Transaction request initiating method, transaction request processing method and related devices
The bank's unified API access control platform generates key pairs and initiates transaction requests, which solves the problem of inconsistent security access control codes for each bank project, reduces the difficulty of development and management, and realizes unified management of information security.
Patent Information
- Application Number
- CN202411301546.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-09-18
- Publication Date
- 2025-01-03
AI Technical Summary
Due to the inconsistent security access control codes of each project, the development work is heavy and management difficult, and it is difficult to manage information security in a unified manner.
Key pairs are generated through the bank's unified API access control platform, and transaction requests are initiated to the bank system based on the key pair and the target URL address, instead of developing independent secure access control codes for each project in the traditional solution.
On the premise of ensuring information security, the development workload and management difficulty of secure access control codes are reduced, and unified information security management is achieved.
Smart Images
Figure CN119250967A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of financial technology, and in particular to a method for initiating a transaction request, a method for processing a transaction request, and related devices. Background Art
[0002] With the rapid development of Internet technology, the number of Internet businesses undertaken by banks has gradually increased. At present, in order to protect information security, bank branches usually develop independent security access control codes for each project. Since the security control codes are scattered in various projects and the security access control codes in each project are inconsistent, there are problems such as heavy development work and difficult management. Summary of the invention
[0003] Based on the above problems, the present application provides a method for initiating a transaction request, in which the security authentication information used in the transaction request is generated based on the bank's unified API access control platform, rather than based on the security access control code corresponding to each project; it solves the drawback of developing an independent security access control code for each project in the traditional solution, and can reduce the development workload and management difficulty of the security access control code.
[0004] The embodiments of the present application disclose the following technical solutions:
[0005] In a first aspect, the present application discloses a method for initiating a transaction request, the method being applied to a client and comprising:
[0006] Generate a key pair based on a software development kit; the software development kit is generated by the bank's API access control platform;
[0007] Based on the key pair and the target URL address, a transaction request is initiated to the bank system.
[0008] In an optional implementation, the method further includes:
[0009] Obtaining a customer number; the customer number is generated by the API access control platform after receiving the customer's information;
[0010] The initiating a transaction request to a bank system based on the key pair and the target URL address includes:
[0011] Based on the customer number, the key pair and the target URL address, a transaction request is initiated to a bank system.
[0012] In an optional implementation, the step of generating the target URL address includes:
[0013] Obtaining an initial URL address and a preset form; the initial URL address includes the area code to be updated, the transaction code number to be updated, and the bank application code to be updated; the preset form indicates the correspondence between the area and the area code, the correspondence between the transaction code and the transaction code number, and the correspondence between the bank application and the bank application code;
[0014] Determining a target area code, a target transaction code number, and a target bank application code from the preset form;
[0015] Based on the target area code, target transaction code number and target bank application code, the area code to be updated, the transaction code number to be updated and the bank application code to be updated in the initial URL address are updated to generate the target URL address.
[0016] In an optional implementation, generating a key pair based on a software development kit includes:
[0017] Determine the target jar package in the software development kit;
[0018] The target jar package is run to generate the key pair; the key pair is stored in the client and the API access control platform.
[0019] The second aspect of the present application discloses a method for processing a transaction request, which is applied to a bank side and includes:
[0020] After receiving a transaction request initiated by a user, determining whether there is a public key among multiple public keys stored in the API access control platform that matches the private key carried in the transaction request;
[0021] If a public key matching the private key is stored, respond to the transaction request according to the target URL address in the transaction request; otherwise, stop responding to the transaction request.
[0022] In a third aspect, the present application discloses a device for initiating a transaction request, the device being applied to a client, and comprising:
[0023] A key pair generation module, used to generate a key pair based on a software development kit; the software development kit is generated by the bank's API access control platform;
[0024] The transaction request initiation module is used to initiate a transaction request to a bank system based on the key pair and the target URL address.
[0025] A fourth aspect of the present application is a device for processing a transaction request, the device being applied to a banking system, the device comprising:
[0026] The identity verification module is used to determine whether there is a public key matching the private key carried in the transaction request among the multiple public keys stored in the API access control platform after receiving the transaction request initiated by the user;
[0027] The transaction execution module is used to respond to the transaction request according to the target URL address in the transaction request if a public key matching the private key is stored; otherwise, stop responding to the transaction request.
[0028] In a fifth aspect, the present application discloses a computer-readable storage medium having a computer program stored thereon. When the program is executed by a processor, the steps of the method described in any implementation of the first aspect and the second aspect are implemented.
[0029] A sixth aspect of the present application discloses an electronic device, comprising:
[0030] a memory having a computer program stored thereon;
[0031] A processor is used to execute the computer program in the memory to implement the steps of the method introduced in any implementation of the first aspect and the second aspect.
[0032] In a seventh aspect, the present application discloses a computer program product, including a computer program. When the computer program is executed by a processor, the steps of the method described in any one of the first aspect and the second aspect are performed.
[0033] Compared with the prior art, this application has the following beneficial effects:
[0034] The present application discloses a method for initiating a transaction request, which is applied on a client, and includes: downloading and running a software development kit generated by a bank's API access control platform to generate a key pair; and initiating a transaction request to a bank system based on the key pair and a target URL address. By replacing the traditional solution of developing independent full control codes for each project with a unified API access control platform, the goal of reducing the development workload and management difficulty of security access control codes while ensuring information security is achieved. BRIEF DESCRIPTION OF THE DRAWINGS
[0035] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.
[0036] Figure 1 A flowchart of a method for initiating a transaction request provided in an embodiment of the present application;
[0037] Figure 2 A schematic diagram of the service functions of an API access control platform provided in an embodiment of the present application;
[0038] Figure 3 A schematic diagram of processing a transaction request provided in an embodiment of the present application;
[0039] Figure 4 A schematic diagram of verifying a customer's identity provided in an embodiment of the present application;
[0040] Figure 5 A schematic diagram of the structure of a device for initiating a transaction request provided in an embodiment of the application;
[0041] Figure 6 A schematic diagram of the structure of a device for processing transaction requests provided in an embodiment of the present application. DETAILED DESCRIPTION
[0042] As described above, with the rapid development of Internet technology, the number of Internet businesses undertaken by banks has gradually increased. At present, in order to protect information security, bank branches usually develop independent security access control codes for each project. Since the security control codes are scattered in various projects and the security access control codes in each project are inconsistent, there are problems such as heavy development work and difficult management.
[0043] The present application discloses a method for initiating a transaction request, which is applied on a client, and includes: downloading and running a software development kit generated by a bank's API access control platform to generate a key pair; and initiating a transaction request to a bank system based on the key pair and a target URL address. By replacing the traditional solution of developing independent full control codes for each project with a unified API access control platform, the goal of reducing the development workload and management difficulty of security access control codes while ensuring information security is achieved.
[0044] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.
[0045] Figure 1 A flowchart of a method for initiating a transaction request provided in an embodiment of the present application. Figure 1 As shown, the method for initiating a transaction request disclosed in the present application includes:
[0046] S101, generating a key pair based on a software development kit; the software development kit is generated by the bank's API access control platform.
[0047] The API (Application Programming Interface) access control platform is a software tool or service for managing and controlling access rights to APIs. The API access control platform in this application is a platform developed in advance by bank personnel that can generate a software development kit.
[0048] The software development kit (SDK) in this application is generated by the API access control platform independently developed by the bank. After the API access control platform generates the SDK access package (also called the software development tool in this application), the SDK access package is placed in the external network storage, and bank customers can download the SDK access package from the external network.
[0049] After the customer downloads the SDK access package, run the SDK access package and, based on the encryption methods that can be used on the client computer, including but not limited to the SM2 elliptic curve public key cryptography algorithm, SM4 block cipher algorithm, Rivest-Shamir-Adleman (RSA) algorithm and RSA2 encryption methods, select the target jar package corresponding to its own encryption method from the multiple jar packages included in the SDK access package and run the Generate Key Pair program to generate a pair of matching public and private keys.
[0050] For example, users can generate key pairs based on Java's security and crypto libraries to quickly implement RSA encryption and decryption functions; then, distinguish and forward based on transaction codes (transaction code, trxcode) and application codes (application code, appcode).
[0051] It is understandable that since the customer downloads the SDK access package from the external network and runs the generated key pair on his own client computer, the customer himself knows the information of the key pair; at the same time, since the SDK access package is generated by the API access control platform, the API access control platform will store the key pair generated by the user.
[0052] Illustratively, the present application uses Java's security tool, namely Java KeyStore, to store the information of the key pair generated after each user runs the SDK access package, that is, through the KeyStore standard API interface, the full life cycle management of key pairs such as creation, reading, updating and deletion is realized.
[0053] S102, initiating a transaction request to a bank system based on the key pair and the target URL address.
[0054] After obtaining the key pair, you also need to obtain the target URL address. You can obtain the target URL address in the following ways:
[0055] First, get the initial URL address and preset form.
[0056] Specifically, the bank places the initial URL address, preset form and SDK access package together on the external network; when the user downloads the SDK access package, he or she also obtains the initial URL address and preset form.
[0057] The preset form indicates the correspondence between the region and the region code, the correspondence between the transaction code and the transaction code number, and the correspondence between the bank application and the bank application code. The initial URL address includes the region code to be updated (#5-digit region code#), the transaction code number to be updated (#application code number#), and the bank application code to be updated (#application code#).
[0058] Exemplarily, the format of the initial URL address may be:
[0059] http: / / ip:port / icbc / keymanager / request / in / #5-digit area code#?tran_code=#transaction code#appcode=#application code#.
[0060] Among them, #5-digit area code# represents the area code of the user's actual location; #application code# represents the specific application that needs to be used in the transaction request issued by the user; #transaction code number# represents the specific function under the specific application that needs to be used in the transaction request issued by the user.
[0061] It is understandable that embedding #5-digit area code# in the initial URL address is to facilitate the promotion of the method in this application in different provinces. After parsing the URL address containing the area code, the bank can implement parameter configuration according to the region. The bank's main control will parse the area code in the URL path, read the corresponding key by area code group, and implement decryption and signature verification. After the bank's main control passes the signature verification, it will forward the transaction request to the corresponding bank's back-end system according to the transaction code to process the transaction request.
[0062] Those skilled in the art can change the number of digits in the area code, that is, it is not limited to a 5-digit area code.
[0063] Next, determine the target area code, target transaction code number, and target bank application code from the preset form.
[0064] Specifically, customers can determine the target area code, target transaction code number and target bank application code from a preset form based on their location and the transaction they want to conduct.
[0065] For example, if user A is located in Hunan and wants to request a money transfer operation in the real estate business, then it is necessary to find the 5-digit area code corresponding to "Hunan" from the preset form; find the application code corresponding to "real estate business" from the preset form; and find the transaction code number corresponding to "money transfer business" from the preset form.
[0066] Finally, the target area code, target transaction code number and target bank application code are used to update the area code to be updated, the transaction code number to be updated and the bank application code to be updated in the initial URL address to obtain the target URL address.
[0067] After obtaining the key pair and target URL encoding, the client can initiate a transaction request through the HTTP protocol.
[0068] Among them, HTTP (Hypertext Transfer Protocol) is an application layer protocol for distributed, collaborative, hypermedia information systems. It transmits World Wide Web documents, such as HTML documents, through the Internet, defines the communication method between clients and servers, supports data requests and responses, and is the basis of Web Internet applications.
[0069] It should be noted that after obtaining the key pair and the target URL encoding, the client initiates a transaction request through the HTTP protocol, which is well known to those skilled in the art and will not be further elaborated here.
[0070] Through the introduction of the above embodiments, it can be known that in this application, a pair of key pairs are allocated to each user through the standard SDK access package generated by the API access control platform uniformly developed by the bank; through the key pair and the target URL address, a transaction request can be initiated to the bank system. In this way, by developing an API access control platform once, it replaces the traditional solution of developing an independent security access control code for each project; by upgrading and optimizing an API access control platform, it replaces the upgrade and optimization of each security access control code; by managing a unified API access control platform, it replaces the management of the information of each security access control code, and achieves the goal of reducing the development workload and management difficulty of the security access control code while ensuring information security.
[0071] Since the bank serves tens of thousands of customers, in order to facilitate the management of customer information, this application can also generate a customer code for each customer through the API platform.
[0072] Specifically, customers can transmit their own information, such as institution code, personal ID card, etc. to the API platform. After receiving the above information sent by the customer, the API platform can generate a customer number.
[0073] It is understandable that the benefit of banks generating a unique customer code for each customer is that they can efficiently manage and identify customer information, ensure data security, accuracy and traceability; they can also quickly locate customers in various links such as customer transactions, inquiries, and complaint handling, thereby improving customer satisfaction. At the same time, the unique customer code is also the basis for banks to carry out customer relationship management, risk assessment, marketing and other work, which helps banks better understand customer needs and optimize service strategies.
[0074] After obtaining the customer number, transaction information can be initiated to the bank system through the HTTP protocol based on the key pair, target URL address and customer code.
[0075] Figure 2 A schematic diagram of the service functions of an API access control platform provided in an embodiment of the present application. Figure 2 It can be seen that the API access control platform can generate user codes based on user information and provide externally labeled SDK access packages (i.e. Figure 2 The standard SDK access package in the SDK allows users to generate a key pair after downloading and running the SDK access package.
[0076] Furthermore, the present application also discloses a method for processing transaction requests, which is applied to a bank. Figure 3 A schematic diagram of processing a transaction request provided in an embodiment of the present application. Figure 3 As shown, after the customer obtains the key pair, customer code and target URL address by adopting the method in the above embodiment, the customer can initiate a transaction request through the HTTP protocol. The transaction request is transmitted to the bank's master control system, i.e., the bank's master control system. The bank's master control system determines whether there is a public key (i.e., a public key matching the private key carried in the transaction request) among the multiple public keys stored in the API access control platform. Figure 3 Verify customer identity in), if the bank's API access control platform stores a public key that matches the private key, then respond to the transaction request according to the target URL address in the transaction request; otherwise, stop responding to the transaction request.
[0077] Combination Figure 3 As shown, responding to the transaction request according to the target URL address in the transaction request means routing the transaction request to the target server in the bank's back-end service system according to the target URL address in the transaction request, and the server processes the transaction request, and then feeds back the processed result to the bank's main control system, and then the bank's main control system feeds back the processed result to the customer.
[0078] Figure 4 A schematic diagram of verifying a customer's identity provided in an embodiment of the present application. Figure 4 Can Figure 3 The contents of verifying the customer's identity are described in detail. Figure 3 As shown, after the user sends a transaction request, the bank's main control system can use more methods, such as reserved question verification, dynamic code verification, etc. to verify the customer's identity in multiple rounds, that is, through N layers of verification, so as to achieve the purpose of accurately verifying the customer's identity and improve information security.
[0079] Furthermore, the present application also discloses a device for initiating a transaction request. Figure 5 A schematic diagram of a device for initiating a transaction request provided in an embodiment of the application. Figure 5 As shown, the device 500 for initiating a transaction request disclosed in the present application includes:
[0080] A key pair generation module 501 is used to generate a key pair based on a software development kit; the software development kit is generated by the bank's API access control platform;
[0081] The transaction request initiating module 502 is used to initiate a transaction request to the bank system based on the key pair and the target URL address.
[0082] In an optional implementation, the device 500 for initiating a transaction request further includes:
[0083] A customer code acquisition module is used to acquire a customer number; the customer number is generated by the API access control platform after receiving the customer's information;
[0084] The complex transaction request initiation module is used to initiate a transaction request to a bank system based on the customer number, the key pair and the target URL address.
[0085] In an optional implementation, the device 500 for initiating a transaction request further includes:
[0086] An initial data acquisition module, used to acquire an initial URL address and a preset form; the initial URL address includes the area code to be updated, the transaction code number to be updated, and the bank application code to be updated; the preset form indicates the correspondence between the area and the area code, the correspondence between the transaction code and the transaction code number, and the correspondence between the bank application and the bank application code;
[0087] A target data determination module, used to determine a target area code, a target transaction code number and a target bank application code from the preset form;
[0088] The target URL address generating module is used to update the area code to be updated, the transaction code number to be updated and the bank application code to be updated in the initial URL address based on the target area code, the target transaction code number and the target bank application code, and generate the target URL address.
[0089] In an optional implementation, the key pair generation module 501 includes:
[0090] A target jar package determining unit, used to determine the target jar package in the software development kit;
[0091] A key pair generating unit is used to run the target jar package to generate the key pair; the key pair is stored in the client and the API access control platform.
[0092] Furthermore, the present application also discloses a device for processing transaction requests. Figure 6 A schematic diagram of a structure of a device for processing a transaction request provided in an embodiment of the present application. Figure 6 As shown, the device 600 for processing a transaction request in the present application includes:
[0093] The identity verification module 601 is used to receive a transaction request initiated by a user and determine whether there is a public key matching the private key carried in the transaction request among multiple public keys stored in the API access control platform;
[0094] The transaction execution module 602 is used to respond to the transaction request according to the target URL address in the transaction request if a public key matching the private key is stored; otherwise, stop responding to the transaction request.
[0095] Based on the methods and devices for initiating transaction requests and processing transaction requests provided in the aforementioned embodiments, the present application also provides a computer-readable storage medium, on which a computer program is stored. When the program is executed by a processor, it implements some or all of the steps in the methods for initiating transaction requests and processing transaction requests mentioned above.
[0096] Based on the method and apparatus for initiating a transaction request and processing a transaction request provided in the above embodiments, the present application further provides an electronic device, including:
[0097] a memory having a computer program stored thereon;
[0098] The processor is used to execute the computer program in the memory to implement part or all of the steps in the method of initiating a transaction request and processing a transaction request provided in the above embodiments.
[0099] It should be noted that each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment. The device embodiment described above is merely schematic, in which the unit described as a separate component may or may not be physically separated, and the component prompted as a unit may or may not be a physical unit, that is, it may be located in one place, or it may be distributed on multiple network units. Some or all of the modules can be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative work.
[0100] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.
Claims
1. A method for initiating a transaction request, characterized in that: The method is applied to a client, and the method comprises: Generate a key pair based on a software development kit; the software development kit is generated by the bank's API access control platform; Based on the key pair and the target URL address, a transaction request is initiated to the bank system.
2. The method according to claim 1, characterized in that The method further comprises: Obtaining a customer number; the customer number is generated by the API access control platform after receiving the customer's information; The initiating a transaction request to a bank system based on the key pair and the target URL address includes: Based on the customer number, the key pair and the target URL address, a transaction request is initiated to a bank system.
3. The method according to claim 1 or 2, characterized in that: The step of generating the target URL address includes: Obtaining an initial URL address and a preset form; the initial URL address includes the area code to be updated, the transaction code number to be updated, and the bank application code to be updated; the preset form indicates the correspondence between the area and the area code, the correspondence between the transaction code and the transaction code number, and the correspondence between the bank application and the bank application code; Determining a target area code, a target transaction code number, and a target bank application code from the preset form; Based on the target area code, target transaction code number and target bank application code, the area code to be updated, the transaction code number to be updated and the bank application code to be updated in the initial URL address are updated to generate the target URL address.
4. The method according to claim 1, characterized in that The step of generating a key pair based on a software development kit includes: Determine the target jar package in the software development kit; The target jar package is run to generate the key pair; the key pair is stored in the client and the API access control platform.
5. A method for processing a transaction request, characterized in that: The method is applied to a bank, and includes: After receiving a transaction request initiated by a user, determining whether there is a public key among multiple public keys stored in the API access control platform that matches the private key carried in the transaction request; If a public key matching the private key is stored, respond to the transaction request according to the target URL address in the transaction request; otherwise, stop responding to the transaction request.
6. A device for initiating a transaction request, characterized in that: The device is applied to a client, and comprises: A key pair generation module, used to generate a key pair based on a software development kit; the software development kit is generated by the bank's API access control platform; The transaction request initiation module is used to initiate a transaction request to a bank system based on the key pair and the target URL address.
7. A device for processing a transaction request, characterized in that: The device is applied to a banking system, and comprises: The identity verification module is used to determine whether there is a public key matching the private key carried in the transaction request among the multiple public keys stored in the API access control platform after receiving the transaction request initiated by the user; The transaction execution module is used to respond to the transaction request according to the target URL address in the transaction request if a public key matching the private key is stored; otherwise, stop responding to the transaction request.
8. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the steps of the method described in any one of claims 1 to 5 are implemented.
9. An electronic device, characterized in that: include: a memory having a computer program stored thereon; A processor, configured to execute the computer program in the memory to implement the steps of the method according to any one of claims 1 to 6.
10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 5 are implemented.