Method for realizing real-time issuing of coupon code without jump and general control agent equipment

Abstract

The invention discloses a method for realizing real-time issuing of coupon codes without jump and general control proxy equipment, the general control proxy equipment comprises an access unit, a logic unit and a data unit, the data unit is used for carrying out pre-association storage on a first user identifier and an encrypted second user identifier which have a corresponding relation; the first user identifier is used for identifying the identity of the user in the bank system; the second user identifier is used for identifying the identity of the user in the third-party platform; according to the method, on the basis of a general control agent device, a second user identifier can be properly protected in storage, transmission and use stages, and on the basis of preventing a plaintext from exposing privacy information of a user in a third-party platform, a coupon code issuing service platform generates a target coupon code according to coupon code attribute information; and the target coupon code is sent to the target third-party platform corresponding to the target second user identifier, so that multiple cross-application skipping and manual authorization are not needed, the operation path is shortened, and the user experience fluency is improved.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a method for issuing coupon codes in real time without jumps and a master control agent device. Background Art

[0002] In recent years, the integration and collaboration between banks and third-party payment platforms has deepened. For example, banks have purchased instant discount coupon codes from platforms like WeChat and Alipay, combined with advertising push and post-transaction lucky draws through their mobile banking apps, creating a closed-loop business cycle of "customer winnings → benefits distribution → payment verification."

[0003] However, after completing the transaction and lottery on the Palm Banking APP, customers need to jump across applications multiple times to complete the coupon code redemption and view the results. The process involves operations such as third-party authorization login (for example, the first jump: jump from the Palm Banking APP to the WeChat mini program, triggering the WeChat authorization login process (the customer must manually agree to the authorization), and completing the coupon code redemption within the mini program; the second jump: when returning to the Palm Banking APP from the WeChat mini program, the Palm Banking page needs to be reloaded to view the issuance results), resulting in a lengthy operation path and insufficiently smooth user experience. Summary of the Invention

[0004] In view of the above problems, this application provides a method and a master control agent device for issuing coupon codes in real time without jumping, so as to shorten the operation path and improve the user experience. The specific solution is as follows:

[0005] In a first aspect, the present application provides a method for implementing real-time coupon code issuance without redirection, based on a master control agent device, the master control agent device comprising: an access unit, a logic unit, and a data unit, the data unit being used to pre-associate and store a first user identifier and an encrypted second user identifier having a corresponding relationship; the first user identifier being used to identify the user in a bank system; the second user identifier being used to identify the user in a third-party platform; the method comprising:

[0006] The access unit performs access permission verification on the bank system in response to the request message from the bank system. If the bank system passes the access permission verification, the access unit sends the request message to the logic unit. The request message includes at least the target first user identifier and coupon code attribute information.

[0007] The logic unit sends a query request to the data unit in response to the request message after access processing; the query request at least includes the target first user identifier;

[0008] The data unit sends the encrypted target second user identifier corresponding to the target first user identifier to the logic unit in response to the query request;

[0009] The logic unit decrypts the encrypted target second user identifier to obtain the target second user identifier, and encrypts at least the coupon code attribute information and the target second user identifier and sends them to the coupon code issuance service platform, so that the coupon code issuance service platform generates a target coupon code according to the coupon code attribute information, and sends the target coupon code to the target third-party platform corresponding to the target second user identifier.

[0010] In a possible implementation, the data unit pre-associatively stores the first user identifier and the encrypted second user identifier that have a corresponding relationship, including:

[0011] The data unit sends a key generation request to the security hardware module of the general control agent device, where the key generation request includes the first user identifier, and the key generation request is used to enable the security hardware module to generate a to-be-used key corresponding to the first user identifier and an identifier of the to-be-used key;

[0012] The data unit receives the identifier of the key to be used returned by the security hardware module, and saves the corresponding relationship between the identifier of the key to be used and the first user identifier in an association table;

[0013] The data unit sends a first key acquisition request to the secure hardware module, where the first key acquisition request includes an identifier of the to-be-used key corresponding to the first user identifier, and the first key acquisition request is used to enable the secure hardware module to acquire the first to-be-used key based on the identifier of the to-be-used key corresponding to the first user identifier;

[0014] The data unit obtains the first key to be used returned by the security hardware module, encrypts the second user identifier corresponding to the first user identifier based on the first key to be used, and pre-associates and stores the first user identifier and the encrypted second user identifier.

[0015] In a possible implementation, the logic unit decrypts the encrypted target second user identifier to obtain the target second user identifier, including:

[0016] The logic unit receives the association relationship table sent by the data unit;

[0017] The logic unit sends a second key acquisition request to the secure hardware module, where the second key acquisition request includes an identifier of the to-be-used key corresponding to the target first user identifier, and the second key acquisition request is used to enable the secure hardware module to acquire the second to-be-used key based on the identifier of the to-be-used key corresponding to the target first user identifier;

[0018] The logic unit obtains the second key to be used returned by the security hardware module, and decrypts the encrypted target second user identifier corresponding to the target first user identifier based on the second key to be used to obtain the target second user identifier.

[0019] In a possible implementation, the banking system includes a mobile banking application; and the correspondence between the first user identifier and the second user identifier is pre-established in the following manner:

[0020] In response to a request input by a user to log in to the mobile banking application through a third-party platform, jump to the third-party platform and request the third-party platform to authorize obtaining a second user identifier;

[0021] Obtaining identity authentication information input by the user on a login interface of the mobile banking application, and obtaining a first user identifier based on the identity authentication information;

[0022] A correspondence relationship between the first user identifier and the second user identifier is established.

[0023] In one possible implementation, the banking system includes a mobile banking application;

[0024] The request message of the banking system is generated in the following way:

[0025] The mobile banking application generates a lottery interface based on the designated business operations completed by the user;

[0026] The mobile banking application generates a winning result in response to a lottery request triggered by the user on the lottery interface, and generates a request message according to the winning result.

[0027] In one possible implementation, the banking system includes a customer relationship management system;

[0028] The request message from the banking system includes:

[0029] The customer relationship management system screens at least one target user from a plurality of users according to a set strategy;

[0030] The customer relationship management system generates a request message for each target user in the at least one target user.

[0031] In a possible implementation, the method for issuing coupon codes in real time without redirection further includes:

[0032] The logic unit periodically generates batch query requests and sends the batch query requests to the corresponding third-party platform;

[0033] The logic unit receives a response message returned by the third-party platform, and updates the issuance status of the target coupon code based on the coupon code reception status in the response message.

[0034] In another aspect of the present application, a general control agent device is provided, comprising:

[0035] A data unit for pre-associating and storing a first user identifier and an encrypted second user identifier that have a corresponding relationship; the first user identifier is used to identify the user in the banking system; the second user identifier is used to identify the user in the third-party platform;

[0036] an access unit configured to perform access permission verification on the bank system in response to a request message from the bank system, and to send the request message to the logic unit if the bank system passes the access permission verification; the request message including at least a target first user identifier and coupon code attribute information;

[0037] The logic unit is configured to send a query request to the data unit in response to the request message after access processing; the query request at least includes the target first user identifier;

[0038] The data unit is further configured to send an encrypted target second user identifier corresponding to the target first user identifier to the logic unit in response to the query request;

[0039] The logic unit is also used to decrypt the encrypted target second user identifier to obtain the target second user identifier, and at least encrypt the coupon code attribute information and the target second user identifier and send them to the coupon code issuance service platform, so that the coupon code issuance service platform generates a target coupon code according to the coupon code attribute information, and sends the target coupon code to the target third-party platform corresponding to the target second user identifier.

[0040] In a possible implementation, the master control agent device further includes: a security hardware module;

[0041] The process of pre-association and storage of the first user identifier and the encrypted second user identifier having a corresponding relationship by the data unit specifically includes:

[0042] Sending a key generation request to the security hardware module of the master control agent device, wherein the key generation request includes the first user identifier, and the key generation request is used to enable the security hardware module to generate a to-be-used key corresponding to the first user identifier and an identifier of the to-be-used key;

[0043] receiving the identifier of the key to be used returned by the security hardware module, and storing the corresponding relationship between the identifier of the key to be used and the first user identifier in an association table;

[0044] Sending a first key acquisition request to the secure hardware module, where the first key acquisition request includes an identifier of the to-be-used key corresponding to the first user identifier, and the first key acquisition request is used to enable the secure hardware module to obtain the first to-be-used key based on the identifier of the to-be-used key corresponding to the first user identifier;

[0045] Obtain a first key to be used returned by the security hardware module, encrypt a second user identifier corresponding to the first user identifier based on the first key to be used, and pre-associate and store the first user identifier and the encrypted second user identifier.

[0046] In a possible implementation, the process of the logic unit decrypting the encrypted target second user identifier to obtain the target second user identifier specifically includes:

[0047] receiving the association relationship table sent by the data unit;

[0048] Sending a second key acquisition request to the secure hardware module, where the second key acquisition request includes an identifier of the to-be-used key corresponding to the target first user identifier, and the second key acquisition request is used to enable the secure hardware module to obtain the second to-be-used key based on the identifier of the to-be-used key corresponding to the target first user identifier;

[0049] A second key to be used returned by the security hardware module is obtained, and the encrypted target second user identifier corresponding to the target first user identifier is decrypted based on the second key to be used to obtain the target second user identifier.

[0050] In the present application, a master control agent device is provided, which includes: an access unit, a logic unit and a data unit. The data unit is used to pre-associate and store a first user identifier and an encrypted second user identifier with a corresponding relationship, thereby avoiding the plain text exposure of the user's privacy information on a third-party platform.

[0051] On this basis, the access unit verifies the access rights of the banking system. If the access rights verification is passed, the request message is sent to the logic unit, which can block the risk of illegal access.

[0052] The logic unit sends the query request to the data unit, and the data unit sends the encrypted target second user identifier to the logic unit, thereby ensuring the security of the target second user identifier during transmission.

[0053] Next, the logic unit decrypts the encrypted target second user identifier to obtain the target second user identifier, and encrypts the coupon code attribute information and the target second user identifier and sends them to the coupon code issuance service platform, which can ensure the security of the target second user identifier during the use stage.

[0054] The second user identifier can be properly protected during storage, transmission and use, avoiding explicit exposure of the user's privacy information on the third-party platform. The coupon code issuance service platform generates a target coupon code based on the coupon code attribute information, and sends the target coupon code to the target third-party platform corresponding to the target second user identifier. There is no need for multiple cross-application jumps and manual authorization, which shortens the operation path and improves the smoothness of the user experience.

[0055] In addition, the master control agent device acts as the agent for the bank system to connect with the third-party platform, which can shield the protocol differences between the platforms (such as WeChat / Alipay coupon code interface), reduce the coupling of the bank system and the subsequent maintenance costs. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] The above and other features, advantages, and aspects of the various embodiments of the present disclosure will become more apparent with reference to the following detailed description in conjunction with the accompanying drawings. Throughout the drawings, the same or similar reference numerals represent the same or similar elements. It should be understood that the drawings are schematic and that the originals and elements are not necessarily drawn to scale.

[0057] Figure 1 A flowchart of a method for issuing coupon codes in real time without redirection provided in Example 1 of the present application;

[0058] Figure 2 A flowchart of a method for issuing coupon codes in real time without redirection provided in Example 2 of the present application;

[0059] Figure 3 A flowchart of a method for issuing coupon codes in real time without redirection provided in Example 7 of the present application;

[0060] Figure 4 A schematic diagram of the structure of a master control agent device provided in this application;

[0061] Figure 5 A schematic diagram of the structure of a distribution system provided for this application. DETAILED DESCRIPTION

[0062] The following describes the embodiments of the present application in conjunction with the accompanying drawings. The terms used in the implementation methods of the present application are only used to explain the specific embodiments of the present application and are not intended to limit the present application.

[0063] The embodiments of the present application are described below in conjunction with the accompanying drawings. Those skilled in the art will appreciate that, with the development of technology and the emergence of new scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

[0064] The terms "first", "second" etc. in this application are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequential order. It should be understood that the terms used in this way can be interchangeable under appropriate circumstances, and this is merely a way of distinguishing the objects of identical properties when describing them in the embodiments of the present application. In addition, the terms "comprise" and "have" and any of their variations are intended to cover non-exclusive inclusions, so that the process, method, system, product or equipment comprising a series of units need not be limited to those units, but may include other units that are not clearly listed or inherent to these processes, methods, products or equipment.

[0065] In order to make the above-mentioned purposes, features and advantages of the present application more obvious and easy to understand, the present application is further described in detail below with reference to the accompanying drawings and specific implementation methods.

[0066] Reference Figure 1 , which is a flow chart of a method for implementing real-time issuance of coupon codes without jumps provided in Example 1 of the present application. The method can be based on a master control agent device, and the master control agent device can include: an access unit, a logic unit, and a data unit.

[0067] The master control agent device can be a dedicated hardware device independent of the server belonging to the banking system, or it can be a hardware device integrated into the server belonging to the banking system.

[0068] The access unit may include but is not limited to: a smart network card or an embedded processor.

[0069] Logic units may include, but are not limited to, microcontrollers (MCUs), FPGAs (Field Programmable Gate Arrays), or security processors (such as ARM TrustZone chips).

[0070] The data unit may include but is not limited to: an encrypted solid state drive (SSD), a ROM (read-only memory), or a Flash Memory (flash memory).

[0071] The data unit can be used to store authorized login information of the banking system and the third-party platform, contract binding information, etc. For example, it can be used to pre-associate and store a first user identifier and an encrypted second user identifier that have a corresponding relationship.

[0072] The data unit may be introduced into a cache database to pre-associate and store the first user identifier and the encrypted second user identifier that have a corresponding relationship.

[0073] The first user identifier may be used to identify the user in the banking system.

[0074] The second user identifier may be used to identify the user on a third-party platform.

[0075] like Figure 1 As shown, the method may include but is not limited to the following steps:

[0076] Step S101: The access unit responds to the request message from the bank system and verifies the access rights of the bank system. If the bank system passes the access rights verification, the access unit sends the request message to the logic unit; the request message includes at least the target first user identifier and coupon code attribute information.

[0077] In this embodiment, verifying access rights to the banking system may include at least one of the following:

[0078] Step S11: extract the signature value and the original message content from the request message, and decrypt the extracted signature value using the preset public key to obtain a first hash value; re-calculate the hash value of the original message content to obtain a second hash value; and determine whether the first hash value and the second hash value are consistent.

[0079] If they are consistent, it can be determined that the source of the request message is legitimate and has not been tampered with, and the bank system passes the access permission verification.

[0080] The signature of the request message can be obtained in the following manner: the bank system performs hash calculation on the request message and signs the hash value using a private key.

[0081] Step S12: Determine whether the IP source address of the request message is within the legal access range of the banking system.

[0082] If so, it can be determined that the banking system has passed the access permission verification.

[0083] In this embodiment, the master control agent device can connect to multiple channels, and the multiple channels can come from one bank system or from multiple bank systems.

[0084] The channel can be registered in the access unit to implement channel service registration and discovery (i.e., an implementation method of access control and authority control), so that the master control agent device can sense its existence.

[0085] When connecting to multiple channels, the access unit can perform flow control, for example, limiting the number or frequency of request messages per unit time to avoid overload or sudden traffic impact.

[0086] The target first user identifier may be an identifier of one of the target users among multiple users in the banking system.

[0087] The coupon code attribute information may include but is not limited to: coupon code category (such as discount coupon, full-reduction coupon, voucher, etc.) and batch number.

[0088] Of course, the request message may also include: a transaction serial number (which can be used to uniquely identify the request message) and a timestamp (which can indicate the time when the request message was initiated).

[0089] Step S102: The logic unit sends a query request to the data unit in response to the request message after access processing; the query request at least includes the target first user identifier.

[0090] Step S103: The data unit sends the encrypted target second user identifier corresponding to the target first user identifier to the logic unit in response to the query request.

[0091] In response to the query request, the data unit may query the encrypted second user identifier corresponding to the target first user identifier from the pre-associated and stored first user identifiers and the encrypted second user identifiers as the encrypted target second user identifier.

[0092] Step S104: The logic unit decrypts the encrypted target second user identifier to obtain the target second user identifier, and encrypts at least the coupon code attribute information and the target second user identifier and sends them to the coupon code issuance service platform, so that the coupon code issuance service platform generates a target coupon code according to the coupon code attribute information, and sends the target coupon code to the target third-party platform corresponding to the target second user identifier.

[0093] The logic unit may at least combine the coupon code attribute information and the target second user identifier into a communication message, and then may, but is not limited to, encrypt the communication message based on the SM4 encryption algorithm, and send the encrypted communication message to the coupon code issuance service platform. The coupon code issuance service platform may decrypt the encrypted communication message using a key consistent with the logic unit. The key generation method can be set as needed and is not limited in this application.

[0094] In this embodiment, the data unit is used to pre-associate and store the first user identifier and the encrypted second user identifier, which can avoid exposing the user's private information on the third-party platform in plain text.

[0095] On this basis, the access unit verifies the access rights of the banking system. If the access rights verification is passed, the request message is sent to the logic unit, which can block the risk of illegal access.

[0096] The logic unit sends the query request to the data unit, and the data unit sends the encrypted target second user identifier to the logic unit, thereby ensuring the security of the target second user identifier during transmission.

[0097] Next, the logic unit decrypts the encrypted target second user identifier to obtain the target second user identifier, and encrypts the coupon code attribute information and the target second user identifier and sends them to the coupon code issuance service platform, which can ensure the security of the target second user identifier during the use stage.

[0098] The second user identifier can be properly protected during storage, transmission and use, avoiding explicit exposure of the user's privacy information on the third-party platform. The coupon code issuance service platform generates a target coupon code based on the coupon code attribute information, and sends the target coupon code to the target third-party platform corresponding to the target second user identifier. There is no need for multiple cross-application jumps and manual authorization, which shortens the operation path and improves the smoothness of the user experience.

[0099] In addition, the master control agent device acts as the agent for the bank system to connect with the third-party platform, which can shield the protocol differences between the platforms (such as WeChat / Alipay coupon code interface), reduce the coupling of the bank system and the subsequent maintenance costs.

[0100] As another optional embodiment of the present application, refer to Figure 2 , is a flow chart of a method for implementing real-time issuance of coupon codes without jumps provided in Example 2 of the present application. This embodiment is mainly an implementation method for pre-associating and storing the first user identifier and the encrypted second user identifier having a corresponding relationship in the data unit, such as Figure 2 As shown, it may include but not be limited to:

[0101] Step S21: The data unit sends a key generation request to the security hardware module of the master control agent device, where the key generation request includes the first user identifier. The key generation request is used to enable the security hardware module to generate a to-be-used key corresponding to the first user identifier and an identifier of the to-be-used key.

[0102] The security hardware module of the master control agent device can be a chip with an encryption engine. This chip can generate a key based on an encryption algorithm. For example, the security hardware module of the master control agent device can be an LA1 chip or an LA3 chip. The LA1 chip can generate a key based on the SHA (Secure Hash Algorithm) (key length can be 256 bits); alternatively, the LA1 chip can generate a key based on AES (key length can be 128 bits); alternatively, the LA1 chip can generate a key based on RSA (key length can be 2048 bits).

[0103] The LA3 chip can generate keys for use based on SHA-1, SHA-224, SHA-256, SHA-384, or SHA-512 (the key length can be 160 bits, 224 bits, 256 bits, 384 bits, or 512 bits, respectively); or, the LA3 chip can generate keys for use based on AES (the key length can be 128 bits, 192 bits, or 256 bits); or, the LA3 chip can generate keys for use based on RSA (the key length can be 1024 bits, 2048 bits, 3072 bits, or 4096 bits); or, the LA3 chip can generate keys for use based on ECC (the key length can be 192 bits or 256 bits).

[0104] The identifier of the key to be used may be used to indicate the storage location of the key to be used in the secure storage module.

[0105] Step S22: The data unit receives the identifier of the key to be used returned by the security hardware module, and saves the corresponding relationship between the identifier of the key to be used and the first user identifier in an association table.

[0106] Step S23: The data unit sends a first key acquisition request to the security hardware module, where the first key acquisition request includes an identifier of the key to be used corresponding to the first user identifier. The first key acquisition request is used to enable the security hardware module to obtain the first key to be used based on the identifier of the key to be used corresponding to the first user identifier.

[0107] The data unit may obtain the identifier of the key to be used corresponding to the first user identifier in the association relationship table, and further obtain the corresponding key to be used from the security hardware module based on the identifier of the key to be used corresponding to the first user identifier.

[0108] Step S24: The data unit obtains the first key to be used returned by the security hardware module, encrypts the second user identifier corresponding to the first user identifier based on the first key to be used, and pre-associates and stores the first user identifier and the encrypted second user identifier.

[0109] In this embodiment, by obtaining a to-be-used key from a security hardware module of the electronic device and encrypting the second user identifier corresponding to the first user identifier based on the to-be-used key at the hardware level of the security hardware module, the security of the second user identifier can be improved.

[0110] As another optional embodiment of the present application, a flowchart of a method for implementing real-time issuance of coupon codes without jumps provided in Example 3 of the present application is provided. This embodiment mainly decrypts the encrypted target second user identifier by the logic unit described in Example 2 to obtain an implementation method of the target second user identifier, which may specifically include but is not limited to:

[0111] Step S31: The logic unit receives the association relationship table sent by the data unit.

[0112] The data unit sends the encrypted association relationship table to the logic unit, and the logic unit decrypts the encrypted association relationship table using the key negotiated with the data unit to obtain the association relationship table.

[0113] Step S32: The logic unit sends a second key acquisition request to the security hardware module, where the second key acquisition request includes an identifier of the key to be used corresponding to the target first user identifier. The second key acquisition request is used to enable the security hardware module to obtain the second key to be used based on the identifier of the key to be used corresponding to the target first user identifier.

[0114] The logic unit may search the association table for the identifier of the key to be used corresponding to the target first user identifier, and after finding the identifier, may send a second key acquisition request to the secure hardware module.

[0115] Step S33: The logic unit obtains the second key to be used returned by the security hardware module, and decrypts the encrypted target second user identifier corresponding to the target first user identifier based on the second key to be used to obtain the target second user identifier.

[0116] In this embodiment, the target second user identifier corresponding to the target first user identifier is encrypted based on the to-be-used key at the hardware level of the security hardware module, and the logic unit needs to be decrypted by the to-be-used key at the security hardware module level, which can effectively avoid the risk of leakage of the to-be-used key, and thus ensure the risk of leakage of the target second user identifier.

[0117] As another optional embodiment of the present application, a flowchart of a method for implementing real-time issuance of coupon codes without jumps provided in Example 4 of the present application is provided. In this embodiment, the banking system may include a mobile banking application. This embodiment is mainly an implementation method for pre-establishing the correspondence between the first user identifier and the second user identifier in Example 1, which may include but is not limited to:

[0118] Step S41: In response to a request input by a user to log in to the mobile banking application through a third-party platform, the process jumps to the third-party platform and requests the third-party platform to authorize obtaining a second user identifier.

[0119] In this embodiment, the user can choose to log in through a third-party platform (such as WeChat) on the login interface of the mobile banking application.

[0120] When the user chooses to log in through a third-party platform, the mobile banking application can call the third-party platform's authorization interface to request the user's authorization to share the third-party platform's information (such as the second user ID). After the user confirms the authorization, the third-party platform can return the second user ID.

[0121] Step S42: obtaining the identity authentication information input by the user on the login interface of the mobile banking application, and obtaining a first user identifier based on the identity authentication information.

[0122] The identity verification information entered by the user can be set as needed and is not limited in this application. For example, the identity verification information may include but is not limited to: bank card password or SMS verification code or facial features.

[0123] Step S43: Construct a correspondence between the first user identifier and the second user identifier.

[0124] In this embodiment, the mobile banking login and the establishment of the correspondence between the first user identification and the second user identification can be completed simultaneously on the login interface, thereby simplifying the processing flow.

[0125] As another optional embodiment of the present application, a flowchart of a method for implementing real-time issuance of coupon codes without jumps provided in Example 5 of the present application is provided. In this embodiment, the bank system may include a mobile banking application. This embodiment is mainly an implementation method of the request message of the bank system in Example 1. The request message of the bank system can be generated, but is not limited to, in the following manner:

[0126] Step S51: The mobile banking application generates a lottery interface based on the designated business operations completed by the user.

[0127] Users can complete designated business operations on the mobile banking app (such as successful transfer, purchase of financial products, payment of bills, etc.), triggering the mobile banking app to pop up the lottery interface without jumping to a new page.

[0128] Step S52: The mobile banking application generates a winning result in response to the lottery request triggered by the user on the lottery interface, and generates a request message according to the winning result.

[0129] The mobile banking application may generate a winning result based on a random algorithm, and generate a request report containing at least the target first user identifier and coupon code attribute information according to the winning result.

[0130] In this embodiment, the user can actively participate in the lottery. In the scenario where the user actively participates in the lottery, based on the master control agent device to avoid exposing the user's privacy information in the third-party platform in plain text, the coupon code issuance service platform generates a target coupon code according to the coupon code attribute information, and sends the target coupon code to the target third-party platform corresponding to the target second user identifier, without the need for multiple cross-application jumps and manual authorization, shortening the operation path and improving the smoothness of user experience.

[0131] As another optional embodiment of the present application, a flowchart of a method for implementing real-time coupon code issuance without redirection provided in Example 6 of the present application is provided. In this embodiment, the bank system may include a customer relationship management system (DCRM). This embodiment is mainly an implementation method of the request message of the bank system in Example 1. The request message of the bank system can be generated, but is not limited to, in the following manner:

[0132] Step S61: The customer relationship management system selects at least one target user from multiple users according to a set strategy.

[0133] The setting strategy can be set as needed and is not limited in this application. For example, screening at least one target user from multiple users according to the setting strategy can include but is not limited to at least one of the following:

[0134] Step S611: Select users whose daily average assets under management (AUM) meet the requirements.

[0135] Step S612, attribute tag matching: Locate users whose geographical locations are close to the newly opened outlets.

[0136] Step S613: Select continuously active users.

[0137] Step S62: The customer relationship management system generates a request message for each target user in the at least one target user.

[0138] In this embodiment, the customer relationship management system screens at least one target user from multiple users according to a set strategy, and the customer relationship management system generates a request message for each target user of the at least one target user, so that coupon codes can be issued in batches based on the master control agent device without the user's perception.

[0139] As another optional embodiment of the present application, refer to Figure 3 , which is a flow chart of a method for issuing coupon codes in real time without jump provided in Example 7 of the present application, as shown Figure 3 As shown, the method may include but is not limited to the following steps:

[0140] Step S201: The access unit verifies the access rights of the bank system in response to the request message from the bank system. If the bank system passes the access rights verification, the access unit sends the request message to the logic unit; the request message includes at least the target first user identifier and coupon code attribute information.

[0141] Step S202: The logic unit sends a query request to the data unit in response to the request message after access processing; the query request at least includes the target first user identifier.

[0142] Step S203: The data unit sends the encrypted target second user identifier corresponding to the target first user identifier to the logic unit in response to the query request.

[0143] Step S204: the logic unit decrypts the encrypted target second user identifier to obtain the target second user identifier, and encrypts at least the coupon code attribute information and the target second user identifier and sends them to the coupon code issuance service platform, so that the coupon code issuance service platform generates a target coupon code according to the coupon code attribute information, and sends the target coupon code to the target third-party platform corresponding to the target second user identifier.

[0144] The detailed process of steps S201-S204 can be found in the relevant introduction of steps S101-S104 in Example 1, and will not be repeated here.

[0145] Step S205: The logic unit generates batch query requests at regular intervals and sends the batch query requests to the corresponding third-party platform.

[0146] Batch query requests can be used to query the receipt status of multiple target coupon codes, such as successful or failed receipt.

[0147] Step S206: The logic unit receives a response message returned by the third-party platform, and updates the issuance status of the target coupon code based on the coupon code reception status in the response message.

[0148] If the coupon code receiving status is received successfully, the target coupon code issuing status can be updated to issued successfully; if the coupon code receiving status is received failed, the target coupon code issuing status can be updated to issued successfully.

[0149] In this embodiment, after the user successfully obtains the target coupon code, he or she can choose to deduct the corresponding amount when paying with a bank card through a third-party platform. Therefore, the logic unit periodically generates batch query requests, sends the batch query requests to the corresponding third-party platform, and receives the response message returned by the third-party platform. The issuance status of the target coupon code is updated based on the coupon code reception status in the response message. The coupon code issuance status can be updated in a timely manner to avoid over-issuance or omission of coupon codes.

[0150] Next, the master control agent device provided by this application is introduced in detail. The master control agent device introduced below and the method for achieving real-time issuance of coupon codes without jumps introduced above can be referenced to each other.

[0151] Reference Figure 4 The master control agent device includes: an access unit 100, a logic unit 200 and a data unit 300.

[0152] The data unit 300 is used to store the authorized login information of the banking system and the third-party platform, the contract binding information, etc. Specifically, the first user identification and the encrypted second user identification having a corresponding relationship can be pre-associated and stored.

[0153] The first user identifier is used to identify the user in the banking system.

[0154] The second user identifier is used to identify the identity of the user on the third-party platform.

[0155] The access unit 100 is used to respond to the request message of the bank system and verify the access rights of the bank system (that is, an implementation method of access control and permission control). If the bank system passes the access right verification, the request message is sent to the logic unit 200; the request message includes at least the target first user identifier and coupon code attribute information.

[0156] In this embodiment, the master control agent device can connect to multiple channels. These channels can be from a single bank system or multiple bank systems. For example, channel 1 can be the mobile banking application of bank system A, channel 2 can be the customer relationship management system of bank system A, and channel 3 can be the mobile banking application of bank system B. Bank systems A and B are different.

[0157] The channel can be registered in the access unit 100 to implement service registration and discovery of the channel (ie, an implementation method of access control and authority control), so that the master control agent device can sense its existence.

[0158] When connecting to multiple channels, the access unit 100 can perform flow control, for example, limiting the number or frequency of request messages per unit time to avoid overload or sudden traffic impact.

[0159] The logic unit 200 is configured to send a query request to the data unit 300 in response to the request message after access processing (ie, an implementation method of invoking routing and data query); the query request at least includes the target first user identifier.

[0160] The data unit 300 is further configured to send the encrypted target second user identifier corresponding to the target first user identifier to the logic unit 200 in response to the query request.

[0161] The logic unit 200 is also used to decrypt the encrypted target second user identifier to obtain the target second user identifier, and at least encrypt the coupon code attribute information and the target second user identifier and send them to the coupon code issuance service platform, so that the coupon code issuance service platform generates a target coupon code according to the coupon code attribute information, and sends the target coupon code to the target third-party platform corresponding to the target second user identifier.

[0162] There can be multiple coupon code issuance service platforms, which can be selected as needed. For example, coupon code issuance service platform 1 can be selected from coupon code issuance service platforms 1 and 2 to generate the target coupon code.

[0163] In this embodiment, the master control agent device further includes: a security hardware module.

[0164] The process of pre-association and storage of the first user identifier and the encrypted second user identifier having a corresponding relationship by the data unit 300 specifically includes:

[0165] Sending a key generation request to the security hardware module of the master control agent device, wherein the key generation request includes the first user identifier, and the key generation request is used to enable the security hardware module to generate a to-be-used key corresponding to the first user identifier and an identifier of the to-be-used key;

[0166] receiving the identifier of the key to be used returned by the security hardware module, and storing the corresponding relationship between the identifier of the key to be used and the first user identifier in an association table;

[0167] Sending a first key acquisition request to the secure hardware module, where the first key acquisition request includes an identifier of the to-be-used key corresponding to the first user identifier, and the first key acquisition request is used to enable the secure hardware module to obtain the first to-be-used key based on the identifier of the to-be-used key corresponding to the first user identifier;

[0168] Obtain a first key to be used returned by the security hardware module, encrypt a second user identifier corresponding to the first user identifier based on the first key to be used, and pre-associate and store the first user identifier and the encrypted second user identifier.

[0169] The process of the logic unit 200 decrypting the encrypted target second user identifier to obtain the target second user identifier specifically includes:

[0170] Receiving the association relationship table sent by the data unit 300;

[0171] Sending a second key acquisition request to the secure hardware module, where the second key acquisition request includes an identifier of the to-be-used key corresponding to the target first user identifier, and the second key acquisition request is used to enable the secure hardware module to obtain the second to-be-used key based on the identifier of the to-be-used key corresponding to the target first user identifier;

[0172] A second key to be used returned by the security hardware module is obtained, and the encrypted target second user identifier corresponding to the target first user identifier is decrypted based on the second key to be used to obtain the target second user identifier.

[0173] The logic unit 200 may also be used to:

[0174] Generate batch query requests regularly and send the batch query requests to the corresponding third-party platform;

[0175] Receive a response message returned by the third-party platform, and update the issuance status of the target coupon code based on the coupon code reception status in the response message (ie, an implementation method of exception handling).

[0176] In another embodiment of the present application, a dispensing system is provided, such as Figure 5 As shown, the issuance system includes: a bank server 10 and a general control agent device 20.

[0177] The bank server 10 can be used to:

[0178] In response to a user request to log in to a mobile banking application (i.e., an implementation of a banking system) through a third-party platform, the user is redirected to the third-party platform and requested authorization from the third-party platform to obtain a second user identifier;

[0179] Obtaining identity authentication information input by the user on a login interface of the mobile banking application, and obtaining a first user identifier based on the identity authentication information;

[0180] A correspondence relationship between the first user identifier and the second user identifier is established.

[0181] In this embodiment, the bank server 10 can also be used to:

[0182] Generate a lucky draw interface based on the designated business operations completed by the user in the mobile banking application;

[0183] The mobile banking application generates a winning result in response to the lottery request triggered by the user on the lottery interface, and generates a request message according to the winning result.

[0184] In this embodiment, the bank server 10 can also be used to:

[0185] Screening at least one target user from a plurality of users according to a set strategy based on a customer relationship management system (i.e., an implementation of a banking system);

[0186] A request message is generated for each target user in the at least one target user based on the customer relationship management system.

[0187] It should also be noted that the device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separate, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed across multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the present embodiment. In addition, in the drawings of the device embodiments provided in this application, the connection relationship between the modules indicates that there is a communication connection between them, which can be specifically implemented as one or more communication buses or signal lines.

[0188] Through the description of the above embodiments, those skilled in the art can clearly understand that the present application can be implemented by means of software plus necessary general hardware, and of course can also be implemented by special hardware including application-specific integrated circuits, special CPUs, special memories, special components, etc. In general, all functions performed by computer programs can be easily implemented with corresponding hardware, and the specific hardware structures used to implement the same function can also be diverse, such as analog circuits, digital circuits or special circuits, etc. However, for the present application, software program implementation is a better implementation method in most cases. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art can be embodied in the form of a software product, which is stored in a readable storage medium, such as a computer's floppy disk, USB flash drive, mobile hard disk, ROM, RAM, magnetic disk or optical disk, etc., and includes a number of instructions to enable a computer device (which can be a personal computer, training equipment, or network equipment, etc.) to execute the methods described in each embodiment of the present application.

[0189] In the above embodiments, all or part of the embodiments may be implemented by software, hardware, firmware, or any combination thereof. When implemented by software, all or part of the embodiments may be implemented in the form of a computer program product.

[0190] The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from a website, a computer, a training device or a data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website, a computer, a training device or a data center. The computer-readable storage medium can be any available medium that a computer can store or a data storage device such as a training device, a data center, etc. that includes one or more available media integrations. The available medium can be a magnetic medium, (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid-state drive (SSD)).

Claims

1. A method for issuing coupon codes in real time without redirection, characterized in that: Based on a master control agent device, the master control agent device includes: an access unit, a logic unit, and a data unit, wherein the data unit is used to pre-associate and store a first user identifier and an encrypted second user identifier having a corresponding relationship; the first user identifier is used to identify the user's identity in the bank system; the second user identifier is used to identify the user's identity in the third-party platform; the method includes: The access unit performs access permission verification on the bank system in response to the request message from the bank system. If the bank system passes the access permission verification, the access unit sends the request message to the logic unit. The request message includes at least the target first user identifier and coupon code attribute information. The logic unit sends a query request to the data unit in response to the request message after access processing; the query request at least includes the target first user identifier; The data unit sends the encrypted target second user identifier corresponding to the target first user identifier to the logic unit in response to the query request; The logic unit decrypts the encrypted target second user identifier to obtain the target second user identifier, and encrypts at least the coupon code attribute information and the target second user identifier and sends them to the coupon code issuance service platform, so that the coupon code issuance service platform generates a target coupon code according to the coupon code attribute information, and sends the target coupon code to the target third-party platform corresponding to the target second user identifier.

2. The method for issuing coupon codes in real time without redirection according to claim 1, characterized in that: The data unit pre-associatively stores the first user identifier and the encrypted second user identifier having a corresponding relationship, including: The data unit sends a key generation request to the security hardware module of the general control agent device, where the key generation request includes the first user identifier, and the key generation request is used to enable the security hardware module to generate a to-be-used key corresponding to the first user identifier and an identifier of the to-be-used key; The data unit receives the identifier of the key to be used returned by the security hardware module, and saves the corresponding relationship between the identifier of the key to be used and the first user identifier in an association table; The data unit sends a first key acquisition request to the secure hardware module, where the first key acquisition request includes an identifier of the to-be-used key corresponding to the first user identifier, and the first key acquisition request is used to enable the secure hardware module to acquire the first to-be-used key based on the identifier of the to-be-used key corresponding to the first user identifier; The data unit obtains the first key to be used returned by the security hardware module, encrypts the second user identifier corresponding to the first user identifier based on the first key to be used, and pre-associates and stores the first user identifier and the encrypted second user identifier.

3. The method for issuing coupon codes in real time without redirection according to claim 2, characterized in that: The logic unit decrypts the encrypted target second user identifier to obtain the target second user identifier, including: The logic unit receives the association relationship table sent by the data unit; The logic unit sends a second key acquisition request to the secure hardware module, where the second key acquisition request includes an identifier of the to-be-used key corresponding to the target first user identifier, and the second key acquisition request is used to enable the secure hardware module to acquire the second to-be-used key based on the identifier of the to-be-used key corresponding to the target first user identifier; The logic unit obtains the second key to be used returned by the security hardware module, and decrypts the encrypted target second user identifier corresponding to the target first user identifier based on the second key to be used to obtain the target second user identifier.

4. The method for issuing coupon codes in real time without redirection according to claim 1, characterized in that: The banking system includes a mobile banking application; the correspondence between the first user identifier and the second user identifier is pre-established in the following manner: In response to a request input by a user to log in to the mobile banking application through a third-party platform, jump to the third-party platform and request the third-party platform to authorize obtaining a second user identifier; Obtaining identity authentication information input by the user on a login interface of the mobile banking application, and obtaining a first user identifier based on the identity authentication information; A correspondence relationship between the first user identifier and the second user identifier is established.

5. The method for issuing coupon codes in real time without redirection according to claim 1, characterized in that: The banking system includes a mobile banking application; The request message of the banking system is generated in the following way: The mobile banking application generates a lottery interface based on the designated business operations completed by the user; The mobile banking application generates a winning result in response to a lottery request triggered by the user on the lottery interface, and generates a request message according to the winning result.

6. The method for issuing coupon codes in real time without redirection according to claim 1, characterized in that: The banking system includes a customer relationship management system; The request message from the banking system includes: The customer relationship management system screens at least one target user from a plurality of users according to a set strategy; The customer relationship management system generates a request message for each target user in the at least one target user.

7. The method for issuing coupon codes in real time without redirection according to claim 1, characterized in that: The method for implementing real-time issuance of coupon codes without redirection also includes: The logic unit periodically generates batch query requests and sends the batch query requests to the corresponding third-party platform; The logic unit receives a response message returned by the third-party platform, and updates the issuance status of the target coupon code based on the coupon code reception status in the response message.

8. A general control agent device, characterized in that: include: A data unit, used for pre-association storage of a first user identifier and an encrypted second user identifier having a corresponding relationship; The first user identifier is used to identify the user in the banking system; The second user identifier is used to identify the identity of the user on the third-party platform; an access unit configured to perform access permission verification on the bank system in response to a request message from the bank system, and to send the request message to the logic unit if the bank system passes the access permission verification; the request message including at least a target first user identifier and coupon code attribute information; The logic unit is configured to send a query request to the data unit in response to the request message after access processing; the query request at least includes the target first user identifier; The data unit is further configured to send an encrypted target second user identifier corresponding to the target first user identifier to the logic unit in response to the query request; The logic unit is also used to decrypt the encrypted target second user identifier to obtain the target second user identifier, and at least encrypt the coupon code attribute information and the target second user identifier and send them to the coupon code issuance service platform, so that the coupon code issuance service platform generates a target coupon code according to the coupon code attribute information, and sends the target coupon code to the target third-party platform corresponding to the target second user identifier.

9. The master control agent device according to claim 8, characterized in that: The master control agent device further includes: a security hardware module; The process of pre-association and storage of the first user identifier and the encrypted second user identifier having a corresponding relationship by the data unit specifically includes: Sending a key generation request to the security hardware module of the master control agent device, wherein the key generation request includes the first user identifier, and the key generation request is used to enable the security hardware module to generate a to-be-used key corresponding to the first user identifier and an identifier of the to-be-used key; receiving the identifier of the key to be used returned by the security hardware module, and storing the corresponding relationship between the identifier of the key to be used and the first user identifier in an association table; Sending a first key acquisition request to the secure hardware module, where the first key acquisition request includes an identifier of the to-be-used key corresponding to the first user identifier, and the first key acquisition request is used to enable the secure hardware module to obtain the first to-be-used key based on the identifier of the to-be-used key corresponding to the first user identifier; Obtain a first key to be used returned by the security hardware module, encrypt a second user identifier corresponding to the first user identifier based on the first key to be used, and pre-associate and store the first user identifier and the encrypted second user identifier.

10. The master control agent device according to claim 9, characterized in that: The process of the logic unit decrypting the encrypted target second user identifier to obtain the target second user identifier specifically includes: receiving the association relationship table sent by the data unit; Sending a second key acquisition request to the secure hardware module, where the second key acquisition request includes an identifier of the to-be-used key corresponding to the target first user identifier, and the second key acquisition request is used to enable the secure hardware module to obtain the second to-be-used key based on the identifier of the to-be-used key corresponding to the target first user identifier; A second key to be used returned by the security hardware module is obtained, and the encrypted target second user identifier corresponding to the target first user identifier is decrypted based on the second key to be used to obtain the target second user identifier.

Images