Population management business cooperation method and system based on business logic control

Abstract

The invention discloses a population management business cooperation method and system based on business logic control. The method comprises the following steps of: authenticating an access request through multi-factor identity authentication and establishing a security channel encrypted by a national cryptographic algorithm; calling a versioning rule through a service logic processing engine to automatically judge the service request; dynamically loading and instantiating the process model through a business process arrangement engine according to a judgment result, and driving business circulation; and performing real-time supervision and risk early warning through the data quality inspection model in process execution. Through an integrated technical architecture of a unified logic engine, dynamic process arrangement and built-in intelligent supervision, the technical problems of difficult cross-regional collaboration, process solidification, supervision lagging and weak data security of population management business are solved.

Description

TECHNICAL FIELD

[0001] The present application relates to a population management business collaboration method based on business logic control, and also relates to a corresponding population management business collaboration system, and belongs to the technical field of computer application. BACKGROUND

[0002] Population management business covers core livelihood fields such as birth registration, household registration, and identity card handling, and has typical characteristics such as long business chain, high cross-departmental collaboration requirements, and strong data security and compliance.

[0003] However, the existing technical architecture has systematic technical defects when dealing with the above-mentioned requirements. First, the business rules are scattered in the code of various local systems, and there is a lack of unified technical control engine, which leads to different processing standards for the same business in different regions, resulting in data discrepancies and repeated development, and it is difficult to update the rules and difficult to audit. Secondly, the business process relies on hard coding or manual configuration, and lacks the support of process engine technology such as modeling, orchestration, and versioning, which leads to rigid process changes, low cross-departmental collaboration efficiency, and high risk of change. Thirdly, the existing system has weak supervision capability, mainly relying on post-event statistics, and lacks intelligent supervision technology loop covering real-time data quality inspection, risk early warning, abnormal tracking, and quantitative evaluation, which cannot realize intervention in the middle of the process.

[0004] In the Chinese patent application with publication number CN114896284A, although a general business rule definition and execution method is provided, the technical focus is on the rule engine itself, and an end-to-end collaboration technical architecture for the complex business scenario of population management is not constructed. Specifically, this type of solution lacks the technical design of deeply integrating unified logic control, flexible process orchestration, intelligent operation supervision, and systematic security protection, and therefore cannot solve the global problems caused by the aforementioned system-level technical architecture defects. SUMMARY

[0005] The primary technical problem to be solved by the present application is to provide a population management business collaboration method based on business logic control.

[0006] Another technical problem to be solved by the present application is to provide a population management business collaboration system based on business logic control.

[0007] To achieve the above technical purposes, the present application adopts the following technical solutions: According to the first aspect of the embodiment of the present application, a population management business collaboration method based on business logic control is provided, which is executed by a business collaboration platform deployed in a server, and includes the following steps: S1: receiving a service access request from an external service system, performing identity authentication and legality verification on the service access request through a multi-factor identity authentication method, and establishing a secure access channel after verification; wherein sensitive information is encrypted based on a national encryption algorithm during data transmission; S2: calling versioned business logic rules through a pre-configured business logic processing engine, performing automatic logic verification and decision on the service access request transmitted through the secure access channel, and outputting decision results and logic control instructions; S3: dynamically loading and instantiating the corresponding business process model according to the logic control instructions output by step S2 through a business process orchestration engine, and driving the business data to flow according to the predefined process nodes, execution order and condition judgment; S4: During the process instance execution of step S3, real-time checking of the business data in the process through a pre-configured data quality checking model, and triggering risk warning and abnormal tracking based on the checking results.

[0008] Preferably, the population management business collaboration method further comprises: Real-time monitoring of the running state, execution efficiency and system resource consumption of the business in steps S1 to S4, and dynamically allocating computing resources according to the number of current task calls and response time.

[0009] Preferably, the step S1 specifically comprises: Performing access authorization approval on the service access request, and generating authorization permission information containing business authorization code; When the business is called, the access unit, IP address and authorization validity period of the service access request are authenticated, and the legality of the data packet format and request parameters is checked.

[0010] Preferably, in step S2, the execution process of the business logic processing engine comprises: Performing logic parameter configuration, versioned storage and management of business logic rules; Calling the versioned business logic rules through an application program interface, and recording the call time and success status.

[0011] Preferably, in step S3, the execution process of the business process orchestration engine comprises: Performing process modeling to define the node topology structure of the business process; Performing process version maintenance management to support enabling and disabling operations on the published process configuration.

[0012] Preferably, the step S4 specifically comprises: A supervision model configured to check the content of data items and logical relationship between data items; Read the task attribute of the supervision model, start the checking task to screen abnormal business, and give a pre-warning prompt; Track the state of the discovered abnormal information and give a feedback reminder.

[0013] Preferably, in step S1, the multi-factor identity authentication mode includes a combination of at least two authentication factors: account and password, digital certificate, portrait biometric feature, and fingerprint biometric feature.

[0014] Preferably, when the portrait biometric feature or the fingerprint biometric feature is used for identity authentication, the collected biometric feature data is encrypted in real time based on a national encryption algorithm and live body detection, and then the encrypted data is compared and verified with a pre-stored template.

[0015] Preferably, the identity authentication is performed by a unified authentication server, and a time-limited security token is generated after the authentication is passed; the security token is used for identity identification and permission verification in subsequent business requests.

[0016] According to a second aspect of an embodiment of the present application, a population management business collaboration system based on business logic control is provided, comprising a processor and a memory; wherein the memory is coupled to the processor and is used to store a computer program, when the computer program is executed by the processor, the processor implements the above-mentioned population management business collaboration method.

[0017] Compared with the prior art, the present application realizes an efficient business collaboration mode by constructing a technical architecture driven by a dual-core of a "business logic processing engine" and a "business process orchestration engine". The technical effects are as follows: first, by unified logical decision and dynamic instantiation of process, the core pain points of business rule localization and process code rigidity are solved technically, realizing the consistency and agility of national business processing. Second, by embedding "process-based intelligent supervision" inside the business process, data quality inspection and risk warning are improved from post-audit to in-process intervention, forming a closed-loop technical supervision system, which significantly improves business compliance and data credibility. Third, by deeply integrating the national encryption algorithm in every step from access verification to data processing, an endogenous security protection system is constructed, ensuring the confidentiality and integrity of the whole-link data. Finally, the present application collects the population management business from scattered and heterogeneous systems, and upgrades it to a modern technical platform with efficient collaboration, intelligent control, and security and credibility. BRIEF DESCRIPTION OF DRAWINGS

[0018] Figure 1 A flowchart of a population management business collaboration method based on business logic control provided for the first embodiment of the present application; Figure 2 This is a flowchart of the birth registration process provided in the first embodiment of the present invention; Figure 3 This is a flowchart of the resident identity card application process provided in the first embodiment of the present invention; Figure 4 The operational logic architecture diagram of the population management business collaboration platform based on business logic control provided in the first embodiment of the present invention; Figure 5 This is a schematic diagram of the structure of a population management business collaboration system based on business logic control, provided for the second embodiment of the present invention. Detailed Implementation

[0019] The technical content of the present invention will now be described in detail with reference to the accompanying drawings and specific embodiments.

[0020] First Embodiment like Figure 1 As shown, the first embodiment of the present invention provides a population management business collaboration method based on business logic control, which is executed by a business collaboration platform deployed on a server, and includes at least the following steps: S1: Receive business access requests from external business systems, perform identity authentication and legality verification on the business access requests through multi-factor authentication, and establish a secure access channel after successful verification; during data transmission, sensitive information is encrypted based on national cryptographic algorithms.

[0021] S2: Through a pre-configured business logic processing engine, versioned business logic rules are invoked to automatically perform logical verification and adjudication on business access requests passed through the secure access channel, and the adjudication results and logic control instructions are output.

[0022] S3: Through the business process orchestration engine, based on the logical control instructions output in step S2, the corresponding business process model is dynamically loaded and instantiated, driving business data to flow according to predefined process nodes, execution order and condition judgments.

[0023] S4: During the execution of the process instance in step S3, the business data in the flow is checked in real time through the pre-configured data quality inspection model, and risk warnings and anomaly tracking are triggered based on the inspection results.

[0024] Preferably, the running status, execution efficiency and system resource consumption of the services in steps S1 to S4 are monitored in real time, and computing resources are dynamically allocated according to the number of calls and response time of the current tasks.

[0025] In one embodiment of the present application, step S1 specifically comprises: performing access authorization approval on the service access request, and generating authorization permission information containing a service authorization code.

[0026] When the service is called, the access unit, IP address and authorization validity period of the service access request are authenticated, and the data packet format and request parameters are checked for legality.

[0027] The service access management in step S1 includes service access application, access authorization approval, service access verification, service access start and stop, service access extension, service access cancellation, and service matter management.

[0028] The service access application refers to providing service access application registration and information change. The information of service access application registration mainly includes application access name, access identifier, access service type, access description, maximum concurrency, access period, access IP address, and the like. The information items of access applicant and application access time are automatically assigned by the platform according to user login information and platform time.

[0029] The access authorization approval refers to the authorization approval operation on the service access application. The service access authorization approval result includes two kinds of approval pass and approval fail, and the service access application that fails to pass the approval needs to fill in the approval explanation in the platform. After the approval pass, the service can be formally operated for service access calling, and the authorization permission information is generated after the authorization approval pass, which is downloaded by the calling platform through the service authorization management, and is used in the service access calling. The service authorization code can be repeatedly downloaded and used.

[0030] The data items of access authorization approval mainly include service access approver, approval unit, and service access approval time, which are automatically assigned by the platform according to user login information and platform time. The authorization permission information is generated after the service approval pass, including service identifier, access unit, user name, password, access platform IP address, access validity period start date, and validity period end date.

[0031] After the completion of access authorization approval, the approval result, approval time, and approval person and the like are registered and recorded in detail. The access approval record can be queried and viewed in detail according to the access unit, access name, access type, access mode, maximum concurrency, validity period, approval state, and approval time.

[0032] The service access verification refers to the authentication and legality check of the service access when the service application unit performs service access calling.

[0033] The service access authentication mainly checks the access unit, access type, IP address, user name, password, authorized validity period start date, and access calling service name of the service access request, and compares them with the authorized information in the platform. After the comparison and verification, the service access calling request parameters are checked for legality. If the comparison and verification fail, the platform records the service calling log and rejects the service access request.

[0034] The service access legality check mainly includes checking the legality of the data packet and determining whether it is a valid data packet format. According to the service access related standards, the service request parameters are checked to determine whether there are illegal contents such as super-long, non-empty, and non-dictionary code items. For service access requests that do not pass the legality check, the platform records the service calling log and rejects the service calling.

[0035] The service access start-stop refers to the need for the service access application unit to register and record the service access application in the service access management when calling the service access, and to support the start-stop operation management of the application platform of the service access application unit.

[0036] The access service that has passed the approval can be started; The access service that has been started can be stopped.

[0037] The service access extension refers to the authorized calling extension application operation. The extension application operation is completed before the platform authorization expires (usually within 30 days before the expiration), and the service extension operation is not supported after the platform authorization expires.

[0038] The service access cancellation refers to the automatic cancellation of the service access application that is in the stop state and reaches the platform preset time limit. Manual cancellation is also supported. When the approved access application is cancelled, the platform will stop the calling of the access service application, and the cancelled service application cannot be restored.

[0039] The service matter management refers to the recording, updating, and maintenance of the service matters, business scenarios, handling requirements, and material lists in various places.

[0040] The service matter mainly includes the matter name, matter classification, mapping area, code, and required materials.

[0041] The material list mainly includes the material type, material name, and material quantity.

[0042] In addition, the multi-factor identity authentication method in step S1 includes at least two authentication factors in the following combinations: account and password, digital certificate, portrait biometric feature, and fingerprint biometric feature.

[0043] When the portrait biometric feature or the fingerprint biometric feature is used for identity authentication, the collected biometric feature data is encrypted in real time based on a national secret algorithm and live body detection is performed, and then the encrypted data is compared and verified with a pre-stored template.

[0044] Identity authentication is performed by a unified authentication server, and a time-limited security token is generated after authentication is passed; the security token is used for identity identification and permission verification in subsequent business requests.

[0045] In an embodiment of the present application, the execution process of the business logic processing engine in step S2 includes: Logical parameter configuration, versioned storage and management of business logic rules are performed.

[0046] The versioned business logic rules are called through an application program interface, and the time consumption and success status of the calling are recorded.

[0047] The business logic processing in step S2 includes logical parameter configuration, logical configuration management and logic calling processing.

[0048] The logical parameter configuration can flexibly customize parameter logic. It supports the execution of core population management businesses such as household management, identity card management, floating population and residence card management according to unified business logic rules.

[0049] The logical parameter configuration mainly includes business logic name, logic category, content description, version serial number, creation time, creator, etc. The creation time and creator are automatically assigned according to the login information and platform time.

[0050] Logical configuration management refers to the management of logical configuration query, modification, etc., including business logic name, logic category, content description, version serial number, state, creation time, creator, etc.

[0051] Through the conditions of logical name, creation time, state, etc., the completed logical configuration can be queried and searched. At the same time, the unused logical configuration can be modified.

[0052] Logical calling processing refers to the calling of the business logic application for household management, identity card management, floating population and residence card management business, which is configured and verified. In the calling process, the name of the called business, the calling result, the calling time, the calling efficiency, etc. are recorded.

[0053] The calling result includes two kinds of calling success and calling failure, and information prompt is needed for the logic calling that fails.

[0054] The calling time is automatically assigned according to the platform time.

[0055] In an embodiment of the present application, the execution process of the business process arrangement engine in step S3 comprises: Process modeling is performed to define the node topology of the business process.

[0056] Process version maintenance management is performed to support enabling and disabling operations on the published process configuration.

[0057] The business process arrangement in step S3 comprises process modeling, parameter configuration and version management.

[0058] The process modeling refers to modeling the processes of household registration management, identity card management, floating population and residence card management, including business category, process state, handling time limit, etc. The model can query and modify the defined business process for management.

[0059] The parameter configuration refers to configuring the parameters of business handling time limit and business handling process node.

[0060] The business handling time limit parameter configuration refers to configuring the business handling time limit for household registration management, identity card management, floating population and residence card management, including business category, handling time limit, etc. and providing functions of adding, deleting, modifying and querying the parameter information.

[0061] The business handling process node parameter configuration refers to configuring the business handling process node information for household registration management, identity card management, floating population and residence card management, including business name, business category, process node name, process node serial number, etc. and providing functions of adding, deleting, modifying and querying the parameter information.

[0062] The version management refers to version maintenance management of the published process configuration.

[0063] The main content of the process configuration version includes process configuration name, version number, version release time, version description, etc. The configured process version can be viewed, enabled and disabled. After the process version is disabled, the platform will stop calling the process configuration.

[0064] In an embodiment of the present application, the real-time inspection in step S4 comprises supervision model configuration, risk early warning prompt, abnormal supervision tracking and business supervision evaluation.

[0065] The supervision model configuration refers to the model configuration of business data quality inspection and abnormal business determination. The supervision model configuration information mainly includes the category, name, state, configuration time, etc. of the supervision model. The configuration time is automatically assigned according to the platform time.

[0066] The content of the data quality check includes data item content check (for example, whether the name contains illegal characters, whether the date format is correct, whether the resident ID number conforms to the rules, etc.) and logical relationship check between data items (for example, whether the certificate validity period conforms to the specification, whether the gender and the resident ID number are consistent, whether the birth date and the resident ID number are consistent, etc.).

[0067] Preferably, the configured supervision model is managed and maintained, including adding, querying, updating, etc. of the supervision model. When the supervision model is updated and maintained, the operator and the operation time, etc. are recorded.

[0068] After the supervision model index configuration is completed, the data quality check index is specified and the check is performed.

[0069] The risk early warning prompt refers to reading the configured supervision model task attribute information through the platform, starting the check task at a specified time point, recording the execution state, screening the abnormal business, and reminding the existing data quality problems.

[0070] The risk early warning mainly includes two categories: one is the early warning of abnormal business information. The main purpose of this kind of supervision is to remind the business handling personnel to find abnormal changes or modification operations, so as to facilitate them to effectively supervise the population handling work; the second is the logical relationship check early warning of business information. This kind of check is mainly aimed at the errors of the logical relationship between the business information data caused by the time sequence, business data quality, etc. in the data maintenance process.

[0071] The abnormal supervision tracking refers to timely publishing the abnormal information of daily supervision to each place and tracking the state. After each place completes the processing of the received abnormal supervision information, timely feedback is reported. The units that do not timely report the processing feedback are tracked and reminded.

[0072] The business supervision evaluation refers to ranking and displaying the daily supervision processing situation of each business access unit through bar charts, curve charts and other chart modes.

[0073] In an embodiment of the present application, the running state, execution efficiency and system resource consumption of the business in steps S1 to S4 are monitored in real time, and the computing resources are dynamically allocated according to the current task calling quantity and response time, which specifically includes the following contents: The business running monitoring includes task scheduling and running monitoring.

[0074] Among them, the task scheduling refers to checking the configuration and scheduling functions of the task according to the business running situation. The resources are dynamically allocated according to the current task calling quantity and response time. At the same time, manual task scheduling is also supported. The coordinated operation of the tasks such as maintenance data acquisition, loading, quality check, statistical index extraction, etc. is ensured.

[0075] Preferably, the platform administrator defines the attribute information of the business operation monitoring through the new task function, including task name, index name, task type, task status, etc.

[0076] The operation monitoring refers to the centralized monitoring of the population management business operation state and execution efficiency, providing state tracking, efficiency monitoring, abnormality reminding, etc.

[0077] The business operation state includes two states of normal and abnormal. For the business with operation abnormality, the business abnormality occurrence time and business abnormality reason can be viewed.

[0078] And the running state of the current business can be viewed in detail, including business operation quantity, business abnormality quantity, peak operation quantity, operation response time, etc.

[0079] The current business operation situation such as business operation quantity, business abnormality quantity, peak operation quantity, operation response time, etc. can be visually presented in the form of line chart, curve chart, etc.

[0080] In addition, in the aspect of security management, it is also necessary to ensure the data collection security, data storage security, data transmission security and data application and service security.

[0081] Among them, the data collection security refers to the two-way authentication of terminal equipment by using the national secret algorithm, establishing a white list of trusted devices to prevent illegal access; real-time encryption of sensitive biometric data such as fingerprints and portraits by using the national secret algorithm, integrating live detection and data integrity verification to eliminate the risk of forgery and tampering.

[0082] The data storage security refers to the encryption processing of personal information. The name, gender, nationality, birth date, address and citizen identification number in the personal information are encrypted by using the national secret algorithm.

[0083] The data transmission security refers to the establishment of a secure transmission channel based on the national secret algorithm, and the encryption processing of important privacy information such as citizen identification number and name during the transmission process.

[0084] The data application and service security refers to the display of data according to the permission level; through the log record data usage track, the whole process can be traced.

[0085] And the basic support application, including: identity authentication, service management, log management, query statistics, visual presentation and global parameter configuration.

[0086] Among them, the identity authentication refers to the identity authentication and authorization provided by the platform, supporting multi-factor identity authentication methods such as account / password, digital certificate, portrait and fingerprint. It supports the configuration of password strength policy. It ensures the access of legal users and the security of the platform.

[0087] Service management refers to the management of various interface services by the platform, including interface service type configuration, service registration management, etc.

[0088] Interface service type configuration mainly includes service name, information classification, status, service type, etc. Service registration management mainly includes interface service type, interface service description, service IP address, service party basic information (unit name, unit code, contact person, contact number, manufacturer name), registrant, registration time, etc. The platform automatically assigns the registrant and registration time according to user login information and platform time.

[0089] Log management includes user login logs, operation logs, etc. It provides support for log auditing, analysis, statistics, etc.

[0090] Query statistics refer to querying and statistics of various data managed by the platform, including business access statistics, service matter statistics, business exception supervision statistics, etc. It supports drilling into statistical results and exporting statistical results.

[0091] Visual presentation refers to visualizing various data such as business access quantity, service matter record quantity, business exception supervision quantity, and running status through visual charts.

[0092] Global parameter configuration refers to the configuration management of various global parameters and data dictionaries required for platform operation, supporting the definition and maintenance of parameter name, parameter value, and parameter validity.

[0093] Next, take the birth registration business and resident ID card acceptance business as an example for detailed description.

[0094] As shown in Figure 2 , in the birth registration business access stage, the local population system submits a service matter application, and the department-level business logic control center manages the service matter, returning the matter list and material list to the local population system.

[0095] In the logic control stage, the registration information will be checked for ID number legality, address consistency, duplicate registration blocking, and black and gray list interception according to unified rules, avoiding business differences due to rule differences.

[0096] Process management unifies the management of the birth registration process. After the local population system selects the "birth registration application" sub-process, it submits the registration information to the department-level business logic control center, which then performs the birth registration service process to determine whether to allow the birth registration to proceed. If yes, the local population system requests a business approval service from the department-level business logic control center, the department-level business logic control center performs approval, and after approval, generates element information (including a citizen ID number) and pushes it to the local population system.

[0097] If no, abnormal information is returned to the local population system for verification.

[0098] In the business supervision stage, the data quality model checks integrity, consistency, uniqueness, and timeliness.

[0099] In the business operation monitoring stage, indicators such as throughput, latency, and external verification success rate are collected, and automatic warnings are issued when there are abnormal fluctuations.

[0100] All data is encrypted and signed based on the national encryption algorithm during transmission and storage to ensure the confidentiality and non-repudiation of birth registration data. The final registration result is written back to the population database in real time, and abnormal information notification and archiving are completed through the underlying support application.

[0101] As shown in FIG. 1 1, in the resident ID acceptance business access stage, the local population system applies for a service matter, the department-level business logic control center manages the service matter, and returns a matter list and a material list to the local population system. Figure 3 In the logic control stage, qualification verification is performed according to the business type, such as completing population registration for the first time, meeting the effective period expiration for replacement, and project change or certificate damage. At the same time, the clarity of portrait collection, posture consistency, and fingerprint collection quality threshold are set.

[0102] Process management unifies the management of the resident ID acceptance process. After the local population system selects the "resident ID acceptance" sub-process, it submits acceptance information to the department-level business logic control center, which then performs the resident ID acceptance service process and determines whether the acceptance conditions are met.

[0103] If yes, the local population system performs the entire process of audit issuance, packaging certificate issuance, and certificate feedback, and submits certificate issuance feedback or quality feedback information to the department-level business logic control center. The department-level business logic control center generates certificate element information and returns it to the local population system. If no, abnormal information is returned to the local population system for verification.

[0104] In the business supervision stage, the data quality model checks the pass rate of portrait collection, the pass rate of fingerprint collection, the repeat application rate, and the pass rate of review.

[0105]

[0106] ​In the business operation monitoring stage, the number of certificates in process, processing cycle and abnormal piece of the certificate center are displayed in real time, and the elastic expansion is triggered when the queue backlog.

[0107] All data are encrypted and signed based on the national secret algorithm in transmission and storage, preventing biological feature leakage, and ensuring the integrity and security of the certificate information.

[0108] Through the unified business logic control center, the resident ID acceptance process can realize efficient connection and full-process traceability in aspects of reservation, certificate taking, notification and archiving.

[0109] The technical concept in the embodiment of the application finally presents the running effect as shown in Figure 4 The main functions of the population management business collaboration platform include: business access management, logic control, process management, business operation monitoring, business intelligent supervision, platform management and security management.

[0110] The business access management is used for supporting the functions of verifying, approving and authorizing the access of business and service matters; The logic control is used for supporting the functions of input verification, format conversion, logic check and information output; The process management is used for supporting the functions of process steps, execution sequence, execution time length and condition judgment; The business operation monitoring is used for supporting business operation scheduling monitoring, and providing state tracking and efficiency monitoring; The business intelligent supervision is used for supporting the quality check and supervision model, and providing business logic monitoring and tracking; The platform management is used for providing identity authentication, parameter configuration, visual presentation and service management; The security management is used for supporting the security protection of population management data collection, storage, transmission, application and service whole process.

[0111] Second embodiment On the basis of the above method, the second embodiment of the application provides a population management business collaboration system based on business logic control. As shown in Figure 5 The population management business collaboration system includes one or more processors and memories. The memory is coupled with the processor, and is used for storing a computer program, when the computer program is executed by the processor, the population management business collaboration method in the above embodiment can be realized.

[0112] The processor is configured to control the overall operation of the population management business collaboration system to complete all or part of the steps of the above method. The processor can be a central processing unit (CPU), a graphics processing unit (GPU), a field programmable logic gate array (FPGA), an application specific integrated circuit (ASIC), a digital signal processing (DSP) chip, or the like. The memory is configured to store various types of data to support the operation of the population management business collaboration system, which can include, for example, instructions for operating any application or method on the population management business collaboration system, and application-related data. The memory can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, and the like.

[0113] In one example embodiment, the population management business collaboration system can be implemented by a computer chip or entity, or by a product having certain functions, for executing the above method and achieving the technical effects consistent with the above method. A typical embodiment is a computer. Specifically, the computer can be, for example, a personal computer, a laptop computer, an in-vehicle human-machine interaction device, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0114] In another example embodiment, the present application also provides a computer-readable storage medium including program instructions, which, when executed by a processor, implement the steps of the method in any one of the above embodiments. For example, the computer-readable storage medium can be the above-mentioned memory including program instructions, which can be executed by the processor to complete the above method and achieve the technical effects consistent with the above method.

[0115] It should be noted that the above embodiments are only illustrative, and the technical solutions of each embodiment can be combined, all of which are within the protection scope of the present application.

[0116] The population management business collaboration method and system based on business logic control provided by the present application are described in detail above. Any obvious modifications made by those skilled in the art without departing from the essential content of the present application will constitute an infringement of the patent right of the present application and will bear the corresponding legal responsibility.

Claims

1. A population management business collaboration method based on business logic control, executed by a business collaboration platform deployed on a server. Its characteristics include the following steps: S1: Receive a business access request from an external business system, and verify the identity and legitimacy of the business access request through multi-factor authentication. After successful verification, a secure access channel is established. During data transmission, sensitive information is encrypted using national cryptographic algorithms. S2: Through the pre-configured business logic processing engine, versioned business logic rules are invoked to automatically perform logical verification and adjudication on business access requests transmitted through the secure access channel, and the adjudication results and logic control instructions are output. S3: Through the business process orchestration engine, based on the logical control instructions output in step S2, dynamically load and instantiate the corresponding business process model, and drive business data to flow according to predefined process nodes, execution order and condition judgments. S4: During the execution of the process instance in step S3, the business data in the flow is checked in real time through the pre-configured data quality inspection model, and risk warnings and anomaly tracking are triggered based on the inspection results.

2. The population management business collaboration method as described in claim 1, characterized in that... Also includes: The running status, execution efficiency, and system resource consumption of the services in steps S1 to S4 are monitored in real time, and computing resources are dynamically allocated based on the number of calls and response time of the current tasks.

3. The population management business collaboration method as described in claim 1, characterized in that... Step S1 specifically includes: The access request is approved for access authorization, and authorization information containing the service authorization code is generated. During business invocation, the access unit, IP address, and authorization validity period of the business access request are authenticated, and the data packet format and request parameters are checked for legality.

4. The population management business collaboration method as described in claim 1, characterized in that... In step S2, the execution process of the business logic processing engine includes: Configure logical parameters and store and manage business logic rules in a versioned manner; The versioned business logic rules are invoked through the application programming interface, and the invocation time and success status are recorded.

5. The population management business collaboration method as described in claim 1, characterized in that... In step S3, the execution process of the business process orchestration engine includes: Perform process modeling and define the node topology of the business process; Perform maintenance and management of process versions, and support enabling and disabling the configuration of published processes.

6. The population management business collaboration method as described in claim 1, characterized in that... Step S4 specifically includes: Configure a regulatory model for inspecting the content of data items and the logical relationships between data items; Read the task attributes of the monitoring model, start the inspection task to screen for abnormal business, and issue early warning prompts; Track and process any abnormal information that is detected, and provide feedback and alerts.

7. The population management business collaboration method as described in claim 1, characterized in that... In step S1, the multi-factor authentication method includes a combination of at least two of the following authentication factors: account and password, digital certificate, facial biometrics, and fingerprint biometrics.

8. The population management business collaboration method as described in claim 7, characterized in that: When using the facial biometrics or fingerprint biometrics for identity authentication, the collected biometric data is encrypted in real time and subjected to liveness detection based on the national cryptographic algorithm, and then the encrypted data is compared and verified with a pre-stored template.

9. The population management business collaboration method as described in claim 7, characterized in that: The identity authentication is performed by a unified authentication server. Upon successful authentication, a time-limited security token is generated. The security token is used for identity identification and permission verification in subsequent business requests.

10. A population management business collaboration system based on business logic control, characterized in that... It includes a processor and a memory; wherein the memory is coupled to the processor and is used to store a computer program, which, when executed by the processor, causes the processor to implement the population management business collaboration method according to any one of claims 1 to 9.

Images