Business travel management system, method and equipment and storage medium

Abstract

The invention belongs to the technical field of enterprise management, and relates to a business travel management system, method and device and a storage medium. According to the invention, high-quality supplier resources are effectively integrated, big data risk monitoring and whole-process data analysis are carried out, and a decision-making analysis report is provided for a management layer from approval to reservation to reimbursement to finally, so that a one-stop digital travel solution is provided, and the enterprise is effectively helped to improve the management efficiency; and the compliance risk in the travel process is avoided. A security data platform is set, identity authentication and service data protection between a travel terminal and a travel platform are realized, distributed encryption and centralized management of the travel platform and service application systems thereof are realized through a quantum encryption database unit, and structural data and non-structural data are protected through a data security plug-in. The method is suitable for application requirements of enterprises in various different scenes.

Description

Technical Field

[0001] The present invention relates to the field of enterprise management technology, and in particular to a management system, method, device and storage medium for business travel. Background Art

[0002] This section is intended to provide a background or context to the embodiments of the invention recited in the claims. No admission is made that the description herein is prior art by inclusion in this section.

[0003] With the development of enterprises and industries, more and more businesses are being carried out for external cooperation and exchanges between enterprises and industries. As a controllable cost of enterprises, travel expenses include not only explicit costs such as air tickets and hotels, but also internal management costs such as employee ticket reimbursement and financial reconciliation and audit, which are also invisible costs that cannot be ignored. At present, most corporate travel management is managed manually. Employees advance their own funds for business trips and then return to the company for reimbursement. The reimbursement process is cumbersome and prone to errors. The company's financial personnel and leaders at all levels need to review and approve the reimbursement accounts, invoices, amounts, etc. The management efficiency is extremely low, and the management cost accounts for a high proportion. Reasonable management can effectively help enterprises save up to 30% of expenses.

[0004] On the other hand, with the development of enterprises, the compliance control needs of enterprises are becoming increasingly urgent. Traditional manual management methods are not only prone to errors and inefficiency, but also prone to non-compliant operations, which is not conducive to the compliance management of enterprises. It can be seen that the improvement of enterprise management efficiency is imminent, and digital management has become an inevitable trend. Summary of the invention

[0005] The purpose of this invention is to provide a digital travel solution through big data risk monitoring and full-process data analysis, effectively helping companies improve management efficiency and avoid compliance risks during travel.

[0006] In order to achieve the above object, the technical solution adopted by the present invention is as follows.

[0007] On the one hand, the present invention provides a management system for business travel, including: a travel terminal for accessing a travel platform and handling business; a travel platform, including an approval subsystem for travel application and travel approval, and generating a travel budget plan, which is transmitted to a travel service subsystem; a travel service subsystem for providing travel alternative plans based on the above travel budget plan, and realizing plan query, order application, and order execution; a financial subsystem for executing the payment of the order application of the above travel service subsystem, and managing the payment information.

[0008] As a further technical solution, the above management system also includes a data security platform, and the above data security platform includes a terminal data transmission encryption unit and a quantum encryption database unit.

[0009] As a further technical solution, the terminal data transmission encryption unit includes: a software cryptographic module arranged on the travel terminal, providing key management and cryptographic operation services for the travel terminal; a cryptographic middleware arranged on the travel platform, providing key management and cryptographic operation services for the travel platform; and a quantum cryptographic service platform arranged on the public network, providing unified key management services and cryptographic equipment management services for the travel terminal and the travel platform, and providing key generation and distribution services through a quantum service cryptographic machine; the software cryptographic module and the cryptographic middleware use collaborative signatures; the keys of the terminal data transmission encryption unit include injection keys and session keys, the injection keys are used for network access authentication and session key protection of the quantum cryptographic service platform, and the session keys are used to protect the security of the business data of the travel terminal and the identity authentication of the travel terminal on the travel platform.

[0010] As a further technical solution, the above-mentioned quantum encryption database unit includes a data security plug-in, a data encryption and key management system, and a quantum service cipher machine. The above-mentioned data security plug-in is deployed on the node of the above-mentioned travel service subsystem. The above-mentioned data encryption and key management system adopts bypass deployment to uniformly issue encryption and decryption and desensitization strategies to the plug-in execution node, and is responsible for the unified management of the keys required for encryption and decryption, realizing the management of the entire life cycle of the keys, and ensuring the safe backup and recovery of the keys.

[0011] As a further technical solution, the above-mentioned data security plug-in includes AOE plug-in, TFE plug-in, and national encryption SDK. The above-mentioned AOE plug-in supports structured data encryption, and the above-mentioned TFE plug-in supports unstructured data encryption.

[0012] As a further technical solution, the travel service subsystem records travel information and transmits it to the financial subsystem. The travel information includes at least one of itinerary information, accommodation information, payment information, dining information, and shopping information.

[0013] On the other hand, the present invention also provides a method for managing business travel, which includes: a user accesses a travel platform through a travel terminal, submits a travel application through the approval subsystem of the travel platform, the approval subsystem generates a travel budget plan based on the identity of the traveler, and transmits it to the travel service subsystem, the travel service subsystem provides travel alternative plans based on the travel budget plan, the user selects a travel plan through the above travel alternative plans, and applies for an order, and the financial subsystem pays for the order, which is returned to the travel service subsystem for the user to execute the order.

[0014] As a further solution, the above method also implements travel information security management through a data security platform, and the above data security platform includes a terminal data transmission encryption unit and a quantum encryption database unit.

[0015] The terminal data transmission encryption unit is used to achieve identity authentication and business information security between the travel terminal and the travel platform, including a software cryptographic module installed in the travel terminal to provide key management and cryptographic operation services for the travel terminal; a cryptographic middleware installed in the travel platform to provide key management and cryptographic operation services for the travel platform; and a quantum cryptographic service platform installed in the public network to provide unified key management services and cryptographic equipment management services for the travel terminal and the travel platform, and provide key generation and distribution services through a quantum service cryptographic machine; the software cryptographic module and the cryptographic middleware use collaborative signatures; the keys of the terminal data transmission encryption unit include injection keys and session keys, the injection keys are used for network access authentication and session key protection of the quantum cryptographic service platform, and the session keys are used to protect the security of the business data of the travel terminal and the identity authentication of the travel terminal on the travel platform;

[0016] The above-mentioned quantum encryption database unit is used to provide distributed encryption and centralized security management for the above-mentioned travel platform, including a data security plug-in, a data encryption and key management system, and a quantum service cipher machine. The above-mentioned data security plug-in is deployed on the node of the above-mentioned travel service subsystem. The above-mentioned data encryption and key management system adopts bypass deployment to uniformly issue encryption and decryption and desensitization strategies to the plug-in execution node, and is responsible for the unified management of the keys required for encryption and decryption, realizes the management of the entire life cycle of the keys, and ensures the safe backup and recovery of the keys.

[0017] On the other hand, the present invention further provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the business travel management method when executing the computer program.

[0018] On the other hand, the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program for executing the above-mentioned business travel management method.

[0019] Compared with the prior art, the present invention has the following beneficial effects:

[0020] (1) The present invention effectively integrates high-quality supplier resources such as air tickets, hotels, cars, and catering, and provides a one-stop digital travel solution from approval to booking, to reimbursement, and finally to the provision of decision-making analysis reports to management through big data risk monitoring and full-process data analysis, which effectively helps companies improve management efficiency and avoid compliance risks during the travel process.

[0021] (2) Set up a secure data platform, use the terminal data transmission encryption unit to achieve identity authentication and business data protection between the travel terminal and the travel platform, use the quantum encryption database unit to achieve distributed encryption and centralized management of the travel platform and its various business application systems, and use the AOE plug-in to perform security protection on structured data, to achieve internal and external defense for operation and maintenance and for users, and at the same time, the application system can be free of development and transformation, data encryption can be implemented agilely, field-level protection can be achieved, and user habits will not be changed. The protection of non-structured data through the TFE plug-in is suitable for the application needs of various scenarios of enterprises.

[0022] (3) The encryption mechanism can adapt to complex enterprise application scenarios. The plaintext and ciphertext are distinguished by plaintext and ciphertext identification to ensure that the plaintext will not be decrypted twice and the ciphertext will not be encrypted twice, ensuring the reliability of encryption and decryption. It supports ciphertext query after data encryption and supports fuzzy query operations on the secret database. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of this application. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings:

[0024] Figure 1 It is a schematic diagram of a management system for business travel according to an embodiment of the present invention;

[0025] Figure 2 It is a schematic diagram of the design of the data transmission encryption unit of the management system terminal according to an embodiment of the present invention;

[0026] Figure 3 This is a schematic diagram of a key system of a terminal data transmission encryption unit of a management system according to an embodiment of the present invention;

[0027] Figure 4 This is a schematic diagram of a key flow chart of a terminal data transmission encryption unit of a management system according to an embodiment of the present invention;

[0028] Figure 5 This is a schematic diagram of an application scenario of a terminal data transmission encryption unit terminal access in an embodiment of the present invention;

[0029] Figure 6 This is a schematic diagram of an application scenario of a terminal data transmission encryption unit for secure data transmission according to an embodiment of the present invention;

[0030] Figure 7 This is a schematic diagram of an application scenario of a terminal data transmission encryption unit data security storage according to an embodiment of the present invention;

[0031] Figure 8 It is a schematic diagram of the overall design of the quantum encryption database unit of the management system according to an embodiment of the present invention. DETAILED DESCRIPTION

[0032] In order to make the purpose, technical scheme and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the embodiments and drawings. The schematic implementation modes and descriptions of the present invention are only used to explain the present invention and are not intended to limit the present invention. It should be noted that the present invention is already in the actual development and use stage.

[0033] In the description of the present invention, it should be understood that the terms "upper", "lower", "front", "back", "left", "right", etc., indicating the orientation or positional relationship, are based on the orientation or positional relationship shown in the drawings, and are only for the convenience of describing the present invention, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as limiting the present invention. In addition, the terms "first", "second", etc., of the present invention are only used to distinguish the description, and cannot be understood as indicating or implying relative importance.

[0034] It should be noted that when an element is referred to as being "fixed to" or "disposed on" another element, it may be directly on the other element or there may be an intermediate element at the same time. When an element is referred to as being "connected to" another element, it may be directly connected to the other element or there may be an intermediate element at the same time. When an element is referred to as being "provided with" another element, it may be provided on the surface or inside of the element.

[0035] Unless explicitly stated otherwise, throughout the specification and claims, the term “comprise” or variations such as “include” or “comprising”, etc., will be understood to include the stated elements or components but not to exclude other elements or components.

[0036] As a controllable cost of the enterprise, travel expenses include not only explicit costs such as air tickets and hotels, but also internal management costs such as employee ticket reimbursement and financial reconciliation and audit, which are also invisible costs that cannot be ignored. For employees, business trips are more concerned about whether they can get a one-stop full-product booking service, smooth booking, advance payment and reimbursement during the booking process, and various consulting services during the business trip; for managers, the main goals of travel control are cost control, approval control, and travel data analysis; for enterprises, after they have developed to a certain stage, they will establish a control mechanism suitable for their own enterprises. At the same time, in order to achieve a closed data loop, they will also have their own internal OA, HR, finance and other management systems to meet their own management needs. The internal management system should realize data interoperability and interconnection, rather than independent data islands.

[0037] The present invention aims to solve the problems of low efficiency and proneness to errors in traditional manual management. By means of big data risk monitoring and full-process data analysis, the present invention provides a digital travel solution, a travel management system and method, which effectively helps enterprises improve management efficiency and avoid compliance risks during travel.

[0038] It is worth noting that the business travel management system of the present invention has completed preliminary research and development and is in the process of product optimization.

[0039] Optionally, as an implementation method, a travel management system, such as Figure 1 As shown, including:

[0040] The travel terminal is used to access the travel platform and handle business; optionally, the travel terminal can be a PC web page, a mobile APP (Android version and Apple version), or a DingTalk terminal, and these terminals can all be connected to the travel platform. In this embodiment, the mobile phone terminal APP is preferably used to access the travel platform. Mobile phones are now a must-have for people going out. This method is suitable for people to handle related business when they are on business trips. They do not need to carry other equipment, which is convenient and simple.

[0041] The travel platform includes an approval subsystem, a travel service subsystem and a financial subsystem. The approval subsystem is used for travel applications and travel approvals, and generates travel budget plans and transmits them to the travel service subsystem. For example, a user enters the travel platform through a mobile phone APP and submits a travel application through the approval subsystem of the travel platform. The approval subsystem of this application can submit a travel application through an intelligent voice assistant, especially for urgently arranged business trips, which is convenient and time-saving, and you can apply for immediate departure. The approval subsystem generates a travel budget plan based on the identity of the traveler. For example, ordinary employees, deputy ministerial employees, senior executives and other employees of different levels have different travel expense standards. According to the user's position and level information stored in the system, the corresponding travel budget plan is automatically matched, such as the upper limit of transportation price, the upper limit of accommodation price, the upper limit of catering price, etc. In addition, the system can also match the same-sex users at the same or nearby locations during the application period according to the user's gender and recommend them to travel together or live together for the user to choose. The approval subsystem transmits the travel budget plan to the travel service subsystem. The travel service subsystem provides travel alternatives based on the travel budget plan. The above travel alternatives include transportation, accommodation, catering, shopping, subsidy, etc. The above subsidy information can also be set in the financial subsystem. The user selects a travel plan through the above travel alternatives and applies for an order. The financial subsystem pays for the order and returns it to the travel service subsystem for the user to execute the order. The travel service subsystem effectively integrates high-quality supplier resources such as air tickets, hotels, and cars. Through professional services, from approval to booking, to reimbursement, and finally to the decision-making analysis report provided to the management, it helps companies implement the best travel services.

[0042] The travel service subsystem intelligently recommends various high-quality resources through big data, which specifically includes various application links, including travel links, such as ticket inquiries and reservations of various airlines, inquiries and reservations of various hotels, etc. These ticket and hotel information are pushed after analysis and calculation based on the above travel budget plan, and the information that does not meet the conditions is filtered out, that is, the prices and locations of these alternative plans are compatible with the user's travel information and budget plan. After the user selects a suitable travel plan, he places an order to apply for the order, and then the system automatically jumps to the financial subsystem, sends the order payment link to the financial subsystem, and the financial department receives the link and completes the order payment. There is no need for employees to advance payment throughout the process, and the financial department centrally pays and issues invoices. After the financial subsystem completes the order payment, it returns to the travel service subsystem, and the user executes the order according to the information in the order, that is, taking the corresponding flight and checking in the hotel and canceling the reservation after leaving the hotel. The travel service subsystem can meet the digital travel functions such as travel expense sharing, flight dynamic inquiry, online check-in seat selection, round-trip booking, AI voice interaction, fully automatic clearing, flight change reminders, fully automatic refund and change, hotel mixed payment, EBK order confirmation, etc.

[0043] In some embodiments, the present invention has an intelligent itinerary function, which can clearly present the time scale through intelligent management of itinerary plans, which is convenient and efficient. Specifically, the travel service subsystem will back up the user's travel information records and transmit them to the financial subsystem. The financial department can understand the employee's travel schedule and various expenses and invoice information during the travel process at a glance based on the travel information. It is clear and transparent, and can also generate travel data reports, provide multi-dimensional and multi-angle analysis of travel data, and provide one-stop decision support for management. The above travel information includes itinerary information, accommodation information, payment information, catering information, shopping information, etc. The reimbursement of expenses after the trip is also more concise, supporting voice interaction, online uploading, OCR automatic recognition, free ticketing, and more efficient.

[0044] In addition, the present invention can also be implemented through the travel service subsystem during travel, emergency support services: provide emergency warnings and support, smart inquiries: voice inquiries on business trip applications, airline check-ins, luggage status, travel weather, etc.; respond at any time throughout the business trip; delayed arrival at the store: one-click update of the arrival time, free control of the itinerary; travel reminders: epidemic policies, global territorial policy reminders, etc., timely warnings, safe travel and other value-added services.

[0045] Of course, the business travel management system of the present invention is connected to external high-quality supplier resources such as air tickets, hotels, and cars. Information security is of vital importance. How to effectively isolate internal enterprise information from external supplier information, and protect all data on employee terminals and travel platforms at different security levels, is one of the problems to be solved by the present invention.

[0046] In some embodiments, the management system further includes a data security platform, and the data security platform includes a terminal data transmission encryption unit and a quantum encryption database unit. In some embodiments, the terminal data transmission encryption unit includes a software cryptographic module provided on a mobile phone terminal to provide key management and cryptographic computing services for the mobile phone terminal; and a cryptographic middleware provided on the travel platform to provide key management and cryptographic computing services for the travel platform; and a quantum cryptographic service platform provided on the public network to provide unified key management services and cryptographic device management services for the travel terminal and the travel platform, and to provide key generation and distribution services through a quantum service cryptographic machine, such as Figure 2 shown.

[0047] The software cryptographic module and cryptographic middleware use collaborative signature technology to protect terminal key security without the need for additional hardware, in compliance with national cryptographic standards.

[0048] The key system design of the terminal data transmission encryption unit is as follows: Figure 3As shown: The keys used by travel terminals and travel platforms are divided into charging keys and session keys. Charging keys are generated and issued when the terminal registers with the cryptographic service platform, and are used for network authentication of the cryptographic service platform and encryption protection of session keys. Session keys are related to the business, and the terminal applies to the cryptographic service platform on demand to protect terminal data security and terminal identity authentication. The software cryptographic module and cryptographic middleware implement local key management functions and provide cryptographic operation interfaces. The keys are "available but invisible" to the application. When the keys are stored locally, a collaborative signature algorithm is used to protect the security of key storage. The software cryptographic module can only use the session keys used by this device. The cryptographic middleware has special permissions and can apply for all session keys.

[0049] Specific key process, such as Figure 4 :

[0050] 1) Before applying for key charging, a collaborative key is generated for the terminal. The collaborative key is bound to the terminal hardware information to prevent it from being used by illegal devices.

[0051] 2) When the charging key is issued, it is encapsulated as a digital envelope using the collaborative key to protect the transmission and storage security of the charging key.

[0052] 3) The key is used for network authentication of the cryptographic service platform and encryption protection of session keys.

[0053] 4) When applying for a session key, it is encrypted and protected by the injection key.

[0054] 5) Session keys are requested on demand.

[0055] 6) The terminal software cryptographic module provides a cryptographic operation interface, and the business APP uses the session key ID to complete the operation.

[0056] In order to make it easier to understand the above key system and key process, the following introduces several scenarios. Scenario 1 is as follows. Figure 5 As shown in Figure 2, when the terminal securely accesses, the identity credential data is generated through the session key. The identity authentication protocol complies with the GB15843.2 entity authentication standard based on symmetric keys. When generating identity credentials, time data can be added to improve resistance to replay attacks. Figure 6 As shown in the figure, when data is securely transmitted, the terminal completes the session key application and data encryption and decryption operations through the software cryptographic module; the platform calls the cryptographic middleware to complete the session key application and data encryption and decryption operations; the session key can be reused (key management process related to the business); for data classification and classification, you can choose to encrypt and verify the integrity of the data; for the platform sending data to the terminal, the process is similar, the platform calls the cryptographic middleware for encryption, and the terminal calls the software cryptographic module for decryption. Scenario 3 is as follows Figure 7As shown, when performing data security storage, the software password module supports providing the terminal with local key data encryption storage function. It should be noted that the storage key needs to be kept for a long time; the terminal executes the session key application interface and saves the session key ID, and the session key is used as the storage key; when data needs to be decrypted, the software password module decryption interface is called to obtain the data plaintext; when ciphertext data needs to be written, the encryption interface is called to obtain the data ciphertext, and the terminal writes the ciphertext to the file.

[0057] As a further technical solution, the quantum encryption database unit includes a data security plug-in, a data encryption and key management system, and a quantum service cryptographic machine, thereby providing a fast, agile and effective data security protection solution to achieve "distributed encryption and centralized control". Figure 8 Specifically, the data security plug-in includes AOE plug-in, TFE plug-in, and national encryption SDK. The data security plug-in is deployed on the node of the travel service subsystem. The data encryption and key management system adopts bypass deployment to uniformly issue encryption and decryption and desensitization strategies to the plug-in execution node, responsible for the unified management of the keys required for encryption and decryption, realize the management of the entire life cycle of the key, and ensure the safe backup and recovery of the key.

[0058] It is worth noting that among the above data security plug-ins, different types of plug-ins support encryption of different types of data. The AOE plug-in supports encryption of structured data, thereby achieving internal and external defense. For operation and maintenance, it can prevent data access threats outside the application. In terms of storage encryption, it can also prevent illegal intrusions such as internal DBAs, outsourcing, and hackers. For users, it can prevent data access threats within the application. For example, through dynamic desensitization, it can prevent business personnel from unauthorized access; through risk monitoring, it can monitor business personnel's risky operations; through audit tracing, it can trace business personnel's data leakage. In short, the AOE plug-in can realize the application system without development and transformation, agile implementation of data encryption, and field-level protection without changing user habits. On the other hand, the TFE plug-in can realize unstructured data encryption and is compatible with Linux / Wi n's document-level protection.

[0059] The key management of the above-mentioned quantum encryption database unit combines the root key, module key and working key. The key management device supports high-availability modes such as dual-machine hot standby, two-site three-center, etc. The root key plain text does not come out of the password card, the module key plain text does not come out of the key management device, and the working key is safely distributed from the platform to the data control point module. The module can cache the working key and run independently. The platform does not need to be online in real time to achieve real-time offline decryption. Under a conservative strategy, the module only needs to update the key from the platform after restarting the application service. The quantum encryption database cryptographic algorithm standard of the present invention has a reliable key management mechanism, which can achieve that as long as the ciphertext data is still there, it can be decrypted; in the normal state, it supports application system decryption and supports direct decryption by DBA operation and maintenance tools; in emergency situations, it supports flushing the library to restore the plaintext and supports real-time decryption of the plaintext to the spare library; in extreme cases, the operation and maintenance tools or programs can be used to cover the bottom decryption. In addition, this embodiment also ensures the reliability of encryption and decryption through the plaintext identification, because in the process of the encryption function going online, it is inevitable that the plaintext and ciphertext will be mixed. At this time, the plaintext and ciphertext can be distinguished by the plaintext identification. That is, after the data is encrypted, a ciphertext identifier will be added to the ciphertext to ensure that the plaintext will not be decrypted twice and the ciphertext will not be encrypted twice. This embodiment also supports ciphertext queries after data encryption and supports fuzzy query operations on encrypted databases. The encrypted field is processed specifically. The encrypted field is first disassembled according to the rules, and then the disassembled parts are encrypted separately, and then the ciphertexts of each part are combined into one field (the disassembly rules can be customized by the application and configured through policy management).

[0060] On the other hand, the present invention also provides a management method for the above-mentioned business travel management system, including: the user accesses the travel platform through the travel terminal, submits the travel application through the approval subsystem of the travel platform, the approval subsystem generates a travel budget plan according to the identity of the travel personnel, and transmits it to the travel service subsystem, the travel service subsystem provides travel alternative plans according to the travel budget plan, the user selects the travel plan through the above-mentioned travel alternative plans, and applies for an order, and the financial subsystem makes the order payment, which is returned to the travel service subsystem for the user to execute the order.

[0061] The processes and information security management content of the above management methods also follow the relevant introduction of the above management system and will not be repeated here.

[0062] On the other hand, an embodiment of the present invention further provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the travel management method when executing the computer program.

[0063] On the other hand, an embodiment of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program for executing the above-mentioned business travel management method.

[0064] Through the above description of the implementation method, the technicians in the field can clearly understand that the present invention can be implemented by software and necessary general hardware, and of course it can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the management method technical solution of the present invention is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as a computer floppy disk, read-only memory (ROM), random access memory (RAM), flash memory (FLASH), hard disk or optical disk, etc., including several instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to execute the above methods of each embodiment of the present invention. The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. The non-relational database may include a distributed database based on blockchain, etc., but is not limited thereto. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but is not limited thereto.

[0065] It is worth noting that in the embodiments of the above-mentioned management system and computer equipment, the various units and modules included are only divided according to functional logic, but are not limited to the above-mentioned division, as long as the corresponding functions can be achieved; in addition, the specific names of the functional units are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of the present invention.

[0066] In the above embodiments of the present application, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.

[0067] It should be noted that, for the above-mentioned embodiments, for the sake of simplicity, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the described order of actions, because according to the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present application.

[0068] The above specific implementation methods further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above are only specific implementation methods of the present invention and are not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A travel management system, characterized in that: include: Travel terminals, used to access travel platforms and handle business; and Travel platforms, including: The approval subsystem is used for travel application and travel approval, and generates travel budget plans and transmits them to the travel service subsystem; The travel service subsystem is used to provide travel alternative plans based on the travel budget plan, and realize plan query, order application, and order execution; The financial subsystem is used to execute the payment of the order application of the travel service subsystem and manage the payment information.

2. A travel management system according to claim 1, characterized in that: It also includes a data security platform, which includes a terminal data transmission encryption unit and a quantum encryption database unit.

3. A business travel management system according to claim 2, characterized in that: The terminal data transmission encryption unit comprises: A software cryptographic module provided in the travel terminal, providing key management and cryptographic operation services for the travel terminal; A cryptographic middleware installed in the travel platform, providing key management and cryptographic computing services for the travel platform; and A quantum cryptography service platform set up on the public network provides unified key management services and cryptographic equipment management services for the travel terminal and the travel platform, and provides key generation and distribution services through a quantum service cryptographic machine; The software cryptographic module and the cryptographic middleware use collaborative signatures; The keys of the terminal data transmission encryption unit include injection keys and session keys. The injection keys are used for network authentication and session key protection of the quantum cryptography service platform, and the session keys are used to protect the security of travel terminal business data and identity authentication of the travel terminal on the travel platform.

4. A business travel management system according to claim 2 or 3, characterized in that: The quantum encryption database unit includes a data security plug-in, a data encryption and key management system, and a quantum service cipher machine. The data security plug-in is deployed on the node of the travel service subsystem. The data encryption and key management system adopts bypass deployment to uniformly issue encryption, decryption and desensitization strategies to the plug-in execution node, and is responsible for the unified management of the keys required for encryption and decryption, realizing the management of the entire life cycle of the keys, and ensuring the safe backup and recovery of the keys.

5. A business travel management system according to claim 4, characterized in that: The data security plug-in includes an AOE plug-in, a TFE plug-in, and a national encryption SDK. The AOE plug-in supports structured data encryption, and the TFE plug-in supports unstructured data encryption.

6. A business travel management system according to claim 5, characterized in that: The travel service subsystem records travel information and transmits it to the financial subsystem, wherein the travel information includes at least one of itinerary information, accommodation information, payment information, dining information, and shopping information.

7. A method for managing business travel, characterized in that: include: The user accesses the travel platform through the travel terminal and submits the travel application through the approval subsystem of the travel platform. The approval subsystem generates a travel budget plan based on the identity of the travelers and transmits it to the travel service subsystem. The travel service subsystem provides travel alternatives based on the travel budget plan. The user selects a travel plan through the travel alternatives and applies for an order. The financial subsystem makes the order payment and returns it to the travel service subsystem for the user to execute the order.

8. A business travel management method according to claim 7, characterized in that: The method also implements travel information security management through a data security platform, wherein the data security platform includes a terminal data transmission encryption unit and a quantum encryption database unit. The terminal data transmission encryption unit is used to achieve identity authentication and business information security between the travel terminal and the travel platform, including a software cryptographic module set on the travel terminal to provide key management and cryptographic operation services for the travel terminal; a cryptographic middleware set on the travel platform to provide key management and cryptographic operation services for the travel platform; and a quantum cryptographic service platform set on the public network to provide unified key management services and cryptographic device management services for the travel terminal and the travel platform, and provide key generation and distribution services through a quantum service cryptographic machine; the software cryptographic module and the cryptographic middleware use collaborative signatures; the keys of the terminal data transmission encryption unit include injection keys and session keys, the injection keys are used for network access authentication and session key protection of the quantum cryptographic service platform, and the session keys are used to protect the security of the business data of the travel terminal and the identity authentication of the travel terminal on the travel platform; The quantum encryption database unit is used to provide distributed encryption and centralized security management for the travel platform, including a data security plug-in, a data encryption and key management system, and a quantum service cipher machine. The data security plug-in is deployed on the node of the travel service subsystem. The data encryption and key management system adopts bypass deployment to uniformly issue encryption and decryption and desensitization strategies to the plug-in execution node, and is responsible for the unified management of the keys required for encryption and decryption, realizing the management of the entire life cycle of the keys, and ensuring the safe backup and recovery of the keys.

9. A computer device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the business travel management method described in claim 7 or 8 is implemented.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program for executing the business travel management method according to claim 7 or 8.

Images