Network data synchronization method and device

Abstract

The present application provides a network data synchronization method and device. The method obtains an account information change request initiated by a target user for account information in a first account through a first data node, and after the first data node verifies the identity authentication information in the account information change request, sends an account synchronization request to a second data node, and after the second data node verifies the identity authentication information, the second data node sends an account synchronization acceptance instruction to the first data node, and the first data node responds to the account synchronization acceptance instruction and sends the account change information to the second data node, so that the second data node changes the account information in the second account according to the account change information, so that when the target user changes the account information in the first data node, it can be automatically synchronized to the accounts of other data nodes, thereby improving the network data synchronization efficiency.

Description

Technical Field

[0001] The present application relates to data processing technology, and in particular to a network data synchronization method and device. Background Art

[0002] With the rapid development of digitalization in my country, the information reserved by each user in the bank has basically been completely digitally stored.

[0003] However, user account information between different banks is often not synchronized, or can only rely on manual batch synchronization, that is, importing data from the source system into the target system in a certain period of time. This synchronization method requires data extraction, conversion, and loading operations within a specific period of time, which is generally triggered by a background scheduled task or manually.

[0004] However, for individual users, if they need to update their account information reserved in various banks, they need to go to each bank individually or make changes one by one through the online channels of each bank, which results in low updating efficiency. Summary of the invention

[0005] The present application provides a network data synchronization method and device, which are used to solve the technical problem of low updating efficiency when users update their account information reserved in various banks.

[0006] In a first aspect, the present application provides a network data synchronization method, which is applied to a network data management system, wherein the system includes a data node set, the data node set includes a plurality of data nodes, and the method includes:

[0007] Acquire, through the first data node, an account information change request initiated by the target user for account information in the first account, wherein the account information change request includes account change information and identity authentication information, and the first account is an account opened by the target user in the first data node;

[0008] After the first data node verifies the identity authentication information, the first data node sends an account synchronization request to a second data node, where the account synchronization request includes the identity authentication information, and the second data node is a data node in the data node set other than the first data node;

[0009] After the second data node verifies the identity authentication information, the second data node sends an account synchronization acceptance instruction to the first data node;

[0010] The first data node sends the account change information to the second data node in response to the account synchronization acceptance instruction;

[0011] The second data node changes the account information in a second account according to the account change information, where the second account is an account opened by the target user in the second data node.

[0012] In the above scheme, the first data node obtains the account information change request initiated by the target user for the account information in the first account. After the first data node verifies the identity authentication information in the account information change request, it sends an account synchronization request to the second data node. After the second data node verifies the identity authentication information, the second data node sends an account synchronization acceptance instruction to the first data node. In response to the account synchronization acceptance instruction, the first data node sends the account change information to the second data node, so that the second data node changes the account information in the second account according to the account change information, so that when the target user changes the account information in the first data node, it can be automatically synchronized to the accounts of other data nodes, thereby improving the network data synchronization efficiency. It can be understood that by directly obtaining the user account change request and verifying the identity at the first data node, and then initiating a synchronization request to other data nodes, it is ensured that the account information change operation can be quickly propagated to the entire bank data management system. This process not only reduces the intermediate links, but also enhances the real-time nature of data updates, improves user experience and consistency of bank data.

[0013] Optionally, the system further includes an account management node; after obtaining the account information change request initiated by the target user for the account information in the first account through the first data node, further including:

[0014] After the first data node verifies the identity authentication information, the first data node sends an account query instruction to the account management node, where the account query instruction includes the identity authentication information;

[0015] After the identity authentication information is verified, the account management node determines a set of data nodes to be changed according to the identity authentication information, each data node in the set of data nodes to be changed includes account information matching the identity authentication information, and the second data node is any data node in the set of data nodes to be changed;

[0016] The account management node sends a list of data nodes to be changed corresponding to the set of data nodes to be changed to the first data node, so that the first data node sends the account synchronization request to the second data node according to the list of data nodes to be changed.

[0017] In the above scheme, the account management node is used as an intermediary to further enhance the security and accuracy of the processing flow of account information change requests. This node is responsible for verifying identity information and determining which data nodes need to be updated synchronously based on the identity authentication information, effectively avoiding disordered or unnecessary data transmission, optimizing system resource utilization, and ensuring that only data nodes that match the user account will participate in synchronization, improving the pertinence and security of data processing.

[0018] Optionally, after determining the set of data nodes to be changed according to the identity authentication information, the method further includes:

[0019] The account management node sends change initiation data node information to the second data node according to the list of data nodes to be changed, where the change initiation data node information includes first data node information corresponding to the first data node;

[0020] Correspondingly, before the second data node sends the account synchronization acceptance instruction to the first data node, the method further includes:

[0021] The account synchronization request is verified using the first data node information, the account synchronization request includes initiating data node information and sending data node information, the initiating data node information is the data node information of the first data node that initiates the account information change request, and the sending data node information is the data node information of the previous data node that transmits the account information change request to the second data node; wherein, if the first data node information is consistent with the initiating data node information and the sending data node information, the verification result passes.

[0022] In the above scheme, the information of initiating data node change is sent to the second data node through the account management node, and the account synchronization request is verified at the second data node. This mechanism strengthens the identity confirmation step in the data transmission process, prevents unauthorized data change requests, increases the security protection level of the system, and ensures the legality and reliability of data synchronization operations.

[0023] Optionally, before determining the set of data nodes to be changed according to the identity authentication information, the method further includes:

[0024] Determine a set of changeable data nodes according to the identity authentication information, wherein the set of changeable data nodes includes all data nodes in the set of data nodes having account information matching the identity authentication information;

[0025] The set of data nodes to be changed is determined according to the account permission setting information in each data node of the set of changeable data nodes, wherein the data nodes of the set of data nodes to be changed are the data nodes in the set of changeable data nodes whose account permission setting information meets the preset permission conditions.

[0026] In the above scheme, before determining the set of data nodes to be changed, qualified nodes are first screened according to the account permission setting information. This step refines the data synchronization strategy and only allows data nodes with corresponding permissions to participate in account information changes, maintaining the compliance of the bank's internal data management while protecting user privacy and account security.

[0027] Optionally, before sending the account change information to the second data node, the method further includes:

[0028] The first data node receives the account synchronization acceptance instruction fed back by all data nodes in the set of data nodes to be changed; or

[0029] If the first data node does not receive the account synchronization acceptance instruction fed back by all data nodes in the set of data nodes to be changed, the first data node suspends sending the account change information to the second data node, and the first data node sends the synchronization exception information to the account management node, so that the account management node sends prompt information to all data nodes in the set of data nodes that can be changed according to the synchronization exception information, and the prompt information is used to indicate that there is an abnormality in the account of the target user.

[0030] In the above scheme, before sending the account change information, the system waits for confirmation from all relevant data nodes, or takes exception handling measures when confirmation is not received. This design ensures the integrity of the account synchronization operation. If an exception is found, the system will promptly notify the account management node and prompt the account abnormality, which is conducive to quickly identifying and solving problems in the synchronization process and reducing the risk caused by data asynchrony.

[0031] Optionally, the first data node sending an account synchronization request to the second data node includes:

[0032] The first data node encrypts the user identity image according to a preset image encryption algorithm to generate a user identity encrypted image;

[0033] The first data node encrypts the user identity encrypted image according to a preset public key to generate user identity encrypted data, and the account synchronization request includes the user identity encrypted data;

[0034] Correspondingly, the method further includes:

[0035] The first data node sends a preset private key matching the preset public key to the account management node;

[0036] The account management node sends a data node verification request to the second data node;

[0037] The second data node sends data node verification information to the account management node in response to the data node verification request, the data node verification information including verification data node information and feedback data node information, the verification data node information is the data node information of the first data node that initiates the data node verification information, and the feedback data node information is the data node information of the previous data node that transmits the data node verification information to the account management node;

[0038] If the data node information of the second data node is consistent with the verification data node information and the feedback data node information, the verification result passes; then the account management node sends the preset private key to the second data node;

[0039] The second data node decrypts the user identity encrypted data using the preset private key to obtain the user identity encrypted image;

[0040] The second data node decrypts the user identity encrypted image according to a preset image decryption algorithm corresponding to the preset image encryption algorithm to obtain the user identity image.

[0041] In the above scheme, the preset image encryption algorithm and public-private key encryption technology are used to encrypt the user identity image, which greatly improves the security level of data transmission, prevents the user identity information from being illegally intercepted or tampered with during the account synchronization process, ensures personal privacy and account information security, and further enhances the credibility and security of data transmission through the data node verification mechanism.

[0042] Optionally, the first data node encrypts the user identity image according to a preset image encryption algorithm to generate a user identity encrypted image, including:

[0043] A random matrix A is generated according to a pixel array corresponding to the user identity image, wherein the number of rows of the pixel array is N and the number of columns is N. The random matrix A is a reversible matrix having 2 rows and 2 columns. The random matrix A is generated according to formula 1, which is:

[0044]

[0045] Wherein, a, b, c, d are control parameters in the random matrix A, a=p*q, p, q are random different prime numbers; b=(p-1)*(q-1); c is a random integer between 1-b, c and b are mutually prime; c*d=1(mod b), d is the inverse element of c mod b;

[0046] The user identity image is divided into K*K blocks, K=N / 2, and pixels of each block are replaced according to the following formula 2, where formula 2 is:

[0047]

[0048] Among them, x is the original horizontal coordinate of the pixel point, y is the original vertical coordinate of the pixel point, and x ′ is the horizontal coordinate of the pixel after replacement, y ′ is the ordinate of the pixel after replacement, and mod N is the modulus of the size of the user identity image.

[0049] In the above scheme, a random matrix is ​​used for pixel-level encryption processing. This technical means improves the complexity and security of the encryption algorithm, making it difficult to restore the original image without the correct decryption algorithm and private key even if the encrypted image is intercepted. This provides a higher level of protection barrier for user identity authentication and further consolidates the security foundation of the entire data synchronization system.

[0050] In a second aspect, the present application provides a network data synchronization device, including a data node set, wherein the data node set includes a plurality of data nodes;

[0051] Acquire, through the first data node, an account information change request initiated by the target user for account information in the first account, wherein the account information change request includes account change information and identity authentication information, and the first account is an account opened by the target user in the first data node;

[0052] After the first data node verifies the identity authentication information, the first data node sends an account synchronization request to a second data node, where the account synchronization request includes the identity authentication information, and the second data node is a data node in the data node set other than the first data node;

[0053] After the second data node verifies the identity authentication information, the second data node sends an account synchronization acceptance instruction to the first data node;

[0054] The first data node sends the account change information to the second data node in response to the account synchronization acceptance instruction;

[0055] The second data node changes the account information in a second account according to the account change information, where the second account is an account opened by the target user in the second data node.

[0056] Optionally, the system further includes an account management node; after obtaining the account information change request initiated by the target user for the account information in the first account through the first data node, further including:

[0057] After the first data node verifies the identity authentication information, the first data node sends an account query instruction to the account management node, where the account query instruction includes the identity authentication information;

[0058] After the identity authentication information is verified, the account management node determines a set of data nodes to be changed according to the identity authentication information, each data node in the set of data nodes to be changed includes account information matching the identity authentication information, and the second data node is any data node in the set of data nodes to be changed;

[0059] The account management node sends a list of data nodes to be changed corresponding to the set of data nodes to be changed to the first data node, so that the first data node sends the account synchronization request to the second data node according to the list of data nodes to be changed.

[0060] Optionally, after determining the set of data nodes to be changed according to the identity authentication information, the method further includes:

[0061] The account management node sends change initiation data node information to the second data node according to the list of data nodes to be changed, where the change initiation data node information includes first data node information corresponding to the first data node;

[0062] Correspondingly, before the second data node sends the account synchronization acceptance instruction to the first data node, the method further includes:

[0063] The account synchronization request is verified using the first data node information, the account synchronization request includes initiating data node information and sending data node information, the initiating data node information is the data node information of the first data node that initiates the account information change request, and the sending data node information is the data node information of the previous data node that transmits the account information change request to the second data node; wherein, if the first data node information is consistent with the initiating data node information and the sending data node information, the verification result passes.

[0064] Optionally, before determining the set of data nodes to be changed according to the identity authentication information, the method further includes:

[0065] Determine a set of changeable data nodes according to the identity authentication information, wherein the set of changeable data nodes includes all data nodes in the set of data nodes having account information matching the identity authentication information;

[0066] The set of data nodes to be changed is determined according to the account permission setting information in each data node of the set of changeable data nodes, wherein the data nodes of the set of data nodes to be changed are the data nodes in the set of changeable data nodes whose account permission setting information meets the preset permission conditions.

[0067] Optionally, before sending the account change information to the second data node, the method further includes:

[0068] The first data node receives the account synchronization acceptance instruction fed back by all data nodes in the set of data nodes to be changed; or

[0069] If the first data node does not receive the account synchronization acceptance instruction fed back by all data nodes in the set of data nodes to be changed, the first data node suspends sending the account change information to the second data node, and the first data node sends the synchronization exception information to the account management node, so that the account management node sends prompt information to all data nodes in the set of data nodes that can be changed according to the synchronization exception information, and the prompt information is used to indicate that there is an abnormality in the account of the target user.

[0070] Optionally, the first data node sending an account synchronization request to the second data node includes:

[0071] The first data node encrypts the user identity image according to a preset image encryption algorithm to generate a user identity encrypted image;

[0072] The first data node encrypts the user identity encrypted image according to a preset public key to generate user identity encrypted data, and the account synchronization request includes the user identity encrypted data;

[0073] Correspondingly, the method further includes:

[0074] The first data node sends a preset private key matching the preset public key to the account management node;

[0075] The account management node sends a data node verification request to the second data node;

[0076] The second data node sends data node verification information to the account management node in response to the data node verification request, the data node verification information including verification data node information and feedback data node information, the verification data node information is the data node information of the first data node that initiates the data node verification information, and the feedback data node information is the data node information of the previous data node that transmits the data node verification information to the account management node;

[0077] If the data node information of the second data node is consistent with the verification data node information and the feedback data node information, the verification result passes; then the account management node sends the preset private key to the second data node;

[0078] The second data node decrypts the user identity encrypted data using the preset private key to obtain the user identity encrypted image;

[0079] The second data node decrypts the user identity encrypted image according to a preset image decryption algorithm corresponding to the preset image encryption algorithm to obtain the user identity image.

[0080] Optionally, the first data node encrypts the user identity image according to a preset image encryption algorithm to generate a user identity encrypted image, including:

[0081] A random matrix A is generated according to a pixel array corresponding to the user identity image, wherein the number of rows of the pixel array is N and the number of columns is N. The random matrix A is a reversible matrix having 2 rows and 2 columns. The random matrix A is generated according to formula 1, which is:

[0082]

[0083] Wherein, a, b, c, d are control parameters in the random matrix A, a=p*q, p, q are random different prime numbers; b=(p-1)*(q-1); c is a random integer between 1-b, c and b are mutually prime; c*d=1(mod b), d is the inverse element of c mod b;

[0084] The user identity image is divided into K*K blocks, K=N / 2, and pixels of each block are replaced according to the following formula 2, where formula 2 is:

[0085]

[0086] Among them, x is the original horizontal coordinate of the pixel point, y is the original vertical coordinate of the pixel point, and x ′ is the horizontal coordinate of the pixel after replacement, y ′is the ordinate of the pixel after replacement, and mod N is the modulus of the size of the user identity image.

[0087] In a third aspect, the present application provides an electronic device, including:

[0088] processor; and,

[0089] A memory, configured to store executable instructions of the processor;

[0090] The processor is configured to perform any possible method described in the first aspect by executing the executable instructions.

[0091] In a fourth aspect, the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer-executable instructions, and when the computer-executable instructions are executed by a processor, they are used to implement any possible method described in the first aspect.

[0092] The present application provides a method of obtaining an account information change request initiated by a target user for account information in a first account through a first data node, and after the first data node successfully verifies the identity authentication information in the account information change request, sending an account synchronization request to a second data node, and after the second data node successfully verifies the identity authentication information, the second data node sends an account synchronization acceptance instruction to the first data node, and the first data node responds to the account synchronization acceptance instruction by sending the account change information to the second data node, so that the second data node changes the account information in the second account according to the account change information, thereby achieving that when the target user changes the account information in the first data node, it can be automatically synchronized to the accounts of other data nodes, thereby improving the efficiency of network data synchronization. BRIEF DESCRIPTION OF THE DRAWINGS

[0093] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0094] Figure 1 is a flowchart of a network data synchronization method according to an exemplary embodiment of the present application;

[0095] Figure 2 is a flowchart of a network data synchronization method according to another exemplary embodiment of the present application;

[0096] Figure 3 is a structural diagram of a network data synchronization device according to an exemplary embodiment of the present application;

[0097] Figure 4 It is a schematic diagram of the structure of an electronic device according to an exemplary embodiment of the present application.

[0098] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0099] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0100] Figure 1 FIG. 1 is a flow chart of a network data synchronization method according to an exemplary embodiment of the present application. Figure 1 As shown, the method provided in this embodiment includes:

[0101] S101. Obtain, through a first data node, an account information change request initiated by a target user for account information in a first account.

[0102] The method provided in this embodiment is applied to a network data management system, wherein the network data management system may include a data node set, and the data node set includes multiple data nodes. It is worth noting that the above network data may be bank data, and the data nodes may be data nodes corresponding to each bank.

[0103] In this step, an account information change request initiated by the target user for the account information in the first account can be obtained through the first data node, and the account information change request includes account change information and identity authentication information, wherein the first account is an account opened by the target user in the first data node. For example, the first account can be an account opened by the target account in the first data node corresponding to the Industrial and Commercial Bank of China.

[0104] S102: After the first data node successfully verifies the identity authentication information, the first data node sends an account synchronization request to the second data node.

[0105] In this step, after the first data node verifies the identity authentication information, the first data node sends an account synchronization request to the second data node, wherein the account synchronization request includes the identity authentication information, and the second data node is a data node other than the first data node in the data node set. For example, after the Industrial and Commercial Bank of China verifies the identity authentication information of the target user, the first data node corresponding to the Industrial and Commercial Bank of China sends an account synchronization request to the second data node corresponding to the Agricultural Bank of China, and the account synchronization request can be a modification of the target user's reserved information in the bank.

[0106] In addition, the above-mentioned identity authentication information can be one or more of the user's face image, iris image or fingerprint image. When the target user reserves identity authentication information in different banks, it is usually necessary to collect the reserved information on site. For example, fingerprint information will be entered separately in different banks. When the target user's account information is modified, the fingerprint image input at this time will continue to be sent to the second data node for secondary authentication after being authenticated by the first data node. If there are multiple second data nodes, multiple authentications will be performed accordingly. There are differences in the fingerprint information input at different data nodes, such as differences caused by the acquisition accuracy of the machine equipment and differences caused by the angle of the finger fingerprint during acquisition. Therefore, through the above-mentioned multiple authentications, the reliability and accuracy of the authentication of the identity authentication information can be further improved. In particular, when changing information, the first data node must send the account change information only after receiving the verification information returned by all other data nodes, thereby further protecting the user's account information.

[0107] S103: After the second data node successfully verifies the identity authentication information, the second data node sends an account synchronization acceptance instruction to the first data node.

[0108] In this step, after the second data node verifies the identity authentication information, the second data node sends the account synchronization acceptance instruction to the first data node. For example, after the Agricultural Bank of China verifies the identity authentication information, it sends the account synchronization acceptance instruction to the Industrial and Commercial Bank of China.

[0109] S104: The first data node sends the account change information to the second data node in response to the account synchronization acceptance instruction.

[0110] In this step, the first data node sends the account change information to the second data node in response to the account synchronization acceptance instruction.

[0111] S105. The second data node changes the account information in the second account according to the account change information.

[0112] In this step, the second data node changes the account information in the second account according to the account change information. The second account is the account opened by the target user in the second data node. For example, after the target user's ID card expires, he applies for a new ID card. At this time, the target user goes to the Industrial and Commercial Bank of China to change the reserved ID card information. At this time, the above account synchronization request is a reserved ID card information synchronization request directly initiated by the Industrial and Commercial Bank of China to the Agricultural Bank of China, so that when the target user changes and updates the common information of various banks in the bank account, especially the reserved personal information, he only needs to handle it in one bank, and the relevant information in other banks can be synchronized and updated at the same time.

[0113] In this embodiment, an account information change request initiated by a target user for account information in a first account is obtained through a first data node. After the first data node successfully verifies the identity authentication information in the account information change request, an account synchronization request is sent to a second data node. After the second data node successfully verifies the identity authentication information, the second data node sends an account synchronization acceptance instruction to the first data node. In response to the account synchronization acceptance instruction, the first data node sends the account change information to the second data node, so that the second data node changes the account information in the second account according to the account change information. This enables the target user to automatically synchronize the account information to the accounts of other data nodes when changing the account information in the first data node, thereby improving the network data synchronization efficiency.

[0114] Figure 2 FIG. 1 is a flow chart of a network data synchronization method according to another exemplary embodiment of the present application. Figure 2 As shown, the network data synchronization method provided in this embodiment includes:

[0115] S101. Obtain, through a first data node, an account information change request initiated by a target user for account information in a first account.

[0116] The method provided in this embodiment is applied to a network data management system, wherein the network data management system may include a data node set, and the data node set includes a plurality of data nodes. It is worth noting that the data node may be a data node corresponding to each bank.

[0117] In this step, an account information change request initiated by the target user for the account information in the first account can be obtained through the first data node, and the account information change request includes account change information and identity authentication information, wherein the first account is an account opened by the target user in the first data node. For example, the first account can be an account opened by the target account in the first data node corresponding to the Industrial and Commercial Bank of China.

[0118] S202: After the first data node successfully verifies the identity authentication information, the first data node sends an account query instruction to the account management node.

[0119] In this step, after the first data node verifies the identity authentication information, the first data node sends an account query instruction to the account management node, wherein the account query instruction includes the identity authentication information.

[0120] Before determining the set of data nodes to be changed according to the identity authentication information, a set of data nodes that can be changed can be determined according to the identity authentication information. The set of data nodes that can be changed includes all data nodes in the data node set that have account information matching the identity authentication information.

[0121] The data node set to be changed is determined according to the account permission setting information in each data node of the changeable data node set, wherein the data nodes of the data node set to be changed are the data nodes whose account permission setting information in the changeable data node set meets the preset permission conditions.

[0122] S203: After the account management node verifies the identity authentication information, it determines a set of data nodes to be changed according to the identity authentication information.

[0123] In this step, after verifying the identity authentication information, the account management node determines the set of data nodes to be changed based on the identity authentication information. Each data node in the set of data nodes to be changed includes account information that matches the identity authentication information. The second data node is any data node in the set of data nodes to be changed.

[0124] Optionally, the account management node may send data node change initiation information to the second data node according to the list of data nodes to be changed, where the data node change initiation information includes first data node information corresponding to the first data node.

[0125] Correspondingly, before the second data node sends the account synchronization acceptance instruction to the first data node, the first data node information can also be used to verify the account synchronization request, the account synchronization request includes the initiating data node information and the sending data node information, the initiating data node information is the data node information of the first data node that initiates the account information change request, and the sending data node information is the data node information of the previous data node that transmits the account information change request to the second data node; wherein, if the first data node information is consistent with the initiating data node information and the sending data node information, the verification result passes. By verifying the account synchronization request using the first data node information, it is confirmed that the first data node information is consistent with the initiating data node information and the sending data node information, so as to avoid erroneous modification caused by external intrusion during data transmission.

[0126] S204: The account management node sends a list of data nodes to be changed corresponding to the set of data nodes to be changed to the first data node.

[0127] In this step, the account management node sends a list of data nodes to be changed corresponding to the set of data nodes to be changed to the first data node, so that the first data node sends an account synchronization request to the second data node according to the list of data nodes to be changed.

[0128] S205: After the first data node successfully verifies the identity authentication information, the first data node sends an account synchronization request to the second data node.

[0129] In this step, after the first data node verifies the identity authentication information, the first data node sends an account synchronization request to the second data node, wherein the account synchronization request includes the identity authentication information, and the second data node is a data node other than the first data node in the data node set. For example, after the Industrial and Commercial Bank of China verifies the identity authentication information of the target user, the first data node corresponding to the Industrial and Commercial Bank of China sends an account synchronization request to the second data node corresponding to the Agricultural Bank of China, and the account synchronization request can be a modification of the target user's reserved information in the bank.

[0130] In addition, the above-mentioned identity authentication information can be one or more of the user's face image, iris image or fingerprint image. When the target user reserves identity authentication information in different banks, it is usually necessary to collect the reserved information on site. For example, fingerprint information will be entered separately in different banks. When the target user's account information is modified, the fingerprint image input at this time will continue to be sent to the second data node for secondary authentication after being authenticated by the first data node. If there are multiple second data nodes, multiple authentications will be performed accordingly. There are differences in the fingerprint information input at different data nodes, such as differences caused by the acquisition accuracy of the machine equipment and differences caused by the angle of the finger fingerprint during acquisition. Therefore, through the above-mentioned multiple authentications, the reliability and accuracy of the authentication of the identity authentication information can be further improved. In particular, when changing information, the first data node must send the account change information only after receiving the verification information returned by all other data nodes, thereby further protecting the user's account information.

[0131] Optionally, the first data node may encrypt the user identity image according to a preset image encryption algorithm to generate a user identity encrypted image. The first data node encrypts the user identity encrypted image according to a preset public key to generate user identity encrypted data, and the account synchronization request includes the user identity encrypted data.

[0132] Optionally, the above-mentioned preset image encryption algorithm may be any one of a pixel rearrangement encryption algorithm, a block encryption algorithm, a transform domain encryption algorithm and a hybrid encryption algorithm.

[0133] Optionally, for the pixel rearrangement encryption algorithm, the original image may be rearranged in pixels according to a certain replacement method, thereby realizing encryption of the image. Common replacement methods include scrambling matrix, chaos mapping, and the like.

[0134] Optionally, for a block encryption algorithm, the original image may be divided into multiple blocks, and a separate encryption operation may be performed on each block, such as encryption transformation, permutation, perturbation, etc. This encryption algorithm may generally improve encryption strength.

[0135] Optionally, for the transform domain encryption algorithm, the original image may be transformed by discrete cosine transform, wavelet transform, etc. to obtain frequency domain information, and then the frequency domain information is encrypted. This algorithm can improve encryption efficiency and encryption strength.

[0136] Optionally, for a hybrid encryption algorithm, the above-mentioned multiple encryption algorithms may be combined or mixed to achieve a more complex and secure encryption method. For example, a block encryption algorithm may be used to divide and encrypt an image first, and then further encrypted and processed by combining a transform domain encryption algorithm and a pixel rearrangement encryption algorithm.

[0137] It should be noted that in order to ensure the security and reversibility of image encryption, it is necessary to select appropriate encryption algorithms and encryption parameters, and strictly control the distribution and management of encryption keys.

[0138] The first data node sends a preset private key matching the preset public key to the account management node; the account management node sends a data node verification request to the second data node; the second data node sends data node verification information to the account management node in response to the data node verification request, the data node verification information includes verification data node information and feedback data node information, the verification data node information is the data node information of the first data node that initiates the data node verification information, and the feedback data node information is the data node information of the previous data node that transmits the data node verification information to the account management node; if the data node information of the second data node is consistent with the verification data node information and the feedback data node information, the verification result passes; then the account management node sends the preset private key to the second data node; the second data node decrypts the user identity encrypted data using the preset private key to obtain the user identity encrypted image; the second data node decrypts the user identity encrypted image according to a preset image decryption algorithm corresponding to the preset image encryption algorithm to obtain the user identity image. The preset private key matching the preset public key is sent to the account management node through the first data node, and the account management node sends the preset private key to the second data node only when the data node information of the second data node is consistent with the verification data node information and the feedback data node information, thereby transmitting the private key and the data itself separately through two different data links, and ensuring the security of data transmission by setting the verification method.

[0139] In addition, the preset public key and the encryption algorithm corresponding to the preset public key may be based on a symmetric encryption algorithm, an asymmetric encryption algorithm, a hash function or other related algorithms.

[0140] Among them, for symmetric encryption algorithms, in inter-bank transactions, the data sender and receiver need to use the same key to encrypt and decrypt the data, which can ensure the confidentiality of the data.

[0141] As for asymmetric encryption algorithms, in inter-bank transactions, the data sender and receiver need to generate public and private keys respectively. The public key is used to encrypt the data during data transmission, and only the private key can be used to decrypt it, thus ensuring the confidentiality and integrity of the data.

[0142] As for hash functions, in inter-bank transactions, hash functions can be used to perform hash operations on sensitive information (such as passwords) and convert them into fixed-length hash values ​​for storage or transmission, which can reduce the risk of information leakage.

[0143] In summary, in interbank transactions, symmetric and asymmetric encryption algorithms can be used to encrypt and decrypt data to ensure the confidentiality and integrity of the data. At the same time, attention should also be paid to issues such as algorithm selection and key management to ensure the security of the encryption algorithm.

[0144] The specific implementation method of the first data node encrypting the user identity image according to the preset image encryption algorithm to generate the user identity encrypted image may be to generate a random matrix A according to the pixel array corresponding to the user identity image, the number of rows of the pixel array is N, the number of columns is N, and the random matrix A is a reversible matrix with 2 rows and 2 columns, wherein the random matrix A is generated according to formula 1, which is:

[0145]

[0146] Wherein, a, b, c, d are control parameters in the random matrix A, a=p*q, p, q are random different prime numbers; b=(p-1)*(q-1); c is a random integer between 1-b, c and b are mutually prime; c*d=1(mod b), d is the inverse element of c mod b;

[0147] The user identity image is divided into K*K blocks, K=N / 2, and pixels of each block are replaced according to the following formula 2:

[0148]

[0149] Among them, x is the original horizontal coordinate of the pixel point, y is the original vertical coordinate of the pixel point, and x ′ is the horizontal coordinate of the pixel after replacement, y ′ is the vertical coordinate of the pixel after replacement, and mod N is the modulus of the size of the user identity image.

[0150] By encrypting the user identity image through the above preset image encryption algorithm, the user identity image can be kept confidential, ensuring the security of the target user's identity information.

[0151] S206: After the second data node successfully verifies the identity authentication information, the second data node sends an account synchronization acceptance instruction to the first data node.

[0152] In this step, after the second data node verifies the identity authentication information, the second data node sends the account synchronization acceptance instruction to the first data node. For example, after the Agricultural Bank of China verifies the identity authentication information, it sends the account synchronization acceptance instruction to the Industrial and Commercial Bank of China.

[0153] S207: The first data node sends the account change information to the second data node in response to the account synchronization acceptance instruction.

[0154] In this step, the first data node sends the account change information to the second data node in response to the account synchronization acceptance instruction.

[0155] Optionally, before sending the account change information to the second data node, the first data node receives account synchronization acceptance instructions fed back by all data nodes in the set of data nodes to be changed.

[0156] If the first data node does not receive the account synchronization acceptance instruction fed back by all data nodes in the set of data nodes to be changed, the first data node suspends sending the account change information to the second data node, and the first data node sends the synchronization exception information to the account management node, so that the account management node sends prompt information to all data nodes in the set of data nodes that can be changed according to the synchronization exception information, and the prompt information is used to indicate that there is an abnormality in the target user's account.

[0157] S208. The second data node changes the account information in the second account according to the account change information.

[0158] In this step, the second data node changes the account information in the second account according to the account change information. The second account is the account opened by the target user in the second data node. For example, after the target user's ID card expires, he applies for a new ID card. At this time, the target user goes to the Industrial and Commercial Bank of China to change the reserved ID card information. At this time, the above account synchronization request is a reserved ID card information synchronization request directly initiated by the Industrial and Commercial Bank of China to the Agricultural Bank of China, so that when the target user changes and updates the common information of various banks in the bank account, especially the reserved personal information, he only needs to handle it in one bank, and the relevant information in other banks can be synchronized and updated at the same time.

[0159] Figure 3 FIG. 1 is a schematic diagram of a network data synchronization device according to an exemplary embodiment of the present application. Figure 3 As shown, the apparatus 300 provided in this embodiment includes a data node set, and the data node set includes a plurality of data nodes;

[0160] Obtaining, through the first data node 301, an account information change request initiated by the target user for the account information in the first account, wherein the account information change request includes account change information and identity authentication information, and the first account is an account opened by the target user in the first data node 301;

[0161] After the first data node 301 verifies the identity authentication information, the first data node 301 sends an account synchronization request to the first data node 302, where the account synchronization request includes the identity authentication information, and the first data node 302 is a data node in the data node set other than the first data node 301;

[0162] After the first data node 302 verifies the identity authentication information, the first data node 302 sends an account synchronization acceptance instruction to the first data node 301;

[0163] The first data node 301 sends the account change information to the first data node 302 in response to the account synchronization acceptance instruction;

[0164] The first data node 302 changes the account information in the second account according to the account change information, where the second account is an account opened by the target user in the first data node 302 .

[0165] Optionally, the system further includes an account management node 303; after obtaining the account information change request initiated by the target user for the account information in the first account through the first data node 301, it also includes:

[0166] After the first data node 301 verifies the identity authentication information, the first data node 301 sends an account query instruction to the account management node 303, where the account query instruction includes the identity authentication information;

[0167] After verifying the identity authentication information, the account management node 303 determines a set of data nodes to be changed according to the identity authentication information, each data node in the set of data nodes to be changed includes account information matching the identity authentication information, and the first data node 302 is any data node in the set of data nodes to be changed;

[0168] The account management node 303 sends a list of data nodes to be changed corresponding to the set of data nodes to be changed to the first data node 301, so that the first data node 301 sends the account synchronization request to the first data node 302 according to the list of data nodes to be changed.

[0169] Optionally, after determining the set of data nodes to be changed according to the identity authentication information, the method further includes:

[0170] The account management node 303 sends the data node information for initiating change to the first data node 302 according to the list of data nodes to be changed, where the data node information for initiating change includes the first data node 301 information corresponding to the first data node 301;

[0171] Correspondingly, before the first data node 302 sends the account synchronization acceptance instruction to the first data node 301, it also includes:

[0172] The account synchronization request is verified using the first data node 301 information, the account synchronization request includes initiating data node information and sending data node information, the initiating data node information is the data node information of the first data node that initiates the account information change request, and the sending data node information is the data node information of the previous data node that transmits the account information change request to the first data node 302; wherein, if the first data node 301 information is consistent with the initiating data node information and the sending data node information, the verification result passes.

[0173] Optionally, before determining the set of data nodes to be changed according to the identity authentication information, the method further includes:

[0174] Determine a set of changeable data nodes according to the identity authentication information, wherein the set of changeable data nodes includes all data nodes in the set of data nodes having account information matching the identity authentication information;

[0175] The set of data nodes to be changed is determined according to the account permission setting information in each data node of the set of changeable data nodes, wherein the data nodes of the set of data nodes to be changed are the data nodes in the set of changeable data nodes whose account permission setting information meets the preset permission conditions.

[0176] Optionally, before sending the account change information to the first data node 302, the method further includes:

[0177] The first data node 301 receives the account synchronization acceptance instruction fed back by all data nodes in the set of data nodes to be changed; or

[0178] If the first data node 301 does not receive the account synchronization acceptance instruction fed back by all the data nodes in the set of data nodes to be changed, the first data node 301 suspends sending the account change information to the first data node 302, and the first data node 301 sends the synchronization exception information to the account management node 303, so that the account management node 303 sends prompt information to all the data nodes in the set of data nodes that can be changed according to the synchronization exception information, and the prompt information is used to indicate that there is an abnormality in the account of the target user.

[0179] Optionally, the first data node 301 sends an account synchronization request to the first data node 302, including:

[0180] The first data node 301 encrypts the user identity image according to a preset image encryption algorithm to generate a user identity encrypted image;

[0181] The first data node 301 encrypts the user identity encrypted image according to a preset public key to generate user identity encrypted data, and the account synchronization request includes the user identity encrypted data;

[0182] Correspondingly, the method further includes:

[0183] The first data node 301 sends a preset private key matching the preset public key to the account management node 303;

[0184] The account management node 303 sends a data node verification request to the first data node 302;

[0185] The first data node 302 sends data node verification information to the account management node 303 in response to the data node verification request, wherein the data node verification information includes verification data node information and feedback data node information, wherein the verification data node information is the data node information of the first data node that initiates the data node verification information, and the feedback data node information is the data node information of the previous data node that transmits the data node verification information to the account management node 303;

[0186] If the data node information of the first data node 302 is consistent with the verification data node information and the feedback data node information, the verification result passes; then the account management node 303 sends the preset private key to the first data node 302;

[0187] The first data node 302 decrypts the user identity encrypted data using the preset private key to obtain the user identity encrypted image;

[0188] The first data node 302 decrypts the user identity encrypted image according to a preset image decryption algorithm corresponding to the preset image encryption algorithm to obtain the user identity image.

[0189] Optionally, the first data node 301 encrypts the user identity image according to a preset image encryption algorithm to generate an encrypted user identity image, including:

[0190] A random matrix A is generated according to a pixel array corresponding to the user identity image, wherein the number of rows of the pixel array is N and the number of columns is N. The random matrix A is a reversible matrix having 2 rows and 2 columns. The random matrix A is generated according to formula 1, which is:

[0191]

[0192] Wherein, a, b, c, d are control parameters in the random matrix A, a=p*q, p, q are random different prime numbers; b=(p-1)*(q-1); c is a random integer between 1-b, c and b are mutually prime; c*d=1(mod b), d is the inverse element of c mod b;

[0193] The user identity image is divided into K*K blocks, K=N / 2, and pixels of each block are replaced according to the following formula 2, where formula 2 is:

[0194]

[0195] Among them, x is the original horizontal coordinate of the pixel point, y is the original vertical coordinate of the pixel point, and x ′ is the horizontal coordinate of the pixel after replacement, y ′ is the ordinate of the pixel after replacement, and mod N is the modulus of the size of the user identity image.

[0196] Figure 4 is a schematic diagram of the structure of an electronic device according to an exemplary embodiment of the present application. Figure 4 As shown, an electronic device 400 provided in this embodiment includes: a processor 401 and a memory 402; wherein:

[0197] The memory 402 is used to store computer programs, and the memory may also be a flash memory.

[0198] The processor 401 is used to execute the execution instructions stored in the memory to implement each step in the above method. For details, please refer to the relevant description in the above method embodiment.

[0199] Optionally, the memory 402 may be independent or integrated with the processor 401 .

[0200] When the memory 402 is a device independent of the processor 401, the electronic device 400 may further include:

[0201] The bus 403 is used to connect the memory 402 and the processor 401 .

[0202] This embodiment further provides a readable storage medium, in which a computer program is stored. When at least one processor of an electronic device executes the computer program, the electronic device executes the methods provided in the above-mentioned various implementation modes.

[0203] This embodiment also provides a program product, which includes a computer program stored in a readable storage medium. At least one processor of the electronic device can read the computer program from the readable storage medium, and at least one processor executes the computer program so that the electronic device implements the methods provided in the above various embodiments.

[0204] Those skilled in the art will readily appreciate other embodiments of the present application after considering the specification and practicing the invention disclosed herein. The present application is intended to cover any modification, use or adaptation of the present application, which follows the general principles of the present application and includes common knowledge or customary techniques in the art that are not disclosed in the present application. The specification and examples are intended to be exemplary only, and the true scope and spirit of the present application are indicated by the following claims.

[0205] It should be understood that the present application is not limited to the precise structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present application is limited only by the appended claims.

Claims

1. A network data synchronization method, characterized in that: Applied to a network data management system, the system includes a data node set, the data node set includes a plurality of data nodes, and the method includes: Acquire, through the first data node, an account information change request initiated by the target user for account information in the first account, wherein the account information change request includes account change information and identity authentication information, and the first account is an account opened by the target user in the first data node; After the first data node verifies the identity authentication information, the first data node sends an account synchronization request to a second data node, where the account synchronization request includes the identity authentication information, and the second data node is a data node in the data node set other than the first data node; After the second data node verifies the identity authentication information, the second data node sends an account synchronization acceptance instruction to the first data node; The first data node sends the account change information to the second data node in response to the account synchronization acceptance instruction; The second data node changes the account information in the second account according to the account change information, where the second account is an account opened by the target user in the second data node; The system further includes an account management node; after obtaining the account information change request initiated by the target user for the account information in the first account through the first data node, it also includes: After the first data node verifies the identity authentication information, the first data node sends an account query instruction to the account management node, where the account query instruction includes the identity authentication information; After the identity authentication information is verified, the account management node determines a set of data nodes to be changed according to the identity authentication information, each data node in the set of data nodes to be changed includes account information matching the identity authentication information, and the second data node is any data node in the set of data nodes to be changed; The account management node sends a list of data nodes to be changed corresponding to the set of data nodes to be changed to the first data node, so that the first data node sends the account synchronization request to the second data node according to the list of data nodes to be changed; After determining the set of data nodes to be changed according to the identity authentication information, the method further includes: The account management node sends change initiation data node information to the second data node according to the list of data nodes to be changed, where the change initiation data node information includes first data node information corresponding to the first data node; Correspondingly, before the second data node sends the account synchronization acceptance instruction to the first data node, the method further includes: The account synchronization request is verified using the first data node information, the account synchronization request includes initiating data node information and sending data node information, the initiating data node information is the data node information of the first data node that initiates the account information change request, and the sending data node information is the data node information of the previous data node that transmits the account information change request to the second data node; wherein, if the first data node information is consistent with the initiating data node information and the sending data node information, the verification result passes.

2. The network data synchronization method according to claim 1, characterized in that: Before determining the set of data nodes to be changed according to the identity authentication information, the method further includes: Determine a set of changeable data nodes according to the identity authentication information, wherein the set of changeable data nodes includes all data nodes in the set of data nodes having account information matching the identity authentication information; The set of data nodes to be changed is determined according to the account permission setting information in each data node of the set of changeable data nodes, wherein the data nodes of the set of data nodes to be changed are the data nodes in the set of changeable data nodes whose account permission setting information meets the preset permission conditions.

3. The network data synchronization method according to claim 2, characterized in that: Before sending the account change information to the second data node, the method further includes: The first data node receives the account synchronization acceptance instruction fed back by all data nodes in the set of data nodes to be changed; or If the first data node does not receive the account synchronization acceptance instruction fed back by all data nodes in the set of data nodes to be changed, the first data node suspends sending the account change information to the second data node, and the first data node sends the synchronization exception information to the account management node, so that the account management node sends prompt information to all data nodes in the set of data nodes that can be changed according to the synchronization exception information, and the prompt information is used to indicate that there is an abnormality in the account of the target user.

4. The network data synchronization method according to any one of claims 1 to 3, characterized in that: The first data node sends an account synchronization request to the second data node, including: The first data node encrypts the user identity image according to a preset image encryption algorithm to generate a user identity encrypted image; The first data node encrypts the user identity encrypted image according to a preset public key to generate user identity encrypted data, and the account synchronization request includes the user identity encrypted data; Correspondingly, the method further includes: The first data node sends a preset private key matching the preset public key to the account management node; The account management node sends a data node verification request to the second data node; The second data node sends data node verification information to the account management node in response to the data node verification request, the data node verification information including verification data node information and feedback data node information, the verification data node information is the data node information of the first data node that initiates the data node verification information, and the feedback data node information is the data node information of the previous data node that transmits the data node verification information to the account management node; If the data node information of the second data node is consistent with the verification data node information and the feedback data node information, the verification result passes; then the account management node sends the preset private key to the second data node; The second data node decrypts the user identity encrypted data using the preset private key to obtain the user identity encrypted image; The second data node decrypts the user identity encrypted image according to a preset image decryption algorithm corresponding to the preset image encryption algorithm to obtain the user identity image.

5. The network data synchronization method according to claim 4, characterized in that: The first data node encrypts the user identity image according to a preset image encryption algorithm to generate a user identity encrypted image, including: A random matrix A is generated according to a pixel array corresponding to the user identity image, wherein the number of rows of the pixel array is N and the number of columns is N. The random matrix A is a reversible matrix having 2 rows and 2 columns. The random matrix A is generated according to formula 1, which is: Wherein, a, b, c, d are control parameters in the random matrix A, ; ; ; , d is the inverse element of c modulo b; The user identity image is divided into K*K blocks, K=N / 2, and pixels of each block are replaced according to the following formula 2, where formula 2 is: Among them, x is the original horizontal coordinate of the pixel point, and y is the original vertical coordinate of the pixel point. is the horizontal coordinate of the pixel after replacement, is the vertical coordinate of the pixel after replacement, The size of the user identity image is modulo.

6. A network data synchronization system, characterized in that: comprising a data node set, wherein the data node set comprises a plurality of data nodes; Acquire, through the first data node, an account information change request initiated by the target user for account information in the first account, wherein the account information change request includes account change information and identity authentication information, and the first account is an account opened by the target user in the first data node; After the first data node verifies the identity authentication information, the first data node sends an account synchronization request to a second data node, where the account synchronization request includes the identity authentication information, and the second data node is a data node in the data node set other than the first data node; After the second data node verifies the identity authentication information, the second data node sends an account synchronization acceptance instruction to the first data node; The first data node sends the account change information to the second data node in response to the account synchronization acceptance instruction; The second data node changes the account information in the second account according to the account change information, where the second account is an account opened by the target user in the second data node; The system also includes an account management node; After obtaining the account information change request initiated by the target user for the account information in the first account through the first data node, the method further includes: After the first data node verifies the identity authentication information, the first data node sends an account query instruction to the account management node, where the account query instruction includes the identity authentication information; After the identity authentication information is verified, the account management node determines a set of data nodes to be changed according to the identity authentication information, each data node in the set of data nodes to be changed includes account information matching the identity authentication information, and the second data node is any data node in the set of data nodes to be changed; The account management node sends a list of data nodes to be changed corresponding to the set of data nodes to be changed to the first data node, so that the first data node sends the account synchronization request to the second data node according to the list of data nodes to be changed; After determining the set of data nodes to be changed according to the identity authentication information, the method further includes: The account management node sends change initiation data node information to the second data node according to the list of data nodes to be changed, where the change initiation data node information includes first data node information corresponding to the first data node; Correspondingly, before the second data node sends the account synchronization acceptance instruction to the first data node, the method further includes: The account synchronization request is verified using the first data node information, the account synchronization request includes initiating data node information and sending data node information, the initiating data node information is the data node information of the first data node that initiates the account information change request, and the sending data node information is the data node information of the previous data node that transmits the account information change request to the second data node; wherein, if the first data node information is consistent with the initiating data node information and the sending data node information, the verification result passes.

7. An electronic device, characterized in that: include: processor; as well as, A memory, configured to store executable instructions of the processor; The processor is configured to perform the method of any one of claims 1 to 5 by executing the executable instructions.

8. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, which are used to implement the method according to any one of claims 1 to 5 when executed by a processor.

Images