System password upgrading method and device of service system, electronic equipment and storage medium

Abstract

The embodiment of the invention provides a system password upgrading method and device of a service system, electronic equipment and a storage medium, and can be applied to the field of password algorithms. The method comprises the following steps: a service system receives a password upgrading message and identifies an upgrading message identifier carried in the password upgrading message; if the upgrade message identifier indicates that the password type is a first type of password, the service system responds to the password upgrade message according to a pre-stored first type of password certificate to obtain a response result; if the response result indicates that the service system is successfully upgraded, the service system forwards the password upgrading message to the calling system so as to indicate the calling system to upgrade according to the password upgrading message; under the condition that an upgrading success instruction fed back by the calling system is received, system passwords of a service system and a service system corresponding to the calling system are determined to complete upgrading, and the service system and the calling system are both deployed in the same service system.

Description

Technical Field

[0001] The present application relates to the field of cryptographic algorithms, and in particular to a method, device, electronic device, and storage medium for upgrading a system password of a business system. Background Art

[0002] In modern banking systems, cryptographic technology is the core of ensuring information security and achieving secure communications. As the country's requirements for information security increase, more and more banks are beginning to consider switching from international cryptographic algorithms to national cryptographic algorithms. However, this process is not easy, because the change of cryptographic algorithms involves multiple aspects such as system architecture, data format, encryption and decryption processes, and can easily cause business scenarios to fail.

[0003] Therefore, there is an urgent need for a technology that can seamlessly switch passwords so as to smoothly complete the upgrade of password algorithms without affecting the continuity of existing business. Summary of the invention

[0004] The embodiments of the present application provide a method, device, electronic device, storage medium and program product for upgrading the system password of a business system, so as to smoothly complete the upgrade of the password algorithm without affecting the continuity of existing business.

[0005] In a first aspect, an embodiment of the present application provides a system password upgrade method for a business system, comprising: a service system receives a password upgrade message, and identifies an upgrade message identifier carried in the password upgrade message, wherein the upgrade message identifier is used to indicate the password type carried by the upgrade message; if the upgrade message identifier indicates that the password type is a first-class password, the service system responds to the password upgrade message according to a pre-stored first-class password certificate to obtain a response result; if the response result indicates that the service system is successfully upgraded, the service system forwards the password upgrade message to a calling system to instruct the calling system to upgrade according to the password upgrade message; upon receiving an upgrade success instruction fed back by the calling system, it is determined that the system passwords of the service system and the business system corresponding to the calling system have been upgraded.

[0006] In a second aspect, an embodiment of the present application provides a system password upgrade device for a business system, comprising: an identification module, used for a service system to receive a password upgrade message and identify an upgrade message identifier carried in the password upgrade message, wherein the upgrade message identifier is used to indicate the type of password carried by the upgrade message; a response module, used for if the upgrade message identifier indicates that the password type is a first-class password, the service system responds to the password upgrade message according to a pre-stored first-class password certificate to obtain a response result; a forwarding module, used for if the response result indicates that the service system has been successfully upgraded, the service system forwards the password upgrade message to a calling system to instruct the calling system to upgrade according to the password upgrade message; a determination module, used for, upon receiving an upgrade success instruction fed back by the calling system, determining that the system passwords of the service system and the business system corresponding to the calling system have completed the upgrade.

[0007] In a third aspect, an embodiment of the present application provides a system password upgrade device for a business system, including: a memory, a processor;

[0008] The memory stores computer-executable instructions;

[0009] The processor executes the computer-executable instructions stored in the memory, so that the processor executes the above first aspect and / or various possible implementations of the first aspect.

[0010] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, in which computer-executable instructions are stored. When the computer-executable instructions are executed by a processor, they are used to implement the first aspect above and / or various possible implementations of the first aspect.

[0011] In a fifth aspect, an embodiment of the present application provides a computer program product, including a computer program, which, when executed by a processor, implements the above first aspect and / or various possible implementation methods of the first aspect.

[0012] The system password upgrade method, device, electronic device, storage medium and program product of the business system provided in the embodiment of the present application are achieved by adding an upgrade message identifier in the interface between the service system and the calling system. This identifier is used to indicate the password type carried in the message. When the service system receives the password upgrade message, it will automatically identify the upgrade message identifier and select the corresponding certificate for processing according to the password type indicated by the identifier. If the upgrade message identifier indicates that the password type is a first-class password, the service system uses the pre-stored first-class password certificate to respond to the message. The calling system will be upgraded only after the service system upgrade is completed. During actual use, users will not perceive problems such as business processing anomalies caused by the system password upgrade. The upgrade effect of the cryptographic algorithm is successfully completed without affecting the continuity of existing business. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0014] Figure 1 A schematic diagram of a scenario of a method for upgrading a system password of a traditional business system provided in this application;

[0015] Figure 2 Schematic diagram of the process of upgrading the system password of the business system provided by this application Figure 1 ;

[0016] Figure 3 Schematic diagram of the process of upgrading the system password of the business system provided by this application Figure 2 ;

[0017] Figure 4 A schematic diagram of the structure of a system password upgrade device for a business system provided by this application;

[0018] Figure 5 A schematic diagram of the structure of the system password upgrade device of the business system provided in this application.

[0019] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0020] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0021] First, the terms involved in this application are explained:

[0022] Service system: The service system is a service provider that implements specific business logic or data access functions and exposes them to external systems or components through interfaces. In a banking system, a service provider can be any system or module that provides specific services (such as account query, transaction processing, risk management, etc.). These services are usually provided to the outside world through APIs (application programming interfaces) or other forms of interfaces so that other systems or components can call and use the services they provide.

[0023] Calling system: The calling system is a service consumer. It initiates a request to the service provider and receives the result returned by the service provider. In the banking system, the caller can be a user interface (such as online banking, mobile banking APP), other internal systems or third-party partner systems. They obtain the required data or perform specific business operations by calling the interface provided by the service provider.

[0024] Figure 1 A scenario diagram of a method for upgrading a system password of a traditional business system provided in this application, such as Figure 1 As shown, the specific application scenario of this application is the password upgrade scenario of the banking system:

[0025] In the prior art, the caller 11 and the application 12 often perform password upgrades together. However, there are verification failures during the verification process, which leads to online transaction failures during the upgrade process. For example, bill inquiries and other services have high concurrent transaction volumes 24 hours a day. If the key is synchronized with the other end, it will lead to technical problems such as business failure during deployment.

[0026] The system password upgrade method of the business system provided in the present application receives a password upgrade message through a service system, and identifies an upgrade message identifier carried in the password upgrade message, wherein the upgrade message identifier is used to indicate the password type carried by the upgrade message; if the upgrade message identifier indicates that the password type is a first-class password, the service system responds to the password upgrade message according to a pre-stored first-class password certificate to obtain a response result; if the response result indicates that the service system has been successfully upgraded, the service system forwards the password upgrade message to the calling system to instruct the calling system to upgrade according to the password upgrade message; when an upgrade success instruction is received from the calling system, a technical means is used to determine that the system passwords of the service system and the business system corresponding to the calling system have been upgraded, thereby solving the technical problem of business scenario failure caused by password upgrade.

[0027] It should be noted that the system password upgrade method and device of the business system of the present application can be used in the field of cryptographic algorithms, and can also be used in any field other than the field of cryptographic algorithms. The application field of the method and device of the system password upgrade method of the business system of the present application is not limited.

[0028] The technical solution of the present application and how the technical solution of the present application solves the above-mentioned technical problems are described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0029] Figure 2 Schematic diagram of the process of upgrading the system password of the business system provided by this application Figure 1 ,like Figure 2 As shown, the method includes:

[0030] S201. The service system receives a password upgrade message and identifies an upgrade message identifier carried in the password upgrade message, wherein the upgrade message identifier is used to indicate a password type carried in the upgrade message;

[0031] S202: If the upgrade message identifier indicates that the password type is a first-class password, the service system responds to the password upgrade message according to a pre-stored first-class password certificate to obtain a response result;

[0032] Optionally, the first type of cryptography is a domestic cryptographic algorithm.

[0033] S203: If the response result indicates that the service system is successfully upgraded, the service system forwards the password upgrade message to the calling system to instruct the calling system to upgrade according to the password upgrade message;

[0034] S204: upon receiving an upgrade success instruction fed back by the calling system, determining that the system passwords of the service system and the business system corresponding to the calling system have been upgraded.

[0035] Figure 3 Schematic diagram of the process of upgrading the system password of the business system provided by this application Figure 2 ,like Figure 3 Shown

[0036] Before switching the key, the service system will switch first, and then the caller system will switch. The caller system needs to send the algorithm switch identifier used for encryption and decryption to the service party according to the online interface. After receiving the transaction, the service party determines whether it is an international / national secret algorithm based on the algorithm switch identifier. If it is an international algorithm, it will follow the international algorithm processing logic; if it is a national secret algorithm, it will follow the national secret algorithm processing logic accordingly. After processing, the service party continues the subsequent process and completes the transaction.

[0037] The method for upgrading the system password of the business system provided in the embodiment of the present application adds an upgrade message identifier in the interface between the service system and the calling system. This identifier is used to indicate the type of password carried in the message. When the service system receives the password upgrade message, it will automatically identify the upgrade message identifier and select the corresponding certificate for processing according to the password type indicated by the identifier. If the upgrade message identifier indicates that the password type is a first-class password, the service system uses the pre-stored first-class password certificate to respond to the message. The calling system will be upgraded only after the service system upgrade is completed. During actual use, the user will not perceive problems such as business processing anomalies caused by the system password upgrade. The upgrade effect of the cryptographic algorithm is successfully completed without affecting the continuity of existing business.

[0038] In an optional embodiment, in response to a first password deployment instruction, the first type of password certificate and the first message identifier carried in the first password deployment instruction are saved in a password library; in response to a second password deployment instruction, the second type of password certificate and the second message identifier carried in the second password deployment instruction are saved in the password library; wherein the first type of password certificate carries decryption information of the first type of password, and the second type of password certificate carries decryption information of the second type of password; the upgrade message identifier is matched with the first message identifier and the second message flag saved in the password library to determine the target password certificate that responds to the upgrade message.

[0039] Optionally, when the system receives a first password deployment instruction, the instruction carries a first type of password certificate and a first message identifier.

[0040] In this scenario, the first type of cryptographic certificate is a national secret certificate, which contains the decryption information of the national secret algorithm, which is the key for the subsequent decryption of data encrypted using the national secret algorithm. The system saves the national secret certificate and the first message identifier in the cryptographic library. Similarly, when the system receives a second cryptographic deployment instruction, this instruction carries the second type of cryptographic certificate and the second message identifier. In this scenario, the second type of cryptographic certificate is an international cryptographic certificate, which contains the decryption information of an international cryptographic algorithm (such as RSA, ECC, etc.). The system also saves the international cryptographic certificate and the second message identifier in the cryptographic library. When the system receives an upgrade message, it extracts the upgrade message identifier in the upgrade message.

[0041] The system matches this upgrade message identifier with the first message identifier and the second message identifier stored in the cryptographic library. Through matching, the system can determine which cryptographic certificate should be used to respond to this upgrade message. If the upgrade message identifier matches the first message identifier (the identifier of the national cryptographic certificate), the national cryptographic certificate is used; if it matches the second message identifier (the identifier of the international cryptographic certificate), the international cryptographic certificate is used. This process is designed to achieve flexible deployment and upgrades of different types of passwords while ensuring that the system can accurately identify and use the correct cryptographic certificates to handle encryption and decryption operations. By storing different types of cryptographic certificates and message identifiers in the cryptographic library and matching them when needed, the system can effectively manage national cryptographic certificates and international cryptographic certificates and switch seamlessly when necessary. This design is very important for application scenarios that need to support multiple cryptographic algorithms and ensure data security and compliance.

[0042] In an optional embodiment, if the upgrade message identifier matches the first message identifier, it is determined to use the first type of cryptographic certificate to respond to the upgrade message; if the upgrade message identifier matches the second message identifier, it is determined to use the second type of cryptographic certificate to respond to the upgrade message.

[0043] The system maintains a cryptographic library that stores different types of cryptographic certificates and their corresponding message identifiers. The first type of cryptographic certificate is associated with the first message identifier, indicating that when an upgrade message containing the first message identifier is received, the first type of cryptographic certificate should be used for processing. The second type of cryptographic certificate is associated with the second message identifier, indicating that when an upgrade message containing the second message identifier is received, the second type of cryptographic certificate should be used for processing.

[0044] When the system receives an upgrade message, it will first check the upgrade message identifier in the message. Then, the system compares the upgrade message identifier with the first message identifier and the second message identifier stored in the password library.

[0045] If the upgrade message identifier matches the first message identifier, it means that the upgrade message needs to be processed using the first type of cryptographic certificate. At this time, the system will select the first type of cryptographic certificate as the response certificate. If the upgrade message identifier matches the second message identifier, it means that the upgrade message needs to be processed using the second type of cryptographic certificate. At this time, the system will select the second type of cryptographic certificate as the response certificate. If the upgrade message identifier does not match either the first message identifier or the second message identifier, the system will return an error reminder or a password library update reminder.

[0046] In an optional embodiment, if the upgrade message identifier indicates that the password type is a second-category password, it is determined whether the password upgrade message carries password update information; if the password upgrade message carries the password update information, the service system responds to the update information in the password upgrade message according to a pre-stored second-category password certificate to obtain a response result; if the password upgrade message does not carry the password update information, the service system does not respond to the password upgrade message.

[0047] Optionally, the second type of cryptography is an international cryptographic algorithm.

[0048] During the password upgrade process, the upgrade message (or request, message, etc.) will contain a specific identifier, called the upgrade message identifier. This identifier is used to indicate the password type or algorithm used by the upgrade message.

[0049] When the system receives an upgrade message, it will first check the upgrade message identifier in the message. If the upgrade message identifier indicates that the password type is the second type of password (international password), the system will continue to process the upgrade message to update the password. Next, the system will check whether the password upgrade message carries the password update information.

[0050] The password update information may include the new password value, encryption key, or other data related to the password update. If the password update message carries the password update information, the service system will respond to the update information based on the pre-stored second-class password certificate. Using the second-class password certificate, the service system can decrypt and verify the authenticity and integrity of the update information. Once the verification is passed, the service system will process the update information and generate a corresponding response result. This may include updating the password storage inside the system, notifying related systems or users that the password has been updated, etc.

[0051] If the password upgrade message does not carry the password update information, the service system will not respond to the upgrade message.

[0052] This may be because the system was unable to determine how to proceed with the password update without sufficient information being provided or because the request was deemed incomplete or invalid.

[0053] In summary, the service system has the following logic when processing the upgrade request of the second type of password. The system will determine whether the upgrade message carries the password update information based on the identifier and content of the upgrade message, and decide whether to respond to the upgrade request accordingly. This design ensures that the system only processes password update requests that contain necessary information, thereby improving the security and stability of the system.

[0054] In an optional embodiment, the service system sends test information to the calling system and obtains decryption information fed back by the calling system based on the test information; wherein the test information is encrypted using a first type of password. If the decryption information indicates a decryption failure, it is determined that the business system upgrade has failed, and an abnormal reminder is initiated; if the decryption information indicates a decryption success, it is determined that the business system upgrade has been successful, and a success reminder is initiated.

[0055] The service system generates test information after encrypting it with the first type of password and sends the information to the calling system.

[0056] After receiving the test information, the user system attempts to decrypt it. The result of the decryption (whether successful or failed) is fed back to the service system as decryption information. If the decryption information indicates that the decryption failed, the service system will determine that the business system upgrade failed and initiate an abnormal reminder. This may involve notifying relevant personnel or systems for troubleshooting and repair. If the decryption information indicates that the decryption is successful, the service system will determine that the business system upgrade is successful and initiate a success reminder. This usually means that the upgrade process was successfully completed and the system can operate normally.

[0057] Abnormal reminder and success reminder: The reminder is to inform relevant personnel or systems about the status of the business system upgrade so that necessary actions can be taken in time or the success of the upgrade can be confirmed. The mechanism of verifying whether the business system upgrade is successful through encryption and decryption testing involves the collaboration between the service system and the calling system, as well as the corresponding processing based on the feedback results.

[0058] In an optional embodiment, if an updated first-class cryptographic certificate exists in the cloud, the current first-class cryptographic certificate is replaced with the updated first-class cryptographic certificate; and the password upgrade message is responded to again using the updated first-class cryptographic certificate.

[0059] If an updated certificate exists in the cloud, the system will replace the first-class cryptographic certificate currently in use with this new certificate. This means that the old certificate will be discarded or archived, and the new certificate will become the basis for system authentication and encryption operations. Using the updated certificate, the system will regenerate or modify the response to the cryptographic upgrade message. This involves re-encrypting certain data or regenerating authentication information to ensure that all operations are based on the latest security standards and certificates. By regularly updating cryptographic certificates, the system can better guard against potential security threats. The system needs to have a mechanism to monitor the validity period and status of the certificate to ensure that it is updated in time before it expires.

[0060] In addition, optionally, there needs to be a logging and alarm system so that problems can be discovered and handled in a timely manner when they occur during the certificate update process. In some cases, if the certificate update involves user interaction, users may need to be notified in advance so that they understand the upcoming changes and take necessary actions.

[0061] In an optional embodiment, the service system and the calling system are deployed in the same business system.

[0062] The system password upgrade method of the business system provided in the embodiment of the present application adds an upgrade message identifier in the interface between the service system and the calling system. This identifier is used to indicate the password type carried in the message. When the service system receives the password upgrade message, it will automatically identify the upgrade message identifier and select the corresponding certificate for processing according to the password type indicated by the identifier. If the upgrade message identifier indicates that the password type is a first-class password, the service system uses the pre-stored first-class password certificate to respond to the message. The calling system will be upgraded only after the service system upgrade is completed. During actual use, users will not perceive problems such as business processing anomalies caused by the system password upgrade. The upgrade effect of the cryptographic algorithm is successfully completed without affecting the continuity of existing business.

[0063] Figure 4 A schematic diagram of the structure of the system password upgrade device for the business system provided by this application, such as Figure 4 As shown, the system password upgrade device 40 of the business system provided in this embodiment includes:

[0064] The identification module 401 is used for the service system to receive a password upgrade message and identify an upgrade message identifier carried in the password upgrade message, wherein the upgrade message identifier is used to indicate the password type carried in the upgrade message;

[0065] A response module 402 is used for, if the upgrade message identifier indicates that the password type is a first-class password, the service system responds to the password upgrade message according to a pre-stored first-class password certificate to obtain a response result;

[0066] The forwarding module 403 is configured to forward the password upgrade message to the calling system if the response result indicates that the service system is successfully upgraded, so as to instruct the calling system to upgrade according to the password upgrade message;

[0067] The determination module 404 is used to determine that the system passwords of the service system and the business system corresponding to the calling system have completed the upgrade when receiving the upgrade success instruction fed back by the calling system.

[0068] In one possible implementation, the device also includes: a deployment module, which is used to save the first type of cryptographic certificate and the first message identifier carried in the first cryptographic deployment instruction in a cryptographic library in response to a first cryptographic deployment instruction; save the second type of cryptographic certificate and the second message identifier carried in the second cryptographic deployment instruction in the cryptographic library in response to a second cryptographic deployment instruction; wherein the first type of cryptographic certificate carries the decryption information of the first type of cryptography, and the second type of cryptographic certificate carries the decryption information of the second type of cryptography; and match the upgrade message identifier with the first message identifier and the second message flag stored in the cryptographic library to determine the target cryptographic certificate that responds to the upgrade message.

[0069] In one possible implementation, the deployment module is further used to determine whether to use the first type of cryptographic certificate to respond to the upgrade message if the upgrade message identifier matches the first message identifier; and to determine whether to use the second type of cryptographic certificate to respond to the upgrade message if the upgrade message identifier matches the second message identifier.

[0070] In one possible implementation, the response module 402 is also used to determine whether the password upgrade message carries password update information if the upgrade message identifier indicates that the password type is a second-class password; if the password upgrade message carries the password update information, the service system responds to the update information in the password upgrade message according to a pre-stored second-class password certificate to obtain a response result; if the password upgrade message does not carry the password update information, the service system does not respond to the password upgrade message.

[0071] In one possible implementation, the device also includes: a reminder module, which is used for the service system to send test information to the calling system and obtain decryption information fed back by the calling system based on the test information; wherein the test information is obtained after being encrypted using a first type of password; if the decryption information indicates that the decryption fails, it is determined that the business system upgrade has failed, and an abnormal reminder is initiated; if the decryption information indicates that the decryption is successful, it is determined that the business system upgrade is successful, and a success reminder is initiated.

[0072] In one possible implementation, the device also includes: an update module, which is used to replace the current first-class cryptographic certificate with the updated first-class cryptographic certificate if there is an updated first-class cryptographic certificate in the cloud; and use the updated first-class cryptographic certificate to re-respond to the cryptographic upgrade message.

[0073] In a possible implementation, the device further includes: a business module, which is used to deploy the service system and the calling system in the same business system.

[0074] The system password upgrading device of the business system provided in this embodiment can execute the method provided in the above method embodiment, and its implementation principle and technical effect are similar, which will not be described in detail in this embodiment.

[0075] Figure 5 This is a schematic diagram of the structure of the system password upgrade device of the business system provided by this application. Figure 5 As shown, the electronic device 50 provided in this embodiment includes: at least one processor 501 and a memory 502. Optionally, the device 50 also includes a communication component 503. The processor 501, the memory 502 and the communication component 503 are connected via a bus 504.

[0076] In a specific implementation process, at least one processor 501 executes the computer-executable instructions stored in the memory 502, so that at least one processor 501 executes the above method.

[0077] The specific implementation process of the processor 501 can be found in the above method embodiment, and its implementation principle and technical effect are similar, so this embodiment will not be repeated here.

[0078] In the above embodiments, it should be understood that the processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), etc. A general-purpose processor may be a microprocessor or any conventional processor. The steps of the method disclosed in the invention may be directly implemented as being executed by a hardware processor, or may be executed by a combination of hardware and software modules in the processor.

[0079] The memory may include a high-speed memory (Random Access Memory, RAM), and may also include a non-volatile memory (Non-volatile Memory, NVM), such as at least one disk memory.

[0080] The bus may be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, the bus in the drawings of the present application is not limited to only one bus or one type of bus.

[0081] The present application also provides a computer program product, including a computer program, which implements the above method when executed by a processor.

[0082] The present application also provides a computer-readable storage medium, in which computer-executable instructions are stored. When a processor executes the computer-executable instructions, the above method is implemented.

[0083] The above-mentioned readable storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk. The readable storage medium can be any available medium that can be accessed by a general or special-purpose computer.

[0084] An exemplary readable storage medium is coupled to a processor so that the processor can read information from the readable storage medium and write information to the readable storage medium. Of course, the readable storage medium can also be a component of the processor. The processor and the readable storage medium can be located in an application specific integrated circuit (Application Specific Integrated Circuits, referred to as: ASIC). Of course, the processor and the readable storage medium can also exist in the device as discrete components.

[0085] The division of units is only a logical function division, and there may be other divisions in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interface, device or unit, which can be electrical, mechanical or other forms.

[0086] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0087] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0088] If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods of each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc. Various media that can store program codes.

[0089] Those skilled in the art can understand that all or part of the steps of implementing the above-mentioned method embodiments can be completed by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the steps of the above-mentioned method embodiments are executed; and the aforementioned storage medium includes: ROM, RAM, disk or optical disk and other media that can store program codes.

[0090] Finally, it should be noted that those skilled in the art will readily conceive of other embodiments of the present invention after considering the specification and practicing the invention disclosed herein. The present invention is intended to cover any variations, uses or adaptations of the present invention, which follow the general principles of the present invention and include common knowledge or customary technical means in the art not disclosed by the present invention, are not limited to the precise structure described above and shown in the drawings, and may be modified and changed in various ways without departing from the scope thereof. The scope of the present invention is limited only by the appended claims.

Claims

1. A method for upgrading a system password of a business system, characterized in that: include: The service system receives the password upgrade message, and identifies the upgrade message identifier carried in the password upgrade message, wherein the upgrade message identifier is used to indicate the password type carried in the password upgrade message; If the upgrade message identifier indicates that the password type is a first-class password, the service system responds to the password upgrade message according to the pre-stored first-class password certificate to obtain a response result; If the response result indicates that the service system is successfully upgraded, the service system forwards the password upgrade message to the calling system to instruct the calling system to upgrade according to the password upgrade message; When receiving an upgrade success instruction fed back by the calling system, the system passwords of the service system and the business system corresponding to the calling system are determined to complete the upgrade.

2. The method according to claim 1, characterized in that Before identifying the upgrade message identifier carried in the password upgrade message, the method further includes: In response to the first password deployment instruction, the first type of password certificate and the first message identifier carried in the first password deployment instruction are stored in the password library; In response to the second password deployment instruction, the second type of password certificate and the second message identifier carried in the second password deployment instruction are stored in the password library; wherein the first type of password certificate carries the decryption information of the first type of password, and the second type of password certificate carries the decryption information of the second type of password; The upgrade message identifier is matched with the first message identifier and the second message identifier stored in the password library to determine a target password certificate that responds to the password upgrade message.

3. The method according to claim 2, characterized in that Matching the upgrade message identifier with the first message identifier and the second message identifier stored in the password library to determine a target password certificate in response to the password upgrade message, including: If the upgrade message identifier matches the first message identifier, determining to use the first type of password certificate to respond to the password upgrade message; If the upgrade message identifier matches the second message identifier, it is determined to use the second-type password certificate to respond to the password upgrade message.

4. The method according to claim 1, characterized in that: After identifying the upgrade message identifier carried in the password upgrade message, the method further includes: If the upgrade message identifier indicates that the password type is a second-category password, determining whether the password upgrade message carries password update information; In the case where the password update message carries the password update information, the service system responds to the update information in the password update message according to the pre-stored second type password certificate to obtain a response result; In the case that the password update message does not carry the password update information, the service system does not respond to the password update message.

5. The method according to claim 1, characterized in that In the case of receiving an upgrade success instruction fed back by the calling system, after determining that the system passwords of the service system and the business system corresponding to the calling system have been upgraded, the method includes: The service system sends test information to the calling system and obtains decryption information fed back by the calling system based on the test information; wherein the test information is obtained after being encrypted using the first type of password; If the decryption information indicates that the decryption fails, it is determined that the business system upgrade has failed, and an abnormality reminder is initiated; If the decryption information indicates that the decryption is successful, it is determined that the business system has been upgraded successfully, and a success reminder is initiated.

6. The method according to claim 5, characterized in that If the decryption information indicates that the decryption fails, after determining that the business system upgrade fails, the method further includes: If there is an updated first-category cryptographic certificate in the cloud, the current first-category cryptographic certificate is replaced with the updated first-category cryptographic certificate; The updated first-type cryptographic certificate is used to respond to the cryptographic upgrade message again.

7. The method according to claim 1, characterized in that The method comprises: The service system and the calling system are deployed in the same business system.

8. A system password upgrade device for a business system, characterized in that: include: an identification module, configured to receive a password upgrade message from a service system and identify an upgrade message identifier carried in the password upgrade message, wherein the upgrade message identifier is used to indicate a password type carried in the upgrade message; A response module, configured to, if the upgrade message identifier indicates that the password type is a first-class password, cause the service system to respond to the password upgrade message according to a pre-stored first-class password certificate to obtain a response result; a forwarding module, configured to, if the response result indicates that the service system is successfully upgraded, cause the service system to forward the password upgrade message to the calling system, so as to instruct the calling system to upgrade according to the password upgrade message; The determination module is used to determine that the system passwords of the service system and the business system corresponding to the calling system have completed the upgrade when receiving the upgrade success instruction fed back by the calling system.

9. A system password upgrade device for a business system, characterized in that: include: Memory, processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory, so that the processor performs the method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, which are used to implement the method according to any one of claims 1 to 9 when executed by a processor.

Images