Bypass-based peripheral payment system accounting verification method and device, and medium
By adopting the bypass-based peripheral payment system accounting verification method in the payment system, the problems of complexity and high cost of existing payment systems when processing unilateral accounts are solved, and faster and safer accounting verification and risk management are achieved.
Patent Information
- Application Number
- CN202411738744.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-29
- Publication Date
- 2025-03-18
AI Technical Summary
The existing payment system has high operational complexity and cost when handling unilateral accounts, and has a long adjustment cycle, which affects the accounting and lending balance of transaction institutions.
Bypass-based peripheral payment system accounting verification method is used to intercept payment messages or file transfer messages through network bypass, analyze and obtain payment requests, judge replay attacks, and track subsequent transaction intermediate messages and final result messages for reconciliation.
It realizes non-invasive day payment reconciliation, improves the comprehensiveness and speed of accounting verification, reduces operational complexity and cost, and enhances the security and reliability of the system.
Smart Images
Figure CN119648225A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of transaction processing, and in particular to a bypass-based peripheral payment system account verification method, device and medium. Background Art
[0002] With the rapid development of e-commerce and mobile payments, the payment system plays a vital role in the modern financial system. The core account verification of the payment system is a key link to ensure transaction accuracy and system robustness. Currently, the core bank account modules include:
[0003] 1. Application accounting: The accounting module embedded in the business systems such as funds, loans, and personal liabilities is responsible for processing the accounts within the application system. The application accounting module handles both accounting and non-accounting accounts.
[0004] 2. Public Accounts: Supports the public account processing of various applications of distributed core banks, is responsible for public account processing independent of specific businesses, and provides complete open-end account service capabilities for various applications. The public account system handles both accounting and non-accounting accounts.
[0005] 3. Kernel accounting: Logically, it belongs to application accounting. Its functions support the accounting of special accounts and general accounts of various application systems. It includes real-time accounting of special accounts and general accounts in the form of microservices, and non-real-time accounting in the form of asynchronous messages; supports VAT registration-related functions; supports transition write-off business processing, etc.
[0006] Each product application ensures transaction consistency through distributed transactions (TCC, Saga), completes financial transaction accounting within the application through a unified accounting interface, triggers online debit and credit balance checks when online financial transactions occur, and sends contract details to the public account. For special account accounting, each application implements it by calling the kernel account microservice, and the kernel account also generates contract details and sends them to the public account. In the contract details within each application, the details of the non-real-time updated sub-accounts are summarized and processed at the end of the day, and the summary is recorded. The public account processes the general ledger according to the contract details of each product application and the kernel account, and realizes the account reconciliation functions such as total and sub-account reconciliation, debit and credit balance reconciliation, and cross-system transaction reconciliation, and provides daily account reconciliation data in the form of reports. The core system processes the financial transaction details of the day and the balance information of the accounting dynamic account sub-account and posts them to the accounting system.
[0007] When incomplete transactions occur in financial transactions, transaction-level credit and debit imbalances (i.e., one-sided accounts) will be generated. At the end of the day, the one-sided accounts are not settled and posted, which is reflected in the accounting and credit and debit imbalances of the trading institution. Accounts need to be adjusted to achieve account balance, for example:
[0008] On T day, a one-sided account was generated due to an incomplete transaction, and the corresponding business status table showed "unbalanced amount and unbalanced general ledger";
[0009] On T+1, no unilateral account adjustment was performed, and the corresponding business status table showed "balanced amount, unbalanced general ledger";
[0010] On T+2, the unilateral account adjustment is completed, and the corresponding business status table shows "the amount of occurrence is not balanced, and the general ledger is balanced";
[0011] On T+3, the corresponding business status statement shows "balanced amount and balanced general ledger".
[0012] The generation and subsequent processing of unilateral accounts is cumbersome and requires manual or automatic adjustments to achieve account balance, which increases operational complexity and costs. At the same time, the adjustment cycle of unilateral accounts is long, which may affect the accounting and loan balance of trading institutions and have an adverse impact on business operations. The payment system involves a large amount of sensitive information and capital flow, so security and reliability are crucial. The payment system involves a large amount of sensitive information and capital flow, so security and reliability are crucial. Summary of the invention
[0013] The purpose of the present invention is to overcome the defects of the above-mentioned prior art and to provide a bypass-based peripheral payment system account verification method, equipment and medium, which utilizes the network and bypass messages to receive payment process information copied from different peripheral payment systems, and non-invasively performs daytime payment reconciliation to achieve more comprehensive and rapid account verification and risk management.
[0014] The purpose of the present invention can be achieved by the following technical solutions:
[0015] A bypass-based peripheral payment system account verification method, the method comprising:
[0016] Intercepting payment messages or file transfer messages in online requests based on network bypass;
[0017] Parse payment messages or file transfer messages to obtain online payment requests or batch file payment requests;
[0018] Obtain the unique identifier of the payment message or file transfer message to determine whether it has been subjected to a replay attack;
[0019] If a replay attack occurs, an alarm is issued. If a replay attack does not occur, the subsequent transaction intermediate messages and final result messages of the online payment request or batch file payment request are tracked for reconciliation.
[0020] Furthermore, the payment message and the file transfer message are intercepted by a router through the target address and the target port registered in the system.
[0021] Furthermore, the process of parsing the payment message includes:
[0022] Identify the payment message type, confirm the message version and extract the bank identification code and name of the sender and receiver;
[0023] Parse the payment message body according to the payment message type and version to obtain the transaction amount, transaction time, payee information, payee information, transaction description, remittance information and fee information;
[0024] Parse the payment message tail according to the payment message type and version to obtain the payment message verification code and payment message signature;
[0025] Integrate the parsed content of the payment message body and the payment message tail to obtain the online payment request.
[0026] Furthermore, the process of parsing the request file includes:
[0027] According to the file transfer message, the network protocol is used to query the requested file from the file server and store it in the memory or write it to the local file; according to the format of the requested file, the algorithm is used to parse the requested file to obtain batch file payment requests.
[0028] Furthermore, the unique identifier is calculated based on the transaction serial number and timestamp of the payment message or file transfer message.
[0029] Furthermore, if a large number of repeated unique identifiers are found, it is determined that a replay attack has occurred.
[0030] Furthermore, the reconciliation process includes:
[0031] Register the online payment request or batch file payment request under the authorized payment voucher number;
[0032] Intercept the subsequent transaction intermediate message, match the authorized payment voucher number according to the content of the subsequent transaction intermediate message, and check the transaction amount with the online payment request or batch file payment request with the same authorized payment voucher number;
[0033] If the transaction amounts are different, an alarm will be issued and manual intervention will be required. If the transaction amounts are the same, reconciliation will continue;
[0034] Intercept the final result message, match the authorized payment voucher number according to the content of the final result message, and check the transaction amount with the subsequent transaction intermediate message and online payment request or batch file payment request with the same authorized payment voucher number. If the transaction amounts are different, an alarm will be issued and manual intervention will be performed. If the transaction amounts are the same, the reconciliation is successful.
[0035] Furthermore, when intercepting subsequent transaction intermediate messages and final result messages, the interception time is recorded, and whether the transaction has timed out is determined based on the transaction timeout limit. If it has timed out, an alarm is issued and manual intervention is performed.
[0036] An electronic device includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the steps of the bypass-based peripheral payment system account verification method as described above are implemented.
[0037] A computer-readable storage medium stores a computer program, which, when executed by a processor, implements the steps of the bypass-based peripheral payment system account verification method as described above.
[0038] Compared with the prior art, the present invention has the following beneficial effects:
[0039] 1. The present invention is based on bypass and performs non-intrusive reconciliation. It does not require the modification of the business system and can reduce the risk of coding operations. It not only supports the interception and parsing of online payment requests, but also can process batch file payment requests, ensuring that no matter whether the payment method is online or batch, comprehensive and effective account verification can be performed. It does not require direct access to the core business data of the payment system, and also reduces the risk of data leakage; by verifying the unique identifier of the message, security threats such as replay attacks can be effectively prevented.
[0040] 2. The present invention can realize the daily verification function of accounts for different types of businesses by only configuring the target address, target port and message parsing method. It can intercept payment messages in real time and accurately, and parse and record them, ensuring the timeliness and accuracy of account verification and improving the efficiency of reconciliation. BRIEF DESCRIPTION OF THE DRAWINGS
[0041] Figure 1 The figure is a flow chart of the method of the present invention. DETAILED DESCRIPTION
[0042] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.
[0043] Example 1
[0044] This embodiment has disclosed a bypass-based peripheral payment system account verification method, the method is as follows Figure 1 As shown, including:
[0045] Step S1, intercepting a payment message or a file transfer message in an online request based on a network bypass.
[0046] Payment messages and file transfer messages are intercepted by routers through the target addresses and target ports registered in the system.
[0047] In this embodiment, the TCP or HTTP online request of the third party online payment is received through the peripheral payment system, and the bypass log system uses the second of the TCP 4-tuple (destination address, destination port) registered in the system to intercept the payment message.
[0048] Step S2, parsing the payment message or file transfer message to obtain an online payment request or a batch file payment request;.
[0049] In step S2, the process of parsing the payment message includes:
[0050] Identify the payment message type, confirm the message version and extract the bank identification code and name of the sender and receiver;
[0051] Parse the payment message body according to the payment message type and version to obtain the transaction amount, transaction time, payee information, payee information, transaction description, remittance information and fee information;
[0052] Parse the payment message tail according to the payment message type and version to obtain the payment message verification code and payment message signature;
[0053] Integrate the parsed content of the payment message body and the payment message tail to obtain the online payment request.
[0054] In step S2, the process of parsing the request file includes:
[0055] According to the file transfer message, the network protocol is used to query the requested file from the file server and store it in the memory or write it to the local file; according to the format of the requested file, the algorithm is used to parse the requested file to obtain batch file payment requests.
[0056] Common HTTP libraries for parsing request files include Python's requests library and Java's HttpURLConnection or Apache HttpClient. In actual applications, choose the appropriate parsing method based on the file format, including JSON, XML, CSV, text files, and binary files.
[0057] Step S3, obtaining a unique identifier of the payment message or batch file payment request to determine whether it is subject to a replay attack.
[0058] The unique identifier is calculated based on the transaction serial number and timestamp of the payment message or file transfer message.
[0059] Step S4: If a replay attack occurs, an alarm is issued; if a replay attack does not occur, the subsequent transaction intermediate messages and final result messages of the online payment request or batch file payment request are tracked for reconciliation.
[0060] If a large number of repeated unique identifiers are found, it is considered to be a replay attack.
[0061] The reconciliation process includes:
[0062] Register the online payment request or batch file payment request under the authorized payment voucher number;
[0063] Intercept the subsequent transaction intermediate message, match the authorized payment voucher number according to the content of the subsequent transaction intermediate message, and check the transaction amount with the online payment request or batch file payment request with the same authorized payment voucher number;
[0064] If the transaction amounts are different, an alarm will be issued and manual intervention will be required. If the transaction amounts are the same, reconciliation will continue;
[0065] Intercept the final result message, match the authorized payment voucher number according to the content of the final result message, and check the transaction amount with the subsequent transaction intermediate message and online payment request or batch file payment request with the same authorized payment voucher number. If the transaction amounts are different, an alarm will be issued and manual intervention will be performed. If the transaction amounts are the same, the reconciliation is successful.
[0066] When intercepting subsequent transaction intermediate messages and final result messages, the interception time is recorded, and whether the transaction has timed out is determined based on the transaction timeout limit. If it has timed out, an alarm is issued and manual intervention is performed.
[0067] The following is an example of actual use of the above method.
[0068] Business scenario description: Financial authorization payment;
[0069] 1. The financial budget unit sends an authorization payment instruction;
[0070] 2. The budget unit queries the payment instruction at the independent counter and initiates payment;
[0071] 3. Our bank debits the fiscal overdraft account and lends the budget unit's zero balance account;
[0072] 4. After receiving the position, the zero balance account transfers the funds to the payee according to the payment instruction.
[0073] Description of the reconciliation processing mechanism:
[0074] 1. After the financial budget unit initiates the authorization payment instruction, it records the payment voucher number;
[0075] 2. After the budget unit initiates payment at the independent counter, it will register the intercepted instruction message under the authorized payment voucher number and record the initiation time;
[0076] 3. After obtaining the zero-balance account transfer instruction, match the transaction log number and check the amount. If the amount is correct, continue the reconciliation. If the amount is wrong, an alarm will be issued and manual intervention will be required;
[0077] 4. After receiving the instruction to pay the actual payee, match the existing amount record. If the amount is correct, continue the reconciliation. If the amount is wrong, an alarm will be issued and manual intervention will be carried out;
[0078] 5. Regularly initiate daily reconciliation, issue alarms for timed payment vouchers, and conduct manual intervention.
[0079] Business scenario description: salary payment;
[0080] 1. List of salary payments from the agency that pays the salary;
[0081] 2. Transfer the total amount of agency payment from the public account to the transition account;
[0082] 3. According to the list, transfer the funds from the transitional household to the salary recipient one by one.
[0083] Description of the reconciliation processing mechanism:
[0084] 1. Intercept the transaction message of the transition account of borrowing to public and record the time;
[0085] 2. Query the corresponding salary payment message after the timeout period and verify whether the total amount is equal.
[0086] Example 2
[0087] Based on Example 1, this embodiment provides an electronic device, including: one or more processors and a memory, wherein the memory stores one or more programs, and the one or more programs include instructions for executing the aforementioned bypass-based peripheral payment system account verification method.
[0088] At the hardware level, the electronic device includes a processor, an internal bus, a network interface, a memory, and a non-volatile memory, and may also include hardware required for other services. The processor reads the corresponding computer program from the non-volatile memory into the memory and then runs it to implement the above-mentioned bypass-based peripheral payment system account verification method. Of course, in addition to the software implementation method, the present invention does not exclude other implementation methods, such as logic devices or a combination of software and hardware, etc., that is, the execution subject of the following processing flow is not limited to each logic unit, but can also be hardware or logic devices.
[0089] The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.
[0090] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.
[0091] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed by the present invention, and these modifications or replacements should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention shall be based on the protection scope of the claims.
Claims
1. A bypass-based peripheral payment system account verification method, characterized in that: The method comprises: Intercepting payment messages or file transfer messages in online requests based on network bypass; Parse payment messages or file transfer messages to obtain online payment requests or batch file payment requests; Obtain the unique identifier of the payment message or file transfer message to determine whether it has been subjected to a replay attack; If a replay attack occurs, an alarm is issued. If a replay attack does not occur, the subsequent transaction intermediate messages and final result messages of the online payment request or batch file payment request are tracked for reconciliation.
2. A bypass-based peripheral payment system account verification method according to claim 1, characterized in that: The payment message and the file transfer message are intercepted by a router through the target address and the target port registered in the system.
3. A bypass-based peripheral payment system account verification method according to claim 1, characterized in that: The process of parsing the payment message includes: Identify the payment message type, confirm the message version and extract the bank identification code and name of the sender and receiver; Parse the payment message body according to the payment message type and version to obtain the transaction amount, transaction time, payee information, payee information, transaction description, remittance information and fee information; Parse the payment message tail according to the payment message type and version to obtain the payment message verification code and payment message signature; Integrate the parsed content of the payment message body and the payment message tail to obtain the online payment request.
4. A bypass-based peripheral payment system account verification method according to claim 1, characterized in that: The process of parsing the request file includes: According to the file transfer message, the network protocol is used to query the requested file from the file server and store it in the memory or write it to the local file; according to the format of the requested file, the algorithm is used to parse the requested file to obtain batch file payment requests.
5. A bypass-based peripheral payment system account verification method according to claim 1, characterized in that: The unique identifier is calculated based on the transaction serial number and timestamp of the payment message or file transfer message.
6. A bypass-based peripheral payment system account verification method according to claim 1, characterized in that: If a large number of repeated unique identifiers are found, it is considered to be a replay attack.
7. A bypass-based peripheral payment system account verification method according to claim 1, characterized in that: The reconciliation process includes: Register the online payment request or batch file payment request under the authorized payment voucher number; Intercept the subsequent transaction intermediate message, match the authorized payment voucher number according to the content of the subsequent transaction intermediate message, and check the transaction amount with the online payment request or batch file payment request with the same authorized payment voucher number; If the transaction amounts are different, an alarm will be issued and manual intervention will be required. If the transaction amounts are the same, reconciliation will continue; Intercept the final result message, match the authorized payment voucher number according to the content of the final result message, and check the transaction amount with the subsequent transaction intermediate message and online payment request or batch file payment request with the same authorized payment voucher number. If the transaction amounts are different, an alarm will be issued and manual intervention will be performed. If the transaction amounts are the same, the reconciliation is successful.
8. A bypass-based peripheral payment system account verification method according to claim 7, characterized in that: When intercepting subsequent transaction intermediate messages and final result messages, the interception time is recorded, and whether the transaction has timed out is determined based on the transaction timeout limit. If it has timed out, an alarm is issued and manual intervention is performed.
9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the steps of the bypass-based peripheral payment system account verification method as described in any one of claims 1-8 are implemented.
10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the bypass-based peripheral payment system account verification method as described in any one of claims 1 to 8 are implemented.