Method and device for processing business to be handled, storage medium and electronic equipment

Abstract

The invention discloses a method and a device for processing business to be handled, a storage medium and electronic equipment, and relates to the field of financial science and technology and information security. The method comprises the following steps: receiving first information of a target customer; the delegation information of the consignor and the target delegated person is obtained, and the delegation information at least comprises the information of the target delegated person, the target commission business of the consignor and the target time range corresponding to the target commission business; carrying out decryption processing on the entrustment information to obtain target entrustment information; performing identity verification on the target client according to the first information and the target delegation information to obtain a verification result; and processing the target commission business according to the verification result, the target commission business of the consignor and the target time range corresponding to the target commission business. The technical problem that in the prior art, a bank cannot distinguish whether the delegation content is the subjective willingness of a delegator or not, and consequently, when a client cannot arrive at the site in person, the transaction on behalf is limited is solved.

Description

Technical Field

[0001] The present application relates to the field of financial technology and information security, and specifically, to a method, device, storage medium and electronic device for processing agency services. Background Art

[0002] In traditional business handling, when customers are unable to be present in person due to various reasons such as business trips, time conflicts, etc., agency services have become a common and necessary service model. However, in the prior art, when banks handle agency services, they mainly rely on traditional methods such as written authorizations provided by customers or telephone confirmations to confirm the entrustment intentions. This model has obvious defects and security risks. In the past, banks may only confirm the identity of the entruster through simple password verification or telephone calls, but these verification methods are vulnerable to information leakage, password guessing or telephone fraud, and cannot ensure that the entrustment content is the true subjective intention of the entruster. In addition, due to the lack of effective identity authentication and willingness confirmation mechanisms, banks often limit the scope of agency services out of caution when handling sensitive businesses involving fund transactions, account management, etc., resulting in customers being unable to obtain comprehensive or timely services when they are in urgent need of help.

[0003] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention

[0004] The main purpose of this application is to provide a method, device, storage medium and electronic device for processing agency services, so as to at least solve the technical problem in the prior art that the bank is unable to distinguish whether the content of the entrustment is the subjective intention of the entruster, resulting in limited agency services when the customer is unable to be present in person.

[0005] In order to achieve the above-mentioned purpose, according to one aspect of the present application, a method for processing agency business is provided, including: receiving first information of a target customer, wherein the first information includes the identity information and business authorization scope of the target customer; obtaining entrustment information of a principal and a target entrustee, wherein the entrustment information is information encrypted based on an asymmetric encryption method, and the entrustment information at least includes the target entrustee information, the principal's target agency business, and the target time range corresponding to the target agency business; decrypting the entrustment information to obtain target entrustment information; authenticating the target customer based on the first information and the target entrustment information to obtain a verification result; processing the target agency business based on the verification result, the principal's target agency business, and the target time range corresponding to the target agency business.

[0006] Optionally, obtaining the entrustment information of the principal and the target entrustee includes: obtaining the second information of the principal, wherein the second information includes at least the identity information of the principal, the principal's agency business information, the identity information of the target entrustee and the business authorization scope; generating a set of keys according to an asymmetric encryption method, wherein the keys include a public key and a private key; generating first entrustment information according to the second information; and encrypting the first entrustment information according to the private key to obtain the entrustment information.

[0007] Optionally, before generating the first entrustment information based on the second information, the method for handling agency business also includes: when the correlation between the identity information of the target entrustee included in the second information and the identity information of the entruster is greater than a preset threshold, obtaining a first interface, wherein the first interface is used to query the relationship between the entruster and the target entrustee; when it is determined according to the first interface that the target entrustee and the entruster are relatives, adding an agency business type for the target entrustee.

[0008] Optionally, identity authentication of the target customer is performed according to the first information and the target entrustment information to obtain a verification result, including: when the identity information and business authorization scope of the target customer included in the first information are consistent with the target entrustee information in the target entrustment information, determining that the target customer is the target entrustee.

[0009] Optionally, the target agency business is processed according to the verification result, the target agency business of the entrusting party, and the target time range corresponding to the target agency business, including: when the target customer is the target entrustee, determining whether the time for the target entrustee to handle the business on behalf of the entrusting party is within the target time range; when the time for the target entrustee to handle the business on behalf of the entrusting party is within the target time range, processing the target agency business; when the time for the target entrustee to handle the business on behalf of the entrusting party is not within the target time range, prohibiting the target entrustee from handling the agency business.

[0010] Optionally, decrypting the delegation information to obtain target delegation information includes: decrypting the delegation information according to a public key to obtain first delegation information; and performing an integrity check on the first delegation information to obtain target delegation information.

[0011] Optionally, when the time for the target entrustee to handle the business on behalf of the client is within the target time range, after processing the target agency business, the method for handling the agency business further includes: sending the processing result and processing process information of the target entrustee handling the target agency business to the entruster.

[0012] In order to achieve the above-mentioned purpose, according to another aspect of the present application, there is also provided a processing device for agency business, including: a receiving unit, used to receive first information of a target customer, wherein the first information includes the identity information and business authorization scope of the target customer; an acquisition unit, used to obtain the entrustment information of the principal and the target entrustee, wherein the entrustment information is information encrypted based on an asymmetric encryption method, and the entrustment information at least includes the target entrustee information, the principal's target agency business and the target time range corresponding to the target agency business; a decryption unit, used to decrypt the entrustment information to obtain the target entrustment information; a verification unit, used to authenticate the identity of the target customer according to the first information and the target entrustment information to obtain a verification result; a processing unit, used to process the target agency business according to the verification result, the principal's target agency business and the target time range corresponding to the target agency business.

[0013] Optionally, the acquisition unit includes: a first acquisition subunit, a first generation subunit, a second generation subunit, and a first encryption subunit. The first acquisition subunit is used to acquire the second information of the principal, wherein the second information at least includes the identity information of the principal, the business information of the principal, the identity information of the target entrustee, and the business authorization scope; the first generation subunit is used to generate a set of keys according to an asymmetric encryption method, wherein the keys include a public key and a private key; the second generation subunit is used to generate the first entrustment information according to the second information; the first encryption subunit is used to encrypt the first entrustment information according to the private key to obtain the entrustment information.

[0014] Optionally, the processing device for handling services on behalf of others further includes: a first acquisition unit and a first processing unit. The first acquisition unit is used to acquire a first interface when the correlation between the identity information of the target trustee included in the second information and the identity information of the principal is greater than a preset threshold, wherein the first interface is used to query the relationship between the principal and the target trustee; the first processing unit is used to add a type of agency service for the target trustee when it is determined that the target trustee and the principal are relatives according to the first interface.

[0015] Optionally, the verification unit includes: a first determination subunit, configured to determine that the target customer is the target entrustee when the identity information and business authorization scope of the target customer included in the first information are consistent with the target entrustee information in the target entrustment information.

[0016] Optionally, the processing unit includes: a first judgment subunit, a first processing subunit, and a first prohibition subunit. The first judgment subunit is used to judge whether the time for the target entrustee to handle the service on behalf of the target client is within the target time range when the target client is the target entrustee; the first processing subunit is used to handle the target agency service if the time for the target entrustee to handle the service on behalf of the target entrustee is within the target time range; the first prohibition subunit is used to prohibit the target entrustee from handling the agency service if the time for the target entrustee to handle the service on behalf of the target entrustee is not within the target time range.

[0017] Optionally, the decryption unit includes: a first decryption subunit and a first checking subunit. The first decryption subunit is used to decrypt the delegation information according to the public key to obtain the first delegation information; the first checking subunit is used to perform integrity check on the first delegation information to obtain the target delegation information.

[0018] Optionally, the processing device for agency services further includes: a first sending unit, configured to send the processing result and processing process information of the target agency service processed by the target entrustee to the entruster.

[0019] According to another aspect of an embodiment of the present application, a computer-readable storage medium is also provided, the computer-readable storage medium including a stored executable program, wherein when the executable program runs, the device where the computer-readable storage medium is located is controlled to execute the above-mentioned method for processing agency business.

[0020] According to another aspect of an embodiment of the present application, there is also provided an electronic device, comprising: a memory storing an executable program; and a processor for running the program, wherein the above-mentioned method for processing agency services is executed when the program is running.

[0021] According to another aspect of the embodiment of the present application, a computer program product is also provided, including computer instructions, which implement the steps of the above-mentioned method for processing agency services when executed by a processor.

[0022] In the present application, firstly, the first information of the target customer is received, wherein the first information includes the identity information and the business authorization scope of the target customer. Secondly, the entrustment information of the principal and the target entrustee is obtained, wherein the entrustment information is information encrypted based on an asymmetric encryption method, and the entrustment information at least includes the target entrustee information, the principal's target agency business and the target time range corresponding to the target agency business. Then, the entrustment information is decrypted to obtain the target entrustment information. Then, the identity of the target customer is authenticated according to the first information and the target entrustment information to obtain the verification result. Finally, the target agency business is processed according to the verification result, the principal's target agency business and the target time range corresponding to the target agency business. That is, by combining automated identity verification with asymmetric encryption technology, the purpose of ensuring that the entrustment information is authentic and the business is handled according to the principal's wishes is achieved, thereby achieving the technical effect of improving the security and flexibility of agency business, and further solving the technical problem in the prior art that the bank cannot distinguish whether the entrustment content is the principal's subjective intention, resulting in the limitation of agency business when the customer is unable to be present in person. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] The drawings constituting a part of the present application are used to provide a further understanding of the present application. The illustrative embodiments and descriptions of the present application are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0024] Figure 1 A hardware structure block diagram of a computer terminal for implementing a method for processing agency services is shown;

[0025] Figure 2 It is a flowchart of an optional method for processing agency services according to an embodiment of the present application;

[0026] Figure 3 It is a schematic diagram of an optional binding of a trustee relationship between a trustor and a trustee who are not relatives according to an embodiment of the present application;

[0027] Figure 4 It is a schematic diagram of binding the entrustment relationship between a trustor and a trustee of an optional kinship relationship according to an embodiment of the present application;

[0028] Figure 5 is a schematic diagram of an optional processing device for handling services on behalf of others according to an embodiment of the present application;

[0029] Figure 6 It is a structural block diagram of an electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0030] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0031] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0032] It should be noted that the collected information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data for display, data for analysis, etc.) involved in this application are information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of relevant data are in compliance with relevant laws, regulations and standards, necessary confidentiality measures are taken, and public order and good customs are not violated, and corresponding operation entrances are provided for users to choose to authorize or refuse. For example, an interface is set up between this system and relevant users or institutions to provide users with corresponding operation entrances for users to choose to agree or refuse the results of automated decision-making; if the user chooses to refuse, the expert decision-making process will be entered.

[0033] Example 1

[0034] According to an embodiment of the present application, an embodiment of a method for processing agency business is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0035] It should be noted that an intelligent processing system can be used as the execution subject of the processing method for agency services in the embodiment of the present application. It is understandable that the processing method for agency services provided in the embodiment of the present application can also be executed by other systems or devices, and the embodiment of the present application does not specifically limit this.

[0036] The method embodiments provided in the present application may be executed in a mobile terminal, a computer terminal or a similar computing device. Figure 1 The hardware structure block diagram of a computer terminal (or mobile device) for implementing a method for processing agency services is shown. Figure 1 As shown, the computer terminal 10 (or mobile device) may include one or more (102a, 102b, ..., 102n are used to illustrate) processors 102 (the processor 102 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA), a memory 104 for storing data, and a transmission device 106 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of the BUS bus), a network interface, a power supply and / or a camera. It can be understood by those skilled in the art that Figure 1 The structure shown is only for illustration and does not limit the structure of the above electronic device. Figure 1 More or fewer components as shown, or with Figure 1 Different configurations shown.

[0037] It should be noted that the above-mentioned one or more processors 102 and / or other data processing circuits may generally be referred to as "data processing circuits" in this article. The data processing circuit may be embodied in whole or in part as software, hardware, firmware or any other combination. In addition, the data processing circuit may be a single independent processing module, or may be fully or partially integrated into any of the other components in the computer terminal 10 (or mobile device). As in the processing method for agency business involved in the embodiments of the present application, the data processing circuit serves as a processor control (e.g., selection of a variable resistor terminal path connected to an interface).

[0038] The memory 104 can be used to store software programs and modules of application software, such as the program instructions / data storage device corresponding to the processing method of the agency service in the embodiment of the present application. The processor 102 executes various functional applications and data processing by running the software programs and modules stored in the memory 104, that is, the processing method of the agency service is realized. The memory 104 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include a memory remotely arranged relative to the processor 102, and these remote memories may be connected to the computer terminal 10 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0039] The transmission device 106 is used to receive or send data via a network. The specific example of the above network may include a wireless network provided by a communication provider of the computer terminal 10. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device 106 can be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0040] The display may be, for example, a touch screen liquid crystal display (LCD) that enables a user to interact with a user interface of the computer terminal 10 (or mobile device).

[0041] Under the above operating environment, this application provides Figure 2 The processing method of agency business is shown. Figure 2 FIG. 1 is a flowchart of an optional method for processing agency services according to an embodiment of the present application. Figure 2 As shown, the method comprises the following steps:

[0042] Step S201, receiving first information of a target customer.

[0043] In step S201, the first information includes the identity information and service authorization scope of the target customer.

[0044] Optionally, the intelligent processing system receives the customer's identity information (such as ID number, mobile phone number, facial biometric information, etc.) and the business authorization scope (such as the type of business that can be handled, the range of amounts involved, the effective date of the authorization, etc.).

[0045] Step S202, obtaining the entrustment information of the entrustor and the target entrustee.

[0046] In step S202, the entrustment information is information encrypted based on an asymmetric encryption method, and the entrustment information at least includes information of the target entrustee, the target agency business of the entruster, and the target time range corresponding to the target agency business.

[0047] Optionally, the intelligent processing system obtains the entrustment information encrypted based on asymmetric encryption technology, and the entrustment information includes but is not limited to relevant information of the entrustee, the type of business to be handled, the amount range involved, specific business operation details and the effective time range of the entrustment.

[0048] Optionally, the target agency business is the specific banking business specified in the entrustment information, which the entrustee can perform on behalf of the entrustee, such as transfer, loan consultation, account details printing, etc.; the target time range is the business processing time range specified in the entrustment information, and the entrustee can only perform the business within this time range.

[0049] It should be noted that asymmetric encryption is a technology that uses different keys in the encryption and decryption process. It is based on mathematical theory and usually involves a pair of keys: a public key and a private key. The two keys are mathematically related, but one key cannot be calculated from the other. In asymmetric encryption, each user or entity will have a pair of keys. The public key can be widely distributed, while the private key must be kept strictly confidential and only retained by the holder. The public key and the private key cannot be derived from each other. The content encrypted by the public key cannot be reversely decrypted by the public key, but can only be decrypted by the private key. The content encrypted by the private key can also be decrypted only by the public key. Asymmetric encryption can also be used to create digital signatures to prove the source and integrity of information. The sender signs the information with his own private key, and the receiver can verify the authenticity of the signature using the sender's public key. If the information is tampered with during transmission, the signature verification will fail.

[0050] Optionally, public-private key encryption has two key advantages over simple password verification and biometric verification (for example, the client performs password verification or fingerprint verification remotely, or confirms through telephone communication): the first is the written form of the power of attorney, which is not only faster and more convenient (compared to telephone communication, etc.), but also traceable. The second is that through public-private key encryption, the reliability of the power of attorney can be traced, because only the client himself holds the private key, the generated content is irreversible and non-repudiation, and a set of public-private keys corresponds to a power of attorney agreement and a trustee, which can further ensure the security of the agency business compared to remote password verification and biometric verification.

[0051] Step S203, decrypt the entrustment information to obtain target entrustment information.

[0052] Optionally, the intelligent processing system decrypts the acquired delegation information to obtain target delegation information, wherein the target delegation information corresponds to the content in the delegation information.

[0053] Step S204: authenticate the identity of the target client according to the first information and the target entrustment information to obtain a verification result.

[0054] Optionally, the intelligent processing system performs identity authentication on the target customer according to the first information and the target entrustment information to identify whether the target customer is the entrustee in the entrustment information.

[0055] Step S205 , processing the target agency business according to the verification result, the client's target agency business, and the target time range corresponding to the target agency business.

[0056] Optionally, the intelligent processing system processes the target agency business according to the above verification result, the target agency business in the target entrustment information and the corresponding target time range.

[0057] It can be seen from the contents of steps S201 to S205 that in the present application, firstly, the first information of the target customer is received, wherein the first information includes the identity information and the business authorization scope of the target customer. Secondly, the entrustment information of the principal and the target entrustee is obtained, wherein the entrustment information is information encrypted based on asymmetric encryption technology, and the entrustment information at least includes the target entrustee information, the target agency business of the principal, and the target time range corresponding to the target agency business. Then, the entrustment information is decrypted to obtain the target entrustment information, and then the identity of the target customer is authenticated according to the first information and the target entrustment information to obtain the verification result. Finally, the target agency business is processed according to the verification result, the target agency business of the principal, and the target time range corresponding to the target agency business. That is, by combining automated identity verification with asymmetric encryption technology, the purpose of ensuring that the entrustment information is authentic and the business is handled according to the principal's wishes is achieved, thereby achieving the technical effect of improving the security and flexibility of agency business, and further solving the technical problem in the prior art that the bank cannot distinguish whether the entrustment content is the principal's subjective intention, resulting in the limitation of agency business when the customer is unable to be present in person.

[0058] In an optional embodiment, the intelligent processing system first obtains the second information of the principal, wherein the second information includes at least the identity information of the principal, the business information handled by the principal, the identity information of the target trustee and the business authorization scope, and then generates a set of keys according to an asymmetric encryption method, wherein the keys include a public key and a private key, and then generates the first entrustment information according to the second information, and finally encrypts the first entrustment information according to the private key to obtain the entrustment information.

[0059] Optionally, the principal and the agent need to bind the entrustment information before the agency business occurs, that is, confirm the identities and social relations of the two, the reason why the principal is acting on behalf of the agent, and the type and scope of the agency business, as well as the effective time period of the agency business. After completing the binding of the agency business relationship, the intelligent processing system will generate a set of asymmetric encrypted public and private keys, of which the public key is held by the bank, stored in the principal's personal data, and bound to the entrustment relationship, and the private key is known and held by the principal himself.

[0060] Optionally, in the user interface of the intelligent processing system, the principal will see a form to fill in the entrustment information, including the business type, amount range, operation details and validity period, etc. After completion, the system will automatically call the asymmetric encryption algorithm and use the principal's private key to encrypt the filled-in entrustment information (first entrustment information). The encryption process may involve digital signatures to further ensure the integrity and source of the information. Once the encryption is completed, the principal will receive a confirmation of the encrypted power of attorney (entrustment information) and can send it to the target entrustee. The entrustee carries the encrypted power of attorney and his own identity certificate to the target agency point (such as a bank branch). The bank confirms the identity and authorization scope of the entrustee by decrypting the power of attorney and verifying the information therein, and then performs the corresponding agency business.

[0061] Optionally, Figure 3 FIG. 1 is a schematic diagram of an optional binding of a trustee relationship between a trustee and a trustee who are not relatives according to an embodiment of the present application, such as Figure 3 As shown, when the principal is unable to handle the business in person due to objective factors, such as mobility problems, overlapping working hours (the business hours of the branch overlap with the working hours of the customer), inconvenience in work (business trip, remote location, etc.), etc., he needs to entrust others (the entrustee) to help handle the business. Before the entrustee handles the business on his behalf, the identity relationship between the principal and the entrustee needs to be bound. Taking a bank branch as an example, the principal and the entrustee need to go to the bank branch in advance to bind the entrustment relationship, sign a non-relative business entrustment agreement, and also include the reason for the principal to handle the business on his behalf, the type of the agency business, the time interval for the agency business to take effect, and other related information. After the entrustment relationship is bound, a set of keys will be generated. The private key can be used to encrypt the entrustment relationship and other related information, and the public key is saved by the bank branch. The bank can provide a power of attorney template for a variety of banking services, or provide a corresponding entrustment page in the mobile banking application. Fill in the power of attorney and encrypt it with the private key, and send it to the corresponding handling branch. The branch with the public key can decrypt and remotely verify the principal's business handling intention and the authenticity of the business content.

[0062] From the above content, it can be seen that the intelligent processing system uses asymmetric encryption to ensure the security of the entrusted information during transmission. Even if the information is intercepted, it cannot be decrypted without the corresponding private key, thus protecting the privacy and financial security of the principal. At the same time, since the entrusted information is encrypted using a private key, this provides clear proof of the source of the information, ensuring the authenticity of the power of attorney, and has an anti-repudiation function, so the principal cannot deny his or her entrustment behavior.

[0063] In an optional embodiment, the intelligent processing system obtains a first interface when the correlation between the identity information of the target trustee included in the second information and the identity information of the principal is greater than a preset threshold, wherein the first interface is used to query the relationship between the principal and the target trustee, and when it is determined according to the first interface that the target trustee and the principal are relatives, the type of agency business for the target trustee is added.

[0064] Optionally, the intelligent processing system introduces a mechanism for establishing a closer trust relationship between the principal and the target principal, especially when the two parties are related, and the types of business that can be handled on behalf of the target principal can be expanded to provide more comprehensive and personalized services.

[0065] Optionally, the intelligent processing system first obtains the second information of the principal, which includes the principal's identity information, agency business information, target trustee's identity information and business authorization scope. The system analyzes the correlation between the target trustee's identity information and the principal's identity information, for example, by calculating the matching degree of information such as name, date of birth, address, and telephone number. If the correlation exceeds a preset threshold, the system will consider that the two may have a kinship relationship. In the case where the correlation is greater than the preset threshold, the intelligent processing system will query the relationship between the principal and the target trustee through the first interface. The first interface can be an interface of a related database or an interface of other certification agencies for verifying the kinship relationship. For example, the system can query household registration information, marriage registration information or birth certificate to confirm the kinship relationship between the two parties. If the first interface is queried that the principal and the target trustee are indeed relatives, the system will increase the type of agency business for the target trustee. For example, a trustee under a non-relative relationship may only be able to handle certain basic inquiries or loss reporting services, while a trustee under a relative relationship may obtain a wider range of authorizations, including loan consultation, fund transfer, account management and other services.

[0066] Optionally, Figure 4 is a schematic diagram of an optional binding of the entrustment relationship between the entrustor and the entrustee of the kinship relationship according to an embodiment of the present application, such as Figure 4As shown, the principal and the agent who are relatives still need to go to a bank branch to bind the agency relationship and sign a family business agency agreement. Subsequently, the family relationship can be verified through the identity verification data interface, where the data interface is used to provide proof of kinship. When it is determined that a family relationship exists after verification, multiple types of agency business can be further added, the agency validity period can be extended, etc. After the binding relationship, a set of keys (private key and public key) will also be generated. The private key is kept by the principal, and the public key is kept at the target agency point (such as a bank). The private key is used by the principal to encrypt the information related to the bound agency relationship, and the public key is used by the agent to decrypt the information related to the bound agency relationship when the agent performs agency business.

[0067] From the above content, it can be seen that the confirmation of kinship adds an extra layer of security to the agency business, ensuring that important business entrustment is limited to closely connected individuals, reducing the risk of entrusting to untrusted third parties. At the same time, for principals and agents with kinship relationships, the intelligent processing system can provide a wider range of services.

[0068] In an optional embodiment, the intelligent processing system determines the target customer as the target delegate when the identity information and business authorization scope of the target customer included in the first information are consistent with the target delegate information in the target delegation information.

[0069] Optionally, to ensure that the target customer (i.e., the individual who actually arrives at the target agency to handle business) is the target entrustee specified in the target entrustment information, the intelligent processing system implements this confirmation process by comparing and verifying whether the identity information and business authorization scope provided by the target customer are consistent with the target entrustee information in the encrypted power of attorney.

[0070] Optionally, when the target customer arrives at the target agency to handle business, he / she provides the first information to the intelligent processing system, including identity information (such as ID number, name, photo, etc.) and business authorization scope (such as the type of business that can be handled, the amount range involved, the authorized time limit, etc.). The intelligent processing system extracts the encrypted power of attorney related to the target customer from the target agency system, decrypts it using the stored public key of the principal, and obtains the target entrustment information, which contains the detailed information of the target entrustee and the authorized business type and scope. The system compares and analyzes the first information of the target customer with the decrypted target entrustment information to verify whether the target customer is the target entrustee specified in the target entrustment information, and whether the target customer has the authorization to perform specific business. If the first information provided by the target customer is exactly the same as the target entrustee information in the target entrustment information, and the business authorization scope is also consistent, the intelligent processing system will determine that the target customer is a legitimate target entrustee and can handle the business according to the entrustment content.

[0071] For example, when the target customer arrives at a bank branch, he / she enters or scans his / her identity information and declares the scope of his / her business authorization through self-service equipment or teller operation. The system retrieves the encrypted power of attorney related to the target customer, decrypts it using the principal's public key stored in the bank, and obtains the target entrustment information. The system automatically compares the target customer's first information with the target entrustee information in the target entrustment information, checks whether the name, ID number, photo, etc. are consistent, and verifies whether the business authorization scope is consistent. If the information is consistent and the authorization scope is consistent, the system will send a confirmation signal to the bank staff to allow the target customer (i.e., the target entrustee) to handle the business.

[0072] From the above content, it can be seen that the intelligent processing system ensures that business processing is limited to the target entrustee who is clearly authorized, prevents unauthorized individuals from impersonating or tampering with the entrustment information, protects the asset security of the entrustor and the bank, and uses the intelligent processing system to automatically compare and verify the consistency of information, reducing the steps of manual review, speeding up the business processing process, and improving the efficiency of bank services. In addition, detailed records are left during the confirmation process of each business transaction, including the matching results of the first information provided by the target customer and the target entrustment information, providing traceable evidence for subsequent business audits and dispute resolution.

[0073] In an optional embodiment, when the target customer is the target trustee, the intelligent processing system determines whether the time for the target trustee to handle the business on behalf of the target trustee is within the target time range. If the time for the target trustee to handle the business on behalf of the target trustee is within the target time range, the target trustee is processed; if the time for the target trustee to handle the business on behalf of the target trustee is not within the target time range, the target trustee is prohibited from processing the business on behalf of the target trustee.

[0074] Optionally, the intelligent processing system not only confirms whether the target customer is the target entrustee, but also further checks whether the time when the target entrustee handles the business on behalf of the target entrustee is in line with the target time range specified in the entrustment letter. This mechanism ensures that the business agency behavior is only carried out within the validity period of the authorization, providing additional security for the entruster and the bank.

[0075] Optionally, the target customer arrives at the target agency point and provides the first information to the intelligent processing system, including identity information and business authorization scope. After the system confirms that the target customer is the target entrustee through the decrypted entrustment information, the system checks whether the current business processing time is within the target time range specified in the target entrustment information. This time range is usually specified by the entruster when the entrustment letter is generated to limit the validity period of the agency business. If the current agency time of the target entrustee is within the target time range, the intelligent processing system will allow the target entrustee to process the target agency business. If the business processing is allowed, the system will record the time of the business processing and other relevant information for subsequent audit and management. If the time is not within the authorized range, the system will prohibit the target entrustee from processing the business to ensure the compliance and security of the business operation.

[0076] From the above content, it can be seen that the intelligent processing system ensures that all agency services are executed within the specified time of the principal through the above method, avoiding potential risks and disputes caused by time expiration or early processing. By strictly controlling the time validity of the agency services, it prevents the principal from abusing the entrusted authority outside the authorized time, thereby protecting the asset security of the principal and the bank. In addition, the time verification results of each business processing are recorded, providing a detailed business processing timeline to facilitate subsequent audits and supervision.

[0077] In an optional embodiment, the intelligent processing system first decrypts the delegation information according to the public key to obtain the first delegation information, and then performs an integrity check on the first delegation information to obtain the target delegation information.

[0078] Optionally, after receiving the entrustment information encrypted by the principal using the private key, the intelligent processing system uses the stored public key to decrypt the encrypted entrustment information to obtain the first entrustment information, that is, the original entrustment content. The system performs an integrity check on the first entrustment information. This check can be achieved by calculating and comparing the hash value of the information (a digital summary of a fixed length, used to verify the integrity of the data). If the first entrustment information matches the hash value of the encrypted information before decryption, it is confirmed that the information has not been tampered with, and the first entrustment information is confirmed as the target entrustment information. After confirming the integrity and authenticity of the target entrustment information, the intelligent processing system allows the target entrustee to handle business in accordance with the business type and authorization scope specified in the target entrustment information.

[0079] From the above content, it can be seen that the intelligent processing system ensures the immutability of the entrusted information through asymmetric encryption and hash value verification. Even if the information is intercepted during transmission, the attacker cannot modify the information content without detection. At the same time, the integrity and authenticity verification of the entrusted information adds a layer of protection to the security of the agency business, ensuring that the business operation is based on the original intention of the client, avoiding potential fraud and security risks, and the intelligent processing system automatically performs decryption and integrity checks without manual intervention, which improves the efficiency of business processing and reduces the possibility of operational errors.

[0080] In an optional embodiment, the intelligent processing system sends the processing result and processing process information of the target agent's processing of the target agency business to the client.

[0081] Optionally, when the target entrustee uses the intelligent processing system to handle the target agency business, the operation is performed according to the authorization scope and business type in the target entrustment information. During the process of the target entrustee handling the business, the intelligent processing system records in detail the time, content, amount involved and other information of each operation to ensure that the entire process is traceable. Once the target agency business is processed, the intelligent processing system will automatically summarize the processing results and process information, and send this information to the entruster in a timely manner via email, text message, bank APP notification, etc., to ensure that the entruster can understand the latest progress and specific results of the business processing.

[0082] Optionally, when the target client completes the business processing, the system automatically captures the processing results and process information, including the business type, processing time, amount involved (if applicable), processing status (such as success, failure, or pending review), etc. The system selects the most appropriate communication method (email, SMS, APP notification, etc.) to send the processing results and process information based on preset rules and the client's preferences. For example, for businesses involving sensitive information, the system may send information via encrypted email or APP notification to ensure the security of the information. Before sending the information, the intelligent processing system may also format and summarize the information to ensure that the client can quickly understand the key information of the business processing, while retaining sufficient details for subsequent inquiries. After the system sends the information, it may also record the sending status and feedback on whether the client has read the information, so as to carry out subsequent communication management and customer service.

[0083] From the above content, it can be seen that the client can understand the progress and results of the target client's business processing in real time, which enhances the transparency of the entire agency process and improves the client's trust and satisfaction. The recording and feedback of process information provides the client with detailed evidence of business processing, which can be used for subsequent audits and dispute resolution, ensuring the security and compliance of business operations. At the same time, through instant communication means such as e-mail, text messages or bank APP notifications, the intelligent processing system can realize real-time information feedback, shorten the information transmission time between the client and the bank, and improve service efficiency.

[0084] Example 2

[0085] The embodiment of the present application also provides a processing device for agency services. It should be noted that the processing device for agency services in the embodiment of the present application can be used to execute the processing method for agency services provided in the embodiment of the present application. The processing device for agency services provided in the embodiment of the present application is introduced below.

[0086] According to an embodiment of the present application, a device for implementing the above-mentioned processing method for agency handling business is also provided. Figure 5 is a schematic diagram of an optional processing device for handling services on behalf of others according to an embodiment of the present application, such as Figure 5 As shown, the device includes: a receiving unit 501, an acquiring unit 502, a decryption unit 503, a verification unit 504, and a processing unit 505.

[0087] Optionally, the receiving unit 501 is used to receive first information of a target customer, wherein the first information includes the identity information and business authorization scope of the target customer; the obtaining unit 502 is used to obtain the entrustment information of the principal and the target entrustee, wherein the entrustment information is information encrypted based on an asymmetric encryption method, and the entrustment information at least includes the target entrustee information, the target agency business of the principal, and the target time range corresponding to the target agency business; the decryption unit 503 is used to decrypt the entrustment information to obtain the target entrustment information; the verification unit 504 is used to authenticate the identity of the target customer based on the first information and the target entrustment information to obtain a verification result; the processing unit 505 is used to process the target agency business based on the verification result, the target agency business of the principal, and the target time range corresponding to the target agency business.

[0088] Optionally, the acquisition unit 502 includes: a first acquisition subunit, a first generation subunit, a second generation subunit, and a first encryption subunit. The first acquisition subunit is used to acquire the second information of the principal, wherein the second information at least includes the identity information of the principal, the business information of the principal, the identity information of the target entrustee, and the business authorization scope; the first generation subunit is used to generate a set of keys according to an asymmetric encryption method, wherein the keys include a public key and a private key; the second generation subunit is used to generate the first entrustment information according to the second information; the first encryption subunit is used to encrypt the first entrustment information according to the private key to obtain the entrustment information.

[0089] Optionally, the processing device for handling services on behalf of others further includes: a first acquisition unit and a first processing unit. The first acquisition unit is used to acquire a first interface when the correlation between the identity information of the target trustee included in the second information and the identity information of the principal is greater than a preset threshold, wherein the first interface is used to query the relationship between the principal and the target trustee; the first processing unit is used to add a type of agency service for the target trustee when it is determined that the target trustee and the principal are relatives according to the first interface.

[0090] Optionally, the verification unit 504 includes: a first determination subunit, configured to determine that the target customer is the target delegate when the identity information and the business authorization scope of the target customer included in the first information are consistent with the target delegate information in the target delegation information.

[0091] Optionally, the processing unit 505 includes: a first judgment subunit, a first processing subunit, and a first prohibition subunit. The first judgment subunit is used to judge whether the time for the target entrustee to handle the service on behalf of the target client is within the target time range when the target client is the target entrustee; the first processing subunit is used to handle the target agency service if the time for the target entrustee to handle the service on behalf of the target entrustee is within the target time range; the first prohibition subunit is used to prohibit the target entrustee from handling the agency service if the time for the target entrustee to handle the service on behalf of the target entrustee is not within the target time range.

[0092] Optionally, the decryption unit 503 includes: a first decryption subunit and a first checking subunit. The first decryption subunit is used to decrypt the delegation information according to the public key to obtain the first delegation information; the first checking subunit is used to perform integrity check on the first delegation information to obtain the target delegation information.

[0093] Optionally, the processing device for agency services further includes: a first sending unit, configured to send the processing result and processing process information of the target agency service processed by the target entrustee to the entruster.

[0094] Example 3

[0095] An embodiment of the present application may provide an electronic device, Figure 6 is a structural block diagram of an electronic device according to an embodiment of the present application. Figure 6 As shown, the electronic device may include: one or more ( Figure 6 (only one is shown) processor 602, memory 604, storage controller, and peripheral interface, wherein the peripheral interface is connected to the radio frequency module, audio module and display.

[0096] Among them, the memory can be used to store software programs and modules, such as program instructions / modules corresponding to the methods and devices in the embodiments of the present application. The processor executes various functional applications and data processing by running the software programs and modules stored in the memory, that is, realizing the above-mentioned processing method for agency business. The memory may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory may further include a memory remotely arranged relative to the processor, and these remote memories may be connected to the terminal via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0097] The processor can call the information and application stored in the memory through the transmission device to perform the following steps: receive the first information of the target customer, wherein the first information includes the identity information and business authorization scope of the target customer; obtain the entrustment information of the principal and the target entrustee, wherein the entrustment information is information encrypted based on an asymmetric encryption method, and the entrustment information at least includes the target entrustee information, the principal's target agency business, and the target time range corresponding to the target agency business; decrypt the entrustment information to obtain the target entrustment information; authenticate the identity of the target customer based on the first information and the target entrustment information to obtain a verification result; process the target agency business based on the verification result, the principal's target agency business, and the target time range corresponding to the target agency business.

[0098] The processor can call the information and application stored in the memory through the transmission device to perform the following steps: obtain the second information of the principal, wherein the second information at least includes the identity information of the principal, the business information handled by the principal, the identity information of the target trustee and the business authorization scope; generate a set of keys according to the asymmetric encryption method, wherein the keys include a public key and a private key; generate the first entrustment information according to the second information; encrypt the first entrustment information according to the private key to obtain the entrustment information.

[0099] The processor can call the information and application stored in the memory through the transmission device to perform the following steps: when the correlation between the identity information of the target trustee included in the second information and the identity information of the principal is greater than a preset threshold, obtain the first interface, wherein the first interface is used to query the relationship between the principal and the target trustee; when it is determined according to the first interface that the target trustee and the principal are relatives, add the type of agency business for the target trustee.

[0100] The processor can call the information and application stored in the memory through the transmission device to perform the following steps: when the identity information and business authorization scope of the target customer included in the first information are consistent with the target entrustee information in the target entrustment information, determine the target customer as the target entrustee.

[0101] The processor can call the information and application stored in the memory through the transmission device to perform the following steps: when the target customer is the target entrustee, determine whether the time for the target entrustee to handle the business on behalf of the target entrustee is within the target time range; when the time for the target entrustee to handle the business on behalf of the target entrustee is within the target time range, process the target agency business; when the time for the target entrustee to handle the business on behalf of the target entrustee is not within the target time range, prohibit the target entrustee from handling the agency business.

[0102] The processor can call the information and application stored in the memory through the transmission device to perform the following steps: decrypt the delegation information according to the public key to obtain the first delegation information; perform integrity check on the first delegation information to obtain the target delegation information.

[0103] The processor can call the information and application program stored in the memory through the transmission device to execute the following steps: sending the processing result and processing process information of the target agent's processing of the target agent's business to the client.

[0104] It can be understood by those skilled in the art that Figure 6 The structure shown is for illustration only, and the electronic device may also be a smart phone (such as an Android phone, an iOS phone, etc.), a tablet computer, a PDA, a mobile Internet device (Mobile Internet Devices, MID), a PAD, or other terminal devices. Figure 6 The structure of the electronic device is not limited. Figure 6 More or fewer components (such as network interfaces, display devices, etc.) shown in, or having Figure 6 Different configurations shown.

[0105] A person of ordinary skill in the art can understand that all or part of the steps in the various methods of the above embodiments can be completed by instructing the hardware related to the terminal device through a program, and the program can be stored in a computer-readable storage medium, and the storage medium may include: a flash drive, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0106] Example 4

[0107] The embodiment of the present application further provides a storage medium. Optionally, in this embodiment, the storage medium can be used to store the program code executed by the processing method for agency service provided in the first embodiment.

[0108] Optionally, in this embodiment, the above storage medium may be located in any computer terminal in a computer terminal group in a computer network, or in any mobile terminal in a mobile terminal group.

[0109] The present application also provides a computer program product, which, when executed on a data processing device, is suitable for executing the program steps of the processing method for handling business on behalf of others.

[0110] The serial numbers of the above-mentioned embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0111] In the above embodiments of the present application, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.

[0112] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of the units can be a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0113] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0114] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0115] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, in essence, or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, disk or optical disk and other media that can store program codes.

[0116] The above is only a preferred implementation of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A method for processing agency services, characterized in that: include: Receiving first information of a target customer, wherein the first information includes identity information and service authorization scope of the target customer; Obtaining entrustment information of the entruster and the target entrustee, wherein the entrustment information is information encrypted based on an asymmetric encryption method, and the entrustment information at least includes the target entrustee information, the target agency business of the entruster, and the target time range corresponding to the target agency business; Decrypting the entrustment information to obtain target entrustment information; Performing identity authentication on the target client according to the first information and the target entrustment information to obtain a verification result; The target agency business is processed according to the verification result, the target agency business of the client, and the target time range corresponding to the target agency business.

2. The method for processing agency services according to claim 1, characterized in that: Obtain the entrustment information of the entrustor and the target entrustee, including: Acquire the second information of the client, wherein the second information at least includes the identity information of the client, the business information of the client, the identity information of the target client and the business authorization scope; Generate a set of keys according to the asymmetric encryption method, wherein the keys include a public key and a private key; generating first entrustment information according to the second information; The first entrustment information is encrypted according to the private key to obtain the entrustment information.

3. The method for processing agency services according to claim 2, characterized in that: Before generating the first entrustment information according to the second information, the method for processing the agency business further includes: When the correlation between the identity information of the target delegate included in the second information and the identity information of the delegator is greater than a preset threshold, obtaining a first interface, wherein the first interface is used to query the relationship between the delegator and the target delegate; In the case where it is determined according to the first interface that the target entrustee and the entrustor are relatives, an agency service type for the target entrustee is added.

4. The method for processing agency services according to claim 2, characterized in that: Performing identity authentication on the target client according to the first information and the target entrustment information to obtain a verification result, including: When the identity information and the business authorization scope of the target customer included in the first information are consistent with the target entrustee information in the target entrustment information, the target customer is determined to be the target entrustee.

5. The method for processing agency services according to claim 4, characterized in that: Processing the target agency business according to the verification result, the target agency business of the client, and the target time range corresponding to the target agency business includes: In the case where the target customer is the target entrustee, determining whether the time for the target entrustee to handle the matter on behalf of the target entrustee is within the target time range; If the time for the target client to handle the business on behalf of the client is within the target time range, processing the target agency business; When the time for the target entrustee to handle the business on behalf of the client is not within the target time range, the target entrustee is prohibited from handling the business on behalf of the client.

6. The method for processing agency services according to claim 2, characterized in that: Decrypt the entrustment information to obtain target entrustment information, including: Decrypting the entrustment information according to the public key to obtain first entrustment information; An integrity check is performed on the first delegation information to obtain the target delegation information.

7. The method for processing agency services according to claim 5, characterized in that: When the time for the target entrusted person to handle the business on behalf of the client is within the target time range, after processing the target entrusted business, the method for processing the entrusted business further includes: The processing result and processing process information of the target agent's processing of the target agency business are sent to the entruster.

8. A processing device for handling business on behalf of others, characterized in that: include: A receiving unit receives first information of a target customer, wherein the first information includes identity information and service authorization scope of the target customer; An acquisition unit is configured to acquire entrustment information of a principal and a target entrustee, wherein the entrustment information is information encrypted based on an asymmetric encryption method, and the entrustment information at least includes information of the target entrustee, the target agency business of the principal, and a target time range corresponding to the target agency business; A decryption unit, decrypting the entrustment information to obtain target entrustment information; A verification unit, performing identity verification on the target client according to the first information and the target entrustment information to obtain a verification result; The processing unit processes the target agency business according to the verification result, the target agency business of the client, and the target time range corresponding to the target agency business.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes a stored executable program, wherein when the executable program is run, the device where the computer-readable storage medium is located is controlled to execute the method for processing agency services as described in any one of claims 1 to 7.

10. An electronic device, characterized in that: include: A memory storing an executable program; A processor is used to run the program, wherein the program, when running, executes the method for processing agency services as described in any one of claims 1 to 7.

11. A computer program product comprising computer instructions, characterized in that: When the computer instructions are executed by the processor, the steps of the method for processing agency services described in any one of claims 1 to 7 are implemented.

Images