Message processing method and device, storage medium and electronic equipment

Abstract

The invention discloses a message processing method and device, a storage medium and electronic equipment. The method relates to the field of financial science and technology or other fields, and comprises the following steps: receiving a service message sent by a request initiator; according to the message content of the service message, judging whether the request initiator has a message initiation authority; under the condition that the request initiator has the message initiation authority, processing the message content through a request receiver pointed by the service message; and under the condition that the request initiator does not have the message initiation authority, forbidding forwarding of the message content. Through application of the message processing method and device, the problem that the message processing efficiency is low due to the fact that the message content sent by all request initiators is subjected to a complete processing flow in the message processing process in the related technology is solved.

Description

Technical Field

[0001] This application relates to the field of financial technology or other fields, and more specifically, to a message processing method, apparatus, storage medium and electronic device. Background Technology

[0002] Against the backdrop of digital transformation and rapid development of information technology, message processing has become a core technology for data exchange in various fields such as finance, telecommunications, and the Internet of Things. From simple data packet transmission to complex transaction instructions, messages carry the transmission of business information, and their processing efficiency and security are directly related to the performance of the entire system and the protection of user data.

[0003] Currently, the relevant technologies process all message content sent by the request initiator in a complete process. Even when faced with messages initiated by initiators without message initiation authority, corresponding business processing is performed, resulting in invalid processes, inefficient use of resources, and low message processing efficiency.

[0004] There is currently no effective solution to the aforementioned problems in the relevant technologies. Summary of the Invention

[0005] The main objective of this application is to provide a message processing method, apparatus, storage medium, and electronic device to solve the problem of low message processing efficiency in related technologies, which involve processing all message content sent by all request initiators.

[0006] To achieve the above objectives, according to one aspect of this application, a message processing method is provided. The method includes: receiving a service message sent by a request initiator; determining whether the request initiator has message initiation authority based on the message content of the service message; if the request initiator has message initiation authority, processing the message content through the request recipient indicated by the service message; and if the request initiator does not have message initiation authority, prohibiting the forwarding of the message content.

[0007] Optionally, the message processing method further includes: before determining whether the request initiator has the authority to initiate the message based on the message content of the business message, using the public key of the request initiator to perform signature verification processing on the business message to obtain the signature verification result; if the signature verification result indicates that the signature verification is successful, using the private key of the target processing system to decrypt the business message to obtain the message content.

[0008] Optionally, the message processing method further includes: determining the business risk level of the business message and the identity information of the request initiator based on the message content; obtaining a preset message initiation permission list, wherein the message initiation permission list includes the maximum business risk level corresponding to the message initiation permission of different objects; and determining target information based on the message initiation permission list, the business risk level of the business message, and the identity information of the request initiator, wherein the target information is used to characterize whether the request initiator has message initiation permission.

[0009] Optionally, the message processing method further includes: obtaining the business type of the business message from the message content before processing the message content by the request recipient indicated by the business message; and determining the request recipient from multiple objects based on the business type, wherein the multiple objects include the target processing system.

[0010] Optionally, the message processing method further includes: performing compliance verification on the message content according to preset inspection rules; if the compliance verification passes, performing business processing based on the message content to obtain a business processing result; encrypting the business processing result using the public key of the request initiator to obtain a first encrypted result, and signing the first encrypted result using the private key of the target processing system to obtain a first digital signature; determining a first feedback message based on the first encrypted result and the first digital signature, and sending the first feedback message to the request initiator.

[0011] Optionally, the message processing method further includes: performing compliance verification on the message content according to preset inspection rules; if the compliance verification passes, encrypting the message content using the public key of the requesting recipient to obtain a second encryption result, and signing the second encryption result using the private key of the target processing system to obtain a second digital signature; determining a second feedback message based on the second encryption result and the second digital signature, and sending the second feedback message to the requesting recipient, wherein the requesting recipient processes the message content upon receiving the second feedback message.

[0012] Optionally, the message processing method further includes: after processing the message content through the request recipient indicated by the business message, receiving the third feedback message from the request recipient; and sending the message content of the third feedback message to the request initiator.

[0013] To achieve the above objectives, according to another aspect of this application, a message processing apparatus is provided. The apparatus includes: a first receiving module for receiving a service message sent by a request initiator; a judging module for judging whether the request initiator has message initiation authority based on the message content of the service message; a first processing module for processing the message content through the request receiver indicated by the service message when the request initiator has message initiation authority; and a second processing module for prohibiting the forwarding of the message content when the request initiator does not have message initiation authority.

[0014] Optionally, the message processing device further includes: a third processing module, used to perform signature verification processing on the business message using the public key of the request initiator to obtain the signature verification result; and a fourth processing module, used to decrypt the business message using the private key of the target processing system to obtain the message content if the signature verification result indicates that the signature verification is successful.

[0015] Optionally, the judgment module further includes: a first acquisition submodule, used to determine the business risk level of the business message and the identity information of the request initiator based on the message content; a second acquisition submodule, used to acquire a preset message initiation permission list, wherein the message initiation permission list includes the maximum business risk level corresponding to the message initiation permission of different objects; and a determination submodule, used to determine target information based on the message initiation permission list, the business risk level of the business message and the identity information of the request initiator, wherein the target information is used to characterize whether the request initiator has message initiation permission.

[0016] Optionally, the message processing apparatus further includes: an acquisition module for acquiring the service type of the service message from the message content; and a determination module for determining the request recipient from multiple objects based on the service type, wherein the multiple objects include the target processing system.

[0017] Optionally, the first processing module further includes: a first verification submodule, used to perform compliance verification on the message content according to preset inspection rules; a first processing submodule, used to perform business processing based on the message content and obtain a business processing result if the compliance verification passes; a second processing submodule, used to encrypt the business processing result using the public key of the request initiator to obtain a first encrypted result, and to sign the first encrypted result using the private key of the target processing system to obtain a first digital signature; and a first sending submodule, used to determine a first feedback message based on the first encrypted result and the first digital signature, and to send the first feedback message to the request initiator.

[0018] Optionally, the first processing module further includes: a second verification submodule, used to perform compliance verification on the message content according to preset inspection rules; a third processing submodule, used to encrypt the message content using the public key of the requesting recipient to obtain a second encryption result, and to sign the second encryption result using the private key of the target processing system to obtain a second digital signature if the compliance verification passes; and a second sending submodule, used to determine a second feedback message based on the second encryption result and the second digital signature, and to send the second feedback message to the requesting recipient, wherein the requesting recipient processes the message content upon receiving the second feedback message.

[0019] Optionally, the message processing device further includes: a second receiving module for receiving a third feedback message from the requesting recipient; and a sending module for sending the message content of the third feedback message to the request initiator.

[0020] To achieve the above objectives, according to another aspect of this application, a computer-readable storage medium is provided, which includes a stored executable program, wherein, when the executable program is executed, it controls the device where the computer-readable storage medium is located to perform the above-described message processing method.

[0021] To achieve the above objectives, according to another aspect of this application, an electronic device is provided, the electronic device including a memory storing an executable program; and a processor for running the program, wherein the program executes the above-described message processing method when it runs.

[0022] To achieve the above objectives, according to another aspect of this application, a computer program product is provided, including computer instructions that, when executed by a processor, implement the steps of the above-described message processing method.

[0023] In this embodiment, by determining whether the request initiator has the permission to initiate a message based on the message content of the business message sent by the request initiator, an permission verification mechanism is first executed upon receiving a business message. The decision to continue processing the message is made based on whether the request initiator has the permission to initiate a message. This effectively reduces invalid processing due to message permission issues, thereby avoiding the unnecessary occupation of system resources and improving message processing efficiency.

[0024] Therefore, the method provided in this application achieves the goal of determining whether to perform a complete processing flow on a message based on whether the request initiator has the authority to initiate the message, thereby improving the technical effect of message processing efficiency. It also solves the technical problem of low message processing efficiency in related technologies that perform a complete processing flow on all message content sent by all request initiators. Attached Figure Description

[0025] The accompanying drawings, which form part of this application, are used to provide a further understanding of this application. The illustrative embodiments and descriptions of this application are used to explain this application and do not constitute an undue limitation of this application. In the drawings:

[0026] Figure 1 This is a hardware structure block diagram of a computer terminal provided according to an embodiment of this application;

[0027] Figure 2 This is a flowchart of a message processing method provided according to an embodiment of this application;

[0028] Figure 3 This is a schematic diagram of a message processing apparatus provided according to an embodiment of this application;

[0029] Figure 4 This is a structural block diagram of an electronic device according to an embodiment of this application. Detailed Implementation

[0030] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort should fall within the scope of protection of the present application.

[0031] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0032] It should be noted that the message processing method, apparatus, storage medium and electronic equipment disclosed herein can be used in the field of financial technology, or in any field other than financial technology. The application fields of the message processing method, apparatus, storage medium and electronic equipment disclosed herein are not limited.

[0033] It should be noted that the information collected in this application (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for display, data used for analysis, etc.) are information and data authorized by the user or fully authorized by all parties. Furthermore, the collection, storage, use, processing, transmission, provision, disclosure, and application of this data all comply with relevant laws, regulations, and standards, necessary confidentiality measures have been taken, and they do not violate public order and good morals. Corresponding access points are provided for users to choose to authorize or refuse. For example, interfaces are set up between this system and relevant users or organizations, providing users with corresponding access points to choose to agree to or refuse automated decision-making results; if the user chooses to refuse, the process proceeds to the expert decision-making stage.

[0034] Example 1

[0035] According to an embodiment of this application, an embodiment of a message processing method is also provided. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Furthermore, although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in a different order than that shown here.

[0036] The method embodiment provided in Embodiment 1 of this application can be executed on a mobile terminal, computer terminal, or similar computing device. Figure 1 A hardware block diagram of a computer terminal (or mobile device) for implementing a message processing method is shown. Figure 1 As shown, the computer terminal 10 (or mobile device) may include one or more processors 102 (shown as 102a, 102b, ..., 102n in the figure) 102 (processor 102 may include, but is not limited to, a microprocessor (MCU) or a field-programmable gate array (FPGA), etc.), a memory 104 for storing data, and a transmission device 106 for communication functions. In addition, it may also include: a display, an input / output (I / O) interface, a Universal Serial Bus (USB) port (which may be included as one of the ports of a BUS bus), a network interface, a power supply, and / or a camera. Those skilled in the art will understand that... Figure 1 The structure shown is for illustrative purposes only and does not limit the structure of the aforementioned electronic device. For example, computer terminal 10 may also include... Figure 1 The more or fewer components shown, or having the same Figure 1 The different configurations shown.

[0037] It should be noted that the aforementioned one or more processors 102 and / or other data processing circuits are generally referred to herein as "data processing circuits". These data processing circuits may be embodied, in whole or in part, in software, hardware, firmware, or any other combination thereof. Furthermore, the data processing circuits may be a single, independent processing module, or may be integrated, in whole or in part, into any other element within the computer terminal 10 (or mobile device). As involved in the embodiments of this application, the data processing circuits serve as a processor control mechanism (e.g., selection of a variable resistor termination path connected to an interface).

[0038] The memory 104 can be used to store software programs and modules of application software, such as the program instructions / data storage device corresponding to the message processing method in the embodiments of this application. The processor 102 executes various functional applications and data processing by running the software programs and modules stored in the memory 104, thereby implementing the above-mentioned message processing method. The memory 104 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include memory remotely located relative to the processor 102, and these remote memories can be connected to the computer terminal 10 via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0039] The transmission device 106 is used to receive or send data via a network. Specific examples of the network described above may include a wireless network provided by the communication provider of the computer terminal 10. In one example, the transmission device 106 includes a Network Interface Controller (NIC), which can connect to other network devices via a base station to communicate with the Internet. In another example, the transmission device 106 may be a Radio Frequency (RF) module, used for wireless communication with the Internet.

[0040] The display can be, for example, a touchscreen liquid crystal display (LCD), which allows the user to interact with the user interface of the computer terminal 10 (or mobile device).

[0041] Under the aforementioned operating environment, this application provides the following: Figure 2 The message processing method shown. Figure 2 This is a flowchart of a message processing method according to Embodiment 1 of this application.

[0042] Step S201: Receive the business message sent by the request initiator.

[0043] Optionally, electronic devices, application systems, servers, or other similar devices can be used as the executing entity of this application. In this embodiment, the target processing system is used as the executing entity to execute the aforementioned message processing method. The target processing system can be applied to a target financial institution.

[0044] In an optional embodiment, the request initiator may be a device terminal of a financial institution. The business message carries specific business data; for example, the business message may be an encrypted payment message, a balance inquiry message, or other similar messages.

[0045] In an optional embodiment, the message structure of the service message includes a message header and a message body. The message header includes at least the information of the sender of the service message (i.e., the request initiator), and may also include at least one of the following: transaction number, service type, subtype under the service type, information of the request recipient, processing mode, etc. The message body consists of service fields (e.g., type, constraints) defined according to the specification.

[0046] Step S202: Determine whether the request initiator has the authority to initiate the message based on the message content of the business message.

[0047] After receiving a business message, the target processing system can parse it to obtain the message content. Once the message content is obtained, the system determines whether the request initiator has the permission to send the message by searching the built-in permission database or calling the permission verification service. This process can be implemented using role-based access control. For example, it can determine whether the initiator has the right to send such a message based on their role and business type. Alternatively, it can determine whether the initiator has the right to send such a message based on their role and the business risk level of the message. For instance, an institution might only be authorized to make small-amount payment transactions and not allowed to make large-amount transfers.

[0048] Step S203: If the request initiator has the permission to initiate a message, the message content is processed by the request recipient pointed to by the business message.

[0049] Once it's confirmed that the request initiator has the appropriate message initiation authority, the message content is processed by the request recipient indicated by the business message. For example, if the request recipient is the target processing system, the target processing system directly processes the message, including but not limited to decrypting the business message, data verification, and executing corresponding business logic based on the message content. For instance, for a payment message, the system might need to verify whether the account balance is sufficient, execute payment logic, and update the account status.

[0050] For example, if the requesting recipient is an object other than the target processing system, such as another financial institution, the target processing system can forward the message content of the business message to the requesting recipient, so that the requesting recipient can process the message content upon receiving it.

[0051] Step S204: If the request initiator does not have the authority to initiate a message, the forwarding of the message content shall be prohibited.

[0052] Optionally, if the requesting party does not have the authority to initiate a message, the system will immediately prohibit any further processing and forwarding of the message content to prevent unauthorized message operations, thereby avoiding unnecessary resource consumption and ensuring system security.

[0053] In this embodiment, by determining whether the request initiator has the permission to initiate a message based on the message content of the business message sent by the request initiator, an permission verification mechanism is first executed upon receiving a business message. The decision to continue processing the message is made based on whether the request initiator has the permission to initiate a message. This effectively reduces invalid processing due to message permission issues, thereby avoiding the unnecessary occupation of system resources and improving message processing efficiency.

[0054] Therefore, the method provided in this application achieves the goal of determining whether to perform a complete processing flow on a message based on whether the request initiator has the authority to initiate the message, thereby improving the technical effect of message processing efficiency. It also solves the technical problem of low message processing efficiency in related technologies that perform a complete processing flow on all message content sent by all request initiators.

[0055] Optionally, in the message processing method provided in this application embodiment, the business message is a message encrypted with the public key of the target processing system and signed with the private key of the request initiator. Before determining whether the request initiator has the authority to initiate the message based on the message content of the business message, the method further includes: performing signature verification processing on the business message using the public key of the request initiator to obtain a signature verification result; if the signature verification result indicates that the signature verification is successful, performing decryption processing on the business message using the private key of the target processing system to obtain the message content.

[0056] In an optional embodiment, before receiving the business message sent by the request initiator, the request initiator encrypts and signs the message content to improve the security of message transmission. For example, the request initiator uses the public key of the target processing system to encrypt the message content to obtain a third encryption result, and then uses the request initiator's private key to sign the encrypted message to obtain a third digital signature, thereby obtaining the business message based on the third encryption result and the third digital signature.

[0057] In an optional embodiment, the target processing system within the target financial institution can be the routing and processing hub in a message processing scenario. For example, the target financial institution can be a superior financial institution, and the request initiator can be a subordinate financial institution of the target financial institution. The target financial institution can have multiple subordinate financial institutions. When a subordinate financial institution wants to send a business message to other subordinate financial institutions of the target financial institution or to the target financial institution itself, the business message sent by the subordinate financial institution needs to undergo intermediate processing by the target financial institution (e.g., determination of the message recipient, message verification, etc.).

[0058] Therefore, after receiving a business message, the target processing system can perform signature verification and decryption operations on the message. Optionally, the system can use the request initiator's public key to verify the signature portion of the message and obtain the verification result. For example, the system can use the request initiator's public key to decrypt the signature portion of the message, and then compare the resulting signature value with the message content digest (usually generated by a hash algorithm). If they match, the signature verification is successful and the message has not been tampered with; if they do not match, the signature verification fails.

[0059] Optionally, once the signature verification result is successful, confirming the integrity and authenticity of the message, the target processing system uses its own private key to decrypt the message content. Because the business message was encrypted using the target processing system's public key during transmission, only the target processing system can decrypt and read the message's true content.

[0060] Optionally, if the signature verification result indicates that the signature verification failed, the decryption of the business message shall be prohibited. Instead, a prompt message may be sent to the request initiator, such as a message indicating that the signature verification failed.

[0061] Optionally, in the message processing method provided in this application embodiment, determining whether the request initiator has message initiation authority based on the message content of the business message includes: determining the business risk level of the business message and the identity information of the request initiator based on the message content; obtaining a preset message initiation authority list, wherein the message initiation authority list includes the maximum business risk level corresponding to the message initiation authority of different objects; and determining target information based on the message initiation authority list, the business risk level of the business message, and the identity information of the request initiator, wherein the target information is used to characterize whether the request initiator has message initiation authority.

[0062] In an optional embodiment, the business risk level can be determined based on relevant information in the business message. For example, it can be determined based on the business type and subtypes under the business type. For instance, the business type can be a transaction type, and the subtypes under the business type can be large transactions, small transactions, etc. That is, each business type can include at least one subtype, and the subtypes are a detailed classification of the business type. The target processing system can preset a mapping relationship between the business type, the subtypes under the business type, and the business risk level. After obtaining the message content, the target processing system can determine the business risk level of the message content from the mapping relationship based on the business type and its subtypes in the message content. For another example, the business risk level can be determined based on the type of account (e.g., personal account, institutional account, etc.) involved in the business message.

[0063] In another optional embodiment, the business risk level can be directly recorded in the message content, that is, the target processing system can directly obtain the business risk level from the message content.

[0064] In an optional embodiment, the message content includes the identity information of the request initiator. The identity information of the request initiator may include the initiator's organization code, organization type, and other authentication information to identify and verify the initiator's identity.

[0065] When a business message arrives at the target processing system, the system first decrypts it to access the original content (i.e., the message content). Then, the system determines the business risk level based on the message content. Simultaneously, the system also parses the identity information of the request initiator, such as organization code and organization type, to prepare for authorization verification.

[0066] In an optional embodiment, the message initiation permission list is a pre-set list in the system, which records in detail the maximum business risk level corresponding to the messages that different organizations (objects) can initiate, for the purpose of access control. Optionally, the message initiation permission list can be stored in a database and retrieved through a query statement; or, if the list is relatively stable and small, it can be loaded into memory to speed up access.

[0067] The target processing system can logically compare the business risk level of the acquired business message, the identity information of the request initiator, and a preset message initiation permission list to determine whether the request initiator has the authority to initiate the current message. For example, if the request initiator's organization is on the message initiation permission list, and its maximum allowed business risk level is greater than or equal to the risk level of the current message, then the target information indicates that the request initiator has the authority to initiate the message; otherwise, it indicates that the request initiator does not have the authority.

[0068] It should be noted that by introducing a mechanism of business risk levels and permission lists, the accurate identification of the request initiator's message initiation permissions is effectively achieved. This improves the security and efficiency of message processing and reduces the unnecessary consumption of system resources.

[0069] Optionally, in the message processing method provided in the embodiments of this application, before processing the message content through the request recipient pointed to by the business message, the method further includes: obtaining the business type of the business message from the message content; determining the request recipient from multiple objects according to the business type, wherein the multiple objects include the target processing system.

[0070] Optionally, the message content may record the business type of the business message. The business type is a classification identifier for the business message, defining the content and function of the message. For example, the business type may be "transfer", "balance inquiry", "transaction authorization", etc.

[0071] The system can pre-define the mapping between different business types and request recipients. After obtaining the business type of the message content, the system can determine the request recipient based on this mapping. For example, for transfer messages, to improve message processing security, the system might decide to have it received and processed by its internal service. For query messages, they might be processed by other organizations.

[0072] It should be noted that the above method enables accurate identification of the recipient of the request.

[0073] Optionally, in the message processing method provided in this application embodiment, when the request recipient is the target processing system, the message content is processed by the request recipient pointed to by the business message, including: performing compliance verification on the message content according to preset inspection rules; if the compliance verification passes, performing business processing based on the message content to obtain a business processing result; encrypting the business processing result using the public key of the request initiator to obtain a first encryption result, and signing the first encryption result using the private key of the target processing system to obtain a first digital signature; determining a first feedback message based on the first encryption result and the first digital signature, and sending the first feedback message to the request initiator.

[0074] In an alternative embodiment, the target processing system may first perform a format conversion on the message content before performing compliance verification. For example, the message content may be converted into an operational data model. Compliance verification can then be performed after the format conversion.

[0075] Optionally, compliance verification is a process used to check whether business messages comply with preset business rules or relevant regulatory requirements. This can include compliance checks on data format, business logic, and security protocols. After the message content is determined to be processed by the target processing system, the system can perform compliance verification on the message according to preset verification rules. This includes, but is not limited to, the correctness of the data format, the rationality of the business logic, and whether it meets the requirements of laws and regulations such as customer privacy protection. In an optional embodiment, staff can pre-develop a series of automated compliance verification scripts or services, which can invoke different verification rules based on the message type. For example, for transfer messages, the system should check whether there is sufficient account balance and whether the daily transaction limit has been exceeded.

[0076] In an optional embodiment, if the compliance verification fails, further processing of the message content can be prohibited, and a prompt message can be sent to the request initiator to indicate that the verification failed.

[0077] Once the message passes compliance verification, the system will execute the corresponding business logic based on the message content. This may involve specific business actions such as database operations, account status updates, and transaction authorization verification, thereby generating a business processing result, i.e., the new data status or feedback information after the operation is completed. For example, for a balance query message, the business processing service will query the balance information of the relevant account and return that information as the business processing result.

[0078] After the business processing result is generated, the system encrypts the result using the request initiator's public key, forming the first encrypted result. This step ensures that the processing result will not be intercepted or tampered with by unauthorized third parties during the return transmission, protecting the security of sensitive data. For example, an asymmetric encryption algorithm can be applied to encrypt the business processing result. Next, the system signs the first encrypted result using its own private key, generating a first digital signature. The signature proves that the processing result originated from the target processing system and has not been tampered with during transmission. Finally, the first encrypted result and the first digital signature are combined to form the first feedback message. The system sends this feedback message back to the request initiator, completing a full business message processing cycle.

[0079] After receiving the first feedback message, the request initiator uses the public key of the target processing system to verify the signature of the first feedback message. If the verification fails, a prompt message is sent to the target processing system to indicate that the first feedback message is abnormal (e.g., it has been modified). If the verification succeeds, the request initiator uses its own private key to decrypt the first feedback message to obtain the business processing result. Then, subsequent business logic is executed based on the business processing result.

[0080] It should be noted that by performing comprehensive compliance verification, business processing, encryption and signing steps within the target processing system, a closed-loop and secure message processing flow is constructed, thereby improving the security and reliability of message processing.

[0081] Optionally, in the message processing method provided in this application embodiment, when the requesting recipient is an object other than the target processing system, the message content is processed through the requesting recipient pointed to by the business message, including: performing compliance verification on the message content according to preset inspection rules; if the compliance verification passes, encrypting the message content using the public key of the requesting recipient to obtain a second encryption result, and signing the second encryption result using the private key of the target processing system to obtain a second digital signature; determining a second feedback message based on the second encryption result and the second digital signature, and sending the second feedback message to the requesting recipient, wherein the requesting recipient processes the message content upon receiving the second feedback message.

[0082] Optionally, the compliance verification is the same when the request recipient is an object other than the target processing system as when the request recipient is the target processing system, so it will not be repeated here.

[0083] In an optional embodiment, if the compliance verification fails, further processing of the message content can be prohibited, and a prompt message can be sent to the request initiator to indicate that the verification failed.

[0084] Once the message passes compliance verification, the target processing system encrypts the message content using the request recipient's public key, generating a second encryption result. Subsequently, the encrypted message is signed using the target processing system's private key, generating a second digital signature. For example, an asymmetric encryption algorithm can be used for encryption, and a digital signature algorithm can be used to generate the signature. The encryption and signing processes can be performed by a dedicated encryption service or module to improve the accuracy and security of the operation.

[0085] The target processing system can combine the second encryption result and the second digital signature into a second feedback message, which is then sent to the requesting recipient through a secure channel. Upon receiving the second feedback message, the requesting recipient verifies the signature using the target processing system's public key. If the verification is successful, the requesting recipient decrypts the message content using its private key and then processes the message content. During the message processing, the requesting recipient first executes business logic based on the message content to obtain the business processing result, such as performing operations like deducting funds or querying the database.

[0086] In an optional embodiment, after obtaining the business processing result, the requesting party encrypts the business processing result using the request initiator's public key to obtain a fourth encryption result, and then signs the business processing result using the requesting party's private key to obtain a fourth digital signature. Based on the fourth encryption result and the fourth digital signature, a fourth feedback message is determined and sent to the target processing system, thereby enabling the requesting party to complete the business processing of the message content. In this case, upon receiving the fourth feedback message, the target processing system directly forwards the fourth feedback message to the request initiator without performing signature verification and decryption operations, thereby improving message transmission efficiency.

[0087] In another optional embodiment, after obtaining the business processing result, the requesting party encrypts the business processing result using the public key of the target processing system to obtain a fourth encryption result, and then signs the business processing result using the private key of the requesting party to obtain a fourth digital signature. Based on the fourth encryption result and the fourth digital signature, a fourth feedback message is determined and sent to the target processing system, thereby enabling the requesting party to complete the business processing of the message content. In this case, upon receiving the fourth feedback message, the target processing system verifies the signature of the business message using the public key of the requesting party to obtain a verification result. If the verification result indicates that the verification is successful, the target processing system decrypts the business message using its private key to obtain the business processing result. The business processing result is then subjected to compliance verification according to preset inspection rules. If the compliance verification is successful, the message content is encrypted using the public key of the requesting party to obtain a fifth encryption result, and then signed using the private key of the target processing system to obtain a fifth digital signature. Based on the fifth encryption result and the fifth digital signature, a fifth feedback message is determined and sent to the requesting party. This method can further improve the security of message transmission.

[0088] In an optional embodiment, if the requesting receiver fails to verify the signature of the second feedback message, the requesting receiver sends a prompt message to the target processing system to indicate that the second feedback message is abnormal (e.g., it has been modified).

[0089] It should be noted that by adding compliance checks and re-encrypting and signing operations in the message processing flow, the security and reliability of message processing are effectively improved.

[0090] Optionally, in the message processing method provided in the embodiments of this application, after the message content is processed by the request recipient pointed to by the business message, the method further includes: receiving a third feedback message from the request recipient; and sending the message content of the third feedback message to the request initiator.

[0091] Optionally, after the request recipient (external object) completes the processing of the business message, it sends the processing result back to the target processing system, i.e., a third feedback message. Upon receiving the third feedback message, the target processing system sends its message content back to the original request initiator.

[0092] For example, the target processing system directly sends the third feedback message to the request initiator.

[0093] For example, the target processing system performs compliance verification on the request initiator. If the compliance verification passes, the system re-signs and encrypts the content of the third feedback message and then sends the resulting fifth feedback message to the request initiator.

[0094] It should be noted that by introducing the reception and forwarding of third feedback messages, a closed-loop feedback mechanism for the transaction message processing process is achieved, thereby improving the reliability of message processing.

[0095] Therefore, the method provided in this application achieves the goal of determining whether to perform a complete processing flow on a message based on whether the request initiator has the authority to initiate the message, thereby improving the technical effect of message processing efficiency. It also solves the technical problem of low message processing efficiency in related technologies that perform a complete processing flow on all message content sent by all request initiators.

[0096] It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases the steps shown or described may be executed in a different order than that shown here.

[0097] Example 2

[0098] This application also provides a message processing apparatus. It should be noted that the message processing apparatus of this application can be used to execute the message processing method provided in this application. The message processing apparatus provided in this application is described below.

[0099] According to embodiments of this application, an apparatus for implementing the above-described message processing method is also provided, such as... Figure 3 As shown, the device includes:

[0100] The first receiving module 301 is used to receive the business message sent by the request initiator.

[0101] The judgment module 302 is used to determine whether the request initiator has the permission to initiate the message based on the message content of the business message;

[0102] The first processing module 303 is used to process the message content through the request receiver pointed to by the business message, when the request initiator has the message initiation authority.

[0103] The second processing module 304 is used to prohibit the forwarding of message content when the request initiator does not have the permission to initiate the message.

[0104] In this embodiment, by determining whether the request initiator has the permission to initiate a message based on the message content of the business message sent by the request initiator, an permission verification mechanism is first executed upon receiving a business message. The decision to continue processing the message is made based on whether the request initiator has the permission to initiate a message. This effectively reduces invalid processing due to message permission issues, thereby avoiding the unnecessary occupation of system resources and improving message processing efficiency.

[0105] Therefore, the method provided in this application achieves the goal of determining whether to perform a complete processing flow on a message based on whether the request initiator has the authority to initiate the message, thereby improving the technical effect of message processing efficiency. It also solves the technical problem of low message processing efficiency in related technologies that perform a complete processing flow on all message content sent by all request initiators.

[0106] Optionally, in the message processing apparatus provided in the embodiments of this application, the message processing apparatus further includes: a third processing module, used to perform signature verification processing on the business message using the public key of the request initiator to obtain the signature verification result; and a fourth processing module, used to decrypt the business message using the private key of the target processing system to obtain the message content when the signature verification result indicates that the signature verification is successful.

[0107] Optionally, in the message processing apparatus provided in this application embodiment, the determination module further includes: a first acquisition submodule, used to determine the business risk level of the business message and the identity information of the request initiator based on the message content; a second acquisition submodule, used to acquire a preset message initiation permission list, wherein the message initiation permission list includes the maximum business risk level corresponding to the message initiation permission of different objects; and a determination submodule, used to determine target information based on the message initiation permission list, the business risk level of the business message and the identity information of the request initiator, wherein the target information is used to characterize whether the request initiator has message initiation permission.

[0108] Optionally, in the message processing apparatus provided in the embodiments of this application, the message processing apparatus further includes: an acquisition module, used to acquire the service type of the service message from the message content; and a determination module, used to determine the request recipient from multiple objects according to the service type, wherein the multiple objects include the target processing system.

[0109] Optionally, in the message processing apparatus provided in this application embodiment, the first processing module further includes: a first verification submodule, used to perform compliance verification on the message content according to preset inspection rules; a first processing submodule, used to perform business processing based on the message content and obtain a business processing result if the compliance verification passes; a second processing submodule, used to encrypt the business processing result using the public key of the request initiator to obtain a first encryption result, and to sign the first encryption result using the private key of the target processing system to obtain a first digital signature; and a first sending submodule, used to determine a first feedback message based on the first encryption result and the first digital signature, and to send the first feedback message to the request initiator.

[0110] Optionally, in the message processing apparatus provided in this application embodiment, the first processing module further includes: a second verification submodule, used to perform compliance verification on the message content according to preset inspection rules; a third processing submodule, used to encrypt the message content using the public key of the requesting recipient to obtain a second encryption result, and to sign the second encryption result using the private key of the target processing system to obtain a second digital signature if the compliance verification passes; and a second sending submodule, used to determine a second feedback message based on the second encryption result and the second digital signature, and to send the second feedback message to the requesting recipient, wherein the requesting recipient processes the message content upon receiving the second feedback message.

[0111] Optionally, in the message processing apparatus provided in the embodiments of this application, the message processing apparatus further includes: a second receiving module, used to receive a third feedback message from the requesting receiver; and a sending module, used to send the message content of the third feedback message to the request initiator.

[0112] It should be noted that the first receiving module 301, the judging module 302, the first processing module 303, and the second processing module 304 mentioned above correspond to steps S201 to S204 in Embodiment 1. The four modules and the corresponding steps implement the same instances and application scenarios, but are not limited to the content disclosed in Embodiment 1. It should be noted that the above modules or units can be hardware or software components stored in memory (e.g., memory 104) and processed by one or more processors (e.g., processors 102a, 102b, ..., 102n). The above modules can also be part of a device and run in the computer terminal 10 provided in Embodiment 1.

[0113] Example 3

[0114] Embodiments of this application may provide an electronic device. Figure 4 This is a structural block diagram of an electronic device according to an embodiment of this application. Figure 4As shown, the electronic device may include: one or more ( Figure 4 (Only one is shown) processor 1002, memory 1004, memory controller, and peripheral interface, wherein the peripheral interface is connected to the radio frequency module, audio module and display.

[0115] The memory can be used to store software programs and modules, such as the program instructions / modules corresponding to the methods and apparatus in the embodiments of this application. The processor executes various functional applications and data processing by running the software programs and modules stored in the memory, thereby implementing the above-described methods. The memory may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory may further include memory remotely located relative to the processor, and these remote memories can be connected to the terminal via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0116] The processor can access information and applications stored in the memory via the transmission device to perform the following steps: receiving a service message sent by the request initiator; determining whether the request initiator has permission to initiate the message based on the message content; if the request initiator has permission to initiate the message, processing the message content through the request recipient indicated by the service message; if the request initiator does not have permission to initiate the message, prohibiting the forwarding of the message content.

[0117] The processor can also call the information and application programs stored in the memory through the transmission device to perform the following steps: before determining whether the request initiator has the authority to initiate the message based on the message content of the business message, the processor uses the public key of the request initiator to perform signature verification processing on the business message to obtain the signature verification result; if the signature verification result indicates that the signature verification is successful, the processor uses the private key of the target processing system to decrypt the business message to obtain the message content.

[0118] The processor can also invoke information and applications stored in the memory through the transmission device to perform the following steps: determine the business risk level of the business message and the identity information of the request initiator based on the message content; obtain a preset message initiation permission list, wherein the message initiation permission list includes the maximum business risk level corresponding to the message initiation permission of different objects; determine the target information based on the message initiation permission list, the business risk level of the business message and the identity information of the request initiator, wherein the target information is used to characterize whether the request initiator has message initiation permission.

[0119] The processor can also invoke information and applications stored in memory via the transmission device to perform the following steps: obtaining the service type of the service message from the message content before the request recipient indicated by the service message processes the message content; determining the request recipient from multiple objects based on the service type, wherein the multiple objects include the target processing system.

[0120] The processor can also call the information and application stored in the memory through the transmission device to perform the following steps: perform compliance verification on the message content according to preset inspection rules; if the compliance verification is passed, perform business processing based on the message content to obtain the business processing result; encrypt the business processing result using the public key of the request initiator to obtain a first encryption result, and sign the first encryption result using the private key of the target processing system to obtain a first digital signature; determine the first feedback message based on the first encryption result and the first digital signature, and send the first feedback message to the request initiator.

[0121] The processor can also call the information and application stored in the memory through the transmission device to perform the following steps: perform compliance verification on the message content according to preset inspection rules; if the compliance verification passes, encrypt the message content using the public key of the requesting recipient to obtain a second encryption result, and sign the second encryption result using the private key of the target processing system to obtain a second digital signature; determine a second feedback message based on the second encryption result and the second digital signature, and send the second feedback message to the requesting recipient, wherein the requesting recipient processes the message content upon receiving the second feedback message.

[0122] The processor can also invoke information and applications stored in the memory through the transmission device to perform the following steps: after the request recipient, as indicated by the service message, processes the message content, it receives a third feedback message from the request recipient; and sends the message content of the third feedback message to the request initiator.

[0123] In this embodiment, by determining whether the request initiator has the permission to initiate a message based on the message content of the business message sent by the request initiator, an permission verification mechanism is first executed upon receiving a business message. The decision to continue processing the message is made based on whether the request initiator has the permission to initiate a message. This effectively reduces invalid processing due to message permission issues, thereby avoiding the unnecessary occupation of system resources and improving message processing efficiency.

[0124] Therefore, the method provided in this application achieves the goal of determining whether to perform a complete processing flow on a message based on whether the request initiator has the authority to initiate the message, thereby improving the technical effect of message processing efficiency. It also solves the technical problem of low message processing efficiency in related technologies that perform a complete processing flow on all message content sent by all request initiators.

[0125] Those skilled in the art will understand that Figure 4 The structure shown is for illustrative purposes only. Electronic devices can also be smartphones, tablets, handheld computers, mobile internet devices (MIDs), PADs, and other terminal devices. Figure 4 This does not limit the structure of the aforementioned electronic device. For example, electronic devices may also include components that are more... Figure 4 The more or fewer components shown (such as network interfaces, display devices, etc.), or having the same Figure 4 The different configurations shown.

[0126] Those skilled in the art will understand that all or part of the steps in the various methods of the above embodiments can be implemented by a program instructing the hardware related to the terminal device. The program can be stored in a computer-readable storage medium, which may include: flash drive, read-only memory (ROM), random access memory (RAM), disk or optical disk, etc.

[0127] Example 4

[0128] Embodiments of this application also provide a storage medium. Optionally, in this embodiment, the storage medium can be used to store the program code executed by the message processing method provided in Embodiment 1.

[0129] Optionally, in this embodiment, the storage medium may be located in any computer terminal in a group of computer terminals in a computer network, or in any mobile terminal in a group of mobile terminals.

[0130] This application also provides a computer program product, which, when executed on a data processing device, is adapted to perform message processing method steps.

[0131] The sequence numbers of the embodiments in this application are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0132] In the above embodiments of this application, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0133] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. The device embodiments described above are merely illustrative; for example, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the displayed or discussed mutual coupling, direct coupling, or communication connection may be through some interfaces; the indirect coupling or communication connection between units or modules may be electrical or other forms.

[0134] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0135] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0136] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as a USB flash drive, read-only memory (ROM), random access memory (RAM), portable hard drive, magnetic disk, or optical disk.

[0137] The above description is only a preferred embodiment of this application. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the principle of this application, and these improvements and modifications should also be considered within the scope of protection of this application.

Claims

1. A message processing method, characterized in that, Applied to target processing systems, including: Receive business messages sent by the request initiator; Determine whether the request initiator has the authority to initiate the message based on the message content of the business message; If the request initiator has the permission to initiate a message, the message content is processed by the request recipient indicated by the service message; If the request initiator does not have the authority to initiate a message, forwarding of the message content is prohibited.

2. The method according to claim 1, characterized in that, The business message is encrypted using the public key of the target processing system and signed using the private key of the request initiator. Before determining whether the request initiator has message initiation authority based on the message content of the business message, the method further includes: The public key of the request initiator is used to perform signature verification on the business message to obtain the signature verification result; If the signature verification result indicates that the signature verification is successful, the business message is decrypted using the private key of the target processing system to obtain the message content.

3. The method according to claim 1, characterized in that, Determining whether the request initiator has message initiation authority based on the message content of the service message includes: The business risk level of the business message and the identity information of the request initiator are determined based on the message content. Obtain a preset list of message initiation permissions, wherein the list of message initiation permissions includes the maximum business risk level corresponding to the message initiation permissions of different objects; Based on the message initiation permission list, the business risk level of the business message, and the identity information of the request initiator, target information is determined, wherein the target information is used to characterize whether the request initiator has message initiation permission.

4. The method according to claim 1, characterized in that, Before the request recipient indicated by the service message processes the message content, the method further includes: Obtain the service type of the service message from the message content; Based on the business type, the request recipient is determined from a plurality of objects, wherein the plurality of objects includes the target processing system.

5. The method according to claim 1, characterized in that, When the request recipient is the target processing system, the message content is processed by the request recipient indicated by the service message, including: The message content is verified for compliance according to preset inspection rules; If the compliance verification passes, business processing is performed based on the message content to obtain the business processing result; The public key of the request initiator is used to encrypt the business processing result to obtain a first encrypted result, and the private key of the target processing system is used to sign the first encrypted result to obtain a first digital signature. Based on the first encryption result and the first digital signature, a first feedback message is determined and sent to the request initiator.

6. The method according to claim 1, characterized in that, When the request recipient is an object other than the target processing system, the message content is processed through the request recipient indicated by the service message, including: The message content is verified for compliance according to preset inspection rules; If the compliance verification passes, the message content is encrypted using the public key of the request recipient to obtain a second encryption result, and the second encryption result is signed using the private key of the target processing system to obtain a second digital signature. Based on the second encryption result and the second digital signature, a second feedback message is determined and sent to the request recipient, wherein the request recipient processes the message content upon receiving the second feedback message.

7. The method according to claim 6, characterized in that, After the message content is processed by the request recipient indicated by the service message, the method further includes: Receive the third feedback message from the request recipient; The message content of the third feedback message is sent to the request initiator.

8. A message processing apparatus, characterized in that, Applied to target processing systems, including: The first receiving module is used to receive business messages sent by the request initiator. The judgment module is used to determine whether the request initiator has the permission to initiate the message based on the message content of the business message; The first processing module is used to process the message content through the request recipient pointed to by the business message, provided that the request initiator has the message initiation authority. The second processing module is used to prohibit the forwarding of the message content if the request initiator does not have the permission to initiate the message.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium includes a stored executable program, wherein, when the executable program is executed, it controls the device on which the computer-readable storage medium is located to perform the message processing method according to any one of claims 1 to 7.

10. An electronic device, characterized in that, include: Memory, which stores executable programs; A processor for running the program, wherein the program, when running, performs the message processing method according to any one of claims 1 to 7.

Images