Sensitive operation processing protocol

• US 10,476,867 B2
• Filed: 03/17/2017
• Issued: 11/12/2019
• Est. Priority Date: 04/13/2015
• Status: Active Grant

• Current Assignee: Tencent Technology Shenzhen Company Limited (Tencent Holdings Limited)
• Original Assignee: Tencent Technology Shenzhen Company Limited (Tencent Holdings Limited)
• Inventors: Liu, Jie
• Primary Examiner(s): Vu, Phy Anh T
• Application Number:
  US15/462,768
• Publication Number:
  US 20170195312A1
• Time in Patent Office: 970 Days
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]

Abstract

The present disclosure belongs to the field of network technologies, and disclosed are a sensitive operation processing protocols. The method includes: receiving a sensitive operation request, the sensitive operation request carrying a first feature sequence and sensitive operation information; obtaining a user account corresponding to the first feature sequence according to the first feature sequence and a preset conversion relationship between feature sequences and user accounts; and executing a sensitive operation on the basis of the user account corresponding to the first feature sequence and the sensitive operation information. According to the present disclosure, when a sensitive operation is performed, a user account is no longer directly used to perform a sensitive operation request; instead, the user account is replaced with a feature sequence uniquely identifying the user account.

Claims

1. A sensitive operation processing method, comprising:

receiving, by a hardware processor of a server, a sequence obtaining request, the sequence obtaining request comprising a user account identifier of a user, wherein the user account identifier is a combination of at least two of three types of characters comprising;

digit, letter and symbol;

converting, by the hardware processor, the user account identifier into a preliminary feature sequence, wherein the preliminary feature sequence is obtained by;

selecting, by the hardware processor, a portion of characters of the user account identifier;

multiplying, by the hardware processor, a predetermined number to the portion of characters selected to obtain a conversion code; and

replacing, by the hardware processor, the portion of characters of the user account identifier with the conversion code, to the user account identifier to generate the preliminary feature sequence;

determining, by the hardware processor, the preliminary feature sequence exists in a preset conversion relationship between feature sequences and user account identifiers;

modifying, by the hardware processor, in response to the preliminary feature sequence existing in the preset conversion relationship, the preliminary feature sequence to generate a modified feature sequence;

saving, by the hardware processor, a conversion relationship between the modified feature sequence and the user account identifier, wherein the modified feature sequence uniquely identifies a user account associated with the user account identifier;

providing, by the hardware processor, sensitive operation instruction information to a remote terminal of the user, wherein the sensitive operation instruction information comprises at least the modified feature sequence;

receiving, by the hardware processor, a sensitive operation request generated by the remote terminal, the sensitive operation request including the modified feature sequence and sensitive operation information;

obtaining, by the hardware processor, the user account identifier associated with the modified feature sequence according to the preset conversion relationship between feature sequences and user account identifiers;

executing, by the hardware processor, a sensitive operation based on the sensitive operation information and the user account identifier; and

deleting, by the hardware processor, the conversion relationship between the modified feature sequence and the user account identifier in response to receipt, from the remote terminal of the user, an indication of a page applying to obtain a sequence being closed, or the sensitive operation request not being received within a specified time.

2. The method of claim 1, wherein the step of converting the user account identifier into the preliminary feature sequence further comprises:

converting, by the hardware processor, the user account identifier into the preliminary feature sequence by using a specified algorithm;

determining, by the hardware processor, whether the preliminary feature sequence exists in the preset conversion relationship between the feature sequences and the user account identifiers;

establishing, by the hardware processor, the preliminary feature sequence as the first modified feature sequence in response to the preliminary feature sequence not existing in the preset conversion relationship between the feature sequences and the user account identifiers; and

establishing, by the hardware processor, in response to the preliminary feature sequence existing in the preset conversion relationship between the features sequences and the user account identifiers, the preliminary feature sequence as the modified feature sequence by repeatedly summing a specified value to the preliminary feature sequence until the modified feature sequence does not exist in the preset conversion relationship between the feature sequences and the user account identifiers.

3. A sensitive operation processing apparatus, comprising:

a non-transitory storage medium accessible by a processor, the non-transitory storage medium including;

instructions executable by the processor to receive a sequence obtaining request, the sequence obtaining request comprising a user account identifier, wherein the user account identifier is a combination of at least two of three types of characters comprising;

digit, letter and symbol;

instructions executable by the processor to convert the user account identifier into a preliminary feature sequence by causing the processor to;

select a portion of characters of the user account identifier,

multiply a predetermined number to the portion of characters selected to obtain a conversion code, and

replace the portion of characters of the user account identifier with the conversion code, to the user account identifier to generate the preliminary feature sequence;

instructions executable by the processor to determine the preliminary feature sequence exists in a preset conversion relationship between feature sequences and user account identifiers;

instructions executable by the processor to modify, in response to the preliminary feature sequence existing in the preset conversion relationship, the preliminary feature sequence to generate a modified feature sequence;

instructions executable by the processor to save a conversion relationship between the modified feature sequence and the user account identifier, wherein the modified feature sequence uniquely identifies a user account associated with the user account identifier;

instructions executable by the processor to provide sensitive operation instruction information to a remote terminal, wherein the sensitive operation instruction information comprises at least the modified feature sequence;

instructions executable by the processor to receive a sensitive operation request generated by the remote terminal, the sensitive operation request including the modified a first feature sequence and sensitive operation information;

instructions executable by the processor to obtain the user account identifier associated with the modified feature sequence according to the preset conversion relationship between feature sequences and user account identifiers;

instructions executable by the processor to execute a sensitive operation based on the sensitive operation information and the user account identifier corresponding to the modified feature sequence; and

instructions executable by the processor to delete the conversion relationship between the modified feature sequence and the user account identifier in response to receipt, from the remote terminal, of an indication of a page applying to obtain a sequence being closed, or the sensitive operation request not being received within a specified time.

4. The sensitive operation processing apparatus of claim 3, wherein the instructions executable by the processor to convert the user account identifier into the preliminary feature sequence further include:

instructions executable by the processor to convert the user account identifier into the preliminary feature sequence based on a specified algorithm;

instructions executable by the processor to determine the preliminary feature sequence not being included in the preset conversion relationship between the feature sequences and the user account identifiers; and

instructions executable by the processor to establish the preliminary feature sequence as the modified feature sequence in response to the preliminary feature sequence not being included in the preset conversion relationship between the feature sequences and the user account identifiers.

5. A server, comprising:

a hardware processor connected to a non-transitory storage medium, the non-transitory storage medium configured to store instructions executable by the hardware processor to cause the hardware processor to;

receive a sequence obtaining request, the sequence obtaining request comprising a user account identifier, wherein the user account identifier is a combination of at least two of three types of characters comprising;

digit, letter and symbol;

convert the user account identifier into a preliminary feature sequence, wherein to convert the user account identifier into the preliminary feature sequence, hardware processor executes instructions to select a portion of characters of the user account identifier, multiply a predetermined number to the portion of characters selected to obtain a conversion code, and replace the portion of characters of the user account identifier with the conversion code, to the user account identifier to generate the preliminary feature sequence;

determine the preliminary feature sequence exists in a preset conversion relationship between feature sequences and user account identifiers;

modify, in response to the preliminary feature sequence existing in the preset conversion relationship, the preliminary feature sequence to generate a modified feature sequence;

save a conversion relationship between the modified feature sequence and the user account identifier, wherein the modified feature sequence uniquely identifies a user account associated with the user account identifier;

provide sensitive operation instruction information to a remote terminal, wherein the sensitive operation instruction information comprises at least the modified feature sequence;

receive a sensitive operation request, the sensitive operation request including the modified feature sequence and sensitive operation information;

obtain, in response to the sensitive operation request, the user account identifier associated with the modified feature sequence according to the preset conversion relationship between feature sequences and user account identifiers;

execute a sensitive operation based on the sensitive operation information and the user account identifier; and

delete the conversion relationship between the modified feature sequence and the user account identifier in response to receipt, from the remote terminal, an indication of a page applying to obtain a sequence being closed, or the sensitive operation request not being received within a specified time.

6. The server of claim 5, wherein the hardware processor is further configured to execute the instructions stored in the non-transitory storage medium to cause the hardware processor to:

convert the user account identifier into a preliminary feature sequence by using a specified algorithm.

7. The server of claim 6, wherein the hardware processor is further configured to execute the instructions stored in the non-transitory storage medium to cause the hardware processor to:

determine the preliminary feature sequence not being included in the preset conversion relationship between the feature sequences and the user account identifiers; and

establish the preliminary feature sequence as the modified feature sequence in response to the preliminary feature sequence not being included in the preset conversion relationship between the feature sequences and the user account identifiers.

8. The server of claim 5, wherein the hardware processor is further configured to execute the instructions stored in the non-transitory storage medium to cause the hardware processor to:

determine the page is being closed, the page configured to initiate the sequence obtaining request on the remote terminal; and

delete the conversion relationship between first modified feature sequence and the user account identifier in response to the page being closed.

9. The server of claim 5, wherein the hardware processor is further configured to execute the instructions stored in the non-transitory storage medium to cause the hardware processor to:

determine the page is being closed, the page configured to initiate the sequence obtaining request on the remote terminal; and

delete the conversion relationship between the modified feature sequence and the user account identifier in response to the sensitive operation request not being received within a specified time.