A multi-layered encrypted lottery self-service fast redemption system

Abstract

This invention discloses a multi-encrypted self-service rapid lottery redemption system, specifically relating to the field of data transmission technology. It involves first encrypting the lottery redemption voucher data scanned by the user using a hash algorithm based on a random salt value; establishing an authorized connection with the lottery redemption server using an asymmetric key exchange protocol and obtaining a connection authorization token; verifying the redemption voucher data layer by layer based on a hierarchical permission key management mechanism to determine redemption eligibility; then, performing secondary encryption on the redemption amount and user account information to generate ciphertext for the redemption fund transfer; further, using multi-path encryption channels for security cross-comparison verification; and finally, completing the fund transfer confirmation through multi-level dynamic password verification and sending a successful redemption status feedback to the self-service lottery redemption device. This invention effectively improves the security of the lottery redemption process and the efficiency of fund settlement, while protecting user data privacy and transaction security.

Description

Technical Field

[0001] This invention relates to the field of data transmission technology, and more specifically, to a multi-encrypted self-service fast lottery redemption system. Background Technology

[0002] Existing self-service lottery prize redemption methods typically use simple QR code scanning or barcode reading to identify prize redemption information and transmit the information and transfer funds via the internet. However, these methods lack effective security mechanisms, posing risks of data interception and tampering, and failing to effectively guarantee information security and fund transfer security during the prize redemption process.

[0003] To address the aforementioned problems, a technical solution is provided. Summary of the Invention

[0004] In order to overcome the above-mentioned defects of the prior art, embodiments of the present invention provide a multi-encrypted lottery self-service fast redemption method and system to solve the problems mentioned in the background art.

[0005] To achieve the above objectives, the present invention provides the following technical solution: A multi-layered encrypted lottery self-service fast redemption system includes: The voucher encryption module acquires the lottery redemption voucher data scanned by the user and generates an encrypted digest of the lottery redemption voucher data using a hash algorithm based on random salt values. Authorization Request Module: Based on a single encrypted digest, it requests an authorized connection from the lottery prize redemption server via an asymmetric key exchange protocol, generating a connection authorization token containing the user's identity identifier and authorization timestamp; The voucher verification module uses a hierarchical permission key management mechanism to verify the validity of the prize redemption voucher data layer by layer based on the connection authorization token, and determines whether the prize redemption voucher data meets the prize redemption conditions. Funds encryption module: If the lottery prize redemption voucher data meets the prize redemption conditions, the prize amount and user account information are encrypted twice to generate a ciphertext for prize fund transfer; Secure transmission module: Based on the encrypted transfer of prize funds, it transmits the data to the lottery prize redemption server and fund settlement port through a multi-path encrypted channel, and performs cross-comparison of fund transfer security. Transfer Confirmation Module: Based on the cross-comparison results of fund transfer security, the fund transfer is confirmed after multi-level dynamic password verification, and the successful prize redemption status is fed back to the lottery self-service prize redemption device.

[0006] In a preferred embodiment, the lottery prize redemption voucher data scanned by the user is obtained, and an encrypted digest of the lottery prize redemption voucher data is generated using a hash algorithm based on random salt values, specifically: Collect lottery prize redemption voucher data scanned by users through self-service lottery prize redemption equipment, and use a random number generator to generate random salt values; The random salt value and the lottery prize redemption voucher data are input into a hash function, and a cryptographic digest is generated by calculating the hash function.

[0007] In a preferred embodiment, based on a cryptographic digest, an authorized connection is requested from the lottery prize redemption server via an asymmetric key exchange protocol, generating a connection authorization token containing the user's identity identifier and authorization timestamp, specifically as follows: The authorization request data is constructed based on a single encrypted digest and then sent to the lottery prize redemption server via an asymmetric key exchange protocol. The lottery prize redemption server generates corresponding authorization response data based on a single encrypted digest. The authorization response data is parsed to extract the user identity identifier and authorization timestamp, and the user identity identifier and authorization timestamp are combined to generate a connection authorization token.

[0008] In a preferred embodiment, based on the connection authorization token, a hierarchical permission key management mechanism is used to verify the validity of the prize redemption voucher data layer by layer to determine whether the prize redemption voucher data meets the prize redemption conditions. Specifically: Based on the connection authorization token call hierarchy permission key management mechanism, obtain the permission hierarchy identifier and permission hierarchy key set corresponding to the connection authorization token; Based on the permission level identifier, select the permission level key from the permission level key set, verify the lottery prize redemption voucher data and the connection authorization token, and generate verification result data; The verification results are used to determine whether the lottery prize redemption voucher data meets the prize redemption conditions.

[0009] In a preferred embodiment, if the lottery prize redemption voucher data meets the prize redemption conditions, the prize amount and user account information are encrypted a second time to generate a ciphertext for prize fund transfer, specifically: When the lottery prize redemption voucher data meets the prize redemption conditions, retrieve the prize amount and user account information associated with the lottery prize redemption voucher data; Random initial vectors are generated for the prize amount and user account information respectively. Encrypted input data for the prize amount is constructed based on the random initial vectors and the prize amount. Encrypted input data for the user account information is constructed based on the random initial vectors and user account information. The encrypted input data for the prize amount and the encrypted input data for the user account information are encrypted separately, and then combined to generate the encrypted text for the transfer of prize funds.

[0010] In a preferred embodiment, the encrypted transfer of prize funds is transmitted to the lottery prize redemption server and the fund settlement port through a multi-path encrypted channel, and a cross-check of the security of the fund transfer is performed, specifically as follows: Based on the encrypted transfer of prize funds, a transmission data unit is constructed, and the transmission data unit is split and encrypted according to the preset multi-path encryption channel rules; The encrypted and encapsulated transmission data units are sent to the lottery prize redemption server and the fund settlement port respectively; The encrypted verification results returned by the lottery prize redemption server and the fund settlement port are compared for consistency to generate secure cross-comparison data for fund transfer.

[0011] In a preferred embodiment, based on the cross-checking results of fund transfer security, the fund transfer is confirmed after multi-level dynamic password verification, and the successful prize redemption status is fed back to the lottery self-service prize redemption device, specifically as follows: Generate a fund transfer confirmation request based on the cross-comparison data of fund transfer security; Based on the fund transfer confirmation request, multi-level dynamic password data is generated using pre-configured multi-level dynamic password generation rules; Based on multi-level dynamic password data, the fund transfer confirmation request is authenticated and authorized level by level to complete the fund transfer confirmation operation, and the successful prize redemption status information is fed back to the lottery self-service prize redemption device.

[0012] The technical effects and advantages of the multi-encrypted lottery self-service fast redemption system of the present invention are as follows: By introducing random salt hashing to generate an encrypted digest of lottery prize redemption voucher data, an irreversible digest and consistency verification basis is achieved before the data enters the transmission and processing links. An authorized connection is established using an asymmetric key exchange protocol, and a connection authorization token containing the user's identity and authorization timestamp is generated, enabling the binding of prize redemption requests with user identities and traceable control over authorization validity. Based on the connection authorization token, a hierarchical permission key management mechanism is introduced to verify the prize redemption voucher data layer by layer, achieving separation of verification links and key isolation under different permission levels, reducing the cascading risk caused by single-point key failure. The prize amount and user account information are encrypted twice to generate ciphertext for prize fund transfer, achieving domain-specific protection of fund elements and account elements and ciphertext transmission. A multi-path encryption channel is used, and cross-comparison of fund transfer security is performed to achieve consistency verification and anomaly detection of the same fund transfer ciphertext in different processing links. Multi-level dynamic password verification is introduced to complete fund transfer confirmation and feedback of prize redemption success status, achieving hierarchical authentication and closed-loop feedback for transfer confirmation, thereby improving the overall security, controllability, and anti-tampering capability of the self-service redemption process. Attached Figure Description

[0013] Figure 1 This is a schematic diagram of the structure of a multi-encrypted lottery self-service fast redemption system according to the present invention. Detailed Implementation

[0014] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of the present invention. Example 1

[0015] Figure 1 The present invention discloses a multi-encrypted self-service fast lottery redemption system, comprising: The voucher encryption module acquires the lottery redemption voucher data scanned by the user and generates an encrypted digest of the lottery redemption voucher data using a hash algorithm based on random salt values. Authorization Request Module: Based on a single encrypted digest, it requests an authorized connection from the lottery prize redemption server via an asymmetric key exchange protocol, generating a connection authorization token containing the user's identity identifier and authorization timestamp; The voucher verification module uses a hierarchical permission key management mechanism to verify the validity of the prize redemption voucher data layer by layer based on the connection authorization token, and determines whether the prize redemption voucher data meets the prize redemption conditions. Funds encryption module: If the lottery prize redemption voucher data meets the prize redemption conditions, the prize amount and user account information are encrypted twice to generate a ciphertext for prize fund transfer; Secure transmission module: Based on the encrypted transfer of prize funds, it transmits the data to the lottery prize redemption server and fund settlement port through a multi-path encrypted channel, and performs cross-comparison of fund transfer security. Transfer Confirmation Module: Based on the cross-comparison results of fund transfer security, the fund transfer is confirmed after multi-level dynamic password verification, and the successful prize redemption status is fed back to the lottery self-service prize redemption device.

[0016] The system retrieves lottery prize redemption voucher data scanned by the user and generates an encrypted digest of the voucher data using a hash algorithm based on random salt values. The specific implementation is as follows: Collect lottery prize redemption voucher data scanned by users through self-service lottery prize redemption equipment, and use a random number generator to generate random salt values; The lottery self-service prize redemption device collects lottery prize redemption voucher data scanned by users through the device. This data includes, but is not limited to, the number information, lottery issuance date, lottery issue number, lottery category code, and lottery device code contained on the surface or electronic ticket of the user's ticket. The self-service lottery prize redemption device scans and collects this data using an image acquisition sensor or QR code scanning device installed within the device. This image acquisition sensor or QR code scanning device is a digital imaging device with a resolution of at least 1280×720 pixels. The initial state of the lottery prize redemption voucher data collected by the self-service lottery prize redemption device is unprocessed raw image data or string data format.

[0017] After collecting lottery prize redemption voucher data, the self-service lottery prize redemption device calls a pre-deployed random number generator to generate a random salt value for the voucher data. The random salt value is generated using either a true random number principle or a pseudo-random number generation algorithm. True random number principles include, but are not limited to, using a hardware random number generator to collect and process environmental physical noise data. Pseudo-random number generation algorithms include, but are not limited to, linear congruence methods, Mason swivel algorithms, or cryptographically secure pseudo-random number generation algorithms. The hardware random number generator uses a thermal noise sensor, a resistive noise sampling circuit, or a quantum random pulse generator. For example, the self-service lottery prize redemption device uses the Mason swivel algorithm to generate the random salt value, setting its length to 128 bits, the length depending on encryption requirements and security level. After generating the random salt value, the random number generator provides it to the self-service lottery prize redemption device in a standard data string format.

[0018] The random salt value and the lottery prize redemption voucher data are input into a hash function, and a cryptographic digest is generated by the hash function. The self-service lottery prize redemption device first concatenates the random salt value and the lottery prize redemption voucher data into a unified data string according to a preset data concatenation rule. The preset data concatenation rule allows for either a random salt value first, followed by the lottery prize redemption voucher data, or vice versa. Taking the random salt value-first concatenation method as an example, the selection method is predefined by the security policy and stored in the self-service lottery prize redemption device. The data concatenation process follows the original data string format of the lottery prize redemption voucher data and the random salt value, without any compression or data trimming.

[0019] The hash functions used include, but are not limited to, SHA-256, SHA-384, and SHA-512 algorithms. For example, if SHA-256 is chosen as the hash function, the input data string is padded to a length that is a multiple of 512 bits. The padding rule is to append a "1" bit to the end of the data string, followed by several "0" bits, until the data length reaches a position where the difference between 448 bits and 512 bits is an integer multiple. Then, 64 bits representing the original data string length are appended to the end of the data string. The padded data string is divided into multiple 512-bit data blocks. Each data block undergoes 64 rounds of standard computation loops. In each round of computation loops, the hash value status register is updated using the logical and bitwise operation rules defined by the hash algorithm. After all computation loops are completed, the hash function outputs a fixed-length 256-bit encrypted digest.

[0020] After obtaining a cryptographic digest, the lottery self-service prize redemption device converts the cryptographic digest into a storable and transmittable hexadecimal data string format. The conversion method is to output the cryptographic digest as 256 bits, and then perform binary to hexadecimal conversion in groups of 4 bits, thereby generating a cryptographic digest string containing 64 hexadecimal characters.

[0021] Based on a cryptographic digest, an authorized connection is requested from the lottery prize redemption server via an asymmetric key exchange protocol, generating a connection authorization token containing the user's identity identifier and authorization timestamp. The specific implementation is as follows: The authorization request data is constructed based on a single encrypted digest and then sent to the lottery prize redemption server via an asymmetric key exchange protocol. Encapsulate the encrypted digest string into data, for example, using JSON or XML format. Taking JSON format as an example, define the encrypted digest string as a data field within the JSON format, and simultaneously add an authorization request data identifier field within the JSON format; for example, the authorization request data identifier field is defined as the fixed string "AuthRequest", and the encrypted digest string data field is named "DigestValue", thus forming the authorization request data.

[0022] The authorization request data is sent to the lottery prize redemption server using an asymmetric key exchange protocol. Implementation methods of the asymmetric key exchange protocol include, but are not limited to, key exchange mechanisms based on RSA or elliptic curve algorithms. Taking an RSA-based asymmetric key exchange protocol as an example, the lottery self-service prize redemption device pre-stores the RSA algorithm public key corresponding to the lottery prize redemption server, while the lottery prize redemption server pre-stores the RSA algorithm public key and private key corresponding to the lottery self-service prize redemption device. During transmission, the lottery self-service prize redemption device encrypts the authorization request data using the RSA algorithm public key corresponding to the lottery prize redemption server. The encryption method is as follows: the lottery self-service prize redemption device converts the JSON format authorization request data into a binary data stream format, and uses the RSA algorithm's public key exponent and modulus parameter to perform RSA encryption operations on the binary data stream, generating encrypted authorization request data ciphertext. The length of the RSA algorithm's public key exponent and modulus parameter is determined according to security requirements; for example, it can be set to a public key exponent of 65537 and a modulus parameter length of 2048 bits to ensure the security of the data transmission process. After encryption, the lottery self-service prize redemption device uses a pre-established secure transmission channel, such as Secure Sockets Protocol (SSL / TLS) or Secure HTTP Protocol (HTTPS), to send the encrypted authorization request data to the lottery prize redemption server.

[0023] The lottery prize redemption server generates corresponding authorization response data based on a single encrypted digest. After receiving the encrypted authorization request data from the self-service lottery prize redemption device, the lottery prize redemption server decrypts the ciphertext using its stored RSA algorithm private key. The decryption method involves the lottery prize redemption server performing an RSA decryption operation on the received ciphertext using the exponent and modulus parameters of the RSA algorithm private key, restoring it to JSON format authorization request data in binary data stream format. The lottery prize redemption server then parses the decrypted authorization request data, extracting the AuthRequest field and the DigestValue field to confirm the data's purpose. After confirming the DigestValue string, the lottery prize redemption server generates the corresponding authorization response data based on the DigestValue string.

[0024] The authorization response data generation process is as follows: The lottery prize redemption server uses the received encrypted digest string as input parameters, combines it with the current server timestamp and a predefined user identity database to determine the user identity and authorization timestamp. The user identity database is a pre-established database on the lottery prize redemption server used to store user identity information corresponding to the encrypted digest string, including but not limited to the user's unique identifier, username, or user account code. The lottery prize redemption server queries the user identity database for the user identity corresponding to the encrypted digest string to obtain the user identity data; simultaneously, the lottery prize redemption server calls its internal time calibration mechanism to generate an authorization timestamp. The authorization timestamp is in Coordinated Universal Time (UTC) format, recording the generation time in milliseconds. The lottery prize redemption server combines the user identity data and the authorization timestamp, constructing the authorization response data according to the same structured data format as the authorization request data. For example, the lottery prize redemption server uses JSON format to construct the authorization response data, setting the authorization response data identifier field to the fixed string "AuthResponse", the user identity data field to "UserID", and the authorization timestamp field to "AuthTimestamp", thus forming the authorization response data.

[0025] The authorization response data is parsed to extract the user identity identifier and authorization timestamp, and the user identity identifier and authorization timestamp are combined to generate a connection authorization token; After constructing the authorization response data, the lottery prize redemption server uses the same asymmetric key exchange protocol as the one used to receive the authorization request data to encrypt and send the response data. The lottery prize redemption server uses the RSA algorithm public key corresponding to the self-service lottery prize redemption device to encrypt the authorization response data using RSA, generating encrypted ciphertext. This encrypted ciphertext is then sent back to the self-service lottery prize redemption device via a secure transmission channel, such as SSL / TLS or HTTPS.

[0026] After receiving the encrypted authorization response data from the lottery prize redemption server, the self-service lottery prize redemption device decrypts the encrypted data using its stored RSA algorithm private key, obtaining JSON-formatted authorization response data. The device then parses the authorization response data, extracting the user identification data and authorization timestamp, and combines them according to a preset data connection rule to form a connection authorization token. The data connection rule for the authorization token is as follows: the user identification data is placed first, followed by the authorization timestamp, and a predefined specific separator is used between them; for example, the separator is set to the underscore symbol "_", resulting in a connection authorization token string in the form "user identification data_authorization timestamp".

[0027] Based on the connection authorization token, a hierarchical access key management mechanism is used to verify the validity of the prize redemption voucher data layer by layer to determine whether the prize redemption voucher data meets the prize redemption conditions. The specific implementation is as follows: Based on the connection authorization token call hierarchy permission key management mechanism, obtain the permission hierarchy identifier and permission hierarchy key set corresponding to the connection authorization token; The lottery self-service prize redemption device has a pre-stored hierarchical permission key management mechanism, including definition rules for different permission levels and corresponding key allocation rules. The permission level definition rules are based on user identity data and the authorization timestamp contained in the connection authorization token. Predefined matching rules determine the permission level identifier corresponding to the connection authorization token. These matching rules include, but are not limited to, combinations of user identity type and authorization validity duration. For example, the user identity type corresponding to the user identity data can include, but is not limited to, ordinary users, authenticated users, and administrator users. The authorization validity duration is specifically calculated as the difference between the authorization timestamp in the connection authorization token and the current time, with the difference calculated in seconds. The permission level identifier corresponding to the connection authorization token is determined according to the matching rules. For example, if the user identity type is an authenticated user and the authorization validity duration is less than or equal to 300 seconds, then the permission level identifier is defined as intermediate permission level.

[0028] Based on the permission level identifier, select the permission level key from the permission level key set, verify the lottery prize redemption voucher data and the connection authorization token, and generate verification result data; The permission level key set is a collection of multiple permission level keys pre-stored by the lottery self-service prize redemption device. Each permission level key is a fixed-length and unique encrypted key string, for example, the length can be 256 bits or 512 bits, the length being determined according to the security level and performance requirements. The lottery self-service prize redemption device searches the permission level key set for a permission level key that matches the intermediate permission level identifier. For example, if the matched intermediate permission level key is a symmetric encryption key with a length of 256 bits, it is denoted as the intermediate permission level key string.

[0029] After obtaining the intermediate-level access key string, the lottery self-service prize redemption device verifies the lottery prize redemption voucher data and the connection authorization token based on the intermediate-level access key string. The verification is implemented as follows: the lottery prize redemption voucher data and the connection authorization token are combined. For example, when using JSON format, the lottery prize redemption voucher data is defined as the data field TicketData, and the connection authorization token is defined as the data field AuthToken. These are combined into a unified JSON data structure string containing the above two fields. The intermediate-level access key string is used as the encryption key to perform verification on the combined unified JSON data structure string.

[0030] The verification process includes encrypting the unified JSON data structure string. A symmetric encryption algorithm is used, including but not limited to AES or SM4. Taking AES as an example, the intermediate-level security key string is used as the AES key input, employing AES-256 mode (256 bits key length), CBC mode, and PKCS7 padding. The initial vector for CBC mode is a randomly generated 128-bit string, generated by the internal random number generator of the lottery self-service redemption device. After the AES encryption operation, the lottery self-service redemption device obtains the encrypted output of the unified JSON data structure string. This encrypted output is then converted to Base64 encoding to form the verification result data.

[0031] Based on the verification results, determine whether the lottery prize redemption voucher data meets the prize redemption conditions; The lottery self-service prize redemption device pre-stores prize redemption condition verification rules. These rules involve performing reverse decryption on the verification result data to check its validity and matching, thus determining the authenticity and validity of the lottery prize redemption voucher data. The reverse decryption method involves the self-service device using the same intermediate-level permission key string, the same AES-256 mode (CBC mode), and the same initialization vector as in the encryption process to decrypt the verification result data. The decryption operation outputs a unified JSON data structure string. The self-service device then parses the decrypted unified JSON data structure string, extracts the lottery prize redemption voucher data and connection authorization token, and performs data validity checks.

[0032] The methods for verifying the validity of lottery prize redemption voucher data include, but are not limited to, data format checks, data field integrity verification, and data authenticity matching checks. For example, checking the data format of the lottery prize redemption voucher data involves confirming that the data contains number information, lottery issuance date, lottery issue number, lottery category code, and lottery device code fields; the absence of any of these fields indicates that the prize redemption conditions are not met. The data is then matched against a locally stored lottery issuance information database, which is a collection of associated data for issued lottery issue numbers, issuance dates, and lottery category codes. If the data on the lottery prize redemption voucher matches the data in the lottery issuance information database, the data authenticity verification passes; otherwise, the prize redemption conditions are not met.

[0033] The connection authorization token validity verification method includes verifying the validity of the authorization timestamp and the user identity data. The authorization timestamp is extracted from the connection authorization token, and the difference between it and the current time is calculated. If the difference is greater than a preset valid duration (e.g., 300 seconds), the connection authorization token is deemed invalid and does not meet the redemption conditions. The user identity data is then matched against a pre-established set of user identity data in a local user database. If no match is found in the local user database, the user identity data is deemed invalid, the connection authorization token validity verification fails, and the redemption conditions are not met.

[0034] Based on the combined validity checks of the lottery prize redemption voucher data and the connection authorization token, if both checks pass, the lottery prize redemption voucher data is deemed to meet the prize redemption requirements; otherwise, it is deemed not to meet the prize redemption requirements.

[0035] If the lottery prize redemption voucher data meets the prize redemption conditions, the prize amount and user account information are encrypted twice to generate a ciphertext for prize fund transfer. The specific implementation is as follows: When the lottery prize redemption voucher data meets the prize redemption conditions, retrieve the prize amount and user account information associated with the lottery prize redemption voucher data; The system parses the lottery category code, lottery draw number, and lottery numbers from the lottery prize redemption voucher data, and retrieves the corresponding prize amount from the lottery winning information database based on these information. The lottery winning information database pre-stores associated data for already drawn lottery numbers, corresponding prize amounts, lottery category codes, and lottery draw numbers. The retrieval method involves multi-dimensional precise matching based on the number information, lottery draw number, and lottery category code obtained from the parsed lottery prize redemption voucher data to obtain a uniquely determined prize amount. For example, when the parsed lottery prize redemption voucher data contains the lottery category code SSQ, the lottery draw number 2023128, and the lottery numbers 01,05,12,19,22,30|08, the self-service lottery prize redemption device queries the lottery winning information database. If a match is found, the corresponding prize amount is obtained.

[0036] Simultaneously, user identification data is extracted based on the connection authorization token, and user account information is queried in the user account database based on the user identification data. The user account database stores the mapping relationship between the user identification data and user account information of all registered users. User account information includes, but is not limited to, user name, bank account number, e-wallet account, and other account identification code information bound to the user. User identification data is used as an index for matching to obtain user account information; for example, when the user identification data is U1234567890, the corresponding user account information is obtained in the user account database by indexing the user identification data.

[0037] Random initial vectors are generated for the prize amount and user account information respectively. Encrypted input data for the prize amount is constructed based on the random initial vectors and the prize amount. Encrypted input data for the user account information is constructed based on the random initial vectors and user account information. The random number generator is invoked to generate two independent random strings of the same length. The length of each random string is determined based on the initial vector requirements of the symmetric encryption algorithm used. For example, when a lottery self-service redemption device uses the AES-256 symmetric encryption algorithm, the initial vector length should be set to 128 bits. Therefore, the random number generator is invoked to generate random initial vectors of 128 bits each. The methods used by the random number generator to generate random initial vectors include, but are not limited to, those based on true random number principles or pseudo-random number algorithms. For example, a hardware-based random number generator can be used to collect thermal noise or quantum pulse signals to generate random initial vectors, ensuring randomness requirements.

[0038] The generated random initialization vectors are combined with the prize amount and user account information to form encrypted input data for the prize amount and encrypted input data for the user account information. The combination method is as follows: using a standard structured data format, such as JSON, the prize amount and random initialization vector are combined to form encrypted input data for the prize amount, and the user account information and random initialization vector are combined to form encrypted input data for the user account information. For example, the encrypted input data for the prize amount is a JSON data string, where the random initialization vector is defined as the data field IVAmount, and the prize amount is defined as the data field PrizeAmount; the encrypted input data for the user account information is another JSON data string, where the random initialization vector is defined as the data field IVAccount, and the user account information is defined as the data field UserAccountInfo.

[0039] The encrypted input data for the prize amount and the encrypted input data for the user account information are encrypted separately, and then combined to generate a ciphertext for the transfer of prize funds. The encryption method employs symmetric encryption algorithms, including but not limited to AES-256 or SM4. Taking AES-256 as an example, a pre-stored symmetric encryption key specifically for lottery prize redemption is used as the key input parameter. This symmetric encryption key is 256 bits long and is generated using a secure random number generator. When executing the AES-256 algorithm, CBC mode is used in conjunction with a random initialization vector. The prize amount is encrypted using the random initialization vector IVAmount, and the user account information is encrypted using the random initialization vector IVAccount. PKCS7 padding is used to meet the AES-256 input data length requirement.

[0040] After encryption, the encrypted input data for the prize amount and the encrypted input data for the user account information are obtained separately. Both encrypted data are encoded using Base64 encoding to convert them into a standard string format suitable for transmission. The Base64-encoded encrypted input data for the prize amount and the encrypted input data for the user account information are then combined to form the encrypted prize transfer data. The combination method is as follows: a unified JSON structure is defined, where the encrypted prize amount is defined as the data field `EncryptedPrizeAmount`, and the encrypted user account information is defined as the data field `EncryptedAccountInfo`. The combined JSON data structure forms the encrypted prize transfer string.

[0041] Based on the encrypted transfer of prize funds, the funds are transmitted to the lottery prize redemption server and the fund settlement port through a multi-path encrypted channel, where a cross-check of the security of the fund transfer is performed. The specific implementation is as follows: Based on the encrypted transfer of prize funds, a transmission data unit is constructed, and the transmission data unit is split and encrypted according to the preset multi-path encryption channel rules; The encrypted string of prize money transfer is encapsulated into data fields such as EncryptedPrizeAmount and EncryptedAccountInfo. The EncryptedPrizeAmount data field contains the Base64 encoded string of the encrypted input data of the prize money, and the EncryptedAccountInfo data field contains the Base64 encoded string of the encrypted input data of the user account information. This forms a unified data unit, namely the transmission data unit.

[0042] The method for determining the rules for multi-path encrypted channels is as follows: A transmission security policy database is predefined, which defines rule combinations for multiple transmission paths. Each transmission path corresponds to a specific transmission security level and is assigned a unique path encryption key. For example, two different transmission paths can be defined, corresponding to the lottery prize redemption server path and the funds settlement port path, respectively. The security level of the lottery prize redemption server path is higher than that of the funds settlement port path. Each path has a separate path encryption key, which is a 256-bit symmetric encryption key. The path encryption key is generated using the same random number generation method as the symmetric encryption key used for lottery prize redemption. The lottery self-service prize redemption device retrieves the path encryption key and corresponding transmission security level parameters for each transmission path from the security policy database.

[0043] Based on the multi-path encryption channel rules, the transmission data unit is split into two independent data unit copies. Each data unit copy is used for its corresponding transmission path, forming a lottery prize redemption server transmission data unit copy and a fund settlement port transmission data unit copy, respectively. For example, the lottery prize redemption server transmission data unit copy and the fund settlement port transmission data unit copy initially have the same content, both including the encrypted input data of the prize amount and the encrypted input data of the user account information within the encrypted string of prize fund transfer.

[0044] After path splitting, each data unit copy undergoes encryption and encapsulation. The encryption and encapsulation method involves calling the corresponding path encryption key to perform secondary encryption on each data unit copy. The encryption method uses the AES-256 symmetric encryption algorithm, the CBC mode is selected, and the data padding method is PKCS7 padding. Each data unit copy's encryption process uses a randomly generated initial vector, generated using the same method as random initial vector generation: a 128-bit random string is generated using a random number generator, for example, a hardware random number generator based on thermal noise sampling. After AES-256 encryption, the encrypted data for the lottery prize redemption server path and the encrypted data for the funds settlement port path are obtained. These two encrypted data are then Base64 encoded to standardize the string format for easy transmission, forming the final encrypted and encapsulated data unit.

[0045] The encrypted and encapsulated transmission data units are sent to the lottery prize redemption server and the fund settlement port respectively; Two independent secure transmission channels are established: one connecting the lottery prize redemption server and the other connecting the funds settlement port. Each channel uses the SSL / TLS protocol to ensure data security during transmission. The encrypted data from the lottery prize redemption server path is sent to the lottery prize redemption server through the lottery prize redemption server secure channel, while the encrypted data from the funds settlement port path is sent to the funds settlement port through the funds settlement port secure channel. After receiving the transmitted data units, the lottery prize redemption server and the funds settlement port perform encrypted verification and data validity verification operations respectively, and return the verification results to the self-service lottery prize redemption device.

[0046] The encrypted verification results returned by the lottery prize redemption server and the fund settlement port are compared for consistency to generate secure cross-comparison data for fund transfer. The method for performing encrypted verification between the lottery prize redemption server and the fund settlement port is as follows: The lottery prize redemption server and the fund settlement port each store their corresponding path encryption keys. After receiving the corresponding path encrypted data, they use the stored corresponding path encryption keys to perform a reverse decryption operation using the AES-256 algorithm. That is, the decryption mode is AES-256 CBC mode. The initial vector is attached to the path encrypted data by the lottery self-service prize redemption device during data transmission and transmitted, and is standardized using Base64 encoding. After the decryption operation, both the lottery prize redemption server and the fund settlement port obtain a copy of the corresponding transmitted data unit and verify the integrity, format correctness, and consistency of the encrypted string for prize redemption fund transfer. If the data is complete and the format is correct, positive encrypted verification result data is generated; otherwise, negative encrypted verification result data is generated.

[0047] After receiving the encrypted verification results from the lottery prize redemption server and the funds settlement port, the lottery self-service prize redemption device performs a consistency comparison operation on the two encrypted verification results: it parses the encrypted verification results returned by the lottery prize redemption server and the funds settlement port respectively, extracting the verification identifier and verification status information from each encrypted verification result; the verification identifier includes, but is not limited to, unique data such as a unique data identifier or UUID, and the verification status information includes, but is not limited to, data integrity status flags, data format correctness flags, and data validity flags; based on the extracted verification identifier and verification status information, it compares each item. If the verification status information returned by the lottery prize redemption server and the funds settlement port is completely consistent and both are positive, the lottery self-service prize redemption device confirms the security of the prize redemption fund transfer data; if any item in the verification status information returned by the lottery prize redemption server and the funds settlement port is different or both are negative, the lottery self-service prize redemption device determines that the data has a security risk or a transmission error.

[0048] Based on the results of the consistency comparison operation, secure cross-comparison data for fund transfer is generated. The data field ComparisonStatus is defined to represent the verification result status, with a value of Safe or Unsafe. The data fields ServerCheck and SettlementCheck are defined to represent the verification status information of the lottery prize redemption server and the fund settlement port, respectively.

[0049] Based on the cross-checking results of fund transfer security, the fund transfer is confirmed after multi-level dynamic password verification, and the successful prize redemption status is sent to the lottery self-service prize redemption device. The specific implementation is as follows: Generate a fund transfer confirmation request based on the cross-comparison data of fund transfer security; The data is parsed to verify the security cross-comparison of fund transfers. The data field ComparisonStatus is used to indicate the status of the verification result. The value of ComparisonStatus is either Safe or Unsafe. The lottery self-service prize redemption device judges the value of ComparisonStatus. When the value of ComparisonStatus is Safe, it is confirmed that the security cross-comparison of fund transfers has been successfully verified. At this point, the lottery self-service prize redemption device constructs a fund transfer confirmation request based on the ComparisonStatus value and the cross-checked data containing the lottery prize redemption server verification status information ServerCheck and the fund settlement port verification status information SettlementCheck. The data construction method for the fund transfer confirmation request is as follows: it is constructed according to preset structured data rules, using JSON format, including the following data fields: the ComparisonStatus data field value is the string "Safe" when the security verification is successful; the ServerCheck data field value is the verification status information returned by the lottery prize redemption server; and the SettlementCheck data field value is the verification status information returned by the fund settlement port. A unique request identifier RequestID is added to the fund transfer confirmation request. The unique request identifier RequestID is generated by calling a random number generator to generate a unique identifier string, for example, converting a 128-bit random string into a 32-bit hexadecimal string, thereby obtaining the fund transfer confirmation request.

[0050] Based on the fund transfer confirmation request, multi-level dynamic password data is generated using pre-configured multi-level dynamic password generation rules; The system predefines multi-level dynamic password generation rules, including dynamic password level settings, dynamic password validity duration settings, dynamic password generation algorithm configuration parameters, and dynamic password generation trigger conditions. The dynamic password level can be set to two or more levels, for example, two levels where the first-level dynamic password is used for basic identity authentication, and the second-level dynamic password is used for high-privilege fund transfer confirmation operations. The dynamic password validity duration is defined in seconds; for example, the first-level dynamic password validity duration is set to 60 seconds, and the second-level dynamic password validity duration is set to 30 seconds. The dynamic password generation algorithm configuration parameters are predefined dynamic password key parameters. The dynamic password key parameter length is 256 bits, and the key is generated using a secure pseudo-random number generator algorithm, such as a cryptographically secure pseudo-random number generation algorithm like SHA-256, ensuring the key is unique and secure. The trigger condition is set to automatically trigger the dynamic password generation process after a fund transfer confirmation request is generated.

[0051] The multi-level dynamic password data generation process is as follows: A first-level dynamic password is generated based on a fund transfer confirmation request. The generation method uses a time-synchronized hash-based dynamic password generation algorithm. The lottery self-service redemption device obtains the current Coordinated Time (UTC) and, based on the dynamic password validity period, divides the current time by the validity period and takes the integer part as the time step value. For example, when the first-level dynamic password validity period is 60 seconds, the current UTC timestamp is divided by 60 to obtain the integer time step value. The first-level dynamic password key is concatenated with the integer time step value and used as input data to the hash algorithm. The hash algorithm selected is either SHA-256 or SHA-512. For example, the SHA-256 algorithm is used to perform hash calculation, and the hash value is truncated. The first 6 digits of the hash value are taken as the first-level dynamic password, resulting in a 6-digit first-level dynamic password data.

[0052] After the primary dynamic password data is generated, secondary dynamic password data is generated based on the fund transfer confirmation request and the primary dynamic password data. The secondary dynamic password generation algorithm is an event-based dynamic password generation algorithm. The fund transfer confirmation request is uniquely identified, and the unique identifier RequestID within the fund transfer confirmation request is extracted as the event unique identifier data. The secondary dynamic password key is called and concatenated with the event unique identifier RequestID as input data to the hash algorithm. Taking the SHA-256 algorithm as an example, the hash value is calculated. After the hash calculation is completed, the hash value is extracted into a decimal number, and the last 6 digits are truncated to form a 6-digit secondary dynamic password data. Thus, the primary dynamic password data and the secondary dynamic password data are obtained respectively, and combined to form multi-level dynamic password data.

[0053] Based on multi-level dynamic password data, the fund transfer confirmation request is authenticated and authorized level by level to complete the fund transfer confirmation operation, and the successful prize redemption status information is fed back to the lottery self-service prize redemption device. A secure transmission channel is established to send the fund transfer confirmation request, along with the primary and secondary dynamic password data, to the lottery prize redemption server and the fund settlement port. The lottery prize redemption server and the fund settlement port each pre-store the corresponding dynamic password keys for the self-service lottery prize redemption device, as well as the same dynamic password generation algorithm rules and parameter configurations. Upon receiving the fund transfer confirmation request, the lottery prize redemption server and the fund settlement port independently perform the generation operations for the primary and secondary dynamic passwords, maintaining consistency with the self-service lottery prize redemption device. The generated dynamic password data is then compared with the data submitted by the self-service lottery prize redemption device. The system compares and verifies the primary and secondary dynamic password data step by step, specifically through exact matching of numeric strings. If the primary dynamic passwords generated by the lottery prize redemption server and the funds settlement port match the primary dynamic password data submitted by the self-service lottery prize redemption device, the primary identity authentication is successful; otherwise, the primary identity authentication fails. After the primary identity authentication is successful, the lottery prize redemption server and the funds settlement port then generate secondary dynamic passwords and compare them with the secondary dynamic password data submitted by the self-service lottery prize redemption device. If they match, the secondary permission verification is successful; otherwise, the secondary permission verification fails.

[0054] After successful identity authentication and authorization verification by both the lottery prize redemption server and the funds settlement port, a funds transfer confirmation operation is executed. The lottery prize redemption server, based on the ComparisonStatus value, ServerCheck data, and SettlementCheck data in the funds transfer confirmation request, executes its internal funds transfer logic. The funds settlement port, based on the same data fields in the confirmation request, executes the corresponding funds settlement logic, generating a funds transfer confirmation execution status, including indicators such as confirmation completed or failed. Both the lottery prize redemption server and the funds settlement port then transmit the funds transfer confirmation execution status back to the self-service lottery prize redemption device via a secure transmission channel.

[0055] After receiving the fund transfer confirmation execution status from the lottery prize redemption server and the fund settlement port, the lottery self-service prize redemption device compares and analyzes the received fund transfer confirmation execution status. If both fund transfer confirmation execution statuses are "confirmed as completed," the lottery self-service prize redemption device finally determines the prize redemption success status information. The prize redemption success status information includes the prize amount, the payment completion timestamp, the payment success identifier, and the unique identifier RequestID related to this payment. Finally, the lottery self-service prize redemption device presents the prize redemption success status information to the user through its internal interface or external interface, completing the overall lottery self-service fast payment process.

[0056] The above embodiments can be implemented, in whole or in part, by software, hardware, firmware, or any other combination thereof. When implemented using software, the above embodiments can be implemented, in whole or in part, as a computer program product. The computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer programs are loaded or executed on a computer, all or part of the processes or functions described in the embodiments of this application are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that includes one or more sets of available media. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium. The semiconductor medium can be a solid-state drive.

[0057] Those skilled in the art will recognize that the modules and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0058] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and modules described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0059] In the several embodiments provided in this application, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of modules is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple modules or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between apparatuses or modules may be electrical, mechanical, or other forms.

[0060] The modules described as separate components may or may not be physically separate. The components shown as modules may or may not be physical modules; they may be located in one place or distributed across multiple network modules. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs.

[0061] In addition, the functional modules in the various embodiments of this application can be integrated into one processing module, or each module can exist physically separately, or two or more modules can be integrated into one module.

[0062] If the aforementioned functions are implemented as software functional modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0063] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

[0064] In conclusion, the above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A multi-encrypted self-service fast lottery redemption system, characterized in that, include: The voucher encryption module acquires the lottery redemption voucher data scanned by the user and generates an encrypted digest of the lottery redemption voucher data using a hash algorithm based on random salt values. Authorization Request Module: Based on a single encrypted digest, it requests an authorized connection from the lottery prize redemption server via an asymmetric key exchange protocol, generating a connection authorization token containing the user's identity identifier and authorization timestamp; The voucher verification module uses a hierarchical permission key management mechanism to verify the validity of the prize redemption voucher data layer by layer based on the connection authorization token, and determines whether the prize redemption voucher data meets the prize redemption conditions. Funds encryption module: If the lottery prize redemption voucher data meets the prize redemption conditions, the prize amount and user account information are encrypted twice to generate a ciphertext for prize fund transfer; Secure transmission module: Based on the encrypted transfer of prize funds, it transmits the data to the lottery prize redemption server and fund settlement port through a multi-path encrypted channel, and performs cross-comparison of fund transfer security. Transfer Confirmation Module: Based on the cross-comparison results of fund transfer security, the fund transfer is confirmed after multi-level dynamic password verification, and the successful prize redemption status is fed back to the lottery self-service prize redemption device.

2. The multi-encrypted lottery self-service fast redemption system according to claim 1, characterized in that, The system retrieves the lottery prize redemption voucher data scanned by the user and generates an encrypted digest of the data using a hash algorithm based on random salt values. Specifically: Collect lottery prize redemption voucher data scanned by users through self-service lottery prize redemption equipment, and use a random number generator to generate random salt values; The random salt value and the lottery prize redemption voucher data are input into a hash function, and a cryptographic digest is generated by calculating the hash function.

3. The multi-encrypted lottery self-service fast redemption system according to claim 2, characterized in that, Based on a cryptographic digest, an authorized connection is requested from the lottery prize redemption server via an asymmetric key exchange protocol, generating a connection authorization token containing the user's identity identifier and authorization timestamp, specifically: The authorization request data is constructed based on a single encrypted digest and then sent to the lottery prize redemption server via an asymmetric key exchange protocol. The lottery prize redemption server generates corresponding authorization response data based on a single encrypted digest. The authorization response data is parsed to extract the user identity identifier and authorization timestamp, and the user identity identifier and authorization timestamp are combined to generate a connection authorization token.

4. The multi-encrypted lottery self-service fast redemption system according to claim 3, characterized in that, Based on the connection authorization token, a hierarchical permission key management mechanism is used to verify the validity of the prize redemption voucher data layer by layer to determine whether the prize redemption voucher data meets the prize redemption conditions. Specifically: Based on the connection authorization token call hierarchy permission key management mechanism, obtain the permission hierarchy identifier and permission hierarchy key set corresponding to the connection authorization token; Based on the permission level identifier, select the permission level key from the permission level key set, verify the lottery prize redemption voucher data and the connection authorization token, and generate verification result data; The verification results are used to determine whether the lottery prize redemption voucher data meets the prize redemption conditions.

5. A multi-encrypted lottery self-service fast redemption system according to claim 4, characterized in that, If the lottery prize redemption voucher data meets the redemption conditions, the prize amount and user account information are encrypted twice to generate a ciphertext for prize fund transfer, specifically: When the lottery prize redemption voucher data meets the prize redemption conditions, retrieve the prize amount and user account information associated with the lottery prize redemption voucher data; Random initial vectors are generated for the prize amount and user account information respectively. Encrypted input data for the prize amount is constructed based on the random initial vectors and the prize amount. Encrypted input data for the user account information is constructed based on the random initial vectors and user account information. The encrypted input data for the prize amount and the encrypted input data for the user account information are encrypted separately, and then combined to generate the encrypted text for the transfer of prize funds.

6. The multi-encrypted lottery self-service fast redemption system according to claim 5, characterized in that, Based on the encrypted transfer of prize funds, the funds are transmitted to the lottery prize redemption server and the fund settlement port through a multi-path encrypted channel, where a cross-check of the security of the fund transfer is performed. Specifically: Based on the encrypted transfer of prize funds, a transmission data unit is constructed, and the transmission data unit is split and encrypted according to the preset multi-path encryption channel rules; The encrypted and encapsulated transmission data units are sent to the lottery prize redemption server and the fund settlement port respectively; The encrypted verification results returned by the lottery prize redemption server and the fund settlement port are compared for consistency to generate secure cross-comparison data for fund transfer.

7. A multi-encrypted lottery self-service fast redemption system according to claim 6, characterized in that, Based on the cross-checking results of fund transfer security, the fund transfer is confirmed after multi-level dynamic password verification, and the successful prize redemption status is sent to the lottery self-service prize redemption device. Specifically: Generate a fund transfer confirmation request based on the cross-comparison data of fund transfer security; Based on the fund transfer confirmation request, multi-level dynamic password data is generated using pre-configured multi-level dynamic password generation rules; Based on multi-level dynamic password data, the fund transfer confirmation request is authenticated and authorized level by level to complete the fund transfer confirmation operation, and the successful prize redemption status information is fed back to the lottery self-service prize redemption device.

Images