Resource transfer request processing method and apparatus

Abstract

The present disclosure relates to a resource transfer request processing method and device, which is applied to a resource transfer server. The method comprises the following steps: receiving a first encrypted credential for a to-be-acquired object forwarded by an intelligent transfer intermediary, the to-be-acquired object being an object provided by a target provider; decrypting and verifying the first encrypted credential based on a preset provider public key corresponding to the target provider, and performing resource transfer processing corresponding to a target order after the verification is passed to obtain a resource transfer result; encrypting the resource transfer result and to-be-verified provider information based on a preset platform private key to obtain a second encrypted credential, and sending the second encrypted credential to the intelligent transfer intermediary, so that the intelligent transfer intermediary forwards the second encrypted credential to the target provider, decrypts and verifies the second encrypted credential based on a preset platform public key, and performs an operation corresponding to the target order after the verification is passed. The embodiments of the present disclosure can guarantee the security of resource transfer processing.

Description

Technical Field

[0001] This disclosure relates to the field of computer technology, and in particular to a method and apparatus for processing resource transfer requests. Background Technology

[0002] A smart transfer intermediary is an AI-based intelligent program that connects the target provider and the resource transfer agency to complete the transaction process. In a smart transfer intermediary payment scenario, a user initiates a shopping request through the intermediary. The intermediary places an order with the target provider and obtains a payment voucher, then forwards the voucher to the resource transfer agency to complete the payment. The resource transfer agency then sends the resource transfer result back to the target provider via the smart transfer intermediary. However, during transmission, the smart transfer intermediary may output incorrect data due to model illusions or be compromised by attacks, causing discrepancies between the information received by the resource transfer agency and the original order information from the target provider. This can lead to problems such as compromised transaction security and a degraded user shopping experience. Summary of the Invention

[0003] This disclosure provides a method and apparatus for processing resource transfer requests, which at least solves the problems of difficulty in ensuring transaction security and decline in user shopping experience in related technologies.

[0004] According to a first aspect of the present disclosure, a resource transfer request processing method is provided, applied to a resource transfer server, comprising: Receive a first encrypted credential for an object to be acquired forwarded by a smart transfer intermediary. The object to be acquired is an object provided by a target provider. The first encrypted credential is generated based on the unverified order information and unverified provider information of the target order corresponding to the object to be acquired. The first encrypted credential is decrypted and verified based on the preset provider public key corresponding to the target provider, and the resource transfer process corresponding to the target order is executed after the verification is successful to obtain the resource transfer result. The resource transfer result and the information of the provider to be verified are encrypted using a preset platform private key to obtain a second encrypted credential. The second encrypted credential is then sent to the smart transfer intermediary, which forwards the second encrypted credential to the target provider. The smart transfer intermediary decrypts and verifies the second encrypted credential using a preset platform public key, and performs the operation corresponding to the target order after successful verification.

[0005] According to a second aspect of the present disclosure, another resource transfer request processing method is provided, applied to a provider server, including: Receive a resource transfer request for an object to be acquired, triggered by an intelligent transfer intermediary. The object to be acquired is an object provided by a target provider. The resource transfer request carries the unverified order information and unverified provider information of the target order corresponding to the object to be acquired. The order information to be verified and the information of the provider to be verified are encrypted based on the preset provider's private key to obtain a first encrypted credential. The first encrypted credential is then sent to the smart transfer intermediary so that the smart transfer intermediary forwards the first encrypted credential to the resource transfer server. The first encrypted credential is decrypted and verified based on the preset provider's public key. After the verification is successful, the resource transfer process corresponding to the target order is executed. Receive the second encrypted credential forwarded by the intelligent transfer intermediary. The second encrypted credential is generated by encrypting the resource transfer result of the target order and the information of the provider to be verified based on a preset platform private key. The second encrypted credential is decrypted and verified based on the preset platform public key, and after successful verification, the operation corresponding to the target order is executed based on the resource transfer result.

[0006] According to a third aspect of the present disclosure, a resource transfer request processing apparatus is provided, applied to a resource transfer server, comprising: The first encrypted credential receiving module is used to receive a first encrypted credential for an object to be acquired forwarded by the smart transfer intermediary. The object to be acquired is an object provided by the target provider. The first encrypted credential is generated based on the unverified order information and unverified provider information of the target order corresponding to the object to be acquired. The resource transfer result determination module is used to decrypt and verify the first encrypted credential based on the preset provider public key corresponding to the target provider, and after the verification is successful, to perform the resource transfer processing corresponding to the target order and obtain the resource transfer result. The second encrypted credential determination module is used to encrypt the resource transfer result and the information of the provider to be verified based on a preset platform private key to obtain a second encrypted credential, and send the second encrypted credential to the smart transfer intermediary so that the smart transfer intermediary forwards the second encrypted credential to the target provider, decrypts and verifies the second encrypted credential based on a preset platform public key, and performs the operation corresponding to the target order after the verification is successful.

[0007] According to a fourth aspect of the present disclosure, another resource transfer request processing apparatus is provided, applied to a provider server, comprising: The resource transfer request receiving module is used to receive a resource transfer request for an object to be acquired triggered by an intelligent transfer intermediary. The object to be acquired is an object provided by a target provider. The resource transfer request carries the unverified order information and unverified provider information of the target order corresponding to the object to be acquired. The first encrypted credential determination module is used to encrypt the order information to be verified and the information of the provider to be verified based on the preset provider's private key to obtain the first encrypted credential, and send the first encrypted credential to the smart transfer intermediary so that the smart transfer intermediary forwards the first encrypted credential to the resource transfer server, decrypts and verifies the first encrypted credential based on the preset provider's public key, and executes the resource transfer processing corresponding to the target order after the verification is successful. The second encrypted credential receiving module is used to receive the second encrypted credential forwarded by the smart transfer intermediary. The second encrypted credential is generated by encrypting the resource transfer result of the target order and the information of the provider to be verified based on the preset platform private key. The order operation execution module is used to decrypt and verify the second encrypted credential based on the preset platform public key, and after the verification is successful, execute the operation corresponding to the target order based on the resource transfer result.

[0008] According to a fifth aspect of the present disclosure, an electronic device is provided, comprising: a processor; and a memory for storing processor-executable instructions; wherein the processor is configured to execute the instructions to implement the method as described in any one of the first aspects above.

[0009] According to a sixth aspect of the present disclosure, a computer-readable storage medium is provided such that, when instructions in the storage medium are executed by a processor of an electronic device, the electronic device is enabled to perform the method described in any of the first aspects of the present disclosure. According to a seventh aspect of the present disclosure, a computer program product including instructions is provided that, when run on a computer, causes the computer to perform the method described in any of the first aspects of the present disclosure.

[0010] The technical solutions provided by the embodiments of this disclosure have at least the following beneficial effects: By decrypting and verifying the first encrypted credential forwarded by the smart transfer intermediary, resource transfer processing is carried out. The generated resource transfer result and the information of the provider to be verified are then encrypted into a second encrypted credential and sent back to the smart transfer intermediary. This ensures the authenticity and integrity of the order information to be verified, the provider information to be verified, and the resource transfer result in the relay transmission link. It prevents transaction data from being tampered with by the smart transfer intermediary or other entities during transmission, ensuring that the information on which the resource transfer is based is consistent with the original order information of the target provider. At the same time, it ensures that the resource transfer result received by the target provider truly originates from a compliant resource transfer server, effectively improving the security and credibility of the entire resource transfer transaction link and adapting to transaction scenarios with multi-party relay interaction. Furthermore, based on the relay interaction mode of the smart transfer intermediary, there is no need for the target provider and the payment institution to establish a dedicated interaction link directly. While ensuring the security of payment transactions, it can adapt to transaction interaction scenarios involving multiple parties, improving the security, adaptability, and universality of the resource transfer processing flow.

[0011] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit this disclosure. Attached Figure Description

[0012] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this disclosure and, together with the description, serve to explain the principles of this disclosure, and are not intended to unduly limit this disclosure.

[0013] Figure 1 This is a flowchart illustrating a resource transfer request processing method according to an exemplary embodiment; Figure 2 This is a schematic diagram illustrating a process for decrypting and verifying a first encrypted credential based on a preset provider public key corresponding to the target provider, according to an exemplary embodiment. Figure 3 This is a schematic diagram illustrating an exemplary embodiment of a process for decrypting and verifying a first encrypted credential based on a preset provider public key corresponding to the target provider, and performing resource transfer processing corresponding to the target order after successful verification to obtain the resource transfer result. Figure 4 This is a schematic diagram illustrating a process of decoding first encoded data and second encoded data respectively to obtain information about the provider to be verified and information about the order to be verified, according to an exemplary embodiment. Figure 5 This is a schematic diagram illustrating a process for obtaining a first signature verification result based on information of the provider to be verified, order information to be verified, a first signature value, and a preset provider public key, according to an exemplary embodiment. Figure 6This is a schematic diagram illustrating a process of verifying a first signature-to-be-verified information based on a preset provider public key and a first signature value, according to an exemplary embodiment, to obtain a first signature verification result. Figure 7 This is a schematic diagram illustrating a process of encrypting resource transfer results and information of the provider to be verified based on a preset platform private key to obtain a second encrypted credential, according to an exemplary embodiment. Figure 8 This is a flowchart illustrating another resource transfer request processing method according to an exemplary embodiment; Figure 9 This is a schematic diagram illustrating a process of encrypting order information to be verified and provider information to be verified based on a preset provider private key to obtain a first encrypted credential, according to an exemplary embodiment. Figure 10 This is a schematic diagram illustrating a process for decrypting and verifying a second encrypted credential based on a preset platform public key, according to an exemplary embodiment. Figure 11 This is a schematic diagram illustrating a process of decrypting and verifying a second encrypted credential based on a preset platform public key, and then executing the operation corresponding to the target order based on the resource transfer result after successful verification, according to an exemplary embodiment. Figure 12 This is a schematic diagram illustrating a process of decoding third encoded data and fourth encoded data respectively to obtain resource transfer results and information of the provider to be verified, according to an exemplary embodiment. Figure 13 This is a schematic diagram illustrating a process for obtaining a second signature verification result based on a resource transfer result, information of the provider to be verified, a third signature value, and a preset platform public key, according to an exemplary embodiment. Figure 14 This is a schematic diagram illustrating a process of verifying a second signature-to-be-verified information based on a preset platform public key and a third signature value, according to an exemplary embodiment, to obtain a second signature verification result. Figure 15 This is a schematic diagram illustrating another resource transfer request processing method according to an exemplary embodiment; Figure 16 This is a block diagram of a resource transfer request processing apparatus according to an exemplary embodiment; Figure 17 This is a block diagram of another resource transfer request processing apparatus according to an exemplary embodiment; Figure 18 This is a block diagram illustrating an electronic device for processing resource transfer requests according to an exemplary embodiment. Detailed Implementation

[0014] To enable those skilled in the art to better understand the technical solutions of this disclosure, the technical solutions in the embodiments of this disclosure will be clearly and completely described below with reference to the accompanying drawings.

[0015] It should be noted that the terms "first," "second," etc., used in the specification, claims, and accompanying drawings of this disclosure are used to distinguish similar different contents and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this disclosure described herein can be implemented in orders other than those illustrated or described herein. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this disclosure. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this disclosure as detailed in the appended claims.

[0016] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for display, data used for analysis, etc.) involved in this disclosure are all information and data authorized by the user or fully authorized by all parties.

[0017] Figure 1 This is a flowchart illustrating a resource transfer request processing method according to an exemplary embodiment. This resource transfer request processing method is applied to a resource transfer server, such as... Figure 1 As shown, it includes the following steps: Step S101: Receive the first encrypted credential for the object to be acquired, forwarded by the smart transfer intermediary.

[0018] In one specific embodiment, the object to be acquired is an object provided by the target provider, which, for example, can be a physical product or a virtual service. The first encrypted credential is generated based on the unverified order information and the unverified provider information of the target order corresponding to the object to be acquired. The intelligent transfer intermediary is an artificial intelligence entity responsible for transmitting information between the user, the target provider, and the resource transfer server, and only performs information forwarding and routing. The object to be acquired is the object that the user expects to obtain through the resource transfer process, provided by the target provider. The target provider is the party that owns the object to be acquired and provides it to the user; for example, it can be a merchant. The unverified order information is data describing the transaction content of the target order; for example, the unverified order information may include at least one of the following: transaction amount, transaction object details, order placement time, and order validity period. The unverified provider information is data identifying the target provider. For example, the unverified provider information may include at least one of the following: provider identification number, provider name, and settlement account identifier.

[0019] Step S103: Decrypt and verify the first encrypted credential based on the preset provider public key corresponding to the target provider, and perform resource transfer processing corresponding to the target order after successful verification to obtain the resource transfer result.

[0020] In one specific embodiment, the first encrypted credential carries a current order identifier. The current order identifier is used to identify the target order corresponding to the current resource transfer request.

[0021] In a specific embodiment, such as Figure 2 As shown, the above-mentioned decryption and verification of the first encrypted credential based on the preset provider public key corresponding to the target provider includes: Step S201: Obtain the first historical order information.

[0022] In one specific embodiment, the first historical order information indicates the historical order corresponding to the historical order identifier that has been processed by the resource transfer server.

[0023] Step S203: If the first historical order information does not include the current order identifier, the first encrypted credential is decrypted and verified based on the preset provider public key.

[0024] In one specific embodiment, the first historical order information does not include the current order identifier, which means that the first encrypted credential corresponding to the order is being submitted to the resource transfer server for processing for the first time, and there has been no duplicate payment. Therefore, the credential is a valid new request and can continue to execute the subsequent decryption and verification process.

[0025] In the above embodiments, by extracting the current order identifier and comparing it with the historical order identifier in the first historical order information before performing decryption verification on the first encrypted credential, and only performing subsequent decryption verification processing when the first historical order information does not contain the current order identifier, it is possible to intercept duplicate submitted transaction credentials before the signature verification stage, effectively prevent duplicate resource transfer caused by the same credential being submitted repeatedly, reduce the overhead of invalid decryption and signature verification operations, and improve the transaction processing efficiency and security protection capabilities of the resource transfer server.

[0026] In one specific embodiment, the first encryption credential carries first encoded data, second encoded data, and a first signature value, such as... Figure 3 As shown, the first encrypted credential is decrypted and verified based on the preset public key of the target provider, and after successful verification, the resource transfer process corresponding to the target order is executed, resulting in the following resource transfer results: Step S301: Decode the first encoded data and the second encoded data respectively to obtain the provider information to be verified and the order information to be verified.

[0027] Step S303: Based on the information of the provider to be verified, the order information to be verified, the first signature value, and the preset provider public key, the first signature verification result is obtained.

[0028] Step S305: If the first verification result indicates that the verification is successful, based on the information of the provider to be verified and the information of the order to be verified, perform the resource transfer processing corresponding to the target order to obtain the resource transfer result.

[0029] In the above embodiments, by decoding the first encoded data and the second encoded data in the first encrypted certificate to restore the information of the provider to be verified and the information of the order to be verified, and then combining the preset provider public key to verify the first signature value and generate the first verification result, the resource transfer processing of the corresponding target order is only executed after the verification is passed, which can ensure that the information on which the resource transfer is based has not been tampered with, and ensure the security and reliability of the resource transfer processing.

[0030] In one specific embodiment, the first encryption credential also carries a first encoding method identifier corresponding to the first encoded data and a second encoding method identifier corresponding to the second encoded data. The first encoding method identifier is used to identify the encoding rule for the first encoded data, and the second encoding method identifier is used to identify the encoding rule for the second encoded data. For example, the encoding rule can be any of Base64 encoding, Base58 encoding, or hexadecimal encoding.

[0031] In a specific embodiment, such as Figure 4 As shown, the above decoding processes of the first and second encoded data yield the following information: Provider information to be verified and order information to be verified: Step S401: Based on the first encoding method identifier, determine the first decoding information corresponding to the first encoded data.

[0032] In one specific embodiment, the first decoding information is used to indicate the decoding rule corresponding to the first encoded data.

[0033] In one specific embodiment, determining the first decoding information corresponding to the first encoded data based on the first encoding method identifier may include: determining the first decoding information corresponding to the first encoding method identifier from a variety of preset decoding information, wherein the variety of preset decoding information corresponds to different encoding method identifiers.

[0034] Step S403: Based on the second encoding method identifier, determine the second decoding information corresponding to the second encoded data.

[0035] In one specific embodiment, the first decoding information is used to indicate the decoding rule corresponding to the second encoded data.

[0036] In one specific embodiment, determining the second decoding information corresponding to the second encoded data based on the second encoding method identifier may include: determining the second decoding information corresponding to the second encoding method identifier from a variety of preset decoding information, wherein the variety of preset decoding information corresponds to different encoding method identifiers.

[0037] Step S405: Based on the first decoding information, the first encoded data is decoded to obtain the information of the provider to be verified.

[0038] In one specific embodiment, the above-mentioned decoding process of the first encoded data based on the first decoding information to obtain the provider information to be verified may include: performing a corresponding decoding operation on the first encoded data based on the decoding rules indicated by the first decoding information, restoring the first encoded data from the encoded form to the original data form, and obtaining the provider information to be verified.

[0039] Step S407: Based on the second decoding information, the second encoded data is decoded to obtain the order information to be verified.

[0040] In one specific embodiment, the above-mentioned decoding process of the second encoded data based on the second decoding information to obtain the order information to be verified may include: performing a corresponding decoding operation on the second encoded data based on the decoding rules indicated by the second decoding information, restoring the second encoded data from the encoded form to the original data form, and obtaining the order information to be verified.

[0041] In the above embodiments, by carrying an encoding method identifier in the encryption certificate, the resource transfer server can dynamically determine the decoding rules corresponding to each encoded data based on the identifier, thereby achieving accurate decoding of encoded data in different formats, avoiding parsing errors caused by inconsistent encoding methods, and enhancing the flexibility and compatibility of the certificate parsing process.

[0042] In a specific embodiment, such as Figure 5 As shown, the first signature verification result obtained based on the provider information to be verified, the order information to be verified, the first signature value, and the preset provider public key includes: Step S501: Generate the first verification signature information based on the information of the provider to be verified and the order information to be verified.

[0043] In a specific embodiment, generating the first verification signature information based on the provider information to be verified and the order information to be verified may include: splicing and integrating the provider information to be verified and the order information to be verified based on a preset splicing method, and using the complete data content formed after the combination as the first verification signature information.

[0044] For example, the preset concatenation method can be any concatenation method such as direct sequential concatenation or separator concatenation. Specifically, direct sequential concatenation can be achieved by directly concatenating the provider information to be verified and the order information to be verified into a single string in a fixed order, such as provider information to be verified + order information to be verified. Separator concatenation can be achieved by inserting a preset separator (such as a period, vertical bar |, comma, etc.) between the provider information to be verified and the order information to be verified, such as provider information to be verified.order information to be verified.

[0045] Step S503: Perform signature verification processing on the first signature-to-be-verified information based on the preset provider public key and the first signature value to obtain the first signature verification result.

[0046] In the above embodiments, by recombining the decoded provider information and order information into signature-to-be-verified information, and then comparing and verifying it with the first signature value using the preset provider public key, it is confirmed whether the signature-to-be-verified information was generated by a legitimate provider holding the corresponding provider private key. This achieves the verification of the authenticity of the certificate and effectively prevents the risk of the certificate being forged or tampered with in the middle.

[0047] In a specific embodiment, such as Figure 6 As shown, the above-mentioned verification process for the first signature-to-be-verified information based on the preset provider's public key and the first signature value yields the following first verification result: Step S601: Sign the first signature information based on the preset provider's public key to obtain the second signature value.

[0048] In one specific embodiment, signing the first signature information based on a preset provider's public key to obtain a second signature value may include: performing a signature operation on the first signature information based on a preset asymmetric signature algorithm using a preset platform public key to obtain a second signature value.

[0049] Step S603: Compare the first signature value and the second signature value to obtain the first signature verification result.

[0050] In one specific embodiment, if the first signature value and the second signature value are the same, the first verification result indicates that the verification is successful; if the first signature value and the second signature value are not the same, the first verification result indicates that the verification is unsuccessful.

[0051] In the above embodiments, the first signature information to be verified is re-signed using a preset provider public key to obtain a second signature value, and the second signature value is compared with the first signature value. If the two are consistent, it indicates that the first signature information to be verified was indeed signed by the provider server holding the corresponding provider private key and has not been tampered with, thereby realizing the verification of the authenticity of the certificate and effectively preventing the risk of the certificate being forged or tampered with in the middle.

[0052] Step S105: Encrypt the resource transfer result and the information of the provider to be verified based on the preset platform private key to obtain the second encrypted credential. Send the second encrypted credential to the smart transfer intermediary so that the smart transfer intermediary forwards the second encrypted credential to the target provider. Decrypt and verify the second encrypted credential based on the preset platform public key. After successful verification, execute the operation corresponding to the target order.

[0053] In a specific embodiment, such as Figure 7 As shown, the above encryption of the resource transfer result and the information of the provider to be verified based on the preset platform private key yields the second encryption credential, which includes: Step S701: Based on the resource transfer result and the information of the provider to be verified, generate the first information to be signed.

[0054] In a specific embodiment, generating the first signature information based on the resource transfer result and the provider information to be verified may include: splicing and integrating the resource transfer result and the provider information to be verified based on a preset splicing method, and using the complete data content formed after the combination as the first signature information.

[0055] For example, the preset concatenation method can be any concatenation method such as delimiter concatenation or fixed-length prefix concatenation. Specifically, the delimiter concatenation method can be: inserting a preset delimiter (such as a period, vertical bar |, comma, etc.) between the two fields, for example, resource transfer result.provider information to be verified. The fixed-length prefix concatenation method can be: concatenating the fields in binary order according to a fixed length, for example, [resource transfer result length][resource transfer result][provider information to be verified length][provider information to be verified].

[0056] Step S703: Sign the first information to be signed based on the preset platform private key to obtain the third signature value.

[0057] In a specific embodiment, the above-mentioned signing of the first information to be signed based on the preset platform private key to obtain the third signature value may include: performing a signature operation on the first information to be signed using the preset platform private key according to a preset asymmetric signature algorithm to obtain the third signature value.

[0058] Step S705: Encode the resource transfer result and the information of the provider to be verified respectively to obtain the third encoded data and the fourth encoded data.

[0059] In a specific embodiment, the above-mentioned encoding processing of the resource transfer result and the information of the provider to be verified to obtain the third encoded data and the fourth encoded data may include: selecting a preset encoding rule to sequentially perform encoding operations on the resource transfer result and the information of the provider to be verified, and the data output after the corresponding encoding operations are sequentially determined as the third encoded data and the fourth encoded data.

[0060] Step S707: Combine the third encoded data, the fourth encoded data, and the third signature value to generate the second encryption credential.

[0061] In a specific embodiment, the above-mentioned combination processing of the third encoded data, the fourth encoded data, and the third signature value to generate the second encryption credential may include: based on a preset splicing method, splicing and encapsulating the third encoded data, the fourth encoded data, and the third signature value according to a specified field order and separation method to obtain the second encryption credential.

[0062] For example, the preset concatenation method can be any concatenation method such as delimiter concatenation or fixed-length prefix concatenation. Specifically, the delimiter concatenation method can be: concatenating the third encoded data, fourth encoded data, and third signature value in a fixed order using preset delimiters (such as periods, vertical bars, commas, etc.) to form a string. For example: third encoded data.fourth encoded data.third signature value. The fixed-length prefix method can be: appending the length field before the third encoded data, appending the length field before the fourth encoded data, and then concatenating the two parts of data with the length prefix with the third signature value in order. For example: [third encoded data length][third encoded data][fourth encoded data length][fourth encoded data][third signature value].

[0063] In the above embodiments, the first signature information is generated by integrating the resource transfer result and the information of the provider to be verified. The third signature value is obtained by signing with the private key of the preset platform. The third encoded data, the fourth encoded data and the third signature value are then assembled to form the second encryption certificate. This allows the target provider to verify the source and integrity of the second encryption certificate based on the public key of the preset platform, ensuring that the information forwarded by the intelligent transfer intermediary cannot be arbitrarily tampered with, and ensuring the authenticity and integrity of the information in the relay transmission link.

[0064] In one specific embodiment, the resource transfer server includes a resource transfer mechanism (MCP, Model Context Protocol) and a first credential device. Specifically, the resource transfer mechanism (MCP) is the main entry point for providing services to the outside world, responsible for interacting with external systems and scheduling the first credential device. The first credential device is a system within the resource transfer mechanism specifically responsible for security operations such as parsing and decrypting the first encrypted credential forwarded by the resource transfer mechanism (MCP), and generating a second encrypted credential for the local system. The resource transfer mechanism (MCP) relies on the first credential device to complete all operations related to credential security. The first credential device does not communicate directly with external systems; it only accepts calls from the resource transfer mechanism (MCP) and returns the processing results.

[0065] In practical use, after the resource transfer agency MCP receives the first encrypted credential for the target object forwarded by the smart transfer intermediary, it sends the first encrypted credential to the first credential device. The first credential device then decrypts and verifies the first encrypted credential based on the preset public key of the target provider. After successful verification, it sends a first verification result indicating successful verification to the resource transfer agency MCP. Upon receiving the first verification result, the resource transfer agency MCP executes the resource transfer processing corresponding to the target order, obtains the resource transfer result, and sends the resource transfer result to the first credential device. The first credential device then encrypts the resource transfer result and the information of the provider to be verified based on the preset platform private key, obtaining a second encrypted credential, which is then sent to the resource transfer agency MCP. Upon receiving the second encrypted credential, the resource transfer agency MCP sends it to the smart transfer intermediary, which then forwards the second encrypted credential to the target provider. The smart transfer intermediary decrypts and verifies the second encrypted credential based on the preset platform public key, and after successful verification, executes the operation corresponding to the target order.

[0066] Figure 8 This is a flowchart illustrating another resource transfer request processing method according to an exemplary embodiment, which is applied to a provider server, such as... Figure 8 As shown, it includes the following steps: Step S801: Receive a resource transfer request for the object to be acquired, triggered by an intelligent transfer intermediary.

[0067] In one specific embodiment, the object to be acquired is an object provided by the target provider. The resource transfer request carries the unverified order information and the unverified provider information of the target order corresponding to the object to be acquired. The resource transfer request is used to initiate a resource transfer process for the object to be acquired. The resource transfer request can be initiated by the user performing a confirmation operation on the object to be acquired on the intelligent transfer intermediary, and the intelligent transfer intermediary forwards the resource transfer request to the provider server.

[0068] For details regarding the intelligent transfer intermediary, the object to be acquired, the target provider, the order information to be verified, and the provider information to be verified, please refer to the above, and will not be repeated here.

[0069] Step S803: Based on the preset provider's private key, encrypt the order information to be verified and the provider information to be verified to obtain the first encrypted credential. Send the first encrypted credential to the smart transfer intermediary so that the smart transfer intermediary forwards the first encrypted credential to the resource transfer server. Decrypt and verify the first encrypted credential based on the preset provider's public key. After successful verification, execute the resource transfer processing corresponding to the target order.

[0070] In a specific embodiment, such as Figure 9 As shown, the first encrypted credential obtained by encrypting the order information to be verified and the provider information to be verified based on the preset provider's private key includes: Step S901: Generate second signature information based on the order information to be verified and the provider information to be verified.

[0071] In a specific embodiment, generating the second signature information based on the order information to be verified and the provider information to be verified may include: combining the order information to be verified and the provider information to be verified based on a preset splicing method, and using the complete data content formed after the combination as the second signature information.

[0072] For example, the preset concatenation method can include either the delimiter concatenation method or the structured encapsulation method. Specifically, the delimiter concatenation method can be: inserting a preset delimiter (such as a period, vertical bar |, comma, etc.) between the two, for example, "Order information to be verified|Provider information to be verified". The structured encapsulation method can be: encapsulating the order information to be verified and the provider information to be verified as key-value pairs in JSON format.

[0073] Step S903: Sign the second information to be signed based on the preset provider's private key to obtain the first signature value.

[0074] In a specific embodiment, the above-mentioned signing of the second information to be signed based on the preset provider's private key to obtain the first signature value may include: performing a signature operation on the second information to be signed using the preset provider's private key according to a preset asymmetric signature algorithm to obtain the first signature value.

[0075] Step S905: Encode the information of the provider to be verified and the information of the order to be verified respectively to obtain the first encoded data and the second encoded data.

[0076] In a specific embodiment, the above-mentioned encoding processing of the provider information to be verified and the order information to be verified to obtain the first encoded data and the second encoded data may include: selecting a preset encoding rule to sequentially perform encoding operations on the provider information to be verified and the order information to be verified, and the data output after the corresponding encoding operations are sequentially determined as the first encoded data and the second encoded data.

[0077] Step S907: Combine the first encoded data, the second encoded data, and the first signature value to generate the first encrypted credential.

[0078] In a specific embodiment, the above-mentioned combination processing of the first encoded data, the second encoded data, and the first signature value to generate the first encrypted credential may include: based on a preset splicing method, splicing and encapsulating the first encoded data, the second encoded data, and the first signature value according to a specified field order and separation method to obtain the first encrypted credential.

[0079] For example, the preset concatenation method can be any concatenation method such as structured encapsulation concatenation or hash index concatenation. Specifically, structured encapsulation concatenation can be: encapsulating the first encoded data, the second encoded data, and the first signature value as fields into a preset structured data format. Hash index concatenation can be: calculating the hash values ​​of the first encoded data and the second encoded data respectively as indexes, storing them together with the first signature value in a preset data structure, and generating a credential containing the hash index and the signature value.

[0080] In the above embodiments, by integrating the order information to be verified and the provider information to be verified to generate the second signature information, the first signature value is obtained by signing with the preset provider private key, and the first encoded data, the second encoded data and the first signature value are packaged into a first encryption certificate, so that the resource transfer server can verify the source and content integrity of the first encryption certificate based on the preset provider public key, ensuring that the information forwarded by the smart transfer intermediary cannot be arbitrarily tampered with, and ensuring the authenticity and integrity of the information in the relay transmission link.

[0081] Step S805: Receive the second encrypted credential forwarded by the smart transfer intermediary.

[0082] In one specific embodiment, the second encryption credential is generated by encrypting the resource transfer result of the target order and the information of the provider to be verified based on a preset platform private key.

[0083] Step S807: Decrypt and verify the second encrypted credential based on the preset platform public key, and after successful verification, execute the operation corresponding to the target order based on the resource transfer result.

[0084] In a specific embodiment, executing the operation corresponding to the target order means that, after confirming that the resource transfer result has been verified, the target provider performs the corresponding fulfillment behavior according to the nature of the object to be acquired. For example, if the object to be acquired is a physical product, then a shipment operation is performed; if the object to be acquired is a virtual service, then a service activation or permission grant operation is performed.

[0085] In the above embodiments, the target provider encrypts the order information to be verified and the information of the provider to be verified using a preset provider private key to generate a first encrypted credential, which is then forwarded to the resource transfer server via a smart transfer intermediary for verification. Simultaneously, after receiving the second encrypted credential returned by the smart transfer intermediary, it decrypts and verifies it using a preset platform public key before executing the corresponding operation. This enables two-way identity verification and information integrity verification between the transaction initiator and the resource transfer processor, ensuring the authenticity and integrity of transaction data in the transit link and preventing transaction data from being tampered with by the smart transfer intermediary or other entities during transmission. Furthermore, based on the transit interaction mode of the smart transfer intermediary, there is no need for the target provider and the payment institution to directly establish a dedicated interaction link. While ensuring the security of payment transactions, it can adapt to transaction interaction scenarios involving multiple parties, improving the security, adaptability, and universality of the resource transfer processing flow.

[0086] In one specific embodiment, the second encrypted credential carries a current order identifier. The current order identifier is used to identify the target order corresponding to the current resource transfer request.

[0087] In a specific embodiment, such as Figure 10 As shown, the above-mentioned decryption and verification of the second encrypted credential based on the preset platform public key includes: Step S1001: Obtain the second historical order information.

[0088] In one specific embodiment, the second historical order information indicates the historical order corresponding to the historical order identifier that has been processed by the provider server.

[0089] Step S1003: If the second historical order information does not include the current order identifier, the second encrypted credential is decrypted and verified based on the preset platform public key.

[0090] In one specific embodiment, the second historical order information does not include the current order identifier, which means that the second encrypted credential corresponding to the order is being submitted to the provider's server for processing for the first time, and there has been no duplicate fulfillment. Therefore, the credential is a valid new request and can continue to execute the subsequent decryption and verification process.

[0091] In the above embodiments, by introducing an order identifier comparison step of the second historical order information before performing decryption verification on the second encrypted certificate based on the preset platform public key, the subsequent decryption verification process is only carried out when the second historical order information does not contain the current order identifier, thus avoiding the same order being repeatedly verified and fulfilled, and reducing unnecessary verification computation overhead in the future. This improves the security of the entire transaction process while optimizing the processing efficiency of the verification step.

[0092] In one specific embodiment, the second encryption credential carries third encoded data, fourth encoded data, and a third signature value, such as... Figure 11 As shown, the above-mentioned process of decrypting and verifying the second encrypted credential based on the preset platform public key, and then executing the operation corresponding to the target order based on the resource transfer result after successful verification, includes: Step S1101: Decode the third encoded data and the fourth encoded data respectively to obtain the resource transfer result and the information of the provider to be verified.

[0093] Step S1103: Based on the resource transfer result, the information of the provider to be verified, the third signature value, and the preset platform public key, the second signature verification result is obtained.

[0094] Step S1105: If the second verification result indicates that the verification is successful, execute the operation corresponding to the target order based on the resource transfer result.

[0095] In the above embodiments, by decoding the encoded data in the second encrypted certificate to restore the resource transfer result and provider information, and then combining the signature value with the platform public key for verification, it is ensured that only certificates signed with a legitimate platform private key and not tampered with can trigger the performance operation corresponding to the target order. This achieves the verification of the authenticity of the payment result certificate and effectively prevents the risk of incorrect performance caused by forged or tampered certificates.

[0096] In one specific embodiment, the second encryption credential also carries a third encoding method identifier corresponding to the third encoded data and a fourth encoding method identifier corresponding to the fourth encoded data. The third encoding method identifier is used to identify the encoding rule for the third encoded data, and the fourth encoding method identifier is used to identify the encoding rule for the fourth encoded data. For example, the encoding rule can be any of Base64 encoding, Base58 encoding, or hexadecimal encoding.

[0097] In a specific embodiment, such as Figure 12As shown, the above decoding processes for the third and fourth encoded data yield the resource transfer results and the information of the provider to be verified, including: Step S1201: Based on the third encoding method identifier, determine the third decoding information corresponding to the third encoded data.

[0098] In one specific embodiment, the third decoding information is used to indicate the decoding rule corresponding to the third encoded data.

[0099] In a specific embodiment, the above-mentioned determination of the third decoding information corresponding to the third encoded data based on the third encoding method identifier may include: determining the third decoding information corresponding to the third encoding method identifier from a variety of preset decoding information, wherein the variety of preset decoding information corresponds to different encoding method identifiers.

[0100] Step S1203: Based on the fourth encoding method identifier, determine the fourth decoding information corresponding to the fourth encoded data.

[0101] In one specific embodiment, the fourth decoding information is used to indicate the decoding rule corresponding to the fourth encoded data.

[0102] In a specific embodiment, determining the fourth decoding information corresponding to the fourth encoded data based on the fourth encoding method identifier may include: determining the fourth decoding information corresponding to the fourth encoding method identifier from a variety of preset decoding information, wherein the variety of preset decoding information corresponds to different encoding method identifiers.

[0103] Step S1205: Based on the third decoding information, the third encoded data is decoded to obtain the resource transfer result.

[0104] In a specific embodiment, the above-mentioned decoding process of the third encoded data based on the third decoding information to obtain the resource transfer result may include: performing the corresponding decoding operation on the third encoded data based on the decoding rules indicated by the third decoding information, restoring the third encoded data from the encoded form to the original data form, and obtaining the resource transfer result.

[0105] Step S1207: Based on the fourth decoding information, the fourth encoded data is decoded to obtain the information of the provider to be verified.

[0106] In a specific embodiment, the above-mentioned decoding process of the fourth encoded data based on the fourth decoding information to obtain the provider information to be verified may include: performing a corresponding decoding operation on the fourth encoded data based on the decoding rules indicated by the fourth decoding information, restoring the fourth encoded data from the encoded form to the original data form, and obtaining the provider information to be verified.

[0107] In the above embodiments, by carrying an encoding method identifier in the encryption certificate, the provider server can dynamically determine the decoding rules corresponding to each encoded data based on the identifier, thereby achieving accurate decoding of encoded data in different formats, avoiding parsing errors caused by inconsistent encoding methods, and enhancing the flexibility and compatibility of the certificate parsing process.

[0108] In a specific embodiment, such as Figure 13 As shown, the second signature verification result obtained based on the resource transfer result, the information of the provider to be verified, the third signature value, and the preset platform public key includes: Step S1301: Based on the resource transfer result and the information of the provider to be verified, generate the second signature information to be verified.

[0109] In a specific embodiment, generating the second verification signature information based on the resource transfer result and the provider information to be verified may include: splicing and integrating the resource transfer result and the provider information to be verified based on a preset splicing method, and using the complete data content formed after the combination as the second verification signature information.

[0110] For example, the preset concatenation method can be any concatenation method such as structured encapsulation concatenation or fixed-length prefix concatenation. Specifically, structured encapsulation concatenation can be: encapsulating the resource transfer result and the provider information to be verified as key-value pairs in XML format. Fixed-length prefix concatenation can be: concatenating the fields in binary order according to a fixed length, for example, [resource transfer result length][resource transfer result][provider information to be verified length][provider information to be verified].

[0111] Step S1303: Perform signature verification processing on the second signature-to-be-verified information based on the preset platform public key and the third signature value to obtain the second signature verification result.

[0112] In the above embodiments, by recombinizing the decoded resource transfer result with the provider information into a signature-to-be-verified information, and then comparing and verifying it with the preset platform public key and the third signature value, it is confirmed whether the signature-to-be-verified information is generated by a legitimate platform that holds the corresponding platform private key. This achieves the verification of the authenticity of the payment result certificate and ensures that only results that have been legally signed by the platform and have not been tampered with can trigger subsequent performance operations.

[0113] In a specific embodiment, such as Figure 14 As shown, the above-mentioned verification process for the second signature-to-be-verified information based on the preset platform public key and the third signature value yields the following second verification results: Step S1401: Sign the second signature information based on the preset platform public key to obtain the fourth signature value.

[0114] In one specific embodiment, signing the second signature information based on a preset platform public key to obtain a fourth signature value may include: performing a signature operation on the second signature information based on a preset asymmetric signature algorithm using the preset platform public key to obtain a fourth signature value.

[0115] Step S1403: Compare the third signature value and the fourth signature value to obtain the second signature verification result.

[0116] In one specific embodiment, if the third signature value and the fourth signature value are the same, the second verification result indicates that the verification is successful; if the third signature value and the fourth signature value are not the same, the first verification result indicates that the verification is unsuccessful.

[0117] In the above embodiments, the second signature information to be verified is re-signed using a preset platform public key to obtain a fourth signature value, and the third signature value is compared with the fourth signature value. If the two are consistent, it indicates that the second signature information to be verified was indeed signed by the resource transfer server holding the corresponding platform private key and has not been tampered with, thereby realizing the verification of the authenticity of the certificate.

[0118] In one specific embodiment, the provider server includes a provider MCP and a second credential device. Specifically, the provider MCP is the main entry point for the target provider to provide services externally, responsible for interacting with external systems and scheduling the second credential device. The second credential device is a dedicated system within the target provider responsible for generating the first encrypted credential, parsing the second encrypted credential forwarded by the provider MCP, and decrypting it, among other security-related tasks. The provider MCP relies on the second credential device to complete all credential security-related operations. The second credential device does not communicate directly with external systems; it only accepts calls from the provider MCP and returns processing results.

[0119] In practical use, after receiving a resource transfer request triggered by a smart transfer intermediary, the provider MCP parses the request to obtain the order information and provider information to be verified. It then sends these two pieces of information to a second credential device, which encrypts them using a preset provider private key to obtain a first encrypted credential. This first encrypted credential is then sent to the provider MCP. The provider MCP forwards the first encrypted credential to the smart transfer intermediary, which then forwards it to the resource transfer server. Upon receiving the second encrypted credential forwarded by the smart transfer intermediary, the provider MCP forwards it to the second credential device. The second credential device decrypts and verifies the second encrypted credential using a preset platform public key. Upon successful verification, it obtains the resource transfer result and sends a second verification result indicating successful verification, along with the resource transfer result, to the provider MCP. The provider MCP then executes the operation corresponding to the target order based on the second verification result indicating successful verification and the resource transfer result.

[0120] In a specific embodiment, such as Figure 15 As shown, the resource transfer server includes a resource transfer mechanism MCP (1501) and a first credential device (1502), and the provider server includes a provider MCP (1503) and a second credential device (1504). The user triggers a resource transfer request for the object to be acquired based on the intelligent transfer intermediary (1505). The resource transfer request carries the unverified order information and unverified provider information of the target order corresponding to the object to be acquired. The intelligent transfer intermediary (1505) forwards the resource transfer request to the provider MCP (1503).

[0121] After receiving the resource transfer request, the provider MCP (1503) parses the resource transfer request to obtain the order information to be verified and the provider information to be verified, and sends the order information to be verified and the provider information to be verified to the second credential device (1504).

[0122] The second credential device (1504) encrypts the order information to be verified and the information of the provider to be verified based on the preset provider private key to obtain the first encrypted credential, and sends the first encrypted credential to the provider MCP (1503).

[0123] After receiving the first encrypted credential, the provider MCP (1503) forwards the first encrypted credential to the smart transfer intermediary (1505).

[0124] After receiving the first encrypted credential, the intelligent transfer intermediary (1505) forwards the first encrypted credential to the resource transfer agency MCP (1501).

[0125] After receiving the first encryption credential, the resource transfer agency MCP (1501) forwards the first encryption credential to the first credential device (1502).

[0126] After receiving the first encrypted certificate, the first credential device (1502) decrypts and verifies the first encrypted certificate based on the preset public key of the target provider, and sends the first verification result indicating successful verification to the resource transfer agency MCP (1501) after successful verification.

[0127] After receiving the first signature verification result indicating successful verification, the resource transfer agency MCP (1501) performs the resource transfer processing corresponding to the target order, obtains the resource transfer result, and sends the resource transfer result to the first voucher device (1502).

[0128] The first credential device (1502) encrypts the resource transfer result and the information of the provider to be verified based on the preset platform private key to obtain the second encrypted credential, and sends the second encrypted credential to the resource transfer agency MCP (1501).

[0129] After receiving the second encryption credential, the resource transfer agency MCP (1501) forwards the second encryption credential to the smart transfer intermediary (1505).

[0130] After receiving the second encryption credential, the smart transfer intermediary (1505) forwards the second encryption credential to the provider MCP (1503).

[0131] After receiving the second encryption credential, the provider MCP (1503) forwards the second encryption credential to the second credential device (1504).

[0132] After receiving the second encrypted certificate, the second credential device (1504) decrypts and verifies the second encrypted certificate based on the preset platform public key, and after the verification is successful, sends the second verification result indicating successful verification to the provider MCP (1503).

[0133] The provider MCP (1503) performs the operation corresponding to the target order based on the second verification result and resource transfer result indicating successful verification.

[0134] Figure 16 This is a block diagram of a resource transfer request processing apparatus according to an exemplary embodiment, applied to a resource transfer server. (Refer to...) Figure 16 The device includes: The first encrypted credential receiving module 1610 is used to receive the first encrypted credential for the object to be acquired forwarded by the smart transfer intermediary. The object to be acquired is an object provided by the target provider. The first encrypted credential is generated based on the unverified order information and the unverified provider information of the target order corresponding to the object to be acquired. The resource transfer result determination module 1620 is used to decrypt and verify the first encrypted certificate based on the preset provider public key corresponding to the target provider, and to perform resource transfer processing corresponding to the target order after the verification is successful, so as to obtain the resource transfer result. The second encrypted credential determination module 1630 is used to encrypt the resource transfer result and the information of the provider to be verified based on the preset platform private key to obtain the second encrypted credential, and send the second encrypted credential to the smart transfer intermediary so that the smart transfer intermediary forwards the second encrypted credential to the target provider, decrypts and verifies the second encrypted credential based on the preset platform public key, and performs the operation corresponding to the target order after the verification is successful.

[0135] In an optional embodiment, the first encryption credential carries first encoded data, second encoded data, and a first signature value, and the resource transfer result determination module 1620 includes: The first decoding unit is used to decode the first encoded data and the second encoded data respectively to obtain the provider information to be verified and the order information to be verified. The first signature verification result determination unit is used to obtain the first signature verification result based on the information of the provider to be verified, the order information to be verified, the first signature value, and the preset provider public key; The resource transfer result determination unit is used to perform resource transfer processing corresponding to the target order based on the information of the provider to be verified and the order information to be verified if the first verification result indicates that the verification is successful, and to obtain the resource transfer result.

[0136] In an optional embodiment, the first signature verification result determination unit includes: The first verification information generation subunit is used to generate the first verification information based on the information of the provider to be verified and the order information to be verified. The first signature verification result determination subunit is used to perform signature verification processing on the first signature-to-be-verified information based on the preset provider public key and the first signature value, and obtain the first signature verification result.

[0137] In an optional embodiment, the first signature verification result determination subunit includes: The second signature value determination subunit is used to sign the first signature information based on the preset provider's public key to obtain the second signature value; The first signature value comparison subunit is used to compare the first signature value and the second signature value to obtain the first signature verification result.

[0138] In an optional embodiment, the first encryption credential further carries a first encoding method identifier corresponding to the first encoded data and a second encoding method identifier corresponding to the second encoded data. The aforementioned first decoding unit information includes: The first decoding information determining subunit is used to determine the first decoding information corresponding to the first encoded data based on the first encoding method identifier; The second decoding information determining subunit is used to determine the second decoding information corresponding to the second encoded data based on the second encoding method identifier; The first decoding subunit is used to decode the first encoded data based on the first decoding information to obtain the information of the provider to be verified. The second decoding subunit is used to decode the second encoded data based on the second decoding information to obtain the order information to be verified.

[0139] In an optional embodiment, the second encryption credential determination module 1630 includes: The first unit for generating information to be signed is used to generate the first information to be signed based on the resource transfer result and the information of the provider to be verified. The third signature value generation unit is used to sign the first information to be signed based on the preset platform private key to obtain the third signature value; The first encoding unit is used to encode the resource transfer result and the information of the provider to be verified, respectively, to obtain the third encoded data and the fourth encoded data. The second encryption credential determination unit is used to combine the third encoded data, the fourth encoded data, and the third signature value to generate the second encryption credential.

[0140] In an optional embodiment, the first encrypted credential carries the current order identifier, and the resource transfer result determination module 1620 includes: The first historical order information acquisition unit is used to acquire first historical order information, which indicates the historical order corresponding to the historical order identifier that has been processed by the resource transfer server. The decryption unit is used to decrypt and verify the first encrypted credential based on a preset provider's public key if the first historical order information does not include the current order identifier.

[0141] Figure 17 This is a block diagram of another resource transfer request processing apparatus according to an exemplary embodiment, applied to a provider server. (Refer to...) Figure 17 The device includes: The resource transfer request receiving module 1701 is used to receive a resource transfer request for an object to be acquired triggered by an intelligent transfer intermediary. The object to be acquired is an object provided by the target provider. The resource transfer request carries the unverified order information and the unverified provider information of the target order corresponding to the object to be acquired. The first encrypted credential determination module 1720 is used to encrypt the order information to be verified and the information of the provider to be verified based on the preset provider's private key to obtain the first encrypted credential, and send the first encrypted credential to the smart transfer intermediary so that the smart transfer intermediary forwards the first encrypted credential to the resource transfer server, decrypts and verifies the first encrypted credential based on the preset provider's public key, and performs resource transfer processing corresponding to the target order after the verification is successful. The second encrypted credential receiving module 1730 is used to receive the second encrypted credential forwarded by the smart transfer intermediary. The second encrypted credential is generated by encrypting the resource transfer result of the target order and the information of the provider to be verified based on the preset platform private key. The order operation execution module 1740 is used to decrypt and verify the second encrypted credential based on the preset platform public key, and after the verification is successful, to execute the operation corresponding to the target order based on the resource transfer result.

[0142] In an optional embodiment, the first encryption credential determination module 1720 includes: The second signature-to-be-signed information generation unit is used to generate second signature-to-be-signed information based on the order information to be verified and the provider information to be verified. The first signature value determination unit is used to sign the second information to be signed based on the preset provider's private key to obtain the first signature value; The second encoding unit is used to encode the information of the provider to be verified and the information of the order to be verified respectively, to obtain the first encoded data and the second encoded data. The first encryption credential determination unit is used to combine the first encoded data, the second encoded data, and the first signature value to generate the first encryption credential.

[0143] In an optional embodiment, the second encryption credential carries third encoded data, fourth encoded data, and a third signature value, and the aforementioned order operation execution module 1740 includes: The second decoding unit is used to decode the third encoded data and the fourth encoded data respectively to obtain the resource transfer result and the information of the provider to be verified. The second signature verification result determination unit is used to obtain the second signature verification result based on the resource transfer result, the information of the provider to be verified, the third signature value, and the preset platform public key. The order operation execution unit is used to execute the operation corresponding to the target order based on the resource transfer result if the second verification result indicates that the verification is successful.

[0144] In an optional embodiment, the second signature verification result determination unit includes: The second verification information generation subunit is used to generate the second verification information based on the resource transfer result and the information of the provider to be verified. The second signature verification result determination subunit is used to perform signature verification processing on the second signature-to-be-verified information based on the preset platform public key and the third signature value, and obtain the second signature verification result.

[0145] In an optional embodiment, the second signature verification result determination subunit includes: The fourth signature value determination subunit is used to sign the second signature information based on the preset platform public key to obtain the fourth signature value; The second signature value comparison subunit is used to compare the third signature value and the fourth signature value to obtain the second signature verification result.

[0146] In an optional embodiment, the second encryption credential further carries a third encoding method identifier corresponding to the third encoded data and a fourth encoding method identifier corresponding to the fourth encoded data. The second decoding unit includes: The third decoding information determination subunit is used to determine the third decoding information corresponding to the third encoded data based on the third encoding method identifier; The fourth decoding information determination subunit is used to determine the fourth decoding information corresponding to the fourth encoded data based on the fourth encoding method identifier; The third decoding subunit is used to decode the third encoded data based on the third decoding information to obtain the resource transfer result; The fourth decoding subunit is used to decode the fourth encoded data based on the fourth decoding information to obtain the information of the provider to be verified.

[0147] In an optional embodiment, the second encrypted credential carries the current order identifier, and the order operation execution module 1740 includes: The second historical order information acquisition unit is used to acquire second historical order information, which indicates the historical order corresponding to the historical order identifier that has been processed by the provider's server. The order operation execution unit is used to decrypt and verify the second encrypted credential based on a preset platform public key if the second historical order information does not include the current order identifier.

[0148] Figure 18 This is a block diagram illustrating an electronic device for processing resource transfer requests according to an exemplary embodiment. The electronic device may be a server, and its internal structure diagram may be as follows: Figure 18As shown, the electronic device includes a processor, memory, network interface, display screen, and input devices connected via a system bus. The processor provides computing and control capabilities. The memory includes a non-volatile storage medium and internal memory. The non-volatile storage medium stores the operating system and computer programs. The internal memory provides an environment for the operation of the operating system and computer programs stored in the non-volatile storage medium. The network interface is used to communicate with external terminals via a network connection. When the computer program is executed by the processor, it implements a resource transfer request processing method. The display screen can be a liquid crystal display (LCD) or an e-ink display. The input devices can be a touch layer covering the display screen, buttons, a trackball, or a touchpad mounted on the device's casing, or an external keyboard, touchpad, or mouse.

[0149] Those skilled in the art will understand that Figure 18 The structure shown is merely a block diagram of a portion of the structure related to the present disclosure and does not constitute a limitation on the electronic device to which the present disclosure is applied. A specific electronic device may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements. In an exemplary embodiment, an electronic device is also provided, including: a processor; and a memory for storing processor-executable instructions; wherein the processor is configured to execute the instructions to implement the resource transfer request processing method as described in the embodiments of this disclosure.

[0150] In an exemplary embodiment, a computer-readable storage medium is also provided, wherein when the instructions in the storage medium are executed by a processor of an electronic device, the electronic device is enabled to perform the resource transfer request processing method of the present disclosure embodiments.

[0151] In an exemplary embodiment, a computer program product containing instructions is also provided, which, when run on a computer, causes the computer to perform the resource transfer request processing method of the present disclosure embodiments.

[0152] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. This computer program can be stored in a non-volatile computer-readable storage medium. When executed, the computer program can include the processes of the embodiments of the above methods. Any references to memory, storage, databases, or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in various forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), dual data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link DRAM (SLDRAM), RAMbus direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and RAMbus dynamic RAM (RDRAM), etc.

[0153] Other embodiments of this disclosure will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This application is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not disclosed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of this disclosure are indicated by the following claims.

[0154] It should be understood that this disclosure is not limited to the precise structures described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of this disclosure is limited only by the appended claims.

Claims

1. A method for processing resource transfer requests, characterized in that, Applied to a resource transfer server, the method includes: Receive a first encrypted credential for an object to be acquired forwarded by a smart transfer intermediary. The object to be acquired is an object provided by a target provider. The first encrypted credential is generated based on the unverified order information and unverified provider information of the target order corresponding to the object to be acquired. The first encrypted credential is decrypted and verified based on the preset provider public key corresponding to the target provider, and the resource transfer process corresponding to the target order is executed after the verification is successful to obtain the resource transfer result. The resource transfer result and the information of the provider to be verified are encrypted using a preset platform private key to obtain a second encrypted credential. The second encrypted credential is then sent to the smart transfer intermediary, which forwards the second encrypted credential to the target provider. The smart transfer intermediary decrypts and verifies the second encrypted credential using a preset platform public key, and performs the operation corresponding to the target order after successful verification.

2. The method according to claim 1, characterized in that, The first encrypted credential carries first encoded data, second encoded data, and a first signature value. The first encrypted credential is decrypted and verified based on the preset provider public key corresponding to the target provider. Upon successful verification, the resource transfer process corresponding to the target order is executed, resulting in the following resource transfer outcome: The first encoded data and the second encoded data are decoded respectively to obtain the provider information to be verified and the order information to be verified. Based on the information of the provider to be verified, the order information to be verified, the first signature value, and the preset provider public key, the first signature verification result is obtained; If the first verification result indicates that the verification is successful, based on the information of the provider to be verified and the information of the order to be verified, the resource transfer process corresponding to the target order is executed to obtain the resource transfer result.

3. The method according to claim 2, characterized in that, The process of obtaining the first signature verification result based on the provider information to be verified, the order information to be verified, the first signature value, and the preset provider public key includes: Based on the information of the provider to be verified and the information of the order to be verified, a first signature to be verified information is generated; The first signature verification information is processed based on the preset provider public key and the first signature value to obtain the first signature verification result.

4. The method according to claim 3, characterized in that, The step of verifying the first signature information based on the preset provider public key and the first signature value to obtain the first signature verification result includes: The first signature information to be verified is signed based on the preset provider's public key to obtain a second signature value; By comparing the first signature value and the second signature value, the first signature verification result is obtained.

5. The method according to claim 2, characterized in that, The first encryption credential also carries a first encoding method identifier corresponding to the first encoded data and a second encoding method identifier corresponding to the second encoded data. The step of decoding the first encoded data and the second encoded data respectively to obtain the provider information to be verified and the order information to be verified includes: Based on the first encoding method identifier, determine the first decoding information corresponding to the first encoded data; Based on the second encoding method identifier, determine the second decoding information corresponding to the second encoded data; Based on the first decoding information, the first encoded data is decoded to obtain the information of the provider to be verified; Based on the second decoding information, the second encoded data is decoded to obtain the order information to be verified.

6. The method according to claim 1, characterized in that, The step of encrypting the resource transfer result and the information of the provider to be verified based on a preset platform private key to obtain the second encryption credential includes: Based on the resource transfer result and the information of the provider to be verified, first signature information is generated; The first information to be signed is signed based on the preset platform private key to obtain a third signature value; The resource transfer result and the information of the provider to be verified are encoded respectively to obtain third encoded data and fourth encoded data; The third encoded data, the fourth encoded data, and the third signature value are combined to generate the second encryption credential.

7. The method according to claim 1, characterized in that, The first encrypted credential carries the current order identifier, and the step of decrypting and verifying the first encrypted credential based on the preset provider public key corresponding to the target provider includes: Obtain first historical order information, which indicates the historical order corresponding to the historical order identifier that has been processed by the resource transfer server; If the first historical order information does not include the current order identifier, the first encrypted credential is decrypted and verified based on the preset provider public key.

8. A method for processing resource transfer requests, characterized in that, Applied to a provider server, the method includes: Receive a resource transfer request for an object to be acquired, triggered by an intelligent transfer intermediary. The object to be acquired is an object provided by a target provider. The resource transfer request carries the unverified order information and unverified provider information of the target order corresponding to the object to be acquired. The order information to be verified and the information of the provider to be verified are encrypted based on the preset provider's private key to obtain a first encrypted credential. The first encrypted credential is then sent to the smart transfer intermediary so that the smart transfer intermediary forwards the first encrypted credential to the resource transfer server. The first encrypted credential is decrypted and verified based on the preset provider's public key. After the verification is successful, the resource transfer process corresponding to the target order is executed. Receive the second encrypted credential forwarded by the intelligent transfer intermediary. The second encrypted credential is generated by encrypting the resource transfer result of the target order and the information of the provider to be verified based on a preset platform private key. The second encrypted credential is decrypted and verified based on the preset platform public key, and after successful verification, the operation corresponding to the target order is executed based on the resource transfer result.

9. The method according to claim 8, characterized in that, The step of encrypting the order information to be verified and the provider information to be verified based on a preset provider private key to obtain the first encryption credential includes: Based on the order information to be verified and the provider information to be verified, a second signature information is generated; The second information to be signed is signed based on the preset provider's private key to obtain a first signature value; The provider information to be verified and the order information to be verified are encoded respectively to obtain first encoded data and second encoded data; The first encoded data, the second encoded data, and the first signature value are combined and processed to generate the first encrypted credential.

10. The method according to claim 8, characterized in that, The second encrypted credential carries third encoded data, fourth encoded data, and a third signature value. The step of decrypting and verifying the second encrypted credential based on a preset platform public key, and then executing the operation corresponding to the target order based on the resource transfer result after successful verification, includes: The third encoded data and the fourth encoded data are decoded respectively to obtain the resource transfer result and the information of the provider to be verified. Based on the resource transfer result, the information of the provider to be verified, the third signature value, and the preset platform public key, a second signature verification result is obtained; If the second verification result indicates that the verification is successful, the operation corresponding to the target order is executed based on the resource transfer result.

11. The method according to claim 10, characterized in that, The process of obtaining the second signature verification result based on the resource transfer result, the information of the provider to be verified, the third signature value, and the preset platform public key includes: Based on the resource transfer result and the information of the provider to be verified, a second signature to be verified is generated. The second signature information to be verified is processed based on the preset platform public key and the third signature value to obtain the second signature verification result.

12. The method according to claim 11, characterized in that, The verification process based on the preset platform public key and the third signature value to obtain the second verification result includes: The second signature-to-be-verified information is signed based on the preset platform public key to obtain a fourth signature value; By comparing the third signature value and the fourth signature value, the second signature verification result is obtained.

13. The method according to claim 10, characterized in that, The second encryption credential also carries a third encoding method identifier corresponding to the third encoded data and a fourth encoding method identifier corresponding to the fourth encoded data. The step of decoding the third encoded data and the fourth encoded data respectively to obtain the resource transfer result and the information of the provider to be verified includes: Based on the third encoding method identifier, the third decoding information corresponding to the third encoded data is determined; Based on the fourth encoding method identifier, the fourth decoding information corresponding to the fourth encoded data is determined; Based on the third decoding information, the third encoded data is decoded to obtain the resource transfer result; Based on the fourth decoding information, the fourth encoded data is decoded to obtain the information of the provider to be verified.

14. The method according to claim 8, characterized in that, The second encrypted credential carries the current order identifier, and the decryption and verification of the second encrypted credential based on the preset platform public key includes: Obtain second historical order information, which indicates the historical order corresponding to the historical order identifier that has been processed by the provider server; If the second historical order information does not include the current order identifier, the second encrypted credential is decrypted and verified based on the preset platform public key.

15. A resource transfer request processing apparatus, characterized in that, The device, applied to a resource transfer server, includes: The first encrypted credential receiving module is used to receive a first encrypted credential for an object to be acquired forwarded by the smart transfer intermediary. The object to be acquired is an object provided by the target provider. The first encrypted credential is generated based on the unverified order information and unverified provider information of the target order corresponding to the object to be acquired. The resource transfer result determination module is used to decrypt and verify the first encrypted credential based on the preset provider public key corresponding to the target provider, and after the verification is successful, to perform the resource transfer processing corresponding to the target order and obtain the resource transfer result. The second encrypted credential determination module is used to encrypt the resource transfer result and the information of the provider to be verified based on a preset platform private key to obtain a second encrypted credential, and send the second encrypted credential to the smart transfer intermediary so that the smart transfer intermediary forwards the second encrypted credential to the target provider, decrypts and verifies the second encrypted credential based on a preset platform public key, and performs the operation corresponding to the target order after the verification is successful.

16. A resource transfer request processing apparatus, characterized in that, Applied to a provider server, the apparatus includes: The resource transfer request receiving module is used to receive a resource transfer request for an object to be acquired triggered by an intelligent transfer intermediary. The object to be acquired is an object provided by a target provider. The resource transfer request carries the unverified order information and unverified provider information of the target order corresponding to the object to be acquired. The first encrypted credential determination module is used to encrypt the order information to be verified and the information of the provider to be verified based on the preset provider's private key to obtain the first encrypted credential, and send the first encrypted credential to the smart transfer intermediary so that the smart transfer intermediary forwards the first encrypted credential to the resource transfer server, decrypts and verifies the first encrypted credential based on the preset provider's public key, and executes the resource transfer processing corresponding to the target order after the verification is successful. The second encrypted credential receiving module is used to receive the second encrypted credential forwarded by the smart transfer intermediary. The second encrypted credential is generated by encrypting the resource transfer result of the target order and the information of the provider to be verified based on the preset platform private key. The order operation execution module is used to decrypt and verify the second encrypted credential based on the preset platform public key, and after the verification is successful, execute the operation corresponding to the target order based on the resource transfer result.

Images