Salary payment method and related equipment

The method encrypts and securely processes salary information using hash functions to prevent tampering and leakage, enhancing security in salary payment systems.

CN119205007APending Publication Date: 2024-12-27CHINA CONSTRUCTION BANK +1
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202411243308.9
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-09-05
Publication Date
2024-12-27

AI Technical Summary

Technical Problem

The security of salary information transmission between human resources and online banking systems is low, prone to tampering and leakage during the salary payment process.

Method used

A method involving encoding and encrypting salary information, using cryptographic hash functions to generate coded information, and decrypting it securely within a salary review system to ensure only authorized personnel can access and approve salary payments.

Benefits of technology

Enhances the security of salary information transmission by preventing unauthorized access and tampering, ensuring secure and accurate salary payments without the need for additional hardware like USB shields.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119205007A_ABST
    Figure CN119205007A_ABST
Patent Text Reader

Abstract

The invention discloses a salary payment method and related equipment, which are applied to the field of big data processing, and the method comprises the following steps: receiving an encrypted first salary file sent by a salary accounting system, and decrypting the first salary file to obtain a decrypted second salary file; obtaining first coded information and second coded information in the second salary file, and decoding the first coded information to obtain first decoded information; processing the second coding information to obtain a second hash value; in response to matching of the second hash value and the first decoding information, decoding the second encoding information to obtain salary information, and displaying the salary information in an approval interface of an audit account; and if the examination and approval completion operation for the salary information in the examination and approval interface is detected, sending the salary information to a salary sending mechanism. According to the invention, the transmission security of the salary information is improved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application belongs to the field of big data processing, and in particular, relates to a salary payment method and related equipment. Background Art

[0002] In the salary payment system, the personnel position and the financial position are generally responsible for it. The personnel position calculates the salary file in the human resources system, and then transmits the salary file to the online banking system for review by the financial position.

[0003] The human resources system and the online banking system are two different systems. In the process of transmitting salary files, salary tampering and salary leakage may occur, which means that the security of salary information transmission is low. Summary of the invention

[0004] The embodiments of the present application provide a salary payment method and related equipment, which are used to solve the problem of low security in salary information transmission.

[0005] In a first aspect, an embodiment of the present application provides a salary payment method, which is applied to a salary review system. The salary payment method includes:

[0006] Receiving an encrypted first salary file sent by a salary accounting system, and decrypting the first salary file to obtain a decrypted second salary file;

[0007] Obtaining first coded information and second coded information from the second salary file, and decoding the first coded information to obtain first decoded information, wherein the first decoded information is used to indicate a first hash value corresponding to the salary information, and the second coded information is used to indicate the salary information in the second salary file;

[0008] Processing the second encoded information to obtain a second hash value;

[0009] In response to the second hash value matching the first decoded information, decoding the second encoded information to obtain salary information, and displaying the salary information in an approval interface of the audit account;

[0010] If it is detected that the approval operation for the salary information in the approval interface is completed, the salary information is sent to a salary sending agency so that the salary payment agency can pay the salary according to the salary information.

[0011] In some possible implementations, the step of decrypting the encrypted salary file to obtain a decrypted second salary file includes:

[0012] Obtaining the document preparation mode associated with the salary accounting system;

[0013] In response to the document making mode being the pre-made document mode, storing the first salary file in a first secure storage area;

[0014] If an extraction operation of the file distribution account on the first secure storage area is detected, the first salary file is extracted from the first secure storage area, and the first salary file is displayed in a file distribution interface corresponding to the file distribution account, and the file distribution account has the authority to extract files from the first secure storage area;

[0015] In response to a file sending operation on the first salary file in the file sending interface, storing the first salary file in a second secure storage area;

[0016] If it is detected that the audit account performs an extraction operation on the first salary file in the second secure storage area, the first salary file is extracted from the second secure storage area, and the first salary file is decrypted to obtain a decrypted second salary file, and the audit account has the authority to extract files from the second secure storage area.

[0017] In some possible implementations, after the step of determining whether the salary accounting system sets a salary security protection requirement according to the enterprise information, the method further includes:

[0018] In response to the document making mode being the document making mode, storing the first salary file in a second secure storage area;

[0019] If it is detected that the audit account performs an extraction operation on the first salary file in the second secure storage area, the first salary file is extracted from the second secure storage area, and the first salary file is decrypted to obtain a decrypted second salary file.

[0020] In some possible implementations, the step of obtaining the document preparation mode associated with the salary accounting system includes:

[0021] Obtaining a user ID of a person who prepares a salary file in the salary accounting system;

[0022] In response to the user identification being stored in the salary audit system, determining that the salary accounting system is associated with a document-made mode;

[0023] In response to the user identification not being stored in the salary audit system, determining that the salary accounting system is associated with an advance payment order mode.

[0024] In some possible implementations, the step of decrypting the first salary file to obtain a decrypted second salary file includes:

[0025] Receiving a user password sent by the salary accounting system;

[0026] Determining the user key according to the user password;

[0027] The first salary file is decrypted using the user key to obtain a second salary file.

[0028] In some possible implementations, the step of determining the user key according to the user password includes:

[0029] Processing the user password to obtain a third hash value;

[0030] The character at a preset position in the third hash value is obtained to obtain a user key.

[0031] In some possible implementations, the step of decrypting the first salary file to obtain a decrypted second salary file includes:

[0032] Controlling the protection software of the salary audit system to perform security verification on the first salary file;

[0033] In response to the first salary file passing the security check, the first salary file is decrypted to obtain a decrypted second salary file.

[0034] In a second aspect, an embodiment of the present application provides a salary payment method, which is applied to a salary accounting system. The salary payment method includes:

[0035] Obtaining salary information, and processing the salary information to obtain a first hash value;

[0036] Encoding the first hash value to obtain first coded information, and encoding the salary information to obtain second coded information;

[0037] The second salary file composed of the first coding information and the second coding information is encrypted to obtain an encrypted first salary file, and the first salary file is sent to a salary audit system.

[0038] In some possible implementations, the step of encrypting the salary file formed by the first coded information and the second coded information includes:

[0039] Obtaining a user password, and processing the user password to obtain a third hash value;

[0040] Obtaining a character at a preset position in the third hash value to obtain a user key;

[0041] Using the user key to encrypt a second salary file consisting of the first coded information and the second coded information;

[0042] The step of sending the first salary file to the salary review system includes:

[0043] The first salary file and the user password are sent to the salary review system.

[0044] In some possible implementations, the step of sending the first salary file to a salary review system includes:

[0045] Controlling the protection software in the salary accounting system to perform a security check on the first salary file;

[0046] In response to the first salary file passing the security check, the first salary file is sent to a salary review system.

[0047] In a third aspect, an embodiment of the present application provides a salary review system, which is characterized by comprising:

[0048] A receiving module, used for receiving an encrypted first salary file sent by a salary accounting system, and decrypting the first salary file to obtain a decrypted second salary file;

[0049] a first acquisition module, configured to acquire first coded information and second coded information from the second salary file, and decode the first coded information to obtain first decoded information, wherein the first decoded information is used to indicate a first hash value corresponding to the salary information, and the second coded information is used to indicate the salary information in the second salary file;

[0050] A processing module, configured to process the second coded information to obtain a second hash value;

[0051] a decoding module, configured to decode the second coded information to obtain salary information in response to the second hash value matching the first decoded information, and display the salary information in an approval interface of the audit account;

[0052] The sending module is used to send the salary information to a salary sending agency if it is detected that the approval operation for the salary information in the approval interface is completed, so that the salary payment agency can pay the salary according to the salary information.

[0053] In a fourth aspect, an embodiment of the present application provides a salary accounting system, including:

[0054] A second acquisition module, used to acquire salary information and process the salary information to obtain a first hash value;

[0055] An encoding module, configured to encode the first hash value to obtain first encoding information, and to encode the salary information to obtain second encoding information;

[0056] The encryption module is used to encrypt the second salary file composed of the first coding information and the second coding information to obtain the encrypted first salary file, and send the first salary file to the salary audit system.

[0057] In a fifth aspect, an embodiment of the present application provides a salary payment device, which includes: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, the salary payment method as described above is implemented.

[0058] In a sixth aspect, an embodiment of the present application provides a computer-readable storage medium, characterized in that computer program instructions are stored on the computer-readable storage medium, and when the computer program instructions are executed by a processor, the salary payment method as described above is implemented.

[0059] In a seventh aspect, an embodiment of the present application provides a computer program product. When instructions in the computer program product are executed by a processor of an electronic device, the electronic device is enabled to execute the salary payment method as described above.

[0060] The salary payment method and related equipment of the embodiment of the present application receive the encrypted first salary file sent by the salary accounting system, decrypt the first salary file to obtain the decrypted second salary file, obtain the first coding information and the second coding information in the second salary file, decode the first coding information to obtain the first decoding information, process the second coding information to obtain the second hash value, if the second hash value matches the first hash value indicated by the first decoding information, decode the second coding information to obtain the salary information, and display the salary information in the approval interface of the audit account, when it is detected that the approval operation for the salary information in the approval interface is completed, the salary information is sent to the salary payment agency for salary payment. In the present application, the salary information sent by the salary accounting system is encoded, and the decoded salary information is encrypted, that is, in the process of the salary accounting system transmitting the salary information to the salary audit system, the specific salary information cannot be leaked or tampered with, which improves the transmission security of the salary information. BRIEF DESCRIPTION OF THE DRAWINGS

[0061] In order to more clearly illustrate the technical solution of the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0062] Figure 1-1 This is a system architecture diagram involved in this application salary payment method;

[0063] Figure 1-2 This is another system architecture diagram involved in this application salary payment method;

[0064] Figure 2 This is a flowchart of the first embodiment of the salary payment method of the present application;

[0065] Figure 3 This is a flow chart of the second embodiment of the salary payment method of the present application;

[0066] Figure 4 This is a flowchart of the third embodiment of the salary payment method of the present application;

[0067] Figure 5 This is a flowchart of the first embodiment of the salary payment method of the present application;

[0068] Figure 6 This is a functional module diagram of the salary review system for this application;

[0069] Figure 7 This is a functional module diagram of the salary accounting system for this application;

[0070] Figure 8 It is a structural diagram of the salary payment equipment for this application. DETAILED DESCRIPTION

[0071] The features and exemplary embodiments of various aspects of the present application will be described in detail below. In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain the present application, rather than to limit the present application. For those skilled in the art, the present application can be implemented without the need for some of these specific details. The following description of the embodiments is only to provide a better understanding of the present application by illustrating the examples of the present application.

[0072] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "include..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0073] It should be noted that the acquisition, storage, use and processing of data in the embodiments of the present application are in compliance with the relevant provisions of national laws and regulations.

[0074] It should be noted that in the embodiments of the present application, certain software, components, models and other existing solutions in the industry may be mentioned, and they should be regarded as exemplary. Their purpose is only to illustrate the feasibility of implementing the technical solution of the present application, but it does not mean that the applicant has or will necessarily use the solution.

[0075] In the salary payment system, the personnel position and the financial position are generally responsible for it. The personnel position calculates the salary file in the human resources system, and then transmits the salary file to the online banking system for review by the financial position.

[0076] The inventor of the present application discovered that the human resources system and the online banking system are two different systems. In the process of transmitting salary files, salary tampering and salary leakage may occur, that is, the security of salary information transmission is low.

[0077] The inventor of this application therefore thought that

[0078] The salary information sent by the salary accounting system is encoded, and the decoded salary information is encrypted. That is, when the salary accounting system transmits the salary information to the salary review system, the specific salary information cannot be leaked or tampered with, which improves the transmission security of the salary information.

[0079] Reference Figure 1-1 , FIG1 is a system architecture diagram of the salary payment method of this application. Figure 1-1, the salary accounting system 100 is connected to the salary audit system 200 in communication. The salary accounting system 100 represents the human resources system. The salary accounting system 100 includes a server 110, various terminal devices connected to the server 110, and a router 120, and the various terminal devices are, for example, computers and mobile phones. The data interaction between the server 110 and the router 120 needs to be encrypted, and the keys and locks in the salary accounting system 100 represent the encrypted data interaction. The salary audit system 200 represents the online banking system, and the salary audit system 200 includes an access area 210, a server cluster 220, and a database cluster 230. The data interaction between the access area 210 and each server in the server cluster 220 needs to be encrypted, and the keys and locks in the salary audit system 200 represent the encrypted data interaction. The access area 220 and the router 120 are connected via Internet communication or via a dedicated line.

[0080] To further enhance the security of data transmission, refer to Figure 1-2 The salary accounting system 100' is provided with protection software 130, which is connected to the router in the salary accounting system 100'; and the salary auditing system 200' is also provided with protection software 240, which is connected to the access area in the salary auditing system 200'. The protection software 130 and the protection software 240 can be application programs with data security verification functions such as firewalls and anti-virus software. The protection software 130 and the protection software 240 are connected through the Internet or a dedicated line, so that the salary accounting system 100' and the salary auditing system 200' can perform secure data transmission.

[0081] The following combination Figure 1-1 as well as Figure 1-2 , describe the salary payment method for this application in detail.

[0082] Reference Figure 2 , Figure 2 FIG. 1 is a flow chart of the first embodiment of the salary payment method of the present application, and the salary payment method includes:

[0083] Step S201, receiving an encrypted first salary file sent by a salary accounting system, and decrypting the first salary file to obtain a decrypted second salary file.

[0084] In this embodiment, the execution subject is the salary review system, and the salary review system is connected to the salary accounting system in communication. For ease of description, the first system is used below to refer to the salary review system, and the second system is used to refer to the salary accounting system.

[0085] The human resources specialist can perform salary calculation in the second system to obtain the salary required to be paid to each employee, and each salary constitutes salary information. The second system processes the salary information to obtain a first hash value.

[0086] In one example, each salary plus a salary summary constitutes a salary text, the salary text is the salary information, and the salary summary is set in a setting area of ​​the salary text. The second system processes the salary summary in the setting system to obtain a first hash value. The processing method may be to use a cryptographic hash function to process the salary summary. The salary summary may be a specific text entered by a human resources specialist.

[0087] In another example, the second system processes the salary text using a cryptographic hash function to obtain a first hash value.

[0088] After obtaining the first hash value, the second system encodes the first hash value to obtain the first coded information. The second system encodes the salary information to obtain the second coded information. It should be noted that the second system can also use a cryptographic hash function to process the second coded information to obtain the first hash value.

[0089] In one example, the first hash value is encoded in the same manner as the salary information is encoded.

[0090] In another example, the encoding method of the first hash value is different from the encoding method of the salary information. Different encoding methods can further increase the transmission security of data.

[0091] The first coding information and the second coding information are spliced ​​to obtain the second salary file, and the second system encrypts the second salary file to obtain the encrypted first salary file. The second system then sends the second salary file to the first system.

[0092] After receiving the encrypted first salary file sent by the second system, the first system decrypts the first salary file to obtain a decrypted second salary file. Specifically, the second system encrypts the second salary file using the first encryption method, and the first system decrypts the first salary file using the first decryption method, and the encryption key of the first encryption method and the decryption key of the first decryption method are symmetric keys to each other.

[0093] Step S202, obtaining first coded information and second coded information in the second salary file, and decoding the first coded information to obtain first decoded information, the first decoded information is used to indicate the first hash value corresponding to the salary information, and the second coded information is used to indicate the salary information in the second salary file.

[0094] After obtaining the second salary file, the first system obtains first coding information and second coding information from the first salary file. The first coding information is used to indicate the first hash value of the salary information, and the second coding information is used to indicate the salary information in the second salary file.

[0095] Step S203: Process the second coded information to obtain a second hash value.

[0096] The first system processes the second coded information to obtain a second hash value. In one example, the first system processes the second coded information using a cryptographic hash function to obtain the second hash value. In another example, the first system decodes the second coded information to obtain salary information, and the first system processes the salary information using a cryptographic hash function to obtain the second hash value. In another example, the first system processes the salary summary in the salary information using a cryptographic hash function to obtain the second hash value. In another example, the first salary file carries the information of the second system in which way to obtain the first hash value. For example, the first system obtains the information carried by the first salary file, obtains the number from the carried information, and determines the method of obtaining the first hash value based on the number. If the number is 1, the first system processes the second coded information to obtain the second hash value. If the number is 2, the first system processes the salary summary to obtain the second hash value. If the number is 3, the first system processes the salary information to obtain the second hash value.

[0097] Step S204, in response to the second hash value matching the first decoded information, the second encoded information is decoded to obtain the salary information, and the salary information is displayed in the approval interface of the audit account.

[0098] After obtaining the second hash value, the first system determines whether the first hash value matches the second hash value. When the first hash value is the same as the second hash value, it can be determined that the first hash value matches the second hash value, and the first system decodes the second coded information to obtain the salary information.

[0099] After obtaining the salary information, it is necessary to review the salary information. The auditor sets up an audit account in the first system. If the audit account logs in to the first system, the salary information can be reviewed. In this regard, the first system displays the salary information in the approval interface of the audit account. Specifically, after the audit account logs in to the first system, the first system will prompt to review the salary information. If the auditor clicks on the information, the salary information will be displayed in the approval interface of the audit account.

[0100] Step S205: if it is detected that the approval operation for the salary information in the approval interface is completed, the salary information is sent to the salary sending agency, so that the salary payment agency can pay the salary according to the salary information.

[0101] When the first system detects that the approval operation for the salary information in the approval interface is completed, it can be determined that the salary information has been approved, and the first system sends the salary information to the salary payment agency, so that the salary payment agency pays the salary according to the salary information.

[0102] It should be noted that multiple approving personnel can be set, that is, the first system can send the salary information to the salary payment agency for salary payment only after the approval of multiple approving personnel is completed.

[0103] In the exemplary technology, the financial position inserts an entity certificate into the human resources system, and the entity certificate is, for example, a USB shield. However, the USB shield is configured separately for the human resources system by the salary payment agency, and it is necessary to apply for the USB shield from the salary payment agency, and the USB shield needs to be maintained. The financial position needs to learn the knowledge of the USB shield, which increases the learning cost and thus increases the salary payment cost.

[0104] However, this embodiment can complete salary payment without the need for U-Shield, thus avoiding the need for financial positions to learn U-Shield and reducing the cost of salary payment.

[0105] The salary payment method provided in this embodiment can solve the problem of offline file transmission risk caused by using a human resources system and a financial system two days later without changing the usage habits of human resources specialists.

[0106] In this embodiment, an encrypted first salary file sent by a salary accounting system is received, and the first salary file is decrypted to obtain a decrypted second salary file, first coding information and second coding information are obtained from the second salary file, and the first coding information is decoded to obtain first decoding information, and the second coding information is processed to obtain a second hash value, if the second hash value matches the first hash value indicated by the first decoding information, the second coding information is decoded to obtain salary information, and the salary information is displayed in the approval interface of the audit account, and when the approval completion operation for the salary information in the approval interface is detected, the salary information is sent to the salary payment agency for salary payment. In this embodiment, the salary information sent by the salary accounting system is encoded, and the decoded salary information is encrypted, that is, in the process of the salary accounting system transmitting the salary information to the salary audit system, the specific salary information cannot be leaked or tampered with, thereby improving the transmission security of the salary information.

[0107] Reference Figure 3 , Figure 3 This is a flow chart of the second embodiment of the salary payment method for this application. Based on the first embodiment, step S201 includes:

[0108] Step S301, obtaining the document preparation mode associated with the salary accounting system.

[0109] In this embodiment, when performing salary payment, there are two document making modes, one is a pre-made document mode, and the other is a made document mode.

[0110] In one example, the first system stores the order making mode associated with the second system, and the first system obtains the order making mode associated with the second system from the storage area.

[0111] In another example, in the prepared order mode, it is necessary to ensure that the person who pushes the first salary file is in the process node of the first system, that is, the first system needs to store the user ID of the person who pushes the file. The person who pushes the file may be the person who makes the salary file, and the person who makes the file may be a human resources specialist. The device obtains the user ID of the person who makes the salary file in the second system, and the user ID may be carried by the first salary file. When the user ID is stored in the first system, it can be determined that the salary accounting system is associated with the prepared order mode. If the user ID is not stored in the first system, it is determined that the salary accounting system is associated with the pre-made order mode.

[0112] In another example, the salary accounting system is associated with group information, and each person in the group is a person who needs to be paid. The group information includes demand information. If the security level required for the salary payment of the personnel in the demand information is higher than the preset level, it is necessary to add a new salary file for payment, so it can be determined that the document making mode associated with the salary accounting system is the pre-made document mode; if the demand information does not include the security level, or includes the security level and the security level is lower than or equal to the preset level, the document making mode associated with the salary accounting system is the already made document mode.

[0113] Step S302: In response to the document making mode being the pre-made document mode, storing the first salary file in the first secure storage area.

[0114] When the bill making mode is the pre-made bill mode, the encrypted first salary file needs to be issued by a specific person in the first system. In this regard, the first system stores the first salary file in a first secure storage area. The first secure storage area is, for example, an area where a folder opened by the first system for the second system is located.

[0115] Step S303: if it is detected that the file sending account performs an extraction operation on the first salary file in the first secure storage area, the first salary file is extracted from the first secure storage area and the first salary file is displayed in the file sending interface corresponding to the file sending account, and the file sending account has the authority to extract files from the first secure storage area.

[0116] In this embodiment, only a specific account has the authority to extract files from the first secure storage area. The specific account is, for example, a file distribution account, that is, the file distribution account has the authority to extract files from the first secure area. If the first system detects that the file distribution account is logged in, and detects an extraction operation based on the interface corresponding to the file code account, the first salary file can be extracted from the first secure storage area, that is, the first system detects the extraction operation of the file distribution account for the first salary file in the first secure storage area, and allows the extraction of the first salary file. After extracting the first salary file, the first system displays the first salary file in the file distribution interface corresponding to the file distribution account.

[0117] Step S304 , in response to the file agency sending operation for the first salary file in the file agency sending interface, the first salary file is stored in the second security storage area.

[0118] The file sending personnel can send the first salary file on behalf of the user based on the file sending interface, and the sending method is to store the first salary file in the second secure storage area so that the review personnel can review the first salary file. Specifically, when the first system detects the file sending operation of the first salary file in the file sending interface, the first salary file is stored in the second secure storage area.

[0119] Step S305: if it is detected that the audit account performs an extraction operation on the first salary file in the second secure storage area, the first salary file is extracted from the second secure storage area, and the first salary file is decrypted to obtain a decrypted second salary file, and the audit account has the authority to extract files from the second secure storage area.

[0120] The audit account has the authority to extract files from the second secure storage area. When the first salary file is detected to be extracted by the audit account in the second secure storage area, the first salary file is extracted from the second secure storage area. In order to facilitate the auditor to review the salary information, the first salary file needs to be decrypted, that is, the first salary file is decrypted to obtain the decrypted second salary file.

[0121] It should be noted that when the bill making mode is the bill making mode, there is no need for the first salary file to be sent by personnel, so the first system directly stores the first salary file in the second secure storage system. When it is detected that the audit account performs an extraction operation on the first salary file in the second secure storage area, the first salary file is extracted from the second secure storage area, and then the first salary file is decrypted to obtain the second salary file.

[0122] In this embodiment, when the second system is associated with the pre-made order mode, the order maker of the second system (the person associated with the file sending account) is required to send the salary file on behalf of the auditor, so that the auditor can review the salary file, thereby improving the security of salary data transmission. In addition, by storing the salary file in the first and second secure storage areas, other personnel are prevented from extracting the salary file to view and tamper with the salary information, thereby further improving the security of the salary data.

[0123] Reference Figure 4 , Figure 4 This is a flowchart of the third embodiment of the salary payment method of the present application. Based on the first or second embodiment, step S201 includes:

[0124] Step S401, receiving a user password sent by the salary accounting system.

[0125] In this embodiment, the second system obtains a user password before transmitting the first salary file. In one example, the user password may be input by a human resources specialist. In another example, the user password is determined by a specific rule. Specifically, the user password may be a string of numbers or letters. The second system may configure multiple specific characters for the human resources specialist. The specific characters may be letters or numbers. Multiple specific characters may generate a user password. In this regard, the second system obtains information input by the user and obtains characters based on the input information. If the obtained characters are consistent with the specific characters configured by the human resources specialist, a user password is generated based on each specific character, thereby preventing personnel other than the human resources specialist from performing salary payment application operations.

[0126] The second system processes the user password to obtain a third hash value, that is, the second system processes the user password using a cryptographic hash function to obtain the third hash value.

[0127] The second system obtains the characters at the preset position in the third hash value to obtain the user key, for example, the first eight bytes of the third hash value are taken as the user key. The user key includes a user encryption key and a user decryption key.

[0128] The second system uses the user encryption key in the user key to encrypt the second salary file composed of the first coding information and the second coding information to obtain the first salary file, and sends the first salary file and the user password to the first system.

[0129] Step S402, determining the user key according to the user password.

[0130] After the first system obtains the user password, it determines the user key through the user password. In one example, the second system can send the user password and the user decryption key in the user key to the first system for associated storage. When the first system receives the user password sent by the second system, it obtains the user decryption key associated with the user password as the user key.

[0131] In another example, the first system processes the user password to obtain a third hash value, for example, using a cryptographic hash function to process the user password to obtain the third hash value. The first system obtains the characters at a preset position of the third hash value to obtain the user key, for example, obtaining the first eight bytes of the third hash value as the user key.

[0132] Step S403: decrypt the first salary file using the user key to obtain a second salary file.

[0133] After obtaining the user key, the first system uses the user key to decrypt the first salary file, that is, the first salary file is decrypted using the user decryption key in the user key to obtain the second salary file.

[0134] In this embodiment, the user key is determined by the user password sent by the second system, and the first salary file is decrypted by the user key to obtain the second salary file, thereby preventing the user key from being leaked by the user password.

[0135] In one example, both the first system and the second system are provided with protection software, for details, see Figure 1-2 . After receiving the first salary file, the second system controls its own protection software to perform a security check on the first salary file. If the first salary file passes the security check, the first salary file is sent to the salary review system, that is, to the first system. After receiving the first salary file, the first system controls the protection software in the first system to perform a security check on the first salary file. When the first salary file passes the security check, the first salary file is decrypted to obtain the second salary file. In this way, the transmission security of the salary file is further guaranteed.

[0136] Reference Figure 5 , Figure 5 This is a flowchart of the first embodiment of the salary payment method of this application. The salary payment method includes:

[0137] Step S501, obtaining salary information, and processing the salary information to obtain a first hash value.

[0138] Step S502: Encode the first hash value to obtain first coded information, and encode the salary information to obtain second coded information.

[0139] Step S503, encrypting the second salary file composed of the first coding information and the second coding information to obtain an encrypted first salary file, and sending the first salary file to the salary review system.

[0140] In this embodiment, the execution subject is a salary accounting system, and the salary accounting system is communicatively connected with the salary review system.

[0141] Furthermore, the step of encrypting the salary file composed of the first coded information and the second coded information includes:

[0142] Obtaining a user password, and processing the user password to obtain a third hash value;

[0143] Obtaining a character at a preset position in the third hash value to obtain a user key;

[0144] Encrypting a second salary file consisting of the first coded information and the second coded information using a user key;

[0145] The steps to send the first payroll file to the payroll review system include:

[0146] Send the first salary file and user password to the salary review system.

[0147] Furthermore, the step of sending the first salary file to the salary review system includes:

[0148] Control the protection software in the payroll accounting system to perform security checks on the first payroll file;

[0149] In response to the first salary file passing the security check, the first salary file is sent to the salary review system.

[0150] The specific details of each of the above steps can be referred to the aforementioned embodiments and will not be repeated here.

[0151] In this embodiment, the salary accounting system performs hash value calculation, encoding and encryption on the salary information, so that the salary information will not be leaked or tampered with during the transmission process, thereby improving the transmission security of the salary data.

[0152] Reference Figure 6 The salary review system 600 provided in the embodiment of the present application includes:

[0153] The receiving module 610 is used to receive the encrypted first salary file sent by the salary accounting system, and decrypt the first salary file to obtain a decrypted second salary file;

[0154] A first acquisition module 620 is used to acquire first coded information and second coded information from the second salary file, and decode the first coded information to obtain first decoded information, where the first decoded information is used to indicate a first hash value corresponding to the salary information, and the second coded information is used to indicate the salary information in the second salary file;

[0155] A processing module 630, configured to process the second encoding information to obtain a second hash value;

[0156] A decoding module 640, for decoding the second coded information to obtain salary information in response to the second hash value matching the first decoded information, and displaying the salary information in the approval interface of the audit account;

[0157] The sending module 650 is used to send the salary information to the salary sending agency if it is detected that the approval operation for the salary information in the approval interface is completed, so that the salary payment agency can pay the salary according to the salary information.

[0158] In one embodiment, the salary review system 600 is specifically used for:

[0159] Get the document preparation mode associated with the salary accounting system;

[0160] In response to the document making mode being the pre-made document mode, storing the first salary file in the first secure storage area;

[0161] If it is detected that the file distribution account performs an extraction operation on the first salary file in the first secure storage area, the first salary file is extracted from the first secure storage area, and the first salary file is displayed in the file distribution interface corresponding to the file distribution account, and the file distribution account has the authority to extract files from the first secure storage area;

[0162] In response to a file sending operation on a first salary file in the file sending interface, storing the first salary file in a second secure storage area;

[0163] If it is detected that the audit account performs an extraction operation on the first salary file in the second secure storage area, the first salary file is extracted from the second secure storage area, and the first salary file is decrypted to obtain a decrypted second salary file. The audit account has the authority to extract files from the second secure storage area.

[0164] In one embodiment, the salary review system 600 is specifically used for:

[0165] In response to the document making mode being the document making mode, storing the first salary file in the second secure storage area;

[0166] If it is detected that the audit account performs an extraction operation on the first salary file in the second secure storage area, the first salary file is extracted from the second secure storage area, and the first salary file is decrypted to obtain a decrypted second salary file.

[0167] In one embodiment, the salary review system 600 is specifically used for:

[0168] Get the user ID of the person who created the payroll file in the payroll accounting system;

[0169] In response to the user identification being stored in the salary review system, determining that the salary accounting system is associated with a prepared document mode;

[0170] In response to the user identification not being stored in the salary audit system, determining a salary accounting system associated advance order mode.

[0171] In one embodiment, the salary review system 600 is specifically used for:

[0172] Receive the user password sent by the payroll accounting system;

[0173] Determine the user key based on the user password;

[0174] The first salary file is decrypted using the user key to obtain a second salary file.

[0175] In one embodiment, the salary review system 600 is specifically used for:

[0176] Processing the user password to obtain a third hash value;

[0177] The character at the preset position in the third hash value is obtained to obtain the user key.

[0178] In one embodiment, the salary review system 600 is specifically used for:

[0179] The protection software controlling the salary audit system performs a security check on the first salary file;

[0180] In response to the first salary file passing the security check, the first salary file is decrypted to obtain a decrypted second salary file.

[0181] The module of the salary review system provided in the embodiment of the present application can realize Figures 2 to 4 Any embodiment provides the functions of each step of the salary payment method and can achieve its corresponding technical effects. For the sake of concise description, it will not be repeated here.

[0182] Reference Figure 7 The salary accounting system 700 provided in the embodiment of the present application includes:

[0183] The second acquisition module 710 is used to acquire salary information and process the salary information to obtain a first hash value;

[0184] The encoding module 720 is used to encode the first hash value to obtain first encoding information, and encode the salary information to obtain second encoding information;

[0185] The encryption module 730 is used to encrypt the second salary file composed of the first coding information and the second coding information to obtain the encrypted first salary file, and send the first salary file to the salary review system.

[0186] In one embodiment, the salary accounting system 700 is specifically used for:

[0187] Obtaining a user password, and processing the user password to obtain a third hash value;

[0188] Obtaining a character at a preset position in the third hash value to obtain a user key;

[0189] Encrypting a second salary file consisting of the first coded information and the second coded information using a user key;

[0190] The steps to send the first payroll file to the payroll review system include:

[0191] Send the first salary file and user password to the salary review system.

[0192] In one embodiment, the salary accounting system 700 is specifically used for:

[0193] Control the protection software in the payroll accounting system to perform security checks on the first payroll file;

[0194] In response to the first salary file passing the security check, the first salary file is sent to the salary review system.

[0195] The module of the salary accounting system provided in the embodiment of the present application can realize Figure 5 The embodiment shown in the embodiment provides the functions of each step of the salary payment method and can achieve its corresponding technical effects. For the sake of concise description, it will not be repeated here.

[0196] Figure 8 A schematic diagram of the hardware structure of the salary payment device provided in an embodiment of the present application is shown.

[0197] The salary payment device may include a processor 801 and a memory 802 storing computer program instructions.

[0198] Specifically, the processor 801 may include a central processing unit (CPU), or an application specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present application.

[0199] The memory 802 may include a large capacity memory for data or instructions. By way of example and not limitation, the memory 802 may include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive or a combination of two or more of these. In appropriate cases, the memory 802 may include a removable or non-removable (or fixed) medium. In appropriate cases, the memory 802 may be inside or outside the integrated gateway disaster recovery device. In a specific embodiment, the memory 802 is a non-volatile solid-state memory.

[0200] In certain embodiments, the memory 802 may include a read-only memory (ROM), a random access memory (RAM), a magnetic disk storage media device, an optical storage media device, a flash memory device, an electrical, optical or other physical / tangible memory storage device. Thus, in general, the memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., a memory device) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the method according to an aspect of the present disclosure.

[0201] The processor 801 implements any one of the authentication methods in the above embodiments by reading and executing computer program instructions stored in the memory 802 .

[0202] In one example, the salary payment device may further include a communication interface 803 and a bus 810. Figure 8 As shown, the processor 801, the memory 802, and the communication interface 803 are connected via a bus 810 and communicate with each other.

[0203] The communication interface 803 is mainly used to implement communication between various modules, devices, units and / or equipment in the embodiments of the present application.

[0204] Bus 810 includes hardware, software or both, and the parts of online data flow billing equipment are coupled to each other. For example, but not limitation, bus may include accelerated graphics port (AGP) or other graphics bus, enhanced industrial standard architecture (EISA) bus, front-end bus (FSB), hypertransport (HT) interconnection, industrial standard architecture (ISA) bus, infinite bandwidth interconnection, low pin count (LPC) bus, memory bus, micro channel architecture (MCA) bus, peripheral component interconnection (PCI) bus, PCI-Express (PCI-X) bus, serial advanced technology attachment (SATA) bus, video electronics standard association local (VLB) bus or other suitable bus or two or more of these combinations. In appropriate cases, bus 810 may include one or more buses. Although the present application embodiment describes and shows a specific bus, the application considers any suitable bus or interconnection.

[0205] The salary payment method in the above embodiment can be implemented by providing a computer storage medium in the present application embodiment. The computer storage medium stores computer program instructions; when the computer program instructions are executed by a processor, any salary payment method in the above embodiment is implemented.

[0206] An embodiment of the present application also provides a computer program product, including a computer program, which implements any one of the salary payment methods in the above embodiments when the computer program is processed and executed.

[0207] It should also be noted that the exemplary embodiments mentioned in this application describe some methods or systems based on a series of steps or devices. However, this application is not limited to the order of the above steps, that is, the steps can be performed in the order mentioned in the embodiment, or in a different order from the embodiment, or several steps can be performed simultaneously.

[0208] Aspects of the present disclosure are described above with reference to the flowcharts and / or block diagrams of the methods, devices (systems) and computer program products according to the embodiments of the present disclosure. It should be understood that each box in the flowchart and / or block diagram and the combination of boxes in the flowchart and / or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable salary payment device to produce a machine so that these instructions executed by the processor of the computer or other programmable salary payment device enable the implementation of the functions / actions specified in one or more boxes of the flowchart and / or block diagram. Such a processor can be, but is not limited to, a general-purpose processor, a special-purpose processor, a special application processor, or a field programmable logic circuit. It can also be understood that each box in the block diagram and / or flowchart and the combination of boxes in the block diagram and / or flowchart can also be implemented by dedicated hardware that performs the specified function or action, or can be implemented by a combination of dedicated hardware and computer instructions.

[0209] The above are only specific implementation methods of the present application. Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working processes of the systems, modules and units described above can refer to the corresponding processes in the aforementioned method embodiments, and will not be repeated here. It should be understood that the protection scope of the present application is not limited to this. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in this application, and these modifications or replacements should be included in the protection scope of this application.

Claims

1. A salary payment method, characterized in that: Applied to the salary review system, the salary payment method includes: Receiving an encrypted first salary file sent by a salary accounting system, and decrypting the first salary file to obtain a decrypted second salary file; Obtaining first coded information and second coded information from the second salary file, and decoding the first coded information to obtain first decoded information, wherein the first decoded information is used to indicate a first hash value corresponding to the salary information, and the second coded information is used to indicate the salary information in the second salary file; Processing the second encoded information to obtain a second hash value; In response to the second hash value matching the first decoded information, decoding the second encoded information to obtain salary information, and displaying the salary information in an approval interface of the audit account; If it is detected that the approval operation for the salary information in the approval interface is completed, the salary information is sent to a salary sending agency so that the salary payment agency can pay the salary according to the salary information.

2. The salary payment method according to claim 1, characterized in that: The step of decrypting the encrypted salary file to obtain a decrypted second salary file comprises: Obtaining the document preparation mode associated with the salary accounting system; In response to the document making mode being the pre-made document mode, storing the first salary file in a first secure storage area; If an extraction operation of the file distribution account on the first secure storage area is detected, the first salary file is extracted from the first secure storage area, and the first salary file is displayed in a file distribution interface corresponding to the file distribution account, and the file distribution account has the authority to extract files from the first secure storage area; In response to a file sending operation on the first salary file in the file sending interface, storing the first salary file in a second secure storage area; If it is detected that the audit account performs an extraction operation on the first salary file in the second secure storage area, the first salary file is extracted from the second secure storage area, and the first salary file is decrypted to obtain a decrypted second salary file, and the audit account has the authority to extract files from the second secure storage area.

3. The salary payment method according to claim 2, characterized in that: After the step of determining whether the salary accounting system sets a salary security protection requirement according to the enterprise information, the method further includes: In response to the document making mode being the document making mode, storing the first salary file in a second secure storage area; If it is detected that the audit account performs an extraction operation on the first salary file in the second secure storage area, the first salary file is extracted from the second secure storage area, and the first salary file is decrypted to obtain a decrypted second salary file.

4. The salary payment method according to claim 2, characterized in that: The step of obtaining the document preparation mode associated with the salary accounting system includes: Obtaining a user ID of a person who prepares a salary file in the salary accounting system; In response to the user identification being stored in the salary audit system, determining that the salary accounting system is associated with a document-made mode; In response to the user identification not being stored in the salary audit system, determining that the salary accounting system is associated with an advance payment order mode.

5. The salary payment method according to claim 1, characterized in that: The step of decrypting the first salary file to obtain a decrypted second salary file comprises: Receiving a user password sent by the salary accounting system; Determining the user key according to the user password; The first salary file is decrypted using the user key to obtain a second salary file.

6. The salary payment method according to claim 5, characterized in that: The step of determining the user key according to the user password comprises: Processing the user password to obtain a third hash value; The character at a preset position in the third hash value is obtained to obtain a user key.

7. The salary payment method according to claim 1, characterized in that: The step of decrypting the first salary file to obtain a decrypted second salary file comprises: Controlling the protection software of the salary audit system to perform security verification on the first salary file; In response to the first salary file passing the security check, the first salary file is decrypted to obtain a decrypted second salary file.

8. A salary payment method, characterized in that: Applied to the salary accounting system, the salary payment method includes: Obtaining salary information, and processing the salary information to obtain a first hash value; Encoding the first hash value to obtain first coded information, and encoding the salary information to obtain second coded information; The second salary file composed of the first coding information and the second coding information is encrypted to obtain an encrypted first salary file, and the first salary file is sent to a salary audit system.

9. The salary payment method according to claim 8, characterized in that: The step of encrypting the salary file composed of the first coded information and the second coded information comprises: Obtaining a user password, and processing the user password to obtain a third hash value; Obtaining a character at a preset position in the third hash value to obtain a user key; Using the user key to encrypt a second salary file consisting of the first coded information and the second coded information; The step of sending the first salary file to the salary review system includes: The first salary file and the user password are sent to the salary review system.

10. The salary payment method according to claim 8, characterized in that: The step of sending the first salary file to the salary review system includes: Controlling the protection software in the salary accounting system to perform a security check on the first salary file; In response to the first salary file passing the security check, the first salary file is sent to a salary review system.

11. A salary review system, characterized in that: include: A receiving module, used for receiving an encrypted first salary file sent by a salary accounting system, and decrypting the first salary file to obtain a decrypted second salary file; a first acquisition module, configured to acquire first coded information and second coded information from the second salary file, and decode the first coded information to obtain first decoded information, wherein the first decoded information is used to indicate a first hash value corresponding to the salary information, and the second coded information is used to indicate the salary information in the second salary file; A processing module, configured to process the second coded information to obtain a second hash value; a decoding module, configured to decode the second coded information to obtain salary information in response to the second hash value matching the first decoded information, and display the salary information in an approval interface of the audit account; The sending module is used to send the salary information to a salary sending agency if it is detected that the approval operation for the salary information in the approval interface is completed, so that the salary payment agency can pay the salary according to the salary information.

12. A salary accounting system, characterized in that: include: A second acquisition module, used for acquiring salary information and processing the salary information to obtain a first hash value; An encoding module, configured to encode the first hash value to obtain first encoding information, and to encode the salary information to obtain second encoding information; The encryption module is used to encrypt the second salary file composed of the first coding information and the second coding information to obtain the encrypted first salary file, and send the first salary file to the salary audit system.

13. A salary payment device, characterized in that: The salary payment device comprises: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, the salary payment method according to any one of claims 1 to 11 is implemented.

14. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer program instructions, and when the computer program instructions are executed by a processor, the salary payment method according to any one of claims 1 to 11 is implemented.

15. A computer program product, characterized in that When the instructions in the computer program product are executed by a processor of an electronic device, the electronic device is enabled to execute the salary payment method as described in any one of claims 1 to 11.