A service processing method and device, electronic equipment and computer readable medium
By acquiring and parsing the encoding and calling the target server, technical measures were implemented to mitigate business processing risks and improve the security of business processing.
Patent Information
- Application Number
- CN202410873131.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2024-07-01
- Publication Date
- 2025-12-19
- Estimated Expiration
- 2044-07-01
AI Technical Summary
Sending machine commands directly to the server by the client may result in the client accidentally inputting high-risk commands, causing the server to become unrecoverable and posing a significant risk to related business processes.
By obtaining the client identifier, parsing the encoding in the instruction encoding exchange service, calling the target certificate to parse the instruction and target data, determining the target operation and operation details, performing permission verification, and calling the target server to execute the target operation.
By acquiring and parsing the encoding, technical means were implemented to reduce business processing risks and improve business processing efficiency and security.
Smart Images

Figure CN118827182B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the technical field of computer, in particular to a business processing method and device, electronic equipment and computer readable medium. BACKGROUND
[0002] At present, the client directly sends machine instructions to the machine, and the client and the server directly interact, which may accidentally input high-risk instructions to cause the server to be unrecoverable and the risk of processing related businesses to be large. SUMMARY
[0003] Therefore, the embodiments of the present application provide a business processing method and device, electronic equipment and computer readable medium, which can solve the problem that the existing client and server directly interact, which may accidentally input high-risk instructions to cause the server to be unrecoverable and the risk of processing related businesses to be large.
[0004] To achieve the above object, according to an aspect of the embodiments of the present application, a business processing method is provided, comprising: in response to a business processing request, obtaining a corresponding client identifier, and reading an encoding in an instruction encoding exchange service; parsing the encoding to obtain an instruction and target data; wherein parsing the encoding comprises: determining the number of character types in the encoding and the length of the encoding, determining a target parsing component according to the number and the length, and then calling the target parsing component to parse the encoding; calling a target certificate according to the client identifier to parse the instruction and the target data based on the target certificate, and then determining a target operation and operation details corresponding to the target operation; and calling a target server to execute the target operation based on the operation details.
[0005] Optionally, based on the target certificate, the instruction and the target data are parsed to determine the target operation and the operation details corresponding to the target operation, comprising: based on the target certificate, the instruction is parsed to obtain the corresponding target operation; and based on the target certificate, the target data is parsed to obtain the corresponding operation details.
[0006] Optionally, parsing the encoding to obtain the instruction and the target data comprises: determining the type of the encoding, calling a corresponding parsing method according to the type to parse the encoding, and obtaining the instruction and the target data corresponding to the encoding.
[0007] Optionally, calling a corresponding parsing method according to the type to parse the encoding, and obtaining the instruction and the target data corresponding to the encoding, comprises: in response to the type being encoding combination, calling a corresponding parsing method of each encoding of the combination to parse the corresponding encoding, and obtaining the instruction and the target data corresponding to the corresponding encoding.
[0008] Optionally, before calling the target certificate, the business processing method further comprises: calling a decryption certificate library to perform permission verification based on the client identifier, in response to the permission verification passing, executing the target certificate calling process, and in response to the permission verification failing, rejecting the calling request for the target certificate.
[0009] Optionally, before parsing the instruction and the target data based on the target certificate, the method further comprises: obtaining a historical instruction, performing a conflict verification based on the historical instruction and the instruction execution instruction, in response to the verification result being instruction conflict, ignoring the instruction and recording a log alarm, and in response to the verification result being instruction non-conflict, executing the process of parsing the instruction and the target data based on the target certificate.
[0010] In addition, the application further provides a business processing device, comprising: an obtaining unit configured to obtain a corresponding client identifier in response to a business processing request, and read a code in an instruction code exchange service; a first analysis unit configured to analyze the code to obtain an instruction and target data; wherein analyzing the code comprises: determining the number of character types in the code and the length of the code, determining a target analysis component according to the number and the length, and then calling the target analysis component to analyze the code; a second analysis unit configured to call a target certificate according to the client identifier, to analyze the instruction and the target data based on the target certificate, and then determine a target operation and operation details corresponding to the target operation; and an execution unit configured to call a target server to execute the target operation based on the operation details.
[0011] Optionally, the second analysis unit is further configured to: analyze the instruction based on the target certificate to obtain a corresponding target operation; and analyze the target data based on the target certificate to obtain corresponding operation details.
[0012] Optionally, the first analysis unit is further configured to: determine the type of the code, call a corresponding analysis method to analyze the code according to the type, to obtain the instruction and the target data corresponding to the code.
[0013] Optionally, the first analysis unit is further configured to: in response to the type being code combination, call a corresponding analysis method to analyze each code of the combination, respectively, to obtain the instruction and the target data corresponding to the corresponding code.
[0014] Optionally, the business processing device further comprises a permission verification unit configured to: call a decryption certificate library to perform permission verification based on the client identifier, in response to the permission verification passing, execute the target certificate calling process, and in response to the permission verification failing, reject the calling request for the target certificate.
[0015] Optionally, the business processing apparatus further comprises a conflict checking unit configured to: acquire a historical instruction, perform an instruction conflict checking based on the historical instruction and the instruction; in response to a checking result being instruction conflict, ignore the instruction and record a log alarm; and in response to the checking result being instruction non-conflict, perform a process based on the target certificate and the target data.
[0016] In addition, the present application also provides a business processing electronic device, comprising: one or more processors; a storage device for storing one or more programs, when the one or more programs are executed by the one or more processors, the one or more processors implement the business processing method as described above.
[0017] In addition, the present application also provides a computer readable medium having a computer program stored thereon, the program being executed by a processor to implement the business processing method as described above.
[0018] To achieve the above object, according to another aspect of the embodiments of the present application, a computer program product is provided.
[0019] The computer program product of the embodiments of the present application comprises a computer program, which is executed by a processor to implement the business processing method provided by the embodiments of the present application.
[0020] The above-mentioned embodiment of the application has the following advantages or beneficial effects: the present application responds to a business processing request, acquires a corresponding client identifier, reads a code in an instruction code exchange service; parses the code to obtain an instruction and target data; wherein, parsing the code comprises: determining the number of character types in the code and the length of the code, determining a target parsing component according to the number and the length, and then calling the target parsing component to parse the code; calling a target certificate according to the client identifier, to parse the instruction and the target data based on the target certificate, and then determining a target operation and operation details corresponding to the target operation; calling a target server to execute the target operation based on the operation details. Thus, the risk of business processing is reduced, and the efficiency and security of business processing are improved.
[0021] The further effects of the above-mentioned non-conventional optional mode will be described in the following combined with the specific embodiments. BRIEF DESCRIPTION OF DRAWINGS
[0022] The accompanying drawings are used to better understand the present application, and do not constitute an improper limitation on the present application. Among them:
[0023] Figure 1 is a schematic diagram of the main process of the business processing method according to an embodiment of the present application;
[0024] Figure 2 is a schematic diagram of the main process of the business processing method according to an embodiment of the present application;
[0025] Figure 3 is a main flow diagram of a service processing method according to an embodiment of the present application;
[0026] Figure 4 is a main unit diagram of a service processing apparatus according to an embodiment of the present application;
[0027] Figure 5 is an exemplary system architecture diagram to which embodiments of the present application can be applied;
[0028] Figure 6 is a structural diagram of a computer system of a terminal device or a server suitable for implementing embodiments of the present application. DETAILED DESCRIPTION
[0029] Exemplary embodiments of the present application are described herein with reference to the accompanying drawings, which are meant to be exemplary and not limiting. Therefore, it should be recognized that many changes and modifications can be made to the embodiments described herein, without departing from the spirit and scope of the application. Also, for the sake of brevity and clarity, descriptions of well-known functions and constructions are omitted herein. It should be noted that the acquisition, transmission, storage, use, processing, etc. of data in the technical solutions of the present application comply with relevant provisions of national laws and regulations. It should be noted that in the embodiments of the present application, some industry existing solutions, components, models, etc. may be mentioned, which should be considered as exemplary, and the purpose is only to illustrate the feasibility of the implementation of the technical solutions of the present application, but it does not mean that the applicant has or will necessarily use the solution. In the technical solutions of the present application, the collection, analysis, use, transmission, storage, etc. of user personal information comply with relevant laws and regulations, are used for legal and reasonable purposes, are not shared, leaked or sold outside these legal uses, and are subject to supervision and management by regulatory authorities. Necessary measures are taken to prevent illegal access to such user personal information data, to ensure that personnel with access to personal information data comply with relevant laws and regulations, and to ensure the security of user personal information. Once these user personal information data are no longer needed, the risk should be minimized by limiting or even prohibiting data collection and / or deleting data.
[0030] When used, including in certain related applications, user privacy is protected by de-identifying data, such as by removing specific identifiers, controlling the amount or specificity of data stored, controlling how data is stored, and / or other methods of de-identifying.
[0031] Figure 1 is a main flow diagram of a service processing method according to an embodiment of the present application, as Figure 1As shown, the business processing method mainly includes the following steps S101 to S104.
[0032] In step S101, in response to a business processing request, a corresponding client identifier is acquired, and an encoding in the instruction encoding exchange service is read.
[0033] In this embodiment, the execution subject of the business processing method (for example, which can be a server) can receive a business processing request through wired connection or wireless connection. After receiving the business processing request, the execution subject can acquire the client identifier carried in the request. The client identifier can be a business processing related client code or client name. The execution subject can also read the encoding of the user information transmission in the instruction encoding exchange service according to the business processing request.
[0034] In step S102, the encoding is parsed to obtain an instruction and target data; wherein parsing the encoding includes: determining the number of character types in the encoding and the length of the encoding, determining a target parsing component according to the number and the length, and then calling the target parsing component to parse the encoding.
[0035] After reading the encoding in the instruction encoding exchange service, the execution subject can determine the types of characters in the encoding. For example, the types of characters in the encoding can include one or more of spaces, punctuation marks, numbers, uppercase and lowercase letters, etc. The execution subject can determine the types of characters contained in the encoding read by the present application, and then determine the number of character types.
[0036] In addition, the execution subject can also determine the length of the encoding in the instruction encoding exchange service. Specifically, the length of the encoding can be determined by the following way: obtaining the character types of the characters contained in the encoding, and the number of characters corresponding to each character type. Different types of characters occupy different bytes, and the execution subject can determine the length of the corresponding encoding according to the character types in the encoding, the number of characters corresponding to each character type, and the number of bytes occupied by each character type corresponding to the preset character type. The length of the encoding is the sum of the number of bytes occupied by all characters in the encoding.
[0037] If the number of character types contained exceeds the preset number threshold and the length of the encoding also exceeds the preset length threshold, the corresponding encoding is determined to be a super difficult parsing encoding, and a component assembler needs to be called to call the corresponding parsing component according to the character types in the encoding, and assemble the called parsing components to obtain a target parsing component. The target parsing component obtained by calling and assembling is called to more accurately parse the encoding. Through component assembly, accurate parsing of various character types in the encoding can be achieved, so that the parsing of the encoding is more accurate.
[0038] Specifically, the encoding is parsed to obtain the instruction and the target data, including: determining the type of the encoding, and calling a corresponding parsing method according to the type to parse the encoding to obtain the instruction and the target data corresponding to the encoding.
[0039] The execution subject can obtain the length of the encoding, and determine the type of the encoding according to the length of the encoding. For example, when the length of the encoding is greater than a preset threshold, the execution subject can determine that the type of the encoding is encoding combination, and when the length of the encoding is less than or equal to the preset threshold, the execution subject can determine that the type of the encoding is single-group encoding. The encoding combination can be composed of multiple single-group encodings. When the type of the encoding is single-group encoding, the execution subject can call a parsing method corresponding to the single-group encoding to parse the single-group encoding to obtain the corresponding instruction and the target data.
[0040] Specifically, the encoding is parsed to obtain the instruction and the target data, including: determining the type of the encoding, and calling a corresponding parsing method according to the type to parse the encoding to obtain the instruction and the target data corresponding to the encoding.
[0041] When the type of the encoding is encoding combination, the execution subject can call a parsing method corresponding to each single-group encoding included in the encoding combination to parse the corresponding single-group encoding to obtain the corresponding instruction and the target data. The instruction defines the operation, and the target data defines the operation details.
[0042] Step S103, according to the client identifier, calling the target certificate, to parse the instruction and the target data based on the target certificate, and further determining the target operation and the operation details corresponding to the target operation.
[0043] Specifically, the instruction and the target data are parsed based on the target certificate, and further the target operation and the operation details corresponding to the target operation are determined, including: parsing the instruction based on the target certificate to obtain the corresponding target operation; and parsing the target data based on the target certificate to obtain the corresponding operation details.
[0044] The client identifier can be used to represent the encoding or the name of the client or the user. The execution subject can apply for calling the target certificate from the encryption and decryption certificate library according to the client identifier to parse the instruction and the target data to obtain the target operation corresponding to the instruction and the operation details corresponding to the target data. For example, the target operation can include operations such as adding, deleting, modifying, and querying data in the server, and the operation details can include the server identifier, the effective time point, the execution priority, the execution operation sequence, the data length, and the data splicing manner, and the embodiments of the present application do not make specific limitations on the operation details.
[0045] Step S104, calling the target server to execute the target operation based on the operation details.
[0046] The execution subject can determine the target server according to the server identifier in the operation details. After determining the target server, the execution subject can call the target server to perform the target operation according to the operation details. For example, the operation details are a set data splicing manner, the target operation is modification, and the execution subject can modify the data splicing manner of the stored data in the target server according to the set data splicing manner to maintain the target server.
[0047] The embodiment responds to a business processing request, acquires a corresponding client identifier, reads a code in an instruction code exchange service, parses the code to obtain an instruction and target data, determines the number of character types in the code and the length of the code, determines a target parsing component according to the number and the length, and then calls the target parsing component to parse the code. According to the client identifier, a target certificate is called to parse the instruction and the target data based on the target certificate, and then a target operation and operation details corresponding to the target operation are determined. A target server is called to perform the target operation based on the operation details. Thus, the business processing risk is reduced, and the business processing efficiency and security are improved.
[0048] Figure 2 is a main flow diagram of a business processing method according to an embodiment of the application, as shown in Figure 2 The business processing method mainly includes the following steps S201 to S205.
[0049] Step S201, in response to a business processing request, a corresponding client identifier is acquired, and a code in an instruction code exchange service is read.
[0050] The code in the instruction code exchange service is an information element used for transmission between the client and the server. By using the code as the information element for transmission between the client and the server, the tampering difficulty can be improved, and the security and accuracy of the business processing can be ensured.
[0051] Step S202, the code is parsed to obtain an instruction and target data; wherein parsing the code includes determining the number of character types in the code and the length of the code, determining a target parsing component according to the number and the length, and then calling the target parsing component to parse the code.
[0052] The instruction defines an operation, and the target data defines operation details. The types of characters in the code can include one or more of spaces, punctuation marks, numbers, uppercase and lowercase letters, etc. The execution subject can determine the types of characters contained in the code read by the embodiments of the present application, and further determine the number of types of characters contained. The character types and the number of characters corresponding to each character type contained in the code are obtained. Different types of characters occupy different bytes. The execution subject can determine the length of the corresponding code according to the character types in the code, the number of characters corresponding to each character type, and the number of bytes occupied by each character type corresponding to the preset character type. The length of the code is the sum of the number of bytes occupied by all characters in the code. According to the number of character types in the code and the length of the code, the target analysis component is determined, and the target analysis component is called to analyze the code. This makes the code analysis more accurate.
[0053] It can be understood that when the target analysis component is called to analyze the code, the execution subject can lock each component of the target analysis component assembled to ensure the efficiency and accuracy of the code analysis, prevent interference, and release the lock on each component of the target analysis component assembled when the code analysis is completed, so as to realize timely response to other business processing requests.
[0054] The execution subject can find and read a matching analysis method from the code rule analysis permission library for the code to perform a matching analysis method on the code to obtain the corresponding instruction and target data of the code.
[0055] In step S203, the encryption and decryption certificate library is called to perform permission verification based on the client identifier. In response to the permission verification passing, a target certificate calling process is executed. In response to the permission verification failing, the calling request for the target certificate is rejected.
[0056] Before calling the target certificate, the execution subject can also perform permission verification. Specifically, the encryption and decryption certificate library can be called to verify whether the client identifier has access permission. Specifically, the access role can be determined according to the client identifier, and it can be determined whether the access role has access permission to the encryption and decryption certificate library. If the permission verification result is that the permission verification passes, that is, the access role corresponding to the client identifier has access permission to the encryption and decryption certificate library, the target certificate is called. If the permission verification result is that the permission verification fails, the calling request for the target certificate is rejected. This ensures the security of business processing.
[0057] In step S204, the target certificate is called according to the client identifier to analyze the instruction and the target data based on the target certificate, and further determine the target operation and the operation details corresponding to the target operation.
[0058] Specifically, before the instruction based on the target certificate and the target data is parsed, the method further comprises: obtaining a historical instruction, performing a conflict check based on the historical instruction and the instruction execution instruction; in response to a check result being an instruction conflict, ignoring the instruction and recording a log alarm; in response to the check result being an instruction non-conflict, performing a process of parsing the instruction based on the target certificate and the target data.
[0059] Before the instruction based on the target certificate and the target data is parsed, it can also be judged whether the instruction conflicts with the historical instruction, i.e., whether it conflicts with the effective time range of the historical instruction. If the instruction does not conflict with the effective time range of the historical instruction, a process of parsing the instruction based on the target certificate and the target data is performed; if the instruction conflicts with the effective time range of the historical instruction, the instruction can be ignored and recorded in the execution log, and an alarm is performed to prompt the user of the instruction conflict information, so as to facilitate timely processing of the conflict and ensure normal business processing.
[0060] In step S205, the target server is called to perform the target operation based on the operation details.
[0061] The target server can be one or more servers connected to the control center, and the embodiments of the present application do not make specific limitations on the target server. The target operation is performed in the target server based on the operation details to complete the maintenance of the target server.
[0062] Figure 3 is the main flow diagram of the business processing method according to an embodiment of the present application. As shown in Figure 3As shown, the control center generates a code and operation definition library, arranges some fixed-length codes, and the codes represent server operations for completing the operations defined by the instructions. The control center defines a code rule resolution permission library, which rules take effect at what time point, rule length, rule splicing and splitting, priority, sorting, compliance correctness checking, data length, data splicing, and other operations. The control center reads the data in the instruction code exchange service and parses the code, splits out which server needs to be operated by the instruction and data, whether it is within the permission rules, whether it conflicts with historical instructions, protects the last operation within the effective range, and executes the instruction if there is no conflict, ignores and records the log alarm if there is a conflict, and transmits the data to the control center asynchronously once the operation, and only after verification, the defined action of the code and data is initiated. The code defines the operation, and the data defines the operation details. The data risk does not affect the operation risk. The server can retry and edit the code operation. If the data does not change, the instruction can be directly retransmitted. Complex instructions can be simplified and decoupled for the client. It is equivalent to the client only needs to understand the instruction effect and does not need to pay attention to the details of the server operation. Reduce the operation and maintenance requirements. Shield the risk. Before reading the data and parsing the code, the data in the encryption and decryption certificate library needs to be called to decrypt the instruction. If the decryption fails, an alarm is recorded in the log, and the interval between the next write data of the client to the instruction exchange library is extended or the write is prohibited. The client or user applies for obtaining the certificate in the encryption and decryption certificate library, uses the certificate data to encrypt the instruction and data, sends the encrypted data to the instruction code exchange service, and obtains the server execution result in a timing round-robin manner. In order to simplify the architecture and security, an asynchronous mechanism is adopted. The client or user ultimately realizes the maintenance and predefined operation of the remote server (for example, server 1, server 2, …, server n) through the instruction. Reduce direct interaction and prevent accidental input of high-risk instructions from causing server unrecoverable damage. The client can obtain the current operable instruction list in real time. Maintenance instructions are initiated to the server. Self-operation and maintenance is standardized and digitized by this method. The agreement on code and operation is an important and tedious operation, and the embodiment of the application adheres to the principle that agreement is greater than configuration. The core service interaction between the client or customer and the server is realized through the code and data. There is no direct command operation method, which improves the self-operation and maintenance level of the server.
[0063] The application embodiment defines a set of pure digital, uppercase and lowercase letter composed code library. Instruction code exchange service, operation result and operation history record. Code rule and operation version permission control. Encryption and decryption certificate library. Server code implementation. Support restfull style. Design a code, the code represents the server operation definition. Create a code verification rule. The code only includes a combination of numbers, uppercase and lowercase letters. The total length is limited. Custom parsing rules prevent unauthorized operations. Increase message notification security. Server and client encryption and decryption of communication files. Ensure that data intercepted externally is also non-plain text. Prevent plain text leakage. Meet the resource user's own definition and initialization, reset, etc. Operation of server service, improve development efficiency. Improve security index. Can logically isolate direct communication between systems. Combined with one-way communication to meet special use scenarios. Reduce the number of times the client directly logs in to the server to perform operations. Eliminate high-risk operations. Increase production safety and level. The cost of using the client is very low, and users who do not understand server commands can also perform some common maintenance operations. Meet the server self-maintenance scenario. Shutdown, restart, and disk expansion operations are completed through the interface instruction. No need to go to the server to input instructions, decentralize server operation capabilities, but can control the risk of change. Server availability through the intervention of the client and user intervention improves the ability to deal with it in time. Through the promotion of instructions and data templates, the level of unified operation and maintenance is improved. The whole process of data transmission is digital. Good code control rules, reduce the threshold of unified operation and maintenance. Improve the level of digitization. Previously, the client was given an account, authorization, that is, the client arbitrarily operated the server, and changed to distribute certificates, control instruction range, input code instructions to complete restart, log cleaning, service installation and other operations. Customers do not need to understand server language, understand business language, and can operate visual operation database. Maximize standardized digital operation. Because the instruction code has been digitized, high-risk instructions will not appear, and rapid rollback operations are also preset on the server side. Improve the client's affinity for using the server. Reduce the use threshold. Meet the self-maintenance requirements.
[0064] The embodiment of the application is based on a set of codes and rules to develop a device for indirect implementation of operation customization through information exchange between various systems. The business transaction is controllable and the risk is controllable, and the short code shields the complex operation interaction, decouples the complex continuous interaction to the server side, the instruction code exchange service, and the client. The business security is improved by one level, and the probability of manual operation of the server is reduced. The coding and data encryption mechanism are used. The coding defines the method supported by the resource, and the parsing rule is secret. The operation supported in the front is unified and digitized, and the work implementation is concentrated in the back-end control layer. The encryption mechanism protects the transmission of data. Only the client and the server can identify the transmission information elements, and the tamperability is improved. It can be used for the client to send instructions to the server, and the server executes the operation within the risk controllable range according to the instructions. It can also be used for data interaction between the client and the server in the cloud native environment. It is an implementation mechanism to realize operation and maintenance standardization, unification and digitization. The operation is informatized into various codes or combinations of codes, and the transmission parameter is also a defined format. The client is not directly allowed to send machine instructions to the machine (i.e. server), but the instructions are sent to the machine (i.e. server) after being indirectly adapted and interpreted. The operation risk is shielded, and the client can customize the maintenance of the machine (i.e. server). The coding improves the operation and maintenance unification. The code represents the business language, improves the communication between users and technical personnel, and reduces the language difference.
[0065] Figure 4 It is a schematic diagram of the main unit of the business processing device according to the embodiment of the application. As shown in Figure 4 The business processing device 400 includes an acquisition unit 401, a first parsing unit 402, a second parsing unit 403, and an execution unit 404.
[0066] The acquisition unit 401 is configured to acquire the corresponding client identifier in response to the business processing request, and read the code in the instruction code exchange service.
[0067] The first parsing unit 402 is configured to parse the code to obtain the instruction and the target data; wherein the code is parsed, including: determining the number of character types in the code and the length of the code, determining the target parsing component according to the number and the length, and then calling the target parsing component to parse the code.
[0068] The second parsing unit 403 is configured to call the target certificate according to the client identifier, to parse the instruction and the target data based on the target certificate, and then determine the target operation and the operation details corresponding to the target operation.
[0069] The execution unit 404 is configured to call the target server to execute the target operation based on the operation details.
[0070] In some embodiments, the second parsing unit 403 is further configured to: based on the target certificate parsing instruction, obtain corresponding target operation; and based on the target certificate parsing target data, obtain corresponding operation details.
[0071] In some embodiments, the first parsing unit 402 is further configured to: determine the type of the encoding, and according to the type, call a corresponding parsing method to parse the encoding, to obtain the instruction and the target data corresponding to the encoding.
[0072] In some embodiments, the first parsing unit 402 is further configured to: in response to the type being encoding combination, call a corresponding parsing method of each encoding of the combination to parse the corresponding encoding, to obtain the instruction and the target data corresponding to the corresponding encoding.
[0073] In some embodiments, the business processing apparatus further comprises Figure 4 a permission checking unit not shown in the figure, configured to: call the encryption and decryption certificate library to perform permission checking based on the client identifier, in response to the permission checking passing, execute the target certificate calling process, and in response to the permission checking failing, reject the calling request of the target certificate.
[0074] In some embodiments, the business processing apparatus further comprises Figure 4 a conflict checking unit not shown in the figure, configured to: obtain historical instructions, and based on the historical instructions and the instruction execution instruction, perform conflict checking; in response to the checking result being instruction conflict, ignore the instruction and record log alarm; and in response to the checking result being instruction non-conflict, execute the process based on the target certificate parsing instruction and the target data.
[0075] It should be noted that the business processing method and the business processing apparatus of the present application have a corresponding relationship in the specific implementation content, and therefore repeated content will not be described.
[0076] Figure 5 An exemplary system architecture 500 to which the business processing method or the business processing apparatus of the embodiments of the present application can be applied is shown.
[0077] As shown in Figure 5 , the system architecture 500 can include terminal devices 501, 502, 503, a network 504 and a server 505. The network 504 is used to provide a communication link medium between the terminal devices 501, 502, 503 and the server 505. The network 504 can include various connection types, such as wired, wireless communication links or optical fiber cables, etc.
[0078] The user can use the terminal devices 501, 502, and 503 to interact with the server 505 through the network 504 to receive or send messages, etc. Various communication client applications can be installed on the terminal devices 501, 502, and 503, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, etc. (only as examples).
[0079] The terminal devices 501, 502, and 503 can be various electronic devices with service processing screens and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, etc.
[0080] The server 505 can be a server providing various services, such as a background management server providing support for service processing requests submitted by the user using the terminal devices 501, 502, and 503 (only as an example). The background management server can respond to the service processing request, obtain the corresponding client identifier, read the code in the instruction code exchange service; parse the code to obtain the instruction and the target data; wherein, parsing the code includes: determining the number of character types in the code and the length of the code, determining the target parsing component according to the number and the length, and then calling the target parsing component to parse the code; calling the target certificate according to the client identifier to parse the instruction and the target data based on the target certificate, and then determining the target operation and the operation details corresponding to the target operation; calling the target server to execute the target operation based on the operation details. Thus, the risk of service processing is reduced, and the efficiency and security of service processing are improved.
[0081] It should be noted that the service processing method provided by the embodiments of the present application is generally executed by the server 505, and correspondingly, the service processing apparatus is generally provided in the server 505.
[0082] It should be understood that Figure 5 The number of terminal devices, networks, and servers in the above description is only illustrative. According to the needs of implementation, there can be any number of terminal devices, networks, and servers.
[0083] Reference will be made to Figure 6 which shows a structural schematic diagram of a computer system 600 of a terminal device suitable for implementing the embodiments of the present application. Figure 6 The terminal device shown is only an example and should not impose any limitation on the functions and use range of the embodiments of the present application.
[0084] As Figure 6As shown, the computer system 600 includes a central processing unit (CPU) 601 which can perform various appropriate actions and processes according to programs stored in a read only memory (ROM) 602 or loaded into a random access memory (RAM) 603 from a storage section 608. In the RAM 603, various programs and data required for the operation of the computer system 600 are also stored. The CPU 601, the ROM 602, and the RAM 603 are connected to each other through a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.
[0085] Connected to the I / O interface 605 are an input section 606 including a keyboard, a mouse, etc.; an output section 607 including a display device such as a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 608 including a hard disk, etc.; and a communication section 609 including a network interface card such as a LAN card, a modem, etc. The communication section 609 performs communication processing via a network such as the Internet. A drive 610 is also connected to the I / O interface 605 as necessary. A removable recording medium 611 such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc. is attached to the drive 610 as necessary, so that a computer program read therefrom is installed into the storage section 608 as necessary.
[0086] In particular, according to the embodiments of the present application, the processes described above with reference to the flowcharts can be implemented as a computer software program. For example, the embodiments of the present application include a computer program product comprising a computer program carried on a computer readable medium, the computer program containing program codes for executing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network by the communication section 609, and / or installed from the removable recording medium 611. When the computer program is executed by the central processing unit (CPU) 601, the above-described functions defined in the system of the present application are executed.
[0087] It should be noted that computer-readable media in this disclosure can be computer-readable storage media, or computer-readable signal media, or any combination thereof. Computer-readable storage media can be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the above. More specific examples of computer-readable storage media can include, but are not limited to, an electrical connection having one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this disclosure, computer-readable storage media can be any tangible medium that can contain or store a program for use by or in connection with an instruction execution system, apparatus, or device. In this disclosure, a computer-readable signal medium can include a computer-readable storage medium, or any computer-readable medium that can transmit or propagate code in the form of computer-readable instructions or program code, or any combination of the above. The computer-readable medium can be transmitted in baseband or as part of a carrier wave over a transmission medium, including a wired medium, or a wireless medium, or any suitable combination of the above. Computer-readable media can also be any medium that can be used to store or transfer a program for use by or in connection with an instruction execution system, apparatus, or device.
[0088] The flow diagrams and block diagrams in the drawings are illustrations of possible architectures, functions, and operations of systems, methods, and computer program products in accordance with various embodiments of the present application. In this regard, each block in the flow diagrams or block diagrams can represent a module, a segment, or a portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that in some alternative implementations, the functions noted in the blocks can occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently or the blocks may
[0089] The units described in the embodiments of the present application can be implemented in the form of software, or can be implemented in the form of hardware. The described units can also be arranged in a processor, for example, a processor can be described as including an obtaining unit, a first parsing unit, a second parsing unit and an executing unit. In some cases, the names of these units do not constitute a limitation on the units themselves.
[0090] As another aspect, the present application also provides a computer readable medium, which can be included in the device described in the above embodiments, or can exist independently without being assembled into the device. The computer readable medium carries one or more programs, when the one or more programs are executed by the device, the device is caused to, in response to a service processing request, obtain a corresponding client identifier, read an encoded instruction in an instruction encoding exchange service; parse the encoding to obtain an instruction and target data; wherein the parsing of the encoding comprises: determining the number of character types in the encoding and the length of the encoding, determining a target parsing component according to the number and the length, and then calling the target parsing component to parse the encoding; calling a target certificate according to the client identifier, to parse the instruction and the target data based on the target certificate, and then determining a target operation and operation details corresponding to the target operation; calling a target server to execute the target operation based on the operation details.
[0091] The computer program product of the present application includes a computer program, which, when executed by a processor, implements the service processing method in the embodiments of the present application.
[0092] According to the technical solutions of the embodiments of the present application, the service processing risk can be reduced, and the service processing efficiency and security can be improved.
[0093] The above specific embodiments do not constitute a limitation on the protection scope of the present application. Those skilled in the art should understand that various modifications, combinations, sub-combinations and substitutions can be made depending on design requirements and other factors. Any modification, equivalent replacement and improvement made within the spirit and principles of the present application should be included in the protection scope of the present application.
Claims
1. A service processing method characterized by, The method comprises the following steps: In response to a business processing request, a corresponding client identifier is obtained, and a code in an instruction code exchange service is read; The code is parsed to obtain an instruction and target data; wherein, the parsing of the code comprises: determining the number of character types in the code and the length of the code, determining a target parsing component according to the number and the length, and then calling the target parsing component to parse the code; According to the client identifier, a target certificate is called to parse the instruction and the target data based on the target certificate, and then a target operation and operation details corresponding to the target operation are determined; A target server is called to execute the target operation based on the operation details.
2. The method of claim 1, wherein, The parsing of the instruction and the target data based on the target certificate, and then the determination of the target operation and the operation details corresponding to the target operation, comprises: The instruction is parsed based on the target certificate to obtain corresponding target operation; The target data is parsed based on the target certificate to obtain corresponding operation details.
3. The method of claim 1, wherein, The parsing of the code to obtain the instruction and the target data comprises: The type of the code is determined, and a corresponding parsing method is called according to the type to parse the code to obtain the instruction and the target data corresponding to the code.
4. The method of claim 3, wherein, The calling of the corresponding parsing method according to the type to parse the code to obtain the instruction and the target data corresponding to the code comprises: In response to the type being code combination, the corresponding parsing method of each code of the combination is called respectively to parse the corresponding code to obtain the instruction and the target data corresponding to the corresponding code.
5. The method of claim 1, wherein, Before the calling of the target certificate, the method further comprises: A decryption certificate library is called to perform permission verification based on the client identifier, and in response to the permission verification passing, a target certificate calling process is executed, and in response to the permission verification failing, the calling request for the target certificate is rejected.
6. The method of claim 1, wherein, Before the parsing of the instruction and the target data based on the target certificate, the method further comprises: A historical instruction is obtained, and instruction conflict verification is performed based on the historical instruction and the instruction; In response to the verification result being instruction conflict, the instruction is ignored and a log alarm is recorded; In response to the verification result being instruction non-conflict, the process of parsing the instruction and the target data based on the target certificate is executed.
7. A service processing apparatus characterized by comprising: The method comprises the following steps: An obtaining unit is configured to obtain a corresponding client identifier in response to a business processing request, and read a code in an instruction code exchange service; A first parsing unit is configured to parse the code to obtain an instruction and target data; wherein, the parsing of the code comprises: determining the number of character types in the code and the length of the code, determining a target parsing component according to the number and the length, and then calling the target parsing component to parse the code; A second parsing unit is configured to call a target certificate according to the client identifier, to parse the instruction and the target data based on the target certificate, and then determine a target operation and operation details corresponding to the target operation; An execution unit is configured to call a target server to execute the target operation based on the operation details.
8. The apparatus of claim 7, wherein, The second parsing unit is further configured to: resolve the instruction based on the target certificate to obtain corresponding target operation; resolve the target data based on the target certificate to obtain corresponding operation details.
9. The apparatus of claim 7, wherein, The first parsing unit is further configured to: determine the type of the encoding, and call a corresponding parsing method according to the type to parse the encoding to obtain the instruction and the target data corresponding to the encoding.
10. The apparatus of claim 9, wherein, The first parsing unit is further configured to: in response to the type being a combination of encodings, call a corresponding parsing method of each encoding of the combination to parse the corresponding encoding to obtain the instruction and the target data corresponding to the corresponding encoding.
11. The apparatus of claim 7, wherein, The apparatus further comprises a permission checking unit configured to: call an encryption and decryption certificate library to perform permission checking based on the client identifier, execute a target certificate calling process in response to passing the permission checking, and reject the calling request for the target certificate in response to failing the permission checking.
12. The apparatus of claim 7, wherein, The apparatus further comprises a conflict checking unit configured to: obtain historical instructions, and perform instruction execution instruction conflict checking based on the historical instructions and the instruction; in response to a checking result being instruction conflict, ignore the instruction and record a log alarm; in response to the checking result being instruction non-conflict, execute a process of resolving the instruction and the target data based on the target certificate.
13. A service processing electronic device, characterized by comprising: comprise: one or more processors; a storage device for storing one or more programs, when the one or more programs are executed by the one or more processors, the one or more processors implement the method of any one of claims 1-6.
14. A computer readable medium having stored thereon a computer program, characterized in that, The program is executed by the processor to implement the method of any one of claims 1-6.
15. A computer program product comprising a computer program, characterized in that, The computer program is executed by the processor to implement the method of any one of claims 1-6.
Citation Information
Patent Citations
Data information transmission method and device, electronic equipment and storage medium
CN113890678A
Character query method and device, equipment and medium
CN117633312A