Business system management method and device, computer equipment and storage medium
By encrypting and comparing the plain-text authorization information when the business system is started, the problem of inability to effectively restrict illegal access in traditional technology is solved, and the effect of improving data security is achieved.
Patent Information
- Application Number
- CN202411417189.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-10-11
- Publication Date
- 2025-02-07
AI Technical Summary
In traditional technology, permission management and access control methods cannot effectively restrict illegal personnel from illegal access to business systems, resulting in data security issues.
By obtaining the plain text authorization information of the target account when the business system is started, encrypting the process to obtain the cipher text authorization information, and comparing it consistently with the pre-stored verification authorization information. When the comparison results are inconsistent, restrict the target account from using the business system.
Effectively prevent illegal users from tampering with explicit authorized information, avoiding illegal access, and improving data security.
Smart Images
Figure CN119397560A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of data security technology, and in particular to a business system management method, apparatus, computer equipment and storage medium. Background Art
[0002] In the architectural design of modern information systems, permission management and access control are key links to ensure system security. In traditional technologies, system login users, user roles, and permission information are usually stored in a database, where passwords are encrypted and saved. When a user logs in, the username and password are checked, and after authentication, the user's permission is obtained to determine the permissions that the logged-in user can access.
[0003] However, when illegal personnel bypass the system's access mechanism and directly access or operate system data, the permission management and access control methods in traditional technologies cannot play a role in restricting illegal personnel, resulting in illegal access to the system when system data is illegally tampered with, thus posing data security issues. Summary of the invention
[0004] Based on this, it is necessary to provide a business system management method, device, computer equipment and storage medium to address the above technical problems, which can limit illegal access to the business system by illegal personnel, thereby improving data security.
[0005] In a first aspect, the present application provides a business system management method, the method comprising:
[0006] In the process of starting the business system based on the target account, obtaining the plain text authorization information of the business system for the target account;
[0007] Encrypting the plain text authorization information to obtain cipher text authorization information;
[0008] Comparing the encrypted authorization information with the pre-stored verification authorization information of the target account for consistency;
[0009] When the consistency comparison result is inconsistent, the target account is restricted from using the business system.
[0010] In the embodiment of the present application, if an illegal user illegally tampers with the plain text authorization information of the target account, it will take effect only when the business system is started next time. Therefore, in the process of starting the business system based on the target account, the plain text authorization information of the business system for the target account is obtained; the plain text authorization information is then encrypted to obtain the cipher text authorization information; and the cipher text authorization information is compared with the pre-stored verification authorization information of the target account for consistency; if the consistency comparison result is inconsistent, it means that the user has illegally tampered with the plain text authorization information of the business system for the target account, and the target account can be restricted from using the business system. Further intrusion of illegal users into the business system is avoided. In this way, illegal access to the business system by illegal users can be restricted, thereby improving data security.
[0011] In one embodiment, encrypting the plain text authorization information to obtain the cipher text authorization information includes:
[0012] The plain text authorization information is encrypted using a preset hash algorithm to obtain encrypted authorization information;
[0013] The encrypted authorization information is encoded to obtain the ciphertext authorization information.
[0014] In the embodiment of the present application, by using a preset hash algorithm to encrypt the plaintext authorization information, on the one hand, the plaintext authorization information can be concealed, and on the other hand, the obtained ciphertext authorization information can be made consistent when the plaintext authorization information remains unchanged, thereby facilitating verification of whether the plaintext authorization information has been tampered with; and the encrypted authorization information is transcoded, further increasing the difficulty of cracking the ciphertext authorization information.
[0015] In one of the embodiments, the plain text authorization information includes at least the system activation status, system activation time, and system usage version of the business system;
[0016] The method of encrypting the plain text authorization information using a preset hash algorithm to obtain the encrypted authorization information includes:
[0017] Combine the system identifier corresponding to the business system, the system activation status, the system activation time and the system usage version in the plain text authorization information to obtain an original character string;
[0018] The original character string is encrypted using a preset hash algorithm to obtain encrypted authorization information.
[0019] In an embodiment of the present application, by encrypting the original character string obtained by combining the system identification, system activation status, system activation time and system usage version, on the one hand, the system identification is introduced to facilitate the distinction between business systems; on the other hand, when an illegal user tampers with any of the system activation status, system activation time and system usage version, it can be identified that the authorization information has been tampered with, thereby achieving the purpose of preventing illegal users from further intruding into the business system.
[0020] In one embodiment, the method further comprises:
[0021] Encrypting the original authorization information of the business system for the target account to obtain the verification authorization information;
[0022] The original authorization information is the business authorization information allocated to the target account by the business system when the target account is registered with the business system; or, the original authorization information is the business authorization information after the business authorization information allocated to the target account by the business system is modified according to the modification process specified by the business system.
[0023] In an embodiment of the present application, by encrypting the original authorization information of the business system for the target account to obtain verification authorization information, on the one hand, the problem of failure to use the business system when the business authorization information assigned to the target account by the business system is normally modified can be avoided; on the other hand, it can accurately identify that the business authorization information assigned to the target account by the system has been tampered with, thereby improving data security.
[0024] In one embodiment, restricting the target account from using the business system includes:
[0025] The system activation status in the plain text authorization information is modified to invalid, so as to restrict the target account from using the business system.
[0026] In the embodiment of the present application, by modifying the system activation status in the plain text authorization information to invalid, so as to restrict the target account from using the business system, the purpose of preventing illegal users from further intruding into the business system is achieved, thereby improving data security.
[0027] In one of the embodiments, the plain text authorization information and the verification authorization information are stored in different locations.
[0028] In an embodiment of the present application, by storing the plaintext authorization information and the verification authorization information in different locations, it is more difficult for users to tamper with the verification authorization information, making it easier to identify whether the plaintext authorization information has been tampered with based on the verification authorization information, thereby improving data security.
[0029] In a second aspect, the present application further provides a business system management device, the device comprising:
[0030] An acquisition module, used to acquire the plain text authorization information of the business system for the target account in the process of starting the business system based on the target account;
[0031] An encryption module, used to encrypt the plain text authorization information to obtain cipher text authorization information;
[0032] A comparison module, used to compare the ciphertext authorization information with the pre-stored verification authorization information of the target account for consistency;
[0033] The restriction module is used to restrict the target account from using the business system when the consistency comparison result is inconsistent.
[0034] In a third aspect, the present application further provides a computer device, the computer device comprising a memory and a processor, the memory storing a computer program, and the processor implementing the following steps when executing the computer program:
[0035] In the process of starting the business system based on the target account, obtaining the plain text authorization information of the business system for the target account;
[0036] Encrypting the plain text authorization information to obtain cipher text authorization information;
[0037] Comparing the encrypted authorization information with the pre-stored verification authorization information of the target account for consistency;
[0038] When the consistency comparison result is inconsistent, the target account is restricted from using the business system.
[0039] In a fourth aspect, the present application further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the following steps are implemented:
[0040] In the process of starting the business system based on the target account, obtaining the plain text authorization information of the business system for the target account;
[0041] Encrypting the plain text authorization information to obtain cipher text authorization information;
[0042] Comparing the encrypted authorization information with the pre-stored verification authorization information of the target account for consistency;
[0043] When the consistency comparison result is inconsistent, the target account is restricted from using the business system.
[0044] In a fifth aspect, the present application further provides a computer program product, the computer program product comprising a computer program, which implements the following steps when executed by a processor:
[0045] In the process of starting the business system based on the target account, obtaining the plain text authorization information of the business system for the target account;
[0046] Encrypting the plain text authorization information to obtain cipher text authorization information;
[0047] Comparing the encrypted authorization information with the pre-stored verification authorization information of the target account for consistency;
[0048] When the consistency comparison result is inconsistent, the target account is restricted from using the business system.
[0049] The above-mentioned business system management method, device, computer equipment and storage medium, if an illegal user illegally tampers with the plain text authorization information of the target account, it will take effect only when the business system is started next time, thereby obtaining the plain text authorization information of the business system for the target account in the process of starting the business system based on the target account; then encrypting the plain text authorization information to obtain the cipher text authorization information; and performing consistency comparison between the cipher text authorization information and the pre-stored verification authorization information of the target account; when the consistency comparison result is inconsistent, it represents that the user has illegally tampered with the plain text authorization information of the business system for the target account, and at this time, the target account can be restricted from using the business system. Further intrusion of illegal users into the business system is avoided. In this way, illegal access to the business system by illegal users can be restricted, thereby improving data security. BRIEF DESCRIPTION OF THE DRAWINGS
[0050] Figure 1 A flowchart of a business system management method in one embodiment;
[0051] Figure 2 A schematic diagram of a process for obtaining ciphertext authorization information in one embodiment;
[0052] Figure 3 A schematic diagram of a process for obtaining encrypted authorization information in one embodiment;
[0053] Figure 4 A flowchart of a business system management method in another embodiment;
[0054] Figure 5 is a structural block diagram of a business system management device in one embodiment;
[0055] Figure 6 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION
[0056] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.
[0057] The business system management method provided in the embodiment of the present application can be applied to the application environment of business system security access management. In the architectural design of modern information systems, permission management and access control are key links to ensure system security. In traditional technology, the system login user, user role and permission information are usually stored in the database, where the password is saved after being encrypted. When the user logs in, the user name and password will be checked. After the authentication is completed, the user's permission will be obtained, thereby determining the permissions that the logged-in user can access.
[0058] However, when illegal personnel bypass the system's access mechanism and directly access or operate system data, the permission management and access control methods in traditional technologies cannot play a role in restricting illegal personnel, resulting in illegal access to the system when system data is illegally tampered with, thus posing data security issues.
[0059] Based on this, the present application provides a business system management method. If an illegal user illegally tampers with the plaintext authorization information of the target account, it will take effect only when the business system is started next time. Therefore, in the process of starting the business system based on the target account, the plaintext authorization information of the business system for the target account is obtained; the plaintext authorization information is then encrypted to obtain the ciphertext authorization information; and the ciphertext authorization information is compared with the pre-stored verification authorization information of the target account for consistency; if the consistency comparison result is inconsistent, it means that the user has illegally tampered with the plaintext authorization information of the business system for the target account, and the target account can be restricted from using the business system. Further intrusion of illegal users into the business system is avoided. In this way, illegal access to the business system by illegal users can be restricted, thereby improving data security.
[0060] The method can be executed by a server or a terminal. The server can be implemented by an independent server or a server cluster composed of multiple servers. The terminal can be, but is not limited to, various personal computers, laptops, smart phones, tablet computers, Internet of Things devices and portable wearable devices. The Internet of Things devices can be smart speakers, smart TVs, smart air conditioners, smart car-mounted devices, etc. Portable wearable devices include smart watches, smart bracelets, head-mounted devices, etc.
[0061] In one embodiment, Figure 1As shown, a business system management method is provided, which is described by taking the method applied to a server as an example, and includes the following steps:
[0062] S101, in the process of starting the business system based on the target account, obtaining the plain text authorization information of the business system for the target account.
[0063] Exemplarily, a business system can be understood as a system used by an enterprise or other organization to achieve business goals, and specifically can be a system built according to actual business needs. The target account is any of the accounts pre-registered for accessing the business system. Plain text authorization information is unencrypted authorization information; authorization information can be understood as permission information used to allow or restrict users from accessing the functions of the business system.
[0064] It should be noted that if an illegal user tampers with the plain text authorization information of the business system for the target account, it will take effect only when the business system is started next time. In this way, the plain text authorization information of the business system for the target account can be obtained during the process of starting the business system based on the target account. If an illegal user tampers with the plain text authorization information of the business system for the target account, the obtained plain text authorization information is tampered.
[0065] S102, encrypt the plain text authorization information to obtain cipher text authorization information.
[0066] Exemplarily, the plain text authorization information can be encrypted to obtain the cipher text authorization information corresponding to the plain text authorization information. It is understandable that, since it is necessary to use the verification authorization information of the pre-stored target account to verify whether the plain text authorization information has been tampered with, the verification authorization information of the pre-stored target account is obtained by encrypting the plain text authorization information before it has been illegally tampered with using the same encryption method.
[0067] Based on this, if the plaintext authorization information has not been tampered with, the plaintext authorization information is encrypted, and the obtained ciphertext authorization information should be consistent with the pre-stored verification authorization information of the target account; if it has been illegally tampered with, the plaintext authorization information is encrypted, and the obtained ciphertext authorization information should be inconsistent with the pre-stored verification authorization information of the target account, thereby identifying whether the plaintext authorization information has been tampered with.
[0068] S103, performing consistency comparison between the ciphertext authorization information and the pre-stored verification authorization information of the target account.
[0069] Exemplarily, the encrypted authorization information may be compared for consistency with pre-stored verification authorization information of the target account to determine whether the encrypted authorization information is consistent with the verification authorization information.
[0070] S104: When the consistency comparison result is inconsistent, restrict the target account from using the business system.
[0071] Optionally, when the consistency comparison result is inconsistent, it means that the plain text authorization information of the business system for the target account has been tampered with by an illegal user. In order to prevent the illegal user from further intruding into the business system, it is necessary to restrict the target account from using the business system.
[0072] In the above-mentioned business system management method, if an illegal user illegally tampers with the plaintext authorization information of the target account, it will take effect only when the business system is started next time. Therefore, in the process of starting the business system based on the target account, the business system obtains the plaintext authorization information for the target account; then encrypts the plaintext authorization information to obtain the ciphertext authorization information; and compares the ciphertext authorization information with the pre-stored verification authorization information of the target account for consistency; when the consistency comparison result is inconsistent, it means that the user has illegally tampered with the plaintext authorization information of the business system for the target account, and the target account can be restricted from using the business system. Further intrusion of illegal users into the business system is avoided. In this way, illegal access to the business system by illegal users can be restricted, thereby improving data security.
[0073] In some optional implementations, a variety of encryption algorithms may be used to encrypt the plaintext authorization information. For example, in an embodiment of the present application, a hash algorithm may be used to encrypt the plaintext authorization information. This ensures that the encrypted ciphertext authorization information is consistent when the plaintext authorization information remains unchanged. In this way, it is possible to determine whether the plaintext authorization information has been tampered with by determining whether the ciphertext authorization information has changed.
[0074] Based on this, see Figure 2 , Figure 2 A flowchart for obtaining encrypted authorization information is provided, which specifically includes the following steps:
[0075] S201, using a preset hash algorithm to encrypt the plain text authorization information to obtain encrypted authorization information.
[0076] Exemplarily, the preset hash algorithm may be a message digest algorithm version 5 (Message-Digest Algorithm 5, MD5) encryption algorithm. For example, the MD5 salt value method may be used for encryption, and the plain text authorization information may be encrypted using a fixed salt value. In this way, when the plain text authorization information remains unchanged, the encrypted string information obtained after each encryption is consistent, that is, the encrypted authorization information obtained is consistent, so as to verify whether the plain text authorization information has been tampered with.
[0077] S202, encode the encrypted authorization information to obtain ciphertext authorization information.
[0078] Furthermore, in order to improve the security of the encrypted authorization information, the encrypted authorization information may be encoded. For example, the encrypted authorization information may be base64 encoded to obtain ciphertext authorization information.
[0079] In the embodiment of the present application, by using a preset hash algorithm to encrypt the plaintext authorization information, on the one hand, the plaintext authorization information can be concealed, and on the other hand, the obtained ciphertext authorization information can be made consistent when the plaintext authorization information remains unchanged, thereby facilitating verification of whether the plaintext authorization information has been tampered with; and the encrypted authorization information is transcoded, further increasing the difficulty of cracking the ciphertext authorization information.
[0080] In some optional implementations, the plain text authorization information at least includes the system activation status, system activation time and system usage version of the business system. The plain text authorization information is also called License. Among them, the system activation status includes unactivated, activated and expired. The system activation time is the time when the system is activated. Under normal circumstances, the trial version of the business system is available for 30 days, starting from the activation time. The system usage version includes the trial version and the official version. The trial version can be used for free for 30 days starting from the activation time. The basic functions and paid functions of the system can be used for free within 30 days. The basic functions of the official version of the business system can be used indefinitely, and the paid functions need to be paid for.
[0081] Based on this, illegal users can tamper with the system activation status, system activation time and system usage version. For example, assuming that the version of the business system authorized for the target user is a trial version, if the illegal user tampers with the system activation status of the business system for the target user, the target user's activation status is originally expired, and the system activation status is changed to activated, the target user can continue to use the business system, which is not in compliance with regulations. Alternatively, if the illegal user tampers with the system activation time of the business system for the target user, if the system activation time is always changed to the most recent time, the user's 30-day trial period is always updated, and the target user can also achieve the purpose of permanent use of the business system, which is also not in compliance with regulations. Similarly, if the illegal user modifies the version of the business system authorized for the target user, for example, changing the trial version to the official version, the purpose of permanent use can also be achieved, which is also not in compliance with regulations.
[0082] In view of this, the embodiment of the present application provides an achievable method for obtaining encrypted authorization information, which combines the system activation status, system activation time and system usage version to obtain a combined string, and then encrypts the combined string to obtain ciphertext authorization information. In this way, the ciphertext authorization information can be used to identify whether at least one of the system activation status, system activation time and system usage version has been tampered with, thereby preventing illegal users from further invading the business system.
[0083] For example, see Figure 3 , Figure 3 A schematic diagram of a process for obtaining encrypted authorization information is provided, which specifically includes the following steps:
[0084] S301, combining the system identifier corresponding to the business system, the system activation state in the plain text authorization information, the system activation time and the system usage version to obtain an original character string.
[0085] Exemplarily, the system identifier corresponding to the business system is used to distinguish the system, for example, it can be a system ID; the system identifier corresponding to the business system, the system activation status, system activation time and system usage version in the plain text authorization information can be concatenated to obtain the original string. By introducing the system identifier, it can be determined which business system the original string corresponds to, and it can be used to distinguish which business system the obtained ciphertext authorization information belongs to.
[0086] S302, using a preset hash algorithm to encrypt the original character string to obtain encrypted authorization information.
[0087] Furthermore, a preset hash algorithm may be used to encrypt the original string. For example, the MD5 encryption algorithm may be used to encrypt the original string to obtain encrypted authorization information.
[0088] In an embodiment of the present application, by encrypting the original character string obtained by combining the system identification, system activation status, system activation time and system usage version, on the one hand, the system identification is introduced to facilitate the distinction between business systems; on the other hand, when an illegal user tampers with any of the system activation status, system activation time and system usage version, it can be identified that the authorization information has been tampered with, thereby achieving the purpose of preventing illegal users from further intruding into the business system.
[0089] In some optional implementations, an embodiment of the present application provides a method for obtaining verification authorization information, that is, the original authorization information of the business system for the target account can be encrypted to obtain verification authorization information; wherein, the original authorization information is encrypted in the same encryption method as the plaintext authorization information, so that when the original authorization information and the plaintext authorization information are consistent, the encrypted authorization information obtained will be consistent with the verification authorization information.
[0090] It should be noted that the original authorization information may be the business authorization information allocated to the target account by the business system when the target account is registered with the business system; that is, the initial authorization information of the business authorization information allocated to the target account.
[0091] Alternatively, the original authorization information may also be business authorization information after the business authorization information that has been allocated to the target account by the business system has been modified according to the modification process specified by the business system. It should be noted that if the business authorization information of the target user is modified normally, it is usually necessary to go through the modification process specified by the business system, and when the business authorization information is illegally tampered with, it will not go through the modification process specified by the business system. Based on this, it can be determined whether the business authorization information is modified normally or illegally tampered with by whether the business authorization information that has been allocated to the target account by the business system has been modified according to the modification process specified by the business system.
[0092] If the business authorization information that has been assigned to the target account by the business system is modified normally, that is, after the modification process specified by the business system, the business authorization information that has been assigned to the target account by the business system is modified, the modified business authorization information will be re-encrypted to obtain new verification authorization information, and the new verification authorization information will overwrite the previous verification authorization information. In addition, when the business authorization information that has been assigned to the target account by the business system is modified normally, the modification of the business authorization information needs to be synchronized with the update of the verification authorization information to avoid the business authorization information being modified, but the verification authorization information is not updated, resulting in the judgment that it has not been illegally tampered with, and the business system is unavailable.
[0093] During the next business system startup process, the modified business authorization information takes effect, and the modified business authorization information is encrypted to obtain ciphertext authorization information, and the obtained ciphertext authorization information is compared with the new verification authorization information. Since the new verification authorization information is obtained by encrypting the modified business authorization information, the ciphertext authorization information is consistent with the new verification authorization information. This can avoid the problem of business system failure caused by normal modification of the business authorization information that has been allocated to the target account by the business system.
[0094] If the business authorization information assigned by the business system to the target account is illegally tampered with, it will not go through the modification process specified by the business system, and the new verification authorization information will not be encrypted based on the modified business authorization information. In this way, during the next business system startup, the modified business authorization information will take effect, and the modified business authorization information will be encrypted to obtain the ciphertext authorization information. The obtained ciphertext authorization information will also be compared with the verification authorization information. Since the verification authorization information is not obtained by encryption based on the modified business authorization information, the ciphertext authorization information and the new verification authorization information will be inconsistent. Therefore, it can be determined that the business authorization information assigned by the business system to the target account has been illegally tampered with.
[0095] In an embodiment of the present application, by encrypting the original authorization information of the business system for the target account to obtain verification authorization information, on the one hand, the problem of failure to use the business system when the business authorization information assigned to the target account by the business system is normally modified can be avoided; on the other hand, it can accurately identify that the business authorization information assigned to the target account by the system has been tampered with, thereby improving data security.
[0096] In some optional implementations, when it is determined that an illegal user has tampered with the plain text authorization information of the business system for the target account, various methods can be used to restrict the target account from using the business system, such as logging out of the business system, making the business system operation interface unavailable, etc.
[0097] Exemplarily, the embodiment of the present application modifies the system activation status in the plain text authorization information to invalid, for example, modifies the system activation status to expired; thereby restricting the target account from using the business system, thereby achieving the purpose of preventing illegal users from further intruding into the business system.
[0098] In the embodiment of the present application, by modifying the system activation status in the plain text authorization information to invalid, so as to restrict the target account from using the business system, the purpose of preventing illegal users from further intruding into the business system is achieved, thereby improving data security.
[0099] It should be noted that in order to further improve data security, the plaintext authorization information and the verification authorization information can be stored in different storage system information tables StorageSystem, that is, the storage locations of the plaintext authorization information and the verification authorization information are different; in this way, when an illegal user tampers with the plaintext authorization information, it will not be easy to find the storage location of the verification authorization information, which makes it easier to identify the tampering of the plaintext authorization information based on the verification authorization information, thereby improving data security.
[0100] In an embodiment of the present application, by storing the plaintext authorization information and the verification authorization information in different locations, it is more difficult for users to tamper with the verification authorization information, making it easier to identify whether the plaintext authorization information has been tampered with based on the verification authorization information, thereby improving data security.
[0101] In some optional implementations, see Figure 4 , Figure 4 A flowchart of another business system management method is provided, which specifically includes the following steps:
[0102] S401, in the process of starting the business system based on the target account, obtaining the plain text authorization information of the business system for the target account.
[0103] S402: Combine the system identifier corresponding to the business system, the system activation status, the system activation time and the system usage version in the plain text authorization information to obtain an original character string.
[0104] S403, using a preset hash algorithm to encrypt the original character string to obtain encrypted authorization information.
[0105] S404, encode the encrypted authorization information to obtain ciphertext authorization information.
[0106] S405: When the consistency comparison result is inconsistent, the system activation status in the plain text authorization information is modified to invalid, so as to restrict the target account from using the business system.
[0107] In the embodiment of the present application, after MD5 encryption of the plain text authorization information, base64 transcoding is performed to form verification authorization information, which is encrypted ciphertext information. It is impossible to directly obtain valid data from the information itself, so it cannot be tampered with. During each system startup, the plain text authorization information in the database will be extracted, and the encrypted authorization information will be formed using the same encryption algorithm, and compared with the verification authorization information. If the comparison is inconsistent, the business system use permission will be closed and the use of the business system will be suspended, thereby achieving the purpose of protecting the business system.
[0108] In addition, after the plaintext authorization information is modified according to the modification process specified by the business system, it will be re-encrypted based on the modified plaintext authorization information to form new verification authorization information, ensuring that the plaintext authorization information modified by the normal process can be checked and passed normally the next time the system is restarted, and the system will not be unavailable due to the mismatch of the two information.
[0109] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.
[0110] Based on the same inventive concept, the embodiment of the present application also provides a business system management device for implementing the business system management method involved above. The implementation solution provided by the device to solve the problem is similar to the implementation solution recorded in the above method, so the specific limitations in one or more business system management device embodiments provided below can refer to the limitations on the business system management method above, and will not be repeated here.
[0111] In one embodiment, Figure 5 As shown, a business system management device is provided, including:
[0112] The acquisition module 10 is used to acquire the plain text authorization information of the business system for the target account in the process of starting the business system based on the target account;
[0113] The encryption module 20 is used to encrypt the plain text authorization information to obtain the cipher text authorization information;
[0114] A comparison module 30, used to compare the ciphertext authorization information with the pre-stored verification authorization information of the target account for consistency;
[0115] The restriction module 40 is used to restrict the target account from using the business system when the consistency comparison result is inconsistent.
[0116] In the above-mentioned business system management device, if an illegal user illegally tampers with the plaintext authorization information of the target account, the modification will take effect only when the business system is started next time. Thus, in the process of starting the business system based on the target account, the business system obtains the plaintext authorization information for the target account; then encrypts the plaintext authorization information to obtain the ciphertext authorization information; and compares the ciphertext authorization information with the pre-stored verification authorization information of the target account for consistency; if the consistency comparison result is inconsistent, it means that the user has illegally tampered with the plaintext authorization information of the business system for the target account, and at this time, the target account can be restricted from using the business system. Further intrusion of illegal users into the business system is avoided. In this way, illegal access to the business system by illegal users can be restricted, thereby improving data security.
[0117] In one embodiment, the encryption module 20 specifically includes:
[0118] The encryption unit is used to encrypt the plain text authorization information using a preset hash algorithm to obtain encrypted authorization information;
[0119] The encoding unit is used to encode the encrypted authorization information to obtain the ciphertext authorization information.
[0120] In one embodiment, the plain text authorization information at least includes the system activation status, system activation time and system usage version of the business system; the encryption unit is specifically used to:
[0121] The system ID corresponding to the business system, the system activation status, the system activation time and the system usage version in the plain text authorization information are combined to obtain the original string; the original string is encrypted using a preset hash algorithm to obtain encrypted authorization information.
[0122] In one embodiment, the encryption module 20 is further configured to:
[0123] The original authorization information of the business system for the target account is encrypted to obtain verification authorization information; wherein the original authorization information is the business authorization information assigned to the target account by the business system when the target account is registered with the business system; or, the original authorization information is the business authorization information after the business authorization information assigned to the target account by the business system is modified according to the modification process specified by the business system.
[0124] In one embodiment, the limiting module 40 is specifically configured to:
[0125] Change the system activation status in the plain text authorization information to invalid to restrict the target account from using the business system.
[0126] In one of the embodiments, the plain text authorization information and the verification authorization information are stored in different locations.
[0127] Each module in the above-mentioned business system management device can be implemented in whole or in part by software, hardware or a combination thereof. Each of the above-mentioned modules can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute the operations corresponding to each of the above modules.
[0128] In one embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as follows: Figure 6 As shown. The computer device includes a processor, a memory and a network interface connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store the authorization data of the business system for the account. The network interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a business system management method is implemented.
[0129] Those skilled in the art will understand that Figure 6 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.
[0130] In one embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the following steps are implemented:
[0131] In the process of starting the business system based on the target account, obtain the plain text authorization information of the business system for the target account;
[0132] Encrypt the plain text authorization information to obtain the cipher text authorization information;
[0133] Compare the encrypted authorization information with the pre-stored verification authorization information of the target account for consistency;
[0134] If the consistency comparison result is inconsistent, the target account is restricted from using the business system.
[0135] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:
[0136] The plain text authorization information is encrypted using a preset hash algorithm to obtain encrypted authorization information; the encrypted authorization information is encoded to obtain cipher text authorization information.
[0137] In one embodiment, the plain text authorization information at least includes the system activation status, system activation time and system usage version of the business system; when the processor executes the computer program, the following steps are also implemented:
[0138] The system ID corresponding to the business system, the system activation status, the system activation time and the system usage version in the plain text authorization information are combined to obtain the original string; the original string is encrypted using a preset hash algorithm to obtain encrypted authorization information.
[0139] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:
[0140] The original authorization information of the business system for the target account is encrypted to obtain verification authorization information; wherein the original authorization information is the business authorization information assigned to the target account by the business system when the target account is registered with the business system; or, the original authorization information is the business authorization information after the business authorization information assigned to the target account by the business system is modified according to the modification process specified by the business system.
[0141] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:
[0142] Change the system activation status in the plain text authorization information to invalid to restrict the target account from using the business system.
[0143] In one embodiment, the plain text authorization information and the verification authorization information are stored in different locations.
[0144] In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:
[0145] In the process of starting the business system based on the target account, obtain the plain text authorization information of the business system for the target account;
[0146] Encrypt the plain text authorization information to obtain the cipher text authorization information;
[0147] Compare the encrypted authorization information with the pre-stored verification authorization information of the target account for consistency;
[0148] If the consistency comparison result is inconsistent, the target account is restricted from using the business system.
[0149] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:
[0150] The plain text authorization information is encrypted using a preset hash algorithm to obtain encrypted authorization information; the encrypted authorization information is encoded to obtain cipher text authorization information.
[0151] In one embodiment, the plain text authorization information includes at least the system activation status, system activation time and system usage version of the business system; when the computer program is executed by the processor, the following steps are also implemented:
[0152] The system ID corresponding to the business system, the system activation status, the system activation time and the system usage version in the plain text authorization information are combined to obtain the original string; the original string is encrypted using a preset hash algorithm to obtain encrypted authorization information.
[0153] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:
[0154] The original authorization information of the business system for the target account is encrypted to obtain verification authorization information; wherein the original authorization information is the business authorization information assigned to the target account by the business system when the target account is registered with the business system; or, the original authorization information is the business authorization information after the business authorization information assigned to the target account by the business system is modified according to the modification process specified by the business system.
[0155] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:
[0156] Change the system activation status in the plain text authorization information to invalid to restrict the target account from using the business system.
[0157] In one embodiment, the plain text authorization information and the verification authorization information are stored in different locations.
[0158] In one embodiment, a computer program product is provided, comprising a computer program, which, when executed by a processor, implements the following steps:
[0159] In the process of starting the business system based on the target account, obtain the plain text authorization information of the business system for the target account;
[0160] Encrypt the plain text authorization information to obtain the cipher text authorization information;
[0161] Compare the encrypted authorization information with the pre-stored verification authorization information of the target account for consistency;
[0162] If the consistency comparison result is inconsistent, the target account is restricted from using the business system.
[0163] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:
[0164] The plain text authorization information is encrypted using a preset hash algorithm to obtain encrypted authorization information; the encrypted authorization information is encoded to obtain cipher text authorization information.
[0165] In one embodiment, the plain text authorization information includes at least the system activation status, system activation time and system usage version of the business system; when the computer program is executed by the processor, the following steps are also implemented:
[0166] The system ID corresponding to the business system, the system activation status, the system activation time and the system usage version in the plain text authorization information are combined to obtain the original string; the original string is encrypted using a preset hash algorithm to obtain encrypted authorization information.
[0167] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:
[0168] The original authorization information of the business system for the target account is encrypted to obtain verification authorization information; wherein the original authorization information is the business authorization information assigned to the target account by the business system when the target account is registered with the business system; or, the original authorization information is the business authorization information after the business authorization information assigned to the target account by the business system is modified according to the modification process specified by the business system.
[0169] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:
[0170] Change the system activation status in the plain text authorization information to invalid to restrict the target account from using the business system.
[0171] In one embodiment, the plain text authorization information and the verification authorization information are stored in different locations.
[0172] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties.
[0173] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.
[0174] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.
[0175] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.
Claims
1. A business system management method, characterized in that: The method comprises: In the process of starting the business system based on the target account, obtaining the plain text authorization information of the business system for the target account; Encrypting the plain text authorization information to obtain cipher text authorization information; Comparing the encrypted authorization information with the pre-stored verification authorization information of the target account for consistency; When the consistency comparison result is inconsistent, the target account is restricted from using the business system.
2. The method according to claim 1, characterized in that The step of encrypting the plain text authorization information to obtain the cipher text authorization information includes: The plain text authorization information is encrypted using a preset hash algorithm to obtain encrypted authorization information; The encrypted authorization information is encoded to obtain the ciphertext authorization information.
3. The method according to claim 2, characterized in that The plain text authorization information at least includes the system activation status, system activation time and system usage version of the business system; The method of encrypting the plain text authorization information using a preset hash algorithm to obtain the encrypted authorization information includes: Combine the system identifier corresponding to the business system, the system activation status, the system activation time and the system usage version in the plain text authorization information to obtain an original character string; The original character string is encrypted using a preset hash algorithm to obtain encrypted authorization information.
4. The method according to claim 1, characterized in that The method further comprises: Encrypting the original authorization information of the business system for the target account to obtain the verification authorization information; The original authorization information is the business authorization information allocated to the target account by the business system when the target account is registered with the business system; or, the original authorization information is the business authorization information after the business authorization information allocated to the target account by the business system is modified according to the modification process specified by the business system.
5. The method according to claim 1, characterized in that The restricting the target account from using the business system includes: The system activation status in the plain text authorization information is modified to invalid, so as to restrict the target account from using the business system.
6. The method according to claim 1, characterized in that The storage locations of the plain text authorization information and the verification authorization information are different.
7. A business system management device, characterized in that: The device comprises: An acquisition module, used to acquire the plain text authorization information of the business system for the target account in the process of starting the business system based on the target account; An encryption module, used to encrypt the plain text authorization information to obtain cipher text authorization information; A comparison module, used to compare the ciphertext authorization information with the pre-stored verification authorization information of the target account for consistency; The restriction module is used to restrict the target account from using the business system when the consistency comparison result is inconsistent.
8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.
9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.
10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.