Data interaction method and control device thereof, computer equipment and system

Abstract

The invention relates to a data interaction method, a control device thereof, computer equipment and a system. The method comprises the steps that under the condition that a data access request is received, user information is acquired, the user information comprises a channel user identifier and user identity information, and the channel user identifier is used for representing the identity of a user in a channel sending the data access request; the data access request comprises a physical address; determining a user system identifier corresponding to the channel user identifier according to the user identity information, the user system identifier being used for representing the identity of the user in the to-be-accessed system; the user system identifier comprises a user level; and when the user level is greater than or equal to the preset level and the geographic position corresponding to the physical address is in the access permission area, allowing the user to perform data access. By adopting the method, the user can access from multiple channels, and the security can be ensured.

Description

Technical Field

[0001] The present application relates to the field of big data technology, and in particular to a data interaction method and a control device, computer equipment, and system thereof. Background Art

[0002] With the development of information technology, users often interact with data through multiple channels. In order to ensure the security of the system, the data interaction system is often highly coupled with a single access channel, which leads to the problem of inaccessibility when users access through other channels.

[0003] Therefore, there is an urgent need for a data interaction method that can enable users to access from multiple channels while ensuring security. Summary of the invention

[0004] Based on this, it is necessary to provide a data interaction method and its control device, computer equipment, and system that can not only enable users to access from multiple channels but also ensure security in response to the above technical problems.

[0005] In a first aspect, a data interaction method is provided, the method comprising:

[0006] When receiving a data access request, obtaining user information, the user information including a channel user identifier and user identity information, the channel user identifier being used to represent the identity of the user in the channel that sends the data access request; the data access request including a physical address;

[0007] According to the user identity information, determine the user system identifier corresponding to the channel user identifier, the user system identifier is used to represent the identity of the user in the system to be accessed; the user system identifier includes the user level;

[0008] When the user level is greater than or equal to the preset level and the geographical location corresponding to the physical address is in the access-allowed area, the user is allowed to access the data.

[0009] In one embodiment, determining the user system identifier corresponding to the channel user identifier according to the user identity information includes:

[0010] When it is determined that the data access request is sent by the user for the first time, a user system identifier is created according to the user identity information.

[0011] In one embodiment, determining that the data access request is sent by the user for the first time includes:

[0012] If the user identity information is not found in the system to be accessed, it is determined that the data access request is sent by the user for the first time.

[0013] In one embodiment, determining the user system identifier corresponding to the channel user identifier according to the user identity information includes:

[0014] In the case where it is determined that the data access request is not sent for the first time by the user, determining the user system identification according to the user identity information and the identification mapping table;

[0015] The identification mapping table is used to represent the mapping relationship between user identity information and user system identification.

[0016] In one embodiment, the method further comprises:

[0017] When the user level is lower than the preset level, or the geographical location corresponding to the physical address is outside the permitted access area, the user is denied data access.

[0018] In a second aspect, a business processing method is provided, wherein a data access request carries pending business information, and the method comprises:

[0019] A data interaction method as in any one of the above embodiments;

[0020] When the user is allowed to access the data, the pending business information is processed based on the user system identifier, and the processing result is sent to the target user device according to the channel user identifier corresponding to the user system identifier; wherein the target user device is the device that sends the data access request.

[0021] In a third aspect, a data interaction control device is provided, the device comprising:

[0022] The information acquisition module is used to acquire user information when receiving a data access request, wherein the user information includes a channel user identifier and user identity information, wherein the channel user identifier is used to represent the identity of the user in the channel that sends the data access request; the data access request includes a physical address;

[0023] An identification determination module, used to determine the user system identification corresponding to the channel user identification according to the user identity information, the user system identification is used to represent the identity of the user in the system to be accessed; the user system identification includes the user level;

[0024] The access module is used to allow the user to access data when the user level is greater than or equal to the preset level and the geographical location corresponding to the physical address is in the access-allowed area.

[0025] In a fourth aspect, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of the method in the above embodiment when executing the computer program.

[0026] In a fifth aspect, a data interaction system is provided, comprising:

[0027] A user device, the user device is used to send a data access request;

[0028] Such as the computer device in the above embodiment.

[0029] In a sixth aspect, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the method in the above embodiment are implemented.

[0030] The above data interaction method and its device, computer equipment, system, and storage medium have at least the following beneficial effects:

[0031] When receiving a data access request, the server obtains user information (including channel user ID and user identity information) to determine the user's identity in the channel that sent the data access request. Based on the user identity information, the user system ID corresponding to the channel user ID is determined to determine the user's identity in the system to be accessed; through the channel user ID and user identity information, the uniqueness of the user's identity in the system is guaranteed, thereby enabling the user to access through multiple channels. At the same time, the user system ID includes the user level; the data access request includes the physical address; when the user level is greater than or equal to the preset level, and the geographical location corresponding to the physical address is in the allowed access area, the server allows the user to access the data, thereby ensuring the system security when the user accesses the server through multiple channels. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] FIG1 is an application environment diagram of a data interaction method in one embodiment;

[0033] FIG2 is a schematic diagram of a flow chart of a data interaction method in one embodiment;

[0034] FIG3 is a schematic flow chart of a data interaction method in another embodiment;

[0035] FIG4 is a structural block diagram of a data interaction control device according to an embodiment;

[0036] FIG. 5 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0037] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0038] The data interaction method provided in the embodiment of the present application can be applied to the application environment shown in FIG. 1. The terminal 102 communicates with the server 104 through the network. The data storage system can store the data that the server 104 needs to process. The data storage system can be integrated on the server 104, or it can be placed on the cloud or other network servers. When the server 104 receives the data access request sent by the user through the terminal 102, the user information is obtained, and the user information includes a channel user identifier and user identity information. The channel user identifier is used to characterize the identity of the user in the channel where the data access request is sent; the data access request includes a physical address; the server 104 determines the user system identifier corresponding to the channel user identifier according to the user identity information, and the user system identifier is used to characterize the identity of the user in the system to be accessed; the user system identifier includes a user level; when the user level is greater than or equal to the preset level, and the geographical location corresponding to the physical address is in the area where access is allowed, the server 104 allows the user to access the data. The terminal 102 can be, but is not limited to, various personal computers, laptops, smart phones, tablet computers, Internet of Things devices and portable wearable devices, and the Internet of Things devices can be smart speakers, smart TVs, smart air conditioners, smart car devices, etc. The portable wearable device may be a smart watch, a smart bracelet, a head-mounted device, etc. The server 104 may be implemented as an independent server or a server cluster consisting of multiple servers.

[0039] In one embodiment, as shown in FIG2 , a data interaction method is provided, which is described by taking the method applied to the server in FIG1 as an example, and includes the following steps:

[0040] S202, when receiving a data access request, obtaining user information, the user information including a channel user identifier and user identity information, the channel user identifier is used to represent the identity of the user in the channel that sends the data access request; the data access request includes a physical address.

[0041] Among them, the channel user identification can include the user's identity in the channel and the channel identifier. When the user accesses through different channels, the channel identifier is often attached. For example, if the data access request is sent through OEM-App, its package name includes the channel identifier. For example, if the App package name is: com.aa.bb, then the channel identifier is com.aa.bb. Specifically, APP can refer to software such as WeChat and Alipay, and the user's identity in the channel can refer to WeChat account, Alipay account, etc. User identity information can refer to information such as the user's mobile phone number or ID card.

[0042] Specifically, when a data access request is received, the channel user identifier and user identity information in the user information are obtained to determine the channel through which the user sends the data access request and the user's identity in the channel. At the same time, the physical address is carried in the data access request, and the user's geographic location can be known through the physical address.

[0043] S204, determining the user system identifier corresponding to the channel user identifier according to the user identity information, where the user system identifier is used to represent the identity of the user in the system to be accessed; the user system identifier includes the user level.

[0044] The user level may be used to represent the user's access authority level, and the system may refer to the business system of a bank.

[0045] Specifically, as mentioned above, user identity information includes information such as mobile phone number or ID card. Since mobile phone number and ID card information are unique and definite identity information of the user in any channel or system, the user system identifier corresponding to the channel user identifier of the user can be determined by searching in the system to see whether there is information matching the user identity information. Since the user system identifier is used to represent the identity of the user in the system to be accessed, after determining the user system identifier, the user level and user access record in the system can be obtained.

[0046] S206: When the user level is greater than or equal to the preset level and the geographical location corresponding to the physical address is in the access-allowed area, the user is allowed to access the data.

[0047] The preset level may refer to the access permission level set according to the data security requirements of different partitions in the system.

[0048] Specifically, when the user level is greater than or equal to the preset level, it means that the user has sufficiently high access rights, and when the geographical location corresponding to the physical address is in the access allowed area, it means that the user is in the access whitelist at this time, so that the user is allowed to access data if the above conditions are met.

[0049] In the above embodiment, when the server system receives a data access request, it obtains user information (including channel user identification and user identity information) and then determines the identity of the user in the channel that sends the data access request. According to the user identity information, the user system identification corresponding to the channel user identification is determined to determine the identity of the user in the system to be accessed; through the channel user identification and user identity information, the uniqueness of the user's identity in the system is guaranteed, thereby realizing the user's multi-channel access. At the same time, the user system identification includes the user level; the data access request includes the physical address; when the user level is greater than or equal to the preset level, and the geographical location corresponding to the physical address is in the allowed access area, the user is allowed to access the data, thereby ensuring the system security when the user accesses the server system through multiple channels.

[0050] In one embodiment, as shown in FIG3 , determining the user system identifier corresponding to the channel user identifier according to the user identity information includes:

[0051] S302: When it is determined that the data access request is sent by the user for the first time, a user system identifier is created according to the user identity information.

[0052] It should be noted that the user's first sending refers to the user sending the above data access request for the first time based on the user's identity information, rather than the user sending it for the first time through a certain channel.

[0053] Specifically, when it is determined that the data access request is sent by the user for the first time, a user system identifier is created according to the user identity information, such as the user level, so that the user can access data in the system based on the user system identifier when the user level and physical address meet the conditions.

[0054] In one embodiment, determining that the data access request is sent by the user for the first time includes:

[0055] If the user identity information is not found in the system to be accessed, it is determined that the data access request is sent by the user for the first time.

[0056] Specifically, for each user, as long as they have accessed the system, user identity information and access records will be left in the system. By searching whether the user identity information exists in the system, it can be determined whether the data access request is sent by the user for the first time.

[0057] In one embodiment, determining the user system identifier corresponding to the channel user identifier according to the user identity information includes:

[0058] S304: if it is determined that the data access request is not sent for the first time by the user, determine the user system identifier according to the user identity information and the identifier mapping table, wherein the identifier mapping table is used to represent the mapping relationship between the user identity information and the user system identifier.

[0059] Specifically, as described above, when it is determined that the data access request is sent by the user for the first time, a user identification system will be created based on the user identity information, that is, an identification mapping table of the user identity information and the user system identification will be formed. Therefore, if the user is not sending the request for the first time, the user system identification corresponding to the user can be determined through the identification mapping table stored in the system, thereby avoiding repeated creation of the user system identification for the same user, reducing the system burden while ensuring the security of data access.

[0060] In one embodiment, the method further comprises:

[0061] When the user level is lower than the preset level, or the geographical location corresponding to the physical address is outside the permitted access area, the user is denied data access.

[0062] Specifically, corresponding to the above embodiment, when the user level is lower than the preset level, it means that the user has no access rights, or when the geographical location corresponding to the physical address is outside the allowed access area, the user also has no access rights. If one of the above conditions is not met, the user is denied data access, further ensuring the security of system data.

[0063] In a second aspect, a business processing method is provided, wherein a data access request carries pending business information, and the method comprises:

[0064] A data interaction method as in any one of the above embodiments;

[0065] When the user is allowed to access the data, the pending business information is processed based on the user system identifier, and the processing result is sent to the target user device according to the channel user identifier corresponding to the user system identifier; wherein the target user device is the device that sends the data access request.

[0066] Specifically, in a specific embodiment, the service may refer to a lucky draw of a bank, etc., and the data interaction is the user's participation in the lucky draw. When the user is allowed to participate in the lucky draw, it is determined whether the user has won the prize. If the user has won the prize, the winning information is sent to the target user device to display the winning information of the user. It should be noted that the service based on the above data interaction method is only used as an example and is not limited here.

[0067] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0068] Based on the same inventive concept, the embodiment of the present application also provides a data interaction control device for implementing the data interaction method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more data interaction control device embodiments provided below can refer to the limitations on the data interaction method above, and will not be repeated here.

[0069] In one embodiment, as shown in FIG4 , a data interaction control device is provided, comprising:

[0070] The information acquisition module 402 is used to acquire user information when receiving a data access request, wherein the user information includes a channel user identifier and user identity information, wherein the channel user identifier is used to represent the identity of the user in the channel that sends the data access request; the data access request includes a physical address;

[0071] The identification determination module 404 is used to determine the user system identification corresponding to the channel user identification according to the user identity information, where the user system identification is used to represent the identity of the user in the system to be accessed; the user system identification includes the user level;

[0072] The access module 406 is used to allow the user to access data when the user level is greater than or equal to the preset level and the geographical location corresponding to the physical address is in the access-allowed area.

[0073] In one embodiment, the identification determination module 404 includes:

[0074] The first identification determination unit is used to create a user system identification according to the user identity information when it is determined that the data access request is sent by the user for the first time.

[0075] In one embodiment, the first identification determination unit includes:

[0076] The first determination unit is configured to determine that the data access request is sent by the user for the first time if the user identity information is not found in the system to be accessed.

[0077] In one embodiment, the identification determination module 404 includes:

[0078] A second identification determination unit is used to determine the user system identification according to the user identity information and the identification mapping table when it is determined that the data access request is not sent for the first time by the user;

[0079] The identification mapping table is used to represent the mapping relationship between user identity information and user system identification.

[0080] In one embodiment, the data interaction control device comprises:

[0081] The access denial module is used to deny the user data access when the user level is lower than the preset level or the geographical location corresponding to the physical address is outside the allowed access area.

[0082] Each module in the above data interaction control device can be implemented in whole or in part by software, hardware, or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to each module.

[0083] In one embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be shown in FIG5. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. The processor, the memory and the input / output interface are connected via a system bus, and the communication interface is connected to the system bus via the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store user information data. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a data interaction method is implemented.

[0084] Those skilled in the art will understand that the structure shown in FIG. 5 is merely a block diagram of a partial structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0085] In one embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above-mentioned method embodiments when executing the computer program.

[0086] In one embodiment, a data interaction system is provided, comprising:

[0087] A user device, the user device is used to send a data access request;

[0088] Such as the computer device in the above embodiment.

[0089] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

[0090] In one embodiment, a computer program product is provided, including a computer program, which implements the steps in the above method embodiments when executed by a processor.

[0091] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards of relevant countries and regions.

[0092] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0093] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0094] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be construed as limiting the scope of the present application. It should be noted that, for a person of ordinary skill in the art, several modifications and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A data interaction method, characterized in that: The method comprises: When receiving a data access request, obtaining user information, the user information including a channel user identifier and user identity information, the channel user identifier being used to characterize the identity of the user in the channel that sends the data access request; the data access request including a physical address; Determine, according to the user identity information, a user system identifier corresponding to the channel user identifier, wherein the user system identifier is used to represent the identity of the user in the system to be accessed; the user system identifier includes a user level; When the user level is greater than or equal to the preset level and the geographical location corresponding to the physical address is in the access-allowed area, the user is allowed to access the data.

2. The method according to claim 1, characterized in that The determining, according to the user identity information, a user system identifier corresponding to the channel user identifier includes: In the case where it is determined that the data access request is sent by the user for the first time, the user system identifier is created according to the user identity information.

3. The method according to claim 2, characterized in that The determining that the data access request is sent by the user for the first time includes: If the user identity information is not found in the system to be accessed, it is determined that the data access request is sent by the user for the first time.

4. The method according to claim 1, characterized in that: The determining, according to the user identity information, a user system identifier corresponding to the channel user identifier includes: In the case where it is determined that the data access request is not sent for the first time by the user, determining the user system identifier according to the user identity information and the identifier mapping table; The identification mapping table is used to represent the mapping relationship between the user identity information and the user system identification.

5. The method according to claim 1, characterized in that The method further comprises: When the user level is lower than the preset level, or the geographical location corresponding to the physical address is outside the access-permitted area, the user is denied data access.

6. A business processing method, characterized in that: The data access request carries pending business information, and the method includes: The data interaction method according to any one of claims 1 to 5; When the user is allowed to access the data, the pending business information is processed based on the user system identifier, and the processing result is sent to the target user device according to the channel user identifier corresponding to the user system identifier; wherein the target user device is the device that sends the data access request.

7. A data interaction control device, characterized in that: The device comprises: An information acquisition module, configured to acquire user information upon receiving a data access request, wherein the user information includes a channel user identifier and user identity information, wherein the channel user identifier is used to represent the identity of the user in the channel that sends the data access request; the data access request includes a physical address; An identification determination module, used to determine the user system identification corresponding to the channel user identification according to the user identity information, wherein the user system identification is used to represent the identity of the user in the system to be accessed; the user system identification includes a user level; The access module is used to allow the user to access data when the user level is greater than or equal to a preset level and the geographical location corresponding to the physical address is in an access-allowed area.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A data interaction system, characterized in that: include: A user equipment, the user equipment is used to send a data access request; The computer device as claimed in claim 8.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images