much scenario information because this may affect the security of sensitive corporate transactions, such as exposing specific transaction time and transaction volume data of a business system. If data service providers require business systems to provide too much scenario information, it may also lead to user loss of the business system and affect product experience and promotion.

[0043] (3) Complexity of maintenance and upgrade: With the iterative upgrade of data source services, it may be necessary to adjust and update the interface for sending messages, such as expanding the scenario value range. This will involve the maintenance of downstream business systems, increasing the complexity of downstream system maintenance and upgrade.

[0044] Taking digital certificates as an example, although digital certificates in related technologies store certificate information in the standard area and bind biometric information in the extended area, the source of identity verification during the application, change or revocation of the digital certificate cannot be directly traced from the file. In actual business operations, if there is a judicial dispute and the identity verification in the digital certificate application process needs to be confirmed, it still needs to rely on a large amount of manual confirmation and go through a cumbersome review process, and the efficiency of tracing the identity verification service in the digital certificate business is very low.

[0045] In response to the above-mentioned technical problems existing in the relevant technologies, the embodiments of the present application provide a traceability code management method based on identity verification. This method distributes a unique traceability code for each online identity verification of the downstream business system in the form of a service interface message field through an identity verification service source. The traceability code is only associated with a single verification track and is associated with information such as timestamps, application systems, and application scenarios, providing a strong basis for the data source service to trace identity verification, and also providing a unique traceback credential for the business application party. In addition, the extended area of ​​the digital certificate in this method is bound to the identity verification traceability code, and the identity verification traceability process in the digital certificate application process is associated with the certificate file. The traceability code can be used in business scenarios such as electronic signatures and judicial evidence collection, providing a strong basis for proving the authority and legality of electronic signatures.

[0046] The following, in conjunction with the accompanying drawings, describes in detail the identity verification-based traceability code management method provided by the embodiment of the present application through specific embodiments and their application scenarios.

[0047] like Figure 1 As shown, a traceability code management system based on identity verification is applied to the traceability code management method based on identity verification provided in an embodiment of the present application. The system includes: a business system, a traceability verification system and an identity verification system.

[0048] Embodiment 1:

[0049] based on Figure 1 The system shown, Figure 2 As shown, a traceability code management method based on identity verification applied to a business system provided in an embodiment of the present application may include the following steps 201 to 203:

[0050] Step 201: upon receiving a target service request for a target service sent by a user device, extract identity verification information of a target user from the target service request, and send an identity verification request to an identity verification system based on the identity verification information.

[0051] Exemplarily, the user device is a device that initiates online identity verification, such as Figure 3As shown in the schematic diagram of the traceability code issuance process, the user device can submit the user's online identity verification information to the business system to verify the user's identity.

[0052] For example, Figure 3 As shown, when the business system receives the identity verification information sent by the user equipment, it sends an identity verification request to the identity verification system based on the identity verification information.

[0053] It is understandable that the business system cannot directly verify the user's identity information, and the identity verification system is required to verify the user's identity information.

[0054] Step 202: Receive an identity verification response fed back by the identity verification system, and generate target business data based on the target traceability code carried in the identity verification response and the target result data of the target business generated for the target business request.

[0055] Among them, the target traceability code is generated by the identity verification system based on the first target information; the first target information includes: the platform identifier of the business system, the business identifier of the target business, the timestamp identifier, the identity identifier of the target user, and a random number.

[0056] Exemplarily, after receiving the identity verification request sent by the business system, the identity verification system parses the identity verification information of the target user from the identity verification request and performs identity verification on the target user.

[0057] Exemplarily, after successfully verifying the identity of the target user, the identity verification system generates a corresponding target traceability code based on the platform identifier of the business system, the business identifier of the target business, the timestamp identifier, the identity identifier of the target user and a random number, and sends the target traceability code to the business system.

[0058] For example, Figure 3 As shown, after receiving the identity verification request sent by the business system, the identity verification system records the verification track and generates an identity verification traceability code (i.e. the above-mentioned target traceability code), returns the verification result at the same time, and sends the generated traceability code to the business system.

[0059] In one possible implementation, the identity verification system may encrypt the generated traceability code before sending it to the business system to prevent the traceability code from being cracked and forged.

[0060] Exemplarily, the platform identifier, business identifier, and identity identifier contained in the traceability code are all fixed value domains and are maintained in the identity verification service system. Before the traceability code is generated, a fixed value will be spliced ​​into the traceability code based on the received request (such as the platform identifier, business identifier, identity identifier, etc. of the requester). The timestamp is the time when the request is received, and the random number is automatically generated by an algorithm. The traceability code spliced ​​by the system is returned to the caller (ie, the business system) through the fixed field of the interface response message. The parsing of the traceability code is completed by the identity verification service system, and the string is split according to the "|" delimiter. According to the platform identifier, business identifier, identity identifier, random number and other conditions, the verification records stored in the system are queried and returned to the caller.

[0061] Exemplarily, the traceability code in the embodiment of the present application may be composed of the following parts: Platform identification: used to quickly identify the platform where the transaction is located, letters + numbers totaling four digits, characters are case-sensitive, and uniquely correspond to the business platform, for example: Am68. Business identification: used to distinguish different types of business scenarios, letters + numbers totaling 3 digits, and the value range is not open to the public, for example: F02. Timestamp identification: used to identify the time when the transaction occurred, accurate to seconds, for example: 20231212175032. Identity identification: used to mark the type of service provided, such as personal ID card, operator mobile phone number, bank card, passport, corporate unified social credit code, etc., and use a two-factor method such as name + ID number for personal identity verification, letters + numbers totaling 3 digits, and the value range is not open to the public, for example: K02. Random number: Generates a unique identifier. Based on the above rules, an embodiment of the present application provides an example of a traceability code: Am68|F02|20231212175032|K02|910499571847892992, which means: platform identifier|business identifier|timestamp identifier|identity identifier|random number.

[0062] It should be noted that the traceability code itself is only meaningful within the identity verification service system. Based on security design considerations, the traceability code does not support direct reading of meaning from the content, and attribute fields with fixed value ranges do not disclose the value ranges to the public.

[0063] Step 203: Send the service data to the user equipment.

[0064] Exemplarily, after obtaining the target traceability code, the business system adds the target traceability code to the business data and returns it to the user device.

[0065] For example, Figure 3 As shown, after the business system receives the traceability code issued by the identity verification system, the business system stores the traceability code and returns the online identity verification result and the traceability code to the user device.

[0066] Optionally, in the embodiment of the present application, the target business may be a business for applying for a digital certificate.

[0067] Specifically, the above step 202 may include the following steps 202a1 and 202a2:

[0068] Step 202a1: Using the target traceability code and the identity verification information as input parameters, the digital certificate request interface of the digital certificate issuance system is called.

[0069] Step 202a2: Receive the target digital certificate generated by the digital certificate issuing system based on the target traceability code and the identity verification information, and generate the target business data based on the target digital certificate.

[0070] The target certificate includes: a standard area and an extended area; the standard area is used to store certificate information, and the extended area is used to store the target traceability code.

[0071] For example, Figure 4 The schematic diagram of the digital certificate application process with embedded identity verification traceability code shown in the figure is as follows: 1. The user initiates a digital certificate application from the user device and submits the user information used to apply for the digital certificate; 2. The business system calls the identity verification system to perform online user identity verification; 3. The identity verification system verifies the authenticity and accuracy of the user information with the authoritative data source, records the verification track of the time, and generates an identity verification traceability code uniquely associated with the verification of the time; 4. The identity verification system returns the verification result to the business system, and the interface output parameter message parameter includes the identity verification traceability code, and the business system can save the traceability code to the database as needed; 5. The business system calls the digital certificate registration system (RegisterAuthority, RA) service, and the input parameter of the certificate application includes the identity verification traceability code; 6. The RA system initiates a certificate application to the Certificate Authority (CA) system; 7. The CA system issues a digital certificate with an embedded identity verification traceability code, and the result is returned to the RA system; 8. The RA system returns the certificate application result to the business system; 9. The user obtains a digital certificate issued by an authoritative CA organization.

[0072] It should be noted that a standard area and an extended area are formed in the digital certificate; certificate information is stored in the standard area; and an identity verification traceability code is bound to the extended area. In contrast, in the related art, the digital certificate only contains basic information that identifies the user's identity and can identify the identity of the applicant. In the embodiment of the present application, the binding of the digital certificate with the verification traceability code will give the digital certificate new functional attributes, that is, it reflects the identity verification process before applying for a digital certificate. The above-mentioned certificate information refers to the information stored in the certificate, such as the user's identity information, name, ID number, public key information, etc. The traceability code is a character string that is generated and traced based on the above-mentioned traceability code, has a specific format, and can be used for judicial evidence tracing.

[0073] The traceability code management method based on identity verification provided in the embodiment of the present application, when receiving a target service request for a target service sent by a user device, extracts the identity verification information of the target user from the target service request, and sends an identity verification request to the identity verification system based on the identity verification information; receives the identity verification response fed back by the identity verification system, and generates target service data based on the target traceability code carried in the identity verification response and the target result data of the target service generated for the target service request; sends the service data to the user device; wherein the target traceability code is generated by the identity verification system based on the first target information; the first target information includes: the platform identifier of the service system, the service identifier of the target service, the timestamp identifier, the identity identifier of the target user, and a random number. In this way, the detailed process of each online identity verification can be traced by adding a traceability code.

[0074] Embodiment 2:

[0075] based on Figure 1 The system shown, Figure 5 As shown, a traceability code management method based on identity verification applied to an identity verification system provided in an embodiment of the present application may include the following steps 501 to 503:

[0076] Step 501: Receive an identity verification request sent by a business system for a target business, and extract identity verification information of a target user from the identity verification request.

[0077] Step 502: Obtain the platform identifier of the business system, the business identifier of the target business, a timestamp identifier generated based on the current time, the identity identifier of the target user, and a random number generated based on a preset random number algorithm.

[0078] Step 503: Process the platform identifier, the service identifier, the timestamp identifier, the identity identifier, and the random number according to a preset traceability code generation rule to obtain a target traceability code.

[0079] Exemplarily, the generation rules of the traceability code have been described in detail in the above-mentioned embodiment 1, and will not be repeated here to avoid repetition.

[0080] Exemplarily, after obtaining the target traceability code, the user device can also verify the target traceability code.

[0081] Exemplarily, the traceability code management method based on identity verification provided in the embodiment of the present application may further include the following steps 504 to 506:

[0082] Step 504: Receive an identity verification and tracing request sent by the traceability verification system in response to the traceability code verification request submitted by the user device, and extract the target traceability code from the identity verification and tracing request.

[0083] Step 505: parse the target traceability code, and if the parsing is successful, generate second target information related to the target traceability code.

[0084] Step 506: Send the second target information to the traceability verification system.

[0085] Among them, the second target information includes at least one of the following: the traceability code verification result, the platform identifier, the business identifier, the timestamp identifier, the identity identifier, and the identity verification information.

[0086] For example, Figure 6 As shown, 1. The user submits the traceability code through the unified traceability page of the traceability code verification system; 2. The traceability code verification system calls the identity verification system to initiate a traceability request; 3. The identity verification system parses the traceability code, queries the traceability track information, and returns key information such as whether the traceability is successful, the verification time, the verification method (including: ID card, CA certificate, mobile phone number, face recognition, passport, corporate unified credit code, etc.), and the verification scenario (corresponding business scenario) to the traceability code verification system; 4. The user obtains the traceability result information.

[0087] In a possible implementation, users with different identity levels can obtain different traceability information.

[0088] Specifically, the above step 505 may further include the following step 505a:

[0089] Step 505a: Obtain a target identity level of the user account on the user device, and filter out information matching the target identity level from the second target information to generate third target information.

[0090] Specifically, the above step 505a may also include any one of the following steps 505a1, 505a2 and 505a3:

[0091] Step 505a1: when the target identity level is the first level, the third target information is generated based on the traceability code verification result, the platform identifier, the business identifier, the timestamp identifier, the identity identifier, and the identity verification information.

[0092] Step 505a2: When the target identity level is the second level, the third target information is generated based on the traceability code verification result, the platform identifier, the business identifier, the timestamp identifier, and the identity identifier.

[0093] Step 505a3: when the target identity level is the third level, generate the third target information based on the traceability code verification result.

[0094] The traceability code management method based on identity verification provided by this application can parse the traceability code submitted by the user and obtain detailed information about the identity verification process recorded by the traceability code. At the same time, it can also provide users with traceability information of different confidentiality levels based on the user's identity level.

[0095] It should be noted that the traceability code management method based on identity verification provided in the embodiment of the present application can be executed by a traceability code management device based on identity verification, or a control module in the traceability code management device based on identity verification for executing the traceability code management method based on identity verification. In the embodiment of the present application, the traceability code management device based on identity verification is taken as an example to illustrate the traceability code management method based on identity verification provided in the embodiment of the present application.

[0096] It should be noted that in the embodiments of the present application, the traceability code management method based on identity verification shown in the drawings of the above methods is illustrated by taking one of the drawings in the embodiments of the present application as an example. In specific implementation, the traceability code management method based on identity verification shown in the drawings of the above methods can also be implemented in combination with any other drawings that can be combined as shown in the above embodiments, which will not be repeated here.

[0097] The following is a description of the traceability code management device based on identity verification provided by the present application. The traceability code management method based on identity verification described below and described above can refer to each other.

[0098] Figure 7 A schematic diagram of a traceability code management device based on identity verification provided in an embodiment of the present application is shown in FIG. Figure 7 As shown, specifically including:

[0099] The first extraction module 701 is used to extract the identity verification information of the target user from the target business request sent by the user device for the target business; the first sending module 702 is used to send an identity verification request to the identity verification system based on the identity verification information; the first receiving module 703 is used to receive the identity verification response fed back by the identity verification system; the first generation module 704 is used to generate the target business data based on the target traceability code carried in the identity verification response and the target result data of the target business generated for the target business request; the first sending module 702 is also used to send the business data to the user device; wherein the target traceability code is generated by the identity verification system based on the first target information; the first target information includes: the platform identifier of the business system, the business identifier of the target business, the timestamp identifier, the identity identifier of the target user, and a random number.

[0100] Optionally, the first sending module 702 is also used to call the digital certificate request interface of the digital certificate issuing system with the target traceability code and the identity verification information as input parameters; the first receiving module 703 is also used to receive the target digital certificate generated by the digital certificate issuing system based on the target traceability code and the identity verification information; the first generating module 704 is specifically used to generate the target business data based on the target digital certificate; wherein, the target certificate includes: a standard area and an extended area; the standard area is used to store certificate information, and the extended area is used to store the target traceability code.

[0101] The traceability code management device based on identity verification provided by the present application, when receiving a target service request for a target service sent by a user device, extracts the identity verification information of the target user from the target service request, and sends an identity verification request to the identity verification system based on the identity verification information; receives the identity verification response fed back by the identity verification system, and generates target service data based on the target traceability code carried in the identity verification response and the target result data of the target service generated for the target service request; sends the service data to the user device; wherein the target traceability code is generated by the identity verification system based on the first target information; the first target information includes: the platform identifier of the service system, the service identifier of the target service, the timestamp identifier, the identity identifier of the target user, and a random number. In this way, the detailed process of each online identity verification can be traced by adding a traceability code.

[0102] Figure 8 A schematic diagram of the structure of another traceability code management device based on identity verification provided in an embodiment of the present application, such as Figure 8 As shown, specifically including:

[0103] The second receiving module 801 is used to receive an identity verification request sent by the business system for the target business; the second extraction module 802 is used to extract the identity verification information of the target user from the identity verification request; the data acquisition module 803 is used to obtain the platform identifier of the business system, the business identifier of the target business, the timestamp identifier generated based on the current time, the identity identifier of the target user, and the random number generated based on a preset random number algorithm; the second generation module 804 is used to process the platform identifier, the business identifier, the timestamp identifier, the identity identifier and the random number according to the preset traceability code generation rules to generate a target traceability code.

[0104] Optionally, the second receiving module 801 is also used to receive an identity verification and tracing request sent by the traceability verification system in response to a traceability code verification request submitted by a user device; the second extraction module 802 is also used to extract the target traceability code from the identity verification and tracing request; the second generation module 804 is also used to parse the target traceability code and, if the parsing is successful, generate second target information related to the target traceability code; the second sending module is also used to send the second target information to the traceability verification system; wherein the second target information includes at least one of the following: traceability code verification result, the platform identifier, the business identifier, the timestamp identifier, the identity identifier, and the identity verification information.

[0105] Optionally, the data acquisition module 803 is further used to obtain a target identity level of the user account on the user device; the second generation module 804 is specifically used to filter out information matching the target identity level from the second target information to generate third target information.

[0106] Optionally, the second generation module 804 is specifically used to generate the third target information based on the traceability code verification result, the platform identifier, the business identifier, the timestamp identifier, the identity identifier, and the identity verification information when the target identity level is the first level; the second generation module 804 is specifically used to generate the third target information based on the traceability code verification result, the platform identifier, the business identifier, the timestamp identifier, and the identity identifier when the target identity level is the second level; the second generation module 804 is specifically used to generate the third target information based on the traceability code verification result when the target identity level is the third level.

[0107] The traceability code management device based on identity verification provided by the present application can parse the traceability code submitted by the user and obtain detailed information about the identity verification process recorded by the traceability code. At the same time, it can also provide the user with traceability information of different confidentiality levels according to the user's identity level.

[0108] Fig. 9 An example of a physical structure diagram of an electronic device is shown in FIG. Fig. 9 As shown, the electronic device may include: a processor 910, a communication interface 920, a memory 930 and a communication bus 940, wherein the processor 910, the communication interface 920 and the memory 930 communicate with each other through the communication bus 940. The processor 910 may call the logic instructions in the memory 930 to execute the traceability code management method based on identity verification, and the method includes:

[0109] Upon receiving a target service request for a target service sent by a user device, extract the identity verification information of the target user from the target service request, and send an identity verification request to the identity verification system based on the identity verification information; receive an identity verification response fed back by the identity verification system, and generate target service data based on the target traceability code carried in the identity verification response and the target result data of the target service generated for the target service request; send the service data to the user device; wherein the target traceability code is generated by the identity verification system based on the first target information; the first target information includes: the platform identifier of the service system, the service identifier of the target service, a timestamp identifier, the identity identifier of the target user, and a random number.

[0110] Alternatively, receive an identity verification request sent by the business system for the target business, and extract the identity verification information of the target user from the identity verification request; obtain the platform identifier of the business system, the business identifier of the target business, a timestamp identifier generated based on the current time, the identity identifier of the target user, and a random number generated based on a preset random number algorithm; process the platform identifier, the business identifier, the timestamp identifier, the identity identifier and the random number according to a preset traceability code generation rule to obtain a target traceability code.

[0111] In addition, the logic instructions in the above-mentioned memory 930 can be implemented in the form of a software functional unit and can be stored in a computer-readable storage medium when it is sold or used as an independent product. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art, and the computer software product is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a disk or an optical disk.

[0112] On the other hand, the present application also provides a computer program product, the computer program product comprising a computer program stored on a computer-readable storage medium, the computer program comprising program instructions, when the program instructions are executed by a computer, the computer can execute the traceability code management method based on identity verification provided by the above methods, the method comprising:

[0113] Upon receiving a target service request for a target service sent by a user device, extract the identity verification information of the target user from the target service request, and send an identity verification request to the identity verification system based on the identity verification information; receive an identity verification response fed back by the identity verification system, and generate target service data based on the target traceability code carried in the identity verification response and the target result data of the target service generated for the target service request; send the service data to the user device; wherein the target traceability code is generated by the identity verification system based on the first target information; the first target information includes: the platform identifier of the service system, the service identifier of the target service, a timestamp identifier, the identity identifier of the target user, and a random number.

[0114] Alternatively, receive an identity verification request sent by the business system for the target business, and extract the identity verification information of the target user from the identity verification request; obtain the platform identifier of the business system, the business identifier of the target business, a timestamp identifier generated based on the current time, the identity identifier of the target user, and a random number generated based on a preset random number algorithm; process the platform identifier, the business identifier, the timestamp identifier, the identity identifier and the random number according to a preset traceability code generation rule to obtain a target traceability code.

[0115] On the other hand, the present application also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, is implemented to execute the above-mentioned traceability code management method based on identity verification, the method comprising: upon receiving a target business request for a target business sent by a user device, extracting the identity verification information of the target user from the target business request, and sending an identity verification request to an identity verification system based on the identity verification information; receiving an identity verification response fed back by the identity verification system, and generating target business data based on the target traceability code carried in the identity verification response and the target result data of the target business generated for the target business request; sending the business data to the user device; wherein the target traceability code is generated by the identity verification system based on the first target information; the first target information comprises: the platform identifier of the business system, the business identifier of the target business, a timestamp identifier, the identity identifier of the target user, and a random number.

[0116] Alternatively, receive an identity verification request sent by the business system for the target business, and extract the identity verification information of the target user from the identity verification request; obtain the platform identifier of the business system, the business identifier of the target business, a timestamp identifier generated based on the current time, the identity identifier of the target user, and a random number generated based on a preset random number algorithm; process the platform identifier, the business identifier, the timestamp identifier, the identity identifier and the random number according to a preset traceability code generation rule to obtain a target traceability code.

[0117] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative labor.

[0118] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

[0119] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit it. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A traceability code management method based on identity verification, characterized in that: Applied to a business system, the method comprises: Upon receiving a target service request for a target service sent by a user device, extracting identity verification information of a target user from the target service request, and sending an identity verification request to an identity verification system based on the identity verification information; Receive an identity verification response fed back by the identity verification system, and generate target business data based on the target traceability code carried in the identity verification response and the target result data of the target business generated for the target business request; Sending the service data to the user equipment; Among them, the target traceability code is generated by the identity verification system based on the first target information; the first target information includes: the platform identifier of the business system, the business identifier of the target business, the timestamp identifier, the identity identifier of the target user, and a random number; the business identifier is composed of letters and numbers, which is used to distinguish different types of business scenarios, and the value domain is kept confidential; the timestamp identifier is used to identify the time when the transaction occurs; the identity identifier is composed of letters and numbers, which is used to mark the type of service provided, and the value domain is kept confidential; the target traceability code is composed of the platform identifier, the business identifier, the timestamp identifier, the identity identifier and the random number; the target traceability code is used to trace the online identity verification process when generating the target business data; The generating target service data based on the target traceability code carried in the identity verification response and the target result data of the target service generated for the target service request includes: Using the target traceability code and the identity verification information as input parameters to call the digital certificate request interface of the digital certificate issuance system; Receiving a target digital certificate generated by the digital certificate issuing system based on the target traceability code and the identity verification information, and generating the target business data based on the target digital certificate; The target digital certificate includes: a standard area and an extended area; the standard area is used to store certificate information, and the extended area is used to store the target traceability code.

2. A traceability code management method based on identity verification, characterized in that: Applied to an identity verification system, the method comprises: Receiving an identity verification request sent by the business system for the target business, and extracting identity verification information of the target user from the identity verification request; Obtaining a platform identifier of the business system, a business identifier of the target business, a timestamp identifier generated based on the current time, an identity identifier of the target user, and a random number generated based on a preset random number algorithm; The platform identifier, the service identifier, the timestamp identifier, the identity identifier and the random number are processed according to a preset traceability code generation rule to obtain a target traceability code; Among them, the business identifier is composed of letters and numbers, which are used to distinguish different types of business scenarios, and the value range is kept confidential; the timestamp identifier is used to identify the time when the transaction occurs; the identity identifier is composed of letters and numbers, which are used to mark the type of service provided, and the value range is kept confidential; the target traceability code is composed of the platform identifier, the business identifier, the timestamp identifier, the identity identifier and the random number; the target traceability code is used to trace the online identity verification process when generating target business data; the target business data is generated based on the target digital certificate; the target digital certificate is generated by the digital certificate issuing system based on the target traceability code and identity verification information; the identity verification information is: the identity verification information of the target user extracted from the target business request; the target business request is: the business request for the target business sent by the user device.

3. The method according to claim 2, characterized in that The method further comprises: Receiving an identity verification and tracing request sent by a traceability verification system in response to a traceability code verification request submitted by a user device, and extracting the target traceability code from the identity verification and tracing request; Parsing the target traceability code, and generating second target information related to the target traceability code if the parsing is successful; Sending the second target information to the traceability verification system; Among them, the second target information includes at least one of the following: the traceability code verification result, the platform identifier, the business identifier, the timestamp identifier, the identity identifier, and the identity verification information.

4. The method according to claim 3, characterized in that The parsing of the target traceability code and, if the parsing is successful, generating second target information related to the target traceability code includes: The target identity level of the user account on the user device is obtained, and information matching the target identity level is filtered out from the second target information to generate third target information.

5. The method according to claim 4, characterized in that The step of filtering out information matching the target identity level from the second target information to generate third target information includes: When the target identity level is the first level, the third target information is generated based on the traceability code verification result, the platform identifier, the business identifier, the timestamp identifier, the identity identifier, and the identity verification information; When the target identity level is the second level, the third target information is generated based on the traceability code verification result, the platform identifier, the business identifier, the timestamp identifier, and the identity identifier; When the target identity level is the third level, the third target information is generated based on the traceability code verification result.

6. A traceability code management device based on identity verification, characterized in that: Applied to a business system, the device comprises: A first extraction module is used to extract the identity verification information of the target user from the target service request when receiving the target service request for the target service sent by the user equipment; A first sending module, configured to send an identity verification request to an identity verification system based on the identity verification information; A first receiving module, configured to receive an identity verification response fed back by the identity verification system; A first generating module, configured to generate target service data based on the target traceability code carried in the identity verification response and the target result data of the target service generated for the target service request; The first sending module is further used to send the service data to the user equipment; Among them, the target traceability code is generated by the identity verification system based on the first target information; the first target information includes: the platform identifier of the business system, the business identifier of the target business, the timestamp identifier, the identity identifier of the target user, and a random number; the business identifier is composed of letters and numbers, which is used to distinguish different types of business scenarios, and the value domain is kept confidential; the timestamp identifier is used to identify the time when the transaction occurs; the identity identifier is composed of letters and numbers, which is used to mark the type of service provided, and the value domain is kept confidential; the target traceability code is composed of the platform identifier, the business identifier, the timestamp identifier, the identity identifier and the random number; the target traceability code is used to trace the online identity verification process when generating the target business data; The first generating module is specifically configured to call a digital certificate request interface of a digital certificate issuing system by taking the target traceability code and the identity verification information as input parameters; The first generating module is further configured to receive a target digital certificate generated by the digital certificate issuing system based on the target traceability code and the identity verification information, and to generate the target business data based on the target digital certificate; The target digital certificate includes: a standard area and an extended area; the standard area is used to store certificate information, and the extended area is used to store the target traceability code.

7. A traceability code management device based on identity verification, characterized in that: Applied to an identity verification system, the device comprises: The second receiving module is used to receive an identity verification request sent by the business system for the target business; A second extraction module, used to extract the identity verification information of the target user from the identity verification request; A data acquisition module, used to acquire a platform identifier of the business system, a business identifier of the target business, a timestamp identifier generated based on the current time, an identity identifier of the target user, and a random number generated based on a preset random number algorithm; A second generation module is used to process the platform identifier, the service identifier, the timestamp identifier, the identity identifier and the random number according to a preset traceability code generation rule to generate a target traceability code; Among them, the business identifier is composed of letters and numbers, which are used to distinguish different types of business scenarios, and the value range is kept confidential; the timestamp identifier is used to identify the time when the transaction occurs; the identity identifier is composed of letters and numbers, which are used to mark the type of service provided, and the value range is kept confidential; the target traceability code is composed of the platform identifier, the business identifier, the timestamp identifier, the identity identifier and the random number; the target traceability code is used to trace the online identity verification process when generating target business data; the target business data is generated based on the target digital certificate; the target digital certificate is generated by the digital certificate issuing system based on the target traceability code and identity verification information; the identity verification information is: the identity verification information of the target user extracted from the target business request; the target business request is: the business request for the target business sent by the user device.

8. A traceability code management system based on identity verification, characterized in that: The system includes: a business system and an identity verification system; the business system is used to implement the traceability code management method based on identity verification as described in claim 1; the identity verification system is used to implement the traceability code management method based on identity verification as described in any one of claims 2 to 5.

9. An electronic device, characterized in that: A traceability code management system based on identity verification as described in claim 8 is arranged thereon.

Images