National password detection method and system for financial equipment

Abstract

The invention relates to the technical field of national password detection, and discloses a national password detection method and system for financial equipment, and the method comprises the steps: a detection scheduling server receives test case information uploaded by a tester based on a man-machine interaction module, analyzes the test cases, generates a corresponding detection interface instruction combination, and sends the detection interface instruction combination to a server; according to the interface instruction combination obtained through analysis, input parameters needed by each instruction are obtained from a database, a complete detection calling process is generated, and the generated calling process is sent to a to-be-detected product scheduling server. And the to-be-detected product scheduling server obtains parameters from the database according to the received detection calling process, generates a corresponding hardware detection instruction, issues the hardware detection instruction to the financial equipment detection result, and stores the result in the database. And the man-machine interaction module renders the detection result to an interface of a tester. The situation that large-scale national password detection cannot be carried out due to the fact that independent semi-automatic design is carried out on each piece of equipment is avoided, and the efficiency of the national password testing process is improved.

Description

Technical Field

[0001] The present invention relates to the field of national security detection technology, and in particular to a national security detection method and system for financial equipment. Background Art

[0002] With the rapid development of my country's financial industry, the security requirements for financial equipment are also increasing. In order to ensure the security of financial transactions, the national standard requires financial equipment to use national secret encryption algorithms. National secret encryption functions have become standard for financial equipment such as POS machines, ATMs, password keyboards, and multi-function password applications.

[0003] At present, there are basically two types of tests for testing financial devices with national secret encryption functions. The first type requires testers to manually operate the equipment. The specific process includes: the tester manually inputs the test data, obtains the encryption results of the device, and manually records these results. The manual testing method is time-consuming and labor-intensive, and the national secret detection has high requirements for the accuracy of the test results. Manual testing is prone to human omissions during the operation process, resulting in inaccurate test results.

[0004] As the complexity of the equipment increases, the testing process becomes more cumbersome. Another approach is to develop a semi-automatic testing system to automatically import test data into the device under test through external equipment or software, reducing the error of manual input. However, this semi-automatic testing is only applicable to a single or a small number of device types, and the test scenario is relatively simple. The test cannot effectively cope with large-scale and complex test requirements.

[0005] Therefore, when faced with national security testing equipment for large-scale and complex financial equipment, there are problems of low efficiency and insufficient accuracy. Summary of the invention

[0006] In view of this, the present invention provides a method and system for national security detection of financial equipment to solve the technical problem of how to improve the efficiency and accuracy of national security testing of large-scale financial equipment.

[0007] In a first aspect, the present invention provides a national secret detection method for financial equipment, which is applied to a detection scheduling server of a national secret detection system for financial equipment, and the method includes:

[0008] Obtain one or more test case information uploaded by the tester based on the human-computer interaction module;

[0009] Parsing the one or more test case information to obtain a detection interface instruction combination corresponding to each test case information, wherein the detection interface instruction combination includes one or more detection interface instructions;

[0010] According to the interface instruction combination, the input parameters corresponding to each detection interface instruction are respectively obtained from the database to generate a detection calling process, and the detection calling process is transmitted to the product scheduling server to be inspected, wherein the detection calling process is used to enable the product scheduling server to be inspected to obtain the input parameters corresponding to the financial device to be inspected from the database according to the detection calling process to generate a hardware detection instruction, send the hardware detection instruction to the financial device to be inspected to generate a detection result, and store it in the database;

[0011] The detection results are obtained from the database and transmitted to the human-computer interaction module, so that the human-computer interaction module renders the detection results to an interactive page.

[0012] The embodiment of the present invention obtains test case information, parses and generates instruction combinations, and generates a call process based on the instruction combinations. Since accurate instruction combinations are automatically generated according to each test case, the error of manual operation in generating instructions is reduced. The scheduling server and the server of the product to be tested are separated to avoid data leakage of both parties. The scheduling server is responsible for the overall test process of the financial equipment. When a new financial device is added, it can be adjusted on the scheduling server side to avoid the situation in which large-scale national security testing cannot be performed due to the separate semi-automatic design for each device in the prior art. The results are extracted and displayed on the front end through automated database query and other technologies to ensure that all data are correctly and timely displayed on the interactive page. It is displayed almost as it is tested, avoiding the omission of manual operation steps or the inconsistency of test items. All test tasks are processed centrally, further improving the efficiency of the national security testing process for financial equipment.

[0013] In an optional implementation, the detection interface instruction includes target task identification information and identification information of the financial device to be detected; the input parameters corresponding to the detection interface instruction include at least: test template identification information and test case function;

[0014] The step of acquiring input parameters corresponding to each detection interface instruction from the database according to the interface instruction combination to generate a detection call process specifically includes:

[0015] According to the target task identification information, searching the database for the corresponding test template identification information; wherein one target task identification information corresponds to one or more test template identification information;

[0016] Searching for one or more test case functions corresponding to the one or more test template identification information from a database;

[0017] A target detection calling process corresponding to the identification of the financial device to be detected is generated based on the identification information of the financial device to be detected and all the test case functions.

[0018] The embodiment of the present invention automatically obtains test templates and test case functions from the database according to the target task identification information. One target task identification can correspond to multiple test templates and test case functions, that is, all test items are summarized at one time, which automates the generation of the test process and reduces the errors caused by human operations. When new financial equipment or testing requirements appear, only the relevant information in the database needs to be updated, and the test process can be automatically generated without the need to modify the code separately, thereby improving the testing efficiency.

[0019] In an optional embodiment, the first type of operating status information is automatically generated in the process of generating a detection call process by obtaining the input parameters corresponding to each detection interface instruction from the database according to the interface instruction combination, and the first type of operating status information is used to record the generation information of the detection call process. The method also includes: storing the first type of operating status information in a database.

[0020] The embodiment of the present invention stores the first type of operating status information generated by the generated detection call process, which can still be displayed on the subsequent interactive page. The first type of operating status information can show the time of database query or interface call, helping testers to identify faults or parts that need to be optimized, thereby locating the code that needs maintenance and improving detection efficiency.

[0021] In an optional implementation, when the test template corresponding to the one or more test template identification information is a transaction simulation test, the method further includes:

[0022] Send the request message of the transaction simulation test to the simulation front-end module, so that the simulation front-end forwards the request message to the simulation back-end module, and obtains the request result parsed by the simulation back-end according to the request message, wherein the request message includes the request parameters of the online test or the offline test.

[0023] In an embodiment of the present invention, when transaction simulation tests are involved, by simulating the front-end and back-end, the tester does not need to rely on a real bank or payment platform, thereby performing safe transaction tests under the control of the scheduling server. The detection scheduling server sends the request message to the simulation front-end module and the simulation back-end module, and the scheduling server of the product to be tested is isolated from the above two modules, which has a higher level of security.

[0024] In a second aspect, the present invention provides a national secret detection method for financial equipment, which is applied to a product scheduling server for a national secret detection system for financial equipment, and the method includes:

[0025] According to the detection calling process, input parameters corresponding to the financial device to be detected are obtained from the database to generate hardware detection instructions;

[0026] The hardware detection instruction is sent to the financial device to be detected to generate a detection result, and the result is stored in the database.

[0027] In the embodiment of the present invention, the product scheduling server to be inspected obtains the input parameters corresponding to the financial device to be inspected from the database through the calling process transmitted by the inspection scheduling server to generate hardware inspection instructions, thereby generating all test instructions for a single financial device at one time, and sending them to the financial device to obtain the inspection results and then storing them in the database, isolating the financial device from the overall inspection scheduling server, which not only improves the inspection efficiency but also ensures the inspection safety.

[0028] In an optional embodiment, the second type of operating status information is automatically generated in the process of sending the hardware detection instruction to the financial device to be detected to generate the detection result and storing it in the database. The second type of operating status information is used to record the execution information of the hardware detection instruction. The method also includes: storing the second type of operating status information in the database.

[0029] The embodiment of the present invention stores the second type of operating status information when the detection results are generated, which can still be displayed on the subsequent interactive page. The second type of operating status information can show the actual hardware detection content obtained by database query, help testers identify financial equipment failures, and improve detection efficiency.

[0030] In a third aspect, the present invention provides a national secret detection method for financial equipment, which is applied to a human-computer interaction module of a national secret detection system for financial equipment, and the method includes:

[0031] Respond to one or more test case information uploaded by the tester and send it to the detection scheduling server, so that it executes the national secret detection method for financial equipment as described in the first aspect or any embodiment thereof to obtain the detection result;

[0032] The detection result is rendered to an interactive page.

[0033] In the embodiment of the present invention, since the human-computer interaction module can transmit test cases in a timely manner and display the test results on the interactive page in a timely manner, the effect of displaying results as the test progresses is almost achieved, delays or errors in human operations are avoided, and the smoothness of the test process is ensured, thereby improving the test efficiency.

[0034] In a fourth aspect, the present invention provides a national secret detection system for financial equipment, the system comprising: a detection scheduling server, a scheduling server for products to be inspected, a database, and a human-computer interaction module;

[0035] Among them, the detection scheduling server is used to obtain one or more test case information uploaded by the tester based on the human-computer interaction module; parse the one or more test case information to obtain the detection interface instruction combination corresponding to each test case information, and the detection interface instruction combination contains one or more detection interface instructions; obtain the input parameters corresponding to each detection interface instruction from the database according to the interface instruction combination to generate a detection call process, and transmit the detection call process to the scheduling server of the product to be tested; obtain the detection result from the database and transmit it to the human-computer interaction module;

[0036] The product scheduling server to be inspected is used to obtain input parameters corresponding to the financial device to be inspected from the database according to the inspection calling process to generate a hardware inspection instruction, send the hardware inspection instruction to the financial device to be inspected to generate a inspection result, and store it in the database;

[0037] The human-computer interaction module is used to obtain one or more test case information uploaded by the tester and send it to the detection scheduling server; and render the detection result to the interactive page.

[0038] In a fifth aspect, the present invention provides a computer device, comprising: a memory and a processor, the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the national security detection method for financial equipment of the above-mentioned first aspect, second aspect, third aspect or any corresponding embodiment thereof by executing the computer instructions.

[0039] In a sixth aspect, the present invention provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the national security detection method for financial equipment of the above-mentioned first aspect, second aspect, third aspect or any corresponding embodiment thereof.

[0040] In a seventh aspect, the present invention provides a computer program product, comprising computer instructions for causing a computer to execute the national security detection method for financial devices of the above-mentioned first aspect, second aspect, third aspect or any corresponding embodiment thereof. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0042] Figure 1is a first flow chart of a national secret detection method for financial equipment according to an embodiment of the present invention;

[0043] Figure 2 is a schematic diagram of a first human-computer interaction page of a national secret detection system for financial devices according to an embodiment of the present invention;

[0044] Figure 3 is a schematic diagram of a second human-computer interaction page of a national secret detection system for financial devices according to an embodiment of the present invention;

[0045] Figure 4 is a second flow chart of the national secret detection method for financial equipment according to an embodiment of the present invention;

[0046] Figure 5 is a schematic diagram of a third human-computer interaction page of a national secret detection method for financial equipment according to an embodiment of the present invention;

[0047] Figure 6 is a third flow chart of the national secret detection method for financial equipment according to an embodiment of the present invention;

[0048] Figure 7 is a timing diagram of a national secret detection system for financial equipment according to an embodiment of the present invention;

[0049] Figure 8 is a technical architecture diagram of a national secret detection system for financial equipment according to an embodiment of the present invention;

[0050] Fig. 9 is a schematic diagram of a fourth human-computer interaction page of a national secret detection system for financial devices according to an embodiment of the present invention;

[0051] Fig.10 is a schematic diagram of a fifth human-computer interaction page of a national secret detection system for financial devices according to an embodiment of the present invention;

[0052] Fig.11 It is a schematic diagram of the hardware structure of a computer device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0053] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0054] The existing technology basically uses two types of tests for testing financial devices with national secret encryption functions. The first type requires the tester to manually operate the device. The specific process includes: the tester manually inputs the test data, obtains the encryption results of the device, and manually records these results. The manual testing method is time-consuming and labor-intensive, and the national secret detection has high requirements for the accuracy of the test results. Manual testing is prone to human omissions during the operation process, resulting in inaccurate test results.

[0055] Another method is to develop a semi-automatic detection system for testing, which automatically imports test data into the device under test through external equipment or software, reducing errors caused by manual input. However, this semi-automatic detection is only applicable to a single or a small number of device types, and the test scenario is relatively simple. The test cannot effectively respond to large-scale and complex test requirements. This is because the semi-automatic detection system is designed for specific devices or a small number of device types, and the test input parameters are only those corresponding to a single financial device. When other financial devices appear, the scalability is low. Since semi-automatic testing introduces manual operation, there will inevitably be human errors or inconsistencies between processes, which cannot meet the high accuracy standards of national security testing for test results.

[0056] A national secret detection method for financial equipment proposed in the present invention is applied to national secret detection scenarios for financial equipment, namely, large-scale testing and scenarios of multiple financial equipment types. All test requirements are directly obtained at one time through a human-computer interaction module, and a detection scheduling server generates a scheduling process. The scheduling server to be detected issues hardware test instructions according to the scheduling process, and the final result is displayed on a human-computer interaction page, thereby solving the technical problems of low efficiency and insufficient accuracy in large-scale and complex financial equipment detection in the prior art.

[0057] According to an embodiment of the present invention, an embodiment of a national security detection method for financial equipment is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0058] In this embodiment, a national secret detection method for financial equipment is provided, which is applied to the detection scheduling server. Figure 1 is a flow chart of a national secret detection method for financial equipment according to an embodiment of the present invention. Figure 1 As shown, the process includes the following steps:

[0059] Step S101, obtaining one or more test case information uploaded by the tester based on the human-computer interaction module.

[0060] It should be noted that national encryption detection refers to the detection process of encryption algorithms that comply with China's national encryption standards (such as SM2, SM3, SM4, etc.) The human-computer interaction module mainly receives and displays information through the interactive page.

[0061] Specifically, refer to Figure 2 , Figure 2 The interactive page of the human-computer interaction module, that is, the visual user interface, can be a desktop application or a web page. Testers can enter or upload test case information, such as the manufacturer being tested, the identification of the product being tested, the name of the product being tested, the type of product being tested, the test type, etc.

[0062] In an optional implementation manner, before obtaining one or more test case information uploaded by the tester based on the human-computer interaction module, the method further includes:

[0063] Obtain the application materials of the product to be tested submitted by the manufacturer through the management terminal, and send the application materials of the product to be tested to a third-party organization for review; if the review is passed, provide the manufacturer with a download link of the test tool.

[0064] Among them, the application materials for the product to be tested include the name of the tested unit, the name of the tested product, the version of the tested product, the testing scope of the tested product, equipment information, etc.; third-party institutions such as the National Security Bureau will conduct review.

[0065] It should be noted that the test tool is an application or device running locally on the manufacturer's tester, which is used to provide input test tasks to the test platform and to receive and view test results.

[0066] It is understandable that through the process of obtaining application materials for the products to be tested submitted by the manufacturers and conducting an audit, the legality of the tested products is ensured and the standardization of the entire testing process is improved.

[0067] Step S102, parsing one or more test case information to obtain a detection interface instruction combination corresponding to each test case information, wherein the detection interface instruction combination includes one or more detection interface instructions.

[0068] It should be noted that for a complete test case uploaded by the tester, multiple detection interface instructions need to be executed, so a set of related detection instruction combinations needs to be generated according to the content of the test case. Each detection interface instruction represents a specific operation test task for the financial device, such as an instruction for the correctness of the SM2 signature, or an instruction for the correctness of key authentication.

[0069] Specifically, the information in the test case is parsed into a specific instruction combination, the structure of the test case is parameter-identified, and based on the content of the test case, it is matched to the corresponding detection interface instruction.

[0070] In an optional implementation, before parsing one or more test case information to obtain a detection interface instruction combination corresponding to each test case information, the method further includes:

[0071] Establishing a TCP connection between the test tool and the test tool server to automatically download the test case information corresponding to the product to be tested;

[0072] The test sequence corresponding to the test case information is adjusted according to the current device type of the product to be tested, so as to subsequently obtain the input parameters corresponding to each detection interface instruction from the database according to the test sequence and interface instruction combination to generate a detection call process.

[0073] It should be noted that the test tool server refers to the middleware between the test tool and the detection scheduling server. For example, when a tester uploads a test case about ATM, the test tool server receives the case and distributes it to the detection scheduling server. It is understandable that the test tool establishes a connection with the server, automatically downloads test cases, obtains device information, and automatically adjusts the test sequence. The automation level is higher, manual operation steps are reduced, various interface types are intelligently matched, and the test sequence is automatically adjusted according to the device type, which optimizes the test process and improves test efficiency. At the same time, the rationality of the test process is guaranteed by automatically adjusting the test sequence.

[0074] Specifically, it includes: establishing a TCP connection between the test tool and the test tool server, and automatically downloading the test cases corresponding to the product to be tested; obtaining system device information, and automatically matching USB, wired network, wireless network, serial port, Bluetooth and other national secret devices to be tested according to the device information; automatically adjusting the test sequence of use cases according to the current device type, where the device types include at least automatic teller machines ATMs, encryption keyboards, POS machines, Internet terminals, etc., and the test sequence includes at least: functional testing first, performance testing second; key import detection first, encryption and decryption second; password detection function first, IC card detection second, etc.

[0075] Step S103, according to the interface instruction combination, the input parameters corresponding to each detection interface instruction are obtained from the database to generate a detection call process, and the detection call process is transmitted to the product scheduling server to be inspected, wherein the detection call process is used to enable the product scheduling server to be inspected to obtain the input parameters corresponding to the financial device to be inspected from the database according to the detection call process to generate a hardware detection instruction, send the hardware detection instruction to the financial device to be inspected to generate a detection result, and store it in the database.

[0076] It should be noted that financial equipment refers to financial products involved in transactions such as POS machines, ATMs, and password keyboards. Input parameters refer to parameter information related to the test instruction. For example, when the test instruction is a cryptographic algorithm correctness test, the identification parameter corresponding to the cryptographic algorithm correctness test is obtained. The identification parameter is used to continue to find the relevant test function information to generate the calling process of all test instructions.

[0077] Specifically, according to the test sequence in step S102, the parameters corresponding to each interface instruction are extracted from the database through SQL query or other database operation statements. The interface instructions and parameters are organized into a detection call flow, and the generation of the call flow can be realized by an automatic script or program. Finally, the generated call flow is transmitted to the scheduling server of the product to be tested.

[0078] It is understandable that the main task of the detection and scheduling server is to coordinate and schedule the national secret testing process for all financial devices. The server of the product to be tested is the control center of the financial device to be tested itself or directly related to it, and its main function is to issue specific hardware detection instructions. Therefore, the detection and scheduling server and the server of the product to be tested are two different modules in architecture. The reason why the server of the product to be tested is directly connected to the financial device and separated from the scheduling server is to protect the sensitive information of the financial device and avoid the scheduling server from directly contacting the device to be tested, so as to isolate both parties and ensure data security. On the other hand, due to the introduction of the detection and scheduling server to schedule the overall financial equipment and all the national secret testing requirements on the financial equipment, all tests can be performed at one time, thereby greatly reducing manual testing operations and improving testing efficiency.

[0079] If more different types of financial equipment to be inspected are to be added later, the dispatch server can independently adapt to various servers for products to be inspected, without having to redesign the semi-automatic system separately every time a new device is added.

[0080] Step S104, acquiring the detection result from the database and transmitting it to the human-computer interaction module, so that the human-computer interaction module renders the detection result to the interactive page.

[0081] Specifically, the test results are stored in a database, and a query language similar to SQL is used to extract the required test results. After the results are extracted from the database, the data is sent to the human-computer interaction module through an interface, and the test results are rendered in a web page or software interface. For example, refer to Figure 3 , Figure 3 This is another interactive page of the human-computer interaction module. The figure shows all the test results for the password keyboard debugging test, including the test items, template numbers, template names, case numbers, and test status, etc. It can also display all the test items and the number of test items in different states.

[0082] In an optional implementation, after obtaining the test results from the database and transmitting them to the human-computer interaction module, it also includes: sending the test results to the test tool server via TCP; the test tool server performs analysis and calculations based on the test result data to generate a test analysis report and a test report; if the test report is unqualified, it is prompted that the equipment needs to be improved and retested; if the test report is qualified, it is confirmed that the equipment meets the national security standards and is a compliant product.

[0083] It is understandable that sending the test results to the server and generating analysis reports and test reports realizes the automated analysis and report generation of the test results. It can ensure that testers can discover unqualified products in a timely manner and require rectification, making the entire national secret testing method more rigorous and efficient.

[0084] The embodiment of the present invention obtains test case information, parses and generates instruction combinations, and generates a call process based on the instruction combinations. Since accurate instruction combinations are automatically generated according to each test case, the error of manual operation in generating instructions is reduced. The scheduling server and the server of the product to be tested are separated to avoid data leakage of both parties. The scheduling server is responsible for the overall test process of the financial equipment. When a new financial device is added, it can be adjusted on the scheduling server side to avoid the separate semi-automatic design for each device in the prior art. The results are extracted and displayed on the front end through automated database query and other technologies. It is ensured that all data are correctly and timely displayed on the interactive page, and are displayed almost as they are tested, avoiding the omission of manual operation steps or the inconsistency of test items. All test tasks are processed centrally, further improving the efficiency of the national secret test process for financial equipment.

[0085] In this embodiment, a national secret detection method for financial equipment is provided, which is applied to the detection scheduling server. The process includes the following steps:

[0086] Step S201, obtain one or more test case information uploaded by the tester based on the human-computer interaction module. Figure 1 Step S101 of the illustrated embodiment will not be described in detail here.

[0087] Step S202: parse one or more test case information to obtain a detection interface instruction combination corresponding to each test case information, wherein the detection interface instruction combination includes one or more detection interface instructions. Figure 1 Step S102 of the illustrated embodiment will not be described in detail here.

[0088] Step S203, according to the interface instruction combination, the input parameters corresponding to each detection interface instruction are obtained from the database to generate a detection call process, and the detection call process is transmitted to the product scheduling server to be inspected, wherein the detection call process is used to enable the product scheduling server to be inspected to obtain the input parameters corresponding to the financial device to be inspected from the database according to the detection call process to generate a hardware detection instruction, send the hardware detection instruction to the financial device to be inspected to generate a detection result, and store it in the database.

[0089] The detection interface instruction includes target task identification information and identification information of the financial device to be detected; the input parameters corresponding to the detection interface instruction include at least: test template identification information and test case function;

[0090] Specifically, step S203 includes:

[0091] Step S2031, searching the database for the corresponding test template identification information according to the target task identification information; wherein one target task identification information corresponds to one or more test template identification information.

[0092] Exemplarily, the corresponding test template identification information is searched from the database according to the target task identification information. The multiple data information stored in the database of this embodiment can be stored in the same database table, wherein tasksId is respectively associated with the corresponding taskName (task name), and in another database table, tasksId is respectively associated with the corresponding templateId (test template identification information). Therefore, it is only necessary to obtain the target task identification information to obtain the corresponding task name and the corresponding test template identification information from the database.

[0093] Step S2032: searching a database for one or more test case functions corresponding to the one or more test template identification information.

[0094] Exemplarily, one or more test case functions corresponding to one or more test template identification information are searched from the database, and the templateId in the third database table is respectively associated with the corresponding templateFunction (test call function name). Therefore, you only need to obtain the test template identification information to get the corresponding test case function from the database.

[0095] Step S2033: Generate a target detection calling process corresponding to the identification of the financial device to be detected based on the identification information of the financial device to be detected and all test case functions.

[0096] Exemplarily, the specific process of step S2031 to step S2033 in this embodiment can be implemented by program code. The specific implementation principle is: obtain parameter data related to the test task from the database through multiple SQL query statements, and save the results to the local state manager. By dynamically constructing SQL query constants, obtain task data, test case data, test template data and template association information from the database respectively. After each query is successful, the program will save the data through local state management for subsequent use. The data includes basic task information, test cases associated with the task, a list of templates that meet the device type, and template association relationships. Finally, enter the detection call process to generate a corresponding test process for the financial device to be detected.

[0097] Step S204: Obtain the test results from the database and transmit them to the human-computer interaction module, so that the human-computer interaction module renders the test results to the interactive page. Figure 1 Step S104 of the illustrated embodiment will not be described in detail here.

[0098] The embodiment of the present invention automatically obtains test templates and test case functions from the database according to the target task identification information. One target task identification can correspond to multiple test templates and test case functions, that is, all test items are summarized at one time, which automates the generation of the test process and reduces the errors caused by human operations. When new financial equipment or testing requirements appear, only the relevant information in the database needs to be updated, and the test process can be automatically generated without the need to modify the code separately, thereby improving the testing efficiency.

[0099] In an optional embodiment, the first type of operating status information is automatically generated in the process of generating a detection call process by obtaining the input parameters corresponding to each detection interface instruction from the database according to the interface instruction combination. The first type of operating status information is used to record the generation information of the detection call process. The method also includes: storing the first type of operating status information in a database.

[0100] It is understandable that the first type of running status information may include timestamp, parameter acquisition process, interface instruction list, call process generation status, and tester information, etc., which are used to describe the process of generating a test process on the detection scheduling server side.

[0101] The embodiment of the present invention stores the first type of operating status information generated by the generated detection call process, which can still be displayed on the subsequent interactive page. The first type of operating status information can show the time of database query or interface call, helping testers to identify faults or parts that need to be optimized, thereby locating the code that needs maintenance and improving detection efficiency.

[0102] In an optional implementation, when the test template corresponding to one or more test template identification information is a transaction simulation test, the national secret detection method for financial equipment provided in this embodiment further includes:

[0103] Send the request message of the transaction simulation test to the simulation front-end module, so that the simulation front-end forwards the request message to the simulation back-end module to obtain the request result parsed by the simulation back-end based on the request message. The request message includes the request parameters for online testing or offline testing.

[0104] It should be noted that transaction simulation tests are used to verify the performance of financial equipment in a simulated real transaction environment. For example, financial equipment such as POS machines and ATMs need to simulate online or offline transactions to test whether the equipment can correctly handle each step of the transaction. The simulated front-end is a data forwarding center, and the simulated back-end module parses the transaction message and simulates the real back-end processing process based on the message content.

[0105] In real transactions, financial devices (such as POS machines) do not work independently, but are linked to multiple platforms such as bank backends and payment gateways. Therefore, when it comes to test scenarios that require transactions, they need to be implemented through simulation front-end and simulation back-end modules.

[0106] In an embodiment of the present invention, when transaction simulation tests are involved, by simulating the front-end and back-end, the tester does not need to rely on a real bank or payment platform, thereby performing safe transaction tests under the control of the scheduling server. The detection scheduling server sends the request message to the simulation front-end module and the simulation back-end module, and the scheduling server of the product to be tested is isolated from the above two modules, which has a higher level of security.

[0107] In this embodiment, a national secret detection method for financial equipment is provided, which is applied to a product dispatch server to be inspected. Figure 4 is a flow chart of a national secret detection method for financial equipment according to an embodiment of the present invention. Figure 4 As shown, the process includes the following steps:

[0108] Step S401: According to the detection calling process, input parameters corresponding to the financial device to be detected are obtained from the database to generate a hardware detection instruction.

[0109] Step S402: Send the hardware detection instruction to the financial device to be detected to generate the detection result, and store it in the database.

[0110] It should be noted that the hardware detection instruction can be sent to the financial device through USB port, serial port, network, Bluetooth, etc. The hardware detection instruction types of the national encryption test in the embodiment of the present invention include but are not limited to encryption algorithm correctness test, algorithm stability test, encryption performance test, online data verification test, offline data verification, SM2 certificate chain test, etc.

[0111] Exemplarily, when the hardware detection instruction type of the national encryption test is the correct test of the SM4 EBC encryption algorithm, the specific process of step S401 to step S402 in this embodiment can be implemented by program code, and the program code implementation principle is: (1) Get the input parameters and parse them, verify that the data inData and the result data expectedData are the input parameters passed in, including the key, initialization vector (IV) and plaintext data (plaintext) to be encrypted required for the encryption task to be tested. inData is parsed into inDataObj, which contains the input key (key), encryption vector (IV) and plaintext (plaintext) data: in the process of generating the hardware detection instruction, the HW_SM4_ImportKey function is first called to generate a hardware instruction for importing the key, importing the SM4 key into the financial device to be tested, and the hardware instruction has been issued to the device to be tested at this stage. (2) The code issues the SM4 CBC encryption instruction through the HW_SM4_EncryptCBC function, which passes the key, initialization vector (IV) and plaintext to the device for encryption. After the device executes the encryption instruction, the result is obtained through ref.readCString(buffer). (3) The test result is compared with the expected result (expectedDataObj.ciphertext). (4) The status information of the test result is recorded in the status information module using libLog.WriteLog, and the final result and status information will be stored in the database. (5) By parsing the JSON data returned by the device, the encryption result EncResult is obtained and compared with the expected encryption result ciphertext: if the results match, it means the test passed and the status information is stored; if they do not match, the test failed and it will also be recorded in the status information.

[0112] When the hardware detection instruction type of the national secret test is the SM2 signature verification algorithm correctness test, the specific process of step S401 to step S402 in this embodiment can still be implemented through program code, which will not be repeated here. The implementation principle of the program code is: (1) Parse the input data and parse inData into a JSON object. The object contains the input public key, private key, signature data, and signature ID. (2) Use the HW_SM2_ImportKeyPair function to pass the input public key and private key to the device. (3) Use HW_SM2_SetSignID to pass inDataObj.signatureId to the device as the signature ID. (4) Use the HW_SM2_SignVerify function to input signatureData (original data) and signatureResult (signature result) for signature verification operation.

[0113] In the embodiment of the present invention, the product scheduling server to be inspected obtains the input parameters corresponding to the financial device to be inspected from the database through the calling process transmitted by the inspection scheduling server to generate hardware inspection instructions, thereby generating all test instructions for a single financial device at one time, and sending them to the financial device to obtain the inspection results and then storing them in the database, isolating the financial device from the overall inspection scheduling server, which not only improves the inspection efficiency but also ensures the inspection safety.

[0114] In an optional implementation, a second type of operating status information is automatically generated during the process of sending a hardware detection instruction to a financial device to be detected to generate a detection result and storing it in a database. The second type of operating status information is used to record execution information of the hardware detection instruction. The method also includes: storing the second type of operating status information in a database.

[0115] For example, see Figure 5 When the hardware detection instruction is sent to the financial device to be detected to generate the detection result, the second type of operation status information includes information such as module name, thread, level date and content. Since the second type of operation status information has been stored in the database, the detection scheduling server can also obtain the second type of operation status information from the database and render it to the interactive page through the interactive module for the tester to view.

[0116] The embodiment of the present invention stores the second type of operating status information when the detection results are generated, which can still be displayed on the subsequent interactive page. The second type of operating status information can show the actual hardware detection content obtained by database query, help testers identify financial equipment failures, and improve detection efficiency.

[0117] This embodiment provides a national secret detection method for financial equipment, which is applied to the human-computer interaction module. Figure 6is a flow chart of a national secret detection method for financial equipment according to an embodiment of the present invention. Figure 6 As shown, the process includes the following steps:

[0118] Step S601, responding to one or more test case information uploaded by the tester, and sending it to the detection scheduling server, so that it executes a national secret detection method for financial equipment to obtain a detection result.

[0119] Step S602: Render the detection result to the interactive page.

[0120] In the embodiment of the present invention, since the human-computer interaction module can transmit test cases in a timely manner and display the test results on the interactive page in a timely manner, the effect of displaying results as the test progresses is almost achieved, delays or errors in human operations are avoided, and the smoothness of the test process is ensured, thereby improving the test efficiency.

[0121] In this embodiment, a national secret detection system for financial equipment is also provided, which is used to implement the above-mentioned embodiments and preferred implementation modes, and will not be repeated hereafter. As used below, the term "module" can be a combination of software and / or hardware that implements a predetermined function. Although the system described in the following embodiments is preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceivable.

[0122] This embodiment provides a national secret detection system for financial equipment, including: a detection scheduling server, a product scheduling server to be inspected, a database, and a human-computer interaction module;

[0123] Among them, the detection scheduling server is used to obtain one or more test case information uploaded by the tester based on the human-computer interaction module; parse one or more test case information to obtain the detection interface instruction combination corresponding to each test case information, and the detection interface instruction combination contains one or more detection interface instructions; obtain the input parameters corresponding to each detection interface instruction from the database according to the interface instruction combination to generate a detection call process, and transmit the detection call process to the scheduling server of the product to be tested; obtain the detection results from the database and transmit them to the human-computer interaction module;

[0124] The product dispatching server to be inspected is used to obtain the input parameters corresponding to the financial device to be inspected from the database according to the inspection calling process to generate a hardware inspection instruction, send the hardware inspection instruction to the financial device to be inspected to generate the inspection result, and store it in the database;

[0125] The human-computer interaction module is used to obtain one or more test case information uploaded by the tester and send it to the detection scheduling server; and render the detection results to the interactive page.

[0126] For example, refer to Figure 7 , the tester uploaded one or more test cases through the user interface (human-computer interaction module) of the national secret detection system. The detection scheduling server receives the test case information uploaded by the tester, parses these test cases, and generates the corresponding detection interface instruction combination. According to the interface instruction combination obtained by the analysis, the detection scheduling server obtains the input parameters required for each instruction from the database, generates a complete detection call process, and the detection scheduling server sends the generated call process to the product scheduling server to be tested. The product scheduling server to be tested is directly connected to the financial device. The product scheduling server to be tested obtains the corresponding hardware detection instructions and parameters from the database according to the received detection call process. After the financial device executes the detection instruction, it generates the corresponding detection result, and the product scheduling server to be tested stores the result in the database. The detection scheduling server extracts the detection results from the database and renders the detection results to the tester's interface through the human-computer interaction module. The entire process has a high degree of automation, which reduces the probability of errors in manual operations and improves detection efficiency.

[0127] The embodiment of the present invention provides a national secret detection system for financial equipment. By acquiring test case information, parsing and generating instruction combinations, and generating a call process based on the instruction combinations, the accurate instruction combinations are automatically generated according to each test case, which reduces the error of manual operation in generating instructions. The scheduling server and the server of the product to be tested are separated to avoid data leakage of both parties. The scheduling server is responsible for the overall test process of the financial equipment. When a new financial device is added, it can be adjusted on the scheduling server side to avoid the separate semi-automatic design for each device in the prior art. The results are extracted and displayed on the front end through automated database query and other technologies. It is ensured that all data are correctly and timely displayed on the interactive page, and are displayed almost as they are tested, avoiding the omission of manual operation steps or the inconsistency of test items. All test tasks are processed centrally, further improving the efficiency of the national secret test process for financial equipment.

[0128] In addition, it should be noted that the national secret detection system for financial equipment provided by the embodiment of the present invention is divided into an interaction layer, a core layer and a hardware layer in terms of technical architecture, which can be referred to in Figure 8 .

[0129] The interactive layer is developed based on web pages, and the core layer is developed based on C / C++. The client supports running on Mac, Windows and Linux systems.

[0130] The client's data storage uses a lightweight SQLite database to ensure the efficiency and simplicity of data recording and querying. SQLite is an extremely lightweight database. The size of the entire database is usually around a few hundred KB, which is very suitable for environments with limited resources. Developers can easily integrate SQLite into applications without significantly increasing the size of the application. Unlike traditional database management systems, SQLite is a zero-configuration database that does not require complex installation and configuration. You only need to integrate the SQLite library file into the application to start using it, which greatly improves development efficiency.

[0131] The hardware layer includes various financial devices to be inspected, such as POS machines, ATMs, password keyboards, and Internet terminals. By communicating with these hardware devices at the underlying level, the issuance of inspection instructions and the collection of inspection results are achieved.

[0132] In actual application, the human-computer interaction page can also display task execution information. Fig. 9 , the test case information is displayed on the left, and a manual operation button is set. When the test result is judged to have passed, the tester can analyze whether the case has really passed the test based on the status information displayed on the right, the expected results of the case, and the actual execution results, and click the manual analysis button to reduce the process of manual test operations. Only the machine analysis results need to be evaluated, saving time. The human-computer interaction page can also display the test result document, which can be referred to Fig.10 , and set a save button for testers to download.

[0133] The national secret detection system for financial equipment in this embodiment is presented in the form of functional units, where the units refer to ASIC (Application Specific Integrated Circuit) circuits, processors and memories that execute one or more software or fixed programs, and / or other devices that can provide the above functions.

[0134] The embodiment of the present invention also provides a computer device having the above Figure 7 The national secret detection system for financial equipment is shown.

[0135] See also Fig.11 , Fig.11 is a schematic diagram of the structure of a computer device provided by an optional embodiment of the present invention, such as Fig.11As shown, the computer device includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Various components are connected to each other using different buses for communication, and can be installed on a common mainboard or installed in other ways as needed. The processor can process the instructions executed in the computer device, including instructions stored in or on the memory to display the graphical information of the GUI on an external input / output device (such as, a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple computer devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Fig.11 A processor 10 is taken as an example.

[0136] The processor 10 may be a central processing unit, a network processor or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.

[0137] The memory 20 stores instructions executable by at least one processor 10, so that at least one processor 10 executes the method shown in the above embodiment.

[0138] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the computer device, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0139] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.

[0140] The computer device further comprises a communication interface 30 for the computer device to communicate with other devices or a communication network.

[0141] The embodiment of the present invention also provides a computer-readable storage medium. The method according to the embodiment of the present invention can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium through a network download, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state hard disk, etc.; further, the storage medium can also include a combination of the above types of memories. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0142] A part of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the existence of the computer program instruction in a computer-readable medium includes, but is not limited to, a source file, an executable file, an installation package file, etc., and accordingly, the way in which the computer program instruction is executed by the computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium accessible to the computer.

[0143] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the defined scope.

Claims

1. A national secret detection method for financial equipment, characterized in that: A detection scheduling server applied to a national secret detection system for financial equipment, the method comprising: Obtain one or more test case information uploaded by the tester based on the human-computer interaction module; Parsing the one or more test case information to obtain a detection interface instruction combination corresponding to each test case information, wherein the detection interface instruction combination includes one or more detection interface instructions; According to the interface instruction combination, the input parameters corresponding to each detection interface instruction are respectively obtained from the database to generate a detection calling process, and the detection calling process is transmitted to the product scheduling server to be inspected, wherein the detection calling process is used to enable the product scheduling server to be inspected to obtain the input parameters corresponding to the financial device to be inspected from the database according to the detection calling process to generate a hardware detection instruction, send the hardware detection instruction to the financial device to be inspected to generate a detection result, and store it in the database; The detection results are obtained from the database and transmitted to the human-computer interaction module, so that the human-computer interaction module renders the detection results to an interactive page.

2. The method according to claim 1, characterized in that The detection interface instruction includes target task identification information and identification information of the financial device to be detected; the input parameters corresponding to the detection interface instruction include at least: test template identification information and test case function; The step of acquiring input parameters corresponding to each detection interface instruction from the database according to the interface instruction combination to generate a detection call process specifically includes: According to the target task identification information, searching the database for the corresponding test template identification information; wherein one target task identification information corresponds to one or more test template identification information; Searching for one or more test case functions corresponding to the one or more test template identification information from a database; A target detection calling process corresponding to the identification of the financial device to be detected is generated based on the identification information of the financial device to be detected and all the test case functions.

3. The method according to claim 2, characterized in that The first type of operating status information is automatically generated in the process of generating a detection call process by obtaining the input parameters corresponding to each detection interface instruction from the database according to the interface instruction combination. The first type of operating status information is used to record the generation information of the detection call process. The method also includes: storing the first type of operating status information in a database.

4. The method according to claim 2, characterized in that: When the test template corresponding to the one or more test template identification information is a transaction simulation test, the method further includes: Send the request message of the transaction simulation test to the simulation front-end module, so that the simulation front-end forwards the request message to the simulation back-end module, and obtains the request result parsed by the simulation back-end according to the request message, wherein the request message includes the request parameters of the online test or the offline test.

5. A national secret detection method for financial equipment, characterized in that: A method for dispatching products to be inspected in a national secret inspection system for financial equipment includes: According to the detection calling process, input parameters corresponding to the financial device to be detected are obtained from the database to generate hardware detection instructions; The hardware detection instruction is sent to the financial device to be detected to generate a detection result, and the result is stored in the database.

6. The method according to claim 5, characterized in that The second type of operating status information is automatically generated in the process of sending the hardware detection instruction to the financial device to be detected to generate the detection result and storing it in the database. The second type of operating status information is used to record the execution information of the hardware detection instruction. The method also includes: storing the second type of operating status information in the database.

7. A national secret detection method for financial equipment, characterized in that: A human-computer interaction module applied to a national secret detection system for financial equipment, the method comprising: Respond to one or more test case information uploaded by the tester and send it to the detection scheduling server, so that it executes the national secret detection method for financial equipment according to any one of claims 1 to 4 to obtain the detection result; The detection result is rendered to an interactive page.

8. A national secret detection system for financial equipment, characterized in that: include: Inspection scheduling server, inspection product scheduling server, database, and human-computer interaction module; Among them, the detection scheduling server is used to obtain one or more test case information uploaded by the tester based on the human-computer interaction module; parse the one or more test case information to obtain the detection interface instruction combination corresponding to each test case information, and the detection interface instruction combination includes one or more detection interface instructions; obtain the input parameters corresponding to each detection interface instruction from the database according to the interface instruction combination to generate a detection call process, and transmit the detection call process to the scheduling server of the product to be tested; Acquire the detection results from the database and transmit them to the human-computer interaction module; The product scheduling server to be inspected is used to obtain input parameters corresponding to the financial device to be inspected from the database according to the inspection calling process to generate a hardware inspection instruction, send the hardware inspection instruction to the financial device to be inspected to generate a inspection result, and store it in the database; The human-computer interaction module is used to obtain one or more test case information uploaded by the tester and send it to the detection scheduling server; and render the detection result to the interactive page.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable the national security detection system for financial equipment to execute the national security detection method for financial equipment described in any one of claims 1-4 or 5-6 or 7.

10. A computer program product, characterized in that It includes computer instructions, which are used to enable a computer to execute the national secret detection method for financial equipment described in any one of claims 1-4 or 5-6 or 7.

Images