WO2015003521A1

WO2015003521A1 - Operation request processing method and system

Info

Publication number: WO2015003521A1
Application number: PCT/CN2014/076443
Authority: WO
Inventors: 李东声
Original assignee: 天地融科技股份有限公司
Priority date: 2013-07-12
Filing date: 2014-04-29
Publication date: 2015-01-15
Also published as: CN103401844B; CN103401844A

Abstract

Provided are an operation request processing method and system. The method comprises the following steps: a first terminal (201) generating an operation request and sending the operation request to a background system server (202); after verifying that the operation request is legal, the background system server (202) sending the operation request to a second terminal (203); the second terminal (203) sending an operation request data packet to an authorized electronic signature token (204), the authorized electronic signature token (204) prompting the operation request data packet, receiving an acknowledge instruction, and performing signature, so as to obtain a signature data packet; the authorized electronic signature token (204) sending the signature data packet to the second terminal (203); the second terminal (203) sending the signature data packet and the operation request data packet to the background system server (202); and after the verification of the signature data packet passes, the background system server (202) executing the operation request according to the operation request data packet.

Description

Processing method and system for operation request

The present invention relates to the field of electronic technologies, and in particular, to a method and system for processing an operation request. Background technique

At present, with the development of the network, both e-commerce and online banking have realized their own business through the network, which satisfies the people's demand for shopping and banking services and is convenient to use.

However, when an enterprise performs e-commerce or online banking, the leader of the enterprise may authorize the employee to perform related operations; the individual may also authorize the agent to perform related operations. However, the existing authorization is authorized by the enterprise leader to sign the authorization or the individual to handle the relevant authorization procedures to authorize the agent to perform related operations. At this time, both the enterprise and the individual must be present to be authorized, otherwise it is necessary to wait for the authorized person to be present to authorize. , easy to lead to business opportunities, great inconvenience management and authorization. Summary of the invention

The present invention aims to solve the problem of inconvenience of the existing authorization scheme.

The main object of the present invention is to provide a processing method for an operation request;

Another object of the present invention is to provide a processing system for an operation request.

In order to achieve the above object, the technical solution of the present invention is specifically implemented as follows:

An aspect of the present invention provides a processing method for an operation request, including: acquiring, by a first terminal, operation content; acquiring, by the first terminal, an operation request generation policy, and generating an operation request according to the operation request and the operation content generation operation request The first terminal sends the operation request to the background system server; the background system server verifies the legality of the operation request after obtaining the operation request; the background system server is verifying the After the operation request is legal, the operation request is sent to the second terminal; after obtaining the operation request, the second terminal acquires a request sending policy, and sends an operation request data packet to the authorized electronic according to the request sending policy. a signature token, where the operation request data packet is generated according to the request sending policy and the operation request; the authorized electronic signature token prompts the operation request data packet; the authorized electronic signature order Receiving a confirmation command, and requesting data for the operation according to the confirmation instruction The packet is signed to obtain a signature data packet; the authorized electronic signature token sends the signature data packet to the second terminal; the second terminal sends the signature data packet and the operation request data packet to a background system server; the background system server verifies the signature data packet; After the background system server verifies that the signature data packet is passed, the background system server executes the operation request according to the operation request data packet.

In addition, the step of acquiring the operation request generation policy by the first terminal, and generating the operation request and the operation content generation operation request according to the operation request include: the first terminal acquiring the identity identification information and the authorization password; The terminal generates the operation request according to the identity identification information, the authorization password, and the operation content; the step of the background system server verifying the legality of the operation request after obtaining the operation request includes: After obtaining the operation request, the background system server verifies the correctness of the authorization password according to the identity identification information. If the authorization password is verified to be correct, the operation request is verified to be legal.

In addition, the authorization password is a dynamic password or a static password.

In addition, the step of acquiring the operation request generation policy by the first terminal, and generating the operation request and the operation content generation operation request according to the operation request, the first terminal acquiring the identity identification information and the signature information, where The signature information is obtained by signing the operation content; the first terminal generates the operation request according to the identity identification information, the signature information, and the operation content; the background system server obtains the operation After the request, the step of verifying the legality of the operation request includes: after the obtaining the operation request, the background system server verifies the correctness of the signature information according to the identity identification information and the operation content, if the verification If the signature information is correct, the operation request is verified to be legal.

In addition, after the obtaining, by the second terminal, the request sending policy, and sending the operation request data packet to the authorized electronic signature token according to the request sending policy, the second terminal is: After the operation request, the forwarding policy is obtained; the second terminal sends the operation request as an operation request data packet to the authorized electronic signature token.

In addition, after the obtaining, by the second terminal, the request sending policy, and sending the operation request data packet to the authorized electronic signature token according to the request sending policy, the second terminal is: After the operation request, acquiring a process and transmitting a policy; the second terminal processing the operation request according to the processing and sending policy to generate an operation request data packet, and sending the operation request according to the processing and sending a policy The packet is sent to the authorized electronic signature token.

In addition, the operation content includes: transfer request information, logistics request information, access request information, or acquisition request information

In addition, after the background system server verifies that the signature data packet is passed, the step of performing the operation request according to the operation request data packet includes: after the background system server verifies that the signature data packet is passed, according to the Transmitting the request information to perform a transfer operation; after verifying that the signed data packet is passed, the background system server performs a logistics operation according to the logistics request information; after the background system server verifies that the signature data packet is passed, Performing an access permission setting operation according to the access request information; or the background system server performs a sending operation according to the obtaining request after verifying that the signed data packet passes.

Another aspect of the present invention provides a processing system for operating an operation, including: a first terminal, a background system server, a second terminal, and an authorized electronic signature token; wherein the first terminal acquires an operation content, and acquires an operation request to generate a policy, and according to the operation request generation policy and the operation content generation operation request, sending the operation request to the background system server; after the background system server obtains the operation request, verifying the operation request Legitimate, after verifying that the operation request is legal, sending the operation request to the second terminal, verifying the signature data packet, and after verifying that the signature data packet passes, requesting the data packet according to the operation After the operation request is obtained, the second terminal acquires a request sending policy, and sends an operation request data packet to the authorized electronic signature token according to the request sending policy, where An operation request packet is a policy according to the request and the operation And generating, by the request, the signature data packet and the operation request data packet to the background system server; the authorized electronic signature token prompting the operation request data packet, receiving the confirmation instruction, and receiving the confirmation instruction The confirmation command signs the operation request data packet, obtains a signature data packet, and transmits the signature data packet to the second terminal.

In addition, the first terminal acquires the identity identification information and the authorization password, and generates the operation request according to the identity identification information, the authorization password, and the operation content; after the background system server obtains the operation request, And verifying the correctness of the authorization password according to the identity identification information, and if the authorization password is verified to be correct, verifying that the operation request is legal.

In addition, the first terminal acquires the identity identification information and the signature information, where the signature information is obtained by signing the operation content, and generating, according to the identity identification information, the signature information, and the operation content. After the operation request is obtained, the background system server verifies the correctness of the signature information according to the identity identification information and the operation content, and if the signature information is verified to be correct, the operation is verified. The request is legal.

In addition, after obtaining the operation request, the second terminal acquires a forwarding policy, and sends the operation request as an operation request data packet to the authorized electronic signature token.

In addition, after obtaining the operation request, the second terminal acquires a process and sends a policy, and processes the operation request according to the processing and sending policy to generate an operation request data packet, and according to the processing and sending the policy, The operation request packet is sent to an authorized electronic signature token.

In addition, the operation content includes: transfer request information, logistics request information, access request information, or acquisition request information In addition, after verifying that the signature data packet is passed, the background system server performs a transfer operation according to the transfer request information; after the background system server verifies that the signature data packet is passed, performs execution of the logistics according to the logistics request information. After the verification, the background system server performs an access permission setting operation according to the access request information after verifying that the signature data packet passes; or the background system server, after verifying that the signature data packet passes, according to the obtaining request Perform the send operation. As can be seen from the technical solution provided by the present invention, it can be seen that the processing method and system using the operation request of the present invention can be approved in an electronic form, which is convenient to use and ensures the security and non-repudiation of the approval. Sex. DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the present invention, Those skilled in the art can also obtain other drawings based on these drawings without any creative work.

1 is a flowchart of a method for processing an operation request provided by the present invention;

FIG. 2 is a schematic structural diagram of a processing system for an operation request provided by the present invention. detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

In the description of the present invention, it is to be understood that the terms "center", "vertical", "transverse", "upper", "lower", "previous", "rear", "left", "right", " The orientation or positional relationship of the indications of "", "horizon", "top", "bottom", "inside", "outside", etc. is based on the orientation or positional relationship shown in the drawings, only for the convenience of describing the present invention and The simplification of the description is not intended to limit or imply that the device or elements referred to have a particular orientation, construction and operation in a particular orientation. Moreover, the terms "first" and "second" are used for descriptive purposes only and are not to be construed as indicating or implying a relative importance or quantity or location.

In the description of the present invention, it should be noted that the terms "installation", "connected", and "connected" are to be understood broadly, and may be fixed or detachable, for example, unless otherwise explicitly defined and defined. Connected, or connected in one piece; can be mechanical or electrical; can be directly connected or indirectly connected through an intermediate medium, It is the internal connection between the two components. The specific meanings of the above terms in the present invention can be understood in the specific circumstances by those skilled in the art.

The embodiments of the present invention will be further described in detail below with reference to the accompanying drawings. FIG. 1 is a flowchart showing a processing method of an operation request according to the present invention. Referring to FIG. 1, the processing method of the operation request of the present invention includes:

Step S101: The first terminal acquires an operation content.

Specifically, the first terminal may be a terminal used by the employee, may be a terminal used by the agent, or a terminal used by the requester; to implement a corresponding request by using the first terminal.

The first terminal may be a fixed terminal or a mobile terminal, and the fixed terminal may be: a PC, an ATM, or a POS. The mobile terminal may be: a laptop, a tablet, a smart phone, or a handheld POS.

The first terminal can connect to the background system server by wire or wirelessly to implement the corresponding request.

The operation content of the present invention may be any of the following:

Transfer request information, for example: requesting bank transfer business;

Logistics request information, for example: requesting the leader to approve the business sent by the logistics;

Access request information, for example: requesting access to a host or server's business;

Obtain the request information; for example: request to obtain permission from a host or server for file download, or request decryption information of downloaded encrypted information from a host or server.

Of course, the operation content of the present invention may further include the detailed information of the above request and the like.

Step S102: The first terminal acquires an operation request generation policy, and generates an operation request according to the operation request and an operation content generation operation request.

Specifically, the operation request generation policy may include generating an operation request according to any one of the following contents:

Identity information and authorization password; if an authorization password is used, it is simple and easy; of course, the authorization password is a dynamic password or a static password, and the dynamic password can be a dynamic password generated by a dynamic port token, which can be set in advance. With dynamic passwords, security is higher, and static passwords are simple and easy to use. Or

Or the identity information and the signature information; the signature information may be obtained by signing the operation content of the key of the key held by the user, and if the signature information is used, the security is improved and the repudiation is prevented.

Of course, the present invention can set different levels according to the complexity of the user operation request to obtain a static password, a dynamic password or signature information, and the above security level is increased step by step. For example: When the transfer amount is small, you can choose the method of obtaining the static password. When the transfer amount is large, you can choose the way to obtain the signature information.

If the first terminal obtains the identity identification information and the authorization password, the first terminal according to the identity identification information, The authorization password and the operation content generate an operation request. The first terminal may combine the identity identification information, the authorization password, and the operation content to generate an operation request, and may also combine the identity identification information, the calculated authorization password, and the operation content into an operation request after calculating the authorization password. The calculation of the authorization password may be a calculation of the MAC value of the authorization password or a calculation of the HASH value of the authorization password, and may be a partial value of the calculated MAC value or HASH value. The calculation of the authorization password ensures the security of the authorized password transmission and prevents the authorization password from being obtained. The first terminal may also directly generate an operation request for encrypting the identity information, the authorization password, and the operation content, and the encrypted transmission improves security.

If the first terminal obtains the identity information and the signature information, wherein the signature information is obtained by signing the operation content, the first terminal generates an operation request according to the identity identification information, the signature information, and the operation content. The first terminal may combine the identity information, the signature information, and the operation content to generate an operation request, or the first terminal encrypts the identity identification information, the signature information, and the operation content to generate an operation request, and the encrypted transmission improves security.

Step S103, the first terminal sends an operation request to the background system server;

Step S104: After obtaining the operation request, the background system server verifies the legality of the operation request.

If the first terminal obtains the identity information and the authorization password, and generates an operation request according to the identity identification information, the authorization password, and the operation content, the background system server verifies the correctness of the authorization password according to the identity identification information after obtaining the operation request, if the authorization is verified If the password is correct, the verification operation request is legal.

If the operation request is encrypted information or contains encrypted information, the background system server decrypts the encrypted information and then verifies it.

When the authorization password is a static password, the static password may be pre-stored in the background system server, and has a correspondence relationship with the identity identification information, and the background system server searches for the pre-stored static password according to the identity identification information. If the first terminal calculates the MAC value or the HASH value for the static password, the background system server also uses the same method to calculate the MAC value or HASH value of the found static password in the same manner for verification.

When the authorization password is a dynamic password, the background system server can generate the verification password in the same manner as the dynamic port token that generates the dynamic password, so that the generated verification password is consistent with the received dynamic password. The backend system server generates a check password in a manner corresponding to the identity identifier information, and the background system server searches for a check password according to the identity identifier information and generates a check password. If the first terminal calculates a MAC value or a HASH value for the dynamic password. Then, the background system server calculates the MAC value or HASH value of the generated dynamic password in the same manner in the verification.

If the first terminal obtains the identity identification information and the signature information, wherein the signature information is obtained by signing the operation content, and generating an operation request according to the identity identification information, the signature information, and the operation content, the background system server obtains the operation request, Verify the correctness of the signature information based on the identity information and the operation content. If the signature information is correct, the verification operation request is legal. For example: The background system server pre-stores the public key of the key held by the user, and the public key has a correspondence relationship with the identity identification information, and the background system server searches for the public key according to the identity identification information, according to the found public key and the received operation content. The signature information is checked, and the verification request is valid.

Only after the background system server verifies that the operation request is legal, the subsequent operations can be performed to ensure the authenticity, legality, and security of the subsequent operations.

Step S105: After the verification operation request is legal, the background system server sends the operation request to the second terminal. Specifically, the second terminal may be a terminal used by the leader, may be a terminal used by the authorized person, or used by the approver. a terminal; to implement a corresponding authorization operation by using the second terminal.

The second terminal may be a fixed terminal or a mobile terminal. The fixed terminal may be: a PC, an ATM, or a POS. The mobile terminal may be: a laptop, a tablet, a smart phone, or a handheld POS.

The second terminal can connect to the background system server by wire or wirelessly to implement a corresponding authorization operation. Step S106: After obtaining the operation request, the second terminal acquires the request sending policy, and sends the operation request data packet to the authorized electronic signature token according to the request sending policy, where the operation request data packet is sent according to the request and the operation request. Generated;

Specifically, after obtaining the operation request, the second terminal may directly forward the operation request, and may process the operation request and then send the message; if directly forwarding, the operation is simple and convenient, and if the operation request is processed and then sent, the second terminal may be improved. Increase the content of the operation, easy to use.

After obtaining the operation request, the second terminal directly forwards the operation request in the following manner: The second terminal acquires the forwarding policy, and sends the operation request as an operation request data packet to the authorized electronic signature token. After obtaining the operation request, the second terminal may process the operation request and then send the following: The second terminal acquires the processing and sends the policy, and processes the operation request according to the processing and sending policy to generate an operation request data packet, and according to the processing And send a policy to send the operation request packet to the authorized electronic signature token.

This processing can be any operation such as adding a permission setting when requesting access to a host or server. By processing the operation request, other operations related to the operation request can be added to improve security.

Step S107, authorizing the electronic signature token to prompt the operation request data packet;

Specifically, the authorized electronic signature token is a key used by the leader, the authorized person, or the approver, and may be a key that can be matched with the second terminal, such as a USB key, a Bluetooth key, an infrared key, an NFC key, an audio key, and the like. After receiving the operation request data packet, the authorized electronic signature token displays or voice prompts the operation request data packet, or extracts key information in the operation request data packet for display or voice prompt to prompt the user to know the operation request. The request is manipulated to determine if the operational request can be approved. Step S108, the authorized electronic signature token receives the confirmation instruction, and signs the operation request data packet according to the confirmation instruction to obtain the signature data packet;

Specifically, if the user who authorizes the electronic signature token confirms that the operation request is authentic and can be approved, press the setting button on the authorized electronic signature token (for example, an OK button) to send a confirmation command to the authorized electronic signature order. After receiving the confirmation command, the authorized electronic signature token signs the operation request data packet according to the private key of the authorized electronic signature token to obtain a signature data packet.

By authorizing the user of the electronic signature token to sign the operation request packet, the non-repudiation of the approval is guaranteed.

Step S109, authorizing the electronic signature token to send the signature data packet to the second terminal;

Step S110: The second terminal sends the signature data packet and the operation request data packet to the background system server. Step S111: The background system server verifies the signature data packet.

Specifically, the background system server prestores the public key of the authorized electronic signature token. After the background system server receives the signature data packet and the operation request data packet, the public key corresponding to the authorized electronic signature token may be found according to the identity identification information. , verifying the signature packet based on the public key.

Step S112: After verifying that the signature data packet is passed, the background system server performs an operation request according to the operation request data packet.

At this time, only the background system server performs the operation request according to the operation request data packet after verifying that the signature data packet is passed, thereby ensuring the authenticity and security of the operation request.

Of course, depending on the content of the operation,

After the background system server verifies that the signature packet has passed, it can perform the following different operations:

Performing a transfer operation according to the transfer request information;

Performing logistics operations based on logistics request information;

Perform an access permission setting operation based on the access request information; or

The sending operation is performed according to the acquisition request.

It can be seen that the processing method using the operation request of the present invention can be approved in an electronic form, which is convenient for use and ensures the security and non-repudiation of the approval. 2 is a schematic structural diagram of a processing system for operating an operation request, and the processing system of the operation request of the present invention adopts the processing method of the above operation request, which is not described herein, and only the structure of the processing system for the operation request and The respective functions are briefly described. Referring to FIG. 2, the processing system for the operation request includes: a first terminal 201, a background system server 202, a second terminal 203, and an authorized electronic signature token 204; The first terminal 201 obtains the operation content, acquires the operation request generation policy, and generates an operation request and an operation content generation operation request according to the operation request, and sends the operation request to the background system server 202. The operation content may include: the transfer request information, the logistics request Information, access request information, or get request information.

After obtaining the operation request, the background system server 202 verifies the legality of the operation request. After the verification operation request is legal, the operation request is sent to the second terminal 203 to verify the signature data packet, after verifying that the signature data packet is passed, according to the verification The operation request packet performs an operation request;

After obtaining the operation request, the second terminal 203 acquires the request sending policy, and sends the operation request data packet to the authorized electronic signature token 204 according to the request sending policy, where the operation request data packet is generated according to the request sending policy and the operation request. And sending the signature data packet and the operation request data packet to the background system server 202;

The authorization electronic signature token 204 prompts the operation request data packet, receives the confirmation command, and signs the operation request data packet according to the confirmation instruction, obtains the signature data packet, and transmits the signature data packet to the second terminal 203.

In addition, the first terminal 201 can generate an operation request by:

Manner 1: The first terminal 201 obtains the identity identification information and the authorization password, and generates an operation request according to the identity identification information, the authorization password, and the operation content. The authorization password is a dynamic password or a static password.

At this point, the background system server verifies the legality of the operation request as follows:

After obtaining the operation request, the background system server 202 verifies the correctness of the authorization password according to the identity identification information. If the verification authorization password is correct, the verification operation request is legal.

Manner 2: The first terminal 201 obtains the identity identification information and the signature information, where the signature information is obtained by signing the operation content, and generating an operation request according to the identity identification information, the signature information, and the operation content;

After obtaining the operation request, the background system server 202 verifies the correctness of the signature information according to the identity identification information and the operation content. If the verification signature information is correct, the verification operation request is legal.

Of course, after obtaining the operation request, the second terminal 203 can send the operation request data packet to the authorized electronic signature token 204 by:

Manner 1: The second terminal 203 acquires the forwarding policy, and sends the operation request as an operation request packet to the authorized electronic signature token 204.

Manner 2: After obtaining the operation request, the second terminal 203 acquires the processing and sends the policy, processes the operation request according to the processing and sending policy, generates an operation request data packet, and sends the operation request data packet to the authorized electronic device according to the processing and sending policy. Signing token 204.

In addition, after verifying that the signature data packet is passed, the background system server 202 can perform the operation request by: Performing a transfer operation according to the transfer request information;

Performing logistics operations based on logistics request information;

The sending operation is performed according to the acquisition request.

It can be seen that the processing system using the operation request of the present invention can be approved in an electronic form, and is convenient to use while ensuring the security and non-repudiation of the approval.

Of course, in the processing system of the operation request of the present invention, each device may perform related operations by a respective CPU or chip, each device may divide different operations performed by different modules, or may complete all operations by one module, as long as The solution of the present invention achieves the object of the present invention, and the effects of the present invention are all within the scope of protection of the present invention. Any process or method description in the flowcharts or otherwise described herein may be understood to represent a module, segment or portion of code that includes one or more executable instructions for implementing the steps of a particular logical function or process. And the scope of the preferred embodiments of the invention includes additional implementations, in which the functions may be performed in a substantially simultaneous manner or in an opposite order depending on the functions involved, in the order shown or discussed. It will be understood by those skilled in the art to which the embodiments of the present invention pertain.

It should be understood that portions of the invention may be implemented in hardware, software, firmware or a combination thereof. In the above-described embodiments, multiple steps or methods may be implemented in software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented with any one or combination of the following techniques well known in the art: having logic gates for implementing logic functions on data signals Discrete logic circuits, application specific integrated circuits with suitable combinational logic gates, programmable gate arrays (PGAs), field programmable gate arrays (FPGAs), etc.

One of ordinary skill in the art can understand that all or part of the steps carried by the method of implementing the above embodiments can be completed by a program to instruct related hardware, and the program can be stored in a computer readable storage medium. When executed, one or a combination of the steps of the method embodiments is included.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing module, or each unit may exist physically separately, or two or more units may be integrated into one module. The above integrated modules can be implemented in the form of hardware or in the form of software functional modules. The integrated modules, if implemented in the form of software functional modules and sold or used as separate products, may also be stored in a computer readable storage medium.

The above-mentioned storage medium may be a read only memory, a magnetic disk or an optical disk or the like. In the description of the present specification, the description of the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" and the like means a specific feature described in connection with the embodiment or example. A structure, material or feature is included in at least one embodiment or example of the invention. In the present specification, the schematic representation of the above terms does not necessarily mean the same embodiment or example. Furthermore, the particular features, structures, materials, or characteristics described may be combined in a suitable manner in any one or more embodiments or examples. Although the embodiments of the present invention have been shown and described, it is understood that the foregoing embodiments are illustrative and not restrictive Variations, modifications, alterations and variations of the above-described embodiments are possible within the scope of the invention. The scope of the invention is defined by the appended claims and their equivalents.

Claims

claims

1. A method for processing operation requests, which is characterized by including:

The first terminal obtains the operation content;

The first terminal obtains an operation request generation strategy and generates an operation request according to the operation request generation strategy and the operation content;

The first terminal sends the operation request to the backend system server;

After obtaining the operation request, the back-end system server verifies the legality of the operation request; after verifying that the operation request is legal, the back-end system server sends the operation request to the second terminal; After obtaining the operation request, the second terminal obtains the request sending policy, and sends the operation request data packet to the authorized electronic signature token according to the request sending policy, wherein the operation request data packet is sent according to the request sending policy and generated by the operation request;

The authorized electronic signature token prompts the operation request data packet;

The authorized electronic signature token receives a confirmation instruction, and signs the operation request data packet according to the confirmation instruction to obtain a signed data packet;

The authorized electronic signature token sends the signed data packet to the second terminal;

The second terminal sends the signature data packet and the operation request data packet to a backend system server; the backend system server verifies the signature data packet;

After verifying that the signature data packet passes, the backend system server executes the operation request according to the operation request data packet.

2. The method according to claim 1, characterized in that,

The steps of the first terminal obtaining an operation request generation strategy and generating an operation request according to the operation request generation strategy and the operation content include:

The first terminal obtains identity identification information and authorization password;

The first terminal generates the operation request based on the identity identification information, the authorization password and the operation content;

After the back-end system server obtains the operation request, the step of verifying the legality of the operation request includes: after the back-end system server obtains the operation request, verify the authorization password according to the identity identification information. Correctness, if the authorization password is verified to be correct, the operation request is verified to be legal.

3. The method according to claim 2, characterized in that the authorization password is a dynamic password or a static password.

4. The method according to claim 1, characterized in that,

The first terminal obtains identity identification information and signature information, wherein the signature information is obtained by signing the operation content;

The first terminal generates the operation request based on the identity identification information, the signature information and the operation content;

After the back-end system server obtains the operation request, the step of verifying the legality of the operation request includes: after the back-end system server obtains the operation request, verify based on the identity identification information and the operation content The correctness of the signature information. If the signature information is verified to be correct, the operation request is verified to be legal.

5. The method according to any one of claims 1 to 4, characterized in that, after obtaining the operation request, the second terminal obtains a request sending policy, and sends the operation request data packet according to the request sending policy. The steps to send an authorized electronic signature token include:

After obtaining the operation request, the second terminal obtains the forwarding policy;

The second terminal sends the operation request as an operation request data packet to the authorized electronic signature token.

6. The method according to any one of claims 1 to 4, characterized in that, after obtaining the operation request, the second terminal obtains the request sending policy, and sends the operation request data packet according to the request sending policy. The steps to send an authorized electronic signature token include:

After obtaining the operation request, the second terminal obtains processing and sends a policy;

The second terminal processes the operation request according to the processing and sending policy to generate an operation request data packet, and sends the operation request data packet to the authorized electronic signature token according to the processing and sending policy.

7. The method according to any one of claims 1 to 6, characterized in that the operation content includes: transfer request information, logistics request information, access request information or acquisition request information.

8. The method according to claim 7, characterized in that, after the back-end system server verifies that the signature data packet passes, the step of executing the operation request according to the operation request data packet includes:

After verifying that the signature data packet passes, the backend system server performs a transfer operation based on the transfer request information;

After verifying that the signature data packet passes, the backend system server performs logistics operations based on the logistics request information;

After verifying that the signed data packet passes, the backend system server performs an access permission setting operation based on the access request information; or After verifying that the signature data packet passes, the backend system server performs a sending operation according to the acquisition request.

9. An operation request processing system, characterized by including: a first terminal, a backend system server, a second terminal and an authorized electronic signature token; wherein,

The first terminal obtains the operation content, obtains the operation request generation strategy, generates an operation request according to the operation request generation strategy and the operation content, and sends the operation request to the backend system server;

After obtaining the operation request, the backend system server verifies the legality of the operation request. After verifying that the operation request is legal, the backend system server sends the operation request to the second terminal to verify the signature data packet. , after verifying that the signature data packet passes, execute the operation request according to the operation request data packet;

After obtaining the operation request, the second terminal obtains the request sending policy, and sends the operation request data packet to the authorized electronic signature token according to the request sending policy, wherein the operation request data packet is sent according to the request sending policy. The request sending policy and the operation request are generated, and the signature data packet and the operation request data packet are sent to the backend system server;

The authorized electronic signature token prompts the operation request data packet, receives a confirmation instruction, signs the operation request data packet according to the confirmation instruction, obtains the signature data packet, and sends the signature data packet to the second terminal.

10. The system according to claim 9, characterized in that,

The first terminal obtains the identity identification information and the authorization password, and generates the operation request based on the identity identification information, the authorization password and the operation content;

After obtaining the operation request, the backend system server verifies the correctness of the authorization password based on the identity identification information. If the authorization password is verified to be correct, the operation request is verified to be legal.

11. The system according to claim 10, characterized in that the authorization password is a dynamic password or a static password.

12. The system according to claim 9, characterized in that,

The first terminal acquires identity identification information and signature information, wherein the signature information is obtained by signing the operation content, and the operation is generated based on the identity identification information, the signature information and the operation content. ask;

After obtaining the operation request, the backend system server verifies the correctness of the signature information based on the identity identification information and the operation content. If the signature information is verified to be correct, the operation request is verified to be legal.

13. The system according to any one of claims 9 to 12, characterized in that, after obtaining the operation request, the second terminal obtains the forwarding policy and sends the operation request as an operation request data packet to the authorized Electronic signature token.

14. The system according to any one of claims 9 to 12, characterized in that, after obtaining the operation request, the second terminal obtains a processing and sending policy, and performs processing on the operation according to the processing and sending policy. The request is processed to generate an operation request data packet, and the operation request data packet is sent to the authorized electronic signature token according to the processing and sending policy.

15. The system according to any one of claims 9 to 14, characterized in that the operation content includes: transfer request information, logistics request information, access request information or acquisition request information.

16. The system according to claim 15, characterized in that,

After verifying that the signature data packet passes, the backend system server performs an access permission setting operation based on the access request information; or

After verifying that the signature data packet passes, the backend system server performs a sending operation according to the acquisition request.