A credit investigation report generation method and system, a computer device, and a storage medium

By utilizing the interaction of multiple servers and key encryption technology on the credit reporting chain, the problem of low efficiency in enterprise credit report queries has been solved, enabling rapid generation and secure and compliant credit report queries, improving query efficiency and ensuring data security.

CN119337849BActive Publication Date: 2026-04-17HUNAN CREDIT INFORMATION CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
HUNAN CREDIT INFORMATION CO LTD
Filing Date
2024-09-25
Publication Date
2026-04-17

AI Technical Summary

Technical Problem

In existing technologies, the query efficiency of enterprise credit reports is low, the timeliness of centralized queries is poor, and the data preparation time is long. Reports cannot be obtained quickly outside of working hours, and data security and compliant use must be guaranteed.

Method used

Through the interaction of multiple servers, a pre-assembled report is generated using the credit scoring chain. Multiple keys are used to encrypt the data, and the data is pre-assembled and verified before querying to generate a pre-assembled report, ensuring data security and compliance.

Benefits of technology

Upon receiving a query request, a credit report is quickly generated using a pre-assembled report, reducing query time and improving query efficiency. The key encryption process ensures both data security and timeliness.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119337849B_ABST
    Figure CN119337849B_ABST
Patent Text Reader

Abstract

This application discloses a credit report generation method, system, computer equipment, and storage medium. The method includes: generating a report pre-assembly request via a first server and uploading it to a credit reporting chain; generating a set of keys and a data preparation request based on the report pre-assembly request via a second server, and obtaining a first key, a second key, and the data preparation request from them, and sending them to a third server; enabling the third server to obtain target data, encrypting the target data sequentially using the first key and the second key, and uploading it to the credit reporting chain; enabling the first server to decrypt the encrypted data based on the second key, and generating a pre-assembled report based on the decrypted data and a preset report template; enabling the first server to decrypt the decrypted data based on the first key, and generating a credit report based on the decrypted data and the pre-assembled report. This application can balance the timeliness of credit inquiries with data security.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This application belongs to the field of data processing technology, specifically relating to a credit report generation method, system, computer equipment, and storage medium. Background Technology

[0002] Corporate credit reports play a crucial role in the social credit system, helping companies and financial institutions comprehensively assess a company's creditworthiness. In the modern financial system, they contribute to reducing financial credit risk and promoting the rational allocation of financial resources. Ensuring efficient access to corporate credit reports is essential for facilitating convenient financial services and improving customer satisfaction.

[0003] In actual credit report inquiry services, on the one hand, user inquiry activities are usually concentrated during daytime working hours, and the report inquiry requests throughout the day show an uneven distribution. When the inquiries are too concentrated, it will be impossible to obtain credit reports quickly. On the other hand, some credit reports involve a large amount of data, and the data preparation time for some credit reports is also a factor that restricts the efficiency of credit report inquiries, resulting in poor timeliness of report inquiries. In addition, in the process of generating credit reports, it is also necessary to ensure the safe and compliant use of credit data.

[0004] Therefore, under the premise of ensuring the safe and compliant use of credit data, how to improve the efficiency of credit report query has become an urgent technical problem to be solved. Summary of the Invention

[0005] The purpose of this application is to propose a credit report generation method, system, computer equipment, and storage medium to solve the technical problems of low efficiency in centralized credit report query and poor report query timeliness caused by long data preparation time in the prior art.

[0006] To address the aforementioned technical problems, this application provides a method for generating credit reports, employing the following technical solution:

[0007] A method for generating a credit report, comprising:

[0008] A report pre-assembly request is generated by the first server and uploaded to the credit reporting chain. The report pre-assembly request includes at least one enterprise identifier.

[0009] The second server obtains the report pre-assembly request from the credit chain, generates a set of keys for each enterprise based on the report pre-assembly request, generates a data preparation request, obtains the first key and the second key from the set of keys, and sends the data preparation request, the first key and the second key to the third server.

[0010] The third server obtains the target data of each enterprise according to the data preparation request, encrypts the target data in sequence using the first key and the second key to obtain encrypted data, uploads the encrypted data to the credit chain, and sends the first status information to the second server.

[0011] The second server sends the second status information and the second key to the first server based on the first status information.

[0012] The encrypted data is obtained from the credit chain through the first server, the encrypted data is decrypted based on the second key to obtain decrypted data, and a preset report template is obtained. A pre-assembled report is generated based on the decrypted data and the preset report template.

[0013] When the first server receives a corporate credit inquiry request sent by the user, it verifies the information of the queried company based on the corporate credit inquiry request and uploads the verification result to the credit chain.

[0014] The verification result is obtained through the second server. When the verification is successful based on the verification result, the first key is sent to the first server.

[0015] The first server decrypts the first decrypted data based on the first key to obtain the second decrypted data, and obtains the pre-assembled report. Based on the second decrypted data and the pre-assembled report, a credit report is generated.

[0016] Further, the step of encrypting the target data sequentially using the first key and the second key to obtain encrypted data includes:

[0017] Determine the specified data and non-specified data in the target data, and encrypt the specified data according to the first key to obtain the first encrypted data;

[0018] Construct a placeholder identifier, the placeholder identifier having the same length as the specified data, and generate a mapping relationship set between the placeholder identifier and the first encrypted data;

[0019] The placeholder identifier and the unspecified data are encrypted using the second key to obtain the second encrypted data;

[0020] The set of mapping relationships and the second encrypted data are used as the encrypted data.

[0021] Further, the step of determining the specified data and non-specified data in the target data includes:

[0022] Determine the classification and hierarchy of data object fields in the target data; match the specified target field from each of the classified and hierarchical data object fields; use the field value corresponding to the target field as the specified data; and use the field values ​​of the remaining fields other than the target field as non-specified data; and / or

[0023] Determine the leaf fields contained in the target data, obtain a preset random selection probability, randomly select a portion of the leaf fields as target fields based on the random selection probability, and treat the unselected leaf fields as non-specified data.

[0024] Furthermore, when the verification is determined to be successful based on the verification result, the method further includes:

[0025] The second server obtains the third key and the fourth key from the set of keys, sends the third key to the first server, and sends the third key and the fourth key to the fourth server.

[0026] When the first server receives a corporate credit inquiry request sent by the user, the method further includes:

[0027] The fourth key is sent to the user terminal through the second server.

[0028] After the step of generating a credit report based on the secondary decryption data and the pre-assembled report, the method further includes:

[0029] The first server encrypts the credit report using the third key to obtain a first encrypted report, and then uploads the first encrypted report to the credit chain.

[0030] The first encrypted report is obtained through the fourth server, and the first encrypted report is decrypted using the third key to obtain a decrypted report. The decrypted report is then encrypted using the fourth key to obtain a second encrypted report. The second encrypted report is then uploaded to the credit reporting chain so that the user terminal can obtain the second encrypted report from the credit reporting chain and decrypt it using the fourth key to obtain a credit report.

[0031] Furthermore, the step of decrypting the encrypted data based on the second key to obtain decrypted data includes:

[0032] The encrypted data is obtained, the mapping relationship set and the second encrypted data are obtained based on the encrypted data, and the second encrypted data is decrypted using the second key to obtain the placeholder identifier and the unspecified data. The placeholder identifier and the unspecified data are the first decryption data.

[0033] The step of generating a pre-assembled report based on the first decryption data and the preset report template includes:

[0034] The elements to be filled in the preset report template and the preset filling rules are determined. The placeholders and the unspecified data are processed into structured data. The preset report template is filled according to the structured data and the preset filling rules. A pre-assembled report in the target format is generated based on the preset report template after filling the data. The pre-assembled report contains placeholders.

[0035] Furthermore, the step of generating a credit report based on the secondary decryption data and the pre-assembled report includes:

[0036] A placeholder identifier is determined in the pre-assembled report. First encrypted data is determined based on the placeholder identifier and the mapping relationship set. The first encrypted data is decrypted based on the first key to obtain the specified data. The placeholder identifier is replaced with the specified data in the area of ​​the pre-assembled report by means of text replacement or layer overlay to obtain the credit report.

[0037] Furthermore, prior to the step of obtaining the enterprise credit inquiry request sent by the user terminal through the first server, the method further includes:

[0038] The user terminal uploads the basic information and authorization information of the querying enterprise to the credit reporting chain;

[0039] The step of verifying the information of the querying enterprise based on the enterprise credit inquiry request includes:

[0040] The first server obtains the basic information and authorization information of the querying enterprise from the credit reporting chain, verifies the consistency of the basic information and the validity of the authorization information, obtains the verification result, and uploads it to the credit reporting chain.

[0041] To address the aforementioned technical problems, this application also provides a credit report generation system, which employs the following technical solution:

[0042] A credit report generation system, the system comprising a first server, a second server, and a third server;

[0043] The first server is used to generate a report pre-assembly request and upload the report pre-assembly request to the credit reporting chain. The report pre-assembly request includes at least one enterprise identifier.

[0044] The second server is used to obtain the report pre-assembly request from the credit chain, generate a set of keys for each enterprise based on the report pre-assembly request, generate a data preparation request, obtain a first key and a second key from the set of keys, and send the data preparation request, the first key and the second key to the third server.

[0045] The third server is used to obtain target data of each enterprise according to the data preparation request, encrypt the target data in sequence with the first key and the second key to obtain encrypted data, upload the encrypted data to the credit chain, and send the first status information to the second server.

[0046] The second server is also used to send second status information and the second key to the first server based on the first status information;

[0047] The first server is also used to obtain the encrypted data from the credit information chain, decrypt the encrypted data based on the second key to obtain decrypted data, obtain a preset report template, generate a pre-assembled report based on the decrypted data and the preset report template; and when receiving a corporate credit information query request sent by a user terminal, verify the information of the querying company based on the corporate credit information query request, and upload the verification result to the credit information chain.

[0048] The second server is also used to obtain the verification result, and when it is determined that the verification is successful based on the verification result, it sends the first key to the first server;

[0049] The first server is also used to decrypt the first decrypted data based on the first key to obtain the second decrypted data, and to obtain the pre-assembled report, and to generate a credit report based on the second decrypted data and the pre-assembled report.

[0050] To address the aforementioned technical problems, this application also provides a computer device that employs the following technical solution:

[0051] A computer device includes a memory and a processor, the memory storing computer-readable instructions, the processor executing the computer-readable instructions to implement the steps of the credit report generation method as described in any of the preceding claims.

[0052] To address the aforementioned technical problems, this application also provides a computer-readable storage medium, employing the technical solution described below:

[0053] A computer-readable storage medium storing computer-readable instructions, which, when executed by a processor, implement the steps of the credit report generation method as described in any one of the preceding descriptions.

[0054] Compared with the prior art, the embodiments of this application have the following main advantages:

[0055] This application enables interaction among multiple servers based on a credit information chain. Before querying a company's credit information, the credit data is pre-assembled by multiple servers to obtain a pre-assembled report. Whenever a company's credit information query request is received, the final credit report is generated using the pre-assembled report. This can greatly reduce query time and improve query efficiency. Furthermore, various requests and data during the multi-server interaction process are encrypted with keys and then stored in the credit information chain to achieve process evidence preservation, thus balancing the timeliness of credit information queries with data security. Attached Figure Description

[0056] To more clearly illustrate the solutions in this application, the accompanying drawings used in the description of the embodiments of this application will be briefly introduced below. Obviously, the accompanying drawings described below are some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0057] Figure 1 An exemplary system architecture diagram is shown, in which this application can be applied;

[0058] Figure 2 A flowchart illustrating one embodiment of the credit report generation method according to this application is shown;

[0059] Figure 3 A schematic diagram of the structure of an embodiment of the credit report generation system according to this application is shown;

[0060] Figure 4 A schematic diagram of another embodiment of the credit report generation system according to this application is shown;

[0061] Figure 5 A schematic diagram of the structure of one embodiment of a computer device according to this application is shown. Detailed Implementation

[0062] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application pertains; the terminology used herein in the specification of the application is for the purpose of describing particular embodiments only and is not intended to be limiting of the application; the terms "comprising" and "having," and any variations thereof, in the specification, claims, and foregoing drawings of this application, are intended to cover non-exclusive inclusion. The terms "first," "second," etc., in the specification, claims, or foregoing drawings of this application are used to distinguish different objects, not to describe a particular order.

[0063] In this document, the term "embodiment" means that a particular feature, structure, or characteristic described in connection with an embodiment may be included in at least one embodiment of this application. The appearance of this phrase in various places throughout the specification does not necessarily refer to the same embodiment, nor is it a separate or alternative embodiment mutually exclusive with other embodiments. It will be explicitly and implicitly understood by those skilled in the art that the embodiments described herein can be combined with other embodiments.

[0064] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings.

[0065] like Figure 1 As shown, system architecture 100 may include terminal device 101, network 102, and server 103. Terminal device 101 may be a laptop 1011, tablet 1012, or mobile phone 1013. Network 102 is used as a medium to provide a communication link between terminal device 101 and server 103. Network 102 may include various connection types, such as wired, wireless communication links, or fiber optic cables.

[0066] Users can use terminal device 101 to interact with server 103 via network 102 to receive or send messages, etc. Various communication client applications can be installed on terminal device 101, such as web browser applications, shopping applications, search applications, instant messaging tools, email clients, social media platform software, etc.

[0067] Terminal device 101 can be any electronic device with a display screen and support web browsing. In addition to laptop computer 1011, tablet computer 1012 or mobile phone 1013, terminal device 101 can also be a laptop computer and a desktop computer.

[0068] Server 103 can be a server that provides various services, such as a backend server that provides support for the pages displayed on terminal device 101.

[0069] It should be noted that the credit report generation method provided in this application embodiment is generally executed by a server. Specifically, the credit report generation method provided in this embodiment is executed interactively by multiple servers. Accordingly, a credit report generation system is provided, which includes multiple servers for interactively executing the credit report generation method.

[0070] It should be understood that Figure 1 The number of terminal devices 101, network 102, and server 103 shown is merely illustrative. Depending on implementation needs, there can be any number of terminal devices 101, network 102, and server 103.

[0071] Continue to refer to Figure 2 A flowchart illustrating an embodiment of a credit reporting method according to this application is shown. The credit reporting method includes the following steps S201 to S208:

[0072] S201, a report pre-assembly request is generated through the first server, and the report pre-assembly request is uploaded to the credit reporting chain. The report pre-assembly request includes at least one enterprise identifier.

[0073] In this embodiment, the report pre-assembly request is used to trigger the generation of a pre-assembled report. This can be triggered periodically or when data from any object is updated. The generation of a credit report involves multiple parties, including management agencies, data agencies, financial institutions, and credit reporting agencies. The first server resides within the credit reporting agency, providing the credit report generation service.

[0074] In this embodiment, the credit reporting chain is a specific implementation of blockchain in the field of credit reporting. It uses the distributed ledger technology, encryption algorithms and smart contracts of blockchain to solve the problems of data silos, information asymmetry and insufficient data security in the traditional credit reporting system.

[0075] In this embodiment, the enterprise identifier may be an enterprise code or other information that can be used to identify an enterprise.

[0076] In this embodiment, a report pre-assembly request can be generated at any time, especially during non-working hours. Pre-assembling reports during non-working hours can improve the efficiency of credit report queries in situations such as subsequent centralized queries or long data preparation times.

[0077] S202, the report pre-assembly request is obtained from the credit chain through the second server, a set of keys is generated for each enterprise based on the report pre-assembly request, and a data preparation request is generated. The first key and the second key are obtained from the set of keys, and the data preparation request, the first key and the second key are sent to the third server.

[0078] In this embodiment, the second server resides in the management organization, which focuses on services such as overall supervision and authorization.

[0079] In this embodiment, the generated key is used for symmetric encryption.

[0080] In this embodiment, the data preparation request is used to obtain the data used to generate the credit report, i.e., the target data, from a subsequent third-party server.

[0081] S203, the third server obtains the target data of each enterprise according to the data preparation request, encrypts the target data in sequence using the first key and the second key to obtain encrypted data, uploads the encrypted data to the credit chain, and sends the first status information to the second server.

[0082] In this embodiment, the third server exists in the data organization, which focuses on data collection and analysis.

[0083] In this embodiment, the first status information refers to the notification information that the third server has completed uploading the encrypted data to the credit chain. This notification information can be sent directly to the second server, or it can be uploaded to the credit chain first for process evidence storage to ensure data security and compliance.

[0084] S204, the second server sends the second status information and the second key to the first server based on the first status information.

[0085] In this embodiment, the second status information refers to the credit report pre-assembly license information, which authorizes the first server to perform credit report pre-assembly.

[0086] S205, the encrypted data is obtained from the credit chain through the first server, the encrypted data is decrypted based on the second key to obtain decrypted data, and a preset report template is obtained. A pre-assembled report is generated based on the decrypted data and the preset report template.

[0087] In this embodiment, a preset report template is used for dynamic data filling. This dynamic filling operation is completed in the pre-assembly stage, which can save data filling time when querying credit reports. Taking the dynamic data filling of an HTML template to generate a PDF report as an example, the preset report template includes template elements such as text paragraphs, form components, and chart components, and defines template element filling rules, such as the following:

[0088] Use the placeholder ${PLACEHOLDER} to indicate that this position needs to be replaced with the data in the data to be filled whose identifier name is PLACEHOLDER;

[0089] The placeholder ${PLACEHOLDER.FI ELD} is used to indicate that this position needs to be replaced with the FI ELD field of the data object whose identifier name is PLACEHOLDER in the data to be filled;

[0090] Use placeholder <#li st PLACEHOLDER>${PLACEHOLDER.FIELD}< / #l i st> The nested combination indicates that the data with the identifier name PLACEHOLDER in the data to be filled is an array, and the array is traversed and the FI ELD field in the array object is filled in a loop to the position of the placeholder.

[0091] Of course, other filling rules can be defined, which are not limited here.

[0092] S206, when the first server receives a corporate credit inquiry request sent by the user, it verifies the information of the queried company based on the corporate credit inquiry request and uploads the verification result to the credit chain.

[0093] In this embodiment, the user terminal is located in a financial institution, which provides various financial products and services such as loans, deposits, and insurance to support the financial needs of individuals and businesses, and therefore has a need for credit inquiries.

[0094] In one embodiment, before the step of obtaining the enterprise credit inquiry request sent by the user terminal through the first server, the method further includes: causing the user terminal to upload the basic information and authorization information of the enterprise to be queried to the credit chain.

[0095] Accordingly, the step of verifying the information of the querying enterprise based on the enterprise credit inquiry request includes: obtaining the basic information and authorization information of the querying enterprise from the credit chain through the first server, verifying the consistency of the basic information and the validity of the authorization information, obtaining the verification result and uploading it to the credit chain.

[0096] This embodiment verifies the identity of the user submitting the query request to ensure that the user is a compliant and authorized enterprise, thereby guaranteeing data security. The information of the enterprise being queried includes basic enterprise information and authorization information. The authorization information may specifically be an enterprise authorization letter, which is electronically signed by a CA institution. Therefore, during verification, the CA institution's signature verification interface can be called to verify the validity of the signature and the consistency of the enterprise information.

[0097] S207, obtain the verification result through the second server, and when the verification is successful based on the verification result, send the first key to the first server.

[0098] In this embodiment, if the verification is successful, the credit scoring chain smart contract will drive the second server to share the first key with the first server.

[0099] S208, the first server decrypts the first decrypted data based on the first key to obtain the second decrypted data, and obtains the pre-assembled report, and generates a credit report based on the second decrypted data and the pre-assembled report.

[0100] This application enables interaction among multiple servers based on a credit information chain. Before querying a company's credit information, the credit data is pre-assembled by multiple servers to obtain a pre-assembled report. Whenever a company's credit information query request is received, the final credit report is generated using the pre-assembled report. This can greatly reduce query time and improve query efficiency. Furthermore, various requests and data during the multi-server interaction process are encrypted with keys and then stored in the credit information chain to achieve process evidence preservation, thus balancing the timeliness of credit information queries with data security.

[0101] In one embodiment, step S202, which involves sequentially encrypting the target data using the first key and the second key to obtain encrypted data, includes:

[0102] Determine designated data and non-designated data in the target data; encrypt the designated data using the first key to obtain first encrypted data; construct a placeholder identifier with the same length as the designated data, and generate a mapping relationship set between the placeholder identifier and the first encrypted data; encrypt the placeholder identifier and the non-designated data using the second key to obtain second encrypted data; use the mapping relationship set and the second encrypted data as the encrypted data.

[0103] In this embodiment, the specified data specifically refers to sensitive data fields and their values. Specifically, the target data can be JSON data, which contains key-value pairs of several JSON leaf fields. KV(key, value) is used to represent the key-value pairs of JSON leaf fields. For example, as shown in Table 1 below, KV(JSON_OBJECT.FILED_1, field value 1) indicates that the value of the FILED_1 field of the JSON_OBJECT object is "field value 1"; (JSON_ARRAY@0.FILED_a, field value 4) indicates that the value of the FILED_a field of the 0th element of the JSON_ARRAY array is "field value 4".

[0104] Table 1

[0105] JSON_OBJECT.FILED_1 Field value 1 JSON_OBJECT.FILED_2 Field value 2 JSON_OBJECT.FILED_3 Field value 3 JSON_ARRAY@0.FILED_a Field value 4 JSON_ARRAY@0.FILED_b Field value 5 JSON_ARRAY@0.FILED_c Field value 6 JSON_ARRAY@1.FILED_a Field value 7 JSON_ARRAY@1.FILED_b Field value 8 JSON_ARRAY@1.FILED_c Field value 9

[0106] The encryption process of this step will be explained below in conjunction with symmetric encryption. In this embodiment, symmetric encryption is represented in the following way:

[0107] Let P represent the plaintext, k represent the key, S = SE(P, k) represent the ciphertext obtained by symmetric encryption of plaintext P using key k, and SD(S, k) represent the plaintext obtained by symmetric decryption of ciphertext S using key k. According to the principle of symmetric encryption, SD(SE(P, k), k) = P.

[0108] Based on this, for the selected sensitive data field KV(k1, v1), the value v1 is encrypted using the first key b to obtain the first encrypted data SE(v1, b); a placeholder identifier i1 is constructed for the encrypted sensitive field, and a mapping relationship KV(i1, SE(v1, b)) between the placeholder identifier and the encrypted data is generated. This mapping relationship will be uploaded to the credit reporting chain for storage. In this way, the set of mapping relationships obtained for multiple sensitive fields is shown in Table 2 below:

[0109] Table 2

[0110] i1 SE("Field value 3", b) i2 SE("Field value 5", b) i3 SE("Field value 8", b)

[0111] Where the length of i1 is the same as the length of v1, after encryption with the first key b, KV(k1, v1) in the original data is replaced with KV(k1, i1), and so on. After encrypting the sensitive fields of Table 1 above with the first key b, it will be transformed into Table 3 below:

[0112] Table 3

[0113] JSON_OBJECT.FILED_1 Field value 1 JSON_OBJECT.FILED_2 Field value 2 JSON_OBJECT.FILED_3 i1 JSON_ARRAY@0.FILED_a Field value 4 JSON_ARRAY@0.FILED_b i2 JSON_ARRAY@0.FILED_c Field value 6 JSON_ARRAY@1.FILED_a Field value 7 JSON_ARRAY@1.FILED_b i3 JSON_ARRAY@1.FILED_c Field value 9

[0114] Based on Table 3, the second key a is used to encrypt the placeholder identifiers i1, i2, and i3, as well as the unspecified data (other data in Table 3 besides the placeholder identifiers) to obtain the second encrypted data, and the second encrypted data is uploaded to the credit chain for storage.

[0115] This embodiment allows for targeted encryption and on-chain storage of certain data, preventing the inquirer from obtaining complete and usable credit information before final authorization for querying the credit report. This avoids the unauthorized use or leakage of pre-assembled reports due to cyberattacks before formal authorization, effectively ensuring data security.

[0116] In a further embodiment, the step of determining the specified data and non-specified data in the target data includes:

[0117] Determine the classification and hierarchy of data object fields in the target data; match the specified target field from each of the classified and hierarchical data object fields; use the field value corresponding to the target field as the specified data; and use the field values ​​of the remaining fields other than the target field as non-specified data; and / or

[0118] Determine the leaf fields contained in the target data, obtain a preset random selection probability, randomly select a portion of the leaf fields as target fields based on the random selection probability, and treat the unselected leaf fields as non-specified data.

[0119] In this embodiment, the sensitive data to be encrypted can be more accurately determined by the data classification and grading method (field name matching method). For example, if the FILED_3 field of the JSON_OBJECT data object and the FILED_b field of the JSON_ARRAY array element are selected as sensitive data in Table 1, then the encrypted data is shown in Table 3.

[0120] For the random selection method, by setting a random probability to randomly select some leaf fields as sensitive data, such as when the random probability is 1 / 3, one possible encrypted representation of the sensitive data in Table 1 is shown in Table 4 below:

[0121] Table 4

[0122] JSON_OBJECT.FILED_1 i1 JSON_OBJECT.FILED_2 Field value 2 JSON_OBJECT.FILED_3 i2 JSON_ARRAY@0.FILED_a Field value 4 JSON_ARRAY@0.FILED_b Field value 5 JSON_ARRAY@0.FILED_c Field value 6 JSON_ARRAY@1.FILED_a Field value 7 JSON_ARRAY@1.FILED_b Field value 8 JSON_ARRAY@1.FILED_c i3

[0123] In this embodiment, the use of random probability makes the selection of sensitive data to be encrypted more flexible, which can improve data security to a certain extent.

[0124] In a further embodiment, when the verification is successful based on the verification result, the method further includes: obtaining a third key and a fourth key from the set of keys through the second server, sending the third key to the first server, and sending the third key and the fourth key to a fourth server, wherein the fourth server exists in the management agency and is used to realize the secure cross-organizational transmission of credit reports under security supervision, thereby improving the regulator's control over the process.

[0125] Accordingly, when the first server receives a corporate credit inquiry request sent by the user, the method further includes: sending the fourth key to the user through the second server.

[0126] Accordingly, after the step of generating a credit report based on the secondary decryption data and the pre-assembled report, the method further includes: having the first server encrypt the credit report using the third key to obtain a first encrypted report, and uploading the first encrypted report to the credit reporting chain; obtaining the first encrypted report through the fourth server, decrypting the first encrypted report using the third key to obtain a decrypted report, then encrypting the decrypted report using the fourth key to obtain a second encrypted report, and uploading the second encrypted report to the credit reporting chain, so that the user terminal obtains the second encrypted report from the credit reporting chain and decrypts the second encrypted report using the fourth key to obtain a credit report.

[0127] In this embodiment, after pre-assembly by combining multiple keys, the keys involved in the actual authorized query stage are shared through a smart contract. The keys of the report provider and the report queryer are then replaced through the fourth server, thereby improving the regulator's control over the process. Furthermore, the report generator and the report recipient are effectively isolated through the fourth server, ensuring the security and compliance of the credit report data.

[0128] In a further embodiment, the step of decrypting the encrypted data based on the second key to obtain decrypted data includes: acquiring the encrypted data, obtaining the mapping relationship set and the second encrypted data according to the encrypted data, and decrypting the second encrypted data using the second key to obtain the placeholder identifier and the unspecified data, wherein the placeholder identifier and the unspecified data are the decrypted data.

[0129] Accordingly, the step of generating a pre-assembled report based on the first decryption data and the preset report template includes: determining the elements to be filled in the preset report template and the preset filling rules; performing structuring processing on the placeholder identifier and the non-specified data to obtain structured data; filling the preset report template according to the structured data and the preset filling rules; and generating a pre-assembled report in the target format based on the preset report template after filling the data, wherein the pre-assembled report contains placeholder identifiers.

[0130] In this embodiment, a specific data format (such as JSON) is used to structure the data (i.e., the placeholder identifiers and the unspecified data) that need to be used with the report template. The following JSON format example text contains a data object named JSON_OBJECT and a data array named JSON_ARRAY. The data field names of JSON_OBJECT are FI LED_1, FI LED_2, and FI LED_3, and the array elements of JSON_ARRAY are data objects with field names FI LED_a, FI LED_b, and FI LED_c.

[0131]

[0132] When populating the data, the prepared structured report data is populated into the report template according to the data population rules. For example, the effect of populating an HTML template using the aforementioned JSON example is as follows:

[0133] Field population:

[0134] “ Report Name: ${JSON_OBJECT.FI LED_1} "After filling, we get" Report Name: Field Value 1 ".

[0135] Array filling:

[0136]

[0137] After filling, we get:

[0138]

[0139] After the template is populated, it is converted into a report format file (such as converting an HTML file into a PDF report). This process is the most time-consuming step when dynamically populating data. Performing this process through pre-assembly can reduce the time spent on subsequent queries and improve query efficiency.

[0140] In some embodiments, the generated report can also be processed, such as adding new content, modifying content, or adding layers to the generated report.

[0141] In a further embodiment, the step of generating a credit report based on the secondary decryption data and the pre-assembled report includes: determining a placeholder identifier in the pre-assembled report; determining first encrypted data according to the placeholder identifier and the mapping relationship set; decrypting the first encrypted data according to the first key to obtain the specified data; and replacing the placeholder identifier with the specified data in the area of ​​the pre-assembled report by means of text replacement or layer overlay to obtain the credit report.

[0142] This step, by replacing the placeholder markers based on the pre-assembled report, can significantly shorten the credit report generation time and improve query efficiency, especially in cases of centralized credit report queries or complex data preparation.

[0143] It should be noted that, since the pre-assembled report stage has completed time-consuming operations such as data querying, data processing, and target format file conversion, the generated pre-assembled report has encrypted replacements of some content to ensure data security. At the same time, all kinds of requests, verification results, encrypted data, and encrypted reports in the above embodiments are uploaded to the credit reporting chain, which can realize process evidence preservation and improve the reliability of credit report generation. The credit report generation method of this embodiment takes into account both timeliness and security.

[0144] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. This computer program can be stored in a computer-readable storage medium, and when executed, it can include the processes of the embodiments of the methods described above. The aforementioned storage medium can be a non-volatile storage medium such as a magnetic disk, optical disk, or read-only memory (ROM), or random access memory (RAM).

[0145] It should be understood that although the steps in the flowcharts of the accompanying figures are shown sequentially as indicated by the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the accompanying figures may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily completed at the same time, but can be executed at different times, and their execution order is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the sub-steps or stages of other steps.

[0146] Further reference Figure 3 As a response to the above Figure 2 The implementation of the method shown in this application provides an embodiment of a credit report generation system, which is similar to... Figure 2 The method embodiments shown correspond to those described. Figure 3 As shown, the credit report generation system 300 described in this embodiment includes: a first server 301, a second server 302, and a third server 303. Wherein:

[0147] The first server 301 is used to generate a report pre-assembly request and upload the report pre-assembly request to the credit reporting chain. The report pre-assembly request includes at least one enterprise identifier.

[0148] The second server 302 is used to obtain the report pre-assembly request from the credit chain, generate a set of keys for each enterprise based on the report pre-assembly request, generate a data preparation request, obtain a first key and a second key from the set of keys, and send the data preparation request, the first key and the second key to the third server 303.

[0149] The third server 303 is used to obtain target data of each of the enterprises according to the data preparation request, encrypt the target data in sequence with the first key and the second key to obtain encrypted data, upload the encrypted data to the credit chain, and send the first status information to the second server 302.

[0150] The second server 302 is further configured to send second status information and the second key to the first server 301 based on the first status information;

[0151] The first server 301 is also configured to obtain the encrypted data from the credit information chain, decrypt the encrypted data based on the second key to obtain decrypted data, obtain a preset report template, generate a pre-assembled report based on the decrypted data and the preset report template; and when receiving a corporate credit information query request sent by a user terminal, verify the information of the querying company based on the corporate credit information query request, and upload the verification result to the credit information chain.

[0152] The second server 302 is also used to obtain the verification result, and when it is determined that the verification is successful based on the verification result, send the first key to the first server 301;

[0153] The first server 301 is further configured to decrypt the first decrypted data based on the first key to obtain the second decrypted data, and obtain the pre-assembled report, and generate a credit report based on the second decrypted data and the pre-assembled report.

[0154] The credit report generation system provided in this application is based on the credit chain to realize the interaction of multiple servers. Before querying the credit information of an enterprise, the credit data is pre-assembled through multiple servers to obtain a pre-assembled report. Whenever an enterprise credit query request is received, the final credit report is generated through the pre-assembled report, which can greatly reduce query time and improve query efficiency. In addition, various requests and data in the process of multi-server interaction are encrypted with keys and then saved to the credit chain to realize process evidence preservation, and balance the timeliness of credit query and data security.

[0155] In one embodiment, when the third server 303 encrypts the target data sequentially using the first key and the second key to obtain encrypted data, it specifically performs the following steps: determining specified data and unspecified data in the target data; encrypting the specified data using the first key to obtain first encrypted data; constructing a placeholder identifier with the same length as the specified data; generating a mapping relationship set between the placeholder identifier and the first encrypted data; encrypting the placeholder identifier and the unspecified data using the second key to obtain second encrypted data; and using the mapping relationship set and the second encrypted data as the encrypted data.

[0156] In one embodiment, when the third server 303 determines the specified data and non-specified data in the target data, it specifically performs the following steps: determining the classification and grading of the data object fields in the target data; matching the specified target field from each of the classified and graded data object fields; using the field value corresponding to the target field as the specified data; and using the field values ​​of the remaining fields other than the target field as non-specified data; and / or determining the leaf fields contained in the target data; obtaining a preset random selection probability; randomly selecting some leaf fields from the leaf fields based on the random selection probability as the target fields; and using the unselected leaf fields as non-specified data.

[0157] In one embodiment, such as Figure 4 As shown, the credit report generation system also includes a fourth server 304. When the second server 302 determines that the verification is successful based on the verification result, it is also used to obtain a third key and a fourth key from the set of keys, send the third key to the first server 301, and send the third key and the fourth key to the fourth server 304.

[0158] Accordingly, the second server 302 is also used to send the fourth key to the user terminal when the first server 301 receives an enterprise credit inquiry request sent by the user terminal.

[0159] Accordingly, the first server 301 is further configured to, after generating a credit report based on the secondary decryption data and the pre-assembled report, encrypt the credit report using the third key to obtain a first encrypted report, and upload the first encrypted report to the credit reporting chain; the fourth server 304 is configured to obtain the first encrypted report, decrypt the first encrypted report using the third key to obtain a decrypted report, encrypt the decrypted report using the fourth key to obtain a second encrypted report, and upload the second encrypted report to the credit reporting chain, so that the user terminal can obtain the second encrypted report from the credit reporting chain and decrypt the second encrypted report using the fourth key to obtain a credit report.

[0160] In one embodiment, when the first server 301 decrypts the encrypted data based on the second key to obtain decrypted data, it specifically performs the following steps: acquiring the encrypted data, obtaining the mapping relationship set and the second encrypted data based on the encrypted data, and decrypting the second encrypted data using the second key to obtain the placeholder identifier and the unspecified data, wherein the placeholder identifier and the unspecified data are the decrypted data.

[0161] Accordingly, when the first server 301 generates a pre-assembled report based on the decrypted data and the preset report template, it is specifically used to: determine the elements to be filled in the preset report template and the preset filling rules; perform structuring processing on the placeholder identifier and the non-specified data to obtain structured data; fill the preset report template according to the structured data and the preset filling rules; and generate a pre-assembled report in the target format based on the preset report template after filling the data, wherein the pre-assembled report contains placeholder identifiers.

[0162] In one embodiment, when the first server 301 generates a credit report based on the secondary decryption data and the pre-assembled report, it is specifically used to: determine a placeholder identifier in the pre-assembled report; determine first encrypted data according to the placeholder identifier and the mapping relationship set; decrypt the first encrypted data according to the first key to obtain the specified data; and replace the placeholder identifier with the specified data in the area of ​​the pre-assembled report by means of text replacement or layer overlay to obtain the credit report.

[0163] In one embodiment, the user terminal is used to upload the basic information and authorization information of the querying enterprise to the credit information chain before the first server 301 obtains the enterprise credit information query request sent by the user terminal.

[0164] Accordingly, when the first server 301 verifies the information of the querying enterprise based on the enterprise credit query request, it is specifically used to obtain the basic information and authorization information of the querying enterprise from the credit chain, verify the consistency of the basic information and the validity of the authorization information, obtain the verification result and upload it to the credit chain.

[0165] It should be noted that the beneficial effects of the interaction process between the first server 301, the second server 302, the third server 303, the fourth server 304, the user terminal, and the credit chain can be referred to the above method embodiments, and will not be elaborated here.

[0166] To address the aforementioned technical problems, embodiments of this application also provide a computer device. Please refer to [link / reference needed]. Figure 5 , Figure 5 This is a basic structural block diagram of the computer device in this embodiment.

[0167] The computer device 4 includes a memory 41, a processor 42, and a network interface 43 that are interconnected via a system bus. It should be noted that only a computer device 4 with a memory 41, a processor 42, and a network interface 43 is shown in the figure; however, it should be understood that it is not required to implement all the components shown, and more or fewer components can be implemented alternatively. Those skilled in the art will understand that the computer device described here is a device capable of automatically performing numerical calculations and / or information processing according to pre-set or stored instructions. Its hardware includes, but is not limited to, microprocessors, application-specific integrated circuits (ASICs), programmable gate arrays (FPGAs), digital digital processors (DSPs), embedded devices, etc.

[0168] The computer device can be a desktop computer, laptop, handheld computer, or cloud server, etc. The computer device can interact with the user via a keyboard, mouse, remote control, touchpad, or voice control.

[0169] The memory 41 includes at least one type of readable storage medium, including flash memory, hard disk, multimedia card, card-type memory (e.g., SD or DX memory), random access memory (RAM), static random access memory (SRAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), programmable read-only memory (PROM), magnetic memory, magnetic disk, optical disk, etc. In some embodiments, the memory 41 may be an internal storage unit of the computer device 4, such as the hard disk or memory of the computer device 4. In other embodiments, the memory 41 may also be an external storage device of the computer device 4, such as a plug-in hard disk, smart memory card (SMC), secure digital card (SD) card, flash memory card, etc. of the computer device 4. Of course, the memory 41 may also include both the internal storage unit and the external storage device of the computer device 4. In this embodiment, the memory 41 is typically used to store the operating system and various application software installed on the computer device 4, such as the program code of the credit report generation method. In addition, the memory 41 can also be used to temporarily store various types of data that have been output or will be output.

[0170] In some embodiments, the processor 42 may be a central processing unit (CPU), a controller, a microcontroller, a microprocessor, or other data processing chip. The processor 42 is typically used to control the overall operation of the computer device 4. In this embodiment, the processor 42 is used to run program code stored in the memory 41 or process data, for example, to run the program code of the credit report generation method.

[0171] The network interface 43 may include a wireless network interface or a wired network interface, which is typically used to establish communication connections between the computer device 4 and other electronic devices.

[0172] This application also provides another embodiment, namely, providing a computer-readable storage medium storing computer-readable instructions that can be executed by at least one processor to cause the at least one processor to perform the steps of the credit report generation method described above.

[0173] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes several instructions to cause a terminal device (which may be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in the various embodiments of this application.

[0174] Obviously, the embodiments described above are only some embodiments of this application, not all embodiments. The accompanying drawings show preferred embodiments of this application, but do not limit the patent scope of this application. This application can be implemented in many different forms; rather, the purpose of providing these embodiments is to provide a more thorough and comprehensive understanding of the disclosure of this application. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art can still modify the technical solutions described in the foregoing specific embodiments, or make equivalent substitutions for some of the technical features. Any equivalent structures made using the content of this application's specification and drawings, directly or indirectly applied to other related technical fields, are similarly within the scope of patent protection of this application.

Claims

1. A method of generating a credit report, the method comprising: include: A report pre-assembly request is generated by the first server and uploaded to the credit reporting chain. The report pre-assembly request includes at least one enterprise identifier. The second server obtains the report pre-assembly request from the credit chain, generates a set of keys for each enterprise based on the report pre-assembly request, generates a data preparation request, obtains the first key and the second key from the set of keys, and sends the data preparation request, the first key and the second key to the third server. The third server obtains the target data of each enterprise according to the data preparation request, encrypts the target data in sequence using the first key and the second key to obtain encrypted data, uploads the encrypted data to the credit chain, and sends the first status information to the second server. The second server sends the second status information and the second key to the first server based on the first status information. The encrypted data is obtained from the credit chain through the first server, the encrypted data is decrypted based on the second key to obtain decrypted data, and a preset report template is obtained. A pre-assembled report is generated based on the decrypted data and the preset report template. When the first server receives a corporate credit inquiry request sent by the user, it verifies the information of the queried company based on the corporate credit inquiry request and uploads the verification result to the credit chain. The verification result is obtained through the second server. When the verification is successful based on the verification result, the first key is sent to the first server. The first server decrypts the first decrypted data based on the first key to obtain the second decrypted data, and obtains the pre-assembled report. A credit report is then generated based on the second decrypted data and the pre-assembled report. The step of encrypting the target data sequentially using the first key and the second key to obtain encrypted data includes: Determine the specified data and non-specified data in the target data, and encrypt the specified data according to the first key to obtain the first encrypted data; Construct a placeholder identifier, the placeholder identifier having the same length as the specified data, and generate a mapping relationship set between the placeholder identifier and the first encrypted data; The placeholder identifier and the unspecified data are encrypted using the second key to obtain the second encrypted data; The set of mapping relationships and the second encrypted data are used as the encrypted data.

2. The credit report generation method as described in claim 1, characterized in that, The step of determining the specified data and non-specified data in the target data includes: Determine the classification and hierarchy of data object fields in the target data; match the specified target field from each of the classified and hierarchical data object fields; use the field value corresponding to the target field as the specified data; and use the field values ​​of the remaining fields other than the target field as non-specified data; and / or Determine the leaf fields contained in the target data, obtain a preset random selection probability, randomly select a portion of the leaf fields as target fields based on the random selection probability, and treat the unselected leaf fields as non-specified data.

3. The credit report generation method as described in claim 1 or 2, characterized in that, When the verification is successful based on the verification result, the method further includes: The second server obtains the third key and the fourth key from the set of keys, sends the third key to the first server, and sends the third key and the fourth key to the fourth server. When the first server receives a corporate credit inquiry request sent by the user, the method further includes: The fourth key is sent to the user terminal through the second server. After the step of generating a credit report based on the secondary decryption data and the pre-assembled report, the method further includes: The first server encrypts the credit report using the third key to obtain a first encrypted report, and then uploads the first encrypted report to the credit chain. The first encrypted report is obtained through the fourth server, and the first encrypted report is decrypted using the third key to obtain a decrypted report. The decrypted report is then encrypted using the fourth key to obtain a second encrypted report. The second encrypted report is then uploaded to the credit reporting chain so that the user terminal can obtain the second encrypted report from the credit reporting chain and decrypt it using the fourth key to obtain a credit report.

4. The credit report generation method as described in claim 3, characterized in that, The step of decrypting the encrypted data based on the second key to obtain decrypted data includes: The encrypted data is obtained, the mapping relationship set and the second encrypted data are obtained based on the encrypted data, and the second encrypted data is decrypted using the second key to obtain the placeholder identifier and the unspecified data. The placeholder identifier and the unspecified data are the first decryption data. The step of generating a pre-assembled report based on the first decryption data and the preset report template includes: The elements to be filled in the preset report template and the preset filling rules are determined. The placeholders and the unspecified data are processed into structured data. The preset report template is filled according to the structured data and the preset filling rules. A pre-assembled report in the target format is generated based on the preset report template after filling the data. The pre-assembled report contains placeholders.

5. The credit report generation method as described in claim 4, characterized in that, The step of generating a credit report based on the secondary decryption data and the pre-assembled report includes: A placeholder identifier is determined in the pre-assembled report. First encrypted data is determined based on the placeholder identifier and the mapping relationship set. The first encrypted data is decrypted based on the first key to obtain the specified data. The placeholder identifier is replaced with the specified data in the area of ​​the pre-assembled report by means of text replacement or layer overlay to obtain the credit report.

6. The credit report generation method as described in claim 5, characterized in that, Before the step of obtaining the enterprise credit inquiry request sent by the user terminal through the first server, the method further includes: The user terminal uploads the basic information and authorization information of the querying enterprise to the credit reporting chain; The step of verifying the information of the querying enterprise based on the enterprise credit inquiry request includes: The first server obtains the basic information and authorization information of the querying enterprise from the credit reporting chain, verifies the consistency of the basic information and the validity of the authorization information, obtains the verification result, and uploads it to the credit reporting chain.

7. A credit report generation system, characterized in that, The system includes a first server, a second server, and a third server; The first server is used to generate a report pre-assembly request and upload the report pre-assembly request to the credit reporting chain. The report pre-assembly request includes at least one enterprise identifier. The second server is used to obtain the report pre-assembly request from the credit chain, generate a set of keys for each enterprise based on the report pre-assembly request, generate a data preparation request, obtain a first key and a second key from the set of keys, and send the data preparation request, the first key and the second key to the third server. The third server is used to obtain target data of each enterprise according to the data preparation request, encrypt the target data in sequence with the first key and the second key to obtain encrypted data, upload the encrypted data to the credit chain, and send the first status information to the second server. The second server is also used to send second status information and the second key to the first server based on the first status information; The first server is also used to obtain the encrypted data from the credit chain, decrypt the encrypted data based on the second key to obtain decrypted data, obtain a preset report template, and generate a pre-assembled report based on the decrypted data and the preset report template. And when a corporate credit inquiry request is received from a user, the system verifies the information of the inquired company based on the corporate credit inquiry request and uploads the verification result to the credit chain. The second server is also used to obtain the verification result, and when it is determined that the verification is successful based on the verification result, it sends the first key to the first server; The first server is also used to decrypt the first decrypted data based on the first key to obtain the second decrypted data, and to obtain the pre-assembled report, and to generate a credit report based on the second decrypted data and the pre-assembled report; Specifically, when the third server encrypts the target data sequentially using the first key and the second key to obtain encrypted data, it is used to: determine specified data and non-specified data in the target data; encrypt the specified data according to the first key to obtain first encrypted data; construct a placeholder identifier, the placeholder identifier having the same length as the specified data; and generate a mapping relationship set between the placeholder identifier and the first encrypted data. The placeholder identifier and the unspecified data are encrypted using the second key to obtain the second encrypted data; the mapping set and the second encrypted data are used as the encrypted data.

8. A computer device, characterized in that, The system includes a memory and a processor, wherein the memory stores computer-readable instructions, and the processor executes the computer-readable instructions to implement the credit report generation method as described in any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer-readable instructions, which, when executed by a processor, implement the credit report generation method as described in any one of claims 1 to 6.

Citation Information

Patent Citations

  • A credit investigation report transfer method based on a block chain and Intel SGX

    CN109766712A

  • Enterprise credit report query method, device and system based on block chain

    CN112231366A