A network security payment system with sensitive information identification

Abstract

The present invention relates to the field of network security payment technology, and in particular to a network security payment system for sensitive information identification, including a user end, an encryption end, a server end and a transaction end. In the present invention, the account management module of the user end strictly controls the entire account process, and the payment authentication module provides a variety of security authentication methods; the payment information sorting module ensures that the data is accurate and effective; the encryption end generates identification information and constructs encryption and decryption rules; the transaction information storage module of the server end safely stores payment information, the transaction processing module communicates efficiently, and the payment information docking module synchronizes payment completion information; the payment information analysis module of the transaction end cooperates with the decryption rules, and the payment determination module completes the payment operation; the system provides users with a convenient, safe and reliable payment environment through sensitive information identification and all-round security measures.

Description

Technical Field

[0001] The present invention relates to the technical field of network security payment, and in particular to a network security payment system for sensitive information identification. Background Art

[0002] In today's era of rapid digital development, online payment has become an indispensable part of people's daily life. However, with the widespread use of online payment, payment security issues have become increasingly prominent.

[0003] Traditional payment systems often have deficiencies in the protection of sensitive information. Users' payment information may be at risk of being stolen or tampered with during transmission and storage. For example, some payment systems may only use simple encryption methods that are easy to crack; in terms of account management, there may be a lack of strict permission control and multi-dimensional authentication methods, resulting in hidden dangers in account security.

[0004] At the same time, the organization and classification of payment information are not scientific and efficient enough. Invalid or erroneous data may affect payment accuracy. Different types of payment information are mixed together, which is not convenient for users to query and manage, and is not conducive to the system's data analysis and risk prevention and control.

[0005] In addition, in the payment process, the collaboration between various links is not close enough, which may lead to untimely and inaccurate information transmission, affecting payment efficiency and user experience. Therefore, a network security payment system with sensitive information identification is proposed to address the above problems. Summary of the invention

[0006] The purpose of the present invention is to provide a network security payment system for sensitive information identification to solve the problems raised in the above background technology.

[0007] To achieve the above object, the present invention provides the following technical solutions:

[0008] A network security payment system for sensitive information identification, comprising:

[0009] User end: The user end includes an account management module, a payment authentication module, a payment information sorting module, a rule synchronization module and a transaction information encryption module;

[0010] The account management module manages the user's account information, including account registration, login, information update and permission control;

[0011] The payment authentication module authenticates the user's payment behavior, including password verification, fingerprint recognition, and facial recognition authentication;

[0012] The payment information sorting module sorts and categorizes the user's payment information;

[0013] The rule synchronization module sends a request to the encryption end and receives encryption rules from the encryption end;

[0014] The transaction information encryption module encrypts the user's payment information according to the encryption rules and transmits the encrypted payment information to the server;

[0015] Encryption end; the encryption end includes a request information receiving module and an encryption rule module;

[0016] The request information receiving module receives the request from the user end, generates identification information according to the payment information, and sends the identification information to the encryption rule module to generate encryption rules; the request information receiving module receives the request from the transaction end, retrieves the matching decryption rules in the encryption rule module according to the identification information, and then synchronizes them to the transaction end;

[0017] The encryption rule module constructs encryption rules and decryption rules according to the identification information and stores them;

[0018] Server side: The server side includes a transaction information storage module, a transaction processing module and a payment information docking module;

[0019] The transaction information storage module constructs a storage space corresponding to each identification information to store the encrypted payment information. After the same payment information is stored, a trigger instruction is generated and sent to the transaction processing module;

[0020] After receiving the trigger instruction, the transaction processing module sends the identification information corresponding to the payment information to the transaction end;

[0021] After receiving the payment completion information provided by the transaction end, the payment information docking module synchronizes the payment completion information to the user end;

[0022] Transaction end: The transaction end includes a payment information analysis module and a payment confirmation module;

[0023] The payment information analysis module receives the identification information, sends a request to the encryption end according to the identification information, retrieves the decryption rules, and then sends the payment information retrieval instruction to the transaction processing module according to the decryption rules. The transaction processing module dispatches the corresponding payment information from the transaction information storage module according to the payment information retrieval instruction and transmits it back to the payment information analysis module. The payment information analysis module decrypts the payment information according to the decryption rules, reorganizes the payment information, and transmits it to the payment confirmation module.

[0024] The payment confirmation module performs payment operations according to the reorganized payment information, and after the payment is completed, generates payment completion information and transmits it to the server.

[0025] Preferably, when the payment information sorting module sorts and classifies the user's payment information, it first clears invalid or erroneous data in the payment information, classifies the payment information according to type, time, and user ID, and standardizes the format of the payment information.

[0026] Preferably, after receiving the request from the user terminal, the request information receiving module extracts key elements from the payment information, the key elements including the timestamp, user account and transaction amount, combines the transaction timestamp, user account and transaction amount, and generates a fixed-length string as identification information through a hash algorithm; the request information receiving module sends the generated identification information to the encryption rule module, and after receiving the identification information, the encryption rule module constructs encryption rules according to the identification information.

[0027] Preferably, when generating encryption rules based on the identification information, the content and structure of the identification information are analyzed, and the byte division rules are determined according to the different elements in the identification information; screening rules are randomly generated according to the number of segments into which the identification information is divided, and the segment encryption order is determined according to the screening order; the encryption algorithm is selected according to the transaction characteristics represented by the identification information; and the order of sending the payment information segments is designed according to the transaction type and participants in the identification information.

[0028] Preferably, when the transaction information encryption module encrypts the user's payment information according to the encryption rules, the transaction information encryption module first obtains the encryption rules from the rule synchronization module, performs structural analysis on the user's transaction information, divides the transaction information into different byte segments according to the byte division rules determined in the encryption rules, encrypts the divided byte segments according to the segment encryption order determined in the encryption rules, and encrypts each byte segment according to the characteristics of the transaction information and the encryption algorithm specified in the encryption rules; combines the encrypted byte segments according to the sending order of the payment information segments designed in the encryption rules to form encrypted payment information, and transmits the encrypted payment information to the server.

[0029] Preferably, the transaction information storage module allocates an independent storage space for each payment information according to the received identification information, and writes the encrypted payment information into the allocated storage space; the transaction information storage module regularly backs up the stored payment information; the transaction information storage module continuously monitors the storage status of each payment information, and when it is determined that the payment information storage is completed, the transaction information storage module generates a trigger instruction.

[0030] Preferably, after receiving the trigger instruction, the transaction processing module immediately starts communicating with the transaction end and sends the identification information extracted from the trigger instruction to the transaction end.

[0031] Preferably, the payment information analysis module constructs a request to be sent to the encryption end based on the received identification information. After the encryption end receives the request from the payment information analysis module, it retrieves the matching decryption rules based on the identification information, and synchronizes the decryption rules to the payment information analysis module; based on the decryption rules, the payment information analysis module constructs a payment information retrieval instruction to be sent to the transaction processing module, and sends the constructed payment information retrieval instruction to the transaction processing module; after the transaction processing module dispatches the corresponding payment information from the transaction information storage module based on the payment information retrieval instruction, it transmits the payment information back to the payment information analysis module; using the obtained decryption rules, the payment information analysis module decrypts the received payment information; the decrypted payment information is reorganized into a format suitable for the payment determination module to perform payment operations, and then the reorganized payment information is transmitted to the payment determination module.

[0032] Compared with the prior art, the beneficial effects of the present invention are as follows: the payment authentication module provides multiple methods such as password verification, fingerprint recognition, and facial recognition authentication, building a solid wall for payment behavior; biometric authentication utilizes unique biological features, which are difficult to forge or misappropriate, greatly improving the security of payment, and the encryption rule module carefully constructs encryption and decryption rules based on the identification information; from analyzing the content structure of the identification information, to determining the byte division rules, randomly generating screening rules and segment encryption order, to selecting a suitable encryption algorithm and designing the sending order of the payment information segments, each step is full of wisdom to ensure that the payment information is safe during transmission and storage; the transaction information storage module allocates independent storage space for each payment information, regularly backs up and maintains The transaction processing module responds to trigger instructions efficiently and communicates quickly with the transaction end to ensure smooth payment process. The payment information docking module synchronizes payment completion information in time to improve user experience. The payment information analysis module cooperates closely with the encryption end and the server end to request decryption rules, schedule payment information, decrypt and reorganize, and provide accurate information for the payment determination module. The payment determination module performs safe and efficient payment operations based on the reorganized information, generates payment completion information and transmits it to the server end to complete the entire payment process. The network security payment system with sensitive information identification of the present invention provides users with a reliable, convenient and secure payment environment through a unique sensitive information identification mechanism and a comprehensive network security protection system. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] Figure 1 This is a schematic diagram of the overall structure of a network security payment system for sensitive information identification according to the present invention. DETAILED DESCRIPTION

[0034] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0035] In order to better understand the above technical solution, the above technical solution will be described in detail below in conjunction with the accompanying drawings and specific implementation methods.

[0036] Embodiment:

[0037] See also Figure 1 , this embodiment provides a technical solution:

[0038] A network security payment system for sensitive information identification, including a user end, an encryption end, a server end and a transaction end.

[0039] In this embodiment, the user terminal includes an account management module, a payment authentication module, a payment information sorting module, a rule synchronization module and a transaction information encryption module;

[0040] The account management module manages the user's account information, including account registration, login, information update and permission control, including:

[0041] 1. Account Registration

[0042] The user selects the "Register Account" option on the user interface;

[0043] The user enters necessary information, such as username, password, email address, etc.

[0044] The account management module performs preliminary verification on the input information, checking whether the username complies with the naming rules (e.g., cannot contain special characters, length limit, etc.), whether the password meets the strength requirements (e.g., contains letters, numbers, special characters, and the length meets a certain standard, etc.), and whether the email address format is correct;

[0045] If the information verification is successful, the account management module sends a registration request to the server, which may further perform a duplication check to ensure that key information such as the user name or email address has not been used by other users in the system;

[0046] After the server confirms that everything is correct, it creates a new account for the user and feeds back the successful registration information to the account management module, which then displays the result to the user.

[0047] 2. Login

[0048] The user enters the user name and password on the user interface;

[0049] The account management module receives the information entered by the user and sends it to the server for verification;

[0050] The server compares the stored account information to check whether the username and password match;

[0051] If the match is successful, the server returns a successful login signal to the account management module, and the account management module allows the user to enter the system and loads the corresponding functions and interfaces according to the user's permissions;

[0052] If the username or password is incorrect, the account management module prompts the user to re-enter or provides the option to retrieve the password;

[0053] 3. Information Update

[0054] The user selects the "Account Information Update" option on the user terminal;

[0055] Users can modify their personal information, such as changing their password, updating their email address, modifying their contact information, etc.;

[0056] The account management module verifies the new information entered by the user to ensure that the new password meets the strength requirements and the new email address is in the correct format;

[0057] After verification, the account management module sends an update request to the server, which updates the user's account information database;

[0058] After the update is completed, the server will feed back the result to the account management module, and the account management module will notify the user that the update is successful;

[0059] 4. Permission Control

[0060] System administrators can set the permission levels for different users through a specific management interface;

[0061] The account management module receives the permission information set by the administrator and associates it with the corresponding user account;

[0062] When a user logs into the system, the account management module determines the functions and data range that the user can access based on the user's permission level;

[0063] If a user attempts to access functions or data beyond their authority, the account management module will block the operation and prompt the user that they do not have the corresponding authority;

[0064] The payment authentication module authenticates the user's payment behavior, including password verification, fingerprint recognition, and facial recognition authentication, among which:

[0065] 1. Password Verification

[0066] When the user is making a payment, the system prompts him to enter the payment password;

[0067] The user enters the password on the user interface;

[0068] The payment authentication module receives the password entered by the user and compares it with the correct payment password of the user stored on the server;

[0069] If the entered password is consistent with the stored password, the authentication is passed and the payment operation is allowed; if they are inconsistent, the user is prompted that the password is incorrect and may be asked to re-enter the password or use other verification methods;

[0070] 2. Fingerprint recognition authentication

[0071] The user pre-enters his fingerprint information into the system;

[0072] The user selects the "Fingerprint Entry" option on the settings interface and places a finger on the fingerprint recognition sensor of the user-end device;

[0073] The device reads the fingerprint information and transmits it to the payment authentication module, which processes and stores the fingerprint information, usually encrypting it to ensure security.

[0074] When the user performs a payment operation, the system prompts for fingerprint authentication;

[0075] The user places a finger on the fingerprint recognition sensor;

[0076] The device reads the user's fingerprint information and sends it to the payment authentication module;

[0077] The payment authentication module compares the read fingerprint information with the pre-stored fingerprint;

[0078] If the match is successful, the authentication is passed and the payment operation is allowed;

[0079] If the match fails, the user is prompted with authentication failure and can try other authentication methods or perform fingerprint authentication again;

[0080] 3. Facial Recognition Authentication

[0081] Users pre-enter their facial information into the system;

[0082] The user selects the "Face Entry" option on the settings interface and faces the user's device's camera;

[0083] The device collects the user's facial image through the camera and transmits it to the payment authentication module;

[0084] The payment authentication module uses facial recognition algorithms to process images, extract facial features and store them, which are also encrypted to ensure security.

[0085] When the user makes a payment, the system prompts for facial recognition authentication;

[0086] The user points their face toward the camera;

[0087] The device collects the user's facial image and sends it to the payment authentication module;

[0088] The payment authentication module compares the collected facial image with pre-stored facial features;

[0089] If the match is successful, the authentication is passed and the payment operation is allowed;

[0090] If the match fails, the user is prompted with authentication failure and can try other authentication methods or perform facial recognition authentication again;

[0091] The payment information sorting module sorts and categorizes the user's payment information;

[0092] Furthermore, when the payment information sorting module sorts and classifies the user's payment information, it first clears invalid or erroneous data in the payment information, classifies the payment information according to type, time, and user ID, and standardizes the format of the payment information, specifically including the following steps:

[0093] 1. Clear invalid or erroneous data

[0094] Data reception and preliminary inspection:

[0095] The payment information sorting module receives payment information from the user, which may include transaction amount, transaction time, transaction object, payment method, etc.

[0096] Conduct preliminary checks on the received information, such as checking whether the transaction amount is within a reasonable value range, whether the transaction time complies with format requirements, etc.;

[0097] Invalid data judgment:

[0098] Determine which data is invalid data; for example, a negative transaction amount, an incorrect transaction time format, or an empty transaction object may all be considered invalid data;

[0099] For some data that may be erroneous but uncertain, it can be judged by correlation with other information; for example, if the transaction amount does not match the usual amount range corresponding to the payment method, it can be marked as possible erroneous data;

[0100] Error data handling:

[0101] Different processing methods can be adopted for data that is determined to be erroneous; if the error can be corrected, such as the format of the transaction time being incorrect, the format can be converted, then the correction process will be carried out;

[0102] If the error cannot be corrected, or the degree of error in the data seriously affects the accuracy of the payment information, it will be marked as invalid data and removed;

[0103] Invalid data removal:

[0104] Delete data marked as invalid from payment information to ensure that subsequent sorting and classification operations are based on accurate and valid data;

[0105] 2. Classification by type

[0106] Determine the payment information type:

[0107] Analyze the various contents in the payment information and determine the type of payment information; common payment information types may include shopping, remittance, payment, etc.;

[0108] The type of payment information can be determined based on factors such as the transaction object, payment method, and transaction purpose;

[0109] Classification storage:

[0110] Create a corresponding storage area or data structure for each payment information type;

[0111] Store payment information of the same type in the corresponding area for subsequent query and analysis;

[0112] 3. Classification by time

[0113] Withdrawal transaction time:

[0114] Extract the transaction time field from the payment information to ensure the consistency of the time format;

[0115] Time interval division:

[0116] Classify payment information according to certain time interval classification standards, such as by day, week, month, quarter, year, etc.;

[0117] You can create different time interval storage areas and allocate payment information to corresponding areas according to transaction time;

[0118] 4. Classification by User ID

[0119] Get the user ID:

[0120] Determine the user's unique identification ID from the payment information;

[0121] Classification storage:

[0122] Create a separate storage area or data structure for each user ID;

[0123] The payment information of the same user is stored in the corresponding area, which makes it convenient for users to query their payment history and manage their finances;

[0124] 5. Standardized payment information format

[0125] Determine the standard format:

[0126] Develop unified payment information format standards, including field names, data types, length limits, etc.;

[0127] For example, the transaction amount field can be specified as a numeric type with two decimal places; the transaction time field can be specified as a specific date and time format;

[0128] Format conversion and adjustment:

[0129] For payment information that does not conform to the standard format, perform format conversion and adjustment;

[0130] Data processing tools or algorithms can be used to convert fields such as transaction amount and transaction time in different formats into a standard format;

[0131] Data Validation and Integrity Check:

[0132] During the standardization process, data verification and integrity checks are performed on payment information;

[0133] Ensure that each field complies with standard format requirements and that no important information is missing; if data is found to be incomplete or does not meet requirements, appropriate prompts or processing can be performed;

[0134] The rule synchronization module sends a request to the encryption end and receives encryption rules from the encryption end;

[0135] The transaction information encryption module encrypts the user's payment information according to the encryption rules and transmits the encrypted payment information to the server;

[0136] Further, when the transaction information encryption module encrypts the user's payment information according to the encryption rules, the transaction information encryption module first obtains the encryption rules from the rule synchronization module, performs structural analysis on the user's transaction information, divides the transaction information into different byte segments according to the byte division rules determined in the encryption rules, encrypts the divided byte segments according to the segment encryption order determined in the encryption rules, encrypts each byte segment according to the characteristics of the transaction information and the encryption algorithm specified in the encryption rules; combines the encrypted byte segments according to the sending order of the payment information segments designed in the encryption rules to form encrypted payment information, and transmits the encrypted payment information to the server side, which specifically includes the following steps:

[0137] 1. Obtain encryption rules

[0138] Request encryption rules from the rule synchronization module:

[0139] The transaction information encryption module first interacts with the rule synchronization module on the user side and sends a request to it to obtain encryption rules;

[0140] After receiving the request, the rule synchronization module will communicate with the encryption end to obtain the latest encryption rules and return them to the transaction information encryption module;

[0141] 2. Analyzing transaction information

[0142] Receive payment information:

[0143] The transaction information encryption module receives the user's payment information, which may include sensitive information such as transaction amount, transaction time, transaction object, payment method, etc.

[0144] Structural analysis:

[0145] Parse the structure of payment information to understand the meaning and data type of each field; this helps determine how to process different parts of information according to encryption rules;

[0146] 3. Divide Byte Segments

[0147] According to the byte division rule:

[0148] Divide the transaction information into different byte segments according to the byte division rule obtained from the encryption rule;

[0149] The byte division rules may be determined based on specific field lengths, data types, or structural characteristics of transaction information;

[0150] For example, the transaction amount can be used as a byte segment, the transaction time as another byte segment, and the transaction object and payment method can be combined into one byte segment;

[0151] 4. Encryption Processing

[0152] Determine the encryption order of the segments:

[0153] Encrypt the divided byte segments according to the segment encryption order determined in the encryption rule;

[0154] The encryption order can be generated randomly or determined according to specific logic to increase the security of encryption;

[0155] Select an encryption algorithm:

[0156] Encrypt each byte segment according to the characteristics of the transaction information and the encryption algorithm specified in the encryption rule;

[0157] Different encryption algorithms are suitable for different types of data and security requirements. For example, for numerical data such as transaction amounts, symmetric encryption algorithms can be used; for text data such as transaction objects, asymmetric encryption algorithms can be used.

[0158] 5. Combined Encrypted Information

[0159] Combine in the order of sending:

[0160] Combining the encrypted byte segments according to the order in which the payment information segments are sent as designed in the encryption rules;

[0161] The order of sending can be determined based on the priority of the transaction, the importance of the data, or other factors;

[0162] 6. Transmitting Encrypted Information

[0163] Send to the server:

[0164] Transmit the encrypted payment information to the server;

[0165] The transmission process can use secure communication protocols, such as HTTPS, to ensure the security of information during transmission.

[0166] In this embodiment, the encryption end includes a request information receiving module and an encryption rule module;

[0167] The request information receiving module receives the request from the user end, generates identification information according to the payment information, and sends the identification information to the encryption rule module to generate encryption rules; the request information receiving module receives the request from the transaction end, retrieves the matching decryption rules in the encryption rule module according to the identification information, and then synchronizes them to the transaction end;

[0168] The encryption rule module constructs encryption rules and decryption rules according to the identification information and stores them;

[0169] Further, after receiving the request from the user, the request information receiving module extracts key elements from the payment information, including the transaction timestamp, user account number and transaction amount, combines the transaction timestamp, user account number and transaction amount, and generates a fixed-length string as identification information through a hash algorithm; the request information receiving module sends the generated identification information to the encryption rule module, and after receiving the identification information, the encryption rule module constructs an encryption rule according to the identification information;

[0170] The process of generating identification information includes the following steps:

[0171] Extraction of key elements:

[0172] After receiving the request from the user, the request information receiving module immediately and accurately extracts the three key elements of transaction timestamp, user account and transaction amount from the payment information; the transaction timestamp is the time mark of the transaction, which gives each transaction a unique time attribute, which helps to sort and trace transactions in subsequent processing; the user account clarifies the initiator of the transaction and is an important identifier of the user's identity, ensuring that the payment information can be accurately associated with a specific user; the transaction amount reflects the economic value of the transaction. For the payment system, this is a key value that needs to be strictly protected;

[0173] The process of extracting these key elements requires a high degree of accuracy and reliability, as any errors or omissions may affect the subsequent generation of identification information and the construction of encryption rules;

[0174] Key elements combination:

[0175] Combine the extracted transaction timestamp, user account and transaction amount in a specific order or format; this combination process needs to take into account the readability and processability of the information; for example, the combination can be carried out in the order of "timestamp-user account-transaction amount", or the three elements can be connected using a specific separator; in this way, the combined information not only retains the key features of each element, but also forms a unified whole, which is convenient for subsequent processing;

[0176] The hash algorithm generates identification information:

[0177] The combined key elements are used to generate a fixed-length string as identification information through a hash algorithm. The hash algorithm has strong unidirectionality and determinism. No matter how long or complex the input information is, it can convert it into a fixed-length output, and it is almost impossible for different inputs to generate the same output. This feature makes the generated identification information highly secure and unique. Even if an attacker obtains the identification information, it is difficult to reversely deduce the original payment information, thereby effectively protecting the user's payment privacy.

[0178] When generating encryption rules based on the identified information, the content and structure of the identified information are analyzed, and the byte division rules are determined according to the different elements in the identified information; the screening rules are randomly generated according to the number of segments of the identified information, and the segment encryption order is determined according to the screening order; the encryption algorithm is selected according to the transaction characteristics represented by the identified information; the sending order of the payment information segments is designed according to the transaction type and participants in the identified information;

[0179] The encryption rule module plays a key role in the entire network security payment system; it not only builds encryption rules based on the identification information to ensure the security of payment information during transmission and storage, but also builds corresponding decryption rules so that the payment information can be accurately restored when needed to ensure the smooth progress of the payment process; at the same time, the constructed rules are stored to provide a guarantee for the efficient operation of the system. The encryption rule module specifically includes the following steps:

[0180] Analyze the content and structure of the tokenized information:

[0181] After receiving the identified information, the encryption rule module first performs an in-depth analysis on it. This includes carefully studying the specific values ​​and relationships of different elements contained in the identified information, such as the transaction timestamp, user account number, and transaction amount. For example, the position, length, and possible value range of each element in the identified information are analyzed. By analyzing these contents and structures, the encryption rule module can better understand the characteristics of the identified information and provide a basis for the subsequent formulation of encryption rules.

[0182] Rules for determining byte division:

[0183] According to the different elements in the identification information, the encryption rule module formulates reasonable byte division rules; this process needs to comprehensively consider multiple factors, such as the importance and length of the elements and the security requirements of the system; for example, the transaction timestamp can be used as an independent byte segment, because the timestamp may need special processing or encryption in some cases; the user account and transaction amount can also be used as different byte segments, so that different encryption methods can be selected according to their characteristics; the byte division rules should not only ensure the integrity and accuracy of the information, but also improve the efficiency and security of encryption;

[0184] Randomly generate filtering rules and determine the segment encryption order:

[0185] According to the number of segments of the identified information, the encryption rule module randomly generates screening rules; the role of the screening rules is to select specific byte segments for encryption or further process the byte segments during the encryption process; this randomness increases the complexity and security of encryption, making it difficult for attackers to predict the specific encryption method; then, the order of segment encryption is determined according to the screening order; this order can be random or determined according to specific logic, such as determining the order of encryption according to the importance of the byte segment or the characteristics of the transaction; the determination of the segment encryption order needs to take into account the performance and security requirements of the system to ensure that the encryption process is both efficient and secure;

[0186] Select an encryption algorithm:

[0187] The encryption rule module selects a suitable encryption algorithm based on the transaction characteristics represented by the identification information. Different transaction characteristics may require different encryption algorithms to ensure security. For example, if the transaction involves high-value amounts or sensitive information, a stronger encryption algorithm may need to be selected, such as the Advanced Encryption Standard (AES) or RSA encryption algorithm. If the transaction is time-sensitive, an algorithm suitable for fast encryption and decryption may need to be selected to ensure the smoothness of the payment process. The selection of encryption algorithms should comprehensively consider factors such as transaction security, efficiency, and feasibility.

[0188] Design the order in which payment information segments are sent:

[0189] According to factors such as the transaction type and participants in the identification information, the encryption rule module designs the order in which the payment information segments are sent. In transactions involving multiple parties, the design of the sending order is particularly important. It needs to take into account the priority of each participant, the transaction process, and the security requirements of the system. For example, the sending order can be determined based on the importance of the participants, and key information can be sent to important participants first to ensure the smooth progress of the transaction. Alternatively, the sending order can be determined based on the transaction process, and the corresponding payment information segments can be sent in sequence according to each link of the transaction to improve the traceability and security of the transaction.

[0190] In this embodiment, the server side includes a transaction information storage module, a transaction processing module and a payment information docking module;

[0191] The transaction information storage module constructs a storage space corresponding to each identification information to store the encrypted payment information. After the same payment information is stored, a trigger instruction is generated and sent to the transaction processing module;

[0192] Furthermore, the transaction information storage module allocates an independent storage space for each payment information according to the received identification information, and writes the encrypted payment information into the allocated storage space; the transaction information storage module regularly backs up the stored payment information; the transaction information storage module continuously monitors the storage status of each payment information, and when it is determined that the payment information storage is completed, the transaction information storage module generates a trigger instruction;

[0193] The transaction information storage module includes the following functions:

[0194] 1. Build storage space

[0195] Receiving tokenized information:

[0196] The transaction information storage module first receives the identification information corresponding to the encrypted payment information transmitted from the transaction information encryption module; this identification information is generated by the request information receiving module of the encryption end according to the payment information, is unique, and can accurately identify each payment transaction;

[0197] Allocate independent storage space:

[0198] Based on the received identification information, an independent storage space is allocated for each payment information; the purpose of this is to ensure that each payment information can be stored separately to avoid mutual interference and confusion between different payment information; the independent storage space can be implemented by a specific record in the database, an independent file in the file system, or other forms of storage units;

[0199] Enter payment information:

[0200] Write the encrypted payment information into the allocated storage space; during the writing process, ensure the integrity and accuracy of the data to prevent data loss or damage; adopt a safe writing method, such as using checksum, data redundancy and other technologies to ensure the reliability of writing;

[0201] 2. Regular backup

[0202] Create a backup plan:

[0203] The transaction information storage module formulates a plan for regularly backing up payment information; the frequency of backup can be determined based on factors such as the importance of the system, the amount of data, and security requirements; for example, backup can be performed daily, weekly, or monthly;

[0204] To perform a backup operation:

[0205] Back up the stored payment information regularly according to the backup plan; backup can be full backup or incremental backup, depending on system requirements and resource constraints; full backup will back up all payment information, while incremental backup will only back up the parts that have changed since the last backup;

[0206] Storing backup data:

[0207] Store the backed-up data in a secure location, such as an external storage device, cloud storage service, or other reliable storage media; at the same time, encrypt and protect the backup data to prevent unauthorized access and tampering;

[0208] 3. Monitoring Storage Status

[0209] Continuous monitoring:

[0210] The transaction information storage module continuously monitors the storage status of each payment information; this includes monitoring the availability of storage space, data integrity, and whether there are abnormalities, etc. This can be achieved by regularly checking the status of the storage medium, data checksums, and other monitoring methods;

[0211] Confirm that the storage is complete:

[0212] When it is determined that the payment information has been stored, the transaction information storage module will perform a series of checks and verifications to ensure that the payment information has been correctly written to the storage space and can be reliably accessed; these checks may include data integrity checks, storage media status checks, and communication confirmations with other modules;

[0213] Generate trigger instructions:

[0214] Once it is confirmed that the payment information storage is complete, the transaction information storage module will generate a trigger instruction and send it to the transaction processing module; this trigger instruction can trigger the transaction processing module to perform subsequent operations, such as notifying the transaction end that the payment information is ready or starting the settlement process of the transaction;

[0215] After receiving the trigger instruction, the transaction processing module sends the identification information corresponding to the payment information to the transaction end;

[0216] Further, upon receiving the trigger instruction, the transaction processing module immediately initiates communication with the transaction end and sends the identification information extracted from the trigger instruction to the transaction end;

[0217] The following is a detailed description of the transaction processing module related functions:

[0218] 1. Receive trigger instructions

[0219] When the transaction information storage module determines that the payment information has been stored, it will generate a trigger instruction and send it to the transaction processing module; the transaction processing module is always in a listening state, and once it receives the trigger instruction, it will immediately start the subsequent processing flow; the receipt of the trigger instruction is the key signal for the transaction processing module to start action, which indicates that there is new payment information for further processing;

[0220] 2. Start communication with the trading terminal

[0221] Immediate response:

[0222] After receiving the trigger instruction, the transaction processing module will immediately start communicating with the transaction end; this instant response is crucial to ensure the efficiency of the payment process; there must be no delay to avoid the transaction end waiting too long and affecting the user experience;

[0223] Establishing a connection:

[0224] Through specific communication protocols and channels, the transaction processing module establishes a reliable connection with the transaction end; this connection can be a network connection, a message queue connection or other forms of communication to ensure that information can be transmitted accurately and quickly;

[0225] 3. Extract and send identification information

[0226] Extract token information from the trigger instruction:

[0227] The transaction processing module extracts the identification information of the corresponding payment information from the received trigger instruction; this identification information is unique and can accurately identify a specific payment transaction; the extraction process needs to be accurate to ensure that the information sent to the transaction end is correct;

[0228] Send identification information to the transaction end:

[0229] The extracted identification information is sent to the transaction end; the transaction end can request the encryption end to make a decryption rule based on the identification information so as to decrypt and process the encrypted payment information; the process of sending the identification information needs to ensure the integrity and security of the information to prevent the information from being tampered with or lost;

[0230] After receiving the payment completion information provided by the transaction end, the payment information docking module synchronizes the payment completion information to the user end;

[0231] Furthermore, the payment information docking module includes the following functions:

[0232] 1. Receive payment completion information

[0233] Monitor transaction end:

[0234] The payment information docking module continuously monitors the information from the transaction end; once the transaction end completes the payment operation, it generates payment completion information and sends it to the payment information docking module on the server side;

[0235] Accurately receive information:

[0236] When the payment completion information arrives, the payment information docking module accurately receives and identifies the information; the payment completion information may include key contents such as the transaction identification, payment status, and payment time;

[0237] 2. Synchronize payment completion information to the user end

[0238] Confirm client connection:

[0239] The payment information docking module determines the connection method with the user terminal in order to synchronize the payment completion information to the user terminal; this may involve interacting with the user terminal through a network connection, push notification or other communication channels.

[0240] In this embodiment, the transaction end includes a payment information analysis module and a payment determination module;

[0241] The payment information analysis module receives the identification information, sends a request to the encryption end according to the identification information, retrieves the decryption rules, and then sends the payment information retrieval instruction to the transaction processing module according to the decryption rules. The transaction processing module dispatches the corresponding payment information from the transaction information storage module according to the payment information retrieval instruction and transmits it back to the payment information analysis module. The payment information analysis module decrypts the payment information according to the decryption rules, reorganizes the payment information, and transmits it to the payment confirmation module.

[0242] Further, the payment information analysis module constructs a request to be sent to the encryption end according to the received identification information. After receiving the request from the payment information analysis module, the encryption end retrieves the matching decryption rule according to the identification information, and synchronizes the decryption rule to the payment information analysis module; according to the decryption rule, the payment information analysis module constructs a payment information retrieval instruction to be sent to the transaction processing module, and sends the constructed payment information retrieval instruction to the transaction processing module; after the transaction processing module dispatches the corresponding payment information from the transaction information storage module according to the payment information retrieval instruction, it transmits the payment information back to the payment information analysis module; using the obtained decryption rule, the payment information analysis module decrypts the received payment information; reorganizes the decrypted payment information into a format suitable for the payment determination module to perform payment operations, and then transmits the reorganized payment information to the payment determination module;

[0243] The payment information analysis module specifically includes the following steps:

[0244] 1. Receive identification information and construct a request

[0245] Receiving tokenized information:

[0246] The payment information analysis module first receives the identification information from the transaction end; this identification information is obtained by the transaction end during the payment processing process, and it uniquely identifies a specific payment transaction;

[0247] Construct a request to the encryption end:

[0248] Based on the received identification information, the payment information analysis module constructs a request to be sent to the encryption end; the purpose of this request is to obtain the decryption rules corresponding to the identification information from the encryption end; the construction of the request needs to accurately contain the identification information so that the encryption end can accurately identify and retrieve the corresponding decryption rules;

[0249] 2. Encryption-side response and synchronous decryption rules

[0250] The encryption end receives the request:

[0251] After receiving the request from the payment information analysis module, the encryption end processes the request according to the identification information in the request; the encryption end searches for a decryption rule that matches the identification information in its stored rules;

[0252] Retrieve and synchronize decryption rules:

[0253] Once a matching decryption rule is found, the encryption end synchronizes the decryption rule to the payment information analysis module; this process ensures that the payment information analysis module can obtain the correct decryption rule to decrypt the encrypted payment information;

[0254] 3. Construct payment information retrieval instructions

[0255] Construct instructions based on decryption rules:

[0256] The payment information analysis module constructs a payment information retrieval instruction to be sent to the transaction processing module according to the received decryption rule; the purpose of this instruction is to request the transaction processing module to dispatch the payment information corresponding to the current payment transaction from the transaction information storage module;

[0257] Send payment information retrieval instruction:

[0258] Send the constructed payment information retrieval instruction to the transaction processing module; the payment information analysis module ensures the accurate transmission of the instruction so that the transaction processing module can correctly understand and execute the instruction;

[0259] 4. Transaction Processing Module Dispatching Payment Information

[0260] Receive instructions and process:

[0261] After receiving the payment information retrieval instruction sent by the payment information analysis module, the transaction processing module processes the information according to the requirements in the instruction; it searches for the payment information corresponding to the instruction from the transaction information storage module;

[0262] Dispatch payment information and send back:

[0263] Once the corresponding payment information is found, the transaction processing module will pass the payment information back to the payment information analysis module; this process needs to ensure the integrity and accuracy of the payment information so that the payment information analysis module can perform subsequent processing;

[0264] 5. Payment Information Decryption and Reconstruction

[0265] Decrypt payment information:

[0266] The payment information analysis module uses the decryption rules obtained from the encryption end to decrypt the received payment information. The decryption process needs to be carried out strictly in accordance with the decryption rules to ensure that the payment information can be correctly restored to its original state.

[0267] Restructuring payment information:

[0268] Reorganize the decrypted payment information; the payment information may be stored or transmitted in a specific format during the encryption and decryption process, and it needs to be organized into a format suitable for the payment determination module to perform payment operations; the reorganization process may include rearranging, merging or splitting the fields of the payment information;

[0269] Transmit the reorganized payment information:

[0270] The reorganized payment information is transmitted to the payment confirmation module; the payment information analysis module ensures the accurate transmission of the payment information so that the payment confirmation module can perform the final payment operation based on the information;

[0271] The payment confirmation module performs payment operations according to the reorganized payment information. After the payment is completed, payment completion information is generated and transmitted to the server. Specifically, the following steps are included:

[0272] 1. Receive reorganized payment information

[0273] The payment confirmation module receives the reorganized payment information transmitted from the payment information analysis module; this payment information undergoes a series of processing, including decryption from the encrypted state and reorganization according to a specific format to ensure that the payment confirmation module can accurately understand and process this information; the payment confirmation module will perform preliminary verification on the received information to ensure the integrity and accuracy of the information;

[0274] 2. Make a payment

[0275] Analyze payment information:

[0276] Carefully analyze the reorganized payment information and extract key payment parameters, such as payment amount, payee information, payment method, etc. These parameters will determine the specific method and process of the payment operation;

[0277] Start the payment process:

[0278] Based on the parameters in the payment information, the payment confirmation module initiates the corresponding payment process; if it is an online payment, it may interact with the bank or payment gateway; if it is an offline payment, it may trigger a specific payment device or process;

[0279] Verify payment conditions:

[0280] During the payment process, the payment confirmation module will verify various payment conditions, such as whether the account balance is sufficient, whether the payment authority is available, etc. If any situation that does not meet the payment conditions is found, it will promptly provide feedback to the user and take corresponding measures;

[0281] Execute payment action:

[0282] Once the payment conditions are met, the payment confirmation module will perform the actual payment action; this may include sending payment instructions, confirming payment transactions, etc.; secure encryption technology and verification mechanisms will be used during the payment process to ensure the security and reliability of the payment;

[0283] 3. Generate payment completion information

[0284] Confirm payment result:

[0285] After the payment is completed, the payment confirmation module will confirm the payment result; this includes checking whether the payment is successful and whether the payment amount is correct. If there is a problem with the payment, appropriate remedial measures will be taken, such as re-initiating the payment or notifying the user to solve the problem.

[0286] Generate payment completion information:

[0287] According to the payment result, the payment confirmation module generates payment completion information; this information usually includes key contents such as payment transaction identification, payment status, payment time, payment amount, etc.; the payment completion information will be transmitted to the server side for subsequent processing and recording by the system;

[0288] 4. Transmit payment completion information to the server

[0289] Determine the transmission method:

[0290] The payment confirmation module determines the method of transmitting the payment completion information to the server; this may include transmission via a network connection, message queue or other communication channel;

[0291] Secure transmission:

[0292] Transmit payment completion information to the server in a secure manner; this may include using encrypted communications, digital signatures and other technologies to ensure that the information is not tampered with or leaked during transmission;

[0293] Waiting for server confirmation:

[0294] After transmitting the payment completion information, the payment confirmation module will wait for confirmation from the server; this can help ensure that the payment completion information has been correctly received and processed by the server, and can also be used to monitor the success of the information transmission.

[0295] In this embodiment, the payment end is a payment institution such as a bank.

[0296] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A network security payment system for sensitive information identification, characterized by: include: User end; the user end includes an account management module, a payment authentication module, a payment information sorting module, a rule synchronization module and a transaction information encryption module; The account management module manages the user's account information, including account registration, login, information update and authority control; The payment authentication module authenticates the user's payment behavior, including password verification, fingerprint recognition, and facial recognition authentication; The payment information sorting module sorts and categorizes the user's payment information; The rule synchronization module sends a request to the encryption end and receives encryption rules from the encryption end; The transaction information encryption module encrypts the user's payment information according to the encryption rules and transmits the encrypted payment information to the server; Encryption end; the encryption end includes a request information receiving module and an encryption rule module; The request information receiving module receives the request from the user end, generates identification information according to the payment information, and sends the identification information to the encryption rule module to generate encryption rules; the request information receiving module receives the request from the transaction end, retrieves the matching decryption rule in the encryption rule module according to the identification information, and then synchronizes it to the transaction end; The encryption rule module constructs encryption rules and decryption rules according to the identification information and stores them; Server side; the server side includes a transaction information storage module, a transaction processing module and a payment information docking module; The transaction information storage module constructs a storage space corresponding to each identification information to store the encrypted payment information. After the same payment information is stored, a trigger instruction is generated and sent to the transaction processing module; After receiving the trigger instruction, the transaction processing module sends the identification information corresponding to the payment information to the transaction end; After receiving the payment completion information provided by the transaction end, the payment information docking module synchronizes the payment completion information to the user end; Transaction end; the transaction end includes a payment information analysis module and a payment determination module; The payment information analysis module receives the identification information, sends a request to the encryption end according to the identification information, retrieves the decryption rule, and sends the payment information retrieval instruction to the transaction processing module according to the decryption rule. The transaction processing module dispatches the corresponding payment information from the transaction information storage module according to the payment information retrieval instruction and transmits it back to the payment information analysis module. The payment information analysis module decrypts the payment information according to the decryption rule, reorganizes the payment information, and transmits it to the payment determination module. The payment confirmation module performs a payment operation according to the reorganized payment information, and after the payment is completed, generates payment completion information and transmits it to the server side; When the payment information sorting module sorts and classifies the user's payment information, it first clears invalid or erroneous data in the payment information, classifies the payment information according to type, time, and user ID, and standardizes the format of the payment information; After receiving the request from the user, the request information receiving module extracts key elements from the payment information, including the transaction timestamp, user account number and transaction amount, combines the transaction timestamp, user account number and transaction amount, and generates a fixed-length string as identification information through a hash algorithm; the request information receiving module sends the generated identification information to the encryption rule module, and the encryption rule module constructs encryption rules according to the identification information after receiving the identification information; When generating encryption rules based on the identified information, the content and structure of the identified information are analyzed, and the byte division rules are determined based on the different elements in the identified information; the screening rules are randomly generated based on the number of segments of the identified information, and the segment encryption order is determined based on the screening order; the encryption algorithm is selected based on the transaction characteristics represented by the identified information; Design the order of sending payment information segments based on the transaction type and participants in the identification information; When the transaction information encryption module encrypts the user's payment information according to the encryption rule, the transaction information encryption module first obtains the encryption rule from the rule synchronization module, performs structural analysis on the user's transaction information, divides the transaction information into different byte segments according to the byte division rule determined in the encryption rule, encrypts the divided byte segments according to the segment encryption order determined in the encryption rule, and encrypts each byte segment according to the characteristics of the transaction information and the encryption algorithm specified in the encryption rule; combines the encrypted byte segments according to the sending order of the payment information segments designed in the encryption rule to form encrypted payment information, and transmits the encrypted payment information to the server end; The transaction information storage module allocates an independent storage space for each payment information according to the received identification information, and writes the encrypted payment information into the allocated storage space; The transaction information storage module regularly backs up the stored payment information; the transaction information storage module continuously monitors the storage status of each payment information, and when it is determined that the payment information storage is completed, the transaction information storage module generates a trigger instruction; After receiving the trigger instruction, the transaction processing module immediately starts communication with the transaction end and sends the identification information extracted from the trigger instruction to the transaction end; The payment information analysis module constructs a request to be sent to the encryption end according to the received identification information. After receiving the request from the payment information analysis module, the encryption end retrieves the matching decryption rule according to the identification information, and synchronizes the decryption rule to the payment information analysis module; according to the decryption rule, the payment information analysis module constructs a payment information retrieval instruction to be sent to the transaction processing module, and sends the constructed payment information retrieval instruction to the transaction processing module; after the transaction processing module dispatches the corresponding payment information from the transaction information storage module according to the payment information retrieval instruction, the payment information is transmitted back to the payment information analysis module; using the obtained decryption rule, the payment information analysis module decrypts the received payment information; The decrypted payment information is reorganized into a format suitable for the payment determination module to perform payment operations, and the reorganized payment information is then transmitted to the payment determination module.

Images