User information synchronization method and device, equipment, storage medium and program product

Abstract

The invention provides a user information synchronization method and device, equipment, a storage medium and a program product. Relates to the technical field of communication. The method comprises the following steps: a user login end responds to a transaction request, obtains a dynamic encryption key to encrypt the transaction request, and sends the encrypted transaction request to a server; the server performs encryption and decryption processing and first authorization verification processing on the encrypted transaction request according to the dynamic encryption key; if the first authorization verification is passed, generating a transaction response according to the transaction request; encrypting the transaction response by using the dynamic encryption key, and sending the encrypted transaction response to the user login end; the user login end decrypts the encrypted transaction response according to the dynamic encryption key, and generates transaction synchronization information according to the transaction response; and encrypting the transaction synchronization information by adopting the dynamic encryption key, and sending the transaction synchronization information to the server side, so that the user function side synchronizes the transaction synchronization information through the server side. Therefore, the user information security is improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of communication, and particularly relates to a user information synchronization method and device, equipment, a storage medium and a program product. BACKGROUND

[0002] In an operation center experience scene, a user can perform service experience through a multi-screen device. Each screen in the multi-screen device is driven by an independent host, the hosts are interconnected through a local area network, and function calling is realized through a mobile webpage.

[0003] After the user completes login on a first screen, the user information needs to be synchronized in real time among the multi-screens. However, since the operation center experience scene is in a public area, there is a security problem in the synchronization process of the user information.

[0004] Therefore, there is an urgent need for a user information synchronization method to improve the security in the user information synchronization process. SUMMARY

[0005] Embodiments of the present application provide a user information synchronization method, device, equipment, a storage medium and a program product to improve the security in the user information synchronization process.

[0006] In a first aspect, the embodiments of the present application provide a user information synchronization method applied to a user information synchronization system, the user information synchronization system comprising a user login end, a server and a user function end, and comprising the following steps.

[0007] The user login end acquires a dynamic encryption key in response to a transaction request, wherein the dynamic encryption key is obtained through asymmetric encryption algorithm transmission with the server.

[0008] The user login end encrypts the transaction request according to the dynamic encryption key to obtain an encrypted transaction request, and sends the encrypted transaction request to the server.

[0009] The server decrypts the encrypted transaction request according to the dynamic encryption key to obtain the transaction request.

[0010] The server performs first authorization verification processing on the transaction request to obtain a first authorization verification result.

[0011] If the first authorization verification result is verified, a transaction response is generated according to the transaction request.

[0012] The server encrypts the transaction response according to the dynamic encryption key to obtain an encrypted transaction response, and sends the encrypted transaction response to the user login end.

[0013] The user login end decrypts the encrypted transaction response according to the dynamic encryption key to obtain the transaction response.

[0014] The user login terminal generates transaction synchronization information according to the transaction response;

[0015] The user login terminal encrypts the transaction synchronization information according to the dynamic encryption key, and sends the transaction synchronization information to the service terminal, so that the user function terminal synchronizes the transaction synchronization information through the service terminal.

[0016] In a possible implementation, the dynamic encryption key is obtained, including:

[0017] checking whether there is a valid dynamic encryption key in the key library of the user login terminal;

[0018] If there is a valid dynamic encryption key in the key library, the dynamic encryption key is obtained;

[0019] If there is no valid dynamic encryption key in the key library, a key acquisition request is generated, and the key acquisition request is encrypted by using an asymmetric key to obtain an encrypted key acquisition request;

[0020] The encrypted key acquisition request is sent to the service terminal, so that the service terminal decrypts the encrypted key acquisition request by using an asymmetric key, and then performs a second authorization verification process on the key acquisition request. If the second authorization verification is successful, the second authorization verification result is returned to the user login terminal, so that the user login terminal generates a dynamic encryption key according to the second authorization verification result. In a possible implementation, the dynamic encryption key has a validity period.

[0021] In a possible implementation, the second authorization verification process is an internet protocol address verification process based on a preset internet protocol address white list.

[0022] In a possible implementation, the first authorization verification process includes at least one of the following:

[0023] The internet protocol address verification process based on the preset internet protocol address white list;

[0024] The time validity period process based on the dynamic encryption key;

[0025] The verification process based on network access control.

[0026] In a possible implementation, after the user login terminal encrypts the transaction synchronization information according to the dynamic encryption key, and sends the transaction synchronization information to the service terminal, so that the user function terminal synchronizes the transaction synchronization information through the service terminal, the method further includes:

[0027] The service terminal stores the transaction synchronization information, the user login terminal and the dynamic encryption key in association.

[0028] In a possible implementation, after the service end stores the transaction synchronization information, the user login end and the dynamic encryption key in association, the method further includes:

[0029] The user function end initiates a polling request encrypted by the dynamic encryption key to the service end periodically.

[0030] The service end encrypts the corresponding transaction synchronization information by using the dynamic encryption key and returns the encrypted transaction synchronization information to the user function end after verifying the polling request.

[0031] The user function end decrypts the transaction synchronization information by using the dynamic encryption key and displays the transaction synchronization information.

[0032] In a possible implementation, after the user function end decrypts the transaction synchronization information by using the dynamic encryption key and displays the transaction synchronization information, the method further includes:

[0033] The user function end sends a function transaction request encrypted by the dynamic encryption key to the service end in response to a function operation of the user.

[0034] The service end returns a function transaction result to the user function end after processing the function transaction request.

[0035] The user function end performs function service processing according to the function transaction result.

[0036] In a second aspect, an embodiment of the present application provides a user information synchronization device, which includes:

[0037] The acquisition module is configured to acquire a dynamic encryption key by the user login end in response to a transaction request, wherein the dynamic encryption key is obtained by asymmetric encryption algorithm and transmission with the service end.

[0038] The first processing module is configured to encrypt a transaction request by the user login end according to the dynamic encryption key to obtain an encrypted transaction request, and send the encrypted transaction request to the service end.

[0039] The second processing module is configured to decrypt the encrypted transaction request by the service end according to the dynamic encryption key to obtain a transaction request.

[0040] The first verification module is configured to perform first authorization verification processing on the transaction request by the service end.

[0041] Optionally, the first authorization verification processing includes at least one of the following:

[0042] Internet protocol address verification processing based on a preset Internet protocol address white list;

[0043] Time validity period processing based on the dynamic encryption key;

[0044] A verification process based on network access control.

[0045] The third processing module is configured to generate a transaction response according to the transaction request if the first authorization verification result is a verification pass.

[0046] The fourth processing module is configured to encrypt the transaction response according to the dynamic encryption key to obtain an encrypted transaction response, and send the encrypted transaction response to the user login end.

[0047] The fifth processing module is configured to decrypt the encrypted transaction response according to the dynamic encryption key to obtain the transaction response.

[0048] The sixth processing module is configured to generate transaction synchronization information according to the transaction response.

[0049] The seventh processing module is configured to encrypt the transaction synchronization information according to the dynamic encryption key, and send the transaction synchronization information to the service end, so that the user function end synchronizes the transaction synchronization information through the service end.

[0050] In a possible implementation, the obtaining module can be specifically configured to:

[0051] Check whether there is a valid dynamic encryption key in the key library of the user login end.

[0052] Optionally, the dynamic encryption key has a validity period.

[0053] If there is a valid dynamic encryption key in the key library, the dynamic encryption key is obtained.

[0054] If there is no valid dynamic encryption key in the key library, a key obtaining request is generated, and the key obtaining request is encrypted by using an asymmetric key to obtain an encrypted key obtaining request.

[0055] The encrypted key obtaining request is sent to the service end, so that the service end decrypts the encrypted key obtaining request by using the asymmetric key, and then performs a second authorization verification process on the key obtaining request. If the second authorization verification is successful, a second authorization verification result is returned to the user login end, so that the user login end generates a dynamic encryption key according to the second authorization verification result. Optionally, the second authorization verification process is an internet protocol address verification process based on a preset internet protocol address white list.

[0056] In a possible implementation, after the user login end encrypts the transaction synchronization information according to the dynamic encryption key, and sends the transaction synchronization information to the service end, so that the user function end synchronizes the transaction synchronization information through the service end, the synchronization device of the user information further includes a storage module, which is specifically configured to:

[0057] The service end stores the transaction synchronization information, the user login end and the dynamic encryption key in association.

[0058] In a possible implementation, after the service end stores the transaction synchronization information, the user login end and the dynamic encryption key in association, the user information synchronization apparatus further includes an updating module, which is specifically configured to:

[0059] The user function end initiates a polling request encrypted by the dynamic encryption key to the service end periodically.

[0060] The service end encrypts the corresponding transaction synchronization information by using the dynamic encryption key and returns the encrypted transaction synchronization information to the user function end after verifying the polling request.

[0061] The user function end decrypts the transaction synchronization information by using the dynamic encryption key and displays the transaction synchronization information.

[0062] In a possible implementation, after the user function end decrypts the transaction synchronization information by using the dynamic encryption key and displays the transaction synchronization information, the user information synchronization apparatus further includes an executing module, which is specifically configured to:

[0063] The user function end sends a function transaction request encrypted by the dynamic encryption key to the service end in response to a function operation of the user.

[0064] The service end returns a function transaction result to the user function end after processing the function transaction request.

[0065] The user function end performs function service processing according to the function transaction result.

[0066] In a third aspect, an embodiment of the present application provides a user information synchronization device, including: a memory, a processor;

[0067] The memory stores computer execution instructions.

[0068] The processor executes the computer execution instructions stored in the memory, so that the processor executes the first aspect and / or various possible implementation manners of the first aspect.

[0069] In a fourth aspect, an embodiment of the present application provides a computer readable storage medium, which stores computer execution instructions, and the computer execution instructions are executed by a processor to implement the first aspect and / or various possible implementation manners of the first aspect.

[0070] In a fifth aspect, an embodiment of the present application provides a computer program product, which includes a computer program, and the computer program is executed by a processor to implement the first aspect and / or various possible implementation manners of the first aspect.

[0071] The embodiment of the present application provides a user information synchronization method, device, equipment, storage medium and program product. The user login end responds to a transaction request, and obtains a dynamic encryption key; wherein the dynamic encryption key is obtained through asymmetric encryption algorithm and a server; the user login end encrypts the transaction request according to the dynamic encryption key to obtain an encrypted transaction request, and sends the encrypted transaction request to the server; the server decrypts the encrypted transaction request according to the dynamic encryption key to obtain the transaction request; the server performs first authorization verification processing on the transaction request to obtain a first authorization verification result; if the first authorization verification result is verified, a transaction response is generated according to the transaction request; the server encrypts the transaction response according to the dynamic encryption key to obtain an encrypted transaction response, and sends the encrypted transaction response to the user login end; the user login end decrypts the encrypted transaction response according to the dynamic encryption key to obtain the transaction response; the user login end generates transaction synchronization information according to the transaction response; the user login end encrypts the transaction synchronization information according to the dynamic encryption key, and sends the transaction synchronization information to the server, so that the user function end synchronizes the transaction synchronization information through the server. Compared with the fixed key of the prior art, the method of the present application realizes dynamic encryption key transmission between the user login end and the server through asymmetric encryption algorithm; through full-process encryption and first authorization verification processing, the synchronization of the user function end is realized; and the security of user information in the synchronization process is improved. BRIEF DESCRIPTION OF DRAWINGS

[0072] The accompanying drawings, which are incorporated herein and form part of the specification, illustrate embodiments consistent with the present application and, together with the description, further serve to explain the principles of the application.

[0073] Figure 1 A user information synchronization system architecture diagram is provided for the present application.

[0074] Figure 2 A user information synchronization method flowchart is provided for the present application. Figure One ;

[0075] Figure 3 A user information synchronization method flowchart is provided for the present application. Figure Two ;

[0076] Figure 4 A user information synchronization method flowchart is provided for the present application. Figure Three ;

[0077] Figure 5 A user information synchronization device structure diagram is provided for the present application.

[0078] Figure 6 A user information synchronization device structure diagram is provided for the present application.

[0079] The accompanying drawings illustrate specific embodiments of this application, which will be described in more detail below. These drawings and descriptions are not intended to limit the scope of the concept in any way, but rather to illustrate the concept of this application to those skilled in the art through reference to particular embodiments. Detailed Implementation

[0080] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this application as detailed in the appended claims.

[0081] The collection, storage, use, processing, transmission, provision, and disclosure of financial data or user data involved in the technical solution of this application all comply with the provisions of relevant laws and regulations and do not violate public order and good morals.

[0082] It should be noted that in the embodiments of this application, certain software, components, models and other existing solutions in the industry may be mentioned. These should be regarded as exemplary and are only intended to illustrate the feasibility of implementing the technical solution of this application. However, they do not mean that the applicant has used or necessarily used the solution.

[0083] To enhance users' understanding and experience of financial service products, an operation center experience area is usually set up to guide users in understanding and experiencing financial products and to receive feedback from users.

[0084] Existing financial service products typically use mobile applications as their primary service platform. However, the terminal devices in the experience zones of financial service product operation centers are usually computer operating systems. Due to system compatibility limitations, these mobile applications cannot be directly installed, preventing the core functions of financial service products from being directly displayed.

[0085] Therefore, the experience area of ​​the operation center for financial service products usually deploys multiple independent terminal screens to carry different functional modules. Due to the lack of an effective cross-screen information synchronization mechanism, users have to log in repeatedly on each screen when experiencing financial service products, and the consistency of user information across multiple screens cannot be guaranteed, thereby reducing the user experience.

[0086] Furthermore, all users in the operation center experience area of ​​financial service products are certified users. After completing the login on the first screen, certified users need to synchronize their user information in real time across multiple screens in order to complete business transactions.

[0087] In existing technologies, after an authenticated user logs in on the first screen, the host corresponding to the first screen uses a polling request method to synchronize the authenticated user's information with the hosts corresponding to other functional screens to achieve user information synchronization. Simultaneously, a fixed key is used for encryption during the user information synchronization process. However, the experience area of ​​the financial service product operation center is a public area, and the security of the fixed key is relatively low. Therefore, existing technologies have security issues regarding user information synchronization.

[0088] To address the aforementioned issues, the core concept of this application is to achieve secure synchronization of user information in a multi-screen environment by employing a collaborative mechanism of symmetric and asymmetric encryption, combined with dual access control at the network and transaction request levels.

[0089] Optionally, Figure 1 The system architecture diagram for synchronizing user information provided in this application is as follows: Figure 1 As shown, the user information synchronization system includes a user login terminal, a server terminal, and a user function terminal.

[0090] The user login terminal is used to respond to transaction requests and obtain a dynamic encryption key; encrypt the transaction request according to the dynamic encryption key to obtain an encrypted transaction request, and send the encrypted transaction request to the server; decrypt the encrypted transaction response according to the dynamic encryption key to obtain a transaction response; generate transaction synchronization information according to the transaction response; encrypt the transaction synchronization information according to the dynamic encryption key, and send the transaction synchronization information to the server.

[0091] The server is used to decrypt the encrypted transaction request using a dynamic encryption key to obtain the transaction request, perform a first authorization verification on the transaction request to obtain a first authorization verification result; if the first authorization verification result is successful, a transaction response is generated based on the transaction request; the transaction response is encrypted using the dynamic encryption key to obtain an encrypted transaction response, and the encrypted transaction response is sent to the user login terminal.

[0092] The user interface is used to synchronize transaction information with the server.

[0093] The technical solution of this application and how the technical solution of this application solves the above-mentioned technical problems are described in detail below with specific embodiments. These specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described again in some embodiments. The embodiments of this application will now be described with reference to the accompanying drawings.

[0094] Figure 2 Flowchart of the method for synchronizing user information provided in this application Figure OneThe execution entity for the user information synchronization method is the user information synchronization system, which includes a user login terminal, a server terminal, and user function terminals, such as... Figure 2 As shown, the method includes:

[0095] S201. The user login terminal responds to the transaction request and obtains a dynamic encryption key; wherein, the dynamic encryption key is obtained by transmitting it to the server through an asymmetric encryption algorithm.

[0096] In this embodiment, the information in the transaction request includes user information, service type, service information, request timestamp, device identification information, and source Internet Protocol address.

[0097] For example, if an authenticated user logs in on the first screen, the user login client obtains the corresponding authenticated user's information and stores it on the user login client, such as: user's unique identifier, user's mobile phone number, user's password, user's verification code, user's login status, and other users bound to the authenticated user.

[0098] In response to the actions of an authenticated user, the user login terminal generates a corresponding transaction request to achieve synchronization of user information across multiple screens through the transmission of the transaction request.

[0099] Furthermore, the server generates an asymmetric public key and an asymmetric private key based on the asymmetric encryption algorithm, and then sends the asymmetric public key to the user's login terminal.

[0100] S202. The user login terminal encrypts the transaction request according to the dynamic encryption key to obtain the encrypted transaction request, and sends the encrypted transaction request to the server.

[0101] In this embodiment, the user login terminal generates a dynamic encryption key through a cryptographically secure random number generator, encrypts the transaction request based on the dynamic encryption key to obtain the encrypted transaction request, and receives the asymmetric public key issued by the server. The user then performs asymmetric encryption on the dynamic encryption key based on the asymmetric public key to obtain the encrypted dynamic encryption key, and sends the encrypted transaction request and the encrypted dynamic encryption key to the server.

[0102] S203. The server decrypts the encrypted transaction request using the dynamic encryption key to obtain the transaction request.

[0103] In this embodiment, the server decrypts the encrypted dynamic encryption key using the asymmetric private key to obtain the decrypted dynamic encryption key, and then decrypts the encrypted transaction request using the decrypted dynamic encryption key to obtain the transaction request, thereby achieving synchronization of the transaction request between the user login end and the server end.

[0104] S204. The server performs the first authorization verification on the transaction request and obtains the first authorization verification result.

[0105] Optionally, the first authorization verification process includes at least one of the following:

[0106] Internet Protocol address verification processing based on a pre-defined Internet Protocol address whitelist.

[0107] In this embodiment, the server obtains the source Internet Protocol address of the transaction request and compares it with the Internet Protocol addresses in the preset Internet Protocol address whitelist. If the source Internet Protocol address matches the Internet Protocol address in the preset Internet Protocol address whitelist, the verification is successful.

[0108] If the source Internet Protocol address does not match the Internet Protocol address in the preset Internet Protocol address whitelist, the transaction request is rejected.

[0109] Based on the time validity period processing of dynamic encryption keys.

[0110] Optionally, the dynamic encryption key has an expiration date.

[0111] In this embodiment, the lifespan of the dynamic encryption key is limited by an expiration date to reduce the possibility of key leakage. The server decrypts the encrypted dynamic encryption key using the asymmetric private key to obtain the decrypted dynamic encryption key. Then, it retrieves the expiration date from the dynamic encryption key. If the current time has not exceeded the expiration date, the verification is successful.

[0112] If the current time has expired, the transaction request will be rejected.

[0113] Authentication processing based on network access control.

[0114] In this embodiment, the verification process based on network access control includes verifying whether the user information in the transaction request is valid. If the user information is valid, the verification is considered successful.

[0115] If the user information is invalid, the transaction request will be rejected.

[0116] For example, if the user information has not expired, then the user information is valid; if the user information has expired, then the user information is invalid.

[0117] S205. If the first authorization verification result is successful, then generate a transaction response based on the transaction request.

[0118] In this embodiment, the transaction response includes the synchronization result, the first authorization verification result, and the information and key identifier of the synchronized and updated transaction request.

[0119] S206. The server encrypts the transaction response according to the dynamic encryption key to obtain the encrypted transaction response, and sends the encrypted transaction response to the user login terminal.

[0120] In this embodiment, the server uses the same symmetric encryption algorithm as the user login terminal to generate a random initialization vector and combines it with a dynamic encryption key to encrypt the transaction response, thereby obtaining an encrypted transaction response, which is then sent to the user login terminal.

[0121] S207. The user login terminal decrypts the encrypted transaction response using the dynamic encryption key to obtain the transaction response.

[0122] In this embodiment, the user login terminal obtains the corresponding dynamic encryption key from the key library based on the key identifier, and uses the same symmetric encryption algorithm as the server, combined with the random initialization vector and the dynamic encryption key, to decrypt the encrypted transaction response to obtain the transaction response.

[0123] S208. The user login terminal generates transaction synchronization information based on the transaction response.

[0124] In this embodiment, the user login terminal parses the transaction response, filters out the information to be synchronized, and generates transaction synchronization information based on the information to be synchronized.

[0125] For example, if the transaction response is parsed and it is determined that the user information has not expired, and the result of this transaction is that the user information is successfully synchronized, then the information to be synchronized is the user information. Based on the user information, transaction synchronization information is generated. The transaction synchronization information includes a unique transaction synchronization identifier, an associated user identifier, user information, data update time, hash value of the synchronization information, and validity period of the synchronization information.

[0126] S209. The user login terminal encrypts the transaction synchronization information according to the dynamic encryption key and sends the transaction synchronization information to the server so that the user function terminal can synchronize the transaction synchronization information through the server.

[0127] In this embodiment, after the user login terminal encrypts the transaction synchronization information according to the dynamic encryption key and sends the transaction synchronization information to the server, when the user function terminal needs to request the transaction synchronization information from the server, the server encrypts the transaction synchronization information according to the dynamic encryption key and sends it to the corresponding user function terminal, so as to realize the synchronization of user information between the server and the user function terminal.

[0128] The user information synchronization method provided in this application encrypts transaction requests by generating a dynamic encryption key on the user login end. The dynamic encryption key is then encrypted using an asymmetric public key issued by the server. The encrypted request and the encrypted dynamic encryption key are synchronized to the server, allowing the server to decrypt the dynamic encryption key using its asymmetric private key and then decrypt the transaction request. The server performs a first verification process on the transaction request. After successful verification, a transaction response is generated, encrypted using the dynamic encryption key, and returned to the user login end. The user login end decrypts the transaction response, generates transaction synchronization information, encrypts the synchronization information, and sends it to the server. The server then relays this information to the user's functional segment, achieving multi-terminal information synchronization. This method balances key transmission security and user information synchronization efficiency, avoids data tampering due to key leakage, ensures data consistency across multiple terminals, and improves the user experience in the operational center experience area of ​​financial service products.

[0129] Figure 3 Flowchart of the method for synchronizing user information provided in this application Figure Two ,like Figure 3 As shown, in this embodiment... Figure 2 Based on the embodiments, the method of obtaining the dynamic encryption key in step S201 above will be described in detail. The method includes:

[0130] S301. Check if a valid dynamic encryption key exists in the keystore of the user login terminal.

[0131] In this embodiment, the validity period of the dynamic encryption key can be a preset duration or a preset number of sessions.

[0132] S302. If a valid dynamic encryption key exists in the key store, then obtain the dynamic encryption key.

[0133] In this embodiment, the key store can refer to the built-in key database in the user login terminal. The dynamic encryption keys in the key store need to be stored in encrypted form to avoid exposure in plaintext.

[0134] By obtaining the dynamic encryption key from the key store and verifying whether the dynamic encryption key is within its validity period, the dynamic encryption key is directly used.

[0135] S303. If there is no valid dynamic encryption key in the key store, a key acquisition request is generated and encrypted using an asymmetric key to obtain the encrypted key acquisition request.

[0136] In this embodiment, the user login terminal generates a corresponding key acquisition request based on the transaction request, and uses the public key from the asymmetric key issued by the server to encrypt the key acquisition request to obtain an encrypted key acquisition request.

[0137] S304. Send the encrypted key acquisition request to the server so that the server can decrypt the encrypted key acquisition request using an asymmetric key and then perform a second authorization verification on the key acquisition request. If the second authorization verification is successful, return the second authorization verification result to the user login terminal so that the user login terminal can generate a dynamic encryption key based on the second authorization verification result.

[0138] Optionally, the second authorization verification process is an Internet Protocol address verification process based on a preset Internet Protocol address whitelist.

[0139] In this embodiment, an encrypted key acquisition request is sent to the server. The server decrypts the encrypted key acquisition request using the private key from the asymmetric key, obtaining the key acquisition request. The server then retrieves the source Internet Protocol address from the key acquisition request and compares it with Internet Protocol addresses based on a preset Internet Protocol address whitelist. If the source Internet Protocol address in the key acquisition request matches an Internet Protocol address based on the preset Internet Protocol address whitelist, the second authorization verification is successful. The second authorization verification result is returned to the user login terminal, allowing the user login terminal to generate a dynamic encryption key using a cryptographically secure random number generator according to the algorithm parameters in the key acquisition request, and to generate a corresponding validity period to ensure the randomness and timeliness of the dynamic encryption key.

[0140] The user information synchronization method provided in this application involves the user login client checking the dynamically encrypted keys managed in the key store. If a valid dynamically encrypted key exists, it is directly obtained; otherwise, a key acquisition request is generated and encrypted using the server's asymmetric public key before being sent. After decryption by the server, a second authorization verification is performed based on the Internet Protocol address from a preset whitelist. Upon successful second authorization verification, the user login client generates a dynamically encrypted key with an expiration date. This method constructs a multi-layered security protection system through encrypted storage, asymmetric encryption requests, and second authorization verification to ensure key security; it also reduces the possibility of key leakage through the timeliness of the dynamically encrypted key; and it ensures the reliability of the user information synchronization process, thereby improving the security and efficiency of user information synchronization.

[0141] Figure 4 Flowchart of the method for synchronizing user information provided in this application Figure Three ,like Figure 4 As shown, this application is in Figure 2 Based on the previous embodiment, after the user login terminal encrypts the transaction synchronization information according to the dynamic encryption key and sends the transaction synchronization information to the server so that the user terminal can synchronize the transaction synchronization information through the server, the method further includes:

[0142] S401. The server will associate and store transaction synchronization information, user login information, and dynamic encryption keys.

[0143] In this embodiment, for example, the user login terminal is determined by the user's unique identifier and the device identifier, and the dynamic encryption key is associated with the corresponding transaction synchronization information based on the unique identifier of the dynamic encryption key.

[0144] By linking and storing transaction synchronization information, user login endpoints, and dynamic encryption keys, the accuracy of multi-terminal synchronization is ensured, and the lifecycle association of dynamic encryption keys is strengthened. When a dynamic encryption key expires, the associated transaction synchronization information can be deleted in conjunction with it, reducing the storage of invalid data.

[0145] S402. The user terminal uses a dynamic encryption key to periodically send encrypted polling requests to the server.

[0146] In this embodiment, the user terminal periodically initiates encrypted polling requests using a dynamic encryption key, ensuring the confidentiality of these requests. This periodic polling mechanism guarantees that the terminal can obtain the latest synchronization information in a timely manner, preventing data lag across multiple terminals.

[0147] S403. After verifying the legitimacy of the polling request, the server uses a dynamic encryption key to encrypt the corresponding transaction synchronization information and returns it to the user's terminal.

[0148] In this embodiment, after verifying the legitimacy of the polling request, the server encrypts the corresponding transaction synchronization information using the same dynamic encryption key and returns the encrypted transaction synchronization information to the user's application. By verifying the legitimacy of the polling request through the server, it ensures that only legitimate user applications can obtain the synchronization information, thereby reducing the risk of unauthorized access.

[0149] S404. The user terminal uses a dynamic encryption key to decrypt and display the transaction synchronization information.

[0150] In this embodiment, visualizing transaction synchronization information enhances the user experience and ensures data reliability.

[0151] S405. In response to the user's function operation, the user terminal sends an encrypted function transaction request to the server using a dynamic encryption key.

[0152] S406. After processing the function transaction request, the server returns the function transaction result to the user's function terminal.

[0153] S407. The user terminal executes functional business processing based on the functional transaction results.

[0154] In this embodiment, during the processing of functional services, the user terminal uses a dynamic encryption key to transmit functional transaction requests throughout the process, preventing data from being eavesdropped on or tampered with during transmission, ensuring that the operation results of the functional terminal can be securely synchronized to the server, maintaining data consistency, and improving the interaction security between the user terminal and the server.

[0155] The user information synchronization method provided in this application ensures accurate multi-terminal data synchronization by associating and storing transaction synchronization information, user login terminals, and dynamic encryption keys. The user terminal periodically encrypts polling requests using the dynamic encryption key. After verifying the legitimacy of the polling request, the server encrypts the corresponding transaction synchronization information and returns it to the user terminal. The user terminal then performs decryption and visualization, improving user experience and data reliability. Furthermore, during the processing of functional business operations, the user terminal uses the dynamic encryption key throughout the transmission of functional transaction requests, ensuring that the operational results of the functional terminal are securely synchronized to the server, maintaining data consistency, and enhancing the security of interaction between the user terminal and the server.

[0156] Figure 5 A schematic diagram of the structure of the user information synchronization device provided in this application is shown below. Figure 5 As shown, the user information synchronization device provided in this embodiment includes:

[0157] The acquisition module 501 is used by the user login terminal to obtain a dynamic encryption key in response to a transaction request; wherein the dynamic encryption key is obtained by transmitting it to the server through an asymmetric encryption algorithm.

[0158] The first processing module 502 is used by the user login terminal to encrypt the transaction request according to the dynamic encryption key to obtain the encrypted transaction request, and then send the encrypted transaction request to the server.

[0159] The second processing module 503 is used by the server to decrypt the encrypted transaction request based on the dynamic encryption key to obtain the transaction request.

[0160] The first verification module 504 is used by the server to perform the first authorization verification process on the transaction request and obtain the first authorization verification result.

[0161] Optionally, the first authorization verification process includes at least one of the following:

[0162] Internet Protocol address verification processing based on a pre-defined Internet Protocol address whitelist;

[0163] Based on the time validity period processing of dynamic encryption keys;

[0164] Authentication processing based on network access control.

[0165] The third processing module 505 is used to generate a transaction response based on the transaction request if the first authorization verification result is successful.

[0166] The fourth processing module 506 is used by the server to encrypt the transaction response according to the dynamic encryption key to obtain the encrypted transaction response, and then send the encrypted transaction response to the user login terminal.

[0167] The fifth processing module 507 is used by the user login terminal to decrypt the encrypted transaction response according to the dynamic encryption key to obtain the transaction response.

[0168] The sixth processing module 508 is used by the user login terminal to generate transaction synchronization information based on the transaction response.

[0169] The seventh processing module 509 is used by the user login terminal to encrypt the transaction synchronization information according to the dynamic encryption key and send the transaction synchronization information to the server so that the user function terminal can synchronize the transaction synchronization information through the server.

[0170] In one possible implementation, the acquisition module 501 can also be used for:

[0171] Check if a valid dynamic encryption key exists in the keystore of the user login terminal.

[0172] Optionally, the dynamic encryption key has an expiration date.

[0173] If a valid dynamic encryption key exists in the key store, then obtain the dynamic encryption key.

[0174] If a valid dynamic encryption key is not available in the key store, a key retrieval request is generated and encrypted using an asymmetric key to obtain the encrypted key retrieval request.

[0175] The encrypted key retrieval request is sent to the server. The server then decrypts the request using an asymmetric key and performs a second authorization verification. If the second authorization verification is successful, the result is returned to the user login client, allowing the client to generate a dynamic encryption key based on this result. Optionally, the second authorization verification process is an Internet Protocol address verification process based on a preset Internet Protocol address whitelist.

[0176] In one possible implementation, the user login terminal encrypts the transaction synchronization information according to a dynamic encryption key and sends the transaction synchronization information to the server. After the user's functional terminal synchronizes the transaction synchronization information through the server, the user information synchronization device also includes a storage module, which is specifically used for:

[0177] The server will associate and store transaction synchronization information, user login information, and dynamic encryption keys.

[0178] In one possible implementation, after the server associates and stores the transaction synchronization information, user login terminal, and dynamic encryption key, the user information synchronization device also includes an update module, which is specifically used for:

[0179] The user interface uses a dynamic encryption key to periodically send encrypted polling requests to the server.

[0180] After verifying the legitimacy of the polling request, the server uses a dynamic encryption key to encrypt the corresponding transaction synchronization information and returns it to the user's application.

[0181] The user interface uses a dynamic encryption key to decrypt and display transaction synchronization information.

[0182] In one possible implementation, after the user terminal uses a dynamic encryption key to decrypt and display the transaction synchronization information, the user information synchronization device further includes an execution module, which is specifically used for:

[0183] In response to user actions, the user terminal sends encrypted transaction requests to the server using a dynamic encryption key.

[0184] After processing the function transaction request, the server returns the function transaction result to the user's function client.

[0185] The user terminal executes functional business processing based on the functional transaction results.

[0186] The user information synchronization device provided in this embodiment can execute the method provided in the above method embodiment. Its implementation principle and technical effect are similar, and will not be described in detail here.

[0187] Figure 6 A schematic diagram of the device for synchronizing user information provided in this application. Figure 6 As shown, the user information synchronization device provided in this embodiment includes at least one processor 601 and a memory 602. Optionally, the user information synchronization device further includes a communication component 603. The processor 601, memory 602, and communication component 603 are connected via a bus.

[0188] In a specific implementation, at least one processor 601 executes computer execution instructions stored in memory 602, causing at least one processor 601 to perform the above-described method.

[0189] The specific implementation process of processor 601 can be found in the above method embodiments, and its implementation principle and technical effect are similar. It will not be repeated here.

[0190] In the above embodiments, it should be understood that the processor can be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), etc. The general-purpose processor can be a microprocessor or any conventional processor. The steps of the method disclosed in this invention can be directly implemented by a hardware processor, or implemented by a combination of hardware and software modules within the processor.

[0191] The memory may include random access memory (RAM) and may also include non-volatile memory (NVM), such as at least one disk storage device.

[0192] The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. Buses can be categorized as address buses, data buses, control buses, etc. For ease of illustration, the buses shown in the accompanying drawings are not limited to a single bus or a single type of bus.

[0193] This application also provides a computer program product, including a computer program that, when executed by a processor, implements the above-described method.

[0194] This application also provides a computer-readable storage medium storing computer-executable instructions, which, when executed by a processor, implement the above-described method.

[0195] The aforementioned readable storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk. The readable storage medium can be any available medium accessible to a general-purpose or special-purpose computer.

[0196] An exemplary readable storage medium is coupled to a processor, enabling the processor to read information from and write information to the readable storage medium. Of course, the readable storage medium can also be a component of the processor. The processor and the readable storage medium can reside in an Application Specific Integrated Circuit (ASIC). Alternatively, the processor and the readable storage medium can exist as discrete components in the device.

[0197] The division of units is merely a logical functional division; in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be indirect coupling or communication connection through some interfaces, devices, or units, and may be electrical, mechanical, or other forms.

[0198] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0199] In addition, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0200] If a function is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this invention, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0201] Those skilled in the art will understand that all or part of the steps of the above-described method embodiments can be implemented by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When executed, the program performs the steps of the above-described method embodiments; and the aforementioned storage medium includes various media capable of storing program code, such as ROM, RAM, magnetic disks, or optical disks.

[0202] Finally, it should be noted that other embodiments of the invention will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This invention is intended to cover any variations, uses, or adaptations of the invention that follow the general principles of the invention and include common knowledge or customary techniques in the art not disclosed herein, and is not limited to the precise structures described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of the invention is limited only by the appended claims.

Claims

1. A method for synchronizing user information, characterized in that, A user information synchronization system, comprising a user login terminal, a server, and user function terminals, wherein the method includes: The user login terminal responds to the transaction request and obtains a dynamic encryption key; wherein, the dynamic encryption key is obtained by transmitting it to the server through an asymmetric encryption algorithm; The user login terminal encrypts the transaction request according to the dynamic encryption key to obtain the encrypted transaction request, and sends the encrypted transaction request to the server. The server decrypts the encrypted transaction request using the dynamic encryption key to obtain the transaction request. The server performs a first authorization verification process on the transaction request and obtains a first authorization verification result. If the first authorization verification result is successful, then a transaction response is generated based on the transaction request; The server encrypts the transaction response according to the dynamic encryption key to obtain the encrypted transaction response, and sends the encrypted transaction response to the user login terminal; The user login terminal decrypts the encrypted transaction response using the dynamic encryption key to obtain the transaction response; The user login terminal generates transaction synchronization information based on the transaction response; The user login terminal encrypts the transaction synchronization information according to the dynamic encryption key and sends the transaction synchronization information to the server so that the user function terminal can synchronize the transaction synchronization information through the server.

2. The method according to claim 1, characterized in that, The process of obtaining the dynamic encryption key includes: Check if a valid dynamic encryption key exists in the key store of the user login terminal; If a valid dynamic encryption key exists in the key store, then the dynamic encryption key is obtained; If there is no valid dynamic encryption key in the key library, a key acquisition request is generated and encrypted with an asymmetric key to obtain an encrypted key acquisition request. The encrypted key acquisition request is sent to the server, so that the server decrypts the encrypted key acquisition request using the asymmetric key and performs a second authorization verification on the user login terminal. If the second authorization verification is successful, the second authorization verification result is returned to the user login terminal, so that the user login terminal generates a dynamic encryption key based on the second authorization verification result.

3. The method according to claim 2, characterized in that, The dynamic encryption key has an expiration date.

4. The method according to claim 2, characterized in that, The second authorization verification process is an Internet Protocol address verification process based on a preset Internet Protocol address whitelist.

5. The method according to claim 1, characterized in that, The first authorization verification process includes at least one of the following: Internet Protocol address verification processing based on a pre-defined Internet Protocol address whitelist; Processing based on the time validity period of the dynamic encryption key; Authentication processing based on network access control.

6. The method according to any one of claims 1 to 5, characterized in that, After the user login terminal encrypts the transaction synchronization information according to the dynamic encryption key and sends the transaction synchronization information to the server so that the user function terminal can synchronize the transaction synchronization information through the server, the method further includes: The server associates and stores the transaction synchronization information, the user login terminal, and the dynamic encryption key.

7. The method according to claim 6, characterized in that, After the server associates and stores the transaction synchronization information, the user login terminal, and the dynamic encryption key, the method further includes: The user terminal uses the dynamic encryption key to periodically send encrypted polling requests to the server. After verifying the legitimacy of the polling request, the server uses the dynamic encryption key to encrypt the corresponding transaction synchronization information and returns it to the user terminal. The user terminal uses the dynamic encryption key to decrypt the transaction synchronization information and displays the transaction synchronization information.

8. The method according to claim 7, characterized in that, After the user terminal decrypts the transaction synchronization information using the dynamic encryption key and displays the transaction synchronization information, the process further includes: In response to the user's function operation, the user terminal sends an encrypted function transaction request to the server using the dynamic encryption key. After processing the function transaction request, the server returns the function transaction result to the user's function terminal; The user terminal executes functional business processing based on the functional transaction result.

9. A user information synchronization device, characterized in that, include: The acquisition module is used by the user login terminal to acquire a dynamic encryption key in response to a transaction request; wherein the dynamic encryption key is obtained by transmitting it to the server through an asymmetric encryption algorithm; The first processing module is used by the user login terminal to encrypt the transaction request according to the dynamic encryption key to obtain the encrypted transaction request, and send the encrypted transaction request to the server. The second processing module is used by the server to decrypt the encrypted transaction request according to the dynamic encryption key to obtain the transaction request. The first verification module is used by the server to perform a first authorization verification process on the transaction request and obtain a first authorization verification result. The third processing module is used to generate a transaction response based on the transaction request if the first authorization verification result is successful. The fourth processing module is used by the server to encrypt the transaction response according to the dynamic encryption key to obtain the encrypted transaction response, and to send the encrypted transaction response to the user login terminal. The fifth processing module is used by the user login terminal to decrypt the encrypted transaction response according to the dynamic encryption key to obtain the transaction response; The sixth processing module is used by the user login terminal to generate transaction synchronization information based on the transaction response; The seventh processing module is used by the user login terminal to encrypt the transaction synchronization information according to the dynamic encryption key and send the transaction synchronization information to the server so that the user function terminal can synchronize the transaction synchronization information through the server.

10. A user information synchronization device, characterized in that, include: A processor, and a memory communicatively connected to the processor; The memory stores computer-executed instructions; The processor executes computer execution instructions stored in the memory to implement the method as described in any one of claims 1-8.

11. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer-executable instructions, which, when executed by a processor, are used to implement the method as described in any one of claims 1-8.

12. A computer program product, characterized in that, Includes a computer program that, when executed by a processor, implements the method of any one of claims 1-8.

Images