Electronic certificate verification method, computing device, computer readable storage medium and computer program product

Abstract

The embodiment of the invention provides an electronic certificate verification method and device, computing equipment, a computer readable storage medium and a computer program product. The electronic certificate verification method comprises the following steps: receiving an electronic certificate acquisition request sent by a client for a target order; in response to the electronic certificate acquisition request, determining whether the target order has a corresponding first random number and whether the first random number reaches a first expiration time; under the condition that the target order does not have the first random number or the first random number reaches the first expiration time, generating the corresponding first random number for the target order again, and configuring the first expiration time for the first random number; when the target order has the corresponding first random number and the first random number does not reach the first expiration time, obtaining the first random number; generating a target electronic certificate according to the first random number; and sending the target electronic certificate to the client. According to the technical scheme provided by the embodiment of the invention, the security of the electronic certificate is improved.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of electronic information technology, and in particular to a method for verifying an electronic credential, a computing device, a computer-readable storage medium, and a computer program product. Background Art

[0002] In a digital transaction environment, electronic credentials are key credentials for ensuring transaction completion and confirming access to goods or services. Electronic credentials are typically associated with specific orders. During a transaction, after the consumer selects, purchases, and pays for goods through the client, the server can generate an order and an electronic credential for the order. Later, when the consumer wishes to obtain services or goods, they can trigger an electronic credential acquisition request in the client, allowing the server to generate the corresponding electronic credential and send it to the client. After receiving the electronic credential, the client can display it so that the merchant can verify the electronic credential using a verification terminal, confirming that the consumer is entitled to the corresponding service or goods, and thus completing the delivery of the service or goods. For example, in a group-buying catering service scenario, consumers need to present the electronic credential corresponding to the pre-purchased catering service to the merchant when they arrive at the store. The merchant will only provide the catering service after verification.

[0003] In the process of realizing the concept of this application, the inventors discovered that the electronic certificates generated by the electronic certificate generation methods provided in the related art have low security. Summary of the Invention

[0004] Embodiments of the present application provide a method, apparatus, computing device, computer-readable storage medium, and computer program product for verifying an electronic credential.

[0005] In a first aspect, an embodiment of the present application provides a method for verifying an electronic credential, which is applied to a server, and the method includes:

[0006] Receiving an electronic voucher acquisition request sent by a client for a target order, wherein the electronic voucher acquisition request is generated based on an electronic voucher display operation triggered by a user for the target order, and the target order is generated based on an order request by the client for a service object;

[0007] In response to the electronic certificate acquisition request, determining whether the target order has a corresponding first random number and whether the first random number has reached a first expiration time;

[0008] If the target order does not have the first random number or the first random number reaches the first expiration time, regenerate a corresponding first random number for the target order and configure the first expiration time for the first random number;

[0009] If the target order has a corresponding first random number and the first random number has not reached the first expiration time, obtaining the first random number;

[0010] generating a target electronic certificate according to the first random number;

[0011] Sending the target electronic certificate to the client, so that the client provides the target electronic certificate to the verification end, so that the verification end obtains the first random number from the target electronic certificate and sends a verification request to the service end based on the first random number;

[0012] In response to receiving the verification request, obtaining a target order corresponding to the first random number;

[0013] The target order is verified, and if the verification is successful, a verification success prompt message is sent to the verification end; otherwise, a verification failure prompt message is sent to the verification end.

[0014] In a second aspect, an embodiment of the present application provides an electronic credential verification device, which is applied to a server, and the device includes:

[0015] a first receiving module configured to receive an electronic voucher acquisition request sent by a client for a target order, wherein the electronic voucher acquisition request is generated based on an electronic voucher display operation triggered by a user for the target order, and the target order is generated based on an order placement request by the client for a service object;

[0016] a first determining module, configured to determine, in response to the electronic certificate acquisition request, whether the target order has a corresponding first random number and whether the first random number has reached a first expiration time;

[0017] a first generating module configured to, if the target order does not have the first random number or the first random number has reached the first expiration time, regenerate a corresponding first random number for the target order and configure the first expiration time for the first random number;

[0018] A first acquisition module is configured to acquire the first random number if the target order has a corresponding first random number and the first random number has not reached the first expiration time;

[0019] A second generating module, configured to generate a target electronic certificate according to the first random number;

[0020] a first sending module, configured to send the target electronic certificate to the client, so that the client provides the target electronic certificate to the verification end, so that the verification end obtains the first random number from the target electronic certificate and sends a verification request to the service end based on the first random number;

[0021] a second obtaining module, configured to obtain a target order corresponding to the first random number in response to receiving the verification request;

[0022] The second sending module is used to verify the target order and send a verification success prompt message to the verification end if the verification is successful; otherwise, send a verification failure prompt message to the verification end.

[0023] In a third aspect, an embodiment of the present application provides a computing device, including a processing component and a storage component;

[0024] The storage component stores a computer program; the computer program is used to be called and executed by the processing component to implement the electronic certificate verification method provided in the embodiment of the present application.

[0025] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processing component, the electronic certificate verification method provided in the embodiment of the present application is implemented.

[0026] In a fifth aspect, an embodiment of the present application provides a computer program product, including a computer program or instructions, which, when executed by a processing component, implements the electronic certificate verification method provided in the embodiment of the present application.

[0027] The embodiment of the present application adopts the following methods: receiving an electronic certificate acquisition request sent by a client for a target order, wherein the electronic certificate acquisition request is generated based on an electronic certificate display operation triggered by a user for the target order, and the target order is generated based on an order request of the client for a service object; in response to the electronic certificate acquisition request, determining whether a corresponding first random number exists for the target order and whether the first random number has reached a first expiration time; if the target order does not have a first random number or the first random number has reached the first expiration time, regenerating a corresponding first random number for the target order and configuring the first expiration time for the first random number; if the target order has a corresponding first random number and the first random number has reached the first expiration time, regenerating a corresponding first random number for the target order and configuring the first expiration time for the first random number; If the first expiration time has not been reached, the first random number is obtained; a target electronic certificate is generated based on the first random number; the target electronic certificate is sent to the client, so that the client can provide the target electronic certificate to the verification end, so that the verification end obtains the first random number from the target electronic certificate and sends a verification request to the server based on the first random number; in response to receiving the verification request, the target order corresponding to the first random number is obtained; the target order is verified, and if the verification is passed, a verification pass prompt message is sent to the verification end, otherwise, a verification failure prompt message is sent to the verification end. This technical solution effectively improves the security of the electronic certificate by dynamically updating the electronic certificate. Even if the electronic certificate is leaked in a short period of time, due to the existence of an expiration and update mechanism, it is difficult for other users to use it to replace and cancel it, thereby protecting the rights and interests of merchants and consumers and improving the security and reliability of the electronic certificate.

[0028] These and other aspects of the present application will become more readily apparent from the description of the following embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0030] Figure 1 A system architecture diagram is shown in which the technical solution of an embodiment of the present application can be applied;

[0031] Figure 2 A flowchart of an embodiment of a method for verifying an electronic certificate provided by this application;

[0032] Figure 3 A schematic diagram showing the process of generating an electronic certificate provided in an embodiment of the present application is shown;

[0033] Figure 4 A flowchart showing the electronic certificate verification process of an embodiment of the present application is shown;

[0034] Figure 5 A block diagram of an electronic certificate verification device provided in this application;

[0035] Figure 6 A block diagram of a computing device provided in this application. DETAILED DESCRIPTION

[0036] To make the purpose, technical solutions, and advantages of this application more clear, the technical solutions of this application will be clearly and completely described below in conjunction with the specific embodiments of this application and the corresponding drawings. Obviously, the embodiments described are only part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of this application.

[0037] It should be noted that, in the case of user information involved in the embodiments of the present application, the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in the embodiments of the present application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data need to comply with the relevant laws, regulations and standards of the relevant countries and regions, and provide corresponding operation entrances for users to choose to authorize or refuse. In addition, the various models involved in this application (including but not limited to language models or large models) are in compliance with relevant laws and standards.

[0038] In addition, it should be noted that when the embodiments of the present application involve user interaction operations or triggering operations, the user interaction operations or triggering operations involved in the embodiments of the present application include but are not limited to: touch operations, gesture operations, voice operations, head movement operations, eye movement operations and other interactive operations in various ways; among which, touch operations include but are not limited to: click operations, double-click operations, long press operations, sliding operations, pinch operations or mouse hover operations, etc. Sliding operations include but are not limited to: straight sliding, curved sliding, etc.

[0039] In a digital transaction environment, electronic credentials are key credentials for ensuring transaction completion and confirming access to goods or services. Electronic credentials are typically associated with specific orders. During a transaction, after the consumer selects, purchases, and pays for goods through the client, the server can generate an order and an electronic credential for the order. Later, when the consumer wishes to obtain services or goods, they can trigger an electronic credential acquisition request in the client, allowing the server to generate the corresponding electronic credential and send it to the client. After receiving the electronic credential, the client can display it so that the merchant can verify the electronic credential using a verification terminal, confirming that the consumer is entitled to the corresponding service or goods, and thus completing the delivery of the service or goods. For example, in a group-buying catering service scenario, consumers need to present the electronic credential corresponding to the pre-purchased catering service to the merchant when they arrive at the store. The merchant will only provide the catering service after verification.

[0040] The inventors discovered during the process of implementing the concept of this application that electronic certificates are usually fixed after they are generated and until they are verified. If an electronic certificate is obtained by someone else, it may be replaced or cancelled.

[0041] In addition, the inventors also thought that, for example, the verification code used for login is also related to verification, and whether the verification code can be used to perform the generation and verification process of the electronic certificate.

[0042] However, after conducting in-depth research, the inventors discovered that while verification codes are also related to authentication, they are primarily used to prevent attacks and abuse of the system by malicious programs or non-human behavior, ensuring system security and normal operation. Taking the verification code used for login as an example, its core function is to verify whether the operator is a real human user. When a user logs into their account, the system generates a random verification code and requires the user to accurately enter the verification code within a specified time for verification. In this way, the system can effectively defend against attacks such as batch login attempts by automated scripts and brute force password cracking, thereby ensuring the security of user accounts.

[0043] However, in the area of ​​product verification, specifically electronic voucher verification, the primary purpose is to confirm the authenticity and validity of transactions and protect the rights and interests of both parties. Once a user completes a purchase and generates a target order, the system generates an electronic voucher for that order. When a user uses a product or service, the electronic voucher must be verified to ensure it is legitimate and valid, and has not been reused or tampered with. Only after verification is successful can the merchant provide the corresponding product or service, completing the transaction. Application scenarios primarily revolve around product transactions and service provision. Common applications include offline brick-and-mortar stores, online e-commerce platforms, ticketing systems, and restaurant reservations. For example, after purchasing a product on an e-commerce platform, a user may receive an electronic coupon or pickup code. The merchant must verify these electronic vouchers upon in-store purchase or pickup. Alternatively, after purchasing movie or concert tickets, the user must verify the validity of the electronic ticket upon entry.

[0044] Because verification codes and product verification differ significantly in function, application scenarios, and usage, using verification codes for electronic voucher generation and verification requires a redesign of the system architecture and verification process. This requires consideration of how to ensure system security without impacting product verification efficiency and user experience. For example, introducing a verification code mechanism into the product verification process could increase user complexity and reduce transaction efficiency. Furthermore, the validity period and usage of the verification code must align with the product verification process, otherwise verification failures or security vulnerabilities may occur.

[0045] To address the technical problem of low security of electronic credentials in the prior art, the inventors, through creative work, have proposed a solution that takes a different technical approach than verification codes. The basic approach is as follows: receiving an electronic credential acquisition request from a client for a target order, the electronic credential acquisition request generated based on the electronic credential display operation triggered by the user for the target order; in response to the electronic credential acquisition request, obtaining a first random number; configuring a first expiration time for the first random number; generating a target electronic credential based on the first random number; and sending the target electronic credential to the client for the client to provide to the verification terminal. If no verification request for the target electronic credential is received from the verification terminal within the first expiration time, obtaining a second random number, using the second random number as the first random number, and returning to the step of configuring the first expiration time for the first random number to continue. By dynamically updating the electronic credential, the security of the electronic credential is effectively improved. Even if the electronic credential is leaked within a short period of time, due to the expiration and update mechanisms, it is difficult for other users to use it to replace and cancel it, thereby protecting the rights and interests of merchants and consumers and improving the security and reliability of the electronic credential.

[0046] The following will be combined with the drawings in the embodiments of this application to clearly and completely describe the technical solutions in the embodiments of this application. Obviously, the embodiments described are only part of the embodiments of this application, not all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by those skilled in the art without making creative efforts are within the scope of protection of this application.

[0047] Figure 1 A system architecture diagram is shown in which the technical solution of an embodiment of the present application can be applied. The system architecture may include a client 101 and a server 102.

[0048] The client 101 and the server 102 can be connected via a network. The network provides a medium for the communication link between the client 101 and the server 102. The network can include various connection types, such as wired, wireless, or fiber optic cables. The client 101 can interact with the server 102 via the network to receive or send messages.

[0049] The client 101 may be a browser, an APP (Application), or a web application such as an H5 (HyperText Markup Language 5, version 5 of Hypertext Markup Language) application, or a light application (also known as a mini-program, a lightweight application) or a cloud application. The client 101 may be deployed in an electronic device and may rely on the device to run or on certain apps in the device to run. For example, the electronic device may have a display screen and support information browsing, such as a personal mobile terminal such as a mobile phone, a tablet computer, a personal computer, a desktop computer, a smart speaker, a smart watch, etc. For ease of understanding, Figure 1 The client is mainly represented by a device image. Various other types of applications can usually be configured in electronic devices, such as human-computer dialogue applications, model training applications, text processing applications, web browser applications, shopping applications, search applications, instant messaging tools, email clients, social platform software, etc. Electronic devices can refer to devices used by users, which have the functions of computing, Internet access, communication, etc. required by users, such as mobile phones, tablet computers, personal computers, wearable devices, etc. Electronic devices can usually include at least one processing component and at least one storage component. Electronic devices may also include basic configurations such as network card chips, IO (input / output) buses, audio and video components, which are not limited in this application. Optionally, according to the implementation form of the electronic device, some peripheral devices may also be included, such as keyboards, mice, input pens, printers, etc., which are not limited in this application.

[0050] The server 102 may include servers that provide various services, such as a server for background training that provides support for the model used on the client 101, or a server that processes interactive information sent by the client.

[0051] It should be noted that the server 102 can be implemented as a distributed server cluster consisting of multiple servers, or as a single server. The server can also be a server of a distributed system, or a server combined with a blockchain. The server can also be a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, content delivery networks (CDNs), and big data and artificial intelligence platforms, or an intelligent cloud computing server or intelligent cloud host with artificial intelligence technology.

[0052] It should be noted that the electronic certificate verification method provided in the embodiments of the present application is generally executed by the server 102 , and the corresponding electronic certificate verification device is generally set in the server 102 .

[0053] It should be understood that Figure 1 The number of clients and servers in the example is only for reference. Any number of clients and servers may be used depending on the implementation requirements.

[0054] The implementation details of the technical solution of the embodiment of the present application are described in detail below.

[0055] Figure 2 This is a flowchart of an embodiment of a method for verifying an electronic certificate provided in this application. The technical solution of this embodiment can be executed by the server.

[0056] Figure 2 The verification method of the electronic certificate shown may include the following steps:

[0057] 201: Receive an electronic voucher acquisition request sent by a client for a target order. The electronic voucher acquisition request is generated based on an electronic voucher display operation triggered by a user for the target order. The target order is generated based on an order request from the client for a service object.

[0058] In an embodiment of the present application, the server can be used to handle the processing logic related to the generation and verification of electronic credentials. When a user triggers the electronic credential display operation for a target order on the client, the client can generate an electronic credential acquisition request and send it to the server. For example, after a user completes a purchase on an e-commerce platform, a target order can be generated. When the user clicks the "View Electronic Credential" button on the order details page of the target order, the client can send an electronic credential acquisition request containing information related to the target order to the server.

[0059] 202: In response to the electronic certificate acquisition request, determine whether the target order has a corresponding first random number and whether the first random number has reached a first expiration time.

[0060] 203: If the target order does not have the first random number or the first random number reaches the first expiration time, regenerate the corresponding first random number for the target order and configure the first expiration time for the first random number.

[0061] 204: If the target order has a corresponding first random number and the first random number has not reached a first expiration time, obtain the first random number.

[0062] After the server responds to the request to obtain the electronic certificate, it can first determine whether the target order has a corresponding first random number and whether the first random number has reached the first expiration time. This judgment process involves querying and analyzing the data stored on the server. The server can usually store data related to the electronic certificate in a database or memory to facilitate quick retrieval. For example, in a system that uses Redis as a cache database, the server can use the identification information of the target order (such as the order number) as a key to query whether there is a corresponding first random number record. At the same time, the server can also record the generation time of each first random number, and in combination with the pre-set first expiration time (such as 10 minutes), calculate the difference between the current time and the generation time to determine whether the first random number has reached the expiration time.

[0063] When the target order has a corresponding first random number and the first random number has not reached the first expiration time, it indicates that the previously generated electronic certificate is still valid. At this time, the server can directly obtain the first random number.

[0064] If the target order does not have a first random number, this means that the order is requesting an electronic certificate for the first time, or the previously generated data has been cleared. If the first random number has reached the first expiration time, the previously generated electronic certificate is no longer valid, posing a security risk. In both cases, the server can regenerate a corresponding first random number for the target order.

[0065] In the embodiments of the present application, random number generation can be implemented using a random number generation function or a dedicated random number generation algorithm to ensure that the generated random number has sufficient randomness and uniqueness.

[0066] After obtaining the first random number, the server can configure a first expiration time for the first random number. The first expiration time can be flexibly set based on actual application requirements, such as 5 minutes, 10 minutes, etc. For example, if the expiration time is 5 minutes, the server will record the current time and calculate the time point 5 minutes later as the first expiration time.

[0067] 205: Generate a target electronic certificate according to the first random number.

[0068] After obtaining the first random number and configuring a first expiration time for the first random number, the server can generate a target electronic certificate.

[0069] In an embodiment of the present application, the target electronic certificate can be implemented as a QR code, for example. The server can embed the first random number into a specific link, which is an interface address pre-defined by the server for verifying the electronic certificate. For example, the basic format of the link is https: / / example.com / verify? random_num=, and the server can add the generated first random number to the end of the link to form a complete link carrying the first random number, such as https: / / example.com / verify? random_num=123456. Then, the server can use a QR code generation tool to convert this link carrying the first random number into a QR code image. The QR code generation tool can be an open source library, such as the qrcode library in Python. By calling its related functions and passing in the link information, the corresponding QR code image can be generated.

[0070] 206: Send the target electronic certificate to the client, so that the client provides the target electronic certificate to the verification end, so that the verification end obtains the first random number from the target electronic certificate and sends a verification request to the service end based on the first random number.

[0071] 207: In response to receiving the verification request, obtaining a target order corresponding to the first random number;

[0072] 208: Verify the target order and, if the verification is successful, send a verification success prompt message to the verification end; otherwise, send a verification failure prompt message to the verification end.

[0073] After generating the target electronic credential, the server can send it to the client. After receiving the target electronic credential, the client can display it on the interface, and the user can provide the electronic credential to the verification terminal, where the verification terminal can include, for example, the electronic credential verification device of the offline merchant.

[0074] The server responds to the verification request and can first obtain the target order corresponding to the first random number. The server internally maintains the mapping relationship between the electronic certificate and the order. This mapping relationship can be stored in a database or memory, such as using Redis to store the mapping between the first random number and the target order identifier. Based on the first random number carried in the verification request, the server searches for the corresponding target order identifier (such as the order number) in the storage, and then queries the order database (such as a MySQL database) based on the order identifier to obtain the complete target order information, including the detailed content of the order, user information, merchant information, etc.

[0075] After verifying the target order based on the target order information, if the verification is successful, the server can construct an HTTP response containing a verification success prompt message and send it to the verification end through the network, such as sending a prompt "Verification passed, transaction can be completed" to the merchant cashier's verification device; if the verification fails, the server can generate a verification failure prompt message and send it to the verification end in the form of an HTTP response, informing the verification end that the electronic certificate is invalid, such as a prompt "Verification failed, the electronic certificate has expired or the information does not match."

[0076] In an embodiment of the present application, the server may receive electronic certificate acquisition requests from a large number of clients. To ensure the uniqueness of the random number and its availability in high-concurrency scenarios, the first random number can be obtained using a distributed ID generator. The distributed ID generator can be used to generate a globally unique ID, and its principle can be based on a combination of multiple factors such as timestamp, client identifier, and serial number. For example, the Snowflake algorithm can generate a 64-bit long integer as a unique ID based on the current timestamp, client identifier, and serial number, and use it as the first random number, which can effectively avoid the problem of random number duplication and improve the uniqueness of the first random number.

[0077] In the embodiments of the present application, the first expiration time configured for the first random number each time can be the same or different, and can be flexibly set according to specific application requirements. For example, for transactions with high timeliness requirements, a shorter and consistent expiration time, such as 5 minutes, may be configured each time; while for transactions with relatively low timeliness requirements or more complex business scenarios, the expiration time can be dynamically adjusted based on actual conditions, such as 10 minutes for the first configuration and 15 minutes for the second configuration.

[0078] In the embodiments of this application, the security of electronic credentials is effectively improved by dynamically updating them. Even if an electronic credential is leaked within a short period of time, due to the expiration and update mechanisms, it is difficult for other users to use it to replace or cancel it, thereby protecting the rights and interests of merchants and consumers and improving the security and reliability of the entire electronic credential.

[0079] In some embodiments, the method may further include:

[0080] detecting whether a first random number corresponding to the target order reaches the first expiration time;

[0081] When the first random number corresponding to the target order reaches the first expiration time, the first random number corresponding to the target order is deleted, and a new first random number is generated, and a first expiration time is set for the new first random number.

[0082] In actual application scenarios, there are various scenarios in which the client triggers an electronic credential update operation. For example, a user may find themselves about to go to a pickup point, but their previously obtained electronic credential is about to expire. To avoid being unable to pick up the goods, the user can proactively click the "Update Electronic credential" button on the client. The client then generates an electronic credential update request and sends it to the server. Alternatively, if the client detects that a previously obtained electronic credential may not have been successfully sent to the verification terminal due to a network anomaly, and the first expiration date is about to expire, the electronic credential update operation can also be triggered to ensure a smooth transaction.

[0083] In some embodiments, the electronic voucher acquisition request includes order identification information of the target order.

[0084] In some embodiments, the method further includes: in response to the electronic voucher acquisition request, acquiring order information of the target order based on the order identification information.

[0085] In an embodiment of the present application, upon receiving a request, the server can first retrieve the order information of the target order from an order database based on the order identification information. The database can be a relational database such as MySQL, and the detailed information of the order can be obtained by executing the SQL query statement SELECT * FROM orders WHERE order_id = 'order identification information'.

[0086] In some embodiments, after generating the target electronic certificate according to the first random number, the method further includes: generating verification data of the electronic certificate according to the order information; and storing a first mapping relationship between the target electronic certificate and the verification data in a memory.

[0087] The server can generate verification data for the electronic certificate based on the obtained order information. In an embodiment of the present application, the server can use JWT (JSON Web Token) to generate order Token data (verification data) based on the order information. JWT is an open standard based on JSON (RFC 7519) for transmitting statements between network application environments. The server can process the order information according to the format and encryption rules of JWT. First, determine a key, such as "secret_key_123", and then use the above order information as a payload (payload), and use the HS256 algorithm (a common JWT signature algorithm) to sign the payload and key. Through the relevant JWT library (such as the PyJWT library in Python), generate a JWT string containing the order information and encrypted as the order Token data (verification data).

[0088] The server can then store the first mapping between the target electronic credential and the verification data in memory. Redis, a high-performance, memory-based key-value store, can be used for this purpose. The server can use the first random number in the link corresponding to the target electronic credential as the key and the verification data as the value to establish a mapping between the two.

[0089] In some embodiments, when the first random number reaches the first expiration time, the method further includes: deleting the first mapping relationship corresponding to the first random number from the memory, and continuing to execute the steps of regenerating the corresponding first random number for the target order, and configuring the first expiration time for the first random number.

[0090] Within the first expiration time, if the server does not receive a verification request for the target electronic certificate from the verification end and receives an electronic certificate update request sent by the client, the server may first delete the first mapping relationship between the target electronic certificate and the verification data previously stored in the memory.

[0091] Next, the server can continue to execute the steps of regenerating the corresponding first random number for the target order and configuring the first expiration time for the first random number. It can also use the distributed ID generator to generate a new unique random number and use it as the new first random number. The first expiration time is then reconfigured for the new first random number, for example, it is set to 15 minutes again. After that, the server again generates a new target electronic certificate based on the new first random number and regenerates the corresponding verification data. It then re-establishes the mapping relationship between the new target electronic certificate and the verification data and stores it in the memory, completing the electronic certificate update process.

[0092] In some embodiments, verifying the target order may be specifically implemented as follows: in response to a verification request, obtaining verification data based on a first mapping relationship; parsing the verification data to obtain order information; and verifying the target order based on the order information.

[0093] After receiving the verification request, the server responds by retrieving the corresponding verification data from the Redis in-memory database based on the first random number included in the verification request. The server then decrypts the verification data using the key. If decryption fails using the key, it may indicate that the verification data has been tampered with. In this case, the verification is deemed to have failed, and a verification failure message is generated and sent to the client.

[0094] If decryption is successful, the order information can be parsed from the verification data. The server can then query the standard order information from the order database and determine whether the order data status, user ID, merchant ID, product ID, and other information are consistent with the order information parsed from the token. Specifically, the server can execute SQL queries to retrieve the corresponding order information from the order database and then compare it with the parsed information one by one. If all verifications pass, the server will send a verification pass message to the verifier. If any verification fails, the server will send a verification failure message to inform the verifier that there is a problem with the target electronic certificate.

[0095] In some embodiments, when the verification passes, the method further includes: deleting the first mapping relationship from the memory.

[0096] By deleting the first mapping relationship from the memory when the verification passes, memory resources can be released and the operating efficiency of the server can be improved.

[0097] In some embodiments, after sending the verification failure prompt information to the verification terminal, the method further includes: sending the verification failure prompt information to the client to prompt the client to resend the electronic certificate acquisition request.

[0098] In the embodiments of the present application, if the first mapping relationship cannot be found in memory, a verification failure prompt is generated and promptly sent to the client, allowing the user to promptly understand the status of the electronic certificate and avoid transaction interruptions due to electronic certificate issues. By prompting the client to send an electronic certificate update request, the user can quickly obtain a valid new electronic certificate and continue the transaction, thereby improving the transaction success rate and user experience.

[0099] In actual application scenarios, the server may receive multiple electronic acquisition requests for the same order at the same time. In order to avoid repeated generation of electronic vouchers, in some embodiments, the method further includes:

[0100] In response to the electronic certificate acquisition request, a first operation lock corresponding to the target order is set to block other electronic certificate acquisition requests for the target order using the first operation lock.

[0101] When it is detected that the first mapping relationship between the target electronic certificate and the verification data is stored in the memory, the first operation lock is unlocked.

[0102] In the embodiment of the present application, since Redis supports atomic operations and can well meet the lock requirements in high-concurrency scenarios, the server can use Redis to build a distributed lock to achieve the setting of the first operation lock corresponding to the target order. The server can use Redis's SETNX (SET if Not eXists) command to attempt to set the lock. The function of this command is to set the value of the key to 1 if the specified key does not exist, and return 1 to indicate that the setting is successful; if the key already exists, no operation is performed, and 0 is returned to indicate that the setting failed.

[0103] For example, when a client sends an electronic voucher request with the order number "202504220001," the server constructs a lock key corresponding to the order, for example, "order_lock:202504220001." It then executes the SETNX order_lock:202504220001 1 command to attempt to set the lock. If the return value is 1, the operation lock has been successfully set for the order. The server can then set an expiration time for the lock, such as 60 seconds. This expiration time prevents the lock from being held indefinitely under certain circumstances, potentially leading to a deadlock. At this point, the server can display a prompt message stating, "Successfully set the operation lock for order 202504220001." If the return value is 0, it means that the order has been locked and another electronic certificate acquisition request for the order is being processed. The server will reject the current request and may return an error message to the client, such as "Order 202504220001 has been locked and cannot process new electronic certificate acquisition requests."

[0104] After setting the first operation lock, the server can execute the steps of generating the electronic voucher of the target order.

[0105] When the server detects that the first mapping relationship between the target electronic certificate and the verification data has been successfully stored in the memory, the first operation lock can be unlocked. The server can first check whether the lock still exists by executing the Redis EXISTS command. If the lock exists, the server can execute the DELETE command to delete the lock. For example, for the lock key "order_lock:202504220001" corresponding to the order number "202504220001", the server first executes EXISTS order_lock:202504220001 to check whether the lock exists. If it returns 1, it means it exists, and then executes DELETE order_lock:202504220001 to delete the lock. At the same time, the prompt message "Successfully unlocked order 202504220001" can be output.

[0106] By deploying the operation lock setting and unlocking process, in high-concurrency scenarios, it can effectively avoid data confusion and repeated verification problems caused by the simultaneous processing of multiple electronic certificate acquisition requests for the same order, ensuring the consistency and accuracy of the electronic certificate generation and storage process, while improving the processing efficiency and stability of the server, providing merchants and consumers with a safer and more reliable digital transaction environment.

[0107] In some embodiments, the method further comprises:

[0108] In response to the verification request, setting a second operation lock corresponding to the target electronic credential to block other verification requests for the target electronic credential using the second operation lock;

[0109] When it is detected that the first mapping relationship is deleted from the memory, the second operation lock is unlocked.

[0110] By setting a second operation lock for the target electronic certificate, repeated verification of the target electronic certificate can be prevented, thereby ensuring the accuracy and consistency of the electronic certificate verification process.

[0111] The setting and unlocking of the second operation lock may refer to the implementation process of the first operation lock, which will not be described in detail here.

[0112] To prevent the target order from being accidentally changed during verification of the target electronic certificate, thereby causing problems such as data inconsistency or transaction anomalies, in some embodiments, the method further includes:

[0113] In response to the verification request, setting a third operation lock corresponding to the target order to prevent an order change operation on the target order by using the third operation lock;

[0114] When it is detected that the first mapping relationship is deleted from the memory, the third operation lock is unlocked.

[0115] By setting a third operation lock mechanism for the target order, it can effectively ensure that the target order will not be accidentally changed during the verification of the target electronic certificate in a high-concurrency scenario, thereby ensuring the consistency and accuracy of the transaction data.

[0116] The setting and unlocking of the third operation lock may refer to the implementation process of the first operation lock, which will not be described in detail here.

[0117] Figure 3 A schematic diagram of the electronic certificate generation process provided in an embodiment of the present application is shown.

[0118] In actual application scenarios, if an electronic voucher is generated and displayed immediately after a successful order payment, it may increase the risk of information leakage. From the user's perspective, there is no significant difference between obtaining an electronic voucher upon opening the corresponding page and generating it immediately. Therefore, in the embodiments of this application, after a user purchases a product and successfully pays, the electronic voucher may not be generated immediately. Instead, the server will only begin the electronic voucher generation process when the user operates the client to request the electronic voucher.

[0119] After receiving a request to obtain an electronic certificate, the server first acquires the first operation lock for the target order. Specifically, the server can utilize Redis distributed locks, implemented through Lua scripts or Redis commands. By acquiring the first operation lock for the target order, it prevents multiple electronic certificates from being assigned to the same order in high-concurrency scenarios. For example, when multiple clients simultaneously request to generate electronic certificates for the same order, the distributed lock ensures that only one request successfully acquires the lock and proceeds with subsequent operations, while other requests must wait, thus avoiding data inconsistencies.

[0120] The server can then verify the order information. First, the server verifies the existence of the target order and whether payment has been successfully made. If not, the server returns a failed retrieval error. After successful payment, the client sends the order ID to the server. The server can retrieve key information, such as the user ID, from the encrypted user data. The client compares the order information sent with the backend database. If there is a mismatch, the server returns a failed retrieval error. This step ensures the authenticity and security of the order and prevents unauthorized access to electronic credentials.

[0121] If all the above steps are verified successfully, the server can first try to obtain the electronic certificate from the memory. If the electronic certificate corresponding to the target order exists in the cache and has not reached the expiration time (valid for 5 minutes), the queried electronic certificate will be directly returned to the client. If the electronic certificate corresponding to the target order does not exist in the cache, the electronic certificate can be regenerated. When regenerating the electronic certificate, first obtain the first random number from the distributed ID generator, and then generate the order Token data through JWT in combination with the order information (such as merchant ID, user ID, product ID, order number, etc.). Store the random ID and Token data as a key-value pair in the Redis cache, and set the first expiration time, for example, the validity period is 5 minutes, and finally return the electronic certificate containing the first random number. In this way, within the first expiration time, the electronic certificate obtained by the user remains unchanged. If it exceeds 5 minutes, the target electronic certificate will be regenerated when the user obtains the electronic certificate again, which enhances security. At the same time, the JWT-encrypted Token data contains key order information, which is used for verification during subsequent verification, and the Token itself can also be time-sensitive, further ensuring data security. Failed to obtain the target electronic certificate

[0122] Figure 4 A flowchart of the electronic certificate verification process of an embodiment of the present application is shown.

[0123] First, after receiving the verification request from the verification client, the server can set a second operation lock corresponding to the target electronic certificate. By obtaining the second operation lock, multiple clients can be prevented from performing verification operations on the same target electronic certificate at the same time, avoiding data conflicts and duplicate verification issues.

[0124] After obtaining the second operation lock, the server can query the status of the target electronic certificate. The server can query the order database to see if the current target electronic certificate has been verified. If it has been verified, it will return a verification failure to prevent repeated verification; if it has not been verified, it will proceed to the next step.

[0125] Verify the validity of the electronic certificate: The server searches for the token from the memory based on the first random number obtained and the first mapping relationship. If the token cannot be obtained, it indicates that the target electronic certificate has exceeded the first expiration time, and the verification failure is returned, requiring the user to obtain the verification code again.

[0126] Obtaining an Operation Lock: Obtaining a third operation lock prevents other operations, such as refunds, from interfering with the order status. In real-world situations, a user might initiate a refund while the merchant is verifying the order. Obtaining a third operation lock ensures that only one operation can be executed at a time, preventing data inconsistencies.

[0127] Parse the token and verify the order information: Parse the token to determine the order's validity and other information. At the same time, query the order information directly from the order database to determine whether the target order's user ID, merchant ID, product ID, and other information are consistent with the data parsed from the token. If all verifications pass, the verification is successful; if any verification fails, the verification failure is returned.

[0128] Figure 5 This is a block diagram of an electronic certificate verification device provided by this application, which is applied to the server, such as Figure 5 As shown, the device may include:

[0129] A first receiving module 501 is configured to receive an electronic voucher acquisition request sent by a client for a target order, wherein the electronic voucher acquisition request is generated based on an electronic voucher display operation triggered by a user for the target order, and the target order is generated based on an order placement request by the client for a service object;

[0130] A first determining module 502 is configured to determine, in response to the electronic certificate acquisition request, whether the target order has a corresponding first random number and whether the first random number has reached a first expiration time;

[0131] A first generating module 503 is configured to regenerate a corresponding first random number for the target order and configure the first expiration time for the first random number if the target order does not have the first random number or the first random number has reached the first expiration time;

[0132] A first acquisition module 504 is configured to acquire the first random number if the target order has a corresponding first random number and the first random number has not reached the first expiration time;

[0133] A second generating module 505 is configured to generate a target electronic certificate according to the first random number;

[0134] a first sending module 506 configured to send the target electronic certificate to the client, so that the client provides the target electronic certificate to the verification end, so that the verification end obtains the first random number from the target electronic certificate and sends a verification request to the server based on the first random number;

[0135] A second acquisition module 507 is configured to acquire a target order corresponding to the first random number in response to receiving the verification request;

[0136] The second sending module 508 is used to verify the target order and send a verification success prompt message to the verification end if the verification is successful; otherwise, send a verification failure prompt message to the verification end.

[0137] In some embodiments, the apparatus further comprises:

[0138] A first detection module, configured to detect whether a first random number corresponding to the target order reaches the first expiration time;

[0139] The first deletion module is used to delete the first random number corresponding to the target order when the first random number corresponding to the target order reaches the first expiration time, regenerate the first random number, and set a first expiration time for the regenerated first random number.

[0140] In some embodiments, the apparatus further comprises:

[0141] The third acquisition module is configured to respond to the electronic voucher acquisition request and acquire order information of the target order based on the order identification information.

[0142] In some embodiments, after generating the target electronic certificate according to the first random number, the apparatus further comprises:

[0143] A third generating module is used to generate verification data of the electronic voucher according to the order information;

[0144] A first storage module, configured to store a first mapping relationship between the target electronic certificate and the verification data in a memory;

[0145] In some embodiments, the apparatus further comprises:

[0146] The second deletion module is used to delete the first mapping relationship corresponding to the first random number from the memory, and continue to execute the steps of regenerating the corresponding first random number for the target order and configuring the first expiration time for the first random number.

[0147] In some embodiments, the second sending module 508 may be specifically configured to:

[0148] In response to the verification request, obtaining verification data based on the first mapping relationship;

[0149] Parse and verify data to obtain order information;

[0150] Verify the target order based on the order information.

[0151] In some embodiments, if the verification passes, the device further includes:

[0152] The first deleting module is used to delete the first mapping relationship from the memory.

[0153] In some embodiments, the apparatus further comprises:

[0154] The third sending module is configured to send the verification failure prompt information to the client to prompt the client to resend the electronic certificate acquisition request.

[0155] In some embodiments, the apparatus further comprises:

[0156] The first lock setting module is used to set a first operation lock corresponding to a target order in response to an electronic certificate acquisition request, so as to use the first operation lock to block other electronic certificate acquisition requests for the target order.

[0157] The first unlocking module is configured to unlock the first operation lock when detecting that a first mapping relationship between the target electronic certificate and the verification data is stored in the memory.

[0158] In some embodiments, the apparatus further comprises:

[0159] a second lock setting module, configured to set a second operation lock corresponding to the target electronic credential in response to the verification request, so as to block other verification requests for the target electronic credential using the second operation lock;

[0160] The second unlocking module is configured to unlock the second operation lock when it is detected that the first mapping relationship is deleted from the memory.

[0161] In some embodiments, the apparatus further comprises:

[0162] a third lock setting module, configured to set a third operation lock corresponding to the target order in response to the verification request, so as to prevent an order change operation on the target order by using the third operation lock;

[0163] The third unlocking module is configured to unlock the third operation lock when it is detected that the first mapping relationship is deleted from the memory.

[0164] Figure 5 The electronic certificate verification device can perform Figure 2 The implementation principle and technical effects of the electronic credential verification method described in the illustrated embodiment will not be elaborated here. The specific manner in which each module and unit performs operations in the electronic credential verification device in the above embodiment has been described in detail in the embodiment of the method and will not be elaborated here.

[0165] It should be noted that the technical solutions of the embodiments of this application are applicable to a virtual network environment. The users described are generally referred to as "virtual users." Real users can register user accounts on the server through registration to obtain user identities in the network environment. The same user account can be logged into the server through different types of client terminals, allowing the server to identify the same user.

[0166] Interactions between the server and the user can be implemented based on user accounts. Data sent or received by the server to the user is also based on user accounts. The user corresponding to the user account actually receives or sends data to the server. Furthermore, users can communicate with each other through user accounts. The term "user" can refer to an individual or an organization, such as a business, and this application does not impose specific restrictions on this.

[0167] It should be noted that in some of the processes described in the above embodiments and the accompanying drawings, multiple operations that appear in a specific order are included, but it should be clearly understood that these operations may not be executed in the order in which they appear in this article or may be executed in parallel. The sequence numbers of the operations, such as 201, 202, etc., are only used to distinguish between different operations, and the sequence numbers themselves do not represent any execution order. In addition, these processes may include more or fewer operations, and these operations may be executed in sequence or in parallel. It should be noted that the descriptions of "first", "second", etc. in this article are used to distinguish different messages, devices, modules, etc., and do not represent a sequential order, nor do they limit "first" and "second" to being different types.

[0168] Figure 6 This is a schematic diagram of a computing device according to an embodiment of the present application. Figure 6 As shown, in practice, the computing device may include: a storage component 601 and a processing component 602 .

[0169] The storage component 601 is used to store computer programs and can be configured to store various other data to support operations on the computing device. Examples of such data include instructions for any application or method operating on the computing device, data structures, contact data, phone book data, messages, images, videos, etc.

[0170] The processing component 602 is coupled to the storage component 1001 and is used to execute the computer program in the storage component 601 to implement the following Figure 2 The verification method of the electronic certificate shown.

[0171] The processing component includes one or more processors to execute computer instructions to perform all or part of the steps in the above method. Of course, the processing component can also be implemented as one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components to perform the above method.

[0172] The above-mentioned storage component can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random-access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk.

[0173] The communication component is configured to facilitate wired or wireless communication between the device in which the communication component resides and other devices. The device in which the communication component resides may access a wireless network based on a communication standard, such as a mobile communication network, or a combination thereof. In an exemplary embodiment, the communication component receives broadcast signals or broadcast-related information from an external broadcast management system via a broadcast channel.

[0174] The display component may include a screen, which may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive input signals from a user. The touch panel includes one or more touch sensors to sense touches, slides, and gestures on the touch panel. The touch sensor may not only sense the boundaries of a touch or slide action, but also detect the duration and pressure associated with the touch or slide operation.

[0175] The power supply assembly provides power to various components of the device in which the power supply assembly is located. The power supply assembly may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power to the device in which the power supply assembly is located.

[0176] The above-mentioned audio component can be configured to output and / or input audio signals. For example, the audio component includes a microphone (MIC), and when the device where the audio component is located is in an operating mode, such as call mode, recording mode, and voice recognition mode, the microphone is configured to receive external audio signals. The received audio signal can be further stored in a memory or sent via a communication component. In some embodiments, the audio component also includes a speaker for outputting audio signals.

[0177] Accordingly, an embodiment of the present application also provides a computer-readable storage medium storing a computer program, which, when executed by a processor, enables the processor to implement the steps in the above method embodiment. The computer-readable storage medium includes volatile or non-volatile or a combination thereof, and may be removable or non-removable. Examples of computer-readable storage media include, but are not limited to, phase-change random access memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), flash memory or other memory technology, CD-ROM, digital versatile disc (DVD) or other optical storage, magnetic cassette, tape disk storage or other magnetic storage device or any other non-transmission medium.

[0178] Accordingly, an embodiment of the present application further provides a computer program product, which includes a computer program or instructions, and when the computer program or instructions are executed by a processor, the processor is enabled to implement the steps in the above-mentioned method embodiment. It should be understood that each process or a combination of multiple processes in the above-mentioned method flow can be implemented by a computer program or instruction. In addition, these computer programs or instructions can be applied to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data processing device, so that the processor of the general-purpose computer, the special-purpose computer, the embedded processor or other programmable data processing device can be implemented as a device for implementing the corresponding functions in the above-mentioned method embodiment.

[0179] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0180] It should also be noted that the terms "comprises," "includes," or any other variations thereof are intended to encompass non-exclusive inclusion, such that a process, method, commodity, or apparatus that includes a series of elements includes not only those elements but also other elements not explicitly listed, or includes elements inherent to such process, method, commodity, or apparatus. In the absence of further limitations, an element defined by the phrase "comprises a ..." does not exclude the presence of other identical elements in the process, method, commodity, or apparatus that includes the element.

[0181] Finally, it should be noted that the above are merely examples of the present application and are not intended to limit the present application. Various modifications and variations are possible for those skilled in the art. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application are intended to be included within the scope of the claims of the present application.

Claims

1. A method for verifying an electronic certificate, characterized in that: Applied to the server, the method includes: Receiving an electronic voucher acquisition request sent by a client for a target order, wherein the electronic voucher acquisition request is generated based on an electronic voucher display operation triggered by a user for the target order, and the target order is generated based on an order request by the client for a service object; In response to the electronic certificate acquisition request, determining whether the target order has a corresponding first random number and whether the first random number has reached a first expiration time; If the target order does not have the first random number or the first random number reaches the first expiration time, regenerate a corresponding first random number for the target order and configure the first expiration time for the first random number; If the target order has a corresponding first random number and the first random number has not reached the first expiration time, obtaining the first random number; generating a target electronic certificate according to the first random number; Sending the target electronic certificate to the client, so that the client provides the target electronic certificate to the verification end, so that the verification end obtains the first random number from the target electronic certificate and sends a verification request to the service end based on the first random number; In response to receiving the verification request, obtaining a target order corresponding to the first random number; The target order is verified, and if the verification is successful, a verification success prompt message is sent to the verification end; otherwise, a verification failure prompt message is sent to the verification end.

2. The method according to claim 1, characterized in that The method further comprises: detecting whether a first random number corresponding to the target order reaches the first expiration time; When the first random number corresponding to the target order reaches the first expiration time, the first random number corresponding to the target order is deleted, and a new first random number is generated, and a first expiration time is set for the new first random number.

3. The method according to claim 2, characterized in that The electronic voucher acquisition request includes order identification information of the target order; The method further comprises: In response to the electronic voucher acquisition request, acquiring order information of the target order based on the order identification information; After generating a target electronic certificate according to the first random number, the method further includes: Generating verification data of the target electronic voucher according to the order information; Storing a first mapping relationship between the target electronic certificate and the verification data in a memory; When the first random number reaches the first expiration time, the method further includes: The first mapping relationship corresponding to the first random number is deleted from the memory, and the steps of regenerating the corresponding first random number for the target order and configuring the first expiration time for the first random number are continued.

4. The method according to claim 3, characterized in that The verifying the target order includes: In response to the verification request, obtaining the verification data based on the first mapping relationship; Parsing the verification data to obtain the order information; The target order is verified based on the order information.

5. The method according to claim 4, characterized in that If the verification is successful, the method further includes: The first mapping relationship is deleted from the memory.

6. The method according to claim 4, characterized in that After sending the verification failure prompt information to the verification terminal, the method further includes: The verification failure prompt information is sent to the client to prompt the client to resend the electronic certificate acquisition request.

7. The method according to claim 3, characterized in that The method further comprises: In response to the electronic credential acquisition request, setting a first operation lock corresponding to the target order, so as to block other electronic credential acquisition requests for the target order by using the first operation lock; When it is detected that the first mapping relationship between the target electronic certificate and the verification data is stored in the memory, the first operation lock is unlocked.

8. The method according to claim 6, characterized in that The method further comprises: In response to the verification request, setting a second operation lock corresponding to the target electronic credential to block other verification requests for the target electronic credential using the second operation lock; When it is detected that the first mapping relationship is deleted from the memory, the second operation lock is unlocked.

9. The method according to claim 6, characterized in that The method further comprises: In response to the verification request, setting a third operation lock corresponding to the target order, so as to prevent an order change operation on the target order by using the third operation lock; In the case where it is detected that the first mapping relationship is deleted from the memory, the third operation lock is unlocked.

10. A computing device, characterized in that including processing components and storage components; The storage component stores a computer program; the computer program is used to be called and executed by the processing component to implement the electronic certificate verification method according to any one of claims 1 to 9.

11. A computer-readable storage medium, characterized in that A computer program is stored thereon, and when the computer program is executed by the processing component, the electronic certificate verification method according to any one of claims 1 to 9 is implemented.

12. A computer program product, characterized in that The method comprises a computer program or an instruction, which, when executed by a processing component, implements the electronic certificate verification method according to any one of claims 1 to 9.

Images