Data authorization authentication method and device, electronic equipment and storage medium

Abstract

The embodiment of the invention provides a data authorization authentication method and device, electronic equipment and a storage medium, and belongs to the technical field of data management. The method is applied to a financial institution, the financial institution is in communication connection with a data subject, an authentication institution and a data source, and the method comprises the steps of obtaining data authorization information of the corresponding data subject based on a financial service, and sending the data authorization information and preset financial institution information to the authentication institution, sending the data authorization information to an authentication mechanism, so that the authentication mechanism returns a unique authorization record identifier and a corresponding authorization verification code, obtains the authorization record identifier and the authorization verification code, sends the data authorization information, the authorization record identifier and the authorization verification code to a data source together, and sends the authorization verification information to the authentication mechanism in response to that authorization verification of the data source passes. And sending target data corresponding to the data authorization information to a financial institution, obtaining the target data, and performing data processing on the target data based on a specified data processing mode. According to the embodiment of the invention, the data authorization authentication efficiency can be improved.

Description

Technical Field

[0001] The present application relates to the field of data management technology, and in particular to a data authorization authentication method, device, electronic device and storage medium. Background Art

[0002] In the financial sector, as digital transformation deepens, financial institutions often need to obtain data from various external data sources to support business decisions when providing services to customers. These data may include credit records, transaction behaviors, identity verification information, etc. These data can be used to evaluate loan applications, monitor abnormal transactions, perform customer due diligence, etc. For example, during the loan approval process, financial institutions need to obtain customers' historical credit reports from external data sources. Financial institutions can only obtain these sensitive information from data sources in compliance with regulations with explicit authorization from customers.

[0003] In related technologies, financial institutions usually record the authorization of data subjects, but it is difficult for financial institutions to prove the authorization of data subjects to data sources, and data sources are also difficult to verify. Even if a financial institution and a data source have negotiated a data authorization verification method, it cannot be reused in other cooperation. The above inconveniences indirectly affect the normal circulation and sharing of data. Therefore, how to improve the efficiency of data authorization authentication has become a technical problem that needs to be solved urgently. Summary of the invention

[0004] The main purpose of the embodiments of the present application is to propose a data authorization authentication method, device, electronic device and storage medium, aiming to improve the efficiency of data authorization authentication.

[0005] To achieve the above-mentioned purpose, a first aspect of an embodiment of the present application proposes a data authorization authentication method, which is applied to a financial institution, wherein the financial institution is in communication with a data subject, an authentication institution, and a data source, and the method comprises:

[0006] Acquire the corresponding data authorization information of the data subject based on the financial business;

[0007] Sending the data authorization information and the preset financial institution information to the authentication agency, so that the authentication agency returns a unique authorization record identifier and a corresponding authorization verification code;

[0008] Acquire the authorization record identifier and the authorization verification code, and send the data authorization information, the authorization record identifier and the authorization verification code together to the data source, so that the data source initiates authorization authentication to the authentication institution according to the data authorization information, the authorization record identifier and the authorization verification code, and in response to the authorization authentication being passed, sends the target data corresponding to the data authorization information to the financial institution;

[0009] The target data is acquired, and data processing is performed on the target data based on the data processing method specified in the data authorization information.

[0010] In some embodiments, the data authorization information includes a data subject identifier of the data subject, and sending the data authorization information and preset financial institution information to the authentication institution includes:

[0011] Performing hash processing on the data subject identifier to generate a corresponding hash digest;

[0012] The hash summary, other information in the data authorization information except the data subject identifier, and the preset financial institution information are sent to the authentication agency, so that the authentication agency returns a unique authorization record identifier and a corresponding authorization verification code.

[0013] In some embodiments, the financial institution information includes a financial institution identifier and a public key. Before sending the data authorization information and the preset financial institution information to the authentication institution, the following is further included:

[0014] Digitally signing the data authorization information based on the private key in the preset financial institution information;

[0015] The digitally signed data authorization information and the financial institution information are sent together to the authentication agency, so that the authentication agency verifies the digitally signed data authorization information based on the public key.

[0016] In some embodiments, after acquiring the target data, the method further includes:

[0017] storing the target data in a distributed storage system, and associating the storage address of the target data with the authorization record identifier;

[0018] Based on the data usage period in the data authorization information, setting a storage period of the target data in the distributed storage system;

[0019] In response to the current time exceeding the storage time limit, the target data stored in the distributed storage system is deleted.

[0020] To achieve the above-mentioned purpose, a second aspect of an embodiment of the present application proposes a data authorization authentication method, which is applied to an authentication institution, wherein the authentication institution is in communication connection with a data subject, a financial institution, and a data source, and the method comprises:

[0021] Obtaining data authorization information and financial institution information sent by the financial institution;

[0022] Verifying the identity of the financial institution based on the financial institution information and the data authorization information, and generating an authorization record identifier and a corresponding authorization verification code in response to the identity verification being passed;

[0023] Sending the authorization record identifier and the authorization verification code to the financial institution, so that the financial institution initiates a data request to the data source based on the data authorization information, the authorization record identifier and the authorization verification code;

[0024] Obtaining the data authorization information, the authorization record identifier, and the authorization verification code sent by the data source, and verifying the data request based on the data authorization information, the authorization record identifier, and the authorization verification code;

[0025] In response to successful verification, verification success information is sent to the data source, so that the data source provides the target data to the financial institution.

[0026] In some embodiments, the verifying the data request based on the data authorization information, the authorization record identifier, and the authorization verification code includes:

[0027] Based on the authorization record identifier, extract the corresponding data authorization information from the locally stored authorization record to obtain the data scope authorized by the data subject;

[0028] Compare the data scope of this data request with the data scope authorized by the data subject:

[0029] When the data range of the request is equal to or smaller than the data range authorized by the data subject, it is determined that the data request does not exceed the authorized range and the verification is passed;

[0030] When the data range of the request is larger than the data range authorized by the data subject, it is determined that the data request exceeds the authorized range and the verification fails.

[0031] In some embodiments, the data authorization information includes a data subject identifier and a data processing method. After sending the verification pass information to the data source in response to the verification pass, so that the data source provides the target data to the financial institution, the following further includes:

[0032] Acquire the data processing result information and the authorization record identifier sent by the financial institution; wherein the data processing result information is obtained by the financial institution performing data processing on the target data;

[0033] Query the corresponding data authorization information based on the authorization record identifier, and associate and store the data processing result information with the corresponding data authorization information;

[0034] Obtain the data subject's post-inspection request, and perform a compliance check on the data processing based on the data processing method and the data processing result information.

[0035] To achieve the above-mentioned purpose, a third aspect of an embodiment of the present application proposes a data authorization authentication device, the device comprising:

[0036] A first acquisition module, used to acquire the corresponding data authorization information of the data subject based on financial services;

[0037] A sending module, used for sending the data authorization information and the preset financial institution information to the authentication institution, so that the authentication institution returns a unique authorization record identifier and a corresponding authorization verification code;

[0038] The second module is used to obtain the authorization record identifier and the authorization verification code, and send the data authorization information, the authorization record identifier and the authorization verification code together to the data source, so that the data source initiates authorization authentication to the authentication agency according to the data authorization information, the authorization record identifier and the authorization verification code, and in response to the authorization verification being passed, sends the target data corresponding to the data authorization information to the financial institution;

[0039] The third module is used to obtain the target data and process the target data based on the data processing method specified in the data authorization information.

[0040] To achieve the above-mentioned purpose, the fourth aspect of an embodiment of the present application proposes an electronic device, which includes a memory and a processor, the memory stores a computer program, and the processor implements the method described in the first aspect or the second aspect when executing the computer program.

[0041] To achieve the above objectives, the fifth aspect of an embodiment of the present application proposes a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, it implements the method described in the first aspect or the second aspect.

[0042] The data authorization authentication method, device, electronic device and storage medium proposed in the present application obtain the data authorization information of the corresponding data subject based on the financial business, and then send the data authorization information and the preset financial institution information to the authentication agency, so that the authentication agency returns a unique authorization record identifier and a corresponding authorization verification code, and then obtains the authorization record identifier and the authorization verification code, and sends the data authorization information, the authorization record identifier and the authorization verification code together to the data source, so that the data source initiates authorization authentication to the authentication agency according to the data authorization information, the authorization record identifier and the authorization verification code, and in response to the authorization verification passing, sends the target data corresponding to the data authorization information to the financial institution, and then obtains the target data, and processes the target data based on the data processing method specified in the data authorization information. In this way, through the intervention of the authentication agency, it is ensured that only authorized financial institutions can obtain the target data, and it is ensured that the acquisition and use of the target data comply with the requirements of laws and regulations, reducing the compliance risks of financial institutions, providing a reliable basis for data sharing, promoting the data flow between financial institutions and data sources, and improving the efficiency of data authorization authentication. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Figure 1 is a flow chart of a data authorization and authentication method provided in an embodiment of the present application;

[0044] Figure 2 yes Figure 1 Flow chart of step S102 in FIG.

[0045] Figure 3 yes Figure 1 The flowchart before step S103 in FIG.

[0046] Figure 4 yes Figure 3 The flowchart after step S104 in FIG.

[0047] Figure 5 This is another flow chart of the data authorization authentication method provided in the embodiment of the present application;

[0048] Figure 6 yes Figure 5 Flow chart of step S504 in FIG.

[0049] Figure 7 yes Figure 1 The flowchart after step S505 in FIG.

[0050] Figure 8 is a schematic diagram of a data authorization authentication method provided in an embodiment of the present application;

[0051] Fig. 9 It is a structural diagram of a data authorization and authentication device provided in an embodiment of the present application;

[0052] Fig.10 It is a schematic diagram of the hardware structure of the electronic device provided in the embodiment of the present application. DETAILED DESCRIPTION

[0053] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0054] It should be noted that, although the functional modules are divided in the device schematic diagram and the logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than the module division in the device or the order in the flowchart. The terms "first", "second", etc. in the specification, claims and the above drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence.

[0055] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein are only for the purpose of describing the embodiments of this application and are not intended to limit this application.

[0056] First, some nouns involved in this application are analyzed:

[0057] Financial Institution: refers to an organization or entity that specializes in financial services, mainly including banks, insurance companies, securities companies, investment funds, trust companies, etc. It is an organization that specializes in financial activities and plays an important role in the economy. It mainly promotes the effective allocation of resources by providing capital flow, risk management and payment services. Financial institutions include banks, insurance companies, securities companies, investment funds and trust companies. Banks accept deposits and issue loans, provide account management and payment services, insurance companies provide insurance products, securities companies engage in securities trading and investment consulting, investment funds pool investors' funds for professional asset management, and trust companies provide trust services.

[0058] Certification Institution: An authoritative organization specializing in data and information certification, responsible for reviewing and confirming the legitimacy of data authorization to ensure the compliance of data circulation. By providing professional certification services, certification institutions enhance the transparency and trust of data circulation, help financial institutions and data sources to exchange data securely on a compliant basis, and help prevent data abuse and unauthorized data access.

[0059] Based on this, the embodiments of the present application provide a data authorization authentication method, device, electronic device and storage medium, aiming to improve the efficiency of data authorization authentication.

[0060] The data authorization authentication method, device, electronic device and storage medium provided in the embodiments of the present application are specifically described through the following embodiments. First, the data authorization authentication method in the embodiments of the present application is described.

[0061] The embodiments of the present application can acquire and process relevant data based on artificial intelligence technology. Among them, artificial intelligence (AI) is the theory, method, technology and application system that uses digital computers or machines controlled by digital computers to simulate, extend and expand human intelligence, perceive the environment, acquire knowledge and use knowledge to obtain the best results.

[0062] AI basic technologies generally include sensors, dedicated AI chips, cloud computing, distributed storage, big data processing technology, operation / interaction systems, mechatronics, etc. AI software technologies mainly include computer vision technology, robotics technology, biometrics technology, speech processing technology, natural language processing technology, and machine learning / deep learning.

[0063] The data authorization authentication method provided in the embodiment of the present application relates to the field of data management technology. The data authorization authentication method provided in the embodiment of the present application can be applied to the terminal of a financial institution or an authentication institution, can also be applied to the server side of a financial institution or an authentication institution, and can also be software running in the terminal or server side of a financial institution or an authentication institution. In some embodiments, the terminal can be a smart phone, a tablet computer, a laptop computer, a desktop computer, etc.; the server side can be configured as an independent physical server, or can be configured as a server cluster or distributed system composed of multiple physical servers, and can also be configured as a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms; the software can be an application that implements the data authorization authentication method, etc., but is not limited to the above forms.

[0064] The present application can be used in many general or special computer system environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, etc. The present application can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present application can also be practiced in distributed computing environments, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

[0065] It should be noted that in each specific implementation of the present application, when it comes to the need to perform relevant processing based on data related to user identity or characteristics such as user information, user behavior data, user historical data, and user location information, the user's permission or consent will be obtained first, and the collection, use, and processing of these data will comply with relevant laws, regulations, and standards. In addition, when the embodiment of the present application needs to obtain the user's sensitive personal information, the user's separate permission or consent will be obtained through a pop-up window or by jumping to a confirmation page. After clearly obtaining the user's separate permission or consent, the necessary user-related data for the normal operation of the embodiment of the present application will be obtained.

[0066] Figure 1 is an optional flow chart of the data authorization authentication method provided in the embodiment of the present application. Figure 1 The method may include but is not limited to steps S101 to S106.

[0067] Step S101, obtaining data authorization information of the corresponding data subject based on financial services;

[0068] Step S102, sending the data authorization information and the preset financial institution information to the authentication agency, so that the authentication agency returns a unique authorization record identifier and a corresponding authorization verification code;

[0069] Step S103, obtaining the authorization record identifier and the authorization verification code, and sending the data authorization information, the authorization record identifier and the authorization verification code together to the data source, so that the data source initiates authorization authentication to the authentication agency according to the data authorization information, the authorization record identifier and the authorization verification code, and in response to the authorization authentication being passed, sends the target data corresponding to the data authorization information to the financial institution;

[0070] Step S104, acquiring target data, and performing data processing on the target data based on the data processing method specified in the data authorization information.

[0071] Steps S101 to S104 shown in the embodiment of the present application are to obtain the data authorization information of the corresponding data subject based on the financial business, and then send the data authorization information and the preset financial institution information to the authentication agency, so that the authentication agency returns a unique authorization record identifier and a corresponding authorization verification code, and then obtain the authorization record identifier and the authorization verification code, and send the data authorization information, the authorization record identifier and the authorization verification code together to the data source, so that the data source initiates authorization authentication to the authentication agency according to the data authorization information, the authorization record identifier and the authorization verification code, and in response to the authorization verification passing, send the target data corresponding to the data authorization information to the financial institution, and then obtain the target data, and process the target data based on the data processing method specified in the data authorization information. In this way, through the intervention of the authentication agency, it is ensured that only authorized financial institutions can obtain the target data, and it is ensured that the acquisition and use of the target data complies with the requirements of laws and regulations, reducing the compliance risks of financial institutions, providing a reliable basis for data sharing, promoting the data flow between financial institutions and data sources, and improving the efficiency of data authorization authentication.

[0072] In step S101 of some embodiments, the data subject refers to the owner of personal information, that is, the end user of financial services, such as a bank customer or a loan applicant. In financial services, financial institutions often need to access the data subject's data to provide services, such as credit approval, risk assessment, etc. In order to protect the privacy of the data subject and comply with data protection regulations, financial institutions must obtain explicit authorization from the data subject (e.g., customer). Financial services refer to services provided by financial institutions, such as banking, investment services, insurance services, etc. The data authorization information is provided by the data subject, which clearly indicates the scope and conditions of his consent for the financial institution to obtain, use and process his personal information. In order to obtain the corresponding data subject's data authorization information based on the financial service, it is necessary to clearly explain to the data subject the type, purpose and processing method of the data required for the corresponding financial service, and obtain the consent of the data subject.

[0073] See also Figure 2 In some embodiments, the data authorization information includes a data subject identifier of the data subject, and step S102 may include but is not limited to steps S201 to S202:

[0074] Step S201, hashing the data subject identifier to generate a corresponding hash digest;

[0075] Step S202, sending the hash summary, other information in the data authorization information except the data subject identifier, and the preset financial institution information to the authentication agency, so that the authentication agency returns a unique authorization record identifier and a corresponding authorization verification code.

[0076] In step S201 of some embodiments, the data subject identifier is information used to uniquely identify the data subject, such as an ID number, a social security number, a customer number, etc. The data subject identifier is hashed and a one-way encryption process is performed to convert the data of the data subject identifier into a string of fixed length, and a corresponding hash digest is generated to ensure the integrity and security of the data during transmission.

[0077] In step S202 of some embodiments, the financial institution sends the hash summary, other information in the data authorization information except the data subject identifier, and the preset financial institution information to the authentication agency. The hash summary is the hash value of the data subject identifier, and the financial institution information is such as the financial institution identifier and the public key. After receiving the sent information, the authentication platform performs verification. The hash summary provides a method for verifying the authenticity of the data subject identifier. The authentication agency can confirm the legitimacy of the data subject identifier by comparing the hash summary, thereby preventing identity forgery and fraud, and generates an authorization record identifier and an authorization verification code, and returns the authorization record identifier and the authorization verification code to the financial institution so that the financial institution can carry out the subsequent data authorization authentication process.

[0078] In steps S201 to S202 shown in the embodiment of the present application, by hashing the data subject identifier to generate a corresponding hash summary, the identity of the data subject can be verified without directly exposing the data subject's personal sensitive information, and the privacy of the data subject can be effectively protected. The hash summary, other information in the data authorization information except the data subject identifier, and the preset financial institution information are sent to the authentication agency, so that the authentication agency returns a unique authorization record identifier and a corresponding authorization verification code. The unique authorization record identifier and authorization verification code returned by the authentication agency provide a means of tracking and management for each authorization request, thereby improving the security and efficiency of data authorization authentication, and also helping to build a more compliant, transparent and trustworthy data authorization environment.

[0079] See also Figure 3 The financial institution information includes the financial institution identification and public key. Before step S103 in some embodiments, it may include but is not limited to steps S301 to S302:

[0080] Step 301, digitally sign the data authorization information based on the private key in the preset financial institution information;

[0081] Step 302: Send the digitally signed data authorization information and the financial institution information to the authentication agency, so that the authentication agency can verify the digitally signed data authorization information based on the public key.

[0082] In step S301 of some embodiments, the financial institution information includes the financial institution identification and public key, and the data authorization information is digitally signed using the private key of the financial institution information to ensure the integrity of the data and the authenticity of the source. The digital signature ensures that the data has not been tampered with during transmission and can verify that the data does come from the declared financial institution. An asymmetric encryption algorithm, such as RSA, DSA or ECDSA, can be used to generate a digital signature.

[0083] In step S302 of some embodiments, the public key is paired with the private key of the financial institution to verify the digital signature. The financial institution sends the digitally signed data authorization information and financial institution information (including the public key of the financial institution) to the authentication agency, which uses the public key of the financial institution to decrypt the received digital signature and verify the integrity of the data authorization information and the identity of the financial institution.

[0084] It should be noted that if the digital signature verification is successful, it means that the data authorization information does come from the declared financial institution and has not been tampered with during the transmission process. Once the authentication agency verifies the validity of the digital signature, it will generate an authorization record identifier and an authorization verification code and return this information to the financial institution.

[0085] In steps S301 to S302 shown in the embodiment of the present application, the data authorization information is digitally signed based on the private key in the preset financial institution information, and the digitally signed data authorization information and the financial institution information are sent to the authentication agency together, so that the authentication agency verifies the digitally signed data authorization information based on the public key. The financial institution can ensure the security and credibility of the data authorization information it sends, and the authentication agency can verify the authenticity and integrity of the information.

[0086] In step S103 of some embodiments, the authorization record identifier is a unique identifier generated by the authentication agency, which is used to track and manage each data authorization event. The authorization verification code is a code generated by the authentication agency, which is used to verify the validity of the data authorization request. The data source is an entity or system that stores and controls the data subject information, and it provides the required data to the financial institution after verifying the authorization. The authorization record identifier and the authorization verification code are obtained, and the data authorization information, the authorization record identifier and the authorization verification code are sent to the data source together, so that the data source initiates authorization authentication to the authentication agency according to the data authorization information, the authorization record identifier and the authorization verification code, and in response to the authorization verification being passed, the target data corresponding to the data authorization information is sent to the financial institution.

[0087] It should be noted that the financial institution receives the authorization record identifier and authorization verification code from the authentication agency, and sends the data authorization information, authorization record identifier and authorization verification code together to the data source. After receiving the request, the data source will initiate an authorization authentication request to the authentication agency based on the provided data authorization information, authorization record identifier and authorization verification code. The authentication agency verifies the validity of the received authorization record identifier and authorization verification code, and confirms the authenticity and legality of the authorization request. If the authentication agency verifies that the authorization request is passed, it will confirm the result of the authorization verification to the data source. After receiving the authorization verification pass information from the authentication agency, the data source sends the target data corresponding to the data authorization information to the financial institution. The communication between the financial institution and the data source can use encryption technologies such as Secure Sockets Layer / Transport Layer Security (SSL / TLS) to protect the security of data transmission.

[0088] It should be understood that step S103 enables the financial institution to ensure the legitimacy and security of the data it requests, while the data source can verify whether the financial institution has the right to access specific data. The authentication agency acts as a trusted third party throughout the process, ensuring the fairness and effectiveness of the authorization process.

[0089] In step S104 of some embodiments, target data is obtained and data processing is performed on the target data based on the data processing method specified in the data authorization information. The target data is data related to the data subject that the financial institution requests and receives from the data source, such as transaction records, credit scores, etc. The data processing method is a specific instruction on how to collect, use, process, store and transmit the personal data of the data subject specified when the data subject authorizes.

[0090] It is understood that financial institutions receive the required target data from data sources, where such data is provided in accordance with the data authorization information and the authorization authentication process. Financial institutions first verify the integrity and accuracy of the received target data to ensure that the data has not been tampered with or damaged during transmission. According to the data processing method specified in the data authorization information, financial institutions must process the target data in accordance with the wishes of the data subject and relevant laws and regulations, which may include data cleaning, analysis, integration, encryption and other operations to meet specific financial business needs. During the data processing process, financial institutions can take measures to protect the privacy of data subjects, such as through anonymization or access control.

[0091] It should be understood that step S104 enables the financial institution to not only ensure the legal use of the target data obtained from the data source, but also comply with the wishes of the data subject and relevant laws and regulations, thereby protecting the rights and interests of the data subject and maintaining the reputation of the financial institution.

[0092] See also Figure 4In some embodiments, after step S104, the following steps may include but are not limited to steps S401 to S403:

[0093] Step S401, storing the target data in a distributed storage system, and associating the storage address of the target data with the authorization record identifier;

[0094] Step S402, setting a storage period of the target data in the distributed storage system based on the data usage period in the data authorization information;

[0095] Step S403: In response to the current time exceeding the storage time limit, the target data stored in the distributed storage system is deleted.

[0096] In step S401 of some embodiments, the financial institution stores the target data in a distributed storage system, which can provide high reliability, high availability and scalability. When storing the target data, the financial institution associates the storage address of the data with the authorization record identifier, so that any access or management of the data can be traced back to a specific authorization record. By associating the authorization record identifier, the financial institution can ensure the traceability of the data, facilitate auditing and management, and can use a database management system, a cloud storage service or other suitable storage solutions to achieve distributed storage.

[0097] It should be understood that through step S401, the target data is stored in a distributed storage system, and the storage address of the target data is associated with the authorization record identifier. The financial institution not only ensures the safe storage of the data, but also establishes a clear data management framework to support the compliant use and effective monitoring of the data, which helps the financial institution maintain customer trust while avoiding potential legal risks.

[0098] In step S402 of some embodiments, the financial institution needs to check the data usage period specified in the data authorization information, which is the time range authorized by the data subject for the use and storage of its data, determine the storage period of the target data according to the instructions in the data authorization information, configure relevant parameters in the distributed storage system, and set a storage period for each data set.

[0099] In step S403 of some embodiments, in response to the current time exceeding the storage time limit, the target data stored in the distributed storage system is deleted, the data in the distributed storage system is regularly checked to determine whether the current time has exceeded the storage time limit specified in the data authorization information, all target data exceeding the storage time limit are automatically identified, and for the data identified as exceeding the storage time limit, a deletion operation is performed to completely remove the data from the distributed storage system. After the data is deleted, relevant personnel, including data management personnel and data subjects, are notified, and the index and directory of the distributed storage system are updated to ensure that the deleted data is no longer referenced in the system.

[0100] Steps S401 to S403 shown in the embodiment of the present application store the target data in a distributed storage system, associate the storage address of the target data with the authorization record identifier, set the storage period of the target data in the distributed storage system based on the data usage period in the data authorization information, and delete the target data stored in the distributed storage system in response to the current time exceeding the storage period, thereby ensuring the security and compliance of the target data and deleting it in a timely manner when it is not needed, thereby improving the security and efficiency of its data management.

[0101] The embodiment of the present application obtains the data authorization information of the corresponding data subject based on the financial business, and then sends the data authorization information and the preset financial institution information to the authentication agency, so that the authentication agency returns a unique authorization record identifier and a corresponding authorization verification code, and then obtains the authorization record identifier and the authorization verification code, and sends the data authorization information, the authorization record identifier and the authorization verification code together to the data source, so that the data source initiates authorization authentication to the authentication agency according to the data authorization information, the authorization record identifier and the authorization verification code, and in response to the authorization verification passing, sends the target data corresponding to the data authorization information to the financial institution, and then obtains the target data, and processes the target data based on the data processing method specified in the data authorization information. In this way, through the intervention of the authentication agency, it is ensured that only authorized financial institutions can obtain the target data, and it is ensured that the acquisition and use of the target data complies with the requirements of laws and regulations, reduces the compliance risks of financial institutions, provides a reliable basis for data sharing, promotes the data flow between financial institutions and data sources, and improves the efficiency of data authorization authentication.

[0102] Figure 5 It is another optional flow chart of the data authorization authentication method provided in the embodiment of the present application, which is applied to the authentication agency, the authentication agency and the data subject, the financial institution and the data source are communicated and connected. Figure 5 The method may include but is not limited to steps S501 to S505.

[0103] Step S501, obtaining data authorization information and financial institution information sent by the financial institution;

[0104] Step S502, verifying the identity of the financial institution based on the financial institution information and the data authorization information, and generating an authorization record identifier and a corresponding authorization verification code in response to the identity verification being passed;

[0105] Step S503, sending the authorization record identifier and the authorization verification code to the financial institution, so that the financial institution initiates a data request to the data source based on the data authorization information, the authorization record identifier and the authorization verification code;

[0106] Step S504, obtaining the data authorization information, the authorization record identifier and the authorization verification code sent by the data source, and verifying the data request based on the data authorization information, the authorization record identifier and the authorization verification code;

[0107] Step S505: in response to the verification being successful, sending verification success information to the data source so that the data source provides the target data to the financial institution.

[0108] In steps S501 to S504 shown in the embodiment of the present application, data authorization information and financial institution information sent by the financial institution are obtained, and the identity of the financial institution is verified based on the financial institution information and the data authorization information. In response to successful identity authentication, an authorization record identifier and a corresponding authorization verification code are generated, and the authorization record identifier and the authorization verification code are sent to the financial institution, so that the financial institution initiates a data request to the data source based on the data authorization information, the authorization record identifier and the authorization verification code, obtains the data authorization information, the authorization record identifier and the authorization verification code sent by the data source, and verifies the data request based on the data authorization information, the authorization record identifier and the authorization verification code. In response to successful verification, the verification pass information is sent to the data source, so that the data source provides the target data to the financial institution. By verifying the identity and data authorization information of the financial institution, the authentication agency ensures that only legitimate requests can be passed, and the data source can ensure the compliance of providing the target data through the verification pass information, thereby improving the efficiency of data authorization authentication.

[0109] In step S501 of some embodiments, the data authorization information is the authorization details required by the financial institution when accessing the data subject based on the financial service request, which may include the consent of the data subject and the scope and restrictions of the authorized target data. The financial institution information refers to the identity information of the financial institution, which may include the name, identification code, digital certificate, etc. of the financial institution.

[0110] In step S502 of some embodiments, the identity of the financial institution is verified based on the financial institution information and data authorization information. The authentication agency confirms the authenticity of the identity of the financial institution by verifying the financial institution information and data authorization information provided by the financial institution. Once the identity of the financial institution is verified, the authentication agency generates a unique authorization record identifier for tracking and managing specific data authorization events, and at the same time generates a corresponding authorization verification code for verifying the legitimacy of the authorization in subsequent data request processes.

[0111] In step S503 of some embodiments, the authentication agency sends the authorization record identifier and the authorization verification code to the financial institution, so that the financial institution can use this information to initiate a legal data request to the data source. The financial institution initiates a data request to the data source based on the data authorization information, the authorization record identifier and the authorization verification code.

[0112] In step S504 of some embodiments, the authentication agency obtains the data authorization information, the authorization record identifier, and the authorization verification code sent by the data source, and verifies the data request based on the data authorization information, the authorization record identifier, and the authorization verification code.

[0113] See also Figure 6 In some embodiments, step S504 may include but is not limited to steps S601 to S604.

[0114] Step S601, based on the authorization record identifier, extract the corresponding data authorization information from the locally stored authorization record to obtain the data scope authorized by the data subject;

[0115] Step S602: compare the data scope of this data request with the data scope authorized by the data subject:

[0116] Step S603: When the requested data range is equal to or smaller than the data range authorized by the data subject, it is determined that the data request does not exceed the authorized range and the verification is passed;

[0117] Step S604: When the requested data range is larger than the data range authorized by the data subject, it is determined that the data request exceeds the authorized range and the verification fails.

[0118] In step S601 of some embodiments, the authentication agency uses the authorization record identifier to retrieve data authorization information related to the authorization event in the local storage system to determine the data scope and conditions originally authorized by the data subject for comparison with the current data request.

[0119] In step S602 of some embodiments, the authentication agency compares the data range included in the data request submitted by the financial institution with the data range authorized by the data subject extracted in step S601 to verify whether the current data request falls within the scope authorized by the data subject.

[0120] In step S603 of some embodiments, if the data range of the data request is equal to or less than the data range authorized by the data subject, the authentication agency determines that the data request does not exceed the authorized range. The authentication agency performs subsequent steps and sends a verification pass message to the data source, allowing the data source to provide the requested data to the financial institution.

[0121] In step S604 of some embodiments, if the data range of the data request is larger than the data range authorized by the data subject, the authentication agency determines that the data request exceeds the authorized range. The authentication agency rejects the data request and sends a verification failure notification to the financial institution and the data source.

[0122] In steps S601 to S604 shown in the embodiment of the present application, based on a data authorization authentication method, device, electronic device and storage medium authorization record identifier, the corresponding data authorization information is extracted from the locally stored authorization record, the data range authorized by the data subject is obtained, and the data range of the current data request is compared with the data range authorized by the data subject of a data authorization authentication method, device, electronic device and storage medium. When the data range requested by a data authorization authentication method, device, electronic device and storage medium is equal to or less than the data range authorized by the data subject of a data authorization authentication method, device, electronic device and storage medium, it is determined that the current data request does not exceed the authorization range and the verification is passed. When the data range requested by a data authorization authentication method, device, electronic device and storage medium is greater than the data range authorized by the data subject of a data authorization authentication method, device, electronic device and storage medium, it is determined that the current data request exceeds the authorization range and the verification fails. The data request is accurately compared with the authorization range of the data subject to ensure that each data access strictly complies with the authorization intention of the data subject and ensure the accuracy and effectiveness of the data authorization authentication process.

[0123] In step S505 of some embodiments, once the authentication agency completes the verification process and determines that the request does not exceed the authorized scope, it will generate a verification pass message. The authentication agency sends the verification pass message to the data source through a secure communication channel, notifying the data source that it has verified the financial institution's data request and confirming that the request is legal, allowing the data source to release the target data.

[0124] See also Figure 7 In some embodiments, after step S505 in some embodiments, it may include but is not limited to steps S701 to S703.

[0125] Step S701, obtaining data processing result information and authorization record identification sent by the financial institution;

[0126] The data processing result information is obtained by the financial institution through data processing of the target data;

[0127] Step S702, querying the corresponding data authorization information based on the authorization record identifier, and associating the data processing result information with the corresponding data authorization information for storage;

[0128] Step S703: Obtain the data subject's post-verification request and perform compliance verification on the data processing based on the data processing method and data processing result information.

[0129] In step S701 of some embodiments, the authentication agency needs to collect and record how the financial institution processes the target data and the results of the processing, and obtain the data processing result information and authorization record identification sent by the financial institution to ensure future audits and compliance checks.

[0130] In step S702 of some embodiments, the corresponding data authorization information is queried based on the authorization record identifier, and the data processing result information is associated with the corresponding data authorization information and stored to ensure that the data processing result information is associated with the original authorization information of the data subject for easy management and tracking.

[0131] In step S703 of some embodiments, in response to the data subject's request for post-verification, a compliance check is performed on the data processing based on the data processing method and data processing result information to verify whether the data processing of the target data by the financial institution complies with the processing method specified at the time of authorization. This may include checking the time of access, frequency of access, and purpose of access, investigating whether there are incidents of data leakage or abuse, and checking whether the data processing activities comply with the authorization scope and purpose of the data subject.

[0132] In steps S701 to S703 shown in the embodiment of the present application, data processing result information and authorization record identifiers sent by the financial institution are obtained, the corresponding data authorization information is queried based on the authorization record identifier, and the data processing result information and the corresponding data authorization information are associated and stored, so as to obtain the data subject's post-inspection request, and the compliance check of the data processing is performed on the data processing based on the data processing method and the data processing result information. By associating and storing the data processing result information and the data authorization information, the data change history can be traced, and auditors can quickly access and check the historical records of data processing, thereby strengthening the compliance supervision of data processing activities.

[0133] In some specific embodiments, see Figure 8, the data subject and the financial institution generate an agreement due to financial business. The financial institution applies to the data subject for the necessary data authorization information based on the financial business. The data authorization information may include the unique identifier of the data subject, specific business, authorization agreement content (including specific fields, data processing purposes, etc.), and information indicating the authorization of the data subject (such as signature, certificate, etc.). Then, the financial institution sends its own financial institution information and data authorization information to a third-party authentication agency. After verifying the identity of the financial institution, the authentication agency records the authorization information and returns the authorization record identifier and corresponding authorization verification code of the record. In order to protect data security, only the corresponding summary data is transmitted for the unique authorization record identifier of the data subject. When the financial institution needs to obtain the data information of the data subject from a third-party data source, it initiates a request to the data source for the required data information, obtains the authorization record identifier and the authorization verification code, and sends the data authorization information, authorization record identifier and the authorization verification code together to the data source. The data source initiates authorization authentication to the authentication agency based on the data authorization information, authorization record identifier and authorization verification code. In response to the authorization verification passing, the target data corresponding to the data authorization information can be sent to the financial institution. In the authorization authentication, the authentication agency can authenticate the verification results through various methods such as interface query, official website query or certificate file. In addition, after providing the target data, the authentication agency can conduct compliance inspection on the financial institution's data processing methods and data processing result information. In the embodiment of the present application, the authentication agency authenticates the authorization of the data subject and provides a post-inspection. The financial institution obtains the authentication of the authentication agency to prove that it has obtained the authorization of the data subject, so there is no need to negotiate different authorization credentials for each data source. The data source can ensure the compliance of providing the target data through the inspection process, perform data protection, and avoid compliance risks.

[0134] See also Fig. 9 The embodiment of the present application also provides a data authorization authentication device, which can implement the above data authorization authentication method, and the device includes:

[0135] A first acquisition module, used to acquire data authorization information of a corresponding data subject based on financial services;

[0136] A sending module, used to send the data authorization information and the preset financial institution information to the authentication agency, so that the authentication agency returns a unique authorization record identifier and a corresponding authorization verification code;

[0137] The second module is used to obtain the authorization record identifier and the authorization verification code, and send the data authorization information, the authorization record identifier and the authorization verification code together to the data source, so that the data source initiates authorization authentication to the authentication agency according to the data authorization information, the authorization record identifier and the authorization verification code, and in response to the authorization verification being passed, sends the target data corresponding to the data authorization information to the financial institution;

[0138] The third module is used to obtain target data and process the target data based on the data processing method specified in the data authorization information.

[0139] The specific implementation of the data authorization authentication device is substantially the same as the specific implementation of the above-mentioned data authorization authentication method, and will not be described in detail here.

[0140] The embodiment of the present application also provides an electronic device, the electronic device includes a memory and a processor, the memory stores a computer program, and the processor implements the above data authorization authentication method when executing the computer program. The electronic device can be any smart terminal including a tablet computer, a car computer, etc.

[0141] See also Fig.10 , Fig.10 The hardware structure of an electronic device of another embodiment is illustrated, and the electronic device includes:

[0142] The processor 1001 may be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of the present application;

[0143] The memory 1002 can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 1002 can store an operating system and other application programs. When the technical solution provided in the embodiment of this specification is implemented by software or firmware, the relevant program code is stored in the memory 1002, and the processor 1001 calls and executes the data authorization authentication method of the embodiment of this application;

[0144] Input / output interface 1003, used to implement information input and output;

[0145] The communication interface 1004 is used to realize the communication interaction between the device and other devices. The communication can be realized through a wired manner (such as USB, network cable, etc.) or a wireless manner (such as mobile network, WIFI, Bluetooth, etc.);

[0146] A bus 1005 , which transmits information between various components of the device (e.g., the processor 1001 , the memory 1002 , the input / output interface 1003 , and the communication interface 1004 );

[0147] The processor 1001 , the memory 1002 , the input / output interface 1003 and the communication interface 1004 are connected to each other in communication within the device via the bus 1005 .

[0148] An embodiment of the present application also provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, the above-mentioned data authorization authentication method is implemented.

[0149] The memory, as a non-transient computer-readable storage medium, can be used to store non-transient software programs and non-transient computer executable programs. In addition, the memory may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some embodiments, the memory may optionally include a memory remotely disposed relative to the processor, and these remote memories may be connected to the processor via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0150] The data authorization authentication method, device, electronic device and storage medium provided in the embodiment of the present application obtain the data authorization information of the corresponding data subject based on the financial business, and then send the data authorization information and the preset financial institution information to the authentication agency, so that the authentication agency returns a unique authorization record identifier and a corresponding authorization verification code, and then obtains the authorization record identifier and the authorization verification code, and sends the data authorization information, the authorization record identifier and the authorization verification code together to the data source, so that the data source initiates authorization authentication to the authentication agency according to the data authorization information, the authorization record identifier and the authorization verification code, and in response to the authorization verification passing, sends the target data corresponding to the data authorization information to the financial institution, and then obtains the target data, and processes the target data based on the data processing method specified in the data authorization information. In this way, through the intervention of the authentication agency, it is ensured that only authorized financial institutions can obtain the target data, and it is ensured that the acquisition and use of the target data comply with the requirements of laws and regulations, reducing the compliance risks of financial institutions, providing a reliable basis for data sharing, promoting the data flow between financial institutions and data sources, and improving the efficiency of data authorization authentication.

[0151] The embodiments described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. Those skilled in the art will appreciate that with the evolution of technology and the emergence of new application scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

[0152] Those skilled in the art will appreciate that the technical solutions shown in the figures do not constitute a limitation on the embodiments of the present application, and may include more or fewer steps than shown in the figures, or a combination of certain steps, or different steps.

[0153] The device embodiments described above are merely illustrative, and the units described as separate components may or may not be physically separated, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0154] Those skilled in the art will appreciate that all or some of the steps in the methods disclosed above, and the functional modules / units in the systems and devices may be implemented as software, firmware, hardware, or a suitable combination thereof.

[0155] The terms "first", "second", "third", "fourth", etc. (if any) in the specification of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0156] It should be understood that in the present application, "at least one (item)" means one or more, and "plurality" means two or more. "And / or" is used to describe the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the objects associated before and after are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0157] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the above units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0158] The units described above as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0159] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0160] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including multiple instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, referred to as ROM), random access memory (Random Access Memory, referred to as RAM), disk or optical disk and other media that can store programs.

[0161] The preferred embodiments of the present invention are described above with reference to the accompanying drawings, but the scope of the rights of the present invention is not limited thereto. Any modification, equivalent substitution and improvement made by a person skilled in the art without departing from the scope and essence of the present invention should be within the scope of the rights of the present invention.

Claims

1. A data authorization authentication method, characterized in that: Applied to a financial institution, the financial institution is connected to a data subject, an authentication institution, and a data source in communication, and the method includes: Acquire the corresponding data authorization information of the data subject based on the financial business; Sending the data authorization information and the preset financial institution information to the authentication agency, so that the authentication agency returns a unique authorization record identifier and a corresponding authorization verification code; Acquire the authorization record identifier and the authorization verification code, and send the data authorization information, the authorization record identifier and the authorization verification code together to the data source, so that the data source initiates authorization authentication to the authentication institution according to the data authorization information, the authorization record identifier and the authorization verification code, and in response to the authorization authentication being passed, sends the target data corresponding to the data authorization information to the financial institution; The target data is acquired, and data processing is performed on the target data based on the data processing method specified in the data authorization information.

2. The method according to claim 1, characterized in that The data authorization information includes a data subject identifier of the data subject, and the sending of the data authorization information and preset financial institution information to the authentication institution includes: Performing hash processing on the data subject identifier to generate a corresponding hash digest; The hash summary, other information in the data authorization information except the data subject identifier, and the preset financial institution information are sent to the authentication agency, so that the authentication agency returns a unique authorization record identifier and a corresponding authorization verification code.

3. The method according to claim 1, characterized in that The financial institution information includes a financial institution identification and a public key. Before the data authorization information and the preset financial institution information are sent to the authentication institution, the following is also included: Digitally signing the data authorization information based on the private key in the preset financial institution information; The digitally signed data authorization information and the financial institution information are sent together to the authentication agency, so that the authentication agency verifies the digitally signed data authorization information based on the public key.

4. The method according to claim 1, characterized in that: After acquiring the target data, the method further includes: storing the target data in a distributed storage system, and associating the storage address of the target data with the authorization record identifier; Based on the data usage period in the data authorization information, setting a storage period of the target data in the distributed storage system; In response to the current time exceeding the storage time limit, the target data stored in the distributed storage system is deleted.

5. A data authorization authentication method, characterized in that: Applied to an authentication institution, the authentication institution is connected in communication with a data subject, a financial institution, and a data source, and the method includes: Obtaining data authorization information and financial institution information sent by the financial institution; Verifying the identity of the financial institution based on the financial institution information and the data authorization information, and generating an authorization record identifier and a corresponding authorization verification code in response to the identity verification being passed; Sending the authorization record identifier and the authorization verification code to the financial institution, so that the financial institution initiates a data request to the data source based on the data authorization information, the authorization record identifier and the authorization verification code; Obtaining the data authorization information, the authorization record identifier, and the authorization verification code sent by the data source, and verifying the data request based on the data authorization information, the authorization record identifier, and the authorization verification code; In response to successful verification, verification success information is sent to the data source, so that the data source provides the target data to the financial institution.

6. The method according to claim 5, characterized in that The verifying the data request based on the data authorization information, the authorization record identifier and the authorization verification code includes: Based on the authorization record identifier, extract the corresponding data authorization information from the locally stored authorization record to obtain the data scope authorized by the data subject; Compare the data scope of this data request with the data scope authorized by the data subject: When the data range of the request is equal to or smaller than the data range authorized by the data subject, it is determined that the data request does not exceed the authorized range and the verification is passed; When the data range of the request is larger than the data range authorized by the data subject, it is determined that the data request exceeds the authorized range and the verification fails.

7. The method according to claim 5, characterized in that The data authorization information includes a data subject identifier and a data processing method. After sending the verification pass information to the data source in response to the verification pass, so that the data source provides the target data to the financial institution, the data authorization information also includes: Acquire the data processing result information and the authorization record identifier sent by the financial institution; wherein the data processing result information is obtained by the financial institution performing data processing on the target data; Query the corresponding data authorization information based on the authorization record identifier, and associate and store the data processing result information with the corresponding data authorization information; Obtain the data subject's post-inspection request, and perform a compliance check on the data processing based on the data processing method and the data processing result information.

8. A data authorization authentication device, characterized in that: The device comprises: A first acquisition module, used to acquire the corresponding data authorization information of the data subject based on financial services; A sending module, used for sending the data authorization information and the preset financial institution information to the authentication institution, so that the authentication institution returns a unique authorization record identifier and a corresponding authorization verification code; The second module is used to obtain the authorization record identifier and the authorization verification code, and send the data authorization information, the authorization record identifier and the authorization verification code together to the data source, so that the data source initiates authorization authentication to the authentication agency according to the data authorization information, the authorization record identifier and the authorization verification code, and in response to the authorization authentication being passed, sends the target data corresponding to the data authorization information to the financial institution; The third module is used to obtain the target data and process the target data based on the data processing method specified in the data authorization information.

9. An electronic device, characterized in that: The electronic device includes a memory and a processor, the memory stores a computer program, and the processor implements the data authorization authentication method according to any one of claims 1 to 7 when executing the computer program.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the data authorization authentication method according to any one of claims 1 to 7 is implemented.

Images