Cross-system customer information interaction method and device and computer equipment

Abstract

The embodiment of the invention provides a cross-system customer information interaction method and device and computer equipment. The method comprises the following steps: deploying a data encryption and decryption module in a first service system and a second service system which are isolated from each other; generating a key pair through a data encryption and decryption module of a second service system, wherein the key pair comprises a public key and a private key; in the process of downloading the customer information from the first service system by using the local system, acquiring a public key in a key pair generated by a data encryption and decryption module of the second service system through the local system, and encrypting the customer information downloaded from the first service system by using the public key to obtain encrypted data; and when the local system is utilized to upload the encrypted data to the second service system, decrypting the uploaded encrypted data through a private key in a key pair generated by a data encryption and decryption module of the second service system to obtain customer information. The risk of leaking customer sensitive information is avoided, and the method is low in cost and easy to implement.

Description

Technical Field

[0001] This application relates to the field of computer technology, specifically to a cross-system customer information interaction method, apparatus, and computer equipment. Background Technology

[0002] When conducting cross-system business within a bank, physical and logical isolation measures are typically implemented to ensure risk control and compliance. For example, physical and network isolation are used between the parent company's system and the subsidiary's system. Data cannot be transmitted over the network between the isolated parent company and subsidiary systems, nor can data be directly exchanged through the system backends.

[0003] Customer information in a banking system is critical and sensitive information. In the case of physical isolation between the parent company system and the subsidiary system, in order to improve the security of critical and sensitive information, the existing technologies for customer information interaction are usually as follows: 1) Establish a dedicated data interaction platform, through which the parent company system and the subsidiary system transmit data to ensure the security and integrity of the data transmission process; 2) Use encryption technology to protect the data in transmission.

[0004] However, obtaining customer information from the parent company or subsidiaries through a data exchange platform requires business personnel to manually retrieve the information on the platform and then import it into the interface. Furthermore, the platform's setup and maintenance costs are substantial. Additionally, with the parent company's system and the subsidiary's system physically isolated, encrypted communication cannot achieve point-to-point transmission, let alone subsequent data decryption. Summary of the Invention

[0005] The purpose of this application is to provide a cross-system customer information interaction method, a cross-system customer information interaction device, and a computer device.

[0006] To achieve the above objectives, the first aspect of this application provides a cross-system customer information interaction method, comprising: Deploy data encryption / decryption modules in the isolated first and second business systems; A key pair is generated through the data encryption / decryption module of the second business system, and the key pair includes a public key and a private key. During the process of downloading customer information from the first business system using a local system connected to the first business system network, the public key in the key pair generated by the data encryption / decryption module of the second business system is obtained through the local system, and the customer information downloaded from the first business system is encrypted using the public key to obtain encrypted data. When encrypted data is uploaded to the second business system via a local system connected to the second business system's network, the uploaded encrypted data is decrypted using the private key in the key pair generated by the second business system's data encryption / decryption module, thus obtaining the customer information.

[0007] In this embodiment of the application, the step of generating a key pair through the data encryption and decryption module of the second business system includes: the data encryption and decryption module of the second business system obtains the identity ID of the local system user, calculates the identity hash value based on the identity ID of the local system user, generates the identity root key according to the identity hash value, generates a public key and a private key according to the identity hash value and the identity root key, and uploads the public key to the blockchain network for evidence storage.

[0008] In this embodiment of the application, the step of obtaining the public key from the key pair generated by the data encryption / decryption module of the second business system through the local system, and using the public key to encrypt customer information downloaded from the first business system to obtain encrypted data includes: obtaining the public key from the blockchain network through the local system, using the public key to encrypt the customer information downloaded from the first business system to obtain encrypted data, using the public key to encrypt the current timestamp and random number to obtain signature information, and appending the signature information to the encrypted data.

[0009] In this embodiment of the application, the step of decrypting the uploaded encrypted data using the private key in the key pair generated by the data encryption / decryption module of the second business system includes: The data encryption / decryption module of the second business system obtains a blockchain key from the blockchain network. The blockchain key is obtained by encrypting the public key, the current timestamp, and a random number. The data encryption / decryption module of the second business system uses the blockchain key to verify the signature information in the encrypted data. When the verification is successful, it uses the private key in the key pair generated by the data encryption / decryption module of the second business system to decrypt the encrypted data.

[0010] In this embodiment of the application, the cross-system customer information interaction method further includes: Perform integrity verification on the decrypted customer information; Upon successful integrity verification, customer information is populated into the customer creation interface of the second business system.

[0011] In this embodiment of the application, the cross-system customer information interaction method further includes: When downloading customer information from the primary business system using the local system, the user's identity on the local system is verified.

[0012] In this embodiment of the application, the verification of user identity in the local system includes: When the local system initiates a data transmission request to the first business system, it submits the multi-factor identity credentials of the local system user for identity verification. The multi-factor identity credentials include knowledge factors, biometric factors and hardware factors. After the identity verification is successful, the system verifies whether the identity information of the local system user is consistent with the identity information stored on the blockchain. If they are consistent, the local system user's identity verification is confirmed to be successful.

[0013] In this embodiment of the application, the cross-system customer information interaction method further includes: A key pair is generated through the data encryption / decryption module of the first business system, and the key pair includes a public key and a private key. During the process of downloading customer information from the second business system using a local system connected to the second business system network, the public key in the key pair generated by the data encryption / decryption module of the first business system is obtained through the local system, and the customer information downloaded from the second business system is encrypted using the public key to obtain encrypted data. When the local system, connected to the network of the first business system, uploads encrypted data to the first business system, the private key in the key pair generated by the data encryption / decryption module of the first business system is used to decrypt the uploaded encrypted data to obtain customer information.

[0014] A second aspect of this application provides a cross-system customer information interaction device, comprising: a customer information download module and a customer information upload module deployed on a local system, a data encryption module or a data decryption module deployed on a first business system, and a data decryption module or a data encryption module deployed on a second business system, wherein the first business system and the second business system are isolated from each other, and the first business system and the second business system are respectively connected to the local system network; The data encryption module is used to generate a key pair, which includes a public key and a private key. The customer information download module is used to download customer information from the first business system, obtain the public key from the key pair generated by the data encryption module of the second business system through the local system, and use the public key to encrypt the customer information downloaded from the first business system to obtain encrypted data. The customer information uploading module is used to upload the encrypted data to the second business system; The data decryption module is used to obtain the private key from the key pair generated by the data encryption module, and uses the private key to decrypt the encrypted data uploaded to the second business system to obtain customer information.

[0015] In this embodiment of the application, the method for the data encryption module to generate key pairs includes: The data encryption module obtains the identity of the local system user, calculates the identity hash value based on the local system user's identity, generates the identity root key based on the identity hash value, generates a public key and a private key based on the identity hash value and the identity root key, and puts the public key on the blockchain network for storage.

[0016] In this embodiment of the application, the step of obtaining the public key from the key pair generated by the data encryption module of the second business system through the local system, and using the public key to encrypt customer information downloaded from the first business system to obtain encrypted data, includes: The system obtains a public key from the blockchain network through its local system, uses the public key to encrypt customer information downloaded from the first business system to obtain encrypted data, and uses the same public key to encrypt the current timestamp and random number to obtain signature information, which is then appended to the encrypted data.

[0017] In this embodiment of the application, the data decryption module uses the private key to decrypt encrypted data uploaded to the second business system, including: The data decryption module obtains a blockchain key from the blockchain network, which is obtained by encrypting the public key, the current timestamp, and a random number. The signature information in the encrypted data is verified using the blockchain key, and the encrypted data is decrypted using the private key when the verification is successful.

[0018] A third aspect of this application provides a computer device, comprising: Memory, which stores computer programs; A processor is used to execute the computer program to implement the aforementioned cross-system customer information interaction method.

[0019] A fourth aspect of this application provides a machine-readable storage medium storing instructions that, when executed by a processor, configure the processor to perform the aforementioned cross-system client information interaction method.

[0020] The fifth aspect of this application provides a computer program product, including a computer program that, when executed by a processor, implements the aforementioned cross-system customer information interaction method.

[0021] The above technical solution uses public-key encryption to download customer information from the first business system (e.g., the parent company) to the local system, storing it in encrypted form to avoid the risk of leaking sensitive customer information. The encrypted file is then uploaded to the second business system (e.g., a subsidiary) via the local system. The second business system decrypts the encrypted file using its private key to extract the customer information, improving the security of cross-system customer information exchange and facilitating the rapid filling of interface fields with the extracted customer information for quick customer information creation. This method eliminates the need to build a data exchange platform between the parent company and subsidiary systems; it only requires the deployment of a data encryption / decryption module, resulting in low cost and ease of implementation in specific application scenarios.

[0022] Other features and advantages of the embodiments of this application will be described in detail in the following detailed description section. Attached Figure Description

[0023] The accompanying drawings are provided to further illustrate the embodiments of this application and form part of the specification. They are used together with the following detailed description to explain the embodiments of this application, but do not constitute a limitation on the embodiments of this application. In the drawings: Figure 1 This illustration schematically depicts an application environment diagram of a cross-system customer information interaction method according to an embodiment of this application; Figure 2 The illustration shows a flowchart of a cross-system customer information interaction method according to an embodiment of this application; Figure 3 The diagram illustrates the logical framework of a customer information interaction method according to an embodiment of this application. Figure 4 This schematic diagram illustrates a structural block diagram of a cross-system customer information interaction device according to an embodiment of this application; Figure 5 The diagram illustrates the internal structure of a computer device according to an embodiment of this application. Detailed Implementation

[0024] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. It should be understood that the specific embodiments described herein are only for illustration and explanation of the embodiments of this application and are not intended to limit the embodiments of this application. All other embodiments obtained by those skilled in the art based on the embodiments of this application without creative effort are within the scope of protection of this application.

[0025] It should be noted that if the embodiments of this application involve descriptions such as "first" or "second," these descriptions are for descriptive purposes only and should not be construed as indicating or implying their relative importance or implicitly specifying the number of technical features indicated. Therefore, features defined with "first" or "second" may explicitly or implicitly include at least one of those features. Furthermore, the technical solutions of the various embodiments can be combined with each other, but this must be based on the ability of those skilled in the art to implement them. If the combination of technical solutions is contradictory or impossible to implement, it should be considered that such a combination of technical solutions does not exist and is not within the scope of protection claimed in this application.

[0026] The acquisition, transmission, storage, use, and processing of data in this application comply with relevant national laws and regulations. Furthermore, it should be noted that existing industry solutions such as software, components, and models may be mentioned in the embodiments of this application. These should be considered exemplary, intended only to illustrate the feasibility of implementing the technical solution of this application, and do not imply that the applicant has already used or necessarily used such solutions.

[0027] The cross-system customer information interaction method provided in this application can be applied to, for example... Figure 1 The application environment is shown below. The first business system 102 and the second business system 104 are isolated from each other. The first business system 102 is located at location A, and the second business system 104 is located at location B. The first business system 102 and the second business system 104 are network isolated and cannot interact via the network. The local system 106 is located at location C. The local system 106 is network connected to the first business system 102 and the second business system 104. Data encryption / decryption modules are deployed in both the first and second business systems to generate key pairs for encryption and decryption. Alternatively, data encryption / decryption modules are deployed between the first business system and the local system, and between the second business system and the local system. The local system obtains the public key from the key pair generated by the data encryption / decryption modules. When the local system downloads customer information from the first business system, it uses the obtained public key to encrypt the downloaded customer information to obtain encrypted data. When the local system uploads the encrypted data to the second business system, the second business system decrypts the uploaded encrypted data using the private key from the key pair to obtain the customer information. The local system 106 can be, but is not limited to, various personal computers, laptops, smartphones, tablets, portable wearable devices, etc. The first business system 102 can be the bank's parent company system or the bank's subsidiary system, and the second business system 104 can be the bank's subsidiary system or the bank's parent company system. This system can be implemented using an independent server or a server cluster composed of multiple servers.

[0028] The cross-system customer information interaction method provided in this application uses public-key encryption to download customer information from the first business system (such as the parent company) to the local system and store it in encrypted form, thus avoiding the risk of leaking sensitive customer information. After the encrypted file is uploaded to the second business system (such as a subsidiary) through the local system, the second business system decrypts and extracts the customer information using its private key, improving the security of cross-system customer information interaction and facilitating the quick filling of interface fields with the extracted customer information for rapid customer information creation. This method does not require building a data interaction platform between the parent company system and the subsidiary system; it only requires the deployment of a data encryption and decryption module, resulting in low cost and easier implementation in specific application scenarios.

[0029] Figure 2 A schematic flowchart illustrating a cross-system customer information interaction method according to an embodiment of this application is shown. Figure 2 As shown, in one embodiment of this application, a cross-system customer information interaction method is provided. This embodiment applies this method to the above-mentioned... Figure 1 Taking the first business system 102 and the second business system 104 or the local system 106 as examples, the following steps are included: Step S202: Deploy data encryption / decryption modules in the mutually isolated first and second business systems; Step S204: Generate a key pair through the data encryption / decryption module of the second business system. The key pair includes a public key and a private key. Step S206: During the process of downloading customer information from the first business system using the local system connected to the network of the first business system, the public key in the key pair generated by the data encryption and decryption module of the second business system is obtained through the local system, and the obtained public key is used to encrypt the customer information downloaded from the first business system to obtain encrypted data. In step S208, when the encrypted data is uploaded to the second business system using the local system connected to the network of the second business system, the uploaded encrypted data is decrypted using the private key in the key pair generated by the data encryption and decryption module of the second business system to obtain customer information.

[0030] Figure 2 This is a flowchart illustrating a cross-system customer information interaction method in one embodiment. It should be understood that, although... Figure 2 The steps in the flowchart are shown sequentially as indicated by the arrows, but these steps are not necessarily executed in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order in which these steps are executed, and they can be performed in other orders. Figure 2At least some of the steps in the process may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these sub-steps or stages is not necessarily sequential, but can be executed in turn or alternately with other steps or at least some of the sub-steps or stages of other steps.

[0031] In one embodiment, the data encryption / decryption module periodically generates key pairs. The specific process is as follows: the data encryption / decryption module of the second business system obtains the identity ID of the local system user, calculates the identity hash value (IH) based on the identity ID of the local system user, generates the identity root key (IRK) based on the identity hash value (IH), generates a public key (IRK_Pub) and a private key (IRK_Priv) based on the identity hash value (IH) and the identity root key (IRK), and uploads the public key (IRK_Pub) to the blockchain network for storage.

[0032] In one embodiment, the encrypted data is obtained by encrypting customer information downloaded from the first business system using the obtained public key. Specifically, this includes: obtaining a public key (IRK_Pub) from the blockchain network through the local system, encrypting the customer information downloaded from the first business system using the public key (IRK_Pub) to obtain encrypted data, encrypting the current timestamp (TS) and a random number (Nonce) using the public key to obtain signature information, and appending the signature information to the encrypted data.

[0033] In one embodiment, the uploaded encrypted data is decrypted using the private key in the key pair generated by the data encryption / decryption module of the second business system. Specifically, the data encryption / decryption module of the second business system obtains a blockchain key from the blockchain network. The blockchain key is obtained by encrypting the public key, the current timestamp (TS), and a random number (Nonce). The data encryption / decryption module of the second business system uses the blockchain key to verify the signature information in the encrypted data. If the verification is successful, the encrypted data is decrypted using the private key in the key pair generated by the data encryption / decryption module of the second business system.

[0034] In the above embodiments, a public and private key pair is generated based on the identity information of the local system user and blockchain technology. The key is then encrypted and signed according to the current timestamp and a random number to generate encrypted data. Subsequently, the data is decrypted using the blockchain key obtained based on the current timestamp and the random number, which further improves the security of customer information interaction across systems.

[0035] In one embodiment, the above-described cross-system customer information interaction method further includes the following steps: Perform integrity verification on the decrypted customer information; Upon successful integrity verification, customer information is populated into the customer creation interface of the second business system.

[0036] In one embodiment, the aforementioned cross-system customer information interaction method further includes: verifying the user identity of the local system when downloading customer information from the first business system using the local system. The specific method for verifying the user identity of the local system is as follows: when the local system initiates a data transmission request to the first business system, it submits a multi-factor identity credential of the local system user for identity verification. The multi-factor identity credential includes knowledge factors, biometric factors, and hardware factors. Knowledge factors include, for example, account passwords and verification codes; biometric factors include, for example, fingerprints, faces, and voiceprints; and hardware factors include, for example, device binding verification (the current device SN is consistent with the one used during registration) and a USB key (stores a user identity digest). After successful identity verification, it is verified whether the identity information of the local system user is consistent with the identity information stored on the blockchain. If they are consistent, the identity verification of the local system user is confirmed to be successful.

[0037] In the above embodiments, the legitimacy of local system users is verified based on multi-factor authentication credentials and blockchain evidence storage, which can prevent customer information from being downloaded by non-compliant users and ensure data security.

[0038] The aforementioned cross-system customer information exchange method also includes the following steps: A key pair is generated through the data encryption / decryption module of the first business system, and the key pair includes a public key and a private key. During the process of downloading customer information from the second business system using a local system connected to the second business system network, the public key in the key pair generated by the data encryption / decryption module of the first business system is obtained through the local system, and the customer information downloaded from the second business system is encrypted using the public key to obtain encrypted data. When the local system, connected to the network of the first business system, uploads encrypted data to the first business system, the private key in the key pair generated by the data encryption / decryption module of the first business system is used to decrypt the uploaded encrypted data to obtain customer information.

[0039] Figure 3 This diagram schematically illustrates the logical framework of a customer information interaction method according to an embodiment of this application. Figure 3As shown in a specific example, the data encryption / decryption module periodically generates new key pairs, providing a public key download function. Exported file content is encrypted with the public key, while imported files are decrypted with the private key. The customer information download module is used to export customer information after it has been retrieved from the interface. Exporting requires inputting the public key, and the data encryption module generates an encrypted file which is then downloaded locally. The customer information upload module imports the customer information file generated by the customer information download module from the interface. In the background, the file is decrypted using the private key generated by the data decryption module, and the parsed customer information is then populated into the customer creation page. The data encryption and decryption modules can be deployed in the first business system (e.g., the parent company) and the second business system (e.g., the subsidiary). The customer information download and upload modules can be deployed on the local system, or between the first business system (e.g., the parent company) and the local system, or between the second business system (e.g., the subsidiary) and the local system.

[0040] For situations where customer information data is synchronized from the parent company to the subsidiary, the steps are as follows: 1. The data encryption module in the subsidiary system periodically generates a key pair, stores it in the system, and provides the public key for download; 2. Business personnel download the public key from the subsidiary's customer information system interface and save the public key string locally; 3. Sales personnel download customer information from the parent company's customer information system interface and enter the public key. The data file downloaded to the local machine is encrypted with the public key. 4. After uploading the encrypted customer information file from step three to the subsidiary's customer information system interface, the sales personnel decrypt it using their private key. Once the decrypted data is successfully verified, the data is displayed in the customer information field on the interface. After completing the other fields, the sales personnel submit the data and create a new customer.

[0041] For synchronizing customer information data from a subsidiary to the parent company, the steps are as follows: 1. The data encryption module in the parent company's system periodically generates a key pair, stores it in the system, and provides the public key for download; 2. Business personnel download the public key from the parent company's customer information system interface and save the public key string locally; 3. Sales personnel download customer information through the subsidiary's customer information system interface, and simultaneously enter the public key. The data file downloaded to the local machine is encrypted with the public key. 4. After uploading the encrypted customer information file from step three to the parent company's customer information system interface, the sales personnel decrypt it using the private key. Once the decrypted data is successfully verified, the data is displayed in the customer information field of the interface. After completing the other fields, the sales personnel submit and create a new customer.

[0042] In this example, data files downloaded on one end of the parent company and one end can be directly uploaded to the other end. After verification, they are directly populated into the customer creation interface, reducing entry time, improving data accuracy, and enhancing the efficiency and security of cross-organizational information sharing. While solving the problem of rapid interoperability of limited sensitive data between the parent and subsidiary companies, it also prevents the local storage of plaintext sensitive customer information, avoiding the risk of information leakage.

[0043] Figure 4 A schematic block diagram illustrating a cross-system customer information interaction device according to an embodiment of this application is shown. Figure 4 As shown, in one embodiment, a cross-system customer information interaction device is provided, including: a data encryption module, a customer information download module, a customer information upload module, and a data decryption module. The customer information download module and the customer information upload module are deployed on a local system, the data encryption module is deployed on a first business system, and the data decryption module is deployed on a second business system; or, the data decryption module is deployed on the first business system, and the data encryption module is deployed on the second business system. The first business system and the second business system are isolated from each other, and both are connected to the local system network. The data encryption module is used to generate a key pair, which includes a public key and a private key. The customer information download module is used to download customer information from the first business system, obtain the public key from the key pair generated by the data encryption module of the second business system through the local system, and use the public key to encrypt the customer information downloaded from the first business system to obtain encrypted data. The customer information upload module is used to upload the encrypted data to the second business system. The data decryption module is used to obtain the private key from the key pair generated by the data encryption module, and use the obtained private key to decrypt the encrypted data uploaded to the second business system to obtain the customer information.

[0044] In one embodiment, the method for the data encryption module to generate a key pair is as follows: the data encryption module obtains the identity ID of the local system user, calculates the identity hash value (IH) based on the local system user's identity ID, generates the identity root key (IRK) based on the identity hash value (IH), generates a public key (IRK_Pub) and a private key (IRK_Priv) based on the identity hash value (IH) and the identity root key (IRK), and uploads the public key (IRK_Pub) to the blockchain network for notarization. In another embodiment, the public key in the key pair generated by the data encryption module of the second business system is obtained through the local system, and the customer information downloaded from the first business system is encrypted using the public key to obtain encrypted data. Specifically, this includes: obtaining the public key (IRK_Pub) from the blockchain network through the local system, encrypting the customer information downloaded from the first business system using the public key (IRK_Pub) to obtain encrypted data, and encrypting the current timestamp (TS) and the nonce using the public key to obtain signature information, and appending the signature information to the encrypted data.

[0045] The data decryption module uses the private key to decrypt the encrypted data uploaded to the second business system. Specifically, the data decryption module obtains a blockchain key from the blockchain network, uses the blockchain key to verify the signature information in the encrypted data, and decrypts the encrypted data using the private key when the verification is successful. The blockchain key is obtained by encrypting the public key, the current timestamp (TS), and a random number (Nonce).

[0046] In one embodiment, when the local system's customer information download module downloads customer information from the first business system, it needs to verify the user's identity in the local system. The specific method for verifying the user's identity in the local system is as follows: when the local system initiates a data transmission request to the first business system, it submits the local system user's multi-factor identity credentials for identity verification. These multi-factor identity credentials include knowledge factors, biometric factors, and hardware factors. Knowledge factors include account passwords and verification codes; biometric factors include fingerprints, facial recognition, and voiceprints; and hardware factors include device binding verification (the current device SN must match the one used during registration) and a USB key (which stores the user's identity digest). After successful identity verification, the system verifies whether the local system user's identity information matches the identity information stored on the blockchain. If they match, the local system user's identity verification is confirmed to be successful.

[0047] In other embodiments, the data decryption module is also used to verify the decrypted customer information, and when the verification is successful, the customer information is transmitted to the customer creation module of the second business system.

[0048] The aforementioned cross-system customer information interaction device and the aforementioned cross-system customer information interaction method have similar technical details and effects, and can be understood by referring to the technical details of the cross-system customer information interaction method provided in the above embodiments.

[0049] This application also provides a computer device, which may be a terminal, and its internal structure diagram may be as follows: Figure 5 As shown in the figure, the computer device includes a processor A01, a network interface A02, a display screen A04, an input device A05, and a memory (not shown) connected via a system bus. The processor A01 provides computing and control capabilities. The memory includes internal memory A03 and a non-volatile storage medium A06. The non-volatile storage medium A06 stores an operating system B01 and a computer program B02. The internal memory A03 provides an environment for the operation of the operating system B01 and the computer program B02 stored in the non-volatile storage medium A06. The network interface A02 is used for communication with external terminals via a network connection. When the computer program is executed by the processor A01, it implements the aforementioned cross-system client information interaction method. The display screen A04 can be a liquid crystal display (LCD) or an e-ink display. The input device A05 can be a touch layer covering the display screen, buttons, a trackball, or a touchpad mounted on the computer device casing, or an external keyboard, touchpad, or mouse.

[0050] Those skilled in the art will understand that Figure 5 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0051] In one embodiment, the data encryption module, customer information download module, customer information upload module, and data decryption module in the customer information interaction device provided in this application can be implemented as a computer program. The computer program can be implemented in various ways, such as... Figure 5 The computer runs on the computer device shown. The memory of the computer device can store various program modules. The computer program, composed of the various program modules, causes the processor to execute the steps of the customer information interaction methods in the various embodiments of this application described in this specification.

[0052] This application provides a computer program product that, when executed on a data processing device, implements a cross-system customer information interaction method: Step S204: Generate a key pair through the data encryption / decryption module of the second business system. The key pair includes a public key and a private key. Step S206: During the process of downloading customer information from the first business system using the local system connected to the network of the first business system, the public key in the key pair generated by the data encryption and decryption module of the second business system is obtained through the local system, and the obtained public key is used to encrypt the customer information downloaded from the first business system to obtain encrypted data. In step S208, when the encrypted data is uploaded to the second business system using the local system connected to the network of the second business system, the uploaded encrypted data is decrypted using the private key in the key pair generated by the data encryption and decryption module of the second business system to obtain customer information.

[0053] This application provides a machine-readable storage medium storing instructions that, when executed by a processor, configure the processor to perform the following method steps to implement a cross-system customer information interaction method: Step S204: Generate a key pair through the data encryption / decryption module of the second business system. The key pair includes a public key and a private key. Step S206: During the process of downloading customer information from the first business system using the local system connected to the network of the first business system, the public key in the key pair generated by the data encryption and decryption module of the second business system is obtained through the local system, and the obtained public key is used to encrypt the customer information downloaded from the first business system to obtain encrypted data. In step S208, when the encrypted data is uploaded to the second business system using the local system connected to the network of the second business system, the uploaded encrypted data is decrypted using the private key in the key pair generated by the data encryption and decryption module of the second business system to obtain customer information.

[0054] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0055] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0056] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0057] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0058] In a typical configuration, a computing device includes one or more processors (CPUs), input / output interfaces, network interfaces, and memory. Memory may include non-persistent memory in computer-readable media, random access memory (RAM), and / or non-volatile memory such as read-only memory (ROM) or flash RAM. Memory is an example of computer-readable media. Computer-readable media includes both permanent and non-persistent, removable and non-removable media, which can be used to store information by any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other non-transfer medium that can be used to store information that can be accessed by a computing device. As defined in this article, computer-readable media do not include transient media, such as modulated data signals and carrier waves.

[0059] It should also be noted that the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.

[0060] The above are merely embodiments of this application and are not intended to limit the scope of this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of the claims of this application.

Claims

1. A cross-system customer information interaction method, characterized in that, include: Deploy data encryption / decryption modules in the isolated first and second business systems; A key pair is generated through the data encryption / decryption module of the second business system, and the key pair includes a public key and a private key. During the process of downloading customer information from the first business system using a local system connected to the first business system network, the public key in the key pair generated by the data encryption / decryption module of the second business system is obtained through the local system, and the customer information downloaded from the first business system is encrypted using the public key to obtain encrypted data. When the encrypted data is uploaded to the second business system via a local system connected to the second business system network, the uploaded encrypted data is decrypted using the private key in the key pair generated by the data encryption / decryption module of the second business system to obtain customer information.

2. The cross-system customer information interaction method according to claim 1, characterized in that, The generation of key pairs through the data encryption / decryption module of the second business system includes: The data encryption / decryption module of the second business system obtains the identity ID of the local system user, calculates the identity hash value based on the local system user's identity ID, generates the identity root key based on the identity hash value, generates a public key and a private key based on the identity hash value and the identity root key, and uploads the public key to the blockchain network for evidence storage.

3. The cross-system customer information interaction method according to claim 2, characterized in that, The step of obtaining the public key from the key pair generated by the data encryption / decryption module of the second business system through the local system, and using the public key to encrypt customer information downloaded from the first business system to obtain encrypted data includes: The system obtains a public key from the blockchain network through its local system, uses the public key to encrypt customer information downloaded from the first business system to obtain encrypted data, and uses the same public key to encrypt the current timestamp and random number to obtain signature information, which is then appended to the encrypted data.

4. The cross-system customer information interaction method according to claim 3, characterized in that, The process of decrypting uploaded encrypted data using the private key from the key pair generated by the data encryption / decryption module of the second business system includes: The data encryption / decryption module of the second business system obtains a blockchain key from the blockchain network. The blockchain key is obtained by encrypting the public key, the current timestamp, and a random number. The data encryption / decryption module of the second business system uses the blockchain key to verify the signature information in the encrypted data. When the verification is successful, it uses the private key in the key pair generated by the data encryption / decryption module of the second business system to decrypt the encrypted data.

5. The cross-system customer information interaction method according to claim 1, characterized in that, The method further includes: Perform integrity verification on the decrypted customer information; Upon successful integrity verification, customer information is populated into the customer creation interface of the second business system.

6. The cross-system customer information interaction method according to claim 1, characterized in that, The method further includes: When downloading customer information from the primary business system using the local system, the user's identity on the local system is verified.

7. The cross-system customer information interaction method according to claim 6, characterized in that, The verification of user identity in the local system includes: When the local system initiates a data transmission request to the first business system, it submits the multi-factor identity credentials of the local system user for identity verification. The multi-factor identity credentials include knowledge factors, biometric factors and hardware factors. After the identity verification is successful, the system verifies whether the identity information of the local system user is consistent with the identity information stored on the blockchain. If they are consistent, the local system user's identity verification is confirmed to be successful.

8. The cross-system customer information interaction method according to claim 1, characterized in that, The method further includes: A key pair is generated through the data encryption / decryption module of the first business system, and the key pair includes a public key and a private key. During the process of downloading customer information from the second business system using a local system connected to the second business system network, the public key in the key pair generated by the data encryption / decryption module of the first business system is obtained through the local system, and the customer information downloaded from the second business system is encrypted using the public key to obtain encrypted data. When the local system, connected to the network of the first business system, uploads encrypted data to the first business system, the private key in the key pair generated by the data encryption / decryption module of the first business system is used to decrypt the uploaded encrypted data to obtain customer information.

9. A cross-system customer information interaction device, characterized in that, include: The customer information download module and customer information upload module are deployed on the local system, the data encryption module or data decryption module is deployed on the first business system, and the data decryption module or data encryption module is deployed on the second business system. The first business system and the second business system are isolated from each other, and the first business system and the second business system are respectively connected to the local system network. The data encryption module is used to generate a key pair, which includes a public key and a private key. The customer information download module is used to download customer information from the first business system, obtain the public key from the key pair generated by the data encryption module of the second business system through the local system, and use the public key to encrypt the customer information downloaded from the first business system to obtain encrypted data. The customer information uploading module is used to upload the encrypted data to the second business system; The data decryption module is used to obtain the private key from the key pair generated by the data encryption module, and uses the private key to decrypt the encrypted data uploaded to the second business system to obtain customer information.

10. The cross-system customer information interaction device according to claim 9, characterized in that, The method for generating key pairs by the data encryption module includes: The data encryption module obtains the identity of the local system user, calculates the identity hash value based on the local system user's identity, generates the identity root key based on the identity hash value, generates a public key and a private key based on the identity hash value and the identity root key, and puts the public key on the blockchain network for storage.

11. The cross-system customer information interaction device according to claim 10, characterized in that, The step of obtaining the public key from the key pair generated by the data encryption module of the second business system through the local system, and using the public key to encrypt customer information downloaded from the first business system to obtain encrypted data includes: The system obtains a public key from the blockchain network through its local system, uses the public key to encrypt customer information downloaded from the first business system to obtain encrypted data, and uses the same public key to encrypt the current timestamp and random number to obtain signature information, which is then appended to the encrypted data.

12. The cross-system customer information interaction device according to claim 11, characterized in that, The data decryption module uses the private key to decrypt the encrypted data uploaded to the second business system, including: The data decryption module obtains a blockchain key from the blockchain network, which is obtained by encrypting the public key, the current timestamp, and a random number. The signature information in the encrypted data is verified using the blockchain key, and the encrypted data is decrypted using the private key when the verification is successful.

13. A computer device, characterized in that, include: Memory, which stores computer programs; A processor for executing the computer program to implement the cross-system customer information interaction method according to any one of claims 1 to 8.

14. A machine-readable storage medium storing instructions thereon, characterized in that, When executed by a processor, this instruction causes the processor to be configured to perform the cross-system customer information interaction method according to any one of claims 1 to 8.

15. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the cross-system customer information interaction method according to any one of claims 1 to 8.

Images