CN105205385B - A kind of business operation authorization method and system - Google Patents

A kind of business operation authorization method and system Download PDF

Info

Publication number
CN105205385B
CN105205385B CN201510571622.4A CN201510571622A CN105205385B CN 105205385 B CN105205385 B CN 105205385B CN 201510571622 A CN201510571622 A CN 201510571622A CN 105205385 B CN105205385 B CN 105205385B
Authority
CN
China
Prior art keywords
equipment
business
business operation
note
authorization
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201510571622.4A
Other languages
Chinese (zh)
Other versions
CN105205385A (en
Inventor
黄海峰
王方超
郭小兵
张立强
霸志辉
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Bank of China Ltd
Original Assignee
Bank of China Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Bank of China Ltd filed Critical Bank of China Ltd
Priority to CN201510571622.4A priority Critical patent/CN105205385B/en
Publication of CN105205385A publication Critical patent/CN105205385A/en
Application granted granted Critical
Publication of CN105205385B publication Critical patent/CN105205385B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/44Program or device authentication

Abstract

The embodiment of the invention discloses a kind of method and system of business operation mandate, the method includes:First equipment receives the authorization requests to current business operation that the second equipment is sent, and the authorization requests include the operation information of the business operation;First equipment shows the operation information of the business operation, and operation selection is made according to the operation information so as to the user of first equipment;First equipment sends the authorization response of the business operation to second equipment, and the authorization response includes the operation and selects so that second equipment performs the business operation according to the operation selection.The present invention can ensure that business operation is completed in the case where client knows and allows, and realize the transparent of business operation, while reduce the risk of infringement that business operation behavior is brought.

Description

A kind of business operation authorization method and system
Technical field
The present invention relates to financial fields, and in particular to a kind of business operation authorization method and system.
Background technology
In financial system, business personnel is when for client's transacting business, since whole process lacks the participation of client, so industry Business person has an opportunity to carry out abuse to the account of client, and the fund for bank and client brings certain risk.
In order to reduce the risk that this business operation is brought, traditional method is the industry using monitoring technology record traffic person Business operating process, such as using camera equipment.But this can not be avoided the risk of legal generic operation.So-called legal generic operation wind Danger refers to that the business operation that business personnel performs is completely legal in software systems, but is not the industry that client's actual needs is done Business, in other words, business personnel damage the business operation of the benefit of client in unwitting done of client.
Invention content
In order to reduce the risk of infringement that business operation behavior is brought, the present invention provides a kind of business operation authorization method and System.
The present invention provides a kind of business operation authorization method, the method includes:
First equipment receives the authorization requests to current business operation that the second equipment is sent, and the authorization requests include institute State the operation information of business operation;
First equipment shows the operation information of the business operation, so as to first equipment user according to described Operation information makes operation selection;
First equipment sends the authorization response of the business operation to second equipment, and the authorization response includes The operation selection so that second equipment performs the business operation according to the operation selection.
Preferably, after second equipment performs the business operation according to the operation selection, the method is also wrapped It includes:
Second equipment generates the operation note of the business operation, and the operation note includes whether to authorize mark;
The operation note is sent to third equipment by second equipment, so that third equipment is according to the operation note Generate the first operation report.
Preferably, the method further includes:
Second equipment records the operation note of any business operation, and the operation note includes carrying whether authorize mark The record of knowledge;
The operation note is sent to third equipment by second equipment, so that third equipment is according to the operation note Generate the second operation report;
Described second operation report need to be authorized business operation type to be compared by the third equipment with preset, with true Surely it is operated with the presence or absence of illegal traffic, the illegal traffic operation need to authorize business operation type, but do not carry to belong to described Whether mandate mark business operation.
Preferably, the method further includes:
Second equipment sends upgrade package to first equipment, so that first equipment completes upgrading.
The present invention also provides a kind of business operation authoring system, the system comprises the first equipment and the second equipment,
Second equipment, for the authorization requests operated to first equipment transmission to current business, the mandate Request includes the operation information of the business operation;
First equipment for receiving authorization requests, and shows the operation information of the business operation, so as to described The user of one equipment makes operation selection according to the operation information;And send awarding for the business operation to second equipment Power response, the authorization response include the operation and select;
Second equipment, for performing the business operation according to the operation selection.
Preferably, the system also includes third equipment;
Second equipment, is additionally operable to generate the operation note of the business operation, and the operation note includes whether to award Token is known;And the operation note is sent to the third equipment;
The third equipment, for generating the first operation report according to the operation note.
Preferably, the system also includes third equipment;
Second equipment, for recording the operation note of any business operation, the operation note includes whether to authorize Mark;And the operation note is sent to the third equipment;
The third equipment, for generating the second operation report according to the operation note;And the described second operation is reported Table need to authorize business operation type to be compared with preset, to determine whether there is illegal traffic operation, the illegal traffic Business operation type need to be authorized to belong to described by operating, but not carry the business operation for whether authorizing mark.
Preferably, second equipment is additionally operable to send upgrade package to first equipment, so that first equipment is complete Into upgrading.
In the present invention, the first equipment first receives the authorization requests to current business operation that the second equipment is sent, described Authorization requests include the operation information of the business operation.Secondly, first equipment shows the operation letter of the business operation Breath makes operation selection so as to the user of first equipment according to the operation information.Again, first equipment is to described Second equipment sends the authorization response of the business operation, and the authorization response includes the operation and selects so that described second Equipment performs the business operation according to the operation selection.Compared with prior art, the present embodiment can ensure business operation It is completed in the case where client knows and allows, realizes the transparent of business operation.Simultaneously business operation behavior is reduced to bring Risk of infringement.
Description of the drawings
In order to illustrate more clearly of the technical solution in the embodiment of the present application, make required in being described below to embodiment Attached drawing is briefly described, it should be apparent that, the accompanying drawings in the following description is only some embodiments of the present application, for For those of ordinary skill in the art, without having to pay creative labor, it can also be obtained according to these attached drawings His attached drawing.
Fig. 1 is a kind of business operation authorization method flow chart provided in an embodiment of the present invention;
Fig. 2 is a kind of business operation authoring system structure diagram provided in an embodiment of the present invention.
Specific embodiment
Below in conjunction with the attached drawing in the embodiment of the present application, the technical solution in the embodiment of the present application is carried out clear, complete Site preparation describes, it is clear that described embodiments are only a part of embodiments of the present application, instead of all the embodiments.It is based on Embodiment in the application, those of ordinary skill in the art are obtained every other without making creative work Embodiment shall fall in the protection scope of this application.
It is a kind of business operation authorization method flow chart provided in an embodiment of the present invention with reference to figure 1, the method includes:
S101:First equipment receives the authorization requests to current business operation that the second equipment is sent, the authorization requests Include the operation information of the business operation.
In the embodiment of the present invention, the first equipment, the second equipment may each be computer.In financial field, described first Equipment can be the automatic teller machine that business personnel uses, and the second equipment can be the computer that client uses.Wherein, business personnel makes Automatic teller machine passes through the connection communications such as preset communication protocol and interface protocol with the computer that client uses.
In practical application, when business personnel needs the business operation of client authorization using automatic teller machine execution, automatic teller machine meeting The authorization requests actively operated to the computer transmission that client uses to current business.Wherein, the authorization requests can include The operation information of the business operation.
S102:First equipment shows the operation information of the business operation, so as to user's root of first equipment Operation selection is made according to the operation information.
In the embodiment of the present invention, after first equipment receives the operation information of the business operation, by the behaviour It is shown as information.The user of first equipment can make operation selection according to the operation operation information of display.
In practical application, after the computer that client uses receives the authorization requests from automatic teller machine, by the mandate Operation information in request is shown.Client carries out operation selection, the calculating used such as client by the operation information of display It can be shown on the display of machine " whether allowing to transfer accounts 50,000 yuan ", client can select mouse to click "Yes" or "No" and complete operation Selection.
S103:First equipment sends the authorization response of the business operation to second equipment, and described authorize is rung It should include the operation to select so that second equipment performs the business operation according to the operation selection.
In the embodiment of the present invention, after first equipment receives the operation selection of user, the operation will be included and selected The authorization response selected is sent to second equipment.After second equipment receives the authorization response, according to described The operation selection of the user of one equipment performs the business operation.Specifically, when the user of first equipment selects to authorize institute When stating the second equipment execution business operation, second equipment can continue to execute the business operation.But when described When user's selection of first equipment does not authorize the second equipment execution business operation, second equipment needs to stop holding The row business operation.
In practical application, the business personnel of bank is when using automatic teller machine execution to need the business operation of client authorization, only The business operation could normally be performed by having to obtain the mandate of client.It can ensure that business personnel does the business operation performed in this way All it is the business operation that client knows and allows, realizes the transparent execution of business operation.
In order to record authorization conditions of the user to business operation of the first equipment, the present embodiment can also include:
First, second equipment generates the operation note of the business operation, and the operation note includes whether to authorize Mark.Secondly, the operation note is sent to third equipment by second equipment, so that third equipment is remembered according to the operation Record generates the first operation report.Wherein, the third equipment can be server.
In practical application, automatic teller machine records the client after the authorization response of computer transmission that client uses is received To the authorization conditions of the business operation, and generate operation note.In addition, automatic teller machine also needs to send the operation note of generation To server so as to electronic archive.Specifically, server after the operation note is received, can be produced according to the operation note Raw report, so that subsequent banks such as are checked account at the uses.
In addition, in order to which business personnel is further prevented to invade the legitimate rights and interests of client, the embodiment of the present invention can also carry out Following operation:
First, second equipment records the operation note of any business operation, and the operation note includes whether to authorize Mark.Secondly, the operation note is sent to third equipment by second equipment, so that third equipment is remembered according to the operation Record generates the second operation report.Again, the described second operation report need to be authorized business operation by the third equipment with preset Type is compared, and to determine whether there is illegal traffic operation, the illegal traffic operation need to authorize business to belong to described Action type, but the business operation for whether authorizing mark is not carried.
In practical application, automatic teller machine records each business operation of its processing, and generates operation note.The automatic teller machine After the operation note is sent to server, server generates report according to the operation note.Server is according to preset Business operation type need to be authorized, judges to whether there is illegal business operation in the report.That is, the industry of operation automatic teller machine Whether business personnel, which perform to belong to, need to authorize business operation type, but without the business operation of client authorization.
In addition, second equipment can also send upgrade package to first equipment, so that first equipment is completed Upgrading.
In the present embodiment, the unified completion of computer that automatic teller machine can control client to use upgrades.
In the embodiment of the present invention, first, the first equipment receives the mandate to current business operation that the second equipment is sent please It asks, the authorization requests include the operation information of the business operation.Secondly, first equipment shows the business operation Operation information makes operation selection so as to the user of first equipment according to the operation information.Again, first equipment The authorization response of the business operation is sent to second equipment, the authorization response includes the operation and selects so that institute It states the second equipment and the business operation is performed according to the operation selection.Compared with prior art, the present embodiment can ensure industry Business operation is completed in the case where client knows and allows, and realizes the transparent of business operation.Reduce business operation row simultaneously For the risk of infringement brought.
It is business operation authoring system structure diagram provided in an embodiment of the present invention with reference to figure 2, the system comprises the One equipment 201 and the second equipment 202;
Second equipment 202, it is described to award for the authorization requests operated to first equipment transmission to current business Power request includes the operation information of the business operation;
First equipment 201 for receiving authorization requests, and shows the operation information of the business operation, with toilet The user for stating the first equipment makes operation selection according to the operation information;And send the business operation to second equipment Authorization response, the authorization response include it is described operation select;
Second equipment 202, for performing the business operation according to the operation selection.
In addition, the system can also include third equipment;
Second equipment, is additionally operable to generate the operation note of the business operation, and the operation note includes whether to award Token is known;And the operation note is sent to the third equipment;
The third equipment, for generating the first operation report according to the operation note.
In another realization method, the system can also include third equipment;
Second equipment, for recording the operation note of any business operation, the operation note includes whether to authorize Mark;And the operation note is sent to the third equipment;
The third equipment, for generating the second operation report according to the operation note;And the described second operation is reported Table need to authorize business operation type to be compared with preset, to determine whether there is illegal traffic operation, the illegal traffic Business operation type need to be authorized to belong to described by operating, but not carry the business operation for whether authorizing mark.
In addition, second equipment, is additionally operable to send upgrade package to first equipment, so that first equipment is completed Upgrading.
In the embodiment of the present invention, second equipment, for being awarded to first equipment transmission to current business operation Power request, the authorization requests include the operation information of the business operation;First equipment, for receiving authorization requests, And show the operation information of the business operation, operation choosing is made according to the operation information so as to the user of first equipment It selects;And the authorization response of the business operation is sent to second equipment, the authorization response includes the operation and selects;Institute The second equipment is stated, for performing the business operation according to the operation selection.Compared with prior art, the present embodiment can be protected Card business operation is completed in the case where client knows and allows, and realizes the transparent of business operation, while reduces business behaviour The risk of infringement brought as behavior.
For device embodiment, since it corresponds essentially to embodiment of the method, so related part is referring to method reality Apply the part explanation of example.The apparatus embodiments described above are merely exemplary, wherein described be used as separating component The unit of explanation may or may not be physically separate, and the component shown as unit can be or can also It is not physical unit, you can be located at a place or can also be distributed in multiple network element.It can be according to reality It needs that some or all of module therein is selected to realize the purpose of this embodiment scheme.Those of ordinary skill in the art are not In the case of making the creative labor, you can to understand and implement.
It should be noted that herein, relational terms such as first and second and the like are used merely to a reality Body or operation are distinguished with another entity or operation, are deposited without necessarily requiring or implying between these entities or operation In any this practical relationship or sequence.Moreover, term " comprising ", "comprising" or its any other variant are intended to Non-exclusive inclusion, so that process, method, article or equipment including a series of elements not only will including those Element, but also including other elements that are not explicitly listed or further include as this process, method, article or equipment Intrinsic element.In the absence of more restrictions, the element limited by sentence " including one ... ", it is not excluded that Also there are other identical elements in the process, method, article or apparatus that includes the element.
The business operation authorization method and system provided above to the embodiment of the present invention is described in detail, herein It applies specific case to be expounded the principle of the present invention and embodiment, the explanation of above example is only intended to help Understand the method and its core concept of the present invention;Meanwhile for those of ordinary skill in the art, thought according to the present invention, There will be changes in specific embodiments and applications, in conclusion the content of the present specification should not be construed as to this The limitation of invention.

Claims (6)

1. a kind of business operation authorization method, which is characterized in that the method includes:
First equipment receives the authorization requests to current business operation that the second equipment is sent, and the authorization requests include the industry The operation information of business operation;
First equipment shows the operation information of the business operation, so as to first equipment user according to the operation Information makes operation selection;
First equipment sends the authorization response of the business operation to second equipment, and the authorization response includes described Operation selection so that second equipment performs the business operation according to the operation selection;
Second equipment records the operation note of any business operation, and the operation note of any business operation includes Carry the record for whether authorizing mark;
The operation note of any business operation is sent to third equipment by second equipment, so as to third equipment root The second operation report is generated according to the operation note of any business operation;
Described second operation report need to be authorized business operation type to be compared by the third equipment with preset, to determine to be It is no that the illegal traffic operation need to authorize business operation type to belong to described there are illegal traffic operation, but do not carry whether Authorize the business operation of mark.
2. according to the method described in claim 1, it is characterized in that, second equipment is according to performing the operation selection After business operation, the method further includes:
Second equipment generates the operation note of the business operation, and the operation note includes whether to authorize mark;
The operation note is sent to third equipment by second equipment, so that third equipment is generated according to the operation note First operation report.
3. according to the method described in claim 1, it is characterized in that, the method further includes:
Second equipment sends upgrade package to first equipment, so that first equipment completes upgrading.
4. a kind of business operation authoring system, which is characterized in that the system comprises the first equipment, the second equipment and thirds to set It is standby,
Second equipment, for the authorization requests operated to first equipment transmission to current business, the authorization requests Include the operation information of the business operation;
First equipment for receiving authorization requests, and shows the operation information of the business operation, sets so as to described first Standby user makes operation selection according to the operation information;And the mandate that the business operation is sent to second equipment is rung Should, the authorization response includes the operation and selects;
Second equipment for performing the business operation according to the operation selection, is additionally operable to record any business operation Operation note, the operation note of any business operation includes whether to authorize mark;And any business is grasped The operation note made is sent to the third equipment;
The third equipment, for generating the second operation report according to the operation note of any business operation;It and will The second operation report need to authorize business operation type to be compared with preset, to determine whether there is illegal traffic behaviour Make, the illegal traffic operation need to authorize business operation type, but do not carry and the business of mark whether is authorized to grasp to belong to described Make.
5. system according to claim 4, which is characterized in that
Second equipment, is additionally operable to generate the operation note of the business operation, and the operation note includes whether to authorize mark Know;And the operation note is sent to the third equipment;
The third equipment is additionally operable to generate the first operation report according to the operation note.
6. system according to claim 4, which is characterized in that
Second equipment is additionally operable to send upgrade package to first equipment, so that first equipment completes upgrading.
CN201510571622.4A 2015-09-09 2015-09-09 A kind of business operation authorization method and system Active CN105205385B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201510571622.4A CN105205385B (en) 2015-09-09 2015-09-09 A kind of business operation authorization method and system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201510571622.4A CN105205385B (en) 2015-09-09 2015-09-09 A kind of business operation authorization method and system

Publications (2)

Publication Number Publication Date
CN105205385A CN105205385A (en) 2015-12-30
CN105205385B true CN105205385B (en) 2018-07-03

Family

ID=54953060

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201510571622.4A Active CN105205385B (en) 2015-09-09 2015-09-09 A kind of business operation authorization method and system

Country Status (1)

Country Link
CN (1) CN105205385B (en)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107240020A (en) * 2016-03-28 2017-10-10 平安科技(深圳)有限公司 Insurance accepts the risk monitoring and control method and apparatus of information
CN111056019B (en) * 2019-12-26 2022-08-19 陕西宝成航空仪表有限责任公司 Emergency evacuation signal system for airplane

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101383067A (en) * 2008-10-17 2009-03-11 中国建设银行股份有限公司 Bank counter transaction process implementing method, transaction system and customer terminal
CN101408969A (en) * 2008-11-13 2009-04-15 中国工商银行股份有限公司 Server and system for monitoring bank risk data
CN102306365A (en) * 2010-07-06 2012-01-04 福建升腾资讯有限公司 Method for financial transaction of bank counter

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP4745528B2 (en) * 2001-05-17 2011-08-10 富士通セミコンダクター株式会社 Register setting method and semiconductor device

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101383067A (en) * 2008-10-17 2009-03-11 中国建设银行股份有限公司 Bank counter transaction process implementing method, transaction system and customer terminal
CN101408969A (en) * 2008-11-13 2009-04-15 中国工商银行股份有限公司 Server and system for monitoring bank risk data
CN102306365A (en) * 2010-07-06 2012-01-04 福建升腾资讯有限公司 Method for financial transaction of bank counter

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
"商业银行自建RA系统开发";王强;《中国优秀博硕士学位论文全文数据库(硕士)经济与管理科学辑》;20060915(第09期);第39-40页 *

Also Published As

Publication number Publication date
CN105205385A (en) 2015-12-30

Similar Documents

Publication Publication Date Title
JP7027475B2 (en) Decentralized, decentralized data aggregation
US10785222B2 (en) Credential and authentication management in scalable data networks
CN108322472B (en) For providing method, system and the medium of identity based on cloud and access management
US10110605B2 (en) Targeted user access control system
CN110971652A (en) Block chain based digital data exchange
US9781102B1 (en) Managing support access in software-as-a-service systems
CN103369022B (en) Method and system for communication with memory device
CN103327100B (en) Resource processing method and site server
CN109690539A (en) Self-cleaning token pool
CN104052746B (en) Heterogeneous applications single-node login system and its single-point logging method
CN106716404A (en) Proxy servers within computer subnetworks
CN101552780B (en) Verification method and verification device
CN107026860A (en) Login authentication method, apparatus and system
CN108062461A (en) A kind of software authorization method, apparatus and system
CN110247927A (en) A kind of right management method and device of cloud computing resources
CN109559164A (en) Favor information processing method, device, electronic equipment and computer-readable medium
WO2012155095A1 (en) System and method for electronic lead verification
CN105205385B (en) A kind of business operation authorization method and system
WO2021026420A1 (en) Blockchain-based secure resource management
CN106209735A (en) A kind of information processing method, device and Electronic Health Record system
CN108335191A (en) Account-opening method, financial services system end and the computer storage media of finance account
CN105323145A (en) Malicious information identification method, device and system
CN101533504A (en) Electric medical affairs system and device
JP5268785B2 (en) Login restriction method for Web server system
CN112488707A (en) Service flow supervision method and system

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant