CN104346723B - Security information interaction system, device and method - Google Patents

Abstract

The present invention proposes a security information interaction system, device and method. The method includes: a security information interaction terminal constructs a security information interaction request based on user instructions and determines to interact with the security information according to the security information interaction request. Requesting the associated access number, and then dialing the determined access number to transmit the security information interaction request to the data processing server in the form of a data message; An alarm message is generated when the actual access number of the security information interaction request is different from the access number associated with the security information interaction request determined by the security information interaction terminal. The safety information interaction system, device and method disclosed in the invention have high safety.

Description

Security information interaction system, device and method

technical field

The present invention relates to an information interaction system, equipment and method, and more specifically, to a security information interaction system, equipment and method.

Background technique

At present, with the increasingly wide application of computers and networks and the increasing variety of businesses in different fields, systems for security information interaction (that is, information interaction with high security requirements, such as transaction processing in the financial field) , equipment and methods are becoming more and more important.

The basic working process of the existing technical solutions is as follows: a security information interaction terminal (such as a POS machine) constructs a security information interaction request based on user instructions, and then dials a data processing server (such as a transaction acceptance access device in the financial field) The associated access number is used to transmit the security information interaction request to the data processing server, so as to complete the subsequent security information interaction process.

However, the existing technical solutions have the following problems: the security information interaction terminal may be illegally used in different places, resulting in potential security risks. However, this method has the following problems: illegal users can avoid monitoring through interceptors and diverters, for example, the security information exchange of mobile phones (that is, remote places) When the terminal dials the access number, the dialer set between the security information interaction terminal and the telephone network forwards the access request to the dialer located at the original registration place of the security information interaction terminal, the The diverter then transmits the access request to the data processing server associated with the original access number by dialing the original access number of the security information interaction terminal, thereby avoiding the monitoring of the access number.

Therefore, there is a need to provide a security information interaction system, device and method that have high security and can prevent illegal use of security information interaction terminals in different places.

Contents of the invention

In order to solve the problems in the above prior art solutions, the present invention proposes a security information interaction system, device and method that have high security and can prevent illegal use of security information interaction terminals in different places.

The purpose of the present invention is achieved through the following technical solutions:

A security information interaction system, the security information interaction system comprising:

A security information interaction terminal, wherein the security information interaction terminal constructs a security information interaction request based on a user instruction and determines an access number associated with the security information interaction request according to the security information interaction request, and then dials The determined access number is used to transmit the security information interaction request to the data processing server in the form of a data packet, wherein the data packet includes the security information interaction request and the determined An access number associated with a security information interaction request, and the security information interaction request includes data associated with the security information interaction to be processed;

a data processing server, the data processing server parses the received data message to obtain the access number associated with the security information interaction request, and determines the actual access number used to transmit the security information interaction request Whether the number is the same as the access number associated with the security information interaction request determined by the security information interaction terminal, and when it is determined that the actual access number used to transmit the security information interaction request is the same as An alarm message is generated when the access numbers associated with the security information interaction request determined by the security information interaction terminal are different.

In the solution disclosed above, preferably, the security information interaction terminal further includes:

a main controller, the main controller constructs a security information interaction request based on a user instruction and sends an access number determination instruction to the access number determination unit, and after receiving the access number sent back by the access number determination unit Dial the determined access number to transmit the security information interaction request to the data processing server;

an access number determining unit, the access number determining unit determines the access number associated with the security information interaction request according to the security information interaction request after receiving the access number determination instruction, and The determined access number is communicated back to the master controller.

In the solutions disclosed above, preferably, the access number determining unit determines the access number associated with the security information interaction request in the following manner: (1) extracting from the security information interaction request Part of the data associated with the security information interaction to be processed and converted into a continuous string of numbers; (2) Transform the string of numbers using a predetermined character conversion table; (3) Convert the converted performing a shift operation on the digital string; (4) determining the access number associated with the security information interaction request based on the shifted digital string.

In the solutions disclosed above, preferably, the predetermined character conversion table defines a one-to-one correspondence between each numeric character and the converted character, and wherein each converted character is different.

In the solution disclosed above, preferably, the access number determining unit stores three preset access numbers, and randomly determines the number of access numbers related to the security information based on the shifted digital string in the following manner: The access number associated with the interaction request: perform a modulo 3 operation on the value represented by the shifted number string, and if the operation result is 0, determine the first access number as related to the security information interaction request If the operation result is 1, determine the second access number as the access number associated with the security information interaction request; if the operation result is 2, determine the third access number is the access number associated with the security information interaction request.

In the solution disclosed above, preferably, the main controller transmits the security information interaction request to the data processing server in the following manner: (1) combining the determined access number with the pending Connecting a part of the data associated with the security information exchange to form a character string; (2) encrypting the character string; (3) constructing a data message including the encrypted character string and the security information exchange request, And transmit the data packet to the data processing server.

In the solutions disclosed above, preferably, after receiving the data message, the data processing server decrypts the encrypted character string to obtain the access number determined by the security information interaction terminal, and sends the The access number determined by the security information interaction terminal is compared with the actual access number used to transmit the data message, and if the access number determined by the security information interaction terminal is the same as the access number used to transmit the data message If the actual access numbers of the message are different, an alarm message will be generated.

The purpose of the present invention can also be achieved through the following technical solutions:

A security information interaction terminal, wherein the security information interaction terminal is capable of constructing a security information interaction request based on a user instruction and determining an access number associated with the security information interaction request according to the security information interaction request, and then dialing the determined access number to transmit the security information interaction request to the data processing server in the form of a data message, wherein the data message includes the security information interaction request and the determined and The security information interaction request is associated with an access number, and the security information interaction request includes data associated with the security information interaction to be processed.

The purpose of the present invention can also be achieved through the following technical solutions:

A data processing server, the data processing server can analyze the received data message from the security information interaction terminal to obtain the access number associated with the security information interaction request, and determine the Whether the actual access number of the information interaction request is the same as the access number associated with the security information interaction request determined by the security information interaction terminal, and when it is determined that the access number used to transmit the security information interaction An alarm message is generated when the actual requested access number is different from the access number associated with the security information interaction request determined by the security information interaction terminal.

The purpose of the present invention can also be achieved through the following technical solutions:

A safety information interaction method, said method comprising the following steps:

(A1) The security information interaction terminal constructs a security information interaction request based on user instructions, determines an access number associated with the security information interaction request according to the security information interaction request, and then dials the determined access number number to transmit the security information interaction request to the data processing server in the form of a data packet, wherein the data packet includes the security information interaction request and the determined information related to the security information interaction request. connected access number, and the security information interaction request includes data associated with the security information interaction to be processed;

(A2) The data processing server parses the received data message to obtain the access number associated with the security information interaction request, and determines the actual access number used to transmit the security information interaction request whether it is the same as the access number associated with the security information interaction request determined by the security information interaction terminal, and when it is determined that the actual access number used to transmit the security information interaction request An alarm message is generated when the access numbers determined by the security information interaction terminal and associated with the security information interaction request are different.

The security information interaction system, device and method disclosed in the present invention have the following advantages: since it is possible to find in time whether the security information interaction terminal is being illegally used in a different place, it has significantly improved security.

Description of drawings

With reference to the accompanying drawings, the technical features and advantages of the present invention will be better understood by those skilled in the art, wherein:

FIG. 1 is a schematic structural diagram of a security information interaction system according to an embodiment of the present invention;

Fig. 2 is a flowchart of a security information interaction method according to an embodiment of the present invention.

Detailed ways

Fig. 1 is a schematic structural diagram of a security information interaction system according to an embodiment of the present invention. As shown in FIG. 1 , the security information interaction system disclosed in the present invention includes a security information interaction terminal 1 and a data processing server 2 . Wherein, the security information interaction terminal 1 constructs a security information interaction request based on user instructions, determines an access number associated with the security information interaction request according to the security information interaction request, and then dials the determined Access the number to transmit the security information interaction request to the data processing server 2 in the form of a data message, wherein the data message includes the security information interaction request and the determined The interaction requests an associated access number, and the security information interaction request includes data associated with the security information interaction to be processed (for example, transaction information in the financial field). The data processing server 2 parses the received data message to obtain the access number associated with the security information interaction request, and judges whether the actual access number used to transmit the security information interaction request is consistent with The access number associated with the security information interaction request determined by the security information interaction terminal 1 is the same, and when it is determined that the actual access number used to transmit the security information interaction request is the same as the access number associated with the security information interaction request An alarm message is generated when the access numbers associated with the security information interaction request determined by the security information interaction terminal 1 are different.

Preferably, in the security information interaction system disclosed in the present invention, the security information interaction terminal 1 further includes a main controller 3 and an access number determination unit 4 . Wherein, the main controller 3 constructs a security information interaction request based on a user instruction and sends an access number determination instruction to the access number determination unit 4, and upon receiving the access number determination unit 4 sent back Then dial the determined access number to transmit the security information interaction request to the data processing server 2 . The access number determination unit 4 determines the access number associated with the security information interaction request according to the security information interaction request after receiving the access number determination instruction, and sends the determined access number to The number is sent back to the master controller 3.

Preferably, in the security information interaction system disclosed in the present invention, the access number determination unit 4 determines the access number associated with the security information interaction request in the following manner: (1) from the security Extract part of the data associated with the security information interaction to be processed (such as the last 4 digits of the transaction card number and the last 4 digits of the transaction time) from the security information interaction request and convert it into a continuous digital string (such as the transaction The last 4 digits of the card number and the last 4 digits of the transaction time are linked to form a digital string); (2) Use the predetermined character conversion table to convert the digital string; (3) Shift the converted digital string Bit operation (for example, shifting the end of the character string to the first character of the character string); (4) determining the access number associated with the security information interaction request based on the shifted number character string.

Preferably, in the security information interaction system disclosed in the present invention, the predetermined character conversion table defines a one-to-one correspondence between each numeric character and the converted character (for example, the converted character corresponding to the numeric character 0 is 3 , the transformation character corresponding to the number character 2 is 7, etc.), and wherein each transformation character is different.

Preferably, in the security information interaction system disclosed in the present invention, the access number determining unit 4 stores three pre-set access numbers, and randomly determines based on the shifted digital string in the following manner The access number associated with the security information interaction request: perform a modulo 3 operation on the value represented by the shifted number string (that is, divide by 3 to obtain a remainder), and if the operation result is 0, the first determining the access number as the access number associated with the security information interaction request, and if the operation result is 1, determining the second access number as the access number associated with the security information interaction request, If the calculation result is 2, determine the third access number as the access number associated with the security information interaction request.

Preferably, in the security information interaction system disclosed in the present invention, the main controller 3 transmits the security information interaction request to the data processing server 2 in the following manner: (1) the determined interface (2) Encrypt the string; (3) Construct a string containing the encrypted character string and the data packet of the security information interaction request, and transmit the data packet to the data processing server 2.

Preferably, in the security information interaction system disclosed in the present invention, after receiving the data message, the data processing server 2 decrypts the encrypted character string to obtain the information determined by the security information interaction terminal 1. access number, and compare the access number determined by the security information interaction terminal 1 with the actual access number used to transmit the data message, and if the access number determined by the security information interaction terminal 1 If the access number is different from the actual access number used to transmit the data message, an alarm message will be generated (that is, the security information interaction terminal may be being illegally used in a different place).

It can be seen from the above that the security information interaction system disclosed in the present invention has the following advantages: since it can promptly find out whether the security information interaction terminal is being illegally used in a different place, it has significantly improved security.

As shown in Fig. 1, the present invention discloses a security information interaction terminal 1, the security information interaction terminal 1 can construct a security information interaction request based on user instructions and determine the An access number associated with the security information interaction request, and then dialing the determined access number to transmit the security information interaction request to the data processing server 2 in the form of a data message, wherein the data message including the security information interaction request and the determined access number associated with the security information interaction request, and the security information interaction request includes data associated with the security information interaction to be processed (such as transaction information in the financial field).

Preferably, the security information interaction terminal disclosed in the present invention further includes a main controller 3 and an access number determination unit 4 . Wherein, the main controller 3 constructs a security information interaction request based on a user instruction and sends an access number determination instruction to the access number determination unit 4, and upon receiving the access number determination unit 4 sent back Then dial the determined access number to transmit the security information interaction request to the data processing server 2 . The access number determination unit 4 determines the access number associated with the security information interaction request according to the security information interaction request after receiving the access number determination instruction, and sends the determined access number to The number is sent back to the master controller 3.

Preferably, in the security information interaction terminal 1 disclosed in the present invention, the access number determining unit 4 determines the access number associated with the security information interaction request in the following manner: (1) from the Extract part of the data associated with the security information interaction to be processed (such as the last 4 digits of the transaction card number and the last 4 digits of the transaction time) in the security information interaction request and convert it into a continuous digital string (such as the The last 4 digits of the transaction card number and the last 4 digits of the transaction time are linked into a digital string); (2) use the predetermined character conversion table to convert the digital string; (3) convert the converted digital string A shift operation (for example, shifting the end of the character string to the first character of the character string); (4) determining the access number associated with the security information interaction request based on the shifted number character string.

Preferably, in the security information interaction terminal disclosed in the present invention, the predetermined character conversion table defines a one-to-one correspondence between each numeric character and the converted character (for example, the converted character corresponding to the numeric character 0 is 3 , the transformation character corresponding to the number character 2 is 7, etc.), and wherein each transformation character is different.

Preferably, in the security information interaction terminal disclosed in the present invention, the access number determining unit 4 stores three preset access numbers, and randomly determines based on the shifted digital string in the following manner The access number associated with the security information interaction request: perform a modulo 3 operation on the value represented by the shifted number string (that is, divide by 3 to obtain a remainder), and if the operation result is 0, the first determining the access number as the access number associated with the security information interaction request, and if the operation result is 1, determining the second access number as the access number associated with the security information interaction request, If the calculation result is 2, determine the third access number as the access number associated with the security information interaction request.

Preferably, in the security information interaction terminal 1 disclosed in the present invention, the main controller 3 transmits the security information interaction request to the data processing server 2 in the following manner: (1) the determined The access number is concatenated with a part of the data associated with the security information interaction to be processed (for example, the last 4 digits of the transaction time) to form a string; (2) encrypt the string; (3) construct a string containing The encrypted character string and the data packet of the security information exchange request, and transmit the data packet to the data processing server 2 .

As shown in FIG. 1 , the present invention discloses a data processing server 2. The data processing server 2 parses the received data message from the security information interaction terminal 1 to obtain the interface associated with the security information interaction request. and determine whether the actual access number used to transmit the security information interaction request is the same as the access number associated with the security information interaction request determined by the security information interaction terminal 1, and generated when it is determined that the actual access number used to transmit the security information interaction request is different from the access number associated with the security information interaction request determined by the security information interaction terminal 1 Warning information (that is, the security information interaction terminal may be being illegally used in a different place).

Fig. 2 is a flowchart of a security information interaction method according to an embodiment of the present invention. As shown in FIG. 2 , the security information interaction method disclosed in the present invention includes the following steps: (A1) The security information interaction terminal constructs a security information interaction request based on user instructions and determines the connection with the security information interaction request according to the security information interaction request. An access number associated with the security information interaction request, and then dialing the determined access number to transmit the security information interaction request to the data processing server in the form of a data message, wherein the data message includes The security information interaction request and the determined access number associated with the security information interaction request, and the security information interaction request includes data associated with the security information interaction to be processed (such as financial transaction information in the field); (A2) the data processing server parses the received data message to obtain the access number associated with the security information interaction request, and determines the access number used to transmit the security information interaction Whether the actual requested access number is the same as the access number associated with the security information interaction request determined by the security information interaction terminal, and when it is determined that the An alarm message is generated when the actual access number is different from the access number associated with the security information interaction request determined by the security information interaction terminal.

Preferably, in the security information interaction method disclosed in the present invention, the step (A1) further includes: determining the access number associated with the security information interaction request in the following manner: (1) from the Extract part of the data associated with the security information interaction to be processed (such as the last 4 digits of the transaction card number and the last 4 digits of the transaction time) in the security information interaction request and convert it into a continuous digital string (such as the The last 4 digits of the transaction card number and the last 4 digits of the transaction time are linked into a digital string); (2) use the predetermined character conversion table to convert the digital string; (3) convert the converted digital string A shift operation (for example, shifting the end of the character string to the first character of the character string); (4) determining the access number associated with the security information interaction request based on the shifted number character string.

Preferably, in the security information interaction method disclosed in the present invention, the predetermined character conversion table defines a one-to-one correspondence between each numeric character and the converted character (for example, the converted character corresponding to the numeric character 0 is 3 , the transformation character corresponding to the number character 2 is 7, etc.), and wherein each transformation character is different.

Preferably, in the security information interaction method disclosed in the present invention, the step (A1) further includes: storing three preset access numbers, and randomly Determine the access number associated with the security information interaction request: perform a modulo 3 operation on the value represented by the shifted digital string (that is, divide by 3 to obtain a remainder), and if the operation result is 0, then An access number is determined as the access number associated with the security information interaction request, and if the operation result is 1, a second access number is determined as the access number associated with the security information interaction request , if the operation result is 2, determine the third access number as the access number associated with the security information interaction request.

Preferably, in the security information interaction method disclosed in the present invention, the step (A1) further includes: transmitting the security information interaction request to the data processing server in the following manner: (1) the determined The access number and a part of the data associated with the security information interaction to be processed (for example, the last 4 digits of the transaction time) are concatenated to form a string; (2) encrypt the string; (3) construct a string containing The encrypted character string and the security information exchange request data packet, and transmit the data packet to the data processing server.

Preferably, in the security information interaction method disclosed in the present invention, the step (A2) further includes: after receiving the data message, the data processing server decrypts the encrypted character string to obtain the access number determined by the security information interaction terminal, and compare the access number determined by the security information interaction terminal with the actual access number used to transmit the data message, and if determined by the security If the access number determined by the information interaction terminal is different from the actual access number used to transmit the data message, an alarm message will be generated (that is, the security information interaction terminal may be being illegally used in a different place).

It can be seen from the above that the security information interaction method disclosed in the present invention has the following advantages: since it can be found in time whether the security information interaction terminal is being illegally used in a different place, it has significantly improved security.

Although the present invention has been described through the above-mentioned preferred embodiments, its implementation forms are not limited to the above-mentioned embodiments. It should be appreciated that those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention.

Claims (7)

1. a kind of security information interaction system, the security information interaction system includes：

Safety information interactive terminal, the safety information interactive terminal is based on user instruction construction safety information interaction please It asks and access code associated with the safety information interaction request is determined according to the safety information interaction request, with And access code determined by then dialing in the form of data message by the safety information interaction request to be transmitted to number According to processing server, wherein, the data message includes the safety information interaction request and the identified and peace Full property information exchange asks associated access code, and the safety information interaction request includes and pending safety The property associated data of information exchange；

Data processing server, the data message that data processing server parsing receives is to obtain and the safety is believed The associated access code of interaction request is ceased, and judges the practical Number for access for transmitting the safety information interaction request Code whether with the Number for access associated with the safety information interaction request that is determined by the safety information interactive terminal Code it is identical and when judge for transmit the practical access code of the safety information interaction request with by the safety Property the access code associated with the safety information interaction request that determines of information interactive terminal generate alarm when differing Information,

Wherein, the safety information interactive terminal further comprises：

Master controller, the master controller construct safety information interaction request based on user instruction and determine list to access code Member sends access code determine instruction and is dialed after the access code that the access code determination unit sends back is received Identified access code by the safety information interaction request to be transmitted to data processing server；

Access code determination unit, the access code determination unit is after the access code determine instruction is received according to institute It states safety information interaction request and determines access code associated with the safety information interaction request, and by determined by Access code sends back the master controller,

Wherein, the access code determination unit determines connect associated with the safety information interaction request as follows Enter number：（1）The data that extraction joins with pending safety information intercorrelation from the safety information interaction request A part and convert thereof into continuous digit strings；（2）Using scheduled character transformation table to the digit strings It is converted；（3）Digit strings after transformation are subjected to shifting function；（4）Based on the digit strings after displacement determine with The associated access code of safety information interaction request.

2. security information interaction system according to claim 1, which is characterized in that the scheduled character transformation table is determined One-to-one relationship between adopted each numerical character and transformation character, and wherein, each character that converts differs.

3. security information interaction system according to claim 2, which is characterized in that the access code determination unit is deposited Store up preset three access codes, and as follows based on the digit strings after displacement be randomly determined with it is described The associated access code of safety information interaction request：Mould 3 is carried out to the numerical value represented by the digit strings after displacement to transport It calculates, if operation result is 0, the first access code is determined as access associated with the safety information interaction request Second access code if operation result is 1, is determined as connect associated with the safety information interaction request by number Enter number, if operation result is 2, third access code is determined as associated with the safety information interaction request Access code.

4. security information interaction system according to claim 3, which is characterized in that the master controller is as follows The safety information interaction request is transmitted to the data processing server：（1）By identified access code and with treating A part for the data of the safety information intercorrelation connection of processing is joined to form character string；（2）The character is serially added It is close；（3）Data message of the construction comprising encrypted character string and the safety information interaction request, and by the data Message is transmitted to the data processing server.

5. security information interaction system according to claim 4, which is characterized in that the data processing server is connecing The encrypted character string is decrypted to obtain the access determined by safety information interactive terminal after receiving the data message Number, and by the access code determined by safety information interactive terminal and for transmitting the reality of the data message Access code compares, and if the access code determined by safety information interactive terminal transmits the datagram with being used for The practical access code of text differs, then generates warning information.

6. a kind of safety information interactive terminal, the safety information interactive terminal can be based on user instruction and construct safety Information exchange is asked and is determined according to the safety information interaction request associated with the safety information interaction request Access code and then dial determined by access code with by the safety information interaction request with the shape of data message Formula is transmitted to data processing server, wherein, the data message includes the safety information interaction request and determines Access code associated with the safety information interaction request, and the safety information interaction request include with treating The data of the safety information intercorrelation connection of processing,

Wherein, the safety information interactive terminal further comprises：

Master controller, the master controller construct safety information interaction request based on user instruction and determine list to access code Member sends access code determine instruction and is dialed after the access code that the access code determination unit sends back is received Identified access code by the safety information interaction request to be transmitted to data processing server；

Access code determination unit, the access code determination unit is after the access code determine instruction is received according to institute It states safety information interaction request and determines access code associated with the safety information interaction request, and by determined by Access code sends back the master controller,

Wherein, the access code determination unit determines connect associated with the safety information interaction request as follows Enter number：（1）The data that extraction joins with pending safety information intercorrelation from the safety information interaction request A part and convert thereof into continuous digit strings；（2）Using scheduled character transformation table to the digit strings It is converted；（3）Digit strings after transformation are subjected to shifting function；（4）Based on the digit strings after displacement determine with The associated access code of safety information interaction request.

7. a kind of safety information interaction method, the method includes the following steps：

（A1）Safety information interactive terminal is based on user instruction construction safety information interaction request and according to the safety Information exchange request determines access code associated with the safety information interaction request and then dials identified Access code the safety information interaction request is transmitted to data processing server in the form of data message, wherein, The data message includes the safety information interaction request and identified with the safety information interaction request phase Associated access code, and the safety information interaction request includes what is joined with pending safety information intercorrelation Data；

（A2）The data message that data processing server parsing receives is to obtain and the safety information interaction request Associated access code, and judge for transmit the safety information interaction request practical access code whether with by Determine identical with the associated access code of safety information interaction request of the safety information interactive terminal and When judging for transmitting the practical access code of the safety information interaction request with being interacted by the safety information The access code associated with the safety information interaction request that terminal determines generates warning information when differing,

Wherein, access code associated with the safety information interaction request is determined as follows：（1）From the safety Property information exchange request in extraction and the data of pending safety information intercorrelation connection a part and convert thereof into Continuous digit strings；（2）The digit strings are converted using scheduled character transformation table；（3）After converting Digit strings carry out shifting function；（4）It determines to interact with the safety information based on the digit strings after displacement and ask Seek associated access code.