Patent Application
20140344898
The present invention relates to the field of data processing, and in particular, to an entrusted-authorization system and an entrusted-authorization method.
Entrusted-authorization business of on-line accounting system has just started domestically. A sharing platform for previously applied business card on-line entrusted-authorization, for example, does not exist. Various on-line accounting systems can only cope with some risks in a manner of multi-machine backup. However, if the on-line accounting system needs a whole system maintenance or it cannot provide a linking service to the outside due to some disastrous reason, the system completely goes down. Foreign big credit card organizations have mandatory requirements of entrusted-authorization for their admitted member mechanisms. Comparatively speaking, the admitted member mechanisms have less personalized customizations but stronger constraints due to their business modes and platforms.
In this regard, the present invention provides an entrusted-authorization system and an entrusted-authorization method for ensuring normal processing of transaction requests in case that the accounting system is unavailable.
The present invention provides the following technical solution:
1. An entrusted-authorization system, characterized in that, the entrusted-authorization system comprises an accounting system, a switch module and an entrusted-authorization module, wherein
the entrusted-authorization module stores entrusted-authorization parameters determined by the accounting system;
the switch module is connected with the accounting system and the entrusted-authorization module for transmitting transaction request messages from the client terminal to the entrusted-authorization module in case that the accounting system is unavailable, whereby the entrusted-authorization module verifies the transaction request messages according to the entrusted-authorization parameters; otherwise, the messages are sent to the accounting system for processing, the transaction request messages comprise financial account information, financial mechanism information, transaction initiation mechanism information and transaction amount.
2. The entrusted-authorization system according to technical solution 1, characterized in that, the entrusted-authorization module comprises data communication module, verification processing module and database, wherein
the data communication module is connected between the switch module and the verification processing module so as to transfer information therebetween;
the database stores the entrusted-authorization parameters, the transaction information and cause of failure, the entrusted-authorization parameters comprise financial mechanism information, transaction initiation mechanism information, account amount and account information, the account information comprises information selected from a group comprising the following items: card number, term of validity of the card, check digit of the card, password encryption data, verification number of the card (CVN), information in IC card which corresponds to the ones in validity verification items of account;
the verification processing module stores the validity verification items of account, where the validity verification items of account comprise at least one of verification of card number, verification of term of validity of the card, verification of check digit of card, verification of password, verification of CVN, and verification of IC card information;
the verification processing module is configured to perform the following steps:
A. verifying validity of the transaction request messages, and performing subsequent steps if the verification is approved, or otherwise generating and sending a response message indicating failure to the data communication module and sending the cause of failure to the database;
B. verifying the transaction request messages according to the financial mechanism information and the transaction initiation mechanism information in the entrusted-authorization parameters, and performing subsequent steps if the verification is approved, or otherwise generating and sending a response message indicating the failure to the data communication module and sending the cause of the failure to the database;
C. determining the validity verification events of account according to the account information and performing verification according to the determined validity verification events of account, and performing subsequent steps if the verification is approved, or otherwise generating and sending a response message indicating the failure to the data communication module and sending the cause of the failure to the database; and
D. verifying the transaction request according to account amount, and in case of approved verification, encashing the transaction request, generating and sending a response message indicating the success to the data communication module, and generating and sending transaction information to the database, or otherwise generating and sending a response message indicating the failure to the data communication module and sending the cause of failure to the database, the transaction information comprises financial account information, financial mechanism information, transaction initiation mechanism information, transaction amount, transaction type and transaction date.
3. The entrusted-authorization system according to technical solution 2, characterized in that the verification processing module stores verification events of account risk, the verification events of account risk comprises at least one of verification of account blacklist, verification of commercial tenant blacklist and verification of limit control, the entrusted-authorization parameters further comprises account risk information which further comprises information selected from a group comprising the following items: information in the account blacklist, commercial tenant blacklist and limit control that corresponds to the items in the verification events of account risk; wherein the verification processing module determines the verification events of account risk according to the account risk information and performing verification according to the determined verification events of the account risk, and step D is performed if the verification is approved, or otherwise, the verification processing module generates and sends a response message indicating the failure to the data communication module and sending the cause of failure to the database.
4. The entrusted-authorization system according to technical solution 2 or 3, characterized in that the entrusted-authorization parameters further comprises permitted transaction types and the verification processing module is further configured to: determine the transaction types according to the transaction request messages; and verify the transaction types according to the permitted transaction type.
5. The entrusted-authorization system according to one of technical solutions 2 to 4, characterized in that the entrusted-authorization module further comprises:
a parameter uploading module for uploading the entrusted-authorization parameters determined by the accounting system to the database when the accounting system is available; and
a transaction delivering module for delivering the transaction information and the cause of failure during the entrusted-authorization in the database to the accounting system when the switch module switches the transaction to the accounting system.
6. An entrusted-authorization method applied to entrusted-authorization system, characterized in that the entrusted-authorization system comprises an accounting system, an entrusted-authorization module and a switch module connected with the accounting system and the entrusted-authorization module, the entrusted-authorization module stores entrusted-authorization parameters determined by the accounting system, the entrusted-authorization method comprising:
the switch module transmits transaction request messages from the client terminal to the entrusted-authorization module in case that the accounting system is unavailable, whereby the entrusted-authorization module verifies the transaction request messages according to the entrusted-authorization parameters; otherwise, sending the messages to the accounting system for processing, wherein the transaction request messages comprise financial account information, financial mechanism information, transaction initiation mechanism information and transaction amount.
7. The entrusted-authorization method according to technical solution 6, characterized in that the entrusted-authorization parameters comprise financial mechanism information, transaction initiation mechanism information, account amount and account information, the account information comprises information selected from a group comprising the following items: card number, term of validity of the card, check digit of the card, password encryption data, verification number of the card (CVN), information in IC card which corresponds to items in validity verification events of the account, wherein the entrusted-authorization module verifying the transaction request messages according to the entrusted-authorization parameters comprises the following steps:
A. the entrusted-authorization module verifies the validity of the transaction request messages, and performs subsequent steps if the verification is approved, or otherwise generates and sends a response message indicating the failure to the switch module and saves the cause of failure in the entrusted-authorization module;
B. verifies the transaction request messages according to the financial mechanism information and the transaction initiation mechanism information in the entrusted-authorization parameters, and performs subsequent steps if the verification is approved, or otherwise generates and sends a response message indicating the failure to the switch module and saves the cause of failure in the entrusted-authorization module;
C. determines the validity verification events of account according to account information and performs the verification according to the determined validity verification events of account, and performs subsequent steps if the verification is approved, or otherwise generates and sends a response message indicating the failure to the switch module and saves the cause of failure in the entrusted-authorization module; wherein the validity verification events of account is stored in the entrusted-authorization module, and the validity verification events of account comprise at least one of verification of card number, verification of term of validity of the card, verification of check digit of the card, verification of password, verification of CVN, and verification of IC card information;
D. verifies the transaction request according to the account amount, and in case of verification being approved, encashing the transaction request, generates and sends a response message indicating the success to the switch module, and generates and saves the transaction information to the entrusted-authorization module, or otherwise generates and sends a response message indicating the failure to the switch module and saves the cause of failure in the entrusted-authorization module, the transaction information comprises financial account information, financial mechanism information, transaction initiation mechanism information, transaction amount, transaction types and transaction dates.
8. The entrusted-authorization method according to technical solution 7, characterized in that the entrusted-authorization module verifying the transaction request messages according to the entrusted-authorization parameters comprises the following steps:
E. the entrusted-authorization module determines verification events of account risk according to account risk information and performs the verification according to the determined verification events of the account risk, and performs step D if the verification is approved, or otherwise, generates and sends a response message indicating the failure to the switch module and saves the cause of failure in the entrusted-authorization module, wherein the verification events of the account risk is stored in the entrusted-authorization module, the verification events of the account risk comprises at least one of verification of account blacklist, verification of commercial tenant blacklist and verification of limit control, the entrusted-authorization parameters further comprises information selected from a group comprising the following items: information in the account blacklist, commercial tenant blacklist and limit control that corresponds to items in verification events of the account risk.
9. The entrusted-authorization method according to technical solution 7 or 8, characterized in that the entrusted-authorization parameters further comprises permitted transaction types, and verifying the transaction request messages according to the entrusted-authorization parameters comprises:
the entrusted-authorization module determining the transaction types according to the transaction request messages; and
the entrusted-authorization module verifying the transaction types according to the permitted transaction types.
10. The entrusted-authorization method according to one of technical solutions 6 to 9, characterized in that the method further comprises:
uploading the entrusted-authorization parameters determined by the accounting system to the database when the accounting system is available; and
the entrusted-authorization module delivering the transaction information and the cause of failure during entrusted-authorization to the accounting system when the switch module switches the transaction to the accounting system.
With the entrusted-authorization system and the entrusted-authorization method of the invention, a normal processing of transaction request can be ensured when the accounting system is unavailable.
In addition, the entrusted-authorization system and the entrusted-authorization method of the invention can be flexibly applied, can effectively solve the problems such as the on-line accounting system not being able to provide service to the outside in case of disastrous shutdown, overall upgrading, etc. Moreover, admitted member mechanisms (i.e. the accounting systems) are given a maximum freedom of control, which is flexible, safe, controllable, and can greatly reduce the costs involved in a case where each on-line accounting system builds up a backup system so that the admitted member mechanisms can set entrusted-authorization parameters as actually required.
Preferred embodiments of the invention will be described below in detail with reference to the accompanying drawings in which like figure references denote like elements.
The entrusted-authorization module 3 stores the entrusted-authorization parameters determined by the accounting system 1. The switch module 2 is connected with the accounting system 1 for transmitting transaction request messages from the client terminal 4 to the entrusted-authorization module 3 in case that the accounting system 1 is unavailable, the entrusted-authorization module 3 verifies the transaction request messages according to the entrusted-authorization parameters; otherwise, the messages are sent to the accounting system 1 for processing, wherein the transaction request messages comprise financial account information, financial mechanism information, transaction initiation mechanism information and transaction amount.
The parameter uploading module 33 is used for uploading the entrusted-authorization parameters from the accounting system 1 to the database 32 when the accounting system is available. The transaction delivering module 34 is used for delivering transaction information and cause of failure during entrusted-authorization in the database 32 to the accounting system 1 when the switch module 2 switches transaction to the accounting system 1.
The data communication module 30 is connected between the switch module 2 and the verification processing module 31 so as to transfer information therebetween. The database 32 stores the entrusted-authorization parameters, the transaction information and the cause of failure. The entrusted-authorization parameters comprise financial mechanism information, transaction initiation mechanism information, account amount and account information, in which the account information comprises information selected from a group comprising the following items: card number, term of validity of the card, check digit of the card, password encryption data, verification number of the card (CVN), information in the IC card which corresponds to items in validity verification events of the account.
The verification processing module 31 is configured to perform the following steps:
A. verifying the validity of the transaction request messages, and performing subsequent steps if the verification is approved, or otherwise generating and sending a response message indicating failure to the data communication module 30 and sending the cause of failure to the database 32. Since the verification of the validity of messages pertains to common knowledge in the art, it is not discussed in detail herein.
B. verifying the transaction request messages according to the financial mechanism information and the transaction initiation mechanism information in the entrusted-authorization parameters, and performing subsequent steps if the verification is approved, or otherwise generating and sending a response message indicating failure to the data communication module 30 and sending the cause of failure to the database 32;
C. determining the validity verification events of account according to the account information and performing verification according to the determined validity verification events of account, and performing subsequent steps if the verification is approved, or otherwise generating and sending a response message indicating failure to the data communication module 30 and sending the cause of failure to the database 32; wherein the validity verification events of account is stored in the verification processing module, and the validity verification events of account comprise at least one of the verification of card number, verification of term of validity of the card, verification of check digit of the card, verification of password, verification of CVN, and verification of IC card information.
D. verifying the transaction request according to account amount, and in case of the verification being approved, generating and sending a response message indicating success to the data communication module 30, and generating and sending transaction information to the database 32, or otherwise generating and sending a response message indicating the failure to the data communication module 30 and sending the cause of failure to the database 32, the transaction information comprises financial account information, financial mechanism information, transaction initiation mechanism information, transaction amount, transaction types and transaction dates.
In step B, if the entrusted-authorization parameters are consistent with financial mechanism information and transaction initiation mechanism information in the transaction request messages, then the verification is approved; otherwise, the verification is not approved.
In step C, taking the validity verification events of account comprises verification of card number and verification of term of validity of the card as an example. If account information in the entrusted-authorization parameters comprises card number or term of validity of the card or both (taking the account information comprising both card number and term of validity of the card as an example), it is determined to verify the card number and the term of validity of the card. If the card numbers are consistent and the current date is within the term of validity of the card, the verification is approved; otherwise, the verification is not approved. Those skilled in the art can determine the entrusted-authorization parameters as actually required so as to determine the corresponding validity verification events of account, thus providing the accounting system 1 with greater flexibility and selectivity.
Further, the entrusted-authorization parameters further comprise account risk information which further comprises information selected from a group comprising the following items: information in account blacklist, commercial tenant blacklist and limit control that corresponds to the items in verification events of account risk; wherein the verification events of account risk are stored in the verification processing module 31 and comprises at least one of verification of account blacklist, verification of commercial tenant blacklist and verification of limit control. The verification processing module 31 can also determine the verification events of account risk according to the account risk information and perform verification according to the determined verification events of account risk. If the verification is approved, the step D is performed; otherwise, a response message indicating failure is generated and sent to the data communication module 30 and the cause of failure is sent to the database 32.
Taking the verification events of account risk which comprises the verification of account blacklist and the verification of limit control as an example. Account risk information then comprises account blacklist or limit or both. Taking the account risk information comprising only account blacklist as an example, it is determined to verify account blacklist. If the financial account information in the transaction request messages is in the account blacklist, then the verification is not approved; otherwise, the verification is approved.
Further, the entrusted-authorization parameters further comprises permitted transaction types, the verification processing module 31 is configured to determine the transaction types according to the transaction request messages and verify the transaction types according to the permitted transaction types. If a determined transaction type belongs to a permitted transaction type, then the verification is approved; otherwise, the verification is not approved. The permitted transaction type supports various transactions in the art. The specific transaction type is selected by the entrusted-authorization member mechanisms (i.e., the accounting systems), and different entrusted-authorization member mechanisms (i.e., the accounting systems) can select completely different transaction types. The permitted transaction type includes consumption transaction, authorized transaction, payment transaction, cashing transaction and pre-authorization transaction, without being limited thereto. With development of the technology, other new types of transactions can be further included without departing from the scope of protection of the invention.
step 100, in which it is determined whether the accounting system is available; if not, step 101 is performed; otherwise, step 102 is performed.
step 101, in which the switch module sends transaction request messages from the client terminal to the entrusted-authorization module so as to be processed by the entrusted-authorization module according to the entrusted-authorization parameters; the transaction request messages comprise financial account information, financial mechanism information, transaction initiation mechanism information and transaction amount.
step 102, in which the switch module sends transaction request messages from the client terminal to the accounting system so as to be processed by the accounting system.
step 103, in which the entrusted-authorization module verifies the validity of the messages; if valid, step 104 is performed; otherwise, step 105 is performed.
step 104, in which the entrusted-authorization module verifies the validity of the mechanism; if the verification is approved, step 106 is performed; otherwise, step 107 is performed; the entrusted-authorization module verifies the transaction request messages according to financial mechanism information and transaction initiation mechanism information in the entrusted-authorization parameters; if the financial mechanism information and transaction initiation mechanism information in the entrusted-authorization parameters are consistent with those in the transaction request messages, the verification is approved; otherwise, the verification is not approved.
step 105, in which the entrusted-authorization module returns the information indicating that messages are illegal to the switch module.
step 106, in which the entrusted-authorization module verifies the validity of the transaction; if the verification is approved, step 108 is performed; otherwise, step 107 is performed; wherein the entrusted-authorization parameters further comprises permitted transaction types, a transaction type is determined according to the transaction request messages and the transaction type is verified according to the permitted transaction type; if the determined transaction type belongs to the permitted transaction type, the verification is approved; otherwise, the verification is not approved, wherein the permitted transaction type supports various transactions in the art, the specific transaction type is selected by the entrusted-authorization member mechanisms (i.e., the accounting systems), and different entrusted-authorization member mechanisms (i.e., the accounting systems) can select completely different transaction types; the permitted transaction types include consumption transaction, authorized transaction, payment transaction, cashing transaction and pre-authorization transaction, but without being limited thereto; with the development of the technology, other new types of transactions can be further included without departing from the scope of protection of the invention.
step 107, in which the entrusted-authorization module generates and sends a response message indicating failure and saves the cause of failure.
step 108, in which the entrusted-authorization module determines the validity verification events of account and performs verification; if the verification is approved, step 109 is performed; otherwise, step 107 is performed; the validity verification events of account comprises at least one of verification of card number, verification of term of validity of the card, verification of check digit of the card, verification of password, verification of CVN, and verification of IC card information; and the entrusted-authorization parameters further comprise account information which comprises information selected from a group comprising the following items: card number, term of validity of the card, check digit of the card, password encryption data, verification number of card (CVN), information in IC card which corresponds to items in the validity verification events of account.
step 109, in which the entrusted-authorization module determines the verification events of account risk according to account risk information and performs verification according to the determined verification events of the account risk; if the verification is approved, step 110 is performed; otherwise, step 107 is performed; wherein the entrusted-authorization parameters further comprises account risk information which further comprises information selected from a group comprising the following items: information in the account blacklist, commercial tenant blacklist and limit control that corresponds to items in the verification events of the account risk; if the financial account information, transaction initiation mechanism information and transaction amount from the transaction request messages belong to the account risk information in the entrusted-authorization parameters, the verification is not approved; otherwise, the verification is approved.
step 110, in which the entrusted-authorization module verifies the amount according to account amount in the entrusted-authorization parameters; if the verification is approved, step 111 is performed; otherwise, step 112 is performed; taking a single transaction as an example, if the account amount is larger than or equal to the transaction amount, then the verification is approved; otherwise, the verification is not approved; the present invention is not limited to the case of single transaction and those skilled in the art can devise a verification process for an amount that is added up in multiple transactions.
step 111, in which the entrusted-authorization module encashes the transaction request, generates and sends a response message indicating success, and saves transaction information.
step 112, in which the entrusted-authorization module performs transaction delivering; that is, when the switch module switches the transaction to the accounting system, the entrusted-authorization module delivers the transaction information and the cause of failure during entrusted-authorization to the accounting system. Optionally, the transactions are delivered in a manner of batch files or on-line messages.
step 113, in which the entrusted-authorization parameters are uploaded; that is, when the accounting system is available, the entrusted-authorization parameters from the accounting system are uploaded to the entrusted-authorization module.
The main idea of the invention lies in that the entrusted-authorization member mechanisms designate the verification events and a control with maximum freedom is provided for the admitted member mechanisms. Therefore, the above described embodiments of the invention are merely exemplary rather than limiting the invention. For example, the sequence of steps 104, 106, 108 and 109 can be adjusted. Alternatively, some steps can be omitted; for example, steps 106 and 109 can be omitted. Those skilled in the art can make modifications to the invention.
It can be known from the embodiments shown in
It can be known from the embodiments shown in
In light of the above teaching, those skilled in the art can readily envisage other embodiments, combinations and modifications of the invention. Therefore, when considered with reference to the above description and the accompanying drawings, the invention is defined merely by the technical solutions.
| Number | Date | Country | Kind |
|---|---|---|---|
| 201110435131.9 | Dec 2011 | CN | national |
| Filing Document | Filing Date | Country | Kind | 371c Date |
|---|---|---|---|---|
| PCT/CN2012/087026 | 12/20/2012 | WO | 00 | 6/18/2014 |
