Data processing method and device, electronic equipment and storage medium

Abstract

The invention relates to a data processing method and device, electronic equipment and a storage medium, and belongs to the technical field of financial science and technology, information technology industry and data processing. The method comprises the following steps: receiving a calling request sent by a tagged service request end through an internal communication link between the tagged service request end and a tagged service agent, and extracting first original data to be tagged from the calling request; obtaining a storage position of the encryption machine in the marking service request end, and calling the encryption machine based on the storage position; performing marking processing on the first original data through the encryption machine according to the generation mode of the marked data to generate first marked data of the first original data; and sending the first marking data to the marking service request end through the internal communication link. Therefore, the method does not need to depend on a third-party marking service providing end, the reliability of marking processing is improved, the service continuity is improved, and the marking processing efficiency is improved.

Description

Technical Field

[0001] The present disclosure relates to the fields of financial technology, information technology industry, and data processing technology, and in particular to a data processing method, device, electronic device, computer-readable storage medium, and computer program product. Background Art

[0002] At present, tokenization technology has the advantages of avoiding data leakage and high data security, and has been widely used in the field of data processing. However, most of the related technologies need to rely on a third-party tokenization service provider to perform tokenization processing. When the third-party tokenization service provider is abnormal, the tokenization processing cannot be realized, resulting in business interruption. In addition, there is also the problem of low tokenization processing efficiency. Summary of the invention

[0003] The present disclosure provides a data processing method, device, electronic device, computer-readable storage medium, and computer program product to at least solve the problems of low reliability and low efficiency of tokenization processing in related technologies. The technical solutions of the present disclosure are as follows:

[0004] According to a first aspect of an embodiment of the present disclosure, a data processing method is provided, which is applicable to a tokenization service agent agent deployed in a tokenization service request end, and the method comprises: receiving a call request sent by the tokenization service request end through an internal communication link between the tokenization service request end and the tokenization service agent, and extracting first original data to be marked from the call request; obtaining a storage location of an encryption machine in the tokenization service request end, and calling the encryption machine based on the storage location; tokenizing the first original data through the encryption machine according to a generation method of the marked data, and generating first marked data of the first original data; and sending the first marked data to the tokenization service request end through the internal communication link.

[0005] According to a second aspect of an embodiment of the present disclosure, another data processing method is provided, which is applicable to a tokenization service request end, and the method includes: obtaining first original data to be labeled, and adding the first original data to a call request of a tokenization service agent, wherein the tokenization service agent is deployed in the tokenization service request end; sending the call request to the tokenization service agent through an internal communication link between the tokenization service request end and the tokenization service agent, wherein the call request is used to generate first labeled data for the first original data; and receiving the first labeled data sent by the tokenization service agent through the internal communication link.

[0006] According to a third aspect of an embodiment of the present disclosure, another data processing method is provided, which is applicable to a tokenization service provider, and the method comprises: receiving a backup data packet sent by a tokenization service agent, wherein the backup data packet carries first original data and first marked data of the first original data, and the tokenization service agent is deployed in a tokenization service requester; and storing the backup data packet in a local storage space.

[0007] According to a fourth aspect of an embodiment of the present disclosure, there is provided a data processing device, which is suitable for being deployed in a tokenized service agent agent in a tokenized service request end, and the device comprises: a receiving module, configured to receive a call request sent by the tokenized service request end through an internal communication link between the tokenized service request end and the tokenized service agent, and extract first original data to be marked from the call request; a calling module, configured to obtain a storage location of an encryption machine in the tokenized service request end, and call the encryption machine based on the storage location; a processing module, configured to tokenize the first original data through the encryption machine according to a generation method of the marked data, and generate first marked data of the first original data; and a sending module, configured to send the first marked data to the tokenized service request end through the internal communication link.

[0008] According to a fifth aspect of an embodiment of the present disclosure, there is provided a data processing device, which is applicable to a tokenization service request end, and the device comprises: an acquisition module, configured to acquire first original data to be labeled, and add the first original data to a call request of a tokenization service agent, wherein the tokenization service agent is deployed in the tokenization service request end; a sending module, configured to send the call request to the tokenization service agent through an internal communication link between the tokenization service request end and the tokenization service agent, wherein the call request is used to generate first labeled data for the first original data; and a receiving module, configured to receive the first labeled data sent by the tokenization service agent through the internal communication link.

[0009] According to a sixth aspect of an embodiment of the present disclosure, there is provided a data processing device, applicable to a tokenization service provider, the device comprising: a receiving module, configured to receive a backup data packet sent by a tokenization service agent, wherein the backup data packet carries first original data and first marked data of the first original data, and the tokenization service agent is deployed in a tokenization service requester; and a storage module, configured to store the backup data packet in a local storage space.

[0010] According to the seventh aspect of an embodiment of the present disclosure, an electronic device is provided, comprising: a processor; and a memory for storing instructions executable by the processor; wherein the processor is configured to execute the instructions to implement the data processing method as described in the first to third aspects above.

[0011] According to an eighth aspect of an embodiment of the present disclosure, a computer-readable storage medium is provided. When instructions in the computer-readable storage medium are executed by a processor of an electronic device, the electronic device is enabled to execute the data processing method as described in the first to third aspects.

[0012] According to a ninth aspect of an embodiment of the present disclosure, there is provided a computer program product, comprising a computer program, wherein when the computer program is executed by a processor, the data processing method as described in the first to third aspects is implemented.

[0013] The technical solution provided by the embodiments of the present disclosure brings at least the following beneficial effects: the tokenization service agent is deployed in the tokenization service request end, the tokenization service request end can directly call the locally deployed tokenization service agent, the tokenization service agent can directly call the encryption machine to implement tokenization processing, and feed back the marked data to the tokenization service request end without relying on a third-party tokenization service provider. This avoids the problem that when the third-party tokenization service provider is abnormal, the tokenization processing cannot be implemented, resulting in business interruption, improves the reliability of the tokenization processing, and thus improves business continuity. In addition, it also helps to improve the efficiency of the tokenization processing and improves the user experience in the tokenization processing scenario.

[0014] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] The drawings herein are incorporated into and constitute a part of the specification, illustrate embodiments consistent with the present disclosure, and together with the description are used to explain the principles of the present disclosure, and do not constitute improper limitations on the present disclosure.

[0016] Figure 1 It is a flowchart of a data processing method according to the first embodiment of the present disclosure.

[0017] Figure 2 It is a flowchart of a data processing method according to the second embodiment of the present disclosure.

[0018] Figure 3 It is a flowchart of a data processing method according to the third embodiment of the present disclosure.

[0019] Figure 4 It is a flowchart of a data processing method according to the fourth embodiment of the present disclosure.

[0020] Figure 5 It is a flowchart of a data processing method according to the fifth embodiment of the present disclosure.

[0021] Figure 6 It is a flowchart of a data processing method according to the sixth embodiment of the present disclosure.

[0022] Figure 7 It is a flowchart of a data processing method according to the seventh embodiment of the present disclosure.

[0023] Figure 8 It is a flowchart of a data processing method according to the eighth embodiment of the present disclosure.

[0024] Fig. 9 is a block diagram of a data processing device according to a first embodiment of the present disclosure.

[0025] Fig.10 is a block diagram of a data processing device according to a second embodiment of the present disclosure.

[0026] Fig.11 is a block diagram of a data processing device according to a third embodiment of the present disclosure.

[0027] Fig.12 It is a block diagram of an electronic device according to an exemplary embodiment. DETAILED DESCRIPTION

[0028] In order to enable ordinary persons in the art to better understand the technical solutions of the present disclosure, the technical solutions in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the accompanying drawings.

[0029] It should be noted that the terms "first", "second", etc. in the specification and claims of the present disclosure and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present disclosure described herein can be implemented in an order other than those illustrated or described herein. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present disclosure. Instead, they are merely examples of devices and methods consistent with some aspects of the present disclosure as detailed in the appended claims.

[0030] It should be noted that the information (including but not limited to user device information, user personal information, etc.), data (including but not limited to data used for analysis, stored data, displayed data, etc.) and signals involved in this disclosure are all authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards.

[0031] It should be noted that the acquisition, transmission, storage, use, and processing of data in the technical solution of the present disclosure are in compliance with the relevant provisions of relevant laws and regulations. In the embodiments of the present disclosure, certain software, components, models, and other existing solutions in the industry may be mentioned, and they should be regarded as exemplary. Their purpose is only to illustrate the feasibility of implementing the technical solution of the present disclosure, but it does not mean that the applicant has or will necessarily use the solution.

[0032] Figure 1 It is a flowchart of a data processing method according to the first embodiment of the present disclosure.

[0033] like Figure 1 As shown, the data processing method of the first embodiment of the present disclosure includes the following steps:

[0034] S101, receiving a call request sent by a tokenization service request end through an internal communication link between the tokenization service request end and the tokenization service agent, and extracting first original data to be marked from the call request.

[0035] It should be noted that the execution subject of the data processing method of the present disclosure is the tokenization service agent agent deployed in the tokenization service request end. The data processing method of the present embodiment can be executed by the data processing device of the present embodiment, and the data processing device of the present embodiment can be configured in any electronic device to execute the data processing method of the present embodiment.

[0036] It should be noted that at least one tokenization service agent can be deployed in a tokenization service request end. The tokenization service request end refers to the object that initiates the tokenization service request. The terms such as tokenization service request end and tokenization service consumer end can be interchangeable. There are no excessive restrictions on the tokenization service request end, for example, it can include a banking system. There is an internal communication link between the tokenization service request end and the tokenization service agent. There are no excessive restrictions on the internal communication link, for example, it can include a local network, IPC (Interprocess communication), etc. For example, the tokenization service agent opens a restful type interface to the outside world for the tokenization service request end to call.

[0037] It should be noted that the calling request carries the first original data to be marked.

[0038] S102, obtaining the storage location of the encryption machine in the tokenization service request end, and calling the encryption machine based on the storage location.

[0039] It should be noted that the encryption machine is deployed in the tokenization service request end, and the encryption machine is used to tokenize the original data to obtain the marked data of the original data. The encryption machine can use any encryption machine in the tokenization technology, and there is no excessive limitation here.

[0040] For example, the tokenization service agent 1 is deployed in the tokenization service request terminal A. The tokenization service agent 1 can receive the call request sent by the tokenization service request terminal A through the internal communication link between the tokenization service request terminal A and the tokenization service agent 1, extract the first original data X1 to be marked from the call request, and obtain the storage location of the encryption machine 1 in the tokenization service request terminal A, and call the encryption machine 1 based on the storage location.

[0041] For example, the tokenization service agent 2 is deployed in the tokenization service request terminal B. The tokenization service agent 2 can receive the call request sent by the tokenization service request terminal B through the internal communication link between the tokenization service request terminal B and the tokenization service agent 2, and extract the first original data X2 to be marked from the call request, and obtain the storage location of the encryption machine 2 in the tokenization service request terminal B, and call the encryption machine 2 based on the storage location.

[0042] S103, using an encryption machine to tokenize the first original data according to a method for generating the token data, to generate first token data of the first original data.

[0043] It should be noted that the terms such as tag data, token, and token are interchangeable. There are no excessive restrictions on the generation method of tag data, for example, it may include setting generation rules, generating random numbers, hash operations, encryption algorithms, format conversion, etc. The generation method of tag data can be customized. Among them, the encryption algorithm may include symmetric encryption algorithm, asymmetric encryption algorithm, etc. Asymmetric encryption algorithm may include AES (Advanced Encryption Standard) and RSA algorithm.

[0044] In one embodiment, the first original data is tokenized by an encryption machine according to a method for generating the tag data to generate first tag data of the first original data, including generating a first random number by the encryption machine as the first tag data.

[0045] In one embodiment, the first original data is tokenized by an encryption machine according to a method for generating tag data to generate first tag data of the first original data, including performing a hash operation on the first original data by the encryption machine to obtain a first hash value as the first tag data.

[0046] In one embodiment, the first original data is tokenized by an encryption machine according to a method for generating the tag data to generate first tag data of the first original data, including encrypting the first original data by the encryption machine to obtain the first tag data.

[0047] In one embodiment, the first original data is tokenized by an encryption machine according to a method for generating the tag data to generate first tag data of the first original data, including format conversion of the first original data by the encryption machine to obtain the first tag data.

[0048] S104, sending first marking data to the marking service requesting end through the internal communication link.

[0049] For instance, continuing to take the tokenization service agent 1 as an example, the tokenization service agent 1 can tokenize the first original data X1 according to the marking data generation method through the encryption machine 1, generate the first marking data Y1 of the first original data X1, and send the first marking data Y1 to the tokenization service requesting end A through the internal communication link.

[0050] For instance, continuing to take the tokenization service agent 2 as an example, the tokenization service agent 2 can tokenize the first original data X2 according to the marking data generation method through the encryption machine 2, generate the first marking data Y2 of the first original data X2, and send the first marking data Y2 to the tokenization service requesting end B through the internal communication link.

[0051] In one embodiment, after generating the first marked data of the first original data, the method further includes adding the first original data and the first marked data to a backup data packet, and sending the backup data packet to the tokenization service provider based on the access rights of the tokenization service agent to the tokenization service provider. Thus, the tokenization service agent has the access rights to the tokenization service provider, and can back up the original data and its marked data to the tokenization service provider based on the access rights.

[0052] It should be noted that the tokenization service provider refers to the object that provides tokenization services.

[0053] For instance, continuing to take the tokenization service agent 1 as an example, the tokenization service agent 1 can add the first original data X1, the first labeled data Y1, the identifier of the tokenization service requester A, the calling time, etc. to the backup data packet 1, and based on the access rights of the tokenization service agent 1 to the tokenization service provider C, send the backup data packet 1 to the tokenization service provider C.

[0054] For example, continuing with the tokenization service agent 2, the tokenization service agent 2 can add the second original data X2, the second labeled data Y2, the identifier of the tokenization service requester B, the call time, etc. to the backup data packet 2, and based on the tokenization service agent 2's access rights to the tokenization service provider C, send the backup data packet 2 to the tokenization service provider C.

[0055] In summary, according to the data processing method provided by the embodiment of the present disclosure, the call request sent by the tokenization service request end is received through the internal communication link between the tokenization service request end and the tokenization service agent, and the first original data to be marked is extracted from the call request, the storage position of the encryption machine in the tokenization service request end is obtained, and the encryption machine is called based on the storage position, and the first original data is tokenized by the encryption machine according to the generation method of the marked data, and the first marked data of the first original data is generated, and the first marked data is sent to the tokenization service request end through the internal communication link. Therefore, the tokenization service agent is deployed in the tokenization service request end, and the tokenization service request end can directly call the locally deployed tokenization service agent, and the tokenization service agent can directly call the encryption machine to implement the tokenization processing, and feed back the marked data to the tokenization service request end, without relying on the third-party tokenization service provider, avoiding the problem that the tokenization processing cannot be implemented when the third-party tokenization service provider is abnormal, resulting in business interruption, improving the reliability of the tokenization processing, and then improving business continuity, in addition, it also helps to improve the tokenization processing efficiency and improve the user experience in the tokenization processing scenario.

[0056] Figure 2 It is a flowchart of a data processing method according to the second embodiment of the present disclosure.

[0057] like Figure 2 As shown, the data processing method of the second embodiment of the present disclosure, before receiving the call request sent by the tokenized service requester in step S101, includes the following steps:

[0058] S201, reading a configuration data set of a tokenization service agent from a local storage space of a tokenization service requester.

[0059] S202, running a tokenization service agent based on the configuration data set.

[0060] It should be noted that the configuration data set includes multiple configuration data of the tokenization service agent, and there are no excessive restrictions on the configuration data. For example, it may include the configuration data of the encryption machine, the service port of the tokenization service agent, etc. The configuration data of the encryption machine includes the generation method of the tag data. Running the tokenization service agent based on the configuration data set can be implemented by using any running method of the tokenization service agent in the relevant technology, and there is no excessive restriction here.

[0061] S203: Send a test data packet to the tokenization service provider based on the tokenization service agent's access rights to the tokenization service provider.

[0062] S204, in response to receiving a response data packet sent by the tokenization service provider, determining that the tokenization service agent is normally connected to the tokenization service provider.

[0063] It can be understood that if the tokenization service agent receives a response data packet sent by the tokenization service provider, it indicates that the connection between the tokenization service agent and the tokenization service provider is normal.

[0064] For example, continuing to take the tokenization service agent 1 as an example, the tokenization service agent 1 can read the configuration data set of the tokenization service agent 1 from the local storage space of the tokenization service requester A, run the tokenization service agent 1 based on the configuration data set of the tokenization service agent 1, and send a test data packet to the tokenization service provider C based on the access rights of the tokenization service agent 1 to the tokenization service provider C.

[0065] The tokenization service agent 1 may determine that the connection between the tokenization service agent 1 and the tokenization service provider C is normal in response to receiving a response data packet sent by the tokenization service provider C.

[0066] S205, in response to not receiving a response data packet sent by the tokenization service provider, determining that the connection between the tokenization service agent and the tokenization service provider is abnormal.

[0067] S206, generating first indication information for indicating that the connection between the tokenization service agent and the tokenization service provider is abnormal.

[0068] S207, sending first indication information to the tokenization service requester through the internal communication link, and / or, based on access rights, sending first indication information to the tokenization service provider.

[0069] It is understandable that if the tokenization service agent does not receive the response data packet sent by the tokenization service provider, it indicates that the connection between the tokenization service agent and the tokenization service provider is abnormal.

[0070] For instance, continuing to take the tokenization service agent 1 as an example, the tokenization service agent 1 may determine that the connection between the tokenization service agent 1 and the tokenization service provider C is abnormal in response to not receiving the response data packet sent by the tokenization service provider C, generate first indication information for indicating the abnormal connection between the tokenization service agent 1 and the tokenization service provider C, and send the first indication information to the tokenization service requester A through the internal communication link, and / or, based on access rights, send the first indication information to the tokenization service provider C.

[0071] In one embodiment, after running the tokenization service agent based on the configuration data set, the method further includes obtaining the storage location of the encryption machine in the tokenization service request end, calling the encryption machine based on the storage location, tokenizing the test original data according to the generation method of the token data by the encryption machine, generating test token data of the test original data, verifying the test token data, determining that the encryption machine is operating normally in response to the test token data passing the verification, determining that the encryption machine is operating abnormally in response to the test token data failing the verification, generating second indication information for indicating that the encryption machine is operating abnormally, sending the second indication information to the tokenization service request end through the internal communication link, and / or sending the second indication information to the tokenization service provider end based on the access rights. In this way, the encryption machine can be tested to identify whether the operation of the encryption machine is abnormal, and when the encryption machine is operating abnormally, the message of the encryption machine operating abnormality is notified to the tokenization service request end and / or the tokenization service provider end, so as to timely handle the fault of the encryption machine, thereby improving the operation reliability of the encryption machine and thus improving the reliability of the tokenization process.

[0072] In some examples, the test mark data is verified, including obtaining reference mark data of the test original data, identifying whether the test mark data is consistent with the reference mark data, and determining that the test mark data has passed the verification in response to the test mark data being consistent with the reference mark data, and determining that the test mark data has not passed the verification in response to the test mark data being inconsistent with the reference mark data.

[0073] For example, taking the tokenization service agent 1 as an example, the tokenization service agent 1 can obtain the storage location of the encryption machine 1 in the tokenization service request terminal A, and call the encryption machine 1 based on the storage location, and tokenize the test original data X3 according to the generation method of the marked data through the encryption machine 1, generate the test marked data Y3 of the test original data X3, and verify the test marked data Y3.

[0074] In response to the test flag data Y3 passing the verification, it is determined that the encryption machine 1 is operating normally.

[0075] In response to the test tag data Y3 failing the verification, it is determined that the encryption machine 1 is operating abnormally, and second indication information is generated to indicate that the encryption machine 1 is operating abnormally. The second indication information is sent to the tokenization service requester A through the internal communication link, and / or, based on access rights, the second indication information is sent to the tokenization service provider C.

[0076] In summary, according to the data processing method provided by the embodiment of the present disclosure, a configuration data set of the tokenization service agent is read from the local storage space of the tokenization service request end, the tokenization service agent is run based on the configuration data set, and based on the access rights of the tokenization service agent to the tokenization service provider, a test data packet is sent to the tokenization service provider. In response to receiving a response data packet sent by the tokenization service provider, it is determined that the connection between the tokenization service agent and the tokenization service provider is normal. In response to not receiving a response data packet sent by the tokenization service provider, it is determined that the connection between the tokenization service agent and the tokenization service provider is abnormal. First indication information is generated to indicate that the connection between the tokenization service agent and the tokenization service provider is abnormal. The first indication information is sent to the tokenization service request end through an internal communication link, and / or, based on the access rights, the first indication information is sent to the tokenization service provider. Therefore, the connection between the tokenization service agent and the tokenization service provider can be tested to identify whether there is an abnormality in the above connection. When the above connection is abnormal, the message of the connection abnormality is notified to the tokenization service requester and / or the tokenization service provider so that the connection abnormality can be troubleshooted in time, thereby improving the reliability of the tokenization processing.

[0077] Based on any of the above embodiments, before receiving the call request sent by the tokenization service requester in step S101, the method further includes receiving the registration data of the tokenization service agent sent by the tokenization service provider, wherein the registration data includes the first identifier of the tokenization service agent and the second identifier of the encryption machine, and the identifier of the tokenization service agent is configured as the first identifier, and the identifier of the encryption machine is configured as the second identifier. Thus, the tokenization service agent can receive the registration data sent by the tokenization service provider, and configure the identifier of the tokenization service agent and the identifier of the encryption machine respectively based on the first identifier and the second identifier in the registration data.

[0078] Figure 3 It is a flowchart of a data processing method according to the third embodiment of the present disclosure.

[0079] like Figure 3 As shown, the data processing method of the third embodiment of the present disclosure includes the following steps:

[0080] S301, receiving a status update request for marked data sent by a markup service provider.

[0081] S302: extracting a third identifier of the mark data to be updated and a target state of the mark data to be updated from the state update request, wherein the target state is enabled or disabled.

[0082] S303: Update the life state of the marked data identified by the third identifier to the target state.

[0083] It should be noted that the tagged data has a life state, which includes enabled, disabled, etc. The terms enabled, available, etc. can be interchanged with each other, and the terms disabled, unavailable, etc. can be interchanged with each other. For example, if the life state of the tagged data is enabled, the tagged data can be used by the tagged data request end for data processing. If the life state of the tagged data is disabled, the tagged data cannot be used by the tagged data request end for data processing.

[0084] It should be noted that the request for updating the status of the marked data carries the third identifier of the marked data to be updated and the target status of the marked data to be updated.

[0085] For example, continuing to take the tokenization service agent 1 as an example, the tokenization service agent 1 can receive the state update request of the tagged data sent by the tokenization service provider C, extract the third identifier of the tagged data to be updated and the target state of the tagged data to be updated from the state update request, and if the target state is disabled, update the life state of the tagged data Y4 identified by the third identifier to disabled. It can be understood that after the life state of the tagged data Y4 is updated to disabled, the tagged data Y4 cannot be used for data processing by the tagged data requesting end A.

[0086] In summary, according to the data processing method provided by the embodiment of the present disclosure, a state update request for the marked data sent by the tokenization service provider is received, and the third identifier of the marked data to be updated and the target state of the marked data to be updated are extracted from the state update request, wherein the target state is enabled or disabled, and the life state of the marked data identified by the third identifier is updated to the target state. Thus, the tokenization service agent can update the life state of the marked data in real time based on the state update request sent by the tokenization service provider.

[0087] Figure 4 It is a flowchart of a data processing method according to the fourth embodiment of the present disclosure.

[0088] like Figure 4 As shown, the data processing method of the fourth embodiment of the present disclosure includes the following steps:

[0089] S401, receiving a query request for labeled data sent by a tokenization service requester through an internal communication link, wherein the query request carries second original data to be queried.

[0090] S402, based on the access rights of the tokenization service agent to the tokenization service provider, send a query request to the tokenization service provider.

[0091] S403, receiving second marked data of second original data sent by the marking service provider.

[0092] S404, sending second marking data to the marking service requesting end through the internal communication link.

[0093] In one embodiment, before sending the query request to the tokenization service provider, it also includes identifying that the second labeled data does not exist in the local storage space of the tokenization service agent. Therefore, when the second labeled data does not exist in the local storage space of the tokenization service agent, the tokenization service agent sends the query request to the tokenization service provider to obtain the second labeled data, which helps to improve the query efficiency of the labeled data.

[0094] For example, continuing to take the tokenization service agent 1 as an example, the tokenization service agent 1 receives a query request for the marked data sent by the tokenization service request terminal A through an internal communication link, wherein the query request carries the second original data X5 to be queried, and based on the tokenization service agent 1's access rights to the tokenization service provider C, sends a query request to the tokenization service provider C, and receives the second marked data Y5 of the second original data X5 sent by the tokenization service provider C, and sends the second marked data Y5 to the tokenization service request terminal A through the internal communication link.

[0095] In summary, according to the data processing method provided by the embodiment of the present disclosure, a query request for the marked data sent by the tokenization service request end is received through an internal communication link, wherein the query request carries the second original data to be queried, and based on the access rights of the tokenization service agent for the tokenization service provider, a query request is sent to the tokenization service provider end, and the second marked data of the second original data sent by the tokenization service provider end is received, and the second marked data is sent to the tokenization service request end through the internal communication link. Thus, the tokenization service agent can forward the query request sent by the tokenization service request end to the tokenization service provider end, receive the queried marked data sent by the tokenization service provider end, and feed back the queried marked data to the tokenization service request end to realize the query of the marked data.

[0096] As another possible implementation, after receiving the query request for the labeled data sent by the tokenization service requester in step S401, the method further includes querying the local storage space of the tokenization service agent for the second labeled data of the second original data, and sending the second labeled data to the tokenization service requester through the internal communication link. Thus, the tokenization service agent can query the labeled data in the local storage space based on the query request sent by the tokenization service requester, and feed back the queried labeled data to the tokenization service requester.

[0097] Figure 5 It is a flowchart of a data processing method according to the fifth embodiment of the present disclosure.

[0098] like Figure 5 As shown, the data processing method of the fifth embodiment of the present disclosure includes the following steps:

[0099] S501, receiving a request for identifying the availability of marked data sent by a markup service requester through an internal communication link.

[0100] S502, extracting third original data and third marked data of the third original data from the availability identification request.

[0101] S503, in response to the third marked data being consistent with the fourth marked data of the fourth original data, determining that the third marked data is not available, wherein the generation time of the fourth marked data is earlier than the generation time of the third marked data, and the third original data is inconsistent with the fourth original data.

[0102] S504: Send third indication information indicating that the third tagged data is not available to the tokenization service requester through the internal communication link.

[0103] It should be noted that the availability identification request carries the third original data and the third tag data of the third original data. Compared with the third tag data, the fourth tag data is generated earlier. If the third tag data is consistent with the fourth tag data, it means that the tag data corresponding to the two different original data are repeated, which does not meet the uniqueness of the tag data, that is, the third tag data does not meet the generation specification of the tag data, and the third tag data is not available.

[0104] For example, continuing with the tokenization service agent 1, the tokenization service agent 1 receives the availability identification request for the marked data sent by the tokenization service requester A through the internal communication link, and extracts the third original data X6 and the third marked data Y6 of the third original data X6 from the availability identification request.

[0105] In response to the third labeled data Y6 being consistent with the fourth labeled data Y7 of the fourth original data X7, the tokenization service agent 1 determines that the third labeled data Y6 is not available, and sends third indication information indicating that the third labeled data Y6 is not available to the tokenization service requester A through the internal communication link. The generation time of the fourth labeled data Y7 is earlier than the generation time of the third labeled data Y6, and the third original data X6 is inconsistent with the fourth original data X7.

[0106] S505: In response to the fact that the mark data of the remaining original data except the third original data are all inconsistent with the third mark data, it is determined that the third mark data is available.

[0107] S506: Send fourth indication information indicating the availability of the third tagged data to the tokenization service requester through the internal communication link.

[0108] It can be understood that if the tag data of the remaining original data other than the third original data are inconsistent with the third tag data, it indicates that the third tag data is unique, that is, the third tag data meets the generation specification of the tag data and the third tag data is available.

[0109] For instance, continuing to take the tokenization service agent 1 as an example, the tokenization service agent 1 responds to the fact that the tag data of the remaining original data other than the third original data X6 are inconsistent with the third tag data Y6, determines that the third tag data Y6 is available, and sends the fourth indication information indicating the availability of the third tag data Y6 to the tokenization service requester A through the internal communication link.

[0110] In one embodiment, the method further includes sending a duplicate check request for the marked data to the tokenization service provider based on the tokenization service agent's access rights to the tokenization service provider, wherein the duplicate check request carries the third original data and the third marked data, and receiving a duplicate check result for the marked data sent by the tokenization service provider, wherein the duplicate check result is used to indicate whether the marked data of the remaining original data other than the third original data is consistent with the third marked data. Thus, the tokenization service agent can send a duplicate check request for the marked data to the tokenization service provider based on the access rights, and receive a duplicate check result sent by the tokenization service provider to identify whether the marked data is unique.

[0111] For example, the method further includes adding third original data and third marked data to the duplicate checking request.

[0112] In summary, according to the data processing method provided by the embodiment of the present disclosure, an availability identification request for the marked data sent by the tokenization service requester is received through an internal communication link, and the third original data and the third marked data of the third original data are extracted from the availability identification request. In response to the third marked data being consistent with the fourth marked data of the fourth original data, it is determined that the marked data of the third original data is not available, wherein the generation time of the fourth marked data is earlier than the generation time of the third marked data, and the third original data is inconsistent with the fourth original data. Through the internal communication link, third indication information for indicating that the third marked data is not available is sent to the tokenization service requester. In response to the marked data of the remaining original data other than the third original data being inconsistent with the third marked data, it is determined that the third marked data is available, and through the internal communication link, the fourth indication information for indicating that the third marked data is available is sent to the tokenization service requester. Therefore, based on the availability identification request sent by the tokenization service requester, the tokenization service agent can determine that the marked data is not available when the marked data corresponding to different original data are repeated, and determine that the marked data is available when the marked data is unique, and inform the tokenization service requester whether the marked data is available.

[0113] Figure 6 It is a flowchart of a data processing method according to the sixth embodiment of the present disclosure.

[0114] Figure 6 As shown, the data processing method of the sixth embodiment of the present disclosure includes the following steps:

[0115] S601, obtaining first original data to be marked, and adding the first original data to a call request of a marking service agent, wherein the marking service agent is deployed in a marking service request end.

[0116] S602, sending a call request to the tokenization service agent through an internal communication link between the tokenization service requester and the tokenization service agent, wherein the call request is used to generate first labeled data of the first original data.

[0117] S603, receiving first marking data sent by the marking service agent through the internal communication link.

[0118] It should be noted that the execution subject of the data processing method of the present disclosure is the tokenized service request end. The data processing method of the present embodiment can be executed by the data processing device of the present embodiment, and the data processing device of the present embodiment can be configured in any electronic device to execute the data processing method of the present embodiment.

[0119] For the relevant contents of steps S601-S603, please refer to the above embodiment and will not be repeated here.

[0120] For example, continuing to take the tokenization service agent 1 as an example, the tokenization service requester A can obtain the first original data X1 to be marked, add the first original data X1 to the call request of the tokenization service agent 1, and send a call request to the tokenization service agent 1 through the internal communication link between the tokenization service requester A and the tokenization service agent 1. The call request is used to generate the first marked data Y1 for the first original data X1, and receive the first marked data Y1 sent by the tokenization service agent 1 through the internal communication link.

[0121] For example, continuing to take the tokenization service agent2 as an example, the tokenization service request end B can obtain the first original data X2 to be marked, add the first original data X2 to the call request of the tokenization service agent2, and send a call request to the tokenization service agent2 through the internal communication link between the tokenization service request end B and the tokenization service agent2. The call request is used to generate the first marked data Y2 of the first original data X2, and receive the first marked data Y2 sent by the tokenization service agent2 through the internal communication link.

[0122] In one embodiment, before obtaining the first original data to be marked, the method further includes receiving a configuration data set of a tokenization service agent sent by a tokenization service provider, storing the configuration data set in a local storage space, determining the configuration data of an encryption machine from the configuration data set, and deploying the encryption machine in the local storage space based on the configuration data of the encryption machine, wherein the configuration data of the encryption machine includes a method for generating the marked data. Thus, the tokenization service requester can receive the configuration data set of the tokenization service agent sent by the tokenization service provider, and store the configuration data set in a local storage space, so as to locally deploy the tokenization service agent, and deploy the encryption machine in the local storage space based on the configuration data of the encryption machine, so as to realize local deployment of the encryption machine.

[0123] In one embodiment, the method further includes starting a first exception handling process of the tokenization service agent in response to receiving first indication information sent by the tokenization service agent for indicating that the connection between the tokenization service agent and the tokenization service provider is abnormal, and / or second indication information for indicating that the encryption machine is operating abnormally. Thus, the tokenization service requester can start the first exception handling process when the connection between the tokenization service agent and the tokenization service provider is abnormal, and / or when the encryption machine is operating abnormally, so as to perform fault handling in a timely manner, thereby improving the operating reliability of the tokenization service agent and further improving the reliability of the tokenization processing.

[0124] In one embodiment, the method further includes obtaining the second original data to be queried, and adding the second original data to the query request of the labeled data, wherein the query request is used to query the second labeled data of the second original data, sending the query request to the tokenization service agent through the internal communication link, and receiving the second labeled data sent by the tokenization service agent through the internal communication link. Thus, the tokenization service request end can send the query request to the tokenization service agent through the internal communication link and receive the queried labeled data to realize the query of the labeled data.

[0125] In summary, according to the data processing method provided by the embodiment of the present disclosure, the first original data to be marked is obtained, and the first original data is added to the call request of the tokenization service agent, wherein the tokenization service agent is deployed in the tokenization service request end, and a call request is sent to the tokenization service agent through the internal communication link between the tokenization service request end and the tokenization service agent, wherein the call request is used to generate the first marked data of the first original data, and the first marked data sent by the tokenization service agent is received through the internal communication link. Thus, the tokenization service agent is deployed in the tokenization service request end, and the tokenization service request end can directly call the locally deployed tokenization service agent to implement the tokenization processing without relying on the third-party tokenization service provider, thereby avoiding the problem that the tokenization processing cannot be implemented when the third-party tokenization service provider is abnormal, resulting in business interruption, improving the reliability of the tokenization processing, and thus improving business continuity. In addition, it also helps to improve the efficiency of the tokenization processing and improve the user experience in the tokenization processing scenario.

[0126] Figure 7 It is a flowchart of a data processing method according to the seventh embodiment of the present disclosure.

[0127] like Figure 7 As shown, the data processing method of the seventh embodiment of the present disclosure includes the following steps:

[0128] S701, adding third original data and third marked data of the third original data to an availability identification request for marked data, wherein the availability identification request is used to identify whether the third marked data is available.

[0129] S702: Send an availability identification request to the tokenization service agent.

[0130] S703, in response to receiving the third indication information sent by the tokenization service agent to indicate that the third tagged data is not available, update the third original data to the first original data, and return to execute the call request to add the first original data to the tokenization service agent and its subsequent steps to re-acquire the third tagged data.

[0131] For example, continuing to take the tokenization service agent1 as an example, the tokenization service requester A adds the third original data X6 and the third labeled data Y6 of the third original data X6 to the availability identification request of the labeled data, wherein the availability identification request is used to identify whether the third labeled data Y6 is available, and sends the availability identification request to the tokenization service agent1.

[0132] In response to receiving the third indication information sent by the tokenization service agent 1 indicating that the third labeled data Y6 is not available, the tokenization service requester A updates the third original data X6 to the first original data, and returns to execute the call request to add the first original data to the tokenization service agent and its subsequent steps to re-acquire the third labeled data.

[0133] S704: In response to receiving fourth indication information sent by the tokenization service agent and indicating that the third labeled data is available, continue to perform data processing based on the third labeled data.

[0134] For example, continuing to take the tokenization service agent 1 as an example, the tokenization service requester A responds to receiving the fourth indication information sent by the tokenization service agent 1 to indicate that the third labeled data Y6 is available, and continues to process data based on the third labeled data Y6.

[0135] In summary, according to the data processing method provided by the embodiment of the present disclosure, the third original data and the third marked data of the third original data are added to the availability identification request of the marked data, wherein the availability identification request is used to identify whether the third marked data is available, and the availability identification request is sent to the marking service agent. In response to receiving the third indication information sent by the marking service agent indicating that the third marked data is not available, the third original data is updated to the first original data, and the call request for adding the first original data to the marking service agent and its subsequent steps are returned to re-acquire the third marked data, and in response to receiving the fourth indication information sent by the marking service agent indicating that the third marked data is available, the data processing is continued based on the third marked data. Thus, the marking service request end can send the availability identification request to the marking service agent, and receive the indication information sent by the marking service agent indicating whether the marked data is available, and when the marked data of a certain original data is not available, the marked data of the original data is re-acquired, and when the marked data of a certain original data is available, the data processing is continued based on the marked data of the original data.

[0136] Figure 8 It is a flowchart of a data processing method according to the eighth embodiment of the present disclosure.

[0137] like Figure 8 As shown, the data processing method of the eighth embodiment of the present disclosure includes the following steps:

[0138] S801, receiving a backup data packet sent by a tokenization service agent, wherein the backup data packet carries first original data and first marked data of the first original data, and the tokenization service agent is deployed in the tokenization service request end.

[0139] S802, storing the backup data package in the local storage space.

[0140] It should be noted that the execution subject of the data processing method of the present disclosure is the tokenization service provider. The data processing method of the present embodiment can be executed by the data processing device of the present embodiment, and the data processing device of the present embodiment can be configured in any electronic device to execute the data processing method of the present embodiment.

[0141] For the relevant contents of steps S801-S802, please refer to the above embodiment and will not be repeated here.

[0142] For example, continuing to take the tokenization service agent 1 as an example, the tokenization service provider C can receive the backup data packet 1 sent by the tokenization service agent 1, and store the backup data packet 1 in the local storage space. Among them, the backup data packet 1 carries the first original data X1, the first marked data Y1, the identifier of the tokenization service requester A, the call time, etc.

[0143] For example, continuing to take the tokenization service agent 2 as an example, the tokenization service provider C can receive the backup data packet 2 sent by the tokenization service agent 2, and store the backup data packet 2 in the local storage space. Among them, the backup data packet 2 carries the first original data X2, the first marked data Y2, the identifier of the tokenization service requester B, the call time, etc.

[0144] In one embodiment, before receiving the backup data packet sent by the tokenization service agent, the method further includes sending a configuration data set of the tokenization service agent to the tokenization service request end, wherein the configuration data set is used to deploy the tokenization service agent at the tokenization service request end, the configuration data set includes the configuration data of the encryption machine, the configuration data of the encryption machine includes the generation method of the tag data, and the access rights of the tokenization service provider are allocated to the tokenization service agent. Thus, the tokenization service provider can send the configuration data set of the tokenization service agent to the tokenization service request end so that the tokenization service request end can deploy the tokenization service agent locally, and allocate the access rights of the tokenization service provider to the tokenization service agent so that the tokenization service agent and the tokenization service provider can communicate with each other.

[0145] In one embodiment, the method further includes receiving a test data packet sent by the tokenization service agent, generating a response data packet based on the test data packet, and sending the response data packet to the tokenization service agent. Thus, the tokenization service provider can receive the test data packet sent by the tokenization service agent, generate a response data packet based on the test data packet, and send the response data packet to the tokenization service agent to test the connection between the tokenization service agent and the tokenization service provider to identify whether the above connection is abnormal.

[0146] In one embodiment, the method further includes assigning a first identifier to the tokenization service agent, assigning a second identifier to the encryption machine, adding the first identifier and the second identifier to the registration data of the tokenization service agent, and sending the registration data to the tokenization service agent. Thus, the tokenization service provider can assign identifiers to the tokenization service agent and the encryption machine respectively to implement the registration of the tokenization service agent, and add the assigned identifiers to the registration data of the tokenization service agent, and send the registration data to the tokenization service agent to inform the tokenization service agent of the registration data.

[0147] In one embodiment, the method further includes starting a second exception handling process of the tokenization service agent in response to receiving first indication information sent by the tokenization service agent to indicate that the connection between the tokenization service agent and the tokenization service provider is abnormal, and / or second indication information to indicate that the encryption machine is operating abnormally. Thus, the tokenization service provider can start the second exception handling process when the connection between the tokenization service agent and the tokenization service provider is abnormal, and / or when the encryption machine is operating abnormally, so as to handle the fault in time, thereby improving the operating reliability of the tokenization service agent and further improving the reliability of the tokenization process.

[0148] In summary, according to the data processing method provided by the embodiment of the present disclosure, a backup data packet sent by a tokenization service agent is received, wherein the backup data packet carries the first original data and the first marked data of the first original data, and the tokenization service agent is deployed in the tokenization service request end, and the backup data packet is stored in the local storage space. Thus, the tokenization service provider can receive the backup data packet sent by the tokenization service agent, and store the backup data packet in the local storage space, so that the data backup of the original data and its marked data can be realized, and the original data and its marked data can be quickly restored when the original data and its marked data are lost or damaged, thereby improving the integrity of the original data and its marked data, and improving business continuity.

[0149] Based on any of the above embodiments, the method further includes adding a third identifier of the tagged data to be updated and a target state of the tagged data to be updated to a state update request of the tagged data, wherein the target state is enabled or disabled, and the state update request is used to update the life state of the tagged data to be updated to the target state, and send a state update request to the tokenization service agent. Thus, the tokenization service provider can send a state update request to the tokenization service agent to update the life state of the tagged data in real time.

[0150] Based on any of the above embodiments, the method further includes receiving a query request for the marked data sent by the marking service agent, extracting the second original data to be queried from the query request, searching the local storage space for the second marked data of the second original data, and sending the second marked data to the marking service agent. Thus, the marking service provider can search the local storage space for the marked data based on the query request sent by the marking service agent, and feed back the queried marked data to the marking service agent to implement the query of the marked data.

[0151] Based on any of the above embodiments, the method further includes receiving a duplicate check request for the marked data sent by the tokenization service agent, extracting the third original data and the third marked data of the third original data from the duplicate check request, and querying in the local storage space whether the marked data of the remaining original data other than the third original data is consistent with the third marked data, obtaining a duplicate check result, and sending the duplicate check result to the tokenization service agent. Thus, the tokenization service request end can check the marked data for duplicates based on the duplicate check request sent by the tokenization service agent, and feed back the duplicate check result to the tokenization service agent to identify whether the marked data is unique.

[0152] Fig. 9 is a block diagram of a data processing device according to a first embodiment of the present disclosure.

[0153] like Fig. 9 As shown, the data processing device 100 of the embodiment of the present disclosure is suitable for being deployed in a tokenized service agent agent in a tokenized service request end, and the device 100 includes: a receiving module 110, a calling module 120, a processing module 130 and a sending module 140.

[0154] The receiving module 110 is configured to receive a call request sent by the tokenization service request end through an internal communication link between the tokenization service request end and the tokenization service agent, and extract the first original data to be marked from the call request;

[0155] The calling module 120 is configured to obtain a storage location of an encryption machine in the tokenization service requesting end, and call the encryption machine based on the storage location;

[0156] The processing module 130 is configured to perform tokenization processing on the first original data according to the generation method of the marked data by the encryption machine to generate first marked data of the first original data;

[0157] The sending module 140 is configured to send the first marking data to the marking service request end through the internal communication link.

[0158] In one embodiment of the present disclosure, after generating the first marked data of the first original data, the sending module 140 is further configured to: add the first original data and the first marked data to a backup data packet; and send the backup data packet to the tokenization service provider based on the access rights of the tokenization service agent to the tokenization service provider.

[0159] In one embodiment of the present disclosure, the device 100 also includes a testing module. Before receiving the call request sent by the tokenization service requester, the testing module is configured to: read a configuration data set of the tokenization service agent from the local storage space of the tokenization service requester; run the tokenization service agent based on the configuration data set; send a test data packet to the tokenization service provider based on the access rights of the tokenization service agent to the tokenization service provider; and determine that the connection between the tokenization service agent and the tokenization service provider is normal in response to receiving a response data packet sent by the tokenization service provider.

[0160] In one embodiment of the present disclosure, after sending the test data packet to the tokenization service provider, the test module is further configured to: determine that the connection between the tokenization service agent and the tokenization service provider is abnormal in response to not receiving the response data packet sent by the tokenization service provider; generate first indication information for indicating that the connection between the tokenization service agent and the tokenization service provider is abnormal; send the first indication information to the tokenization service requester through the internal communication link, and / or, based on the access permission, send the first indication information to the tokenization service provider.

[0161] In one embodiment of the present disclosure, after running the tokenization service agent based on the configuration data set, the test module is further configured to: obtain the storage location of the encryption machine in the tokenization service request end, and call the encryption machine based on the storage location; tokenize the test original data through the encryption machine according to the generation method of the tag data, and generate test tag data for the test original data; verify the test tag data; in response to the test tag data passing the verification, determine that the encryption machine is operating normally; in response to the test tag data failing the verification, determine that the encryption machine is operating abnormally, and generate second indication information for indicating that the encryption machine is operating abnormally; send the second indication information to the tokenization service request end through the internal communication link, and / or, based on the access permission, send the second indication information to the tokenization service provider.

[0162] In one embodiment of the present disclosure, before receiving the call request sent by the tokenization service requester, the receiving module 110 is further configured to: receive registration data of the tokenization service agent sent by the tokenization service provider, wherein the registration data includes a first identifier of the tokenization service agent and a second identifier of the encryption machine; configure the identifier of the tokenization service agent as the first identifier, and configure the identifier of the encryption machine as the second identifier.

[0163] In one embodiment of the present disclosure, the processing module 130 is further configured to: receive a status update request for the marked data sent by the marking service provider; extract a third identifier of the marked data to be updated and a target state of the marked data to be updated from the status update request, wherein the target state is enabled or disabled; and update the life state of the marked data identified by the third identifier to the target state.

[0164] In one embodiment of the present disclosure, the processing module 130 is further configured to: receive a query request for the marked data sent by the tokenization service request end through the internal communication link, wherein the query request carries the second original data to be queried; based on the access rights of the tokenization service agent to the tokenization service provider, send the query request to the tokenization service provider; receive second marked data of the second original data sent by the tokenization service provider; and send the second marked data to the tokenization service request end through the internal communication link.

[0165] In one embodiment of the present disclosure, the processing module 130 is further configured to: receive, via the internal communication link, an availability identification request for the tagged data sent by the tagged service requester; extract the third original data and the third tagged data of the third original data from the availability identification request; determine, in response to the third tagged data being consistent with the fourth tagged data of the fourth original data, that the third tagged data is not available, wherein the generation time of the fourth tagged data is earlier than the generation time of the third tagged data, and the third original data is inconsistent with the fourth original data; and send, via the internal communication link, third indication information to indicate that the third tagged data is not available to the tagged service requester.

[0166] In one embodiment of the present disclosure, the processing module 130 is further configured to: in response to the mark data of the remaining original data other than the third original data being inconsistent with the third mark data, determine that the third mark data is available; and send fourth indication information for indicating the availability of the third mark data to the tokenization service request end through the internal communication link.

[0167] In one embodiment of the present disclosure, the processing module 130 is further configured to: send a duplicate check request for the marked data to the markup service provider based on the access rights of the markup service agent to the markup service provider, wherein the duplicate check request carries the third original data and the third marked data; receive a duplicate check result for the marked data sent by the markup service provider, wherein the duplicate check result is used to indicate whether there is marked data of the remaining original data other than the third original data that is consistent with the third marked data.

[0168] Regarding the device in the above embodiment, the specific manner in which each module performs operations has been described in detail in the embodiment of the method, and will not be elaborated here.

[0169] In summary, the data processing device provided by the embodiment of the present disclosure receives the call request sent by the tokenization service request end through the internal communication link between the tokenization service request end and the tokenization service agent, extracts the first original data to be marked from the call request, obtains the storage location of the encryption machine in the tokenization service request end, and calls the encryption machine based on the storage location, tokenizes the first original data according to the generation method of the marked data through the encryption machine, generates the first marked data of the first original data, and sends the first marked data to the tokenization service request end through the internal communication link. Therefore, the tokenization service agent is deployed in the tokenization service request end, and the tokenization service request end can directly call the locally deployed tokenization service agent, and the tokenization service agent can directly call the encryption machine to implement the tokenization processing and feed back the marked data to the tokenization service request end without relying on the third-party tokenization service provider, avoiding the problem that the tokenization processing cannot be implemented when the third-party tokenization service provider is abnormal, resulting in business interruption, improving the reliability of the tokenization processing, and thus improving business continuity. In addition, it also helps to improve the tokenization processing efficiency and improve the user experience in the tokenization processing scenario.

[0170] Fig.10 is a block diagram of a data processing device according to a second embodiment of the present disclosure.

[0171] like Fig.10As shown, the data processing device 200 of the embodiment of the present disclosure is suitable for a tokenized service request end, and the device 200 includes: an acquisition module 210, a sending module 220 and a receiving module 230.

[0172] The acquisition module 210 is configured to acquire first original data to be marked, and add the first original data to a call request of a tokenization service agent, wherein the tokenization service agent is deployed in the tokenization service request end;

[0173] The sending module 220 is configured to send the call request to the tokenization service agent through an internal communication link between the tokenization service request end and the tokenization service agent, wherein the call request is used to generate the first labeled data of the first original data;

[0174] The receiving module 230 is configured to receive the first label data sent by the labeling service agent through the internal communication link.

[0175] In one embodiment of the present disclosure, before obtaining the first original data to be marked, the receiving module 230 is further configured to: receive a configuration data set of the marking service agent sent by the marking service provider, and store the configuration data set to a local storage space; determine the configuration data of the encryption machine from the configuration data set, and deploy the encryption machine in the local storage space based on the configuration data of the encryption machine, wherein the configuration data of the encryption machine includes a method for generating marking data.

[0176] In one embodiment of the present disclosure, the receiving module 230 is further configured to: in response to receiving first indication information sent by the tokenization service agent to indicate an abnormal connection between the tokenization service agent and the tokenization service provider, and / or second indication information to indicate an abnormal operation of the encryption machine; start the first exception handling process of the tokenization service agent.

[0177] In one embodiment of the present disclosure, the sending module 220 is further configured to: obtain the second original data to be queried, and add the second original data to the query request for the marked data, wherein the query request is used to query the second marked data of the second original data; send the query request to the marking service agent through the internal communication link; and receive the second marked data sent by the marking service agent through the internal communication link.

[0178] In one embodiment of the present disclosure, the sending module 220 is further configured to: add the third original data and the third marked data of the third original data to the availability identification request of the marked data, wherein the availability identification request is used to identify whether the third marked data is available; send the availability identification request to the marking service agent; in response to receiving the third indication information sent by the marking service agent indicating that the third marked data is not available, update the third original data to the first original data, and return to execute the call request of adding the first original data to the marking service agent and its subsequent steps to reacquire the third marked data; in response to receiving the fourth indication information sent by the marking service agent indicating that the third marked data is available, continue to process data based on the third marked data.

[0179] Regarding the device in the above embodiment, the specific manner in which each module performs operations has been described in detail in the embodiment of the method, and will not be elaborated here.

[0180] In summary, the data processing device provided by the embodiment of the present disclosure obtains the first original data to be marked, and adds the first original data to the call request of the tokenization service agent, wherein the tokenization service agent is deployed in the tokenization service request end, and sends a call request to the tokenization service agent through the internal communication link between the tokenization service request end and the tokenization service agent, wherein the call request is used to generate the first marked data of the first original data, and receives the first marked data sent by the tokenization service agent through the internal communication link. Therefore, the tokenization service agent is deployed in the tokenization service request end, and the tokenization service request end can directly call the locally deployed tokenization service agent to implement the tokenization processing without relying on the third-party tokenization service provider, thereby avoiding the problem that the tokenization processing cannot be implemented when the third-party tokenization service provider is abnormal, resulting in business interruption, improving the reliability of the tokenization processing, and thus improving business continuity. In addition, it also helps to improve the efficiency of the tokenization processing and improve the user experience in the tokenization processing scenario.

[0181] Fig.11 is a block diagram of a data processing device according to a third embodiment of the present disclosure.

[0182] like Fig.11 As shown, the data processing device 300 of the embodiment of the present disclosure is suitable for a tokenization service provider, and the device 300 includes: a receiving module 310 and a storage module 320.

[0183] The receiving module 310 is configured to receive a backup data packet sent by a tokenization service agent, wherein the backup data packet carries first original data and first tag data of the first original data, and the tokenization service agent is deployed in the tokenization service request end;

[0184] The storage module 320 is configured to store the backup data package in a local storage space.

[0185] In one embodiment of the present disclosure, the device 300 also includes: a sending module, and before receiving the backup data packet sent by the tokenization service agent, the sending module is configured to: send a configuration data set of the tokenization service agent to the tokenization service request end, wherein the configuration data set is used to deploy the tokenization service agent at the tokenization service request end, the configuration data set includes configuration data of the encryption machine, and the configuration data of the encryption machine includes a method for generating marking data; assign access rights of the tokenization service provider to the tokenization service agent.

[0186] In one embodiment of the present disclosure, the receiving module 310 is further configured to: receive a test data packet sent by the tokenization service agent; generate a response data packet based on the test data packet, and send the response data packet to the tokenization service agent.

[0187] In one embodiment of the present disclosure, the device 300 also includes: a sending module, configured to: assign a first identifier to the tokenization service agent and assign a second identifier to the encryption machine; add the first identifier and the second identifier to the registration data of the tokenization service agent; and send the registration data to the tokenization service agent.

[0188] In one embodiment of the present disclosure, the receiving module 310 is further configured to: in response to receiving first indication information sent by the tokenization service agent to indicate an abnormal connection between the tokenization service agent and the tokenization service provider, and / or second indication information to indicate an abnormal operation of the encryption machine; start the second exception handling process of the tokenization service agent.

[0189] In one embodiment of the present disclosure, the device 300 also includes: a sending module, configured to: add a third identifier of the tagged data to be updated, and a target state of the tagged data to be updated to a state update request for the tagged data, wherein the target state is enabled or disabled, and the state update request is used to update the life state of the tagged data to be updated to the target state; and send the state update request to the tokenization service agent.

[0190] In one embodiment of the present disclosure, the receiving module 310 is further configured to: receive a query request for labeled data sent by the labeling service agent; extract the second original data to be queried from the query request, and query the second labeled data of the second original data in the local storage space; and send the second labeled data to the labeling service agent.

[0191] In one embodiment of the present disclosure, the receiving module 310 is further configured to: receive a duplicate checking request for marked data sent by the marking service agent; extract the third original data and the third marked data of the third original data from the duplicate checking request, and query in the local storage space whether there is any marked data of the remaining original data other than the third original data that is consistent with the third marked data to obtain a duplicate checking result; and send the duplicate checking result to the marking service agent.

[0192] Regarding the device in the above embodiment, the specific manner in which each module performs operations has been described in detail in the embodiment of the method, and will not be elaborated here.

[0193] In summary, the data processing device provided by the embodiment of the present disclosure receives a backup data packet sent by a tokenization service agent, wherein the backup data packet carries the first original data and the first marked data of the first original data, and the tokenization service agent is deployed in the tokenization service request end, and stores the backup data packet in the local storage space. Thus, the tokenization service provider can receive the backup data packet sent by the tokenization service agent, and store the backup data packet in the local storage space, so as to realize the data backup of the original data and its marked data, and can quickly restore the original data and its marked data when the original data and its marked data are lost or damaged, thereby improving the integrity of the original data and its marked data, and improving business continuity.

[0194] Fig.12 It is a block diagram of an electronic device according to an exemplary embodiment.

[0195] like Fig.12 As shown, the electronic device 400 includes:

[0196] The memory 410 and the processor 420, a bus 430 connecting different components (including the memory 410 and the processor 420), the memory 410 stores a computer program, and when the processor 420 executes the program, the data processing method described in the embodiment of the present disclosure is implemented.

[0197] Bus 430 represents one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, a processor or a local bus using any of a variety of bus architectures. For example, these architectures include but are not limited to Industry Standard Architecture (ISA) bus, Micro Channel Architecture (MAC) bus, Enhanced ISA bus, Video Electronics Standards Association (VESA) local bus and Peripheral Component Interconnect (PCI) bus.

[0198] The electronic device 400 typically includes a variety of electronic device readable media. These media can be any available media that can be accessed by the electronic device 400, including volatile and non-volatile media, removable and non-removable media.

[0199] The memory 410 may also include computer system readable media in the form of volatile memory, such as random access memory (RAM) 440 and / or cache memory 450. The electronic device 400 may further include other removable / non-removable, volatile / non-volatile computer system storage media. By way of example only, the storage system 460 may be used to read and write non-removable, non-volatile magnetic media ( Fig.12 not shown, usually called a "hard drive"). Although Fig.12 Not shown, a disk drive for reading and writing to a removable non-volatile disk (e.g., a "floppy disk"), and an optical disk drive for reading and writing to a removable non-volatile optical disk (e.g., a CD-ROM, a DVD-ROM, or other optical media) may be provided. In these cases, each drive may be connected to the bus 430 via one or more data medium interfaces. The memory 410 may include at least one program product having a set (e.g., at least one) of program modules that are configured to perform the functions of the various embodiments of the present disclosure.

[0200] A program / utility 480 having a set (at least one) of program modules 470 may be stored, for example, in the memory 410, such program modules 470 including but not limited to an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment. The program modules 470 generally perform the functions and / or methods of the embodiments described in the present disclosure.

[0201] The electronic device 400 may also communicate with one or more external devices 490 (e.g., keyboard, pointing device, display 491, etc.), one or more devices that enable a user to interact with the electronic device 400, and / or any device that enables the electronic device 400 to communicate with one or more other computing devices (e.g., network card, modem, etc.). Such communication may be performed through an input / output (I / O) interface 492. Furthermore, the electronic device 400 may also communicate with one or more networks (e.g., local area network (LAN), wide area network (WAN) and / or public network, such as the Internet) through a network adapter 493. Fig.12 As shown, the network adapter 493 communicates with other modules of the electronic device 400 via the bus 430. It should be understood that, although not shown in the figure, other hardware and / or software modules can be used in conjunction with the electronic device 400, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0202] The processor 420 executes various functional applications and data processing by running the programs stored in the memory 410 .

[0203] It should be noted that the implementation process and technical principles of the electronic device of this embodiment refer to the aforementioned explanation of the data processing method of the embodiment of the present disclosure, and will not be repeated here.

[0204] In summary, the electronic device provided by the embodiment of the present disclosure can execute the data processing method as described above, receive the call request sent by the tokenization service request end through the internal communication link between the tokenization service request end and the tokenization service agent, extract the first original data to be marked from the call request, obtain the storage location of the encryption machine in the tokenization service request end, and call the encryption machine based on the storage location, tokenize the first original data according to the generation method of the marked data through the encryption machine, generate the first marked data of the first original data, and send the first marked data to the tokenization service request end through the internal communication link. Therefore, the tokenization service agent is deployed in the tokenization service request end, the tokenization service request end can directly call the locally deployed tokenization service agent, the tokenization service agent can directly call the encryption machine to implement the tokenization processing, and feed back the marked data to the tokenization service request end, without relying on the third-party tokenization service provider, avoiding the problem that the tokenization processing cannot be implemented when the third-party tokenization service provider is abnormal, resulting in business interruption, improving the reliability of the tokenization processing, and thus improving business continuity, in addition, it also helps to improve the tokenization processing efficiency and improve the user experience in the tokenization processing scenario.

[0205] In order to implement the above embodiments, the present disclosure also proposes a computer-readable storage medium.

[0206] When the instructions in the computer-readable storage medium are executed by the processor of the electronic device, the electronic device can perform the above-mentioned, or perform the above-mentioned data processing method. Optionally, the computer-readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, etc.

[0207] In order to implement the above embodiments, the present disclosure further provides a computer program product, including a computer program, characterized in that when the computer program is executed by a processor, the data processing method as described above is implemented.

[0208] Those skilled in the art will readily appreciate other embodiments of the present disclosure after considering the specification and practicing the invention disclosed herein. The present disclosure is intended to cover any variations, uses or adaptations of the present disclosure that follow the general principles of the present disclosure and include common knowledge or customary techniques in the art that are not disclosed in the present disclosure. The description and examples are to be considered exemplary only, and the true scope and spirit of the present disclosure are indicated by the following claims.

[0209] It should be understood that the present disclosure is not limited to the exact structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims

1. A data processing method, characterized in that: The method is applicable to a tokenization service agent deployed in a tokenization service requester, and includes: Receiving a call request sent by the tokenization service request end through an internal communication link between the tokenization service request end and the tokenization service agent, and extracting first original data to be marked from the call request; Obtaining a storage location of an encryption machine in the tokenization service requester, and calling the encryption machine based on the storage location; The encryption machine performs tokenization processing on the first original data according to a method for generating token data, so as to generate first token data of the first original data; The first tag data is sent to the tagging service requester through the internal communication link.

2. The method according to claim 1, characterized in that After generating the first marked data of the first original data, the method further includes: Adding the first original data and the first marking data to a backup data packet; Based on the access rights of the tokenization service agent to the tokenization service provider, the backup data packet is sent to the tokenization service provider.

3. The method according to claim 1, characterized in that Before receiving the call request sent by the tokenization service requester, the method further includes: Reading a configuration data set of the tokenization service agent from a local storage space of the tokenization service requester; Running the tokenization service agent based on the configuration data set; Sending a test data packet to the tokenization service provider based on the access rights of the tokenization service agent to the tokenization service provider; In response to receiving a response data packet sent by the tokenization service provider, it is determined that the tokenization service agent is connected to the tokenization service provider normally.

4. The method according to claim 3, characterized in that After sending the test data packet to the tokenization service provider, the method further includes: In response to not receiving a response data packet sent by the tokenization service provider, determining that the connection between the tokenization service agent and the tokenization service provider is abnormal; Generate first indication information for indicating that the connection between the tokenization service agent and the tokenization service provider is abnormal; The first indication information is sent to the tokenization service requester through the internal communication link, and / or, based on the access permission, the first indication information is sent to the tokenization service provider.

5. The method according to claim 3, characterized in that: After running the tokenization service agent based on the configuration data set, the method further includes: Obtaining a storage location of the encryption machine in the tokenization service requester, and calling the encryption machine based on the storage location; The encryption machine performs tokenization processing on the test original data according to the generation method of the tag data to generate the test tag data of the test original data; Verifying the test mark data; In response to the test tag data passing verification, determining that the encryption machine operates normally; In response to the test tag data failing to pass verification, determining that the encryption machine is operating abnormally, and generating second indication information for indicating that the encryption machine is operating abnormally; The second indication information is sent to the tokenization service requester through the internal communication link, and / or, based on the access permission, the second indication information is sent to the tokenization service provider.

6. The method according to claim 1, characterized in that Before receiving the call request sent by the tokenization service requester, the method further includes: Receiving registration data of the tokenization service agent sent by the tokenization service provider, wherein the registration data includes a first identifier of the tokenization service agent and a second identifier of the encryption machine; The identifier of the tokenization service agent is configured as the first identifier, and the identifier of the encryption machine is configured as the second identifier.

7. The method according to claim 1, characterized in that The method further comprises: Receiving a status update request for the marked data sent by the markup service provider; Extracting a third identifier of the mark data to be updated and a target state of the mark data to be updated from the state update request, wherein the target state is enabled or disabled; The life state of the marked data identified by the third identifier is updated to the target state.

8. The method according to claim 1, characterized in that The method further comprises: Receiving, via the internal communication link, a query request for the marked data sent by the markup service requester, wherein the query request carries the second original data to be queried; Based on the access rights of the tokenization service agent to the tokenization service provider, sending the query request to the tokenization service provider; Receiving second marked data of the second original data sent by the markup service provider; The second tag data is sent to the tagging service requester through the internal communication link.

9. The method according to claim 1, characterized in that: The method further comprises: receiving, via the internal communication link, a request for identifying the availability of the marked data sent by the markup service requester; extracting third original data and third marked data of the third original data from the availability identification request; In response to the third mark data being consistent with fourth mark data of fourth original data, determining that the third mark data is not available, wherein the generation time of the fourth mark data is earlier than the generation time of the third mark data, and the third original data is inconsistent with the fourth original data; Through the internal communication link, third indication information for indicating that the third marked data is not available is sent to the tokenization service requester.

10. The method according to claim 9, characterized in that The method further comprises: In response to the fact that the mark data of the remaining original data other than the third original data are all inconsistent with the third mark data, determining that the third mark data is available; Through the internal communication link, fourth indication information for indicating that the third marked data is available is sent to the markup service requester.

11. The method according to claim 9, characterized in that The method further comprises: Based on the access rights of the tokenization service agent to the tokenization service provider, sending a duplicate checking request for the marked data to the tokenization service provider, wherein the duplicate checking request carries the third original data and the third marked data; Receive a duplicate checking result of the marked data sent by the markup service provider, wherein the duplicate checking result is used to indicate whether there is marked data of the remaining original data other than the third original data that is consistent with the third marked data.

12. A data processing method, characterized in that: Applicable to a tokenization service requester, the method includes: Acquire first original data to be marked, and add the first original data to a call request of a tokenization service agent, wherein the tokenization service agent is deployed in the tokenization service request end; Sending the call request to the tokenization service agent through an internal communication link between the tokenization service requester and the tokenization service agent, wherein the call request is used to generate first labeled data of the first original data; The first tag data sent by the tagging service agent is received through the internal communication link.

13. The method according to claim 12, characterized in that Before obtaining the first original data to be marked, the method further includes: Receive a configuration data set of the tokenization service agent sent by a tokenization service provider, and store the configuration data set in a local storage space; The configuration data of the encryption machine is determined from the configuration data set, and based on the configuration data of the encryption machine, the encryption machine is deployed in the local storage space, wherein the configuration data of the encryption machine includes a generation method of the marking data.

14. The method according to claim 12, characterized in that The method further comprises: In response to receiving first indication information sent by the tokenization service agent for indicating that the connection between the tokenization service agent and the tokenization service provider is abnormal, and / or second indication information for indicating that the encryption machine is operating abnormally; Start the first exception handling process of the tokenization service agent.

15. The method according to claim 12, characterized in that The method further comprises: Acquire second original data to be queried, and add the second original data to a query request for labeled data, wherein the query request is used to query second labeled data of the second original data; Sending the query request to the tokenization service agent via the internal communication link; The second tag data sent by the tagging service agent is received through the internal communication link.

16. The method according to claim 12, characterized in that The method further comprises: adding the third original data and the third marked data of the third original data to the availability identification request of the marked data, wherein the availability identification request is used to identify whether the third marked data is available; Sending the availability identification request to the tokenization service agent; In response to receiving third indication information sent by the tokenization service agent indicating that the third labeled data is not available, updating the third original data to the first original data, and returning to execute the call request of adding the first original data to the tokenization service agent and subsequent steps thereof, so as to reacquire the third labeled data; In response to receiving fourth indication information sent by the tokenization service agent to indicate that the third labeled data is available, continue to perform data processing based on the third labeled data.

17. A data processing method, characterized in that: Applicable to a tokenization service provider, the method comprises: receiving a backup data packet sent by a tokenization service agent, wherein the backup data packet carries first original data and first marked data of the first original data, and the tokenization service agent is deployed in a tokenization service request end; The backup data package is stored in a local storage space.

18. The method according to claim 17, characterized in that Before receiving the backup data packet sent by the tokenization service agent, the method further includes: Sending a configuration data set of the tokenization service agent to the tokenization service request end, wherein the configuration data set is used to deploy the tokenization service agent at the tokenization service request end, the configuration data set includes configuration data of an encryption machine, and the configuration data of the encryption machine includes a generation method of the tag data; The access rights of the tokenization service provider are assigned to the tokenization service agent.

19. The method according to claim 17, characterized in that The method further comprises: Receiving a test data packet sent by the tokenization service agent; Based on the test data packet, a response data packet is generated, and the response data packet is sent to the tokenization service agent.

20. The method according to claim 17, characterized in that The method further comprises: Assigning a first identifier to the tokenization service agent and a second identifier to the encryption machine; Adding the first identifier and the second identifier to the registration data of the tokenization service agent; Send the registration data to the tokenization service agent.

21. The method according to claim 17, characterized in that The method further comprises: In response to receiving first indication information sent by the tokenization service agent for indicating that the connection between the tokenization service agent and the tokenization service provider is abnormal, and / or second indication information for indicating that the encryption machine is operating abnormally; Start the second exception handling process of the tokenization service agent.

22. The method according to claim 17, characterized in that The method further comprises: Adding a third identifier of the mark data to be updated and a target state of the mark data to be updated to a state update request of the mark data, wherein the target state is enabled or disabled, and the state update request is used to update the life state of the mark data to be updated to the target state; Send the status update request to the tokenization service agent.

23. The method according to claim 17, characterized in that The method further comprises: Receiving a query request for the marked data sent by the markup service agent; Extracting second original data to be queried from the query request, and searching the local storage space for second marked data of the second original data; The second labeled data is sent to the tokenization service agent.

24. The method according to claim 17, characterized in that The method further comprises: Receiving a duplicate checking request for the marked data sent by the markup service agent; Extracting the third original data and the third marked data of the third original data from the duplicate checking request, and querying in the local storage space whether the marked data of the remaining original data other than the third original data is consistent with the third marked data, to obtain a duplicate checking result; Send the duplicate checking result to the tokenization service agent.

25. A data processing device, characterized in that: A tokenization service agent agent is suitable for being deployed in a tokenization service request terminal, and the device comprises: A receiving module, configured to receive a call request sent by the tokenization service request end through an internal communication link between the tokenization service request end and the tokenization service agent, and extract the first original data to be marked from the call request; A calling module, configured to obtain a storage location of an encryption machine in the tokenization service requesting end, and call the encryption machine based on the storage location; a processing module configured to perform tokenization processing on the first original data by the encryption machine according to a method for generating the token data, so as to generate first token data of the first original data; The sending module is configured to send the first marking data to the marking service request end through the internal communication link.

26. A data processing device, characterized in that: Applicable to a tokenization service requester, the device comprises: an acquisition module, configured to acquire first original data to be marked, and add the first original data to a call request of a tokenization service agent, wherein the tokenization service agent is deployed in the tokenization service request end; a sending module, configured to send the call request to the tokenization service agent through an internal communication link between the tokenization service requester and the tokenization service agent, wherein the call request is used to generate first labeled data of the first original data; The receiving module is configured to receive the first label data sent by the labeling service agent through the internal communication link.

27. A data processing device, characterized in that: Applicable to a tokenization service provider, the device comprises: A receiving module is configured to receive a backup data packet sent by a tokenization service agent, wherein the backup data packet carries first original data and first marked data of the first original data, and the tokenization service agent is deployed in the tokenization service request end; The storage module is configured to store the backup data packet in a local storage space.

28. An electronic device, characterized in that: include: processor; a memory for storing instructions executable by the processor; The processor is configured to execute the instructions to implement the data processing method according to any one of claims 1 to 24.

29. A computer-readable storage medium, when instructions in the computer-readable storage medium are executed by a processor of an electronic device, the electronic device is enabled to execute the data processing method according to any one of claims 1 to 24.

30. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the data processing method according to any one of claims 1 to 24 is implemented.

Images