CN111612611A

CN111612611A - Bank card authentication method and device, computer equipment and storage medium

Info

Publication number: CN111612611A
Application number: CN202010462219.9A
Authority: CN
Inventors: 谢伟
Original assignee: OneConnect Financial Technology Co Ltd Shanghai
Current assignee: OneConnect Smart Technology Co Ltd; OneConnect Financial Technology Co Ltd Shanghai
Priority date: 2020-05-27
Filing date: 2020-05-27
Publication date: 2020-09-01

Abstract

The invention relates to a bank card authentication method, a bank card authentication device, computer equipment and a storage medium. The method comprises the steps of setting a bank card authentication routing interface platform, matching a corresponding authentication processor in an authentication mapping list according to an authentication mode by receiving an authentication request which is sent by a client and contains the authentication mode of a target bank card, wherein the authentication mapping list is a list of the authentication processors which are mapped in the bank card authentication routing interface platform according to different authentication modes of the target bank card, authenticating the target bank card through the authentication processor, and sending authentication result information to the client. By setting the bank card authentication routing platform, the invention can realize that the code logic does not need to be modified after the operator configures the authentication entry parameters in the background, thereby avoiding the high coupling degree of the developed codes, and when a new service scene is added, the invention does not need to develop a new interface for authentication, thereby ensuring that the subsequent system maintenance is relatively simple and the operation cost is reduced.

Description

Bank card authentication method and device, computer equipment and storage medium

Technical Field

The invention relates to the technical field of data authentication, in particular to a bank card authentication method, a bank card authentication device, computer equipment and a storage medium.

Background

In the bank loan transaction scene, bank card authentication is an important way for the authentication of customers. Currently, the commonly used authentication modes of the bank card include unionpay authentication, third-party payment authentication and bank interface authentication. Different authentication modes are adopted in different cooperation modes. For example, when only the current bank card needs to be authenticated to be true and valid, a UnionPay authentication channel is called; when a third party payment channel is needed to carry out the collection and payment, the authentication rule of the third party is called; when the bank is required to make the collection and payment, the bank interface makes the authentication. For the aspect of bank system development, every time a cooperation mode is on line, the loan system needs to redevelop a new authentication interface to be called by a scene party. Because repeated development exists among the authentication interfaces, system codes are repeated and disordered, and further, the subsequent system maintenance is complex, the problem troubleshooting is difficult, and the operation cost is directly increased.

Therefore, there is a need for improvements in the art in an attempt to obtain a better user experience.

Disclosure of Invention

Based on this, it is necessary to provide a bank card authentication method aiming at the existing problems, and by setting a bank card authentication routing platform and carrying out unified authentication processing aiming at different authentication interfaces, the newly added authentication mode can be configured and modified in real time, so that the development efficiency is improved, the workload of system testing is reduced, and the difficulty of later-stage system maintenance is reduced.

A bank card authentication method, the method comprising:

receiving an authentication request of a target bank card sent by a client, wherein the authentication request comprises an authentication mode of the target bank card;

matching the corresponding authentication processor in an authentication mapping list according to the authentication mode, wherein the authentication mapping list is a list of the corresponding authentication processor mapped in a bank card authentication routing interface platform according to different authentication modes of the target bank card;

and authenticating the target bank card through the authentication processor, and sending authentication result information to the client.

In one embodiment, the method for generating the authentication mapping list includes:

acquiring an authentication mode set, wherein the authentication mode set comprises an interface for authenticating the target bank card and an identification code corresponding to the interface;

assigning the identification code corresponding to the interface to a serviceID field of the bank card authentication routing interface platform;

and mapping the serviceID field to a corresponding authentication processor to generate an authentication mapping list.

In one embodiment, matching the corresponding authentication processor according to the authentication mode includes:

acquiring an authentication entry parameter management configuration form, wherein the authentication entry parameter management configuration form comprises an authentication entry parameter and a serviceID field;

acquiring a corresponding authentication mode according to the authentication entry parameter, and mapping and matching the authentication mode with the serviceID field according to the authentication mode;

and respectively setting the data type and the numerical value corresponding to the authentication entry parameter in the authentication entry parameter management configuration form.

In one embodiment, the authenticating the target bank card by the authentication processor and sending the authentication result information to the client specifically includes the following steps:

the application control layer provides a uniform interface for session processing, performs security check on the authentication entry parameter, and searches a corresponding authentication processor in the authentication mapping list according to the authentication mode of the serviceID field;

the authentication processor acquires a serviceID field in the authentication entry parameter management configuration form to acquire an authentication mode identification code;

the authentication processor acquires the authentication entry parameters which are mapped and matched with the serviceID field and subjected to the security verification of the application control layer, wherein the authentication entry parameters comprise an order number, a bank card number, an account opening bank, a mobile phone number, an identity card number, a fund party, a communication mode, an authentication request mode, a third-party interface address, an authentication request parameter type and a scene;

and the authentication processor encapsulates the authentication entry parameters after safety verification, calls corresponding authentication service according to the authentication entry parameters and sends authentication result information to the client.

A bank card authentication device is applied to a bank card authentication routing interface platform, and comprises:

the system comprises a receiving module, a processing module and a processing module, wherein the receiving module is used for receiving an authentication request of a target bank card sent by a client, and the authentication request comprises an authentication mode of the target bank card;

the matching module is used for matching the corresponding authentication processor in an authentication mapping list according to the authentication mode, wherein the authentication mapping list is a list of the corresponding authentication processors mapped in a bank card authentication routing interface platform according to different authentication modes of the target bank card;

and the authentication module is used for authenticating the target bank card through the authentication processor and sending authentication result information to the client.

In one embodiment, the matching module comprises:

the set acquisition module is used for acquiring an authentication mode set, wherein the authentication mode set comprises an interface for authenticating the target bank card and an identification code corresponding to the interface;

the assignment module is used for assigning the identification code corresponding to the interface to a serviceID field of the bank card authentication routing interface platform;

and the generating module is used for mapping the serviceID field to the corresponding authentication processor so as to generate an authentication mapping list.

In one embodiment, the apparatus further comprises an initialization module, the initialization module comprising:

the form initialization module is used for initializing an authentication entry parameter management configuration form;

the authentication entry parameter setting module is used for inputting the serviceID field into the authentication entry parameter management configuration form and mapping and matching the serviceID field corresponding to the authentication mode; and synchronously setting the data type and the numerical value corresponding to the authentication entry parameter.

In one embodiment, the authentication module further comprises:

the authentication processor mapping module is used for providing a unified interface through an application control layer to perform session processing, performing security check on the authentication entry parameter, and searching a corresponding authentication processor in the authentication mapping list according to the authentication mode of the serviceID field;

the authentication mode identification code acquisition module is used for acquiring a serviceID field in the authentication entry parameter management configuration form according to the authentication processor so as to acquire an authentication mode identification code;

the authentication entrance parameter checking module is used for acquiring the authentication entrance parameters which are mapped and matched with the serviceID field and subjected to the safety check of the application control layer;

and the authentication calculation module is used for packaging the authentication entrance parameters after the safety verification into the authentication processor, calling corresponding authentication service according to the authentication entrance parameters and sending authentication result information to the client.

A computer device comprising a memory and a processor, the memory having stored therein computer readable instructions which, when executed by the processor, cause the processor to perform the steps of the bank card authentication method as described above.

A storage medium having stored thereon computer readable instructions which, when executed by one or more processors, cause the one or more processors to carry out the steps of the bank card authentication method as described above.

The authentication method, the device, the computer equipment and the storage medium of the bank card are different from the method that a new authentication interface needs to be developed for calling a scene party aiming at each different authentication mode when the existing bank card authenticates, the authentication processors corresponding to different authentication modes are arranged by arranging a bank card authentication routing interface platform, unifying interface calling modes, unifying processing dialogues and arranging the authentication parameters of each authentication mode on the background through the bank card authentication routing interface platform, and the authentication entrance parameters can be flexibly modified and configured according to the operation condition; when receiving the bank card authentication request sent by the application, the matched authentication processor is searched according to the specific authentication mode, the authentication processor extracts the corresponding authentication entry parameter according to the type of the authentication mode and carries out the authentication service logic processing after the parameter is packaged, and the purpose of processing different sub-authentication modes by the same authentication processor can be achieved. Therefore, by setting the bank card authentication routing interface platform, the operator can configure the authentication entry parameters in the background without modifying code logic, the high code coupling degree of development is avoided, a new interface is not required to be developed for authentication in a new service scene, the subsequent system maintenance is relatively simple, and the operation cost is reduced.

Drawings

Fig. 1 is an implementation environment diagram of a bank card authentication method provided in an embodiment;

FIG. 2 is a block diagram showing an internal configuration of a computer device according to an embodiment;

FIG. 3 is a flow diagram of a method for bank card authentication in one embodiment;

FIG. 4 is a flowchart of a method for generating an authentication mapping list of an authentication routing interface platform of a bank card in an embodiment;

FIG. 5 is a UML class diagram of a bank card authentication routing interface platform in one embodiment;

FIG. 6 is a flowchart illustrating an embodiment in which the authentication modes in the bank card authentication routing interface platform match the corresponding authentication processors in the authentication mapping list;

FIG. 7 is a flowchart illustrating the authentication processor authenticating the target bank card and sending authentication result information to the client in one embodiment;

FIG. 8 is a block diagram showing the structure of an authentication apparatus for bank cards in one embodiment;

FIG. 9 is a block diagram of the structure of a matching module in one embodiment;

FIG. 10 is a block diagram of the initialization module in one embodiment;

fig. 11 is a block diagram of the structure of an authentication module in one embodiment.

Detailed Description

In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention is described in further detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

Fig. 1 is a diagram of an implementation environment of a bank card authentication method provided in an embodiment, as shown in fig. 1, in the implementation environment, including a computer device 110 and a terminal 120.

The computer device 110 is a bank card authentication processing device, for example, a computer used by a tester, and the computer device 110 is provided with a bank card authentication processing tool. The terminal 120 is installed with an application that needs to perform bank card authentication processing, when the bank card authentication processing needs to be performed, a tester may send a bank card authentication processing request at the terminal 120, where the bank card authentication processing request carries a bank card authentication processing identifier, the computer device 110 receives the bank card authentication processing request, obtains a test script corresponding to the bank card authentication processing identifier in the computer device 110 according to the bank card authentication processing identifier, then executes the test script by using a bank card authentication processing tool, tests the application on the terminal 120, and obtains a bank card authentication processing result corresponding to the test script.

It should be noted that the terminal 120 and the computer device 110 may be, but are not limited to, a smart phone, a tablet computer, a notebook computer, a desktop computer, a server, and the like. The computer device 110 and the terminal 120 may be connected through bluetooth, USB (Universal Serial Bus), or other communication connection methods, which is not limited herein.

FIG. 2 is a diagram showing an internal configuration of a computer device according to an embodiment. As shown in fig. 2, the computer device includes a processor, a non-volatile storage medium, a memory, and a network interface connected through a system bus. The nonvolatile storage medium of the computer device stores an operating system, a database and a computer program, the database can store control information sequences, and when the computer program is executed by the processor, the processor can realize the bank card authentication processing method. The processor of the computer device is used for providing calculation and control capability and supporting the operation of the whole computer device. The memory of the computer device may have computer readable instructions stored therein, which when executed by the processor, may cause the processor to perform a bank card authentication processing method. The network interface of the computer device is used for connecting and communicating with the terminal. Those skilled in the art will appreciate that the architecture shown in fig. 2 is merely a block diagram of some of the structures associated with the disclosed aspects and is not intended to limit the computing devices to which the disclosed aspects apply, as particular computing devices may include more or less components than those shown, or may combine certain components, or have a different arrangement of components.

As shown in fig. 3, in an embodiment, a bank card authentication method is provided, which may be applied to the computer device 110, and in particular, to a bank card authentication routing interface platform in the computer device 110, and may include the following steps S302 to S306:

step S302, receiving an authentication request of a target bank card sent by a client, wherein the authentication request comprises an authentication mode of the target bank card;

specifically, the target bank card includes a payment method such as union pay, wechat-authentication, third party payment or a bank card of a certain bank, and the present embodiment only shows a common kind of a commonly used target bank card, and does not limit the kind of the target bank card, and other known target bank cards are also applicable.

Step S304, matching corresponding authentication processors in an authentication mapping list according to the authentication mode, wherein the authentication mapping list is a list of the corresponding authentication processors mapped in a bank card authentication routing interface platform according to different authentication modes of the target bank card;

the bank card authentication mode is an important means for identifying the authenticity of the customer condition, different authentication modes have different identification methods, and the authentication rules and information thereof have differences, so that corresponding authentication processors need to be defined according to different authentication modes. In this embodiment, the software development model hierarchy of the bank card authentication and routing interface platform is shown in fig. 5, fig. 5 is a UML class diagram of the bank card authentication and routing interface platform in one embodiment, a UML (unified Modeling language) unified Modeling language is a third generation Modeling and reduction language, is an open method for explaining, visualizing, constructing and writing a product of a developing, object-oriented, software-intensive system, and the UML shows a series of best engineering practices, which are very effective in Modeling a large-scale, complex system, especially at the software architecture hierarchy. Specifically, a bank card authentication routing interface platform is provided, and the authentication mapping list is matched with a corresponding authentication processor in the authentication mapping list according to different authentication modes, and the specific steps of the generation method of the authentication mapping list are shown in a flowchart of the generation method of the bank card authentication routing interface platform authentication mapping list in an embodiment of fig. 4, and the following steps S402 to S406 are described with reference to fig. 5 and the contents thereof:

step S402, obtaining an authentication mode set, wherein the authentication mode set comprises an interface for authenticating the target bank card and an identification code corresponding to the interface;

specifically, the target bank card needing authentication includes modes such as union pay, easy-to-communicate-and-easy-to-communicate, third-party payment or a bank card of a certain bank;

in this embodiment, as shown in the UML class diagram of fig. 5, the authentication method shows sub-authentication processing classes of three authentication methods, namely a union pay cardauuthhandler, a bank BankAuthHandler, and a third-party payment class thirdpartypauyhandler, which are all inherited from a bankcard authentication processing class CardAuthBaseHandler. Because the processing modes of each target bank card authentication mode are different, different authentication modes are defined firstly, the three authentication modes can obtain the public logic processing method of the bank card authentication processing class CardAuthBaseHandler through inheritance, and the specific business processing logic is transmitted through the entry parameters of the interface.

Step S404, assigning the identification code corresponding to the interface to the serviceID field of the bank card authentication routing interface platform;

in this embodiment, different identification codes are set for each authentication mode in the authentication mode set, and then the identification code of the authentication mode is assigned to a serviceID field in the bank card authentication routing interface platform, that is, the serviceID field in the above bank card authentication processing class CardAuthBaseHandler, so that the subsequently inherited sub-authentication processing class can obtain the parameter value of the authentication mode when being called.

Step S406, mapping the serviceID field to a corresponding authentication processor to generate an authentication mapping list.

In this embodiment, the authentication processor performs a logic code processing procedure on the received authentication request according to different authentication manners, specifically, it is a sub-authentication processing class in the bank card authentication routing interface platform, for example, the sub-authentication processing class of the three authentication manners of the union of bank class unionpaycardauuthhandler, a bank class BankAuthHandler, and a third party payment class third party paypaypaypaypaypaypaypaypaypaypaypaypaypaypaypaypayhander. The value of the serviceID field is assigned to the sub-authentication processing class, that is, the serviceID field is mapped to the corresponding authentication processor, and after the serviceID fields corresponding to all the authentication modes in the authentication mode set are mapped to the corresponding authentication processor, a corresponding authentication mapping list can be generated.

in this embodiment, referring to fig. 6, the step of matching the authentication mode in the bank card authentication routing interface platform with the corresponding authentication processor in the authentication mapping list in the embodiment includes the following steps S602 to S606:

step S602, obtaining an authentication entry parameter management configuration form, wherein the authentication entry parameter management configuration form comprises an authentication entry parameter and a serviceID field;

in this embodiment, the bank card authentication routing interface platform needs to set an authentication entry parameter management configuration form, which is referred to in table 1 and table 2 below.

Table 1 authentication entry parameter management configuration table

serviceID	Field(s)	Value range type	Threshold value	Initial value	Description of the invention
						BankAuthHandler	cardNo	Source value	Order.cardNo		Order number
BankAuthHandler	orderId	Request			Caller's incoming
						BankAuthHandler	bizId	Source value	Order.fundOrgId		Mapping table 2
BankAuthHandler	IdNo	Source value	Cust.IdNo		Customer identity number
						……	……	……	……	……	……

TABLE 2 bizId mapping form

The contents of tables 1 and 2 above are completed on the backend management page by the operator as required. The field "service" in table 1 is the field content corresponding to the authentication processor, and the field "is the attribute content corresponding to the authentication processor, for example, a certain authentication processor includes a" cardNo "as the bank card number corresponding to the authentication processor.

Step S604, acquiring a corresponding authentication mode according to the authentication entry parameter, and mapping and matching the authentication mode with the serviceID field; (ii) a

In this embodiment, the authentication mode corresponds to different entry parameters, and an operator may input a serviceID field value indicating the authentication mode into a serviceID field in the authentication entry parameter management configuration form according to the number of the soft authentication port parameters, for example, an identifier of a certain bank type bank authhandle is input in the serviceID field in table 1, the bank authhandle input in the serviceID field in table 1 is used to indicate that the authentication mode is the authentication mode of a certain bank, and a specific identification code of the authentication mode may be customized according to specific needs, which is not described herein.

In this embodiment, the authentication entry parameters include an order number, a bank card number, an account opening bank, a mobile phone number, an identification number, a fund party, a communication mode, an authentication request mode, a third-party interface address, an authentication request parameter type and a scene, and the acquired authentication entry parameters are input into the authentication entry parameter management configuration form and are mapped and matched with a serviceID field corresponding to the authentication mode;

in this embodiment, the authentication entry parameters are different according to different authentication manners, and in the actual service operation process, the authentication entry parameters often include entry parameters such as an order number-orderId, a bank card number-cardNo, an issuer-bankName, a mobile phone number-mobile no, an identity card number-IdNo, a fund party-id-fundyld, a communication manner-network, an authentication request manner-moved, a third party interface address-url, an authentication request parameter type-paramType, and a scene bizld, and the authentication entry parameters are respectively input into the above table 1 and table 2 according to the authentication manners, and the authentication entry parameters correspond to the authentication manner of the serviceID field, and the authentication entry parameters are mapped and matched with the authentication manners, so that a subsequent authentication processor can match and package the corresponding authentication entry parameters when processing a specific service logic. Table 1 and table 2 show partial authentication entry parameters.

Step S606, respectively setting the data type and the numerical value corresponding to the authentication entry parameter in the authentication entry parameter management configuration form.

In this embodiment, the background operator inputs the authentication entry parameters into the authentication entry parameter management configuration form according to specific service conditions, and then sets the authentication entry parameters. For example, the value range type and the domain value of each authentication entry parameter are defined in table 1 and table 2. Table 1 shows the corresponding authentication entry parameters of a bank authhandler with an authentication mode, and the defined data type and domain value thereof, where bizId is a scene field, and table 2 is a mapping table of the bizId field, and lists the domain values of communication mode-network, request mode-method, and third party interface address-url related to a service scene, and a background operator can directly rewrite the contents of the authentication entry parameters in tables 1 and 2 to add or modify a parameter domain value according to service requirements. In addition, the value field type of the orderId field in table 1 is a value that the request represents the caller's incoming value for invoking the authentication request.

Step S306, the target bank card is authenticated through the authentication processor, and authentication result information is sent to the client;

in this embodiment, after receiving the authentication request for the bank card, the application sends the authentication request to the bank card authentication routing interface platform, and the bank card authentication routing interface platform determines the authentication mode of the authentication request, that is, obtains the identifier-serviceID of the authentication mode, and then may search for the corresponding authentication processor according to the identifier of the authentication mode.

In this embodiment, after finding the corresponding authentication processor, fig. 7 shows an embodiment in which the authentication processor authenticates the target bank card and sends authentication result information to the client specifically includes the following steps:

step S702, the application control layer provides a uniform interface for session processing, performs security check on the authentication entry parameter, and searches the corresponding authentication processor in the authentication mapping list according to the authentication mode of the serviceID field;

in this embodiment, the providing of the unified interface by the application control layer for session processing means that the application provides a unified service side interface, and receives and processes the session of the application in a unified manner, and at the same time, the obtaining of the identification code of the authentication method and the security verification of the authentication entry parameter are required. For example, the lonapply class shown in fig. 5 is an application specific, the lonapply class implements its function through a CardAuthBaseHandler class, the lonapply class provides a uniform interface for session processing, and the CardAuthBaseHandler class performs security check of an authentication entry parameter.

Step S704, the authentication processor obtains the serviceID field in the authentication entry parameter management configuration form to obtain the authentication mode identification code;

step S706, the authentication processor obtains the authentication entry parameters which are mapped and matched with the serviceID field and pass the security verification of the application control layer, wherein the authentication entry parameters comprise an order number, a bank card number, an account opening row, a mobile phone number, an identity card number, a fund party, a communication mode, an authentication request mode, a third-party interface address, an authentication request parameter type and a scene;

in this embodiment, the authentication processor obtains the identifier of the authentication mode, that is, obtains the corresponding value in the serviceID field in the authentication entry parameter management configuration form, such as the authentication processor class of the serviceID field in table 1. After the identification code of the authentication mode of the serviceID field is obtained, all relevant entrance parameters are searched, after the relevant entrance parameter values in the table 1 are taken, relevant network parameters called by the corresponding sub-processors are searched in the bizId mapping table from the special field bizId to the table 2, the network parameters are assembled into the authentication entrance parameters, and the safety check of the entrance parameters is carried out through the application control layer.

Step S708, the authentication processor encapsulates the security checked authentication entry parameter, calls a corresponding authentication service according to the authentication entry parameter, and sends authentication result information to the client.

In this embodiment, the authentication processor encapsulates the authentication entry parameters, assembles the authentication entry parameters into a corresponding authentication processor class, invokes a corresponding authentication service, that is, the authentication processor performs specific service logic processing according to the encapsulated authentication entry parameters, and directly puts a common processing logic of the authentication processor into an abstract class, so that after the authentication processor executes the corresponding authentication service, a corresponding authentication result is obtained, and then the authentication result is fed back to the bank card authentication routing platform. For example, in the UML class diagram shown in fig. 5, the authentication processor class BankAuthHandler class obtains a corresponding authentication result after encapsulating the authentication entry parameter and performing specific service logic processing, and the CardAuthBaseHandler class also obtains a corresponding authentication result and feeds back the authentication result to the lonapply class to implement the whole bank card authentication process.

The bank card authentication method defines the processor class according to the authentication method, manages the authentication mode and the authentication entry parameter thereof through the form page, and when the entry parameter of the authentication mode is changed or the authentication mode is newly added, the service processing logic of the authentication can be completed only by configuring the authentication mode and the form page of the authentication entry parameter thereof at the back end by an operator without developing a new authentication interface, so that the repeated development of codes is greatly reduced, the code coupling degree is reduced, meanwhile, the subsequent system maintenance is relatively simple, and the operation cost is reduced.

As shown in fig. 8, in an embodiment, a bank card authentication apparatus is provided, which can be inherited in the computer device 110 described above, and is particularly applied to a bank card authentication routing interface platform, and the apparatus includes a receiving module 802, a matching module 804, and an authentication module 806:

the receiving module 802: the system comprises a client, a server and a server, wherein the client is used for receiving an authentication request of a target bank card sent by the client, and the authentication request comprises an authentication mode of the target bank card;

The matching module 804: the authentication processor is used for matching the corresponding authentication processor in an authentication mapping list according to the authentication mode, wherein the authentication mapping list is a list of the corresponding authentication processors mapped in a bank card authentication routing interface platform according to different authentication modes of the target bank card;

the authentication module 806: and the authentication processor is used for authenticating the target bank card and sending authentication result information to the client.

The bank card authentication mode is an important means for identifying the authenticity of the customer condition, different authentication modes have different identification methods, and the authentication rules and information thereof have differences, so that corresponding authentication processors need to be defined according to different authentication modes. In this embodiment, the software development model hierarchy of the bank card authentication and routing interface platform is shown in fig. 5, fig. 5 is a UML class diagram of the bank card authentication and routing platform in one embodiment, a UML (unified Modeling language) unified Modeling language is a third generation Modeling and reduction language, is an open method for explaining, visualizing, constructing and writing a product of a developing, object-oriented, software-intensive system, and the UML shows a series of best engineering practices, which are very effective in Modeling a large-scale, complex system, especially at the software architecture hierarchy.

In this embodiment, referring to a block diagram of a matching module in one embodiment of fig. 9, the matching module 804 includes:

the set acquisition module 902: the authentication method set is used for acquiring the authentication method set, wherein the authentication method set comprises an interface for authenticating the target bank card and an identification code corresponding to the interface;

The assignment module 904: a serviceID field used for assigning the identification code corresponding to the interface to the bank card authentication routing interface platform;

The generation module 906: for mapping the serviceID field to a corresponding authentication processor to generate an authentication mapping list.

In this embodiment, the matching module further includes an initialization module 100, referring to a block diagram of the structure of the initialization module in one embodiment of fig. 10, the initialization module 100 includes:

a form initialization module 1002, configured to initialize an authentication entry parameter management configuration form;

in this embodiment, the bank card authentication routing interface platform needs to set an authentication entry parameter management configuration form, which is referred to in table 3 and table 4 below.

Table 3 authentication entry parameter management configuration table

TABLE 4bizId mapping form

Group number	bizIdMap	Threshold value
			1	Network	http/socket
	Mothod	Get/post
				url	http://……
2	Network	http/socket
				Mothed	Get/post
	url	http://……
			3	Network	http/socker
	Mothed	Get/post
				url	http://……
……	……	……

The contents of tables 3 and 4 above are completed on the backend management page by the operator as required. The field "service" in table 1 is the field content corresponding to the authentication processor, and the field "is the attribute content corresponding to the authentication processor, for example, a certain authentication processor includes a" cardNo "as the bank card number corresponding to the authentication processor.

An authentication entry parameter setting module 1004, configured to input the serviceID field into the authentication entry parameter management configuration form, and map and match the serviceID field corresponding to the authentication mode; and synchronously setting the data type and the numerical value corresponding to the authentication entry parameter.

In this embodiment, the authentication mode corresponds to different entry parameters, and an operator may input a serviceID field value indicating the authentication mode into a serviceID field in the authentication entry parameter management configuration form according to the number of the authentication entry parameters, for example, an identifier of a certain bank type bank authhandle is input in the serviceID field in table 3, the bank authhandle input in the serviceID field in table 3 is used to indicate that the authentication mode is the authentication mode of the certain bank, and a specific identification code of the authentication mode may be customized according to specific needs, which is not described herein.

In this embodiment, the authentication entry parameters are different according to different authentication manners, and in the actual service operation process, the authentication entry parameters often include entry parameters such as an order number-orderId, a bank card number-cardNo, an issuer-bankName, a mobile phone number-mobile no, an identity card number-IdNo, a fund party-id-fundyld, a communication manner-network, an authentication request manner-moved, a third party interface address-url, an authentication request parameter type-paramType, and a scene bizld, and the authentication entry parameters are respectively input into the above table 1 and table 2 according to the authentication manners, and the authentication entry parameters correspond to the authentication manner of the serviceID field, and the authentication entry parameters are mapped and matched with the authentication manners, so that a subsequent authentication processor can match and package the corresponding authentication entry parameters when processing a specific service logic. Table 3 and table 4 show the partial authentication entry parameters.

In this embodiment, the background operator inputs the authentication entry parameters into the authentication entry parameter management configuration form according to specific service conditions, and then sets the authentication entry parameters. For example, the value range type and the domain value of each authentication entry parameter are defined in table 3 and table 4. Table 3 shows the corresponding authentication entry parameters of bank authhandler with certain bank authentication mode, and the defined data type and domain value thereof, where bizId is a scene field, and table 4 is a mapping table of the bizId field, and lists the domain values of communication mode-network, request mode-method, and third party interface address-url related to the service scene, and the background operator can directly rewrite the contents of the authentication entry parameters in tables 3 and 4 to add or modify the parameter domain value according to the service requirement. In addition, the value field type of the orderId field in table 3 is a value that the request represents the caller's incoming value for invoking the authentication request.

In this embodiment, as shown in the structural block diagram of the authentication module in one embodiment of fig. 11, the authentication module 806 includes:

an authentication processor mapping module 1102, configured to provide a unified interface through an application control layer for session processing, perform security check on the authentication entry parameter, and search for a corresponding authentication processor in the authentication mapping list according to the authentication manner of the serviceID field;

An authentication mode identifier obtaining module 1104, configured to obtain, according to the authentication processor, a serviceID field in the authentication entry parameter management configuration form to obtain an authentication mode identifier;

an authentication entry parameter checking module 1106, configured to acquire the authentication entry parameter mapped and matched with the serviceID field and subjected to the security check of the application control layer; the authentication entry parameters comprise an order number, a bank card number, an account opening bank, a mobile phone number, an identification card number, a fund party, a communication mode, an authentication request mode, a third party interface address, an authentication request parameter type and a scene;

in this embodiment, the authentication processor obtains the identifier of the authentication mode, that is, obtains the corresponding value in the serviceID field in the authentication entry parameter management configuration form, such as the authentication processor class of the serviceID field in table 3. After the identification code of the authentication mode of the serviceID field is obtained, all relevant entrance parameters are searched, after the relevant entrance parameter values in the table 3 are taken, the relevant network parameters called by the corresponding sub-processors are searched in the bizId mapping table from the special field bizId to the table 4, the network parameters are assembled into the authentication entrance parameters, and the safety check of the entrance parameters is carried out through the application control layer.

And the authentication calculation module 1108 is configured to package the security-checked authentication entry parameter into the authentication processor, call a corresponding authentication service according to the authentication entry parameter, and send authentication result information to the client.

In this embodiment, the bank card authentication process is generally completed by a computer device, and in this embodiment, a background server is used to complete the bank card authentication process, but the bank card authentication process is not limited to be completed by a server here, and other computer devices as described above may also be used. In the technology of authentication processing of bank cards, a background server undertakes authentication operation work, a bank card authentication processor is arranged at the background server end, and after the bank card authentication processor receives a processing request of bank card authentication, the bank card authentication processor can obtain an authentication mode and an entry parameter thereof and store the authentication mode and the entry parameter in a memory.

The bank card authentication device defines the processor class according to the authentication method, manages the authentication mode and the authentication entry parameter thereof through the form page, and when the entry parameter of the authentication mode is changed or the authentication mode is newly added, the service processing logic of the authentication can be completed only by configuring the authentication mode and the form page of the authentication entry parameter thereof at the back end by an operator without developing a new authentication interface, so that the repeated development of codes is greatly reduced, the code coupling degree is reduced, meanwhile, the subsequent system maintenance is relatively simple, and the operation cost is reduced.

In one embodiment, a computer device is proposed, the computer device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, the processor implementing the following steps when executing the computer program: receiving an authentication request of a target bank card sent by a client, wherein the authentication request comprises an authentication mode of the target bank card; matching the corresponding authentication processor in an authentication mapping list according to the authentication mode, wherein the authentication mapping list is a list of the corresponding authentication processor mapped in a bank card authentication routing interface platform according to different authentication modes of the target bank card; and authenticating the target bank card through the authentication processor, and sending authentication result information to the client.

In one embodiment, the method for producing the authentication mapping list comprises: acquiring a set of authentication modes, wherein the set of authentication modes comprises an interface for authenticating the target bank card and an identification code corresponding to the interface; assigning the identification code corresponding to the interface to a serviceID field of the bank card authentication routing interface platform; and mapping the serviceID field to a corresponding authentication processor to generate an authentication mapping list.

In one embodiment, matching the corresponding authentication processor in the authentication mapping list according to the authentication mode includes the steps of: acquiring an authentication entry parameter management configuration form, wherein the authentication entry parameter management configuration form comprises an authentication entry parameter and a serviceID field; acquiring a corresponding authentication mode according to the authentication entry parameter, and mapping and matching the authentication mode with the serviceID field according to the authentication mode; and respectively setting the data type and the numerical value corresponding to the authentication entry parameter in the authentication entry parameter management configuration form.

In one embodiment, invoking, by the authentication processor, the authentication of the target bank card, and sending the authentication result to the client includes the following steps:

In one embodiment, a storage medium is provided that stores computer-readable instructions that, when executed by one or more processors, cause the one or more processors to perform the steps of:

receiving an authentication request of a target bank card sent by a client, wherein the authentication request comprises an authentication mode of the target bank card; matching the corresponding authentication processor in an authentication mapping list according to the authentication mode, wherein the authentication mapping list is a list of the corresponding authentication processor mapped in a bank card authentication routing interface platform according to different authentication modes of the target bank card; and authenticating the target bank card through the authentication processor, and sending authentication result information to the client.

In one embodiment, matching the corresponding authentication processor according to the authentication manner includes the steps of: acquiring an authentication entry parameter management configuration form, wherein the authentication entry parameter management configuration form comprises an authentication entry parameter and a serviceID field; acquiring a corresponding authentication mode according to the authentication entry parameter, and mapping and matching the authentication mode with the serviceID field according to the authentication mode; and respectively setting the data type and the numerical value corresponding to the authentication entry parameter in the authentication entry parameter management configuration form.

It will be understood by those skilled in the art that all or part of the processes of the methods of the embodiments described above can be implemented by a computer program, which can be stored in a computer-readable storage medium, and can include the processes of the embodiments of the methods described above when the computer program is executed. The storage medium may be a non-volatile storage medium such as a magnetic disk, an optical disk, a Read-Only Memory (ROM), or a Random Access Memory (RAM).

The technical features of the embodiments described above may be arbitrarily combined, and for the sake of brevity, all possible combinations of the technical features in the embodiments described above are not described, but should be considered as being within the scope of the present specification as long as there is no contradiction between the combinations of the technical features.

The above-mentioned embodiments only express several embodiments of the present invention, and the description thereof is more specific and detailed, but not construed as limiting the scope of the present invention. It should be noted that, for a person skilled in the art, several variations and modifications can be made without departing from the inventive concept, which falls within the scope of the present invention. Therefore, the protection scope of the present patent shall be subject to the appended claims.

Claims

1. A bank card authentication method is applied to a bank card authentication routing interface platform, and comprises the following steps:

2. The bank card authentication method according to claim 1, wherein the generation method of the authentication mapping list comprises:

3. The method for authenticating a bank card according to claim 2, wherein matching a corresponding authentication processor in an authentication mapping list according to the authentication mode comprises:

4. The authentication method for bank cards according to claim 3, wherein the authentication of the target bank card by the authentication processor and the sending of the authentication result information to the client specifically comprise the following steps:

5. A bank card authentication device is applied to a bank card authentication routing interface platform, and comprises:

a receiving module: the system comprises a client, a server and a server, wherein the client is used for receiving an authentication request of a target bank card sent by the client, and the authentication request comprises an authentication mode of the target bank card;

a matching module: the authentication processor is used for matching the corresponding authentication processor in an authentication mapping list according to the authentication mode, wherein the authentication mapping list is a list of the corresponding authentication processors mapped in a bank card authentication routing interface platform according to different authentication modes of the target bank card;

an authentication module: and the authentication processor is used for authenticating the target bank card and sending authentication result information to the client.

6. The bank card authentication device according to claim 5, wherein the matching module comprises:

a set acquisition module: the authentication method set is used for acquiring the authentication method set, wherein the authentication method set comprises an interface for authenticating the target bank card and an identification code corresponding to the interface;

an assignment module: a serviceID field used for assigning the identification code corresponding to the interface to the bank card authentication routing interface platform;

a generation module: for mapping the serviceID field to a corresponding authentication processor to generate an authentication mapping list.

7. The bank card authentication device according to claim 6, wherein the matching module further comprises an initialization module, the initialization module comprising:

8. The bank card authentication device of claim 7, wherein the authentication module further comprises:

9. A computer device comprising a memory and a processor, the memory having stored therein computer readable instructions which, when executed by the processor, cause the processor to carry out the steps of the bank card authentication method according to any one of claims 1 to 4.

10. A storage medium storing computer readable instructions which, when executed by one or more processors, cause the one or more processors to perform the steps of the bank card authentication method as claimed in any one of claims 1 to 4.