Electronic certificate two-dimensional code aggregation decoding method and device, equipment and storage medium

Abstract

The invention provides an electronic certificate two-dimensional code aggregation decoding method, apparatus and device, and a storage medium. The method comprises the steps of scanning and uploading two-dimensional code data to a standardized aggregation decoding interface through a terminal device; after the aggregation decoding platform receives the data, a corresponding authorization decoding service interface is called for decoding, and user identity information is obtained; and then querying the permission state of the user in real time, and automatically triggering a corresponding service processing flow according to a query result. According to the invention, the whole process from two-dimensional code decoding, authority verification to service execution is automatically communicated, the compatibility, security and processing efficiency of the system are remarkably improved, and the method is suitable for electronic certificate offline service scenes requiring high security and high concurrency.

Description

Technical Field

[0001] This invention relates to the field of information technology, and in particular to a method, apparatus, device, and storage medium for the aggregation and decoding of electronic voucher QR codes. Background Technology

[0002] In current electronic credential application scenarios, offline processing of various QR codes (such as social security cards, electronic health cards, and identity certificates) faces significant challenges. Traditional processing methods typically rely on customized hardware or dedicated software for decoding, resulting in severe system fragmentation and difficulty in compatibility with diverse terminal devices and operating system environments. Furthermore, the decoding process is often separated from subsequent business processes (such as payment and transaction processing), creating a "decoding-verification-execution" breakpoint. This not only increases the complexity of system integration and development costs but also introduces additional security risks and efficiency bottlenecks. Specifically, existing solutions generally suffer from the following problems: a lack of unified and standardized access interfaces, leading to difficulties in terminal adaptation; the inability to immediately link decoded identity information with the user's real-time permission status, resulting in delayed business risk control; and a non-automated overall process requiring manual intervention or multiple system calls, limiting response speed and user experience.

[0003] In summary, the problems existing in the current technology urgently need to be solved. Summary of the Invention

[0004] This invention provides a method, apparatus, device, and storage medium for the aggregation and decoding of electronic voucher QR codes, which addresses the deficiencies in the prior art and enables fully automated operation of the entire process from QR code decoding and authorization verification to business execution.

[0005] This invention provides a method for aggregating and decoding electronic voucher QR codes, comprising: The system obtains QR code data by scanning the QR code of the electronic voucher presented by the user through a terminal device. The terminal device calls a standardized aggregation decoding interface and uploads the QR code data; The system receives the QR code data through an aggregated decoding platform and calls the authorized decoding service interface to decode the QR code data in order to obtain user identity information. The aggregation decoding platform queries the user's permission status based on the user's identity information. Based on the user's permission status, the corresponding business processing flow is triggered.

[0006] According to the electronic voucher QR code aggregation and decoding method provided by the present invention, the step of calling a standardized aggregation and decoding interface through the terminal device and uploading the QR code data specifically includes: A request message is constructed through the terminal device, and the request message includes at least the QR code data and the device identification information of the terminal device. The request message is encrypted using the national cryptographic algorithm, and a digital signature is applied to the encrypted request message; The processed request message is sent to the aggregation decoding platform via the HTTPS protocol.

[0007] According to the present invention, an electronic voucher QR code aggregation and decoding method is provided, the step of receiving the QR code data through an aggregation and decoding platform and calling an authorized decoding service interface to decode the QR code data specifically includes: Parse the QR code data to obtain its corresponding credential type and issuing organization identifier; Based on the credential type and the issuing organization identifier, the corresponding target authorization decoding service interface address is matched from the pre-configured service routing table; Initiate a decoding request to the target authorized decoding service interface address.

[0008] According to the present invention, an electronic voucher QR code aggregation and decoding method further includes, after the step of receiving the QR code data through the aggregation and decoding platform and calling the authorized decoding service interface to decode the QR code data, the method further includes: If decoding fails, a response message containing an error code is generated and returned to the terminal device.

[0009] According to the electronic voucher QR code aggregation and decoding method provided by the present invention, the step of triggering the corresponding business processing flow based on the queried user permission status specifically includes: If the user is found to have the authority to handle the target business, the back-end business system interface associated with the target business is called to initiate an automatic payment or business confirmation process. If the user is found to lack the required permissions, an insufficient permissions message is generated and returned to the terminal device.

[0010] According to the electronic voucher QR code aggregation and decoding method provided by the present invention, after the step of calling the back-end business system interface associated with the target business, the method specifically includes: Receive the processing results from the back-end business system; The processing result is encapsulated into a standardized response message, which is then encrypted, signed, and returned to the terminal device.

[0011] According to the electronic voucher QR code aggregation and decoding method provided by the present invention, the step of querying the user permission status of the corresponding user based on the user identity information through the aggregation and decoding platform specifically includes: The user identifier is extracted from the user identity information through the aggregation decoding platform. Based on the user identifier, a query request is sent to the permission center; Receive a response from the permission center and obtain permission status information indicating whether the user is qualified to handle the target business.

[0012] The present invention also provides an electronic voucher QR code aggregation and decoding device, comprising: The data acquisition module is used to scan the QR code of the electronic voucher presented by the user through the terminal device to obtain the QR code data; The data upload module is used to call the standardized aggregation decoding interface through the terminal device and upload the QR code data; The data decoding module is used to receive the QR code data through the aggregated decoding platform and call the authorized decoding service interface to decode the QR code data in order to obtain user identity information; The permission query module is used to query the user permission status of the corresponding user based on the user identity information through the aggregation decoding platform; The business triggering module is used to trigger the corresponding business processing flow based on the queried user permission status.

[0013] The present invention also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the electronic voucher QR code aggregation and decoding method as described above.

[0014] The present invention also provides a non-transitory computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the electronic voucher QR code aggregation and decoding method as described above.

[0015] The present invention also provides a computer program product, including a computer program that, when executed by a processor, implements the electronic voucher QR code aggregation and decoding method as described above.

[0016] The electronic voucher QR code aggregation decoding method, apparatus, device, and storage medium provided by this invention bring significant technological advancements and beneficial effects by constructing a continuous automated process that spans "data acquisition, decoding, permission query, and business triggering." First, by using a standardized aggregation decoding interface called by the terminal device, unified access to diverse terminals and voucher types is achieved, greatly reducing the complexity and development cost of system integration. Second, decoding is performed by calling the authorized decoding service interface through the aggregation decoding platform, ensuring the authority and accuracy of the decoding process and providing a reliable identity information foundation for subsequent processes. Crucially, after decoding, the method immediately queries the real-time permission status based on the acquired user identity information and uses this status as the direct basis for triggering subsequent business processing. This design completely breaks down the traditional separation between the decoding and business execution stages, achieving automatic and seamless integration from identity recognition to business execution. Its effects are twofold: firstly, by advancing security risk control through real-time permission verification, it effectively prevents unauthorized or excessive operations, thereby enhancing the overall security of the business system; secondly, the entire process is automated, eliminating the need for manual intervention or multiple system interactions, significantly improving business processing efficiency and user experience, and providing reliable and efficient technical support for offline electronic voucher application scenarios with high concurrency and high security requirements. Attached Figure Description

[0017] To more clearly illustrate the technical solutions in this invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this invention. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.

[0018] Figure 1 This is a flowchart illustrating the electronic voucher QR code aggregation and decoding method provided by the present invention; Figure 2 This is a schematic diagram of the structure of the electronic voucher QR code aggregation and decoding device provided by the present invention; Figure 3 This is a schematic diagram of the structure of the electronic device provided by the present invention. Detailed Implementation

[0019] To make the objectives, technical solutions, and advantages of this invention clearer, the technical solutions of this invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of this invention. All other embodiments obtained by those skilled in the art based on the embodiments of this invention without creative effort are within the scope of protection of this invention.

[0020] To address the problems in existing technologies, this invention proposes an electronic voucher QR code aggregation and decoding method to achieve fully automated workflow from QR code decoding and authorization verification to business execution. The electronic voucher QR code aggregation and decoding method is described below, as follows: Figure 1 As shown, including but not limited to the following steps: Step 110: Scan the QR code of the electronic voucher presented by the user using the terminal device to obtain the QR code data.

[0021] In step 110, the terminal device can be a merchant POS machine, a self-service terminal, a mobile smart terminal, or a dedicated scanning device. The electronic voucher QR code presented by the user is displayed on the screen of their mobile device or on a paper voucher. The terminal device uses a built-in or external scanning module (such as a camera) to capture and recognize the image of the QR code, and parses out the encoded raw string, i.e., the QR code data. This data is usually a string of encoded text information, containing voucher type identifier, user identifier, and other business parameters.

[0022] Step 120: Call the standardized aggregation decoding interface through the terminal device and upload the QR code data.

[0023] In step 120, after acquiring the QR code data, the terminal device immediately constructs a request conforming to a predetermined protocol. This request is organized in JSON format and includes at least the following fields: qr_data (QR code data), device_id (unique identifier for the terminal device), and timestamp. To enhance data transmission security, the terminal encrypts the request body using the national standard SM4 algorithm and generates a digital signature for the encrypted data using the SM2 algorithm. Subsequently, the terminal sends the encrypted and signed request message to the unified API endpoint provided by the aggregation decoding platform via HTTPS protocol, for example: https: / / api.decode-platform.com / v1 / decode.

[0024] Step 130: Receive the QR code data through the aggregation decoding platform, and call the authorized decoding service interface to decode the QR code data to obtain user identity information.

[0025] In step 130, upon receiving the request, the aggregation decoding platform first verifies the validity of the HTTPS certificate and digital signature, and then decrypts the request body using the SM4 algorithm. Subsequently, the platform parses the QR code data, extracting the credential type (e.g., "Social Security Card") and the issuing authority identifier (e.g., "Ministry of Human Resources and Social Security"). Based on a pre-configured service routing table, the platform forwards the request to the corresponding authorized decoding service interface. For example, for a social security card QR code, the platform forwards it to the standard decoding service provided by the Ministry of Human Resources and Social Security. The authorized decoding service verifies and decodes the QR code, returning structured user identity information, typically including: name, ID number, social security number, and issuing region. The aggregation decoding platform standardizes this information into an internally unified format.

[0026] Step 140: Query the user permission status of the corresponding user based on the user identity information through the aggregation decoding platform.

[0027] In step 140, the platform extracts key user identifiers (such as social security numbers) from the decoded user identity information. Subsequently, the platform sends a query request to a unified authorization center, carrying the user identifier and the current business scenario identifier (such as "medical insurance payment"). The authorization center retrieves the user's status in the current business scenario from its database, such as whether the user has signed up, whether they are on a blacklist, and their available credit limit, and returns the query results (such as "Status: Normal, Signed Up") to the aggregated decoding platform.

[0028] Step 150: Trigger the corresponding business processing flow based on the queried user permission status.

[0029] In step 150, the platform determines the subsequent actions based on the status returned by the permission center: If the status is "Normal" or "Contracted," the platform automatically calls the backend business system interface associated with that service. For example, it calls the "Seamless Payment" interface of the payment system, passing in the order number, amount, and user identifier to complete the deduction. After the payment system completes its processing, it returns the result (success / failure) to the platform.

[0030] If the status is "not signed", "frozen" or "insufficient permissions", the platform will generate the corresponding structured error message (e.g., {"code": "AUTH_FAIL", "msg": "User has not signed a contract, please complete the signing procedure first"}).

[0031] Finally, the platform re-encrypts and signs the final business processing result (payment success information or error message), and returns it to the requesting terminal device via an HTTPS response, so that the terminal device can display the processing result to the user.

[0032] As a further optional embodiment, the step of calling the standardized aggregation decoding interface through the terminal device and uploading the QR code data specifically includes: A request message is constructed through the terminal device, and the request message includes at least the QR code data and the device identification information of the terminal device. The request message is encrypted using the national cryptographic algorithm, and a digital signature is applied to the encrypted request message; The processed request message is sent to the aggregation decoding platform via the HTTPS protocol.

[0033] In this embodiment, to ensure secure and reliable data upload, the terminal device performs the following specific operations: First, a standardized request message is constructed. The client application on the terminal device (such as merchant POS software or self-service programs) encapsulates the acquired QR code data along with necessary device information. Specifically, a structured data object in JSON format is generated. This object contains at least two required fields: 1) qrData, whose value is the original QR code string obtained in step 110; 2) deviceId, whose value is a unique identifier for the terminal device, such as the device's serial number or a device code pre-assigned by the platform. Additionally, optional fields such as timestamp to identify the request initiation time and bizType to indicate the business scenario of the scan are typically included.

[0034] Secondly, encryption and digital signature using Chinese national cryptographic algorithms are performed. To ensure the confidentiality, integrity, and non-repudiation of the transmission process, the terminal device performs secure processing on the constructed JSON request message. The specific process is as follows: First, using the Chinese national cryptographic SM4 symmetric encryption algorithm and a session key pre-negotiated with or distributed by the aggregation decoding platform, the entire request message is encrypted to obtain a ciphertext data block. Second, using the Chinese national cryptographic SM2 asymmetric encryption algorithm and a private key stored locally on the terminal device, a digital signature operation is performed on the ciphertext data block obtained in the previous step (or its SM3 digest value) to generate a signature value.

[0035] Finally, data is transmitted securely via HTTPS. The terminal device uses the encrypted ciphertext data block and the generated digital signature value as the request body, and sends a POST request to the predefined Uniform Resource Locator (URL) of the aggregation decoding platform via the highly secure HTTPS protocol. Under the protection of HTTPS, the network transport layer ensures that data transmission is protected from eavesdropping and tampering.

[0036] As a further optional embodiment, the step of receiving the QR code data through the aggregation decoding platform and calling the authorized decoding service interface to decode the QR code data specifically includes: Parse the QR code data to obtain its corresponding credential type and issuing organization identifier; Based on the credential type and the issuing organization identifier, the corresponding target authorization decoding service interface address is matched from the pre-configured service routing table; Initiate a decoding request to the target authorized decoding service interface address.

[0037] In this embodiment, after receiving the encryption request uploaded by the terminal, the core decoding routing module of the aggregation decoding platform executes the following specific process: First, the QR code data is parsed to obtain its source characteristics. The platform performs preliminary parsing on the decrypted raw QR code data. This QR code data typically follows specific encoding standards, and its content or data structure embeds identifiers representing the credential type (e.g., card_type: “social_security”) and a unique identifier for the issuing organization (e.g., issuer_code: “NHRSS”). The platform extracts these two key routing parameters—credential type and issuing organization identifier—by parsing these predefined fields or performing pattern matching on the data structure.

[0038] Secondly, the platform matches the target service address based on routing parameters. It maintains a pre-configured, dynamically updatable service routing table. This table uses the credential type and issuing authority identifier (or a combination thereof) as the index key, and the corresponding value is the address of the target authorized decoding service interface with official or authoritative decoding capabilities corresponding to that credential type. For example, the routing table might contain the record: {“social_security”, “NHRSS”} -> “https: / / api.nhrss.gov.cn / v3 / decode”. Based on the parameters extracted in the previous step, the platform queries this routing table to precisely match the URL of the backend authoritative service interface to be invoked.

[0039] Finally, a standardized decoding request is initiated. The platform takes the received, fully verified original QR code data, repackages it into a new request according to the protocol format (such as HTTP / HTTPS), data format (such as JSON, XML), and security specifications (such as adding a specific authentication token) required by the target interface, and initiates a synchronous or asynchronous call to the target address obtained in the previous step. After verifying the legitimacy of the request, the authorized decoding service interface executes the core decoding logic and ultimately returns the structured user identity information (such as name and ID number) to the aggregated decoding platform.

[0040] As a further optional embodiment, after the step of receiving the QR code data through the aggregation decoding platform and calling the authorized decoding service interface to decode the QR code data, the method further includes: If decoding fails, a response message containing an error code is generated and returned to the terminal device.

[0041] In this embodiment, the aggregated decoding platform monitors and judges the call results of the authorized decoding service interface in real time. If decoding fails, the platform immediately initiates an error handling process to ensure that terminal devices and end users receive clear and secure operational feedback.

[0042] First, the platform determines the cause of failure and generates standardized error codes. Decoding failures can be caused by various reasons. The platform categorizes the failure reasons based on the original error information returned from the authorized decoding service interface or according to its own timeout mechanism. The platform predefines a standardized error code system covering various failure scenarios. For example, error code DECODE_001 corresponds to "QR code expired," DECODE_002 corresponds to "QR code format invalid or unrecognizable," DECODE_003 corresponds to "Issuing organization service temporarily unavailable," and AUTH_004 corresponds to "Interface signature verification failed," etc. The platform maps and generates corresponding error codes based on the specific failure reason.

[0043] Secondly, a structured error response message is constructed. The platform generates a JSON-formatted error response message. This message contains at least two core fields: 1) `code`, whose value is the standardized error code generated in the previous step; 2) `message`, whose value is a concise description in Chinese (or other languages) corresponding to the error code, used to directly notify the user or merchant. For example: {"code": "DECODE_001", "message": "QR code has expired, please refresh and try again"}. To ensure the security of the feedback information, this error response message is also encrypted using national cryptographic algorithms and digitally signed, and its security processing procedure is consistent with that of the successful response message.

[0044] Finally, the error response is returned to the terminal device. The platform returns the encrypted and signed error response message to the terminal device that initiated the decoding request via HTTPS. After receiving the response, the terminal device first performs a security verification, then decrypts the message, and finally displays the corresponding prompts to the user on the device interface based on the error code and description information, guiding the user to perform subsequent operations (such as regenerating the QR code, checking the network, or contacting staff).

[0045] As a further optional embodiment, the step of triggering the corresponding business processing flow based on the queried user permission status specifically includes: If the user is found to have the authority to handle the target business, the back-end business system interface associated with the target business is called to initiate an automatic payment or business confirmation process. If the user is found to lack the required permissions, an insufficient permissions message is generated and returned to the terminal device.

[0046] In this embodiment, the aggregation decoding platform executes strict branching logic based on the user permission status obtained from the permission center to achieve secure and automated business triggering. The specific implementation process is as follows: First branch: The user has the necessary permissions If the query results show that the user has the authority to handle the current target business (for example, the status is "signed, normal" or has sufficient credit limit), the aggregation decoding platform will automatically trigger the subsequent business execution process.

[0047] Constructing Business Requests: Based on the user identity information, business scenario information (such as order number, amount, and business type) obtained through decoding, and necessary context parameters, the platform constructs a request message that conforms to the interface specifications of the target backend business system. For example, for contactless payment services, the request may include fields such as: userId (unique user identifier), orderNo (order number), amount (payment amount), and timestamp.

[0048] Calling backend business system interfaces: The platform initiates calls to the predetermined interface addresses of backend business systems (such as payment systems or core business processing systems) associated with the target business through internal service calls or secure network protocols (such as HTTPS). The platform will perform necessary authentication (such as using API keys or tokens) and data signing on the requests according to the interface requirements.

[0049] Initiating automatic payment or transaction confirmation: After receiving a legitimate request, the back-end business system executes the core business logic. For example, the payment system completes the deduction operation from the user's account and generates a payment record; the business processing system completes the corresponding registration, confirmation, or invoice issuance operations.

[0050] Second branch: The user does not have permission. If the query results show that the user does not have the authority to handle the current target business (for example, the status is "not signed", "frozen", "insufficient quota" or "blacklist"), the aggregation decoding platform will immediately terminate the forward business process and switch to the error handling path.

[0051] Insufficient permissions message: The platform maps and generates a corresponding user-friendly message based on the specific permission status code. This message is encapsulated in a structured response message, which typically includes an error code (such as AUTH_DENIED) and descriptive information (such as "User has not signed up and cannot complete payment" or "Your account status is abnormal and this service cannot be processed at this time").

[0052] The response message is also encrypted and signed before being returned to the requesting terminal device via HTTPS. After decryption and verification, the terminal device clearly displays the message on its user interface (such as a POS screen or self-service terminal display), guiding the user to take appropriate action (such as signing a contract, contacting customer service, or using other payment methods).

[0053] Through the clearly defined logical branches described above, this embodiment ensures that the business is executed automatically and efficiently only within the scope of user authorization, while providing immediate and secure feedback for any unauthorized requests, thereby improving efficiency while building a solid first line of defense for business security.

[0054] As a further optional embodiment, after the step of invoking the backend business system interface associated with the target business, the following is specifically included: Receive the processing results from the back-end business system; The processing result is encapsulated into a standardized response message, which is then encrypted, signed, and returned to the terminal device.

[0055] In this embodiment, the aggregation decoding platform acts as the coordination hub for front-end and back-end services, responsible for receiving, transforming, and securely returning the final business processing results. The specific implementation process is as follows: 1. Receive processing results from the backend business system. The aggregation decoding platform receives raw processing results from the back-end business systems (such as payment systems and core business systems) synchronously or asynchronously. This result is typically a structured response and may contain, but is not limited to, the following key information: Business result codes: These represent the success or failure status of a business operation, such as "SUCCESS", "PAY_FAIL", and "BUSY".

[0056] Business Result Description: A textual description of the result, such as "Payment successful" or "Insufficient account balance".

[0057] Transaction ID: A unique business voucher number generated by the back-end system, used for subsequent reconciliation and tracing.

[0058] Other business data: such as actual payment amount, completion time, and relevant invoice number.

[0059] 2. Encapsulate the processing result into a standardized response message. The aggregation decoding platform converts and encapsulates the received raw business results, which may vary in format, into a standardized response message format (such as JSON) agreed upon between the platform and the terminal device. This standardized message aims to provide a consistent data parsing interface for various terminals, and its basic structure includes common fields and business data fields.

[0060] 3. Encrypt and sign the response message. To ensure the confidentiality, integrity, and authenticity of the results data during the return journey, the platform strengthens the security of the encapsulated standardized response messages: Encryption: The entire response message (or its core business data portion) is encrypted using the national standard SM4 symmetric encryption algorithm to generate ciphertext.

[0061] Signature: A digital signature is generated using the SM2 national cryptographic algorithm and the private key of the aggregation decoding platform to the ciphertext (or its SM3 hash value).

[0062] 4. Return the processed results to the terminal device. Finally, the aggregation decoding platform sends the encrypted data and digital signature together as a response body to the terminal device that initially initiated the decoding request via the highly secure HTTPS protocol. Upon receiving the response, the terminal device sequentially performs signature verification and decryption operations, extracts the standardized business result, and finally clearly displays it on the user interface (such as displaying "Payment Successful" or "Process Complete"), thus completing the entire closed loop from scanning the code to obtaining the final result.

[0063] This mechanism ensures that the results of business execution can be safely, accurately, and efficiently fed back to the user, and is a key element in creating a trustworthy and reliable business experience.

[0064] As a further optional embodiment, the step of querying the user permission status of the corresponding user based on the user identity information through the aggregation decoding platform specifically includes: The user identifier is extracted from the user identity information through the aggregation decoding platform. Based on the user identifier, a query request is sent to the permission center; Receive a response from the permission center and obtain permission status information indicating whether the user is qualified to handle the target business.

[0065] In this embodiment, to achieve accurate and efficient permission verification, the aggregation decoding platform executes the following standardized query process: Step 1: Extract the user identifier from the user's identity information The aggregation decoding platform extracts a unique and stable user identifier from the user identity information obtained after successful decoding in step 130. The user identity information may contain multiple fields; the platform determines the appropriate identifier based on predefined rules or mapping tables. For example: For social security certificates, the social security number or citizen identification number should be extracted first as the user identifier.

[0066] For other electronic credentials (such as electronic health cards and campus cards), their card number, electronic credential serial number, or associated unified user ID may be extracted.

[0067] This step ensures that regardless of the credential type, it can be converted into a standard user identifier that can be recognized by the platform and downstream permission centers.

[0068] Step 2: Send a query request to the permission center The platform uses the user identifier extracted in the previous step to construct a structured permission query request. This request is typically sent to a separate permission center (or risk control center, user status service) via an internal service call or a secure RPC / HTTP interface. The query request must contain at least the following key parameters: userId: The extracted user identifier.

[0069] bizScene: The code for the current business scenario, such as "HOSPITAL_PAYMENT" (medical insurance payment) or "PHARMACY_PURCHASE" (pharmacy purchase), is used to instruct the permission center to make status judgments for specific scenarios.

[0070] requestId: A unique serial number for this query, used for tracking and log chaining.

[0071] The Permission Center is an independent business risk control system that maintains information such as users' real-time status, contractual relationships, blacklists, and credit limits. Upon receiving a query request, the Permission Center performs real-time retrieval and logical judgment in its database or cache.

[0072] Step 3: Receive the response and obtain permission status information The aggregation decoding platform receives the query response from the authorization center. This response is a structured message, the core of which is authorization status information indicating whether the user is qualified to perform the task in the current business scenario. This information typically includes at least: authStatus: Core status codes, such as: "AUTHORIZED" (authorized / signed), "UNAUTHORIZED" (unauthorized / unsigned), "RESTRICTED" (restricted / frozen), "INSUFFICIENT_BALANCE" (insufficient balance).

[0073] statusDesc: Status description, such as "User status is normal, has signed up for seamless payment".

[0074] Possible additional information: such as available credit limit, validity period, risk level warning, etc.

[0075] The platform parses this response and passes core status information such as authStatus to the subsequent business triggering logic (step 150), which serves as the sole basis for deciding whether and how to execute the business.

[0076] Through the above standardized three-step process, this invention achieves close and efficient linkage between decoding and real-time risk control, transforming static identity information into dynamic permission judgments related to business scenarios, and providing key decision inputs for the secure execution of subsequent automated business.

[0077] The electronic voucher QR code aggregation and decoding device provided by the present invention is described below, such as... Figure 2 As shown, the electronic voucher QR code aggregation and decoding device described below and the electronic voucher QR code aggregation and decoding method described above can be referred to in correspondence.

[0078] An electronic voucher QR code aggregation and decoding device, comprising: The data acquisition module 210 is used to scan the QR code of the electronic voucher presented by the user through the terminal device to obtain the QR code data; The data upload module 220 is used to call the standardized aggregation decoding interface through the terminal device and upload the QR code data; The data decoding module 230 is used to receive the QR code data through the aggregated decoding platform and call the authorized decoding service interface to decode the QR code data in order to obtain user identity information; The permission query module 240 is used to query the user permission status of the corresponding user based on the user identity information through the aggregation decoding platform; The business triggering module 250 is used to trigger the corresponding business processing flow based on the queried user permission status.

[0079] Figure 3 An example is a schematic diagram of the physical structure of an electronic device, such as... Figure 3As shown, the electronic device may include: a processor 310, a communications interface 320, a memory 330, and a communication bus 340, wherein the processor 310, the communications interface 320, and the memory 330 communicate with each other via the communication bus 340. The processor 310 can call logical instructions in the memory 330 to execute an electronic voucher QR code aggregation and decoding method, which includes: The system obtains QR code data by scanning the QR code of the electronic voucher presented by the user through a terminal device. The terminal device calls a standardized aggregation decoding interface and uploads the QR code data; The system receives the QR code data through an aggregated decoding platform and calls the authorized decoding service interface to decode the QR code data in order to obtain user identity information. The aggregation decoding platform queries the user's permission status based on the user's identity information. Based on the user's permission status, the corresponding business processing flow is triggered.

[0080] Furthermore, the logical instructions in the aforementioned memory 330 can be implemented as software functional units and, when sold or used as independent products, can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, essentially, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0081] On the other hand, the present invention also provides a computer program product, the computer program product comprising a computer program that can be stored on a non-transitory computer-readable storage medium, wherein when the computer program is executed by a processor, the computer is able to execute the electronic voucher QR code aggregation and decoding method provided by the above methods, the method comprising: The system obtains QR code data by scanning the QR code of the electronic voucher presented by the user through a terminal device. The terminal device calls a standardized aggregation decoding interface and uploads the QR code data; The system receives the QR code data through an aggregated decoding platform and calls the authorized decoding service interface to decode the QR code data in order to obtain user identity information. The aggregation decoding platform queries the user's permission status based on the user's identity information. Based on the user's permission status, the corresponding business processing flow is triggered.

[0082] In another aspect, the present invention also provides a non-transitory computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the electronic voucher QR code aggregation and decoding method provided by the above methods, the method comprising: The system obtains QR code data by scanning the QR code of the electronic voucher presented by the user through a terminal device. The terminal device calls a standardized aggregation decoding interface and uploads the QR code data; The system receives the QR code data through an aggregated decoding platform and calls the authorized decoding service interface to decode the QR code data in order to obtain user identity information. The aggregation decoding platform queries the user's permission status based on the user's identity information. Based on the user's permission status, the corresponding business processing flow is triggered.

[0083] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.

[0084] Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus necessary general-purpose hardware platforms, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solutions, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in the various embodiments or some parts of the embodiments.

[0085] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for aggregating and decoding electronic voucher QR codes, characterized in that, include: The system obtains QR code data by scanning the QR code of the electronic voucher presented by the user through a terminal device. The terminal device calls a standardized aggregation decoding interface and uploads the QR code data; The system receives the QR code data through an aggregated decoding platform and calls the authorized decoding service interface to decode the QR code data in order to obtain user identity information. The aggregation decoding platform queries the user's permission status based on the user's identity information. Based on the user's permission status, the corresponding business processing flow is triggered.

2. The electronic voucher QR code aggregation and decoding method according to claim 1, characterized in that, The step of calling the standardized aggregation decoding interface through the terminal device and uploading the QR code data specifically includes: A request message is constructed through the terminal device, and the request message includes at least the QR code data and the device identification information of the terminal device. The request message is encrypted using the national cryptographic algorithm, and a digital signature is applied to the encrypted request message; The processed request message is sent to the aggregation decoding platform via the HTTPS protocol.

3. The electronic voucher QR code aggregation and decoding method according to claim 1, characterized in that, The step of receiving the QR code data through the aggregation decoding platform and calling the authorized decoding service interface to decode the QR code data specifically includes: Parse the QR code data to obtain its corresponding credential type and issuing organization identifier; Based on the credential type and the issuing organization identifier, the corresponding target authorization decoding service interface address is matched from the pre-configured service routing table; Initiate a decoding request to the target authorized decoding service interface address.

4. The electronic voucher QR code aggregation and decoding method according to claim 1, characterized in that, After the step of receiving the QR code data through the aggregation decoding platform and calling the authorized decoding service interface to decode the QR code data, the method further includes: If decoding fails, a response message containing an error code is generated and returned to the terminal device.

5. The electronic voucher QR code aggregation and decoding method according to claim 1, characterized in that, The step of triggering the corresponding business processing flow based on the queried user permission status specifically includes: If the user is found to have the authority to handle the target business, the back-end business system interface associated with the target business is called to initiate an automatic payment or business confirmation process. If the user is found to lack the required permissions, an insufficient permissions message is generated and returned to the terminal device.

6. The electronic voucher QR code aggregation and decoding method according to claim 1, characterized in that, Following the step of invoking the backend business system interface associated with the target business, the specific steps include: Receive the processing results from the back-end business system; The processing result is encapsulated into a standardized response message, which is then encrypted, signed, and returned to the terminal device.

7. The electronic voucher QR code aggregation and decoding method according to claim 1, characterized in that, The step of querying the user's permission status based on the user's identity information through the aggregation decoding platform specifically includes: The user identifier is extracted from the user identity information through the aggregation decoding platform. Based on the user identifier, a query request is sent to the permission center; Receive a response from the permission center and obtain permission status information indicating whether the user is qualified to handle the target business.

8. A method for aggregating and decoding electronic voucher QR codes, characterized in that, include: The data acquisition module is used to scan the QR code of the electronic voucher presented by the user through the terminal device to obtain the QR code data; The data upload module is used to call the standardized aggregation decoding interface through the terminal device and upload the QR code data; The data decoding module is used to receive the QR code data through the aggregated decoding platform and call the authorized decoding service interface to decode the QR code data in order to obtain user identity information; The permission query module is used to query the user permission status of the corresponding user based on the user identity information through the aggregation decoding platform; The business triggering module is used to trigger the corresponding business processing flow based on the queried user permission status.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the electronic voucher QR code aggregation and decoding method as described in any one of claims 1 to 7.

10. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the electronic voucher QR code aggregation and decoding method as described in any one of claims 1 to 7.

Images