Data security synchronization method, device, system and equipment of multi-service system

Abstract

The invention belongs to the technical field of data synchronization, and discloses a data security synchronization method, device, system and equipment for a multi-service system, which can determine a service system needing to be synchronized based on label dimensions by labeling row-level service data in a database table, realize row-level granularity in the database table to synchronize data, and improve the synchronization efficiency. Specifically, when row-level service data in a database table needs to be synchronously updated, label information of the row-level service data is identified, a target service system bound with the label information is determined from multiple service systems, and an interface for calling the target service system and interface authentication information are read through interface configuration of the target service system. Compared with the mode of relying on a database table, the mode of using the row level with smaller granularity to update the synchronization data can improve the data synchronization efficiency and success rate.

Description

Technical Field

[0001] The present invention relates to the technical field of data synchronization, and in particular to a data security synchronization method, device, system, and equipment for a multi-service system. Background Art

[0002] With the development of the company's business, for precise management, it is necessary to refine the business, distinguish business domains through business scenarios, and each business domain needs to build its own business system to support the business. However, each business domain does not exist independently, and there is business interaction between different domains. With the increase in the business volume and business scenarios, an increasingly prominent problem has emerged. There is no unified and standardized master data for the interaction between different domains, the information flow between business systems is not smooth, the data interfaces cannot be connected, and there is a lack of overall management ability and a global organizational perspective. To solve this problem, it is necessary to build a unified data management system to uniformly manage the data commonly used by each business domain as the master data.

[0003] The uniformly managed master data needs to be synchronized to the business system. Currently, the common approach is to synchronize based on database tables through the database, such as OGG of Oracle or a self-developed database table synchronization program. These synchronization methods only support synchronization at the table level and cannot synchronize data at the row level within the table, resulting in low data synchronization efficiency. Moreover, relying on database tables, when the database table structure is adjusted, it may lead to data synchronization failures, which have limitations and result in a low data synchronization success rate. Summary of the Invention

[0004] Aiming at the above defects, the purpose of the present invention is to provide a data security synchronization method, device, system, and equipment for a multi-service system, which can synchronize data at the row level within the database table, thereby improving the data synchronization efficiency and success rate.

[0005] The first aspect of the present invention discloses a data security synchronization method for a multi-service system, including:

[0006] When the row-level business data in the database table needs to be synchronized and updated, identify the tag information of the row-level business data;

[0007] Determine the target business system bound to the tag information from multiple business systems;

[0008] Through the interface configuration of the target business system, read and call the interface of the target business system and the interface authentication information;

[0009] Synchronize the row-level business data to the target business system according to the interface and the interface authentication information.

[0010] In some embodiments, the method further includes:

[0011] When a subscription instruction for any tag information sent by any one of multiple service systems is received, mark the service system as the target service system bound to the tag information.

[0012] In some embodiments, synchronizing the row-level service data to the target service system according to the interface and the interface authentication information includes:

[0013] Randomly generate an original dynamic password with a fixed length;

[0014] Read the fixed code of the target service system through the registration configuration of the target service system;

[0015] Decrypt the fixed code to obtain a plaintext code;

[0016] Concatenate the original dynamic password and the plaintext code into a dynamic secret key;

[0017] Encrypt the row-level service data according to the dynamic secret key to obtain an encrypted message;

[0018] Encrypt the original dynamic password in the dynamic secret key to obtain an encrypted secret key;

[0019] According to the interface and the interface authentication information, send the encrypted secret key and the encrypted message to the target service system, so that the target service system decrypts the encrypted message according to the encrypted secret key to obtain a parsed message.

[0020] A second aspect of the present invention discloses a data security synchronization device for multiple service systems, including:

[0021] An identification unit, configured to identify the tag information of the row-level service data when the row-level service data in the database table needs to be synchronized and updated;

[0022] A determination unit, configured to determine a target service system bound to the tag information from multiple service systems;

[0023] A reading unit, configured to read and call the interface of the target service system and the interface authentication information through the interface configuration of the target service system;

[0024] A synchronization unit, configured to synchronize the row-level service data to the target service system according to the interface and the interface authentication information.

[0025] In some embodiments, the device further includes a subscription unit, configured to mark the service system as the target service system bound to the tag information when a subscription instruction for any tag information sent by any one of multiple service systems is received.

[0026] In some embodiments, the synchronization unit is specifically configured to randomly generate an original dynamic password of a fixed length, read the fixed code of the target service system through the registration configuration of the target service system; decrypt the fixed code to obtain a plaintext code; splice the original dynamic password and the plaintext code into a dynamic secret key; encrypt the row-level service data according to the dynamic secret key to obtain an encrypted message; encrypt the original dynamic password in the dynamic secret key to obtain an encrypted secret key; and send the encrypted secret key and the encrypted message to the target service system according to the interface and the interface authentication information, so that the target service system decrypts the encrypted message according to the encrypted secret key to obtain a parsed message.

[0027] The third aspect of the present invention discloses a data security synchronization system for a multi-service system, including a data management system and a plurality of service systems, and the plurality of service systems are all communicatively connected to the data management system;

[0028] The data management system is configured to, when the row-level service data in the database table needs to be synchronously updated, identify the tag information of the row-level service data; determine a target service system bound to the tag information from a plurality of service systems; and read and call the interface and the interface authentication information of the target service system through the interface configuration of the target service system; and synchronize the row-level service data to the target service system according to the interface and the interface authentication information.

[0029] In some embodiments, the manner in which the data management system synchronizes the row-level service data to the target service system according to the interface and the interface authentication information is specifically as follows:

[0030] The data management system is configured to randomly generate an original dynamic password of a fixed length, read the fixed code of the target service system through the registration configuration of the target service system; decrypt the fixed code to obtain a plaintext code; splice the original dynamic password and the plaintext code into a dynamic secret key; encrypt the row-level service data according to the dynamic secret key to obtain an encrypted message; encrypt the original dynamic password in the dynamic secret key to obtain an encrypted secret key; and send the encrypted secret key and the encrypted message to the target service system according to the interface and the interface authentication information;

[0031] And the target service system is configured to decrypt the encrypted message according to the encrypted secret key to obtain a parsed message.

[0032] In some embodiments, the target service system is specifically configured to, when receiving the encrypted secret key and the encrypted message, decrypt the fixed code of the system to obtain the plaintext code; determine the encrypted dynamic password from the encrypted secret key according to the plaintext code, and decrypt the encrypted dynamic password to obtain the original dynamic password; splice the original dynamic password and the plaintext code into a dynamic secret key, and decrypt the encrypted message according to the dynamic secret key to obtain the parsed message.

[0033] A fourth aspect of the present invention discloses a computer device, including a memory storing executable program code and a processor coupled to the memory; the processor calls the executable program code stored in the memory to execute the data security synchronization method of the multi-service system disclosed in the first aspect.

[0034] Compared with the prior art, the beneficial effect of the present invention is that by tagging the row-level service data in the database table, the service systems to be synchronized can be determined based on the tag dimension, and data synchronization can be achieved at the row-level granularity of the database table. Compared with relying on the database table and using a smaller granularity of row-level to update and synchronize data, the data synchronization efficiency and success rate can be improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following will briefly introduce the drawings required in the embodiments. The following described drawings only show some specific examples of the present invention and form a part of the specification together with the specific embodiments, and are used to explain the technical solutions, principles and effects of the present invention.

[0036] Unless otherwise specified or defined, in different drawings, the same reference numerals represent the same or similar technical features, and for the same or similar technical features, different reference numerals may also be used to represent them.

[0037] Figure 1 is a flowchart of a data security synchronization method for a multi-service system disclosed by the present invention;

[0038] Figure 2 is a structural schematic diagram of a data security synchronization device for a multi-service system disclosed by the present invention;

[0039] Figure 3 is a structural schematic diagram of a computer device disclosed by the present invention.

[0040] Description of Reference Numerals:

[0041] 201, identification unit; 202, determination unit; 203, reading unit; 204, synchronization unit; 301, memory; 302, processor. Detailed Implementation Modes

[0042] To facilitate the understanding of the present invention, the specific embodiments of the present invention will be described in more detail below with reference to the accompanying drawings of the specification. The described embodiments are only a part of the embodiments of the present invention, rather than all of the embodiments. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present invention without creative efforts shall fall within the scope of protection of the present invention.

[0043] Unless otherwise specified or defined, all technical and scientific terms used herein have the same meaning as commonly understood by those skilled in the technical field to which the present invention pertains. In the case of combining the technical solutions of the present invention with real-world scenarios, all technical and scientific terms used herein may also have meanings corresponding to the purpose of implementing the technical solutions of the present invention. The "first, second..." used herein is only for differentiating names and does not represent a specific quantity or order. The term "and / or" used herein includes any and all combinations of one or more of the related listed items.

[0044] It should be noted that the terms "include" and "have" and any variations thereof in the embodiments of the present invention are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device that includes a series of steps or units does not necessarily limit to those steps or units clearly listed, but may include other steps or units not clearly listed or inherent to these processes, methods, products, or devices.

[0045] Please refer to Figure 1 , an embodiment of the present invention discloses a data security synchronization method for a multi-service system. The execution subject of this method can be a computer device such as a computer, a laptop, a tablet computer, etc., or a data security synchronization device for a multi-service system embedded in a computer device. The present invention does not make any limitations in this regard. This method includes the following steps 110 to 140:

[0046] 110. When the row-level business data in the database table needs to be synchronously updated, identify the tag information of the row-level business data.

[0047] In the embodiments of the present invention, a tag system is established based on the row-level business data in the business data table, that is, for each row-level business data in the business data table, a corresponding tag is associated and stored, which is used to indicate the scope of the data, such as: marketing, basic. Therefore, the data synchronization granularity at the row level can be achieved. Exemplarily, the data management system manages 3 master data. Suppose they are employee, organization, and channel data. At the same time, 3 tags are established and related to the employee, organization, and channel data. It should be noted that the number of tags may be the same as or different from the number of master data. The same business system can subscribe to multiple different tags, and the same tag can be subscribed to by multiple different business systems.

[0048] Define the tags as shown in Table 1 below:

[0049] Table 1 Tag Definition Table

[0050] Label Identification Label Name Label Code 1 Marketing YX 2 Foundation JC 3 Channel QD

[0051] Create business data and apply tags as shown in Tables 2 and 3 below:

[0052] Table 2 Employee Data

[0053]

[0054]

[0055] Table 3 Organizational Data

[0056] Organization Identification Organization Name Organization Code Label 2001 Teng xx txxxxx Marketing (1) 2002 Bai xxxx bxxxxxx Foundation (2) 2003 A xxxxxx allxxxx Channel (3) 2004 Da xxxx dzzxxxxx Marketing (1)

[0057] In practical applications, if it is detected that there is row-level business data that needs to be synchronously updated, it can first be determined whether this row-level business data belongs to data modification or data addition. If it is data modification, directly locate the position of the original business data and obtain the labeled tag of the original business data as the tag information for identifying this row-level business data; if it is data addition, the row-level business data can be classified and predicted based on a machine learning model, and the tag information for this row-level business data can be identified according to the prediction result. Among them, the machine learning model can be trained based on pre-collected sample data and the labeled tags of the sample data.

[0058] 120. Determine the target business system bound to the tag information from multiple business systems.

[0059] In the embodiments of the present invention, the external system establishes a relationship with the tag by subscribing to the tag and configures the interface of the RESTful framework for receiving data. The data management system automatically pushes data to the business system according to the tag dimension. Among them, the RESTful framework refers to a general interface interaction method that uses HTTP POST (or GET) for data interaction, and both the request data and the response data are in JSON format (or XML).

[0060] Specifically, when receiving a subscription instruction for tag information sent by any business system among multiple business systems, the data management system marks this business system as the target business system bound to the tag information. For example, establish the relationship between the business system and the tag as shown in Table 4 below:

[0061] Table 4 Binding Relationship between Business System and Tag

[0062] Business System Label Marketing xxxxx (3001) Marketing (1) Marketing xxxxx (3001) Foundation (2)

[0063] Therefore, after identifying the tag information of the row-level business data that needs to be updated synchronously, the business systems that have subscribed to the tag information can be retrieved and determined as the target business systems.

[0064] 130. Read and call the interfaces of the target business system and the interface authentication information through the interface configuration of the target business system.

[0065] Among them, the interface authentication information of the business system includes an interface authentication identification number (Identity document, ID) and an authentication password. Exemplarily, when the data in the employee table changes, such as adding a new employee Zhang xx (1001), the system automatically identifies that the tag of this row of data is marketing (1). Through the relationship between the business system and the tag, it is clear that the target business system that requires data synchronization is marketing xxxxx (3001). Through the interface configuration of the target business system, read and call the interfaces of marketing xxxxx (3001) and the interface authentication ID and authentication password. Among them, the interface configuration of the business system is shown in Table 5 below:

[0066] Table 5 Interface Configuration Table of Marketing xxxxx (3001)

[0067] Business System Parameter Name Parameter Value Marketing xxxxx (3001) Authentication ID 45656 Marketing xxxxx (3001) Authentication Password jkjkdejkk Marketing xxxxx (3001) Employee Receiving Address http: / / ip:port / v / staff Marketing xxxxx (3001) Organization Receiving Address http: / / ip:port / v / org

[0068] 140. Synchronize the row-level business data to the target business system according to the interfaces and the interface authentication information.

[0069] Exemplarily, step 140 may include the following steps 1401 to 1407 not shown in the figure:

[0070] 1401. Randomly generate an original dynamic password with a fixed length.

[0071] Among them, the original dynamic password refers to a dynamic password with a fixed length dynamically generated according to a single business interaction, which is used once and becomes invalid after use, and is regenerated for the next business interaction. Specifically, a random string generation algorithm can be used to generate an original dynamic password with a fixed length, such as 8UkqlG.

[0072] 1402. Read the fixed code of the target business system through the registration configuration of the target business system.

[0073] Among them, the fixed code refers to a string with a fixed length, such as adcd, which does not change with the adjustment of the business scenario. Through the registration configuration of the target business system, the fixed codes of each business system can be read. For example, as shown in Table 6 below:

[0074] Table 6 Registration Configuration Table of Business System Marketing xxxxx (3001)

[0075] Business System Identification Business System Name Business System Code Fixed Code / Access Code 3001 Marketing xxxxx yxxxx ijkl9:;<

[0076] 1403. Decrypt the fixed code to obtain the plaintext code.

[0077] Among them, the fixed code of the business system is stored encrypted. Specifically, it is obtained by shifting the dynamic key 8 bits using the exclusive OR operation. Therefore, decryption is required. For example, decrypt the fixed code {ijkl9:;<} of the system marketing xxxxx(3001) (shift the dynamic key 8 bits using the exclusive OR operation) to obtain the plaintext code: abcd1234.

[0078] 1404. Concatenate the original dynamic password and the plaintext code to form a dynamic secret key.

[0079] Concatenate to form a complete dynamic secret key (dynamic password + fixed code): 8UkqlGabcd1234.

[0080] 1405. Encrypt the row-level business data according to the dynamic secret key to obtain an encrypted message.

[0081] For example, the row-level business data (i.e., the original message) is:

[0082] {

[0083] "certNum":"44010619900307095X",

[0084] "staffHrNbr":"1234567"

[0085] }

[0086] The encrypted message after encryption is:

[0087] "icfnzsb66 / rJkuCXO555ekttGZjJ38 / 2uzN8lmsfOHhB9372Zi9xolokKc9+3oaP q7+DEeppEZw=".

[0088] 1406. Encrypt the original dynamic password in the dynamic secret key to obtain an encrypted secret key.

[0089] A secret key refers to a secret information used to complete cryptographic applications such as encryption, decryption, and integrity verification. In symmetric cryptography (or key cryptography), the same key is used for encryption and decryption. Therefore, the key needs to be kept secret. Specifically, the original dynamic password (8UkqlG) in the dynamic secret key can be encrypted through an encryption algorithm (shift the dynamic key 8 bits using the exclusive OR operation) to obtain "0]cydO".

[0090] 1407. Send the encryption key and the encrypted message to the target business system according to the interface and the interface authentication information, so that the target business system decrypts the encrypted message according to the encryption key to obtain the parsed message.

[0091] Among them, when the target business system receives the encryption key and the encrypted message, it decrypts the encrypted message according to the encryption key to obtain the parsed message. Specifically, the target business system decrypts the fixed code of this system to obtain the plaintext code, determines the encrypted dynamic password from the encryption key according to the plaintext code, and decrypts the encrypted dynamic password to obtain the original dynamic password; concatenates the original dynamic password and the plaintext code into a dynamic key; decrypts the encrypted message according to the dynamic key to obtain the parsed message.

[0092] Exemplarily, the target business system obtains the fixed code {ijkl9:;<} of this system for decryption (performs an exclusive OR operation to shift the dynamic key by 8 bits), obtains the plaintext code "abcd1234", then determines the encrypted dynamic password "0]cydO" from the encryption key, decrypts it to obtain the original dynamic password "8UkqlG", and then concatenates it into a complete dynamic key (dynamic password + fixed code): 8UkqlGabcd1234; through a unified encryption and decryption algorithm, the encrypted message is parsed into the original message, the service data is processed, and the service data is stored.

[0093] In summary, by implementing the embodiments of the present invention, by establishing the system relationship between service data and tags, the data synchronization granularity at the row level dimension is realized, and at the same time, subscribing data to the service system according to the tag granularity is supported, and data is synchronized at the row level based on the established tag system; at the same time, the synchronized data is encrypted by a combination of dynamic password + fixed code encryption method to ensure the security of the data; at the same time, in order to improve the real-time performance and break the limitations of the database synchronization method, a data synchronization interface protocol is formulated through a general standard interface protocol (RESTful architecture), which does not rely on the database structure, uses a general interface protocol to dock with the service system, supports cross-language platform data synchronization, and realizes a secure data synchronization process; at the same time, through database configuration, quick docking with the service system for data synchronization is realized, the efficiency of docking with external systems is improved, immediate configuration takes effect immediately, and there is no need to restart the service, ensuring the coherence and stability of the service.

[0094] As Figure 2 shown, the embodiments of the present invention disclose a data security synchronization device for multiple service systems, including an identification unit 201, a determination unit 202, a reading unit 203, and a synchronization unit 204, where

[0095] The identification unit 201 is used to identify the tag information of the row-level service data when the row-level service data in the database table needs to be synchronized and updated;

[0096] A determination unit 202, configured to determine a target service system bound to tag information from multiple service systems;

[0097] A reading unit 203, configured to read an interface for invoking the target service system and interface authentication information through the interface configuration of the target service system;

[0098] A synchronization unit 204, configured to synchronize row-level service data to the target service system according to the interface and the interface authentication information.

[0099] In some embodiments, the data security synchronization device further includes a subscription unit (not shown), configured to mark a service system as a target service system bound to the tag information when receiving a subscription instruction for any tag information sent by any service system among multiple service systems.

[0100] In some embodiments, the synchronization unit 204 is specifically configured to randomly generate an original dynamic password with a fixed length, read a fixed code of the target service system through the registration configuration of the target service system; decrypt the fixed code to obtain a plaintext code; splice the original dynamic password and the plaintext code into a dynamic secret key; encrypt the row-level service data according to the dynamic secret key to obtain an encrypted message; encrypt the original dynamic password in the dynamic secret key to obtain an encrypted secret key; and send the encrypted secret key and the encrypted message to the target service system according to the interface and the interface authentication information, so that the target service system decrypts the encrypted message according to the encrypted secret key to obtain a parsed message.

[0101] As Figure 3 shown, an embodiment of the present invention discloses a computer device, including a memory 301 storing executable program code and a processor 302 coupled to the memory 301;

[0102] Wherein, the processor 302 invokes the executable program code stored in the memory 301 to execute the data security synchronization method for multiple service systems described in the above embodiments.

[0103] An embodiment of the present invention also discloses a computer-readable storage medium, which stores a computer program, wherein the computer program enables a computer to execute the data security synchronization method for multiple service systems described in the above embodiments.

[0104] An embodiment of the present invention discloses a data security synchronization system for multiple service systems, including a data management system and multiple service systems, and the multiple service systems are all communicatively connected to the data management system;

[0105] A data management system is used to identify the label information of row-level business data when the row-level business data in a database table needs to be synchronously updated; determine the target business system bound to the label information from multiple business systems; and read and call the interface of the target business system and the interface authentication information through the interface configuration of the target business system; and synchronize the row-level business data to the target business system according to the interface and the interface authentication information.

[0106] In some embodiments, the way that the data management system synchronizes the row-level business data to the target business system according to the interface and the interface authentication information is specifically as follows:

[0107] A data management system is used to randomly generate an original dynamic password with a fixed length, read the fixed code of the target business system through the registration configuration of the target business system; decrypt the fixed code to obtain a plaintext code; splice the original dynamic password and the plaintext code into a dynamic secret key; encrypt the row-level business data according to the dynamic secret key to obtain an encrypted message; encrypt the original dynamic password in the dynamic secret key to obtain an encrypted secret key; and send the encrypted secret key and the encrypted message to the target business system according to the interface and the interface authentication information.

[0108] And, the target business system is used to decrypt the encrypted message according to the encrypted secret key to obtain a parsed message.

[0109] In some embodiments, the target business system is specifically used to, when receiving the encrypted secret key and the encrypted message, decrypt the fixed code of the system itself to obtain a plaintext code; determine the encrypted dynamic password from the encrypted secret key according to the plaintext code, decrypt the encrypted dynamic password to obtain the original dynamic password; splice the original dynamic password and the plaintext code into a dynamic secret key, and decrypt the encrypted message according to the dynamic secret key to obtain a parsed message.

[0110] Those of ordinary skill in the art can understand that some or all of the steps in the various methods of the above embodiments can be completed by instructing relevant hardware through a program, and the program can be stored in a computer-readable storage medium. The storage medium includes read-only memory (ROM), random access memory (RAM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), one-time programmable read-only memory (OTPROM), electrically-erasable programmable read-only memory (EEPROM), compact disc read-only memory (CD-ROM), or other optical disc memories, magnetic disc memories, tape memories, or any other computer-readable medium that can be used to carry or store data.

[0111] The purpose of the above embodiments is to exemplarily reproduce and deduce the technical solutions of the present invention, and to completely describe the technical solutions, purposes, and effects of the present invention. The purpose is to enable the public to understand the disclosed content of the present invention more thoroughly and comprehensively, and it does not limit the protection scope of the present invention.

[0112] The above embodiments are not an exhaustive list based on the present invention. In addition, there may be multiple other embodiments not listed. Any substitution and improvement made on the basis of not violating the concept of the present invention fall within the protection scope of the present invention.

Claims

1. A data security synchronization method for a multi-service system, characterized in that, Including: When the row-level business data in the database table needs to be synchronously updated, identify the label information of the row-level business data; Determine the target business system bound to the label information from multiple business systems; Through the interface configuration of the target business system, read and call the interface of the target business system and the interface authentication information; According to the interface and the interface authentication information, synchronize the row-level business data to the target business system.

2. The data security synchronization method of the multi-service system according to claim 1, wherein, The method further includes: When receiving a subscription instruction for any label information sent by any business system among multiple business systems, mark this business system as the target business system bound to this label information.

3. The data security synchronization method of the multi-service system according to claim 1 or 2, characterized in that According to the interface and the interface authentication information, synchronizing the row-level business data to the target business system includes: Randomly generate an original dynamic password with a fixed length; Through the registration configuration of the target business system, read the fixed code of the target business system; Decrypt the fixed code to obtain the plaintext code; Concatenate the original dynamic password and the plaintext code into a dynamic secret key; Encrypt the row-level business data according to the dynamic secret key to obtain an encrypted message; Encrypt the original dynamic password in the dynamic secret key to obtain an encrypted secret key; According to the interface and the interface authentication information, send the encrypted secret key and the encrypted message to the target business system, so that the target business system decrypts the encrypted message according to the encrypted secret key to obtain a parsed message.

4. A data security synchronization device for a multi-service system, characterized in that, Including: An identification unit, configured to identify the label information of the row-level business data when the row-level business data in the database table needs to be synchronously updated; A determination unit, configured to determine the target business system bound to the label information from multiple business systems; A reading unit, configured to read and call the interface of the target business system and the interface authentication information through the interface configuration of the target business system; A synchronization unit, configured to synchronize the row-level business data to the target business system according to the interface and the interface authentication information.

5. The data security synchronization device of the multi-service system according to claim 4, characterized in that, The device further includes a subscription unit, configured to mark this business system as the target business system bound to this label information when receiving a subscription instruction for any label information sent by any business system among multiple business systems.

6. The data security synchronization device of the multi-service system according to claim 4 or 5, characterized in that The synchronization unit is specifically configured to randomly generate an original dynamic password with a fixed length, read the fixed code of the target business system through the registration configuration of the target business system; decrypt the fixed code to obtain the plaintext code; concatenate the original dynamic password and the plaintext code into a dynamic secret key; encrypt the row-level business data according to the dynamic secret key to obtain an encrypted message; Encrypt the original dynamic password in the dynamic secret key to obtain an encrypted secret key; According to the interface and the interface authentication information, send the encrypted secret key and the encrypted message to the target business system, so that the target business system decrypts the encrypted message according to the encrypted secret key to obtain a parsed message.

7. A data security synchronization system for a multi-service system, characterized in that, Including a data management system and multiple business systems, and multiple of the business systems are all communicatively connected to the data management system; The data management system is used to identify the tag information of the row-level business data when the row-level business data in the database table needs to be synchronously updated; determine the target business system bound to the tag information from multiple business systems; and read and call the interface and interface authentication information of the target business system through the interface configuration of the target business system. Synchronize the row-level business data to the target business system according to the interface and the interface authentication information.

8. The data security synchronization system of the multi-service system according to claim 7, characterized in that, The specific way for the data management system to synchronize the row-level business data to the target business system according to the interface and the interface authentication information is as follows: The data management system is used to randomly generate an original dynamic password with a fixed length, read the fixed code of the target business system through the registration configuration of the target business system; decrypt the fixed code to obtain the plaintext code; splice the original dynamic password and the plaintext code into a dynamic secret key; encrypt the row-level business data according to the dynamic secret key to obtain an encrypted message. Encrypt the original dynamic password in the dynamic secret key to obtain an encrypted secret key. Send the encrypted secret key and the encrypted message to the target business system according to the interface and the interface authentication information. And the target business system is used to decrypt the encrypted message according to the encrypted secret key to obtain a parsed message.

9. The data security synchronization system for multiple business systems according to claim 8, wherein The target business system is specifically used to decrypt the fixed code of the system itself to obtain the plaintext code when receiving the encrypted secret key and the encrypted message; determine the encrypted dynamic password from the encrypted secret key according to the plaintext code, decrypt the encrypted dynamic password to obtain the original dynamic password; splice the original dynamic password and the plaintext code into a dynamic secret key, and decrypt the encrypted message according to the dynamic secret key to obtain a parsed message.

10. A computer device, characterized in that, It includes a memory storing executable program code and a processor coupled to the memory; the processor calls the executable program code stored in the memory to execute the data security synchronization method for multiple business systems according to any one of claims 1 to 3.

Images