CN107944837A

CN107944837A - A kind of authority processing method, device and system

Info

Publication number: CN107944837A
Application number: CN201711352445.6A
Authority: CN
Inventors: 李凤华; 李晖; 谢绒娜; 朱辉
Original assignee: GUANGZHOU TIANNING INFORMATION TECHNOLOGY Co Ltd
Current assignee: GUANGZHOU TIANNING INFORMATION TECHNOLOGY Co Ltd
Priority date: 2017-12-15
Filing date: 2017-12-15
Publication date: 2018-04-20

Abstract

This application discloses a kind of authority processing method, device and system, including：Generate effective electron authority；Store the effective electron authority of generation；Receive the electronics authority reimbursement instruction of electronics authority application terminal, instruct corresponding electronics authority to submit an expense account electronics authority reimbursement in the effective electron authority of storage, and generate the actual reimbursement of electronics authority and send electron authority application terminal with Macro or mass analysis result to be submitted an expense account.Through the above scheme, the with no paper circulation of whole process of electronics authority is realized, so as to improve the treatment effeciency of electronics authority.

Description

A kind of authority processing method, device and system

Technical field

This application involves electronics authority applied technical field, espespecially a kind of authority processing method, device and system.

Background technology

With information technology, e-commerce, electronic transaction, IT application in enterprises development, electronics authority gradually substitutes tradition Papery authority, application is more and more extensive, authority Life cycle circulate processing procedure in, paid by electronics authority Clearing and accounting etc. become a kind of development trend.In electronics authority application at present, whole process does not fully achieve with no paper at all, only real Now issue the electronization of link, when reimbursement stills need electronics authority being printed as papery authority, and bookkeeping voucher information is also without real Existing electronization, also needs to be printed as paper document.On the other hand, electronics authority application in also exist with finance merge difficulty, The problems such as repeating to submit an expense account.Electronics authority application environment is ripe far away, can not with the declaring dutiable goods of enterprise, finance, audit, the business such as check Depth integration, is not carried out whole with no paper circulation.

The content of the invention

This application provides a kind of authority processing method, device and system, can realize that the whole process of electronics authority is with no paper Circulation, so as to improve the treatment effeciency of electronics authority.

This application provides a kind of authority processing method, including：

Generate effective electron authority；

Store the effective electron authority of generation；

The electronics authority reimbursement instruction of electronics authority application terminal is received, to electronics authority in the effective electron authority of storage Reimbursement instructs corresponding electronics authority to be submitted an expense account, and generates the actual reimbursement of electronics authority and sent with Macro or mass analysis result to be submitted an expense account Electron authority application terminal.

Optionally, before the electronics authority reimbursement instruction for receiving electronics authority application terminal, this method further includes：

The electronics authority reimbursement request of the electronics authority application terminal is received, is inquired about in the effective electron authority of storage Corresponding electronics authority is asked in the electronics authority reimbursement, and is generated electronics authority reimbursement inquiry Macro or mass analysis result and be sent to electricity Sub- authority application terminal.

Optionally, the generation effective electron authority includes：

According to blank electronic authority identification information and electronics authority issuing organization public key generation blank electronic authority；According to sky The sub- authority of white appliances and effective electron authority identification information generation effective electron authority；

Wherein, blank electronic authority identification information includes the first electronics authority information and issuing organization is signed, effective electron Authority identification information includes the second electronics authority information and the electronics authority side of issuing signature；

Alternatively, according to the first electronics authority information, electronics authority issuing organization public key, issuing organization signature and effective electron Authority identification information generates effective electron authority.

Optionally, the reimbursement of electronics authority instructs corresponding electronics authority to report in the effective electron authority of described pair of storage Pin includes：

Instruct corresponding electronics authority to audit electronics authority reimbursement, the electronics authority that examination ＆ verification passes through is carried out Reimbursement.

Optionally, it is described to instruct corresponding electronics authority to carry out examination ＆ verification the reimbursement of electronics authority to include：

The second electronics authority bookkeeping voucher information that the electronics authority reimbursement instructs corresponding electronics authority is generated, to institute The second electronics authority bookkeeping voucher information is stated to be audited.

Optionally, the generation electronics authority reimbursement instructs the second electronics authority bookkeeping voucher letter of corresponding electronics authority Further included before breath：

The true or false of the electronics authority is verified；

The generation electronics authority reimbursement instructs the second electronics authority bookkeeping voucher information of corresponding electronics authority to include：

The second electronics authority bookkeeping voucher letter is generated for the electronics authority do not submitted an expense account effectively according to electronics authority state Breath.

Optionally, this method further includes：

After receiving the authority request of processing electronics, the state of the electronics authority is inquired about；

It is to handle the corresponding predetermined state of electronics authority request with described to determine the electronics authority state, then to the electricity Sub- authority is handled accordingly；

Update the state of the electronics authority.

Optionally, further included before this method：

After receiving electronics authority diverse identities registration request, taken according in the electronics authority diverse identities registration request The information generation entity diverse identities ring of band；

After receiving the request handled electronics authority diverse identities, according to what is carried in the certification request received Information and the entity diverse identities ring obtain corresponding authentication mode and are authenticated.

Optionally, this method further includes：

Behavior supervision is carried out to the processing procedure of the electronics authority；

Wherein, the processing procedure of the electronics authority includes at least one of：

The generating process of the electronics authority, the storing process of the electronics authority, the electronics authority reimbursement process, The state management process of the electronics authority, electronics authority diverse identities management process.

Optionally, the processing procedure to electronics authority, which carries out behavior supervision, includes：

The behavior supervision information of the processing procedure of the electronics authority is obtained, behavior supervision information collect point Analysis obtains abnormal behaviour Macro or mass analysis result.

The embodiment of the present invention proposes a kind of authority processing unit, including：

Generation module, for generating effective electron authority；

Memory module, for storing the effective electron authority of generation；

Module is submitted an expense account, the electronics authority for receiving electronics authority application terminal submits an expense account instruction, to the effective electron of storage The reimbursement of electronics authority instructs corresponding electronics authority to be submitted an expense account in authority, and generates the actual reimbursement of electronics authority with treating that reimbursement converges Bulk analysis result sends electron authority application terminal.

Optionally, the reimbursement module is additionally operable to：

Optionally, the generation module is specifically used for：

Optionally, the reimbursement module is specifically used for realizing in the following ways in the described pair of effective electron authority stored The reimbursement of electronics authority instructs corresponding electronics authority to be submitted an expense account：

Optionally, the reimbursement module is specifically used for realizing that described submit an expense account electronics authority instructs correspondence in the following ways Electronics authority audited：

The true or false of the electronics authority is verified；It is effective electronics authority do not submitted an expense account according to electronics authority state The second electronics authority bookkeeping voucher information that the electronics authority reimbursement instructs corresponding electronics authority is generated, to the described second electricity Sub- authority bookkeeping voucher information is audited.

Optionally, the generation module or the memory module or the reimbursement module are additionally operable to：

After receiving the authority request of processing electronics, processing electronics authority request is sent to state management module；Receive First notification message of state management module, handles the electronics authority accordingly, and the is sent to state management module Two notification messages；

Further include：

State management module, after receiving the authority request of processing electronics, inquires about the state of the electronics authority；Determine The electronics authority state is to handle the corresponding predetermined state of electronics authority request with described, then to the generation module or described Memory module or the reimbursement module send the first notification message；Receive the second notification message, update the electronics with According to state.

Optionally, further include：

Diverse identities management module, after receiving electronics authority diverse identities registration request, according to the electronics with Entity diverse identities ring is generated according to the information carried in diverse identities registration request；

Optionally, further include：

Behavior administration module, for carrying out behavior supervision to the processing procedure of the electronics authority；

Optionally, the behavior administration module is specifically used for：

Behavior supervision information gathering instruction is sent to the functional entity unit, receives the behavior of the functional entity unit Information is supervised, carrying out Macro or mass analysis to behavior supervision information obtains abnormal behaviour Macro or mass analysis result；

The functional entity unit includes following at least one：

The generation module, the memory module, the reimbursement module, state management module, diverse identities management module.

The embodiment of the present invention proposes a kind of terminal, including processor and computer-readable recording medium, the computer Instruction is stored with readable storage medium storing program for executing, when described instruction is performed by the processor, realizes any of the above-described kind of authority processing Method.

The embodiment of the present invention proposes a kind of computer-readable recording medium, is stored thereon with computer program, the meter The step of calculation machine program realizes any of the above-described kind of authority processing method when being executed by processor.

The embodiment of the present invention proposes a kind of authority processing system, including：

Equipment is generated, for generating effective electron authority；

Storage device, for storing the effective electron authority of generation；

Equipment is submitted an expense account, the electronics authority for receiving electronics authority application terminal submits an expense account instruction, to the effective electron of storage The reimbursement of electronics authority instructs corresponding electronics authority to be submitted an expense account in authority, and generates the actual reimbursement of electronics authority with treating that reimbursement converges Bulk analysis result sends electron authority application terminal.

Optionally, the reimbursement equipment is additionally operable to：

Optionally, the generation equipment is specifically used for：

Optionally, the reimbursement equipment is specifically used for realizing in the following ways in the described pair of effective electron authority stored The reimbursement of electronics authority instructs corresponding electronics authority to be submitted an expense account：

Optionally, the reimbursement equipment is specifically used for realizing that described submit an expense account electronics authority instructs correspondence in the following ways Electronics authority audited：

Optionally, the generation equipment or the storage device or the reimbursement equipment are additionally operable to：

After receiving the authority request of processing electronics, processing electronics authority request is sent to status management apparatus；Receive First notification message of status management apparatus, handles the electronics authority accordingly, and the is sent to status management apparatus Two notification messages；

Further include：

Status management apparatus, after receiving the authority request of processing electronics, inquires about the state of the electronics authority；Determine The electronics authority state is to handle the corresponding predetermined state of electronics authority request with described, then to the generation equipment or described Storage device or the reimbursement equipment send the first notification message；Receive the second notification message, update the electronics with According to state.

Optionally, further include：

Diverse identities management equipment, after receiving electronics authority diverse identities registration request, according to the electronics with Entity diverse identities ring is generated according to the information carried in diverse identities registration request；

Optionally, further include：

Behavior monitoring equipment, for carrying out behavior supervision to the processing procedure of the electronics authority；

Optionally, the behavior monitoring equipment is specifically used for：

Behavior supervision information gathering instruction is sent to the functional entity device, receives the behavior of the functional entity device Information is supervised, carrying out Macro or mass analysis to behavior supervision information obtains abnormal behaviour Macro or mass analysis result；

The functional entity device includes following at least one：

The generation equipment, the storage device, the reimbursement equipment, status management apparatus, diverse identities management equipment.

Compared with correlation technique, the application includes：Generate effective electron authority；Store the effective electron authority of generation；Connect The electronics authority reimbursement request of electronics authority application terminal is received, the reimbursement of electronics authority is inquired about in the effective electron authority of storage please Corresponding electronics authority is sought, and generates electronics authority reimbursement inquiry Macro or mass analysis result and sends electron authority application terminal；Connect The electronics authority reimbursement instruction of electronics authority application terminal is received, instructs corresponding electronics authority to report the reimbursement of electronics authority Pin, and generate the actual reimbursement of electronics authority and send electron authority application terminal with Macro or mass analysis result to be submitted an expense account.By above-mentioned Scheme, realizes the with no paper circulation of whole process of electronics authority, so as to improve the treatment effeciency of electronics authority.

In an optional embodiment, after receiving the authority request of processing electronics, the state of the electronics authority is inquired about； Determine the electronics authority state be with it is described processing the corresponding predetermined state of electronics authority request, then to the electronics authority into The corresponding processing of row；Update the state of the electronics authority；Wherein, the processing electronics authority request includes following any one It is a or multiple：Electronics authority reimbursement request, the reimbursement instruction of electronics authority.State to electronics authority is realized by the above method Management, ensure that legitimacy, the validity of electronics authority, the voiding, forgery, a ticket for effectively preventing electronics authority use, Stagger, misuse or go here and there use, phenomena such as evading taxes and evading taxation.

Other features and advantage will illustrate in the following description, also, partly become from specification Obtain it is clear that or being understood by implementing the application.The purpose of the application and other advantages can be by specification, rights Specifically noted structure is realized and obtained in claim and attached drawing.

Brief description of the drawings

Attached drawing is used for providing further understanding technical scheme, and a part for constitution instruction, with this The embodiment of application is used for the technical solution for explaining the application together, does not form the limitation to technical scheme.

Fig. 1 is the flow chart of the application authority processing method；

Fig. 2 is the schematic diagram of the electronics authority diverse identities generation step of the embodiment of the present application 1；

Fig. 3 is the schematic diagram of the electronics authority diverse identities generation step of the embodiment of the present application 2；

Fig. 4 is the authentication of electronics authority and the schematic diagram of authentication step of the embodiment of the present application 3；

Fig. 5 is the schematic diagram of the electronics authority diverse identities permission modification method of the embodiment of the present application 4；

Fig. 6 is the schematic diagram of the electronics authority diverse identities permission modification method of the embodiment of the present application 5；

Fig. 7 is the schematic diagram of the electronics authority diverse identities correlating method of the embodiment of the present application 6；

Fig. 8 is the flow chart that the application electronics authority application terminal carries out authority processing method；

Fig. 9 is the structure composition schematic diagram of the application authority processing unit；

Figure 10 is the structure composition schematic diagram of the application memory module；

Figure 11 is the flow chart of the method for the effective electron authority that the application stores generation；

Figure 12 is the structure composition schematic diagram that the application submits an expense account module；

Figure 13 is the structure composition schematic diagram of the application state management module；

Figure 14 is the structure composition schematic diagram of the application terminal；

Figure 15 is the structure composition schematic diagram of the application authority processing system.

Embodiment

For the purpose, technical scheme and advantage of the application are more clearly understood, below in conjunction with attached drawing to the application Embodiment be described in detail.It should be noted that in the case where there is no conflict, in the embodiment and embodiment in the application Feature can mutually be combined.

Step shown in the flowchart of the accompanying drawings can be in the computer system of such as a group of computer-executable instructions Perform.Also, although logical order is shown in flow charts, in some cases, can be with suitable different from herein Sequence performs shown or described step.

Referring to Fig. 1, present applicant proposes a kind of authority processing method, including：

Step 100, generation effective electron authority.

In this step, effective electron authority can be generated using following two modes.

The first, according to blank electronic authority identification information and electronics authority issuing organization public key generation blank electronic with According to；According to blank electronic authority and effective electron authority identification information generation effective electron authority；

Wherein, blank electronic authority identification information includes the first electronics authority information and issuing organization is signed, effective electron Authority identification information includes the second electronics authority information and the electronics authority side of issuing signature.

Wherein, the specific method for generating blank electronic authority may be referred to 201710060108.3 denomination of invention of Application No. It is no longer superfluous here for the Chinese invention patent application of " a kind of blank electronic authority generation, open verification method, apparatus and system " State.

The specific method of generation effective electron authority may be referred to Application No. 201710060110.0 entitled " one The Chinese invention patent application of the generation of kind effective electron authority, open verification method, apparatus and system ", which is not described herein again.

Second, sign and have according to the first electronics authority information, electronics authority issuing organization public key, issuing organization second Imitate electronics authority identification information generation effective electron authority.

Wherein, the specific method for generating effective electron authority may be referred to 201710059997.1 denomination of invention of Application No. For the Chinese invention patent application of " a kind of electronics authority generation, open verification method, apparatus and system ", which is not described herein again.

Step 101, the effective electron authority of storage generation.

Step 102, the electronics authority reimbursement instruction for receiving electronics authority application terminal, in the effective electron authority of storage The reimbursement of electronics authority instructs corresponding electronics authority to be submitted an expense account, and generates the actual reimbursement of electronics authority and Macro or mass analysis to be submitted an expense account As a result electron authority application terminal is sent.

The electronics authority reimbursement request of electronics authority application terminal is received, electronics is inquired about in the effective electron authority of storage Authority, which is submitted an expense account, asks corresponding electronics authority, and generates electronics authority reimbursement inquiry Macro or mass analysis result transmission electron authority and answer Use terminal.

Optionally, generate the reimbursement of electronics authority instruct corresponding electronics authority the second electronics authority bookkeeping voucher information it Before further include：

The true or false of the electronics authority is verified；

It is entitled that specific electronics authority true or false verification method may be referred to Application No. 201710060108.3 Chinese invention patent application, the Application No. of " a kind of blank electronic authority generation, open verification method, apparatus and system " A kind of Chinese invention of 201710059997.1 entitled " electronics authority generation, open verification method, apparatus and systems " Patent application and Application No. 201710060110.0 it is entitled " a kind of generation of effective electron authority, open verification method, The Chinese invention patent application of apparatus and system ", which is not described herein again.

Optionally, this method further includes：Condition managing is carried out to electronics authority.Specifically,

After receiving the authority request of processing electronics, the state of the electronics authority is inquired about；Determine the electronics authority state To handle the corresponding predetermined state of electronics authority request with described, then the electronics authority is handled accordingly；Renewal institute State the state of electronics authority.

Wherein, the processing electronics authority request includes following any one or more：

Electronics authority reimbursement request, the reimbursement instruction of electronics authority.

In the above-mentioned method of state management to electronics authority,

Before electronics authority is handled, the state of electronics authority, when the state of electronics authority is authentic and valid, ability are first determined Handle electronics authority, ensure electronics authority legitimacy, validity, effectively prevent electronics authority write out falsely, forge, a ticket use, Stagger, misuse or go here and there use, phenomena such as evading taxes or evading taxation.

In one embodiment, before the state of the inquiry electronics authority or before renewal electronics authority state, It can also include：

Authentication is carried out, certification is by rear, the state or renewal power of the electronics authority in the range of ability search access right The state of the electronics authority in the range of limit.

The condition managing in the range of authority is performed, it is necessary to carry out authentication in the present embodiment, after certification, after state renewal Renewal result is stored, guarantee can audit, non-repudiation and statistical analysis.Result is updated to the state of electronics authority at the same time Carry out statistical analysis, it will be appreciated that the service condition of the traffic-operating period of enterprise, trading situation and authority.

Optionally, the processing electronics authority that receives asks to include：Receive and issue the request of electronics authority；

It is described to determine that the electronics authority state is to handle the corresponding predetermined state of electronics authority request with described, then to institute Electronics authority is stated to be handled accordingly, including, determine that the state of the electronics authority is not issued to be legal, then to electronics authority Carry out issuing processing；

The state of the renewal electronics authority, including, the state of the electronics authority is updated to not submit an expense account effectively.

Optionally, the processing electronics authority that receives asks to include：Receive the reimbursement request of electronics authority；

It is described to determine that the electronics authority state is to handle the corresponding predetermined state of electronics authority request with described, then to institute Electronics authority is stated to be handled accordingly, including, determine the state of the electronics authority not submit an expense account effectively, then progress electronics with Handled according to reimbursement；

The state of the renewal electronics authority, including, the state of the electronics authority is updated to effectively submit an expense account； Alternatively, the state of electronics authority is updated to effectively submit an expense account and following one or more any combination：Keep accounts or do not entered Account, paid or do not paid, filed or do not filed.

Optionally, the processing electronics authority that receives asks to include：Electronics authority is received to ask to tax；

It is described to determine that the electronics authority state is to handle the corresponding predetermined state of electronics authority request with described, then to institute Electronics authority is stated to be handled accordingly, including, determine the state of the electronics authority effectively not support tax, then progress electronics with Handled according to tax；

The state of the renewal electronics authority, including, the state of the electronics authority is updated to effectively to support tax.

Optionally, the processing electronics authority that receives asks to include：Receive the refund request of electronics authority；

It is described to determine that the electronics authority state is to handle the corresponding predetermined state of electronics authority request with described, then to institute Electronics authority is stated to be handled accordingly, including, determine the state of the electronics authority not refund effectively, then progress electronics with Handled according to refund；

The state of the renewal electronics authority, including, the state of the electronics authority is updated to effectively refund.

Optionally, the processing electronics authority that receives asks to include：Receive the returned ticket request of electronics authority；

It is described to determine that the electronics authority state is to handle the corresponding predetermined state of electronics authority request with described, then to institute Electronics authority is stated to be handled accordingly, including, the state for determining the electronics authority is legal effective or invalid, then carries out Electronics authority returned ticket is handled；

The state of the renewal electronics authority, including, the state of the electronics authority is updated to cancel and/or rushed It is red.

Optionally, before the state of the inquiry electronics authority or before renewal electronics authority state, further include：

Optionally, before the state of the inquiry electronics authority, further include：

Electronics authority status query request is generated, the electronics authority status query request includes following one or more Item any combination：Electronics authority status query request identifier, electronics authority application terminal identifier, electronics authority user mark Know symbol, electronics authority issues terminal identifier, electronics authority ticket information, electronics authority state managing unit identifier, random Number, electronics authority status query request encoded radio, wherein, the electronics authority status query request encoded radio is to be compiled by calling Code algorithm carries out any combination of any information in the electronics authority status query request to calculate acquisition, for verifying The electronics authority status query request it is following one or more：Authenticity, integrality, non-repudiation.

Optionally, before the state of the renewal electronics authority, further include：

The renewal request of electronics authority state is generated, the electronics authority state renewal request includes following one or more Any combination：Electronics authority state renewal request identifier, electronics authority identifier, electronics authority renewal before oldState, New state, electronics authority state managing unit identifier, timestamp, random number, electronics authority state after the renewal of electronics authority Renewal request encoded radio, wherein, the electronics authority state renewal request encoded radio is by calling encryption algorithm to the electricity Any combination of any information in sub- authority state renewal request carries out calculating acquisition, for verifying the electronics authority shape State renewal is asked following one or more：Authenticity, integrality, non-repudiation.

Optionally, it is described to receive before handling the request of electronics authority, further include：

Blank electronic authority information is generated, the blank electronic authority information is stored, the state of the electronics authority is set It is set to and legal does not issue.

Optionally, after the state of the renewal electronics authority, further include：

Generate, store and send electronics authority state renewal as a result,

The electronics authority state renewal result includes following one or more any combination：Electronics authority state updates Resultant identifier, electronics authority state managing unit identifier, electronics authority identifier, electronics authority ticket information, electronics with Result encoded radio is updated according to the oldState before renewal, the new state after the renewal of electronics authority, random number, electronics authority state, its In, the electronics authority state renewal result encoded radio is by calling encryption algorithm to update result to the electronics authority state In any combination of any information carry out calculating acquisition, for verifying the following of the electronics authority state renewal result It is one or more：Authenticity, integrality, non-repudiation.

The detection of electronics authority state conflict is carried out, such as detects that the renewal of electronics authority state has conflict, does not then update electricity Sub- authority state；Such as there is no conflicting, then the state of the electronics authority is updated.

In embodiment, before the state of the inquiry electronics authority or before renewal electronics authority state, also It can include：

Authentication is carried out, certification is by rear, the state or renewal authority of the electronics authority in the range of search access right In the range of the electronics authority state.

The condition managing in the range of authority is performed, it is necessary to carry out authentication in the present embodiment, after certification, after state renewal Renewal result is stored, guarantee can audit, non-repudiation and statistical analysis.Result is updated to the state of electronics authority at the same time Carry out situation, trading situation, business circumstance that statistical analysis will be seen that authority operation.

Optionally, further included before this method：

Wherein, the information carried in the electronics authority diverse identities registration request includes following one or more timess Meaning combination：

Entity attribute, enrollment status attribute and application scenarios description.

The above method includes the step of generation of electronics authority diverse identities, certification, realizes Auto-matching and specifically should Authentication is carried out with scene, improves the secret protection of entity different identity.

Optionally, this method can also include the rights management of electronics authority and associate, and be that electronics authority flows through People or functional entity unit in journey provide comprehensive Identity Management, meet that differentiation is pacified in electronics authority user multi-service link Full demand, improves user experience, improves the efficiency of certification；Different identity can be only done the operation of corresponding authority at the same time, improve The secret protection of user's different identity；The diverse identities of people and functional entity unit during the circulation of electronics authority pass through reality Body identifier is associated, and technical support is provided for follow-up audit, inspection.

In the present embodiment, electronics authority diverse identities generation step is the people during the circulation of electronics authority or functional entity Unit generates diverse identities ring.Different identity in diverse identities ring corresponds to different identification identifiers, proof of identification mode mark Know symbol, proof of identification, identity attribute, application scenarios description, authority description.

Such as same person be the identity of electronics authority user in electronics authority generates business scenario and in electronics In authority reimbursement business scenario, it may be possible to the identity of electronics authority reimbursement person；Identical people is in identical electronics authority business field Identity is also different in scape, for example in electronics authority submits an expense account business scenario, is sometimes the identity of electronics authority reimbursement person, sometimes The identity of electronics authority auditor；Identical people identity attribute in identical electronics authority business scenario is different, corresponding to recognize Card mode and operating right may also be different, for example same person is in electronics authority submits an expense account link, is all the reimbursement of electronics authority Person, sometimes personal identification, sometimes secretary's identity, the electronics authority scope that correspondence can be submitted an expense account are different.

It is similar for functional entity cell cases, for example electronics authority application terminal is in electronics authority inquiry business scene In, it is the identity that electronics authority inquiry request is initiated, and in electronics authority submits an expense account business scenario, it is the reimbursement request of electronics authority The identity of initiation.

People or functional entity unit during circulating to electronics authority are managed using diverse identities, some specific body Part can be only done corresponding authority range of operation, be conducive to the management and secret protection of authority.Such as electronics authority circulation process In individual, have multiple identity attributes, there is individual capacity's attribute, unit identity attribute.Recognize with individual capacity and with unit identity After card, the operation that can be completed is different.Such as with individual capacity's certification, it is impossible to complete the relevant operation of unit identity.At the same time Recorded respectively with the operation that different identity certification is completed, for example the operation such as electronics authority is issued, the reimbursement of electronics authority carries out respectively Record.

Corresponding information can only be inquired after different authentications, easy to protect individual privacy.Such as with unit identity By certification, can only inquire it is personal operated with unit no, such as the issuing of electronics authority, the reimbursement of electronics authority etc., And the operation of private progress cannot be inquired.

In the present embodiment, electronics authority diverse identities authenticating step includes：Extract scene information and/or individual or function is real The identity attribute of body, calculates and/or searches corresponding identification identifier according to the scene information of extraction；Or according to personal or work( The identity attribute of energy entity calculates and/or searches corresponding identification identifier；It is or real according to scene information and personal or function The identity attribute of body calculates and/or searches corresponding identification identifier；Further include and corresponding certification is searched according to identification identifier Mode, is authenticated people or functional entity unit.

The electronics authority authenticating step automatic identification scene information and identity attribute of the present embodiment, if the scene letter of identification Cease and submit an expense account business scenario for electronics authority, and the secretary that electronics authority reimbursement person is certain unit, according to the scene information of extraction Corresponding identification identifier is computed or looked up with identity attribute, authentication mode identifier is searched according to the identification identifier, is used Corresponding mode is authenticated the identity of electronics authority reimbursement person.For example it is authenticated by way of fingerprint, it is desirable to electronics Authority reimbursement person provides finger print information, and then its fingerprint is authenticated.

Can be according to electronics authority different application scene Auto-matching individual and functional entity by electronics authority diverse identities The identification identifier of unit, using corresponding authentication mode, improves the efficiency of certification, while realize adaptive constant inhibition and generation certification stream Journey, meets differentiation demand for security in electronics authority user multi-service link.On the other hand, automatically extracted pair by application scenarios The identification identifier answered, improves links efficiency during the circulation of electronics authority, improves user experience.

Electronics authority diverse identities rights management step in the present embodiment, for according to rights management rule to electronics with Carry out authority distribution and change according to the people during circulation and functional entity unit, including but not limited to including identity registration when, Corresponding authority is distributed according to identity attribute；It can also include the change according to identity attribute to authority make a change；Further include To authority make a change when rights management rule changes.

Electronics authority diverse identities associated steps in the present embodiment, for being flowed through electronics authority by correlation function The identification identifier of individual or functional entity unit in journey are associated with personal or functional entity unit entity identifier. The correlation function is arbitrary many-one or man-to-man mapping function, and mapping function input is polynary identification identifier One or more of, export and include but not limited to for entity identifier, the implementation method of the correlation function：Directly carry out Memory lookup, address search or calculating.

In the present embodiment, by the way that different identity identifier is associated with entity identifier, realize under different identity Operation and entity identifier associate.Such as the individual of electronics authority circulation process, electronics may be issued with the identity of unit Authority, it is also possible to electronics authority is issued with personal identity, all electronics authoritys issued with which kind of identity all with individual Entity identifier be associated；The personal operation carried out in different business link at the same time, such as electronics authority reimbursement link, electronics The operation of the progress such as authority inquiry link is associated by the way that personal entity identifier is unified.During circulating for electronics authority Functional entity cell cases are similar.During circulating to electronics authority is realized by electronics authority diverse identities associated steps People or functional entity unit are supervised, audited, checked.

Optionally, this method further includes：

Optionally, behavior supervision information includes O＆M information and abnormal behaviour information.

Wherein, O＆M information includes following at least one：

Operating status, daily record, flow.

Abnormal behaviour information includes following at least one：

One ticket uses, the amount of money in violation of rules and regulations, classification in violation of rules and regulations, repeat reimbursement, repeat the inquiry refunding, exceed one's powers.

With reference to Fig. 2, Fig. 2 is the schematic diagram of the electronics authority diverse identities generation step of the embodiment of the present application 1, which uses In to the people registered first or functional entity unit establishment entity diverse identities ring.

In the present embodiment, the electronics authority diverse identities generation step, including：

Step 200, functional entity unit to be registered generation electronics authority diverse identities registration request, submit to polynary body Part management module；

Electronics authority diverse identities registration request is generated by functional entity unit for people to be registered, is submitted to polynary Identity management module；

The people, including but not limited to includes:The electronics authority person of issuing, electronics authority recipient, electronics authority use Person, electronics authority inquiry, electronics authority examination person, electronics authority reimbursement person, electronics authority auditor；

The functional entity unit, includes but not limited to：Electronics authority application terminal, electronics authority issue unit, sky The sub- authority administrative unit of white appliances, electronics authority state managing unit, electronics authority approved unit, electronics authority storage unit, electricity Sub- authority reimbursement unit, cryptographic service unit, electronics authority Supervisory Unit；

The electronics authority diverse identities registration request, includes but not limited to following one or more any combination：It is real Body attribute, enrollment status attribute, application scenarios description；

The entity attribute, includes but not limited to following one or more any combination：Entity name, entity class, Physical address；

The enrollment status attribute, includes but not limited to following one or more any combination：Affiliated unit, unit card Part type, unit passport NO., personal name, post, role, personal document type, personal document number, telephone number, postal Case address, certificate enrollment time, certificate issuing organization title, certificate issuing organization address, certificate date of issue, the certificate term of validity Limit, expense expenditure bank card number, electronics authority new line unit, Taxpayer Identification Number, reimbursement bank card number, electronics authority push ground Location, electronics authority advice method, notice number/Notify Address, biological characteristic；

The application scenarios description includes following one or more any combination：

Type of service, using platform, network access mode, use equipment, time range.

The type of service includes any one of following：

The generation of blank electronic authority, electronics authority are issued, electronics authority is submitted an expense account, electronics authority is checked, electronics authority is audited, Electronics authority is declared dutiable goods, electronics authority is returned ticket, the renewal of electronics authority state, people or functional entity unit behavior supervision, cryptographic service, Electronics authority is audited.

Step 201, the integrality of diverse identities management module verification electronics authority diverse identities registration request and/or true Property, if the verification passes, then perform step 202；

Entity attribute in electronics authority diverse identities registration request of step 202, diverse identities management module, registration Identity attribute and application scenarios describe all or part of any combination generation entity diverse identities ring in three；

The entity diverse identities ring, including：Entity identifier, entity attribute, one or more identity description collections；

The entity identifier is behaved or the unique mark of the diverse identities ring of functional entity unit, can be according to entity The generation of any combination call function of attribute section or whole；

The identity description collections, include but not limited to following one or more any combination：Identification identifier, body Part mode of proof identifier, proof of identification, identity attribute, application scenarios description, authority description, Identity Association relation；

The identification identifier, is the unique mark of identity on diverse identities ring, for by entity diverse identities ring Identity description collections are associated with the people during the circulation of electronics authority or functional entity element entity identifier, and then with real Body diverse identities link is associated.Identification identifier can be through but not limited to fixed by lookup of tabling look-up, Function Mapping, calculating The modes such as position, are associated with entity diverse identities ring；

The proof of identification mode identifier, for recording and describing identification authentication mode, including following one or more Any combination：Digital signature, command identifying method, dynamic token method, challenge response method, biometric solution, short message Identifying code method；

The proof of identification, for proving the proof information of identity and/or proving equipment, including it is following one or more Any combination：Digital certificate, U-shield, dynamic token, user biological feature, user password, mobile phone；

The identity attribute, including but not limited to including following one or more any combination：Affiliated unit, unit Type of credential, unit passport NO., personal name, post, role, personal document type, personal document number, telephone number, Email address, certificate enrollment time, certificate issuing organization title, certificate issuing organization address, certificate date of issue, certificate are effective Time limit, expense expenditure bank card number, electronics authority new line unit, Taxpayer Identification Number, reimbursement bank card number, the storage of electronics authority Address, electronics authority operation log storage address, electronics authority push address, electronics authority advice method, notice number/notice Address, biological characteristic；

Authority description, for the class of operation and operation object attribute for describing to perform, identity attribute, application scenarios and All or part of any combination in rules of competence three is distributed, and the class of operation includes following One or more any combination：Blank electronic authority generation, electronics authority issue, the status inquiry of electronics authority, electronics authority State renewal, the reimbursement of electronics authority, electronics authority is inquired about, electronics authority pushes, electronics authority stores, electronics authority is checked and approved, people Or the electronics authority operating right such as functional entity unit behavior supervision, cryptographic service, audit；The operation object attribute include but It is not limited to include：The species of electronics authority, the scope of electronics authority, amount of money limitation, invoicing time, electronics authority user name Claim；

The Identity Association relation, for describing the relevance between people or functional entity unit and its multiple identity and pass Join feature, including but not limited to including following one or more any combination：Entity name, entity identifier, entity are more First identity ring storage address, identity name, identification identifier, identity type, identity description collections storage address, incidence relation, Incidence relation figure, incidence relation state, incidence relation effective time, incidence relation out-of-service time.

With reference to Fig. 3, Fig. 3 is the schematic diagram of the electronics authority diverse identities generation step of the embodiment of the present application 2, the present embodiment For the people being already registered for or the registration generation processing of the new identity of functional entity unit.In the present embodiment, the electronics Authority diverse identities generation step, including：

Step 300, functional entity unit to be registered generate the second electronics authority diverse identities registration request, submit to more First identity management module；

Second electronics authority diverse identities registration request is generated by functional entity unit for people to be registered, is submitted to Diverse identities management module；

Step 301, diverse identities management module verify the second electronics authority diverse identities registration request integrality and/or Authenticity, if the verification passes, then performs step 302；

The entity identifier of step 302, diverse identities management module in the second electronics authority diverse identities registration request Symbol and/or entity attribute, verify that the corresponding entity diverse identities ring of the entity whether there is；

Step 303, diverse identities management module such as determine the corresponding entity diverse identities ring of the entity and are not present, then carry Show mistake, terminate and perform；Such as determine the corresponding entity diverse identities ring of the entity to exist, then determine whether identity to be registered It is whether registered, if the identity is registered, mistake is prompted, terminates and performs；If the identity is unregistered, according to entity mark Know the identity that the part or all of any combination that symbol, entity attribute, identity attribute, application scenarios are described in four generates new identity Description collections.

The identity description collections of new identity are inserted into entity diverse identities ring, renewal by step 304, diverse identities management module The entity diverse identities ring；

With reference to Fig. 4, Fig. 4 is the schematic diagram of 3 electronics authority authentication of the embodiment of the present application and authentication step.In this implementation Example in, the electronics authority authentication and authentication step, for implement electronics authority generation, electronics authority issue, electronics Authority is checked and approved, state supervision acquisition of information, electronics authority condition managing, electronics authority are submitted an expense account when electronics authority relevant operation, The identity of certification people or functional entity simultaneously assigns its operating right；The electronics authority authentication and authentication step, including：

Step 400, diverse identities management module receive electronics authority diverse identities certification request, from the polynary body of electronics authority Application scenarios description and certification input identity attribute are extracted in part certification request, scene information is extracted from application scenarios description；

The electronics authority diverse identities certification request, includes but not limited to following one or more any combination：Recognize Card input identity attribute, application scenarios description, the description of required authority, proof of identification；

Step 401, the identity attribute inputted according to the certification and/or the scene information obtain corresponding identity Symbol, the identity description collections in associated entity diverse identities ring are obtained according to the identification identifier.

Step 402, according to the proof of identification mode identifier of identity description collections extract identification authentication mode, retouched from identity State in set and extract proof of identification.

Step 403, identification authentication mode and proof of identification according to extraction, verify the identity card that entity to be certified provides It is bright, if the proof of identification that provides of entity to be certified is consistent with the proof of identification in identity description collections or meets proof of identification and recognizes The verification requirement of card mode, then pass through certification；Otherwise authentification failure, terminates and performs.

The authority description and/or the electronics authority diverse identities certification of step 404, basis from the extraction of identity description collections Required authority description in request, the identity passed through to certification distribute corresponding authority.

With reference to Fig. 5, Fig. 5 is the schematic diagram of 4 electronics authority diverse identities permission modification method of the embodiment of the present application.The electricity Sub- authority diverse identities permission modification method, for handle identity attribute change and/or scene information change when it is caused polynary Identity authority changes.In the present embodiment, the electronics authority diverse identities permission modification method, including：

Step 500, functional entity unit are according to identity attribute and/or application scenarios alteration, generation electronics authority power The request that authorizes a change of limit, submits to diverse identities management module；

If the identity attribute and/or application scenarios of people change, people is by functional entity unit according to identity attribute And/or application scenarios alteration, the request that authorizes a change of electronics authority authority is generated, submits to diverse identities management module；

The request that authorizes a change of the electronics authority authority, includes but not limited to following one or more any combination：It is old Identity attribute, new identity attribute, old application scenarios description, new application scenarios description, old proof of identification mode mark Know symbol, new proof of identification mode identifier, the old authority that should be deleted, the authority newly applied, proof of identification；

Step 501, diverse identities management module are according to identity attribute old in the request that authorizes a change of electronics authority authority With old scene information, corresponding identification identifier is calculated and/or searched；Calculate and/or find pair according to identification identifier The identity description collections answered.

Step 502, diverse identities management module are according to the proof of identification authentication mode and body extracted from identity description collections Part proves, the proof of identification that entity to be certified provides in the request that authorizes a change of electronics authority authority is verified, if to be certified The proof of identification that entity provides is consistent with the proof of identification in identity description collections or meets the verification of proof of identification authentication mode It is required that then pass through authentication；Otherwise authentication fails, and terminates and performs.

Step 503, diverse identities management module are corresponding according to new identity attribute and/or new scene information, modification Identity attribute, application scenarios description and authority describe all or part of any combination in three；

Optionally, if it is determined that needing to change identification authentication mode to user, then corresponding proof of identification mode mark is changed Know symbol, generate new proof of identification, update corresponding identity description collections.

With reference to Fig. 6, Fig. 6 is the schematic diagram of the electronics authority diverse identities permission modification method of the embodiment of the present application 5.It is described Electronics authority diverse identities permission modification method is used to handle diverse identities permission modification caused by authorization rule change.In this reality Apply in example, the electronics authority diverse identities permission modification method, including：

Diverse identities management mould is submitted in step 600, the generation electronics authority authorization rule change request of functional entity unit Block.

If the authority of people changes, the authorization rule that people generates electronics authority authority by functional entity unit changes Request, submits to diverse identities management module.

Step 601, according to authorization rule alteration, calculate the identity attribute that is influenced by regular alteration and/or Application scenarios describe.

Step 602, describe according to impacted identity attribute and/or application scenarios, find the entity identifier that is related to and/ Or identification identifier.

Step 603, calculate and/or find corresponding identity description collection according to entity identifier and/or identification identifier Close, according to new authorization rule, change corresponding authority description.

Optionally, if authorization rule becomes with greater need for change identification authentication mode, corresponding proof of identification mode is changed Identifier, generates new proof of identification, updates corresponding identity description collections；Alteration is notified into user, and will be new Proof of identification is supplied to user.

With reference to Fig. 7, Fig. 7 is the schematic diagram of 6 electronics authority diverse identities correlating method of the embodiment of the present application.In the present embodiment In, the electronics authority diverse identities correlating method provides associating for people or functional entity unit and identity, further finds out it The operation of all identity；The electronics authority diverse identities correlating method, including：

Step 700, request entity generation entity associated inquiry request submit to diverse identities management module.

The entity associated inquiry request, includes but not limited to following one or more combinations：Request entity identity attribute, Application scenarios description, proof of identification.

Step 701, diverse identities management module are according to request entity identity attribute, application scenarios description, proof of identification three All or part of any combination calculates and/or searches corresponding identification identifier in person, calculated according to identification identifier and/or Search corresponding identity description collections；

Step 702, diverse identities management module extract identity according to the proof of identification mode identifier of identity description collections Authentication mode, proof of identification is extracted from identity description collections.

Step 703, diverse identities management module are according to the identification authentication mode and proof of identification of extraction, checking request entity The proof of identification of offer, if the proof of identification of request entity offer is consistent with the proof of identification in identity description collections or meets The verification requirement of proof of identification authentication mode, then pass through certification；Otherwise authentification failure, terminates and performs.

Step 704, diverse identities management module calculate and/or search according to Identity Association relation in identity description collections real Body identifier.

Step 705, diverse identities management module calculate and/or find the corresponding polynary body of entity according to entity identifier Part ring, the different identity of entity is associated.

Step 706, the identity description collections in entity diverse identities ring, extract corresponding identification identifier, according to The identification identifier of extraction inquires about the corresponding operation of the identity, electronics authority storage address, electronics authority operation log storage Location.

Referring to Fig. 8, the embodiment of the present invention proposes a kind of authority processing method, including：

Step 800, the generation electronics authority reimbursement request of electronics authority application terminal, the reimbursement request of electronics authority is sent to Electronics authority submits an expense account unit.

Step 801, when receive from electronics authority reimbursement unit electronics authority reimbursement inquiry Macro or mass analysis result when, The generation electronics authority reimbursement instruction of electronics authority application terminal, submits an expense account instruction by electronics authority and sends electron authority expense report Member.

Optionally, when receiving the electronics authority reimbursement inquiry Macro or mass analysis result from electronics authority reimbursement unit, Electronics authority inquiry Macro or mass analysis is judged the result is that truly completely, continuing to execute the step of generation electronics authority reimbursement instruction Suddenly.

Wherein, electronics authority application terminal calculates the corresponding electricity of electronics authority inquiry Macro or mass analysis result using encryption algorithm Sub- authority inquires about Macro or mass analysis result encoded radio, and the electronics authority inquiry compared in electronics authority inquiry Macro or mass analysis result collects Whether analysis result encoded radio and the electronics authority inquiry Macro or mass analysis result encoded radio calculated are consistent, if unanimously, judged Go out electronics authority inquiry Macro or mass analysis the result is that true complete；If it is inconsistent, judge that the inquiry of electronics authority collects point Analysis result is not true complete.

In the present embodiment, electronics authority application terminal can also according to electronics authority summarized results to be submitted an expense account generate electronics with Instructed according to reimbursement.

Optionally, compatible with papery authority reimbursement system in order to realize, electronics authority application terminal can also directly lead to Papery authority is over-scanned, by papery authority electronization, instruction is submitted an expense account further according to the papery authority generation electronics authority of electronization.

Optionally,

Collect reimbursement for papery authority and electronics authority, electronics authority application terminal directly by scanning papery authority, By papery authority electronization, electronics authority is generated further according to the papery authority of electronics authority inquiry Macro or mass analysis result and electronization Reimbursement instruction.

Step 802, electronics authority application terminal receive the actual reimbursement of electronics authority from electronics authority reimbursement unit With Macro or mass analysis to be submitted an expense account as a result, judging that the electronics authority in the reimbursement instruction of electronics authority is all submitted an expense account, terminate electronics authority Reimbursement process.

Optionally, when electronics authority application terminal judges that the electronics authority in the reimbursement instruction of electronics authority is reported without whole Pin, asks the user whether to continue to submit an expense account, if receiving stopping reimbursement instruction from the user, terminates the reimbursement of electronics authority Process.

Optionally, if receive it is from the user continue reimbursement instruction, according to electronics authority it is actual submit an expense account with waiting to report Pin Macro or mass analysis result generates electronics authority summarized results to be submitted an expense account, and continues to execute and is given birth to according to electronics authority summarized results to be submitted an expense account The step of instructing is submitted an expense account into electronics authority.

Wherein, electronics authority summarized results to be submitted an expense account includes following any one or more any combination：

Electronics authority identifier to be submitted an expense account, electronics authority application terminal attribute, electronics authority number to be submitted an expense account, treat reimbursement electricity Sub- authority bookkeeping voucher.

Wherein, electronics authority identifier to be submitted an expense account is the unique mark of electronics authority to be submitted an expense account reimbursement, electronics to be submitted an expense account with It is numeral according to identifier, character string, the digital any combination with character；Electronics authority identifier to be submitted an expense account can be used for waiting to submit an expense account The inquiry and management of electronics authority relevant information；

Electronics authority is in the overall process entirely submitted an expense account, it is not necessary to which every authority or every part of bookkeeping voucher are printed as papery Material is, it is necessary to can not also need to generate the layout files of electronics authority or bookkeeping voucher.After electronics authority is submitted an expense account, use Various ways will submit an expense account result and send electron authority application terminal, its form include OFD, excel, pdf, The document formats such as word.Really realize with no paper, the electronic management during the reimbursement of electronics authority.

During the reimbursement of electronics authority, electronics authority bookkeeping voucher have recorded every terms of information in detail, easy to subsequently to not Statistical analysis is carried out with key message, such as：Reimbursement person, issue the time, submit an expense account the origin of an incident, individual event or the multinomial progress such as project of being disbursed from the cost and expenses Statistics realizes that annual audit, special audit, inspection, the security incident of several bookkeeping vouchers trace.

In the present embodiment be used for verify authenticity and integrity encryption algorithm can it is identical can not also be identical.

Optionally, electronics authority application terminal receive from electronics authority reimbursement unit electronics authority it is actual reimbursement and After Macro or mass analysis result is submitted an expense account, judge that the actual reimbursement of electronics authority is complete with Macro or mass analysis real result to be submitted an expense account, after It is continuous that the step of whether the electronics authority judged in the reimbursement instruction of electronics authority is all submitted an expense account performed.

Wherein, electronics authority application terminal calculates the actual reimbursement of electronics authority and Macro or mass analysis to be submitted an expense account using encryption algorithm As a result the actual reimbursement of corresponding electronics authority and Macro or mass analysis result encoded radio to be submitted an expense account, compare the actual reimbursement of electronics authority with treating Submit an expense account Macro or mass analysis result in electronics authority it is actual reimbursement with Macro or mass analysis result encoded radio submit an expense account and calculating electronics with Factually whether border reimbursement is consistent with Macro or mass analysis result encoded radio to be submitted an expense account, if unanimously, judging the actual report of electronics authority Sell and Macro or mass analysis to be submitted an expense account is the result is that true complete；If it is inconsistent, judge the actual reimbursement of electronics authority with waiting to report Pin Macro or mass analysis result is not true complete.

The reimbursement of electronics authority in above-described embodiment, including electronic invoice, financial class authority, electronic contract, treasury trade Receipt etc. is submitted an expense account, and the tax administration etc. of VAT invoice.

Referring to Fig. 9, present applicant proposes a kind of authority processing unit, including：

Generation module, for generating effective electron authority；

Memory module, for storing the effective electron authority of generation；

Specifically, referring to Figure 10, memory module includes：Electronics authority data access service unit, storage gateway unit and Storage unit, storage unit include service broker's subelement.

Referring to Figure 11, the effective electron authority of memory module generation includes：

Step 1100, electronics authority data access service unit receive the first electronics authority data access request, from The key element of electronics authority data is extracted in one electronics authority data access request, is generated according to part or all of key element Electronics authority identifier, logical address is accessed according to part or all of key element and/or the generation of electronics authority identifier, according to All or part of any combination life in electronics authority identifier, part or all of key element and access logical address three It is sent into the second electronics authority data access request and accesses the corresponding storage gateway unit of logical address.

In the present embodiment, the first electronics authority data access request can come from terminal device, can be from user and leads to Website is crossed directly to initiate to electronics authority data access service unit.Wherein, terminal device can be mobile terminal or personal electricity Brain (PC, Personal Computer) etc..

When the first electronics authority data access request comes from terminal device, terminal device can be by electronics authority data Part or all of key element, which is included in the first electronics authority data access request, sends electron authority data access service Unit.

The first electronics authority data access request can include the key element of electronics authority data in the present embodiment, also may be used With photo including electronics authority etc..

If the first electronics authority data access request includes the key element of electronics authority data, directly from first The key element of electronics authority data is obtained in electronics authority data access request；If the first electronics authority data access request Include the photo of electronics authority, then key element can be identified from photo using image recognition technology.

In the present embodiment, if the key element of electronics authority data access service unit extraction uses pre-set word Section content format represents, then directly electronics authority identifier is generated according to the part or all of key element of extraction, according to portion Point or whole key element and/or the generation of electronics authority identifier access logical address；If electronics authority data access service The key element of unit extraction is represented using pre-set field contents form, then needs first to be critical to extraction Element is converted into pre-set field contents form, and electronics authority identifier, root are generated further according to part or all of key element Logical address is accessed according to part or all of key element and/or the generation of electronics authority identifier.

Wherein, the field contents of key element include following any one or any number of combination： Key element title, key element content；Key element title and key element content include following any The combination of one or any number of：Numeral, character string, any combination of numeral and character.In the present embodiment, electronics authority data Access request includes following any one or any number of combinations：

Electronics authority data storage request, electronics authority data inquiry request, electronics authority data echo request, electronics with Request is performed according to data modification request, electronics authority data copy request, electronics authority data download request and system command.

In the present embodiment, key element includes following any one or any number of combinations：

Electronics authority data owner, electronics authority data owner identifier, electronics authority issue object, electronics authority The person of issuing, the electronics authority person of issuing identifier, electronics authority type, data manipulation type, size of data and authority time belong to Property, task type.

Wherein, electronics authority data owner refers to the source of electronics authority data, including but not limited to including following Meaning one or any number of combinations：Personal, system and unit.

Wherein, electronics authority type includes following any one or any number of combinations：Electronics Invoice, electronic passenger ticket, e bill, electronics financial bill and e-bank's bill.

Wherein, data manipulation type is the mode for intending carrying out data operation processing, including it is following any one or it is any Multiple combinations：

Storage, inquiry, examination, status modifier, backup, download and system command.

Wherein, size of data refers to the size for intending memory space shared by operation data.

Wherein, authority time attribute refers to the key operation processing time of data, including it is following any one or it is any more A combination：Authority creation time, authority access time, authority modification time, electronics authority are issued at time and electronics authority Manage the time.

Wherein, task type includes any one in data manipulation type or any a variety of group Close.

In the present embodiment, logical address is accessed according to part or all of key element and/or the generation of electronics authority identifier Including：

Accessed logically using pre-set according to the partly or entirely key element and/or electronics authority identifier Location generating algorithm calculates the access logical address.

Alternatively, in pre-set partly or entirely key element and/or electronics authority identifier with accessing logical address Between the first correspondence in, search it is described partly or entirely key element and/or the electronics authority identifier it is corresponding Access logical address.

Wherein, pre-set access logical address generating algorithm can be any particular algorithms.

For example, first field contents, the authority of authority owner A in key element issue object O field contents, The field contents of the field contents of the electronics authority person of issuing Op and authority time attribute T calculate access the front portion two of logical address into System string P₁, field contents, the word of size of data S of field contents, data manipulation type To further according to electronics authority type Td The field contents of section content, the field contents etc. of authority time attribute T remaining key elements, calculate the summary for accessing logical address Binary string P₂=H₁(M), wherein, M is part or all of key element, by P₁And P₂Visit is combined into according to pre-set order Ask logical address P_l=P₁||P₂。

Wherein it is possible to using customized algorithm (such as unidirectional mapping function) calculate access logical address front portion two into System string P₁, the summary binary string for accessing logical address is calculated using digest algorithm.

And for example, according to combination any one or more in key element, for example, the field contents of authority owner A, with According to field contents, the electronics for issuing the field contents of object O, the field contents of the electronics authority person of issuing Op, authority time attribute T The field contents of authority type Td, the field contents of data manipulation type To, the field contents of size of data S, splicing simultaneously use Pre-set access logical address digest algorithm, which is calculated, accesses logical address summary info D_l=H₁(A||O||O_P||T|| T_d| | S), and drawn by searching for summary info and the correspondence accessed between logical address and access logical address P_l。

And for example, according to any combination of the field contents of part or all of key element, such as the field of authority owner A Content, authority are issued in the field of the field contents of object O, the field contents of the electronics authority person of issuing Op, authority time attribute T Appearance, the field contents of electronics authority type Td, field contents, the field contents of size of data S of data manipulation type To, use Access logical address binary string P is calculated in the polynary function that calculates of pre-set access logical address_l。

It can also be other achievable algorithms to access logical address generating algorithm, and the embodiment of the present invention is to accessing logic Algorithm of Address Generation concrete implementation form is not construed as limiting, and concrete implementation algorithm is not intended to limit the present invention the guarantor of embodiment Protect scope.

Wherein, it is the data storage location mark unrelated with specific Storage Unit Type to access logical address.The access is patrolled Collecting address can use pre-set coding mode to encode storage gateway unit.

In the present embodiment, it can be numeral, character string, numeral and any combination of character to access logical address.

In the present embodiment, according to electronics authority identifier, part or all of key element and access in logical address three All or part of any combination generate the second electronics authority data access request when, by electronics authority identifier, part or Whole key elements and all or part of any combination accessed in logical address three are included in the second electronics authority data In access request.

In the present embodiment, the second electronics authority data access request is sent to and accesses the corresponding storage gateway of logical address During unit, first the second correspondence between logical address and the mailing address (such as IP address) for storing gateway unit is being accessed In, search generation access logical address it is corresponding storage gateway unit mailing address, by the second electronics authority data access Request is sent to the corresponding storage gateway unit of mailing address of storage gateway unit.

Step 1101, storage gateway unit according to electronics authority identifier, part or all of key element and access logic All or part of any combination generation network storage address in the three of address, according to electronics authority identifier, part or complete Portion's key element, all or part of any combination accessed in logical address and network storage address generate the 3rd electronics Authority data access request is sent to service broker's subelement of the corresponding storage unit in network storage address.

In the present embodiment, network storage address is the network or network equipment unique mark of storage gateway unit, including but Be not limited to include it is following any one：

Network or host IP address, fibre channel address FCID, data link connection identifier (DLCI, Data Link Connection Identifier), physical device address, directory name and server name.

In the present embodiment, storage gateway unit is according to electronics authority identifier, all or part of key element and access All or part of any combination generation network storage address in logical address three includes：

The storage gateway unit is according to the electronics authority identifier, partly or entirely key element and the visit Ask that all or part of any combination in logical address three is calculated using pre-set network storage algorithm of Address Generation The network storage address.

Alternatively, storage gateway is in pre-set electronics authority identifier, part or all of key element and accesses logic In the second correspondence between all or part of any combination and network storage address in the three of address, the electricity is searched It is all or part of any in sub- authority identifier, the partly or entirely key element and the access logical address three Combine corresponding network storage address.

Wherein, gateway unit is stored according to the electronics authority identifier, the partly or entirely key element and described The all or part of any combination accessed in logical address three uses pre-set network storage algorithm of Address Generation meter When calculating the network storage address, such as following methods calculating network storage address can be used：

According to part or all of key element and/or electronics authority identifier, such as authority identifier I, authority owner A Field contents, authority issue the field contents of object O, the field contents of the electronics authority person of issuing Op, authority time attribute T Field contents, the field contents of electronics authority type Td, the field contents of data manipulation type To, in the field of size of data S Hold, with reference to access logical address P_lUsing digest algorithm H₂The corresponding summary info D of calculating network storage address_n=H₂(I||A|| O||O_P||T||T_d||S||P_l), and show that network is deposited by searching for the correspondence between summary info and network storage address Store up address P_n。

Can also calculating network storage address with the following method：

According to any combination of part or all of key element and/or electronics authority identifier, such as authority identifier I, Field contents, the authority of authority owner A issues the field contents of object O, field contents, the authority of the electronics authority person of issuing Op Field contents, the electronics authority type T of time attribute T_dField contents, the field contents of data manipulation type To, data it is big The field contents of small S, using digest algorithm H₂The corresponding summary info D of calculating network storage address_n=H₂(I||A||O||O_P|| T||T_d||T_o| | S), and draw network storage address by searching for the correspondence between summary info and network storage address P_n。

Or calculating network storage address with the following method：

According to electronics authority identifier, part or all of key element and access part or all of in logical address three Any combination, for example authority identifier I, field contents, the authority of authority owner A issue the field contents of object O, electronics The field contents of the authority person of issuing Op, the field contents of authority time attribute T, the field contents of electronics authority type Td, data Field contents, the field contents of size of data S of action type To, with reference to access logical address P_lUsing pre-set network Network storage address P is calculated in the polynary function that calculates of storage address_n。

It is of course also possible to use other method calculating network storage address, the embodiment of the present invention is to network storage address The specific implementation form of generating algorithm is not construed as limiting, and the example that the embodiment of the present invention is enumerated is merely illustrative network storage address The specific implementation of generating algorithm, is not intended to limit the present invention the protection domain of embodiment.

Specifically, when network storage address is IP address, according to electronics authority identifier portion or whole key element, Access all or part of any combination in logical address and network storage address and generate the visit of the 3rd electronics authority data Ask that service broker's subelement that request is sent to the corresponding storage unit in network storage address includes：

The service broker of storage unit is determined according to the species of the network where storage gateway unit and network storage address The network address of subelement, according to electronics authority identifier, part or all of key element, accesses logical address and network storage All or part of any combination in address generates the 3rd electronics authority data access request and is sent to network address pair The service broker's subelement for the storage unit answered.Wherein, the 3rd electronics authority data access request include electronics authority identifier, All or part of any combination in part or all of key element, access logical address and network storage address.Its In, key element is described using identifier.

In the present embodiment, the network where storing gateway unit includes any one following network：Pass Transport control protocol view/Internet protocol (TCP/IP, Transmission Control Protocol/Internet Protocol) Network, optical-fibre channel (FC, Fibre Channel) network.

Wherein, when the network where storing gateway unit is Ethernet, Ethernet store gateway unit according to electronics with According to all or part of any combination generation IP in identifier, part or all of key element and access logical address three Location (i.e. the network storage address of service broker's subelement), then by electronics authority identifier, part or all of key element, visit Ask data block construction that all or part of any combination in logical address and network storage address is formed it is corresponding with Too net frame (i.e. the 3rd electronics authority data access request), service broker's subelement is sent to by ethernet frame.

When the network where storing gateway unit is fiber channel network, FC_IP store gateway unit according to electronics with According to identifier, part or all of key element and access all or part of any combination generation node in logical address three Name WWN, node port, fibre channel address FCID (i.e. the network storage address of service broker's subelement), then by electronics with According to all or part of in identifier, part or all of key element, access logical address and network storage address The data block that meaning combination is formed constructs corresponding fibre channel frame (i.e. the 3rd electronics authority data access request), is exchanged by FC Fibre channel frame is sent to service broker's subelement by machine.

In the present embodiment, storage unit refers to the software and hardware system for data storage, has a variety of storage forms, including But it is not limited to include any one following or any a variety of combination：

Distributed or single file system, relation or non-relational database system, storage unit hardware device.

Wherein, storage unit hardware device includes any one following or any a variety of combination：

The network switching equipment, network routing device, data storage device, access control apparatus.

Step 1102, service broker's subelement are according to electronics authority identifier, part or all of key element, access logic Path is locally stored in all or part of any combination generation in address and network storage address, according to part or all of The 3rd electronics authority data access request and/or path is locally stored corresponding operation processing is carried out to electronics authority data, Handling result is sent into electron authority data access service unit.

In the present embodiment, when the first electronics authority data access request comes from terminal device, electronics authority data access Handling result is sent to terminal device by service unit.

In the present embodiment, service broker's subelement is patrolled according to electronics authority identifier, part or all of key element, access Path, which is locally stored, in all or part of any combination generation in volume address and network storage address includes：

Service broker's subelement is according to the electronics authority identifier, part or all of key element, the access All or part of any combination in logical address and the network storage address uses pre-set local index Path is locally stored described in calculating in generating algorithm.

Alternatively, service broker's subelement is in pre-set electronics authority identifier, part or all of key element, access All or part of any combination in logical address, network storage address is the 3rd corresponding with being locally stored between path In relation, the electronics authority identifier, partly or entirely key element, the access logical address and the net are searched All or part of any combination in network storage address is corresponding described to be locally stored path.

Wherein, local index generating algorithm can be any particular algorithms, for example,

According to electronics authority identifier I, part or all of key element M, access logical address P_lWith network storage address P_n Using digest algorithm H₃The corresponding summary info D of calculating network storage address_O=H₃(I||M||P_l||P_n), and by searching for summary Information and the correspondence being locally stored between path draw and path P are locally stored_o。

And for example, digest algorithm H is used according to the field contents M of electronics authority identifier I, part or all of key element₃ The corresponding summary info D of calculating network storage address_O=H₃(I | | M), and by searching for summary info and be locally stored path it Between correspondence draw path P be locally stored_o。

And for example, according to electronics authority identifier I, the field contents M of part or all of key element, access logical address P_l With network storage address P_n, using it is pre-set the polynary unidirectional mapping function in path be locally stored be calculated road is locally stored Footpath P_o。

Certainly, local index generating algorithm can also be other algorithms, and the embodiment of the present invention generates local index and calculates The specific implementation form of method is not construed as limiting, and the example that the embodiment of the present invention is enumerated also is merely to illustrate that local index generation is calculated The specific implementation of method, is not intended to limit the present invention the protection domain of embodiment, which is not described herein again.

In the present embodiment, unique mark of the path for electronics authority data storage address in local storage unit is locally stored Know, including but not limited to including any one following：

Network storage file label, storage disks unique mark, file system path, filename and data structured query language (SQL, Structured Query Language) page table etc..

In the present embodiment, according to part or all of 3rd electronics authority data access request and/or path pair is locally stored Electronics authority data, which carry out corresponding operation processing, to be included：

It is corresponding with the 3rd electronics authority data access request to the corresponding electronics authority data progress in path is locally stored Operation processing.

In the present embodiment, operation processing includes following any one or more combinations：Store, look into Ask, change, replicate, download and delete etc..

For example, when operation processing is electronics authority data storage request in the 3rd electronics authority data access request, will The storage of electronics authority data is to being locally stored in path；

When operation processing is electronics authority data inquiry request in the 3rd electronics authority data access request, obtain local Electronics authority data in store path return to electron authority data access service unit；

When operation processing is electronics authority data modification request in the 3rd electronics authority data access request, obtain local Electronics authority data in store path, the electronics authority data obtained according to the modification of the 3rd electronics authority data access request, Modification result is returned into electron authority data access service unit.(such as the state of electronics authority data is never submitted an expense account and is repaiied It is changed to submit an expense account, returns to successfully modified message)

When operation processing is electronics authority data copy request in the 3rd electronics authority data access request, replicate local The electronics authority data of store path return to electron authority data access service unit；

When operation processing is electronics authority data download request in the 3rd electronics authority data access request, will locally deposit The electronics authority data for storing up path return to electron authority data access service unit.

When operation processing is electronics authority data removal request in the 3rd electronics authority data access request, will locally deposit The electronics authority data stored up in path are deleted, and will be deleted result and be returned to electron authority data access service unit.

Optionally, this method further includes：

Electronics authority data access service unit generates electronics authority identifier according to the partly or entirely key element, The terminal device and storage gateway list are carried out according to the partly or entirely key element and/or the electronics authority identifier The connection status management of member.

Specifically, for example, electronics authority data access service unit can be according to the task type in key element to One electronics authority data access request is classified, terminal device corresponding to every a kind of first electronics authority data access request The connection strategy management and state different from the connection implementation of service broker's subelement maintain method.

Wherein, according to task type the first electronics authority data access request can be divided into digital independent, data write-in, Data modification etc..

Wherein, connection status includes any one following or any a variety of combination：

Establish, connection maintains, connection disconnects.

In the present embodiment, electronics authority data access service unit, the storage gateway unit, the storage unit are set In the same apparatus, or it is arranged in different equipment.

It should be noted that above-mentioned electronics authority data access service unit, storage gateway unit, storage unit can be set Put in the same apparatus, can also be arranged in different equipment.

Any number of unit institutes in above-mentioned electronics authority data access service unit, storage gateway unit, storage unit The function of realization can be merged into a unit to realize, above-mentioned electronics authority data access service unit, storage gateway unit, The function that any one unit in storage unit is realized can also split into multiple units to realize.Specifically by which unit Which function realized, realizes that how many function can be with the embodiment of the present invention is not construed as limiting this, without in the restriction present invention's Protection domain.

The embodiment of the present invention solves the memory space of electronics authority storage system and media type dynamic expansion, data are visited Ask the time with memory capacity it is linear/sublinear increase key issues of.

Optionally, reimbursement module is additionally operable to：

Optionally, module is submitted an expense account to be specifically used for realizing electronics in the described pair of effective electron authority stored in the following ways Authority reimbursement instructs corresponding electronics authority to be submitted an expense account：

Optionally, module is submitted an expense account to be specifically used for realizing that described submit an expense account electronics authority instructs corresponding electricity in the following ways Sub- authority is audited：

In the present embodiment, referring to Figure 12, reimbursement module includes electronics authority reimbursement unit.

Optionally, reimbursement module further includes the examination ＆ verification of electronics authority bookkeeping voucher and storage unit.

In the present embodiment, the reimbursement instruction of electronics authority includes following any one or more combination：

Electronics authority reimbursement instruction identifier, electronics authority application terminal attribute, electronics authority application terminal reimbursement software Attribute, electronics authority reimbursement person, electronics authority reimbursement person person attribute, electronics authority reimbursement element identifier (element ID), the reimbursement of electronics authority Unit networks address, electronics authority reimbursement unit physical address, electronics authority number to be submitted an expense account, electronics authority to be submitted an expense account mark Symbol, the first electronics authority bookkeeping voucher information, random number, electronics authority reimbursement instruction encoding value.

Wherein, electronics authority application terminal reimbursement software attributes be used for describe electronics authority application terminal installation electronics with According to the parameter of reimbursement software, including but not limited to include：The title of electronics authority reimbursement software, version number.

Wherein, electronics authority reimbursement unit networks address and/or electronics authority reimbursement unit physical address can be by users It is manually entered or operation part or full detail calling encryption algorithm generation is submitted an expense account according to electronics authority.

The encryption algorithm is any pair of one mapping function, such as：Digest algorithm etc..

Wherein, the first electronics authority bookkeeping voucher information includes following any one or more combination：

Electronics authority identifier, electronics authority storage identifier, electronics authority information, electronics authority user, electronics with When being issued according to user attributes, electronics authority reimbursement person, electronics authority reimbursement person attribute, reimbursement time, serial number, electronics authority Between, destination, the beginning and ending time of ticket/air ticket, attached electronics authority document number, electronics authority be disbursed from the cost and expenses project, project leader, Department head, person in charge, highest examination ＆ approval leader, cashier, financial audit, financial administrator, submit an expense account the origin of an incident, the means of payment, Bank Account Number, Alipay account, wechat account, reimbursement organization, bookkeeping voucher numbering, subject summary, handler, expenditure silver Row account information, amount of debit side, amount of credit side, accreditation people, review people, book keeping operation people.

The first electronic certificate information can use any one or more following method to generate：

It is manually entered by user, is given birth to according to the generation of electronics authority reimbursement person attribute, according to electronics authority application terminal attribute Into.

Wherein, electronics authority information is used to describe electronics authority ticket information, including following any one or any number of Combination：

Electronics authority code, electronics authority number, electronics authority type, electronics authority issuing organization title, electronics authority Amount, the electronics authority term of validity, type of service, electronics authority invoicing time, purchaser's title, purchaser's identifier, purchaser Address, purchaser's phone, purchaser bank of deposit, purchaser's account, trade name, labor service title, service name, specifications and models, Unit, quantity, unit price, the amount of money, the tax rate, the amount of tax to be paid, Amount in Total, total amount of tax to be paid, the electronics authority side of issuing title, electronics authority are opened Tool side's identifier, the electronics authority side of issuing address, the electronics authority side of issuing phone, bank of deposit of the electronics authority side of issuing, electronics with According to the side's of issuing account, payee, drawer, review people and check code, password, the electronics authority for protection the above generation Issuing organization public key, issuing organization signature, the electronics authority side of issuing public key, the electronics authority side of issuing signature.

Wherein, electronics authority identifier is the unique mark of electronics authority, and electronics authority identifier is using encryption algorithm Any one or more information in electronics authority information are carried out to calculate generation, can be used for the inquiry of electronics authority, shape State management and audit；Electronics authority identifier is numeral, character string, the digital any combination with character.

Wherein, electronics authority reimbursement instruction encoding value is used for the authenticity for verifying the reimbursement instruction of electronics authority and/or complete Property.

Electronics authority reimbursement instruction encoding value is to any one in the reimbursement instruction of electronics authority or more using encryption algorithm A information carries out calculating acquisition.Wherein, encryption algorithm includes following any one or more combination：Pluck Want algorithm, signature algorithm, encryption identifying algorithm, Quick Response Code, bar code.

Optionally, electronics authority reimbursement unit receives the electronics authority reimbursement instruction from electronics authority application terminal Afterwards, judge that the reimbursement instruction of electronics authority is true complete, continue to execute the second electronics authority bookkeeping voucher information of generation Step.

Wherein, electronics authority reimbursement unit using encryption algorithm calculate electronics authority reimbursement instruct corresponding electronics with According to reimbursement instruction encoding value, the electronics authority reimbursement instruction encoding value in the electronics authority reimbursement instruction and the electricity calculated are compared Whether sub- authority reimbursement instruction encoding value is consistent, if unanimously, it is true complete to judge the electronics authority reimbursement instruction 's；If it is inconsistent, judge that the electronics authority reimbursement instruction is not true complete.

In the application, electronics authority submits an expense account unit and instructs corresponding electronics authority to carry out reimbursement bag the reimbursement of electronics authority Include：

Electronics authority submits an expense account unit and instructs corresponding electronics authority to audit the reimbursement of electronics authority, and examination ＆ verification is passed through Electronics authority is submitted an expense account.

Wherein, electronics authority reimbursement unit instructs corresponding electronics authority to carry out examination ＆ verification the reimbursement of electronics authority and includes：

The reimbursement unit generation electronics authority reimbursement of electronics authority instructs corresponding second electronics authority bookkeeping voucher information, will Second electronics authority bookkeeping voucher information sends the examination ＆ verification of electron authority bookkeeping voucher and storage unit；Electronics authority submits an expense account unit The examination ＆ verification of electronics authority bookkeeping voucher and storage result are received, it is logical with being audited in storage result to the examination ＆ verification of electronics authority bookkeeping voucher The electronics authority crossed is submitted an expense account；

Alternatively, the reimbursement unit generation electronics authority reimbursement of electronics authority instructs corresponding second electronics authority bookkeeping voucher letter Breath, audits the second electronics authority bookkeeping voucher information, and the electronics authority passed through to examination ＆ verification is submitted an expense account.

Optionally, the examination ＆ verification of electronics authority bookkeeping voucher receives the second electronics authority bookkeeping voucher information with storage unit, Second electronics authority bookkeeping voucher information is audited, if examination ＆ verification passes through, to the second electronics authority bookkeeping voucher information In part or all of information carry out storage filing, and the book keeping operation of electronics authority is generated according to the second electronics authority bookkeeping voucher information Voucher audit and storage result, electron authority reimbursement unit is sent by the examination ＆ verification of electronics authority bookkeeping voucher and storage result.

Optionally, electronics authority reimbursement unit generates the corresponding second electronics authority bookkeeping voucher information of the electronics authority Further include before：

The electronics authority reimbursement unit verifies the true or false of the electronics authority；

The electronics authority reimbursement unit, which generates the corresponding second electronics authority bookkeeping voucher information of electronics authority, to be included：Root According to electronics authority state the second electronics authority bookkeeping voucher information is generated for the electronics authority do not submitted an expense account effectively.

In the present embodiment, the second electronics authority bookkeeping voucher information includes following any one or more combination：

Second electronics authority bookkeeping voucher information identifier, electronics authority number, electronics authority identifier, electronics authority letter Breath, electronics authority application terminal attribute, electronics authority application terminal reimbursement software attributes, electronics authority reimbursement software attributes, electricity Sub- authority reimbursement cell attribute, electronics authority user, electronics authority user attributes, electronics authority reimbursement person, electronics authority Reimbursement person's attribute, reimbursement time, serial number, electronics authority issue time, destination, the beginning and ending time of ticket/air ticket, attached electronics Authority document number, the reimbursement origin of an incident, project leader, department head, person in charge, highest examination ＆ approval leader, cashier, finance are examined Core, financial administrator, electronics authority are disbursed from the cost and expenses project, the means of payment, Bank Account Number, Alipay account, wechat account, reimbursement unit Title, bookkeeping voucher numbering, subject summary, handler, expenditure bank account information, amount of debit side, amount of credit side, accreditation people, Check people, book keeping operation people, random number, the second electronics authority bookkeeping voucher information encoded radio；

The second electronics authority bookkeeping voucher information can be manually entered and/or submit an expense account instruction life according to electronics authority Into；

Wherein, the second electronics authority bookkeeping voucher information encoded radio is used to verify the second electronics authority bookkeeping voucher information Authenticity and/or integrality；The second electronics authority bookkeeping voucher information encoded radio is calling encryption algorithm to the second electricity Any information any combination in sub- authority bookkeeping voucher information carries out calculating acquisition；The encryption algorithm includes but unlimited In including following any one or more combination：Digest algorithm, signature algorithm, encryption identifying algorithm, Quick Response Code, bar code；

In the present embodiment, electronics authority bookkeeping voucher examination ＆ verification with storage unit to the second electronics authority bookkeeping voucher information into Row examination ＆ verification includes：

It is pre- whether the examination ＆ verification of electronics authority bookkeeping voucher meets with the second electronics authority bookkeeping voucher information of storage unit examination ＆ verification The finance regulation first set, if met, examination ＆ verification passes through；If do not met, audit and do not pass through.

Wherein, finance regulation can also be submitted an expense account unit regulation by higher authority's Uniform provisions by electronics authority, Including but not limited to include：Be disbursed from the cost and expenses project, subject, spending amount, electronics authority reimbursement person agreement, the means of payment.

Wherein, the examination ＆ verification of electronics authority bookkeeping voucher includes following any one or more combination with storage result：

Electronics authority bookkeeping voucher audit with storage result identifier, the second electronics authority bookkeeping voucher information identifier, Examination ＆ verification pass through, audit not by, examination ＆ verification not by error condition, random number, electronics authority bookkeeping voucher audit and storage result Encoded radio.

Wherein, the examination ＆ verification of electronics authority bookkeeping voucher is used to verify that electronics authority bookkeeping voucher is audited with storage result encoded radio With the authenticity and/or integrality of storage result；Wherein, the examination ＆ verification of electronics authority bookkeeping voucher and storage result encoded radio are use Encryption algorithm carries out the examination ＆ verification of electronics authority bookkeeping voucher with any one or more information in storage result to calculate acquisition； Wherein, encryption algorithm includes following any one or more combinations：Digest algorithm, signature algorithm, add Close identifying algorithm, Quick Response Code, bar code；

Wherein, the examination ＆ verification of electronics authority bookkeeping voucher can be according to our unit's finance regulation, upper-level leader's wealth with storage unit Any one or more combinations of business regulation, authority authorities rule, reimbursement auditing flow, ticket information are to the second electronics Authority bookkeeping voucher information carries out financial review of compliance analysis.For example whether the item of being disbursed from the cost and expenses of examination ＆ verification electronics authority meets finance Regulation, financial regulation expert consulting expense can only be disbursed from the cost and expenses from expert consulting expense, when electronics authority is submitted an expense account, if electronics authority nominal value Information is taken for expert consulting, then can only just be paid when these electronics authoritys are submitted an expense account from expert consulting expense, if from other item Mesh is disbursed from the cost and expenses, and when examination ＆ verification will not pass through examination ＆ verification.By formulating various auditing rules, the efficiency of electronics authority book keeping operation examination ＆ verification is improved, Electronics authority is avoided not conform to rule reimbursement.

Optionally, the examination ＆ verification of electronics authority bookkeeping voucher judges that the second electronics authority bookkeeping voucher information is with storage unit It is true complete, continue to execute the step of being audited to the second electronics authority bookkeeping voucher information.

Wherein, electronics authority bookkeeping voucher examination ＆ verification with storage unit using encryption algorithm calculate the second electronics authority book keeping operation with The corresponding second electronics authority bookkeeping voucher information encoded radio of information is demonstrate,proved, compares the in the second electronics authority bookkeeping voucher information Whether two electronics authority bookkeeping voucher information encoded radios and the second electronics authority bookkeeping voucher information encoded radio calculated are consistent, such as Fruit is consistent, then it is true complete to judge the second electronics authority bookkeeping voucher information；If it is inconsistent, judge the second electricity Sub- authority bookkeeping voucher information is not true complete.

Optionally, it is obstructed out-of-date when auditing, generation electronics authority examination ＆ verification error condition.

Optionally, electronics authority reimbursement unit judges that the examination ＆ verification of electronics authority bookkeeping voucher and storage result are true complete , continue to execute the step submitted an expense account with auditing the electronics authority passed through in storage result the examination ＆ verification of electronics authority bookkeeping voucher Suddenly.

Wherein, electronics authority reimbursement unit calculates the examination ＆ verification of electronics authority bookkeeping voucher using encryption algorithm and is compiled with storage result Code value, compares the examination ＆ verification of electronics authority bookkeeping voucher and is encoded with the electronics authority bookkeeping voucher examination ＆ verification in storage result with storage result Whether value and the electronics authority bookkeeping voucher examination ＆ verification calculated are consistent with storage result encoded radio, if unanimously, judging electronics It is true complete that authority bookkeeping voucher, which is audited with storage result,；If it is inconsistent, judge that electronics authority bookkeeping voucher is examined Core is not true complete with storage result.

In the present embodiment, the actual reimbursement of electronics authority includes following any one or more with Macro or mass analysis result to be submitted an expense account Combination：

The actual reimbursement of electronics authority and Macro or mass analysis resultant identifier to be submitted an expense account, electronics authority reimbursement cell attribute, electronics Authority storage unit attribute, submitted an expense account electronics authority number, submitted an expense account electronics authority identifier, electronics authority to be submitted an expense account Number, the identifier of electronics authority to be submitted an expense account, electronics authority state, electronics authority bookkeeping voucher examination ＆ verification with storage result, random number, The actual reimbursement of electronics authority and Macro or mass analysis result encoded radio to be submitted an expense account；

Wherein, the examination ＆ verification of electronics authority bookkeeping voucher includes following any one or more combinations with storage result：Examine Core by, examination ＆ verification not by, examination ＆ verification do not pass through the reason for.

Wherein, the actual reimbursement of electronics authority is used to verify the actual report of electronics authority with Macro or mass analysis result encoded radio to be submitted an expense account Sell and the authenticity and/or integrality of Macro or mass analysis result to be submitted an expense account；The actual reimbursement of the electronics authority is with treating that reimbursement collects Analysis result encoded radio be using encryption algorithm it is actual to electronics authority submit an expense account with it is any one in Macro or mass analysis result to be submitted an expense account A or multiple information carry out calculating acquisition；The encryption algorithm includes following any one or more Combination：Digest algorithm, signature algorithm, encryption identifying algorithm, Quick Response Code, bar code.

Optionally, electronics authority reimbursement unit directly can keep accounts the electronics authority submitted an expense account, that is, generate electronics Authority keeps accounts message, and the part or all of information in the message that keeps accounts is carried out storage filing, and generates electronics authority and keep accounts result；

Optionally, this method further includes：The electronics authority state submitted an expense account has been updated to by electronics authority reimbursement unit Effect has been submitted an expense account；Or the electronics authority state submitted an expense account is updated to effectively submit an expense account and with next by electronics authority reimbursement unit A or multiple any combination：Keep accounts or do not kept accounts, paid or do not paid, filed or do not filed.

In the present embodiment, the electronics authority state submitted an expense account is updated to effectively submit an expense account by electronics authority reimbursement unit； Or the electronics authority state submitted an expense account is updated to effectively submit an expense account and following one or more by electronics authority reimbursement unit Any combination：Kept accounts or do not kept accounts, paid or do not paid, filed or do not file including：

The reimbursement unit generation electronics authority state renewal request of electronics authority, the renewal request of electronics authority state is sent to State management module；Electronics authority state is updated to effectively submit an expense account by state management module；Or state management module is by electricity Sub- authority state is updated to effectively submit an expense account and following one or more any combination：Kept accounts or do not kept accounts, paid or Do not pay, filed or do not file, the renewal of generation electronics authority state by electronics authority state renewal result as a result, be sent to electricity Sub- authority submits an expense account unit.

Optionally, state management module judges that the renewal request of electronics authority state is true complete, continues to execute more The step of new electronics authority state.

Wherein, state management module calculates electronics authority state renewal request encoded radio using encryption algorithm, compares electronics Electronics authority state renewal request encoded radio in the renewal request of authority state is compiled with the electronics authority state renewal request calculated Whether code value is consistent, if unanimously, it is true complete to judge the renewal request of electronics authority state；If it is inconsistent, It is not true complete to judge the renewal request of electronics authority state.

Optionally, electronics authority reimbursement unit judges that electronics authority state is updated the result is that truly completely, continuing to hold Row is according to the examination ＆ verification of electronics authority bookkeeping voucher and the actual reimbursement of storage result generation electronics authority and Macro or mass analysis result to be submitted an expense account The step of.

Wherein, electronics authority reimbursement unit calculates electronics authority state renewal result encoded radio using encryption algorithm, compares Electronics authority state renewal result encoded radio in electronics authority state renewal result is tied with the electronics authority state renewal calculated Whether fruit encoded radio is consistent, if unanimously, judging that electronics authority state is updated the result is that true complete；If differ Cause, then it is not true complete to judge electronics authority state renewal result.

Optionally, electronics authority reimbursement unit judges that electronics authority has been submitted an expense account and/or kept accounts the result is that true complete , continue to execute the step of electronics authority state that renewal has been submitted an expense account updates.

Wherein, electronics authority reimbursement unit using encryption algorithm calculate electronics authority submitted an expense account and/or kept accounts result volume Code value, compares the electronics authority that electronics authority has been submitted an expense account and/or kept accounts in result and has submitted an expense account and/or kept accounts result encoded radio It is whether consistent with the electronics authority of calculating result encoded radio of having submitted an expense account and/or kept accounts, if unanimously, judging electronics authority Submit an expense account and/or kept accounts the result is that true complete；If it is inconsistent, judge that electronics authority has been submitted an expense account and/or entered Account result is not true complete.

In the present embodiment, the reimbursement request of electronics authority includes following any one or any number of combination：

Electronics authority reimbursement request identifier, electronics authority application terminal attribute, electronics authority user, electronics authority make User's attribute, electronics authority reimbursement person, electronics authority reimbursement person attribute, electronics authority reimbursement element identifier (element ID), electronics authority report Pin unit networks address, electronics authority reimbursement unit physical address, electronics authority issue the time, electronics authority type, electronics with According to the amount of money, electronics authority amount of money scope, the information of purchaser, the electronics authority means of payment, random number, the reimbursement request of electronics authority Encoded radio.

Wherein, the unique mark that electronics authority reimbursement request identifier is asked for the reimbursement of electronics authority, the reimbursement of electronics authority Request identifier is numeral, character string, the digital any combination with character.

Wherein, electronics authority issues date or the date range that the time issues for electronics authority.

Wherein, electronics authority reimbursement request encoded radio is used for the authenticity for verifying the reimbursement request of electronics authority and/or complete Property；

Electronics authority reimbursement request encoded radio is any one in being asked using encryption algorithm the reimbursement of electronics authority or appointed Anticipate what multiple information were calculated.

Wherein, encryption algorithm includes any one following：

Digest algorithm, signature algorithm, encryption identifying algorithm, Quick Response Code, bar code.

In the present embodiment, one or more electronics authoritys are requested to generate according to the reimbursement of electronics authority and submit an expense account inquiry request.

In the present embodiment, electronics authority reimbursement inquiry request includes following any one or any number of combination：

Electronics authority reimbursement inquiry request identifier, electronics authority application terminal attribute, electronics authority user, electronics with According to user attributes, electronics authority reimbursement person, electronics authority reimbursement person attribute, electronics authority reimbursement cell attribute, electronics authority Memory cell identification symbol, electronics authority storage unit network address, electronics authority storage unit physical address, electronics authority are issued Time, electronics authority type, the electronics authority amount of money, electronics authority amount of money scope, the information of purchaser, random number, electronics authority Submit an expense account inquiry request encoded radio.

Optionally, after electronics authority reimbursement unit receives the reimbursement request of electronics authority, judge that the reimbursement of electronics authority please Seeking Truth is truly complete, continues to execute the step of requesting to generate electronics authority reimbursement inquiry request according to the reimbursement of electronics authority.

Wherein, electronics authority reimbursement unit calculates the reimbursement of electronics authority using encryption algorithm and asks corresponding electronics authority report Pin request encoded radio, the electronics authority reimbursement request encoded radio and electronics authority of contrast conting submit an expense account the electronics authority report in request Whether pin request encoded radio is consistent, if unanimously, it is true complete to judge the reimbursement request of electronics authority；If differ Cause, then it is not true complete to judge the reimbursement request of electronics authority.

In the application, electronics authority reimbursement unit receives the electronics authority reimbursement from electronics authority application terminal please Ask, electronics authority reimbursement inquiry request is requested to generate according to the reimbursement of electronics authority, electronics authority reimbursement inquiry request is sent to Memory module；Memory module receives electronics authority reimbursement inquiry request, the corresponding electricity of inquiry electronics authority reimbursement inquiry request Sub- authority, and according to the electronics authority generation electronics authority reimbursement query result found, electronics authority is submitted an expense account into query result Send electron authority reimbursement unit.

Wherein, encryption algorithm includes any one following：

Electronics authority reimbursement inquiry request identifier, electronics authority application terminal attribute, electronics authority user, electronics with According to user attributes, electronics authority reimbursement person, electronics authority reimbursement person attribute, electronics authority reimbursement cell attribute, electronics authority Memory cell identification symbol, electronics authority storage unit network address, electronics authority storage unit physical address, electronics authority are issued Time, electronics authority type, the electronics authority amount of money, electronics authority amount of money scope, the information of purchaser, random number, electronics authority Submit an expense account inquiry request encoded radio.Optionally, after electronics authority reimbursement unit receives the reimbursement request of electronics authority, electronics is judged Authority reimbursement request is true complete, continues to execute and requests to generate electronics authority reimbursement inquiry request according to the reimbursement of electronics authority The step of.

In the present embodiment, electronics authority reimbursement query result includes following any one or any number of combinations：Electronics with According to reimbursement query result identifier, electronics authority reimbursement inquiry request identifier, electronics authority reimbursement cell attribute, electronics authority Storage unit attribute, electronics authority number, electronics authority identifier, electronics authority information, electronics authority state, random number, electricity Sub- authority submits an expense account query result encoded radio.

Wherein, electronics authority state includes following any one or more combination：

It is legal or illegal, issued or do not issued, is effective or invalid, having submitted an expense account or do not submitted an expense account, kept accounts or do not entered Account, paid or do not paid, filed or do not filed, support tax or do not supported tax, refunded or do not refunded, rushed red, calcellation etc..Electricity Sub- authority state can be obtained by memory module from state management module inquiry.

Specifically, memory module sends electronics authority status query request to state management module；State management module is looked into The state of the electronics authority in electronics authority status query request is ask, the electronics authority state found is sent to storage mould Block.

Wherein, electronics authority status query request includes following any one or more combinations：

Electronics authority status query request identifier, electronics authority application terminal identifier, electronics authority user mark Symbol, electronics authority issue terminal identifier, electronics authority ticket information, electronics authority state managing unit identifier, random number, Electronics authority status query request encoded radio.

Wherein, electronics authority status query request encoded radio is used for the authenticity for verifying electronics authority status query request And/or integrality.

In the present embodiment, memory module is in the corresponding electronics authority of inquiry electronics authority reimbursement inquiry request, according to electricity The corresponding electronics authority of part or all of information inquiry electronics authority reimbursement inquiry request in sub- authority reimbursement inquiry request.

Optionally, the corresponding electronics authority of electronics authority reimbursement inquiry request is inquired about to further include afterwards：

Memory module verifies the true or false of the electronics authority found, when the electronics authority found For invalid electronics authority when, it is invalid that the state of electronics authority is updated to.

Optionally, electronics authority storage unit only collects electronics authority shape when generating electronics authority reimbursement query result State is effective electronics authority do not submitted an expense account.

If memory module has carried out true or false verification, then electronics authority report when storing electronics authority to electronics authority Unit is sold when electronics authority is submitted an expense account, and can not carry out true or false verification to electronics authority.

When inquiring about electronics authority, all eligible electronics authority relevant informations in the whole network are searched for and looked into automatically Ask.Require no knowledge about electronics authority details and related information, it is not required that know electronics authority storage specific location and The mode of storage, automatic query search to all qualified electronics authoritys.Such as when can be issued according to electronics authority Between, the information automation such as electronics authority user attributes, electronics authority type search electronics authority information, without accurately knowing The information such as the number of road electronics authority, identifier, all qualified electronics authoritys are collected, and generate electronics authority report Query result is sold, sends electron authority reimbursement unit；Such as can also according to the electronics authority side of issuing, purchaser, issue when Between etc. information any combination automation search electronics authority information, generation electronics authority reimbursement query result；Pass through electronics authority All qualified electronics authoritys can be carried out automation reimbursement by reimbursement unit, improve the efficiency of electronics authority reimbursement.

Optionally, memory module judges that electronics authority reimbursement inquiry request is true complete, continues to execute according to electricity The step of part or all of information in sub- authority reimbursement inquiry request inquires about electronics authority.

Wherein, memory module calculates the corresponding electronics authority reimbursement of electronics authority reimbursement inquiry request using encryption algorithm and looks into Request encoded radio is ask, compares the electronics authority reimbursement inquiry request encoded radio in electronics authority reimbursement inquiry request and the electricity calculated Whether sub- authority reimbursement inquiry request encoded radio is consistent, if unanimously, judging that electronics authority reimbursement inquiry request is true Completely；If it is inconsistent, judge that electronics authority reimbursement inquiry request is not true complete.

Optionally, when electronics authority reimbursement query result do not include electronics authority state when, electronics authority reimbursement unit from State management module inquiry obtains.

Specifically, electronics authority submits an expense account unit sends electronics authority status query request to state management module；State pipe The state of the electronics authority in module polls electronics authority status query request is managed, the electronics authority state found is sent to Electronics authority submits an expense account unit.

Optionally, electronics authority reimbursement unit only collects electricity when generating electronics authority reimbursement inquiry Macro or mass analysis result Sub- authority state is effective electronics authority do not submitted an expense account.

In the present embodiment, electronics authority reimbursement inquiry Macro or mass analysis result includes following any one or more combination： Electronics authority number, electronics authority identifier, electronics authority information, random number, electronics authority reimbursement query result encoded radio.

Optionally, electronics authority reimbursement unit judges that electronics authority reimbursement query result is true complete, continues to hold The step of row generation electronics authority reimbursement inquiry Macro or mass analysis result.

Wherein, electronics authority reimbursement unit using encryption algorithm calculate the corresponding electronics of electronics authority reimbursement query result with According to reimbursement query result encoded radio, compare electronics authority reimbursement query result encoded radio in electronics authority reimbursement query result with Whether the electronics authority reimbursement query result encoded radio of calculating is consistent, if unanimously, judging electronics authority reimbursement inquiry knot Fruit is true complete；If it is inconsistent, judge that electronics authority reimbursement query result is not true complete.

Optionally, this method further includes：

Electronics authority submits an expense account unit to the examination ＆ verification of electronics authority bookkeeping voucher with auditing the electronics authority passed through in storage result After being submitted an expense account, generation electronics authority keeps accounts message, and the electronics authority message that keeps accounts is sent to memory module；

Memory module receives electronics authority and keeps accounts message, and the part or all of information in the message that keeps accounts is carried out storage and is returned Shelves, generation electronics authority submitted an expense account and/or kept accounts result and be sent to electronics authority reimbursement unit.

In the present embodiment, the electronics authority message that keeps accounts includes following any one or more combination：

Electronics authority keeps accounts message identifier, electronics authority number, electronics authority identifier, electronics authority information, electronics Authority application terminal attribute, electronics authority application terminal reimbursement software attributes, electronics authority reimbursement cell attribute, electronics authority report Sell software attributes, electronics authority user, electronics authority user attributes, electronics authority reimbursement person, electronics authority reimbursement person category Property, reimbursement time, serial number, electronics authority issue time, destination, the beginning and ending time of ticket/air ticket, attached electronics authority document Number, the reimbursement origin of an incident, project leader, department head, person in charge, highest examination ＆ approval leader, cashier, financial audit, finance Director, electronics authority be disbursed from the cost and expenses project, the means of payment, Bank Account Number, Alipay account, wechat account, reimbursement organization, note Account voucher numbering, subject summary, handler, expenditure bank account information, amount of debit side, amount of credit side, accreditation people, review people, Book keeping operation people, random number, electronics authority keep accounts message coding value.

Wherein, the electronics authority message coding value that keeps accounts is used to verifying that electronics authority to keep accounts the authenticity of message and/or complete Property；Wherein, electronics authority keep accounts message coding value be kept accounts using encryption algorithm to electronics authority in message any one or Multiple information carry out calculating acquisition；Wherein, encryption algorithm includes following any one or more groups Close：Digest algorithm, signature algorithm, encryption identifying algorithm, Quick Response Code, bar code.

Optionally, local electronics authority state is updated to effectively submit an expense account by memory module；Alternatively, memory module will be local Electronics authority state is updated to effectively submit an expense account and following one or more any combination：Keep accounts or do not kept accounts, paid Or do not pay, filed or do not file.

Optionally, memory module judges that the electronics authority message that keeps accounts is true complete, continue to execute generation electronics with According to submitted an expense account and/or kept accounts result and be sent to electronics authority reimbursement unit the step of.

Wherein, memory module calculates electronics authority using encryption algorithm and keeps accounts message coding value, compares electronics authority and keeps accounts Electronics authority in message keep accounts message coding value and the electronics authority message coding value that keeps accounts that calculates it is whether consistent, if one Cause, then judge that the electronics authority message that keeps accounts is true complete；If it is inconsistent, judge that electronics authority keeps accounts message not It is true complete.

Electronics authority result of having submitted an expense account and/or kept accounts includes following one or more any combination：Electronics Authority number, electronics authority identifier, electronics authority information, electronics authority application terminal attribute, electronics authority application terminal report Sell software attributes, electronics authority reimbursement cell attribute, electronics authority reimbursement software attributes, electronics authority user, electronics authority When user attributes, electronics authority reimbursement person, electronics authority reimbursement person attribute, reimbursement time, serial number, electronics authority are issued Between, destination, the beginning and ending time of ticket/air ticket, attached electronics authority document number, electronics authority be disbursed from the cost and expenses project, project leader, Department head, person in charge, highest examination ＆ approval leader, cashier, financial audit, financial administrator, submit an expense account the origin of an incident, the means of payment, Bank Account Number, Alipay account, wechat account, reimbursement organization, bookkeeping voucher numbering, subject summary, handler, expenditure silver Row account information, amount of debit side, amount of credit side, accreditation people, review people, book keeping operation people, electronics authority keep accounts successfully or not successfully；

Further include：

State management module, after receiving the authority request of processing electronics, inquires about the state of the electronics authority；Determine The electronics authority state is to handle the corresponding predetermined state of electronics authority request with described, then to the generation module or described Memory module or the reimbursement module send the first notification message；Receive the second notification message, update the electronics with According to state；

Electronics authority reimbursement request, the reimbursement of electronics authority instruct, issue the request of electronics authority, electronics authority supports tax request, Electronics authority refund request, the request of electronics authority returned ticket, electronics authority data access request.

Specifically, referring to Figure 13, state management module includes：

Query unit, after receiving the authority request of processing electronics, inquires about the state of the electronics authority；

Processing unit, for determining that the electronics authority state is predetermined shape corresponding with the processing electronics authority request State, then send the first notification message to the generation module or the memory module or the reimbursement module；

Updating block, for receiving the second notification message, updates the state of the electronics authority.

Wherein, the state of the electronics authority includes following any or a variety of combination：

It is legal or illegal, issued or do not issued, is effective or invalid, having submitted an expense account or do not submitted an expense account, kept accounts or do not entered Account, paid or do not paid, filed or do not filed, support tax or do not supported tax, refunded or do not refunded, rushed red, calcellation etc..

Optionally, the query unit is specifically used for：Receive and issue the request of electronics authority, inquire about the electronics authority State；

The processing unit is specifically used for：It is corresponding with the processing electronics authority request to determine the electronics authority state Predetermined state, then to the generation module or the memory module or it is described reimbursement module send the first notification message；

The updating block is specifically used for：Second notification message is received, the state of the electronics authority has been updated to Effect is not submitted an expense account.

Optionally, the query unit is specifically used for：The reimbursement request of electronics authority is received, inquires about the electronics authority State；

The updating block is specifically used for：Second notification message is received, the state of the electronics authority has been updated to Effect has been submitted an expense account；Alternatively, the state of electrical screen is updated to effectively submit an expense account and following one or more any combination：Keep accounts Or do not keep accounts, paid or do not pay, filed or do not file.

Optionally, the query unit is specifically used for：Receive electronics authority to ask to tax, inquire about the electronics authority State；

The updating block is specifically used for：Second notification message is received, the state of the electronics authority has been updated to Effect supports tax.

Optionally, the query unit is specifically used for：The refund request of electronics authority is received, inquires about the electronics authority State；

The updating block is specifically used for：Second notification message is received, the state of the electronics authority has been updated to Effect has been refunded.

Optionally, the query unit is specifically used for：The returned ticket request of electronics authority is received, inquires about the electronics authority State；

The updating block is specifically used for：Second notification message is received, the state of the electronics authority is updated to make Give up and/or rush red.

Optionally, described device further includes：

Authentication module, for before the state of the enquiry module inquiry electronics authority or in the update module Before updating electronics authority state, authentication is carried out, certification just triggers the query unit or the renewal is single by rear Member；

The query unit, the state of the electronics authority after being triggered in the range of search access right；Or

The updating block, the state of the electronics authority after being triggered in the range of renewal authority.

Optionally, the query unit generates electronics authority status inquiry before the state of the electronics authority is inquired about Request, the electronics authority status query request include following one or more and are combined：Electronics authority status inquiry Request identifier, electronics authority application terminal identifier, electronics authority user identifier, electronics authority issue terminal iidentification Symbol, electronics authority ticket information, electronics authority state managing unit identifier, random number, electronics authority status query request are compiled Code value, wherein, the electronics authority status query request encoded radio is by calling encryption algorithm to the electronics authority state Any combination of any information in inquiry request carries out calculating acquisition, for verifying the electronics authority status query request It is following one or more：Authenticity, integrality, non-repudiation.

Optionally, before the updating block updates the state of the electronics authority, the state renewal of generation electronics authority please Ask, the electronics authority state renewal request includes any combination of following one or more：The renewal of electronics authority state please Ask identifier, electronics authority identifier, electronics authority renewal before oldState, electronics authority renewal after new state, electronics with According to state managing unit identifier, timestamp, random number, electronics authority state renewal request encoded radio, wherein, the electronics with Request encoded radio is updated according to state to call encryption algorithm appointing to any information in electronics authority state renewal request Meaning combination carries out calculating acquisition, for verifying the following one or more of the electronics authority state renewal request：Truly Property, integrality, non-repudiation.

Optionally, after the updating block updates the state of the electronics authority, generate, store and send the electronics Authority state updates as a result, electronics authority state renewal result includes following one or more any combination：Electronics with According to state renewal resultant identifier, electronics authority state managing unit identifier, electronics authority identifier, electronics authority nominal value letter The new state after oldState, the renewal of electronics authority, random number, electronics authority state renewal result before breath, the renewal of electronics authority Encoded radio, wherein, the electronics authority state renewal result encoded radio is by calling encryption algorithm to the electronics authority shape Any combination of any information in state renewal result carries out calculating acquisition, for verifying the electronics authority state renewal knot Fruit it is following one or more：Authenticity, integrality, non-repudiation.

Optionally, the processing unit is additionally operable to before the update module updates the state of the electronics authority, into Row electronics authority state conflict detects, and such as detects that the renewal of electronics authority state has conflict, then notifies the update module not Update electronics authority state；Such as there is no conflict, then the update module is notified to update the state of the electronics authority.

Optionally, further include：

Optionally, identity management module is additionally operable to：

The different identification identifiers is associated with corresponding entity identifier by correlation function.

Optionally, authority processing unit further includes：

Optionally, the behavior administration module is specifically used for：

The functional entity unit includes following at least one：

The functional entity unit receives behavior supervision information gathering instruction, gathers corresponding behavior supervision information, and The behavior collected supervision information is sent to behavior administration module.

Wherein, O＆M information includes following at least one：

Operating status, daily record, flow.

Abnormal behaviour information includes following at least one：

Referring to Figure 14, the embodiment of the present invention proposes a kind of terminal, including processor and computer-readable recording medium, institute State and instruction is stored with computer-readable recording medium, when described instruction is performed by the processor, realize above-mentioned any one Kind authority processing method.

The embodiment of the present invention proposes a kind of computer-readable recording medium, is stored thereon with computer program, the meter Calculation machine program realizes the step of any one above-mentioned authority processing method when being executed by processor.

Referring to Figure 15, present applicant proposes a kind of authority processing system, including：

Equipment is generated, for generating effective electron authority；

Storage device, for storing the effective electron authority of generation；

Optionally, the reimbursement equipment is additionally operable to：

Optionally, the generation equipment is specifically used for：

Optionally, equipment is submitted an expense account to be specifically used for realizing electronics in the described pair of effective electron authority stored in the following ways Authority reimbursement instructs corresponding electronics authority to be submitted an expense account：

Further include：

Optionally, further include：

Optionally, the behavior monitoring equipment is specifically used for：

The functional entity device includes following at least one：

Although the embodiment disclosed by the application is as above, the content is only to readily appreciate the application and use Embodiment, is not limited to the application.Technical staff in any the application fields, is taken off not departing from the application On the premise of the spirit and scope of dew, various changes and modifications can be made therein, these variations and modifications are also considered as the guarantor of the present invention Protect scope.

Claims

A kind of 1. authority processing method, it is characterised in that including：

Generate effective electron authority；

Store the effective electron authority of generation；

The electronics authority reimbursement instruction of electronics authority application terminal is received, electronics authority in the effective electron authority of storage is submitted an expense account Instruct corresponding electronics authority to be submitted an expense account, and generate the actual reimbursement of electronics authority and be sent to electricity with Macro or mass analysis result to be submitted an expense account Sub- authority application terminal.
2. authority processing method according to claim 1, it is characterised in that the electricity for receiving electronics authority application terminal Before sub- authority reimbursement instruction, this method further includes：

The electronics authority reimbursement request of the electronics authority application terminal is received, in the effective electron authority of storage described in inquiry Corresponding electronics authority is asked in the reimbursement of electronics authority, and generate electronics authority reimbursement inquiry Macro or mass analysis result send electron with According to application terminal.
3. authority processing method according to claim 1, it is characterised in that the generation effective electron authority includes：

According to blank electronic authority identification information and electronics authority issuing organization public key generation blank electronic authority；According to blank electricity Sub- authority and effective electron authority identification information generates effective electron authority；

Wherein, blank electronic authority identification information includes the first electronics authority information and issuing organization is signed, effective electron authority Identification information includes the second electronics authority information and the electronics authority side of issuing signature；

Alternatively, according to the first electronics authority information, electronics authority issuing organization public key, issuing organization signature and effective electron authority Identification information generates effective electron authority.
4. authority processing method according to claim 1, it is characterised in that electricity in the effective electron authority of described pair of storage Sub- authority reimbursement, which instructs corresponding electronics authority to carry out reimbursement, to be included：

Corresponding electronics authority is instructed to audit electronics authority reimbursement, the electronics authority passed through to examination ＆ verification is reported Pin.
5. authority processing method according to claim 4, it is characterised in that described corresponding to the reimbursement instruction of electronics authority Electronics authority, which carries out examination ＆ verification, to be included：

The second electronics authority bookkeeping voucher information that electronics authority reimbursement instructs corresponding electronics authority is generated, to described the Two electronics authority bookkeeping voucher information are audited.
6. authority processing method according to claim 5, it is characterised in that the generation electronics authority reimbursement instruction corresponds to Electronics authority the second electronics authority bookkeeping voucher information before further include：

The true or false of the electronics authority is verified；

The generation electronics authority reimbursement instructs the second electronics authority bookkeeping voucher information of corresponding electronics authority to include：

The second electronics authority bookkeeping voucher information is generated for the electronics authority do not submitted an expense account effectively according to electronics authority state.
7. according to claim 1~6 any one of them authority processing method, it is characterised in that this method further includes：

After receiving the authority request of processing electronics, the state of the electronics authority is inquired about；

Determine the electronics authority state be with it is described processing the corresponding predetermined state of electronics authority request, then to the electronics with According to being handled accordingly；

Update the state of the electronics authority.
8. according to claim 1~6 any one of them authority processing method, it is characterised in that further included before this method：

After receiving electronics authority diverse identities registration request, according to what is carried in the electronics authority diverse identities registration request Information generates entity diverse identities ring；

After receiving the request handled electronics authority diverse identities, according to the information carried in the certification request received And the entity diverse identities ring obtains corresponding authentication mode and is authenticated.
9. according to claim 1~6 any one of them authority processing method, it is characterised in that this method further includes：

Behavior supervision is carried out to the processing procedure of the electronics authority；

Wherein, the processing procedure of the electronics authority includes at least one of：

The generating process of the electronics authority, the storing process of the electronics authority, the reimbursement process, described of the electronics authority The state management process of electronics authority, electronics authority diverse identities management process.
10. authority processing method according to claim 9, it is characterised in that the processing procedure to electronics authority into Every trade includes for supervision：

The behavior supervision information of the processing procedure of the electronics authority is obtained, carrying out Macro or mass analysis to behavior supervision information obtains To abnormal behaviour Macro or mass analysis result.
A kind of 11. authority processing unit, it is characterised in that including：

Generation module, for generating effective electron authority；

Memory module, for storing the effective electron authority of generation；

Module is submitted an expense account, the electronics authority for receiving electronics authority application terminal submits an expense account instruction, to the effective electron authority of storage The reimbursement of middle electronics authority instructs corresponding electronics authority to be submitted an expense account, and generates the actual reimbursement of electronics authority and treat that reimbursement collects point Analyse result and send electron authority application terminal.
12. authority processing unit according to claim 11, it is characterised in that the reimbursement module is additionally operable to：

The electronics authority reimbursement request of the electronics authority application terminal is received, in the effective electron authority of storage described in inquiry Corresponding electronics authority is asked in the reimbursement of electronics authority, and generate electronics authority reimbursement inquiry Macro or mass analysis result send electron with According to application terminal.
13. authority processing unit according to claim 11, it is characterised in that the generation module is specifically used for：

According to blank electronic authority identification information and electronics authority issuing organization public key generation blank electronic authority；According to blank electricity Sub- authority and effective electron authority identification information generates effective electron authority；

Wherein, blank electronic authority identification information includes the first electronics authority information and issuing organization is signed, effective electron authority Identification information includes the second electronics authority information and the electronics authority side of issuing signature；

Alternatively, according to the first electronics authority information, electronics authority issuing organization public key, issuing organization signature and effective electron authority Identification information generates effective electron authority.
14. authority processing unit according to claim 11, it is characterised in that it is described reimbursement module be specifically used for use with Under type realizes that the reimbursement of electronics authority instructs corresponding electronics authority to submit an expense account in the described pair of effective electron authority stored：

Corresponding electronics authority is instructed to audit electronics authority reimbursement, the electronics authority passed through to examination ＆ verification is reported Pin.
15. authority processing unit according to claim 14, it is characterised in that it is described reimbursement module be specifically used for use with Under type realizes that described submit an expense account electronics authority instructs corresponding electronics authority to audit：

The second electronics authority bookkeeping voucher information that electronics authority reimbursement instructs corresponding electronics authority is generated, to described the Two electronics authority bookkeeping voucher information are audited.
16. authority processing unit according to claim 15, it is characterised in that it is described reimbursement module be specifically used for use with Under type realizes that described submit an expense account electronics authority instructs corresponding electronics authority to audit：

The true or false of the electronics authority is verified；Generated according to electronics authority state for the electronics authority do not submitted an expense account effectively Electronics authority reimbursement instructs the second electronics authority bookkeeping voucher information of corresponding electronics authority, to second electronics with Audited according to bookkeeping voucher information.
17. according to claim 11~16 any one of them authority processing unit, it is characterised in that the generation module or institute State memory module or the reimbursement module is additionally operable to：

After receiving the authority request of processing electronics, processing electronics authority request is sent to state management module；Receive state First notification message of management module, handles the electronics authority accordingly, and it is logical to send second to state management module Know message；

Further include：

State management module, after receiving the authority request of processing electronics, inquires about the state of the electronics authority；Determine described Electronics authority state is to handle the corresponding predetermined state of electronics authority request with described, then to the generation module or the storage Module or the reimbursement module send the first notification message；The second notification message is received, updates the electronics authority State.
18. according to claim 11~16 any one of them authority processing unit, it is characterised in that further include：

Diverse identities management module is more according to the electronics authority after receiving electronics authority diverse identities registration request The information generation entity diverse identities ring carried in first identity registration request；

After receiving the request handled electronics authority diverse identities, according to the information carried in the certification request received And the entity diverse identities ring obtains corresponding authentication mode and is authenticated.
19. according to claim 11~16 any one of them authority processing unit, it is characterised in that further include：

Behavior administration module, for carrying out behavior supervision to the processing procedure of the electronics authority；

Wherein, the processing procedure of the electronics authority includes at least one of：

The generating process of the electronics authority, the storing process of the electronics authority, the reimbursement process, described of the electronics authority The state management process of electronics authority, electronics authority diverse identities management process.
20. authority processing unit according to claim 19, it is characterised in that the behavior administration module is specifically used for：

The behavior supervision information of the processing procedure of the electronics authority is obtained, carrying out Macro or mass analysis to behavior supervision information obtains To abnormal behaviour Macro or mass analysis result.
21. authority processing unit according to claim 20, it is characterised in that the behavior administration module is specifically used for：

Behavior supervision information gathering instruction is sent to the functional entity unit, receives the behavior supervision of the functional entity unit Information, carries out Macro or mass analysis to behavior supervision information and obtains abnormal behaviour Macro or mass analysis result；

The functional entity unit includes following at least one：

The generation module, the memory module, the reimbursement module, state management module, diverse identities management module.
22. a kind of terminal, including processor and computer-readable recording medium, it is stored with the computer-readable recording medium Instruction, it is characterised in that when described instruction is performed by the processor, realize such as claim 1~10 any one of them Authority processing method.
23. a kind of computer-readable recording medium, is stored thereon with computer program, it is characterised in that the computer program Realized when being executed by processor such as the step of claim 1~10 any one of them authority processing method.
A kind of 24. authority processing system, it is characterised in that including：

Equipment is generated, for generating effective electron authority；

Storage device, for storing the effective electron authority of generation；

Equipment is submitted an expense account, the electronics authority for receiving electronics authority application terminal submits an expense account instruction, to the effective electron authority of storage The reimbursement of middle electronics authority instructs corresponding electronics authority to be submitted an expense account, and generates the actual reimbursement of electronics authority and treat that reimbursement collects point Analyse result and send electron authority application terminal.
25. authority processing system according to claim 24, it is characterised in that the reimbursement equipment is additionally operable to：

The electronics authority reimbursement request of the electronics authority application terminal is received, in the effective electron authority of storage described in inquiry Corresponding electronics authority is asked in the reimbursement of electronics authority, and generate electronics authority reimbursement inquiry Macro or mass analysis result send electron with According to application terminal.
26. authority processing system according to claim 24, it is characterised in that the generation equipment is specifically used for：

According to blank electronic authority identification information and electronics authority issuing organization public key generation blank electronic authority；According to blank electricity Sub- authority and effective electron authority identification information generates effective electron authority；

Wherein, blank electronic authority identification information includes the first electronics authority information and issuing organization is signed, effective electron authority Identification information includes the second electronics authority information and the electronics authority side of issuing signature；

Alternatively, according to the first electronics authority information, electronics authority issuing organization public key, issuing organization signature and effective electron authority Identification information generates effective electron authority.
27. authority processing system according to claim 24, it is characterised in that it is described reimbursement equipment be specifically used for use with Under type realizes that the reimbursement of electronics authority instructs corresponding electronics authority to submit an expense account in the described pair of effective electron authority stored：

Corresponding electronics authority is instructed to audit electronics authority reimbursement, the electronics authority passed through to examination ＆ verification is reported Pin.
28. authority processing system according to claim 27, it is characterised in that it is described reimbursement equipment be specifically used for use with Under type realizes that described submit an expense account electronics authority instructs corresponding electronics authority to audit：

The second electronics authority bookkeeping voucher information that electronics authority reimbursement instructs corresponding electronics authority is generated, to described the Two electronics authority bookkeeping voucher information are audited.
29. authority processing system according to claim 28, it is characterised in that it is described reimbursement equipment be specifically used for use with Under type realizes that described submit an expense account electronics authority instructs corresponding electronics authority to audit：

The true or false of the electronics authority is verified；Generated according to electronics authority state for the electronics authority do not submitted an expense account effectively Electronics authority reimbursement instructs the second electronics authority bookkeeping voucher information of corresponding electronics authority, to second electronics with Audited according to bookkeeping voucher information.
30. according to claim 24~29 any one of them authority processing system, it is characterised in that the generation equipment or institute State storage device or the reimbursement equipment is additionally operable to：

After receiving the authority request of processing electronics, processing electronics authority request is sent to status management apparatus；Receive state First notification message of management equipment, handles the electronics authority accordingly, and it is logical to send second to status management apparatus Know message；

Further include：

Status management apparatus, after receiving the authority request of processing electronics, inquires about the state of the electronics authority；Determine described Electronics authority state is to handle the corresponding predetermined state of electronics authority request with described, then to the generation equipment or the storage Equipment or the reimbursement equipment send the first notification message；The second notification message is received, updates the electronics authority State.
31. according to claim 24~29 any one of them authority processing system, it is characterised in that further include：

Diverse identities management equipment is more according to the electronics authority after receiving electronics authority diverse identities registration request The information generation entity diverse identities ring carried in first identity registration request；

After receiving the request handled electronics authority diverse identities, according to the information carried in the certification request received And the entity diverse identities ring obtains corresponding authentication mode and is authenticated.
32. according to claim 24~29 any one of them authority processing system, it is characterised in that further include：

Behavior monitoring equipment, for carrying out behavior supervision to the processing procedure of the electronics authority；

Wherein, the processing procedure of the electronics authority includes at least one of：

The generating process of the electronics authority, the storing process of the electronics authority, the reimbursement process, described of the electronics authority The state management process of electronics authority, electronics authority diverse identities management process.
33. authority processing system according to claim 32, it is characterised in that the behavior monitoring equipment is specifically used for：

The behavior supervision information of the processing procedure of the electronics authority is obtained, carrying out Macro or mass analysis to behavior supervision information obtains To abnormal behaviour Macro or mass analysis result.
34. authority processing system according to claim 33, it is characterised in that the behavior monitoring equipment is specifically used for：

Behavior supervision information gathering instruction is sent to the functional entity device, receives the behavior supervision of the functional entity device Information, carries out Macro or mass analysis to behavior supervision information and obtains abnormal behaviour Macro or mass analysis result；

The functional entity device includes following at least one：

The generation equipment, the storage device, the reimbursement equipment, status management apparatus, diverse identities management equipment.