Data security linkage system and method for financial system and arbitration system

Abstract

The invention provides a data security linkage system and method for a financial system and an arbitration system. The system comprises a data unit which is deployed in the financial system; the data unit comprises a plurality of databases and files; the demand unit is deployed in the arbitration system; the demand unit is used for receiving data and a query request and issuing the query request to the data analysis unit; the encryption module is used for encrypting a received ciphertext, storing the encrypted ciphertext to the local, decrypting and desensitizing the ciphertext, and displaying the decrypted and desensitized ciphertext; the data analysis unit is deployed at a government affair cloud; the query module is used for querying financial data and files in a database according to the query request when it is detected that the query request has the query permission to obtain query data; encrypting the query data to obtain a ciphertext; and returning the ciphertext to the demand unit. According to the system, data linkage of a financial system and an arbitration system can be realized, and the efficiency of data acquisition and arbitration is improved. In addition, the financial data is transmitted after being encrypted by the special line, so that the security of data transmission is ensured.

Description

Technical Field

[0001] The present invention belongs to the technical field of application software, and in particular relates to a data security linkage system and method between a financial system and an arbitration system. Background Art

[0002] With the continuous innovation and development of the financial industry, financial products and financial services are emerging in an endless stream, and financial contract disputes are also increasing. When handling financial contract disputes, financial institutions need to collect data related to financial contract disputes. For example, in the case of disputes over credit card installment loans, arbitration institutions need to understand data such as basic loan information, loan contracts, and transaction information.

[0003] Since some financial data is highly confidential, staff are generally required to conduct targeted data collection. However, the amount of financial data is huge, and targeted data collection requires manual screening of financial data before submitting it to the arbitration institution. Data collection takes a long time and is inefficient. Summary of the invention

[0004] In view of the defects in the prior art, the present invention provides a data security linkage system and method for a financial system and an arbitration system, which improves the efficiency of data collection and the security of financial data transmission.

[0005] In a first aspect, a data security linkage system of a financial system and an arbitration system includes:

[0006] Data unit: deployed in the financial system; the data unit includes multiple databases and files; the database includes product database, service database, and business database; the product database includes financial data of financial products, the service database includes financial data of financial services, and the business database includes financial data of financial businesses; the files include electronic contracts and business-related files;

[0007] Demand unit: deployed in the arbitration system; the demand unit is used to receive data and query requests, and send the query requests to the data analysis unit; the demand unit is also used to encrypt the received ciphertext and store it locally, and decrypt and desensitize the ciphertext for display;

[0008] Data analysis unit: deployed in the government cloud; when it is detected that the query request has query authority, the data analysis unit is used to query the financial data and files in the database according to the query request to obtain the query data; encrypt the query data to obtain the ciphertext; and return the ciphertext to the request unit.

[0009] Further, querying the financial data and files in the database according to the query request specifically includes:

[0010] Set multiple query elements and corresponding levels;

[0011] Parsing the query request to obtain multiple query elements;

[0012] According to the levels of all query elements in the query request, the query elements are combined to obtain a plurality of element combinations;

[0013] The database and the file are queried respectively according to the element combination to obtain the financial data and files satisfying all the query elements in the element combination.

[0014] Furthermore, combining the query elements specifically includes:

[0015] When the query request includes a time extension instruction and a query element in the query request is a specified time, the query element is extended to before the specified time, the specified time, and after the specified time;

[0016] Combine according to the expanded query requirements.

[0017] Furthermore, encrypting the query data specifically includes:

[0018] Perform hash operation on the query data to obtain the master key;

[0019] Encrypt the query data using the master key to obtain ciphertext;

[0020] Encrypt the master key using the public key to obtain the secondary key;

[0021] The secondary key and ciphertext are sent to the requesting unit.

[0022] Furthermore, decrypting the ciphertext specifically includes:

[0023] Decrypt the secondary key using the private key to obtain the primary key;

[0024] The ciphertext is decrypted using the master key to obtain the query data.

[0025] In a second aspect, a data security linkage method between a financial system and an arbitration system is applicable to the system of the first aspect, and the method includes:

[0026] The demand unit receives the query request from the arbitration system and sends the query request to the data analysis unit. Yuan;

[0028] When the data analysis unit detects that the query request has the query authority, it queries the financial data and files in the database of the financial system according to the query request to obtain the query data;

[0029] The data analysis unit encrypts the query data to obtain a ciphertext;

[0030] The data analysis unit returns the ciphertext to the request unit;

[0031] The demand unit encrypts the received ciphertext and stores it locally, and then decrypts and desensitizes the ciphertext for display.

[0032] Further, querying the financial data and files in the database according to the query request specifically includes:

[0033] Set multiple query elements and corresponding levels;

[0034] Parsing the query request to obtain multiple query elements;

[0035] According to the levels of all query elements in the query request, the query elements are combined to obtain a plurality of element combinations;

[0036] The database and the file are queried respectively according to the element combination to obtain the financial data and files satisfying all the query elements in the element combination.

[0037] Furthermore, combining the query elements specifically includes:

[0038] When the query request includes a time extension instruction and a query element in the query request is a specified time, the query element is extended to before the specified time, the specified time, and after the specified time;

[0039] Combine according to the expanded query requirements.

[0040] Furthermore, encrypting the query data specifically includes:

[0041] Perform hash operation on the query data to obtain the master key;

[0042] Encrypt the query data using the master key to obtain ciphertext;

[0043] Encrypt the master key using the public key to obtain the secondary key;

[0044] The secondary key and ciphertext are sent to the requesting unit.

[0045] Furthermore, decrypting the ciphertext specifically includes:

[0046] Decrypt the secondary key using the private key to obtain the primary key;

[0047] The ciphertext is decrypted using the master key to obtain the query data.

[0048] It can be seen from the above technical solutions that the data security linkage system and method of the financial system and arbitration system provided by the present invention can realize the data linkage between the financial system and the arbitration system, so that the arbitration system can quickly collect financial data of the financial system, thereby improving the efficiency of data collection. In addition, the financial data is encrypted through a dedicated line before transmission, which ensures the security of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] In order to more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the following is a brief introduction to the drawings required for the specific embodiments or the description of the prior art. In all the drawings, similar elements or parts are generally identified by similar reference numerals. In the drawings, the elements or parts are not necessarily drawn according to the actual scale.

[0050] Figure 1 A module block diagram of a data security linkage system provided in an embodiment.

[0051] Figure 2 A flowchart of a data security linkage method provided in an embodiment.

[0052] Figure 3 A flowchart of a financial data query method provided in an embodiment.

[0053] Figure 4 A flowchart of a query element combination method provided in an embodiment.

[0054] Figure 5 A flowchart of a query data encryption method provided in an embodiment.

[0055] Figure 6 A flowchart of a query data decryption method provided in an embodiment. DETAILED DESCRIPTION

[0056] The embodiments of the technical solution of the present invention will be described in detail below in conjunction with the accompanying drawings. The following embodiments are only used to more clearly illustrate the technical solution of the present invention, and are therefore only used as examples, and the protection scope of the present invention cannot be limited thereto. It should be noted that, unless otherwise specified, the technical terms or scientific terms used in this application should be the common meanings understood by those skilled in the art to which the present invention belongs.

[0057] It should be understood that when used in this specification and the appended claims, the terms "include" and "comprises" indicate the presence of described features, integers, steps, operations, elements and / or components, but do not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or combinations thereof.

[0058] It should also be understood that the terms used in this specification of the present invention are only for the purpose of describing specific embodiments and are not intended to limit the present invention. As used in the specification of the present invention and the appended claims, unless the context clearly indicates otherwise, the singular forms "a", "an" and "the" are intended to include plural forms.

[0059] As used in this specification and the appended claims, the term "if" may be interpreted as "when" or "upon" or "in response to determining" or "in response to detecting," depending on the context. Similarly, the phrases "if it is determined" or "if [described condition or event] is detected" may be interpreted as meaning "upon determination" or "in response to determining" or "upon detection of [described condition or event]" or "in response to detecting [described condition or event]," depending on the context.

[0060] Example:

[0061] A data security linkage system between a financial system and an arbitration system, see Figure 1 ,include:

[0062] Data unit: deployed in the financial system; the data unit includes multiple databases and files; the database includes product database, service database, and business database; the product database includes financial data of financial products, the service database includes financial data of financial services, and the business database includes financial data of financial businesses; the files include electronic contracts and business-related files;

[0063] Demand unit: deployed in the arbitration system; the demand unit is used to receive data and query requests, and send the query requests to the data analysis unit; the demand unit is also used to encrypt the received ciphertext and store it locally, and decrypt and desensitize the ciphertext for display;

[0064] Data analysis unit: deployed in the government cloud; when it is detected that the query request has query authority, the data analysis unit is used to query the financial data in the database according to the query request to obtain the query data and files; encrypt the query data to obtain the ciphertext; and return the ciphertext to the request unit.

[0065] In this embodiment, the data unit is deployed in the financial system, connected to the original database and files of the financial system, and the data unit sets multiple databases according to categories: a product library for storing financial data in financial products, a service library for storing financial data in financial services, and a business library for storing financial data in financial services. Files include electronic contracts and business-related files. For example, financial products include loan products, bonds, funds, insurance products, futures contracts, foreign exchange, etc., financial services include investment and financial consulting, financial planning, risk management consulting, credit assessment, account management, payment and settlement services, etc., and financial services include bank loan business, stock exchange trading business, etc. Financial data includes basic loan data, overdue loan data, account transaction records, interest rate and interest records, credit rating records, investment income and loss records, insurance claims records, loan contract records, financial institution fee records, exchange rate records, etc. The initial classification of financial data is achieved by setting up multiple databases and files.

[0066] In this embodiment, the demand unit is deployed in the arbitration system, and the staff of the arbitration institution can initiate a query request through the demand unit, for example, to query the loan contract of a party. The demand unit sends the query request to the data analysis unit. The demand unit can set a query page, and multiple query element input boxes are set in the query page. The staff of the arbitration institution can enter specific information in one or more query element input boxes to obtain a query request.

[0067] In this embodiment, the data analysis unit is deployed on the government cloud. After receiving the query request, the data analysis unit first determines whether the operator corresponding to the query request has the query permission, for example, whether the user or device that initiates the query request has the query permission. If there is no query permission, the data analysis unit returns "no permission to view" to the demand unit. If there is query permission, the financial data and files in the database are queried according to the query request to obtain the query data. Since financial data has a certain confidentiality, the data analysis unit encrypts the query data to obtain the ciphertext and then transmits it to the demand unit. Finally, the demand unit encrypts the received ciphertext and stores it locally, decrypts and desensitizes the ciphertext, and displays it.

[0068] The data security linkage system can realize the data linkage between the financial system and the arbitration system, so that the arbitration system can quickly collect financial data from the financial system, improving the efficiency of data collection. In addition, the financial data is encrypted through a dedicated line before transmission, ensuring the security of data transmission.

[0069] Further, in some embodiments, querying the financial data and files in the database according to the query request specifically includes:

[0070] Set multiple query elements and corresponding levels;

[0071] Parsing the query request to obtain multiple query elements;

[0072] According to the levels of all query elements in the query request, the query elements are combined to obtain a plurality of element combinations;

[0073] The database and the file are queried respectively according to the element combination to obtain the financial data and files satisfying all the query elements in the element combination.

[0074] In this embodiment, the data analysis unit first sets a plurality of query elements for common situations of financial contract disputes, and each query element sets a corresponding level, for example, the query elements are query object, query time, query account, query category, etc., wherein the query category includes query transfer record, query credit, etc. The query level is represented by numbers, for example, three levels can be set, and 1, 2, and 3 are used to represent the highest level, the next level, and the lowest level, respectively. For example, the query object is the highest level, the query time is the next level, and the query account and query category are the lowest level.

[0075] In this embodiment, the data analysis unit also has a request splitting function. The data analysis unit parses the query request to obtain multiple query elements; according to the levels of all query elements in the query request, the query elements are combined to obtain multiple element combinations, and the database is queried according to the element combinations to obtain financial data that satisfies all query elements in the element combination. The system can split multiple query element combinations from the query request to obtain multiple query requirements. For example, the query elements parsed from the query request include: A enterprise, 2023, query account, and query credit, then the system splits the query elements into: A enterprise + 2023 + query account, A enterprise + 2023 + query credit. The logic of the combination is mainly to split the query elements of the same level, and extract a query element combination in different levels in turn to obtain an element combination. In this way, the data analysis unit can automatically split the query request into different query requirements, and query the corresponding financial data and files according to different query requirements, so that the user can also realize the extended query function of the query request without having to manually modify the query request many times.

[0076] Furthermore, in some embodiments, combining query elements specifically includes:

[0077] When the query request includes a time extension instruction and a query element in the query request is a specified time, the query element is extended to before the specified time, the specified time, and after the specified time;

[0078] Combine according to the expanded query requirements.

[0079] In this embodiment, the data analysis unit also has a time expansion function. When the staff of the arbitration institution is querying data, they also want to expand the query results in time. When initiating a query request, they can select the time expansion option in the query page and initiate a query request containing a time expansion instruction. For example, if a user queries data for 2023 and the time expansion option is selected, the data analysis unit can return the data for 2022 and 2024 to the demand unit at the same time. The data analysis unit combines according to the expanded query requirements, so that the user can be provided with data before and after the specified time for auxiliary analysis.

[0080] Furthermore, in some embodiments, encrypting the query data specifically includes:

[0081] Perform hash operation on the query data to obtain the master key;

[0082] Encrypt the query data using the master key to obtain ciphertext;

[0083] Encrypt the master key using the public key to obtain the secondary key;

[0084] The secondary key and ciphertext are sent to the requesting unit.

[0085] In this embodiment, the data analysis unit can use a preset hash function to perform a hash operation on the query data to be transmitted to obtain a master key, and the master key can be a message digest generated by the hash operation. Then the query data is encrypted using the master key to obtain a ciphertext. Then, in order to ensure that the master key can be transmitted over a normal channel, the master key is encrypted using a public key to obtain a secondary key, and then the secondary key and the ciphertext are simultaneously transmitted to the request unit through a normal channel, thereby ensuring the security and speed of encryption.

[0086] Furthermore, in some embodiments, decrypting the ciphertext specifically includes:

[0087] Decrypt the secondary key using the private key to obtain the primary key;

[0088] The ciphertext is decrypted using the master key to obtain the query data.

[0089] In this embodiment, after receiving the secondary key and ciphertext, the demand unit first uses the private key matching the public key to decrypt the secondary key to obtain the primary key. The private key is stored in the arbitration system. The primary key is then used to decrypt the ciphertext to obtain the query data, thus ensuring the secure transmission of the query data.

[0090] A data security linkage method between a financial system and an arbitration system, applicable to the above system, see Figure 2 , methods include:

[0091] The demand unit receives the query request from the arbitration system and sends the query request to the data analysis unit;

[0092] When the data analysis unit detects that the query request has the query authority, it queries the financial data and files in the database of the financial system according to the query request to obtain the query data;

[0093] The data analysis unit encrypts the query data to obtain a ciphertext;

[0094] The data analysis unit returns the ciphertext to the request unit;

[0095] The demand unit encrypts the received ciphertext and stores it locally, and then decrypts and desensitizes the ciphertext for display.

[0096] Further, in some embodiments, see Figure 3 , querying the financial data and files in the database according to the query request specifically includes:

[0097] Set multiple query elements and corresponding levels;

[0098] Parsing the query request to obtain multiple query elements;

[0099] According to the levels of all query elements in the query request, the query elements are combined to obtain a plurality of element combinations;

[0100] The database and the file are queried respectively according to the element combination to obtain the financial data and files satisfying all the query elements in the element combination.

[0101] Further, in some embodiments, see Figure 4 , the combination of query elements specifically includes:

[0102] When the query request includes a time extension instruction and a query element in the query request is a specified time, the query element is extended to before the specified time, the specified time, and after the specified time;

[0103] Combine according to the expanded query requirements.

[0104] Further, in some embodiments, see Figure 5 , encrypting the query data specifically includes:

[0105] Perform hash operation on the query data to obtain the master key;

[0106] Encrypt the query data using the master key to obtain ciphertext;

[0107] Encrypt the master key using the public key to obtain the secondary key;

[0108] The secondary key and ciphertext are sent to the requesting unit.

[0109] Further, in some embodiments, see Figure 6 , decrypting the ciphertext specifically includes:

[0110] Decrypt the secondary key using the private key to obtain the primary key;

[0111] The ciphertext is decrypted using the master key to obtain the query data.

[0112] The method provided in the embodiment of the present invention is briefly described. For matters not mentioned in the embodiment part, reference can be made to the corresponding contents in the aforementioned embodiment.

[0113] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein by equivalents. These modifications or replacements do not make the essence of the corresponding technical solutions deviate from the scope of the technical solutions of the embodiments of the present invention, and they should all be included in the scope of the claims and specification of the present invention.

Claims

1. A data security linkage system between a financial system and an arbitration system, characterized in that: include: Data unit: deployed in the financial system; the data unit includes multiple databases and files; The database includes a product database, a service database, and a business database; the product database includes financial data of financial products, the service database includes financial data of financial services, and the business database includes financial data of financial services; the files include electronic contracts and business-related files; Demand unit: deployed in the arbitration system; The demand unit is used to receive data and query requests, and send the query requests to the data analysis unit; The demand unit is also used to encrypt the received ciphertext and store it locally, and to decrypt and desensitize the ciphertext and then display it; Data analysis unit: deployed in the government cloud; The data analysis unit is used to query the financial data and files in the database according to the query request to obtain query data when it is detected that the query request has query authority; Encrypt the query data to obtain a ciphertext; Return the ciphertext to the requesting unit.

2. The data security linkage system between the financial system and the arbitration system according to claim 1, characterized in that: The querying of the financial data and files in the database according to the query request specifically includes: Set multiple query elements and corresponding levels; Parsing the query request to obtain multiple query elements; According to the levels of all query elements in the query request, the query elements are combined to obtain a plurality of element combinations; The database and the file are queried respectively according to the element combination to obtain the financial data and files satisfying all the query elements in the element combination.

3. The data security linkage system between the financial system and the arbitration system according to claim 1, characterized in that: The combining of query elements specifically includes: When the query request includes a time extension instruction and a query element in the query request is a specified time, the query element is extended to before the specified time, the specified time, and after the specified time; Combine according to the expanded query requirements.

4. The data security linkage system between the financial system and the arbitration system according to claim 1, characterized in that: The encrypting of the query data specifically includes: Performing a hash operation on the query data to obtain a master key; Encrypting the query data using the master key to obtain the ciphertext; Encrypting the master key using a public key to obtain a secondary key; The secondary key and the ciphertext are sent to the requesting unit.

5. The data security linkage system between the financial system and the arbitration system according to claim 4, characterized in that: Decrypting the ciphertext specifically includes: Decrypting the secondary key using a private key to obtain the primary key; The ciphertext is decrypted using the master key to obtain the query data.

6. A data security linkage method between a financial system and an arbitration system, characterized in that: Applicable to the system of any one of claims 1 to 5, the method comprising: The demand unit receives a query request from the arbitration system and sends the query request to the data analysis unit; When the data analysis unit detects that the query request has the query permission, the data analysis unit queries the financial data and files in the database of the financial system according to the query request to obtain the query data; The data analysis unit encrypts the query data to obtain a ciphertext; The data analysis unit returns the ciphertext to the request unit; The demand unit encrypts the received ciphertext and stores it locally, and then decrypts and desensitizes the ciphertext for display.

7. The data security linkage method between the financial system and the arbitration system according to claim 6, characterized in that: The querying of the financial data and files in the database according to the query request specifically includes: Set multiple query elements and corresponding levels; Parsing the query request to obtain multiple query elements; According to the levels of all query elements in the query request, the query elements are combined to obtain a plurality of element combinations; The database and the file are queried respectively according to the element combination to obtain the financial data and files satisfying all the query elements in the element combination.

8. The data security linkage method between the financial system and the arbitration system according to claim 6 is characterized in that: The combining of query elements specifically includes: When the query request includes a time extension instruction and a query element in the query request is a specified time, the query element is extended to before the specified time, the specified time, and after the specified time; Combine according to the expanded query requirements.

9. The data security linkage method between the financial system and the arbitration system according to claim 6, characterized in that: The encrypting of the query data specifically includes: Performing a hash operation on the query data to obtain a master key; Encrypting the query data using the master key to obtain the ciphertext; Encrypting the master key using a public key to obtain a secondary key; The secondary key and the ciphertext are sent to the requesting unit.

10. The data security linkage method between the financial system and the arbitration system according to claim 9, characterized in that: Decrypting the ciphertext specifically includes: Decrypting the secondary key using a private key to obtain the primary key; The ciphertext is decrypted using the master key to obtain the query data.

Images