Note : Les descriptions sont présentées dans la langue officielle dans laquelle elles ont été soumises.
CA 02993528 2018-01-22
WO 2017/011999 PCT/CN2015/084566
Title: Online Funds Management Method, And Data Interaction Processing
Method And Device
[1] [Technical Field]
[2] The present invention relates to the field of electronic commerce, and
in particular, to an
online fund management method and data interaction processing method and
device.
[3] [Background Technology]
[4] The current online electronic payment or online payment methods mainly
include bank
online banking payment (including credit card payment) and third-party
payment. In the
existing online electronic payment or online payment, there is less risk in
the form of
third-party payment company guarantee.
[5] However, in the form of a third-party payment company guarantee, for
the payee customer
or payer, the funds have been paid to the third-party payment company when the
commodity are not received, and once a third-party payment company has a
problem, the
payment to the client or the borrower is not guaranteed. Therefore, in the
form of a
third-party payment company guarantee, there is still a large risk of payment
to the client
or the borrower. Especially when the cash flow of the payer client or payer is
abnormal, the
third-party company cannot timely and effectively intervene and prevent the
commodity
provider from obtaining the funds for the sale of the commodity. For example,
the amount
of the commodity purchased by the paying customer or the payer due to the
civil economic
dispute cannot be paid to the commodity provider normally.
[6] Further, since users can realize various ways of data interaction
through the Internet, it is
necessary to provide an online data interaction processing method.
[7] [Summary of the Invention]
[8] The object of the present invention is to provide an online fund
management method, a
data interaction processing method, a device and a system which can
effectively ensure the
financial benefits of the commodity / service providers are not damaged when
the cash
flow of the paying party is abnormal.
[9] In order to solve the above technical problem, the first technical
solution adopted by the
present invention is to provide an online fund management method, which
includes: First
Participant delivers a request for freezing Second Participant account funds
to the First
Funds-Management server; where the request includes at least a freeze account,
a credit
limit to be frozen, and a freeze period; and the First Funds-Management server
responds to
CA 02993528 2018-01-22
WO 2017/011999 PCT/CN2015/084566
the request and verifies the First Participant, The first Funds-Management
server verifies
the identity information of the First Participant and confirms that the funds
that need to be
frozen include at least part of the funds of the second Participant's
electronic certificate.
Freezing the funds not larger than the amount of the electronic certificate;
delivering the
electronic certificate information after the funds are frozen to a second
Funds-Management
server; and delivering, by the second Funds-Management server, the received
electronic
certificate information. The third Participant obtains the electronic
certificate information;
wherein the electronic certificate information at least includes available
credit limits, and
the first Funds-Management server is the second Participant's account
management server,
and the second Funds-Management server is the account management server of the
Third
Participant.
[10] In order to solve the above technical problem, a second technical
solution adopted by the
present invention is to provide an online fund management method, which
includes: the
First Funds-Management server receives the request to freeze Second
Participant account
Funds delivered by First Participant, and carries out the identity check of
the First
Participant; wherein the request at least comprises a frozen account number, a
credit limit
to be frozen, and a freezing deadline; when the identity verification passes
and it is
confirmed that the funds that need to be frozen include at least part of the
funds of the
Second Participant's electronic certificate, freezing funds not more than the
amount of the
electronic certificate; delivering the electronic certificate information
after the funds are
frozen to a second Funds-Management server; wherein the electronic certificate
information at least includes at least one of the first Funds-Management
server is an
account management server of the Second Participant, and the second Funds-
Management
server is an account management server of the Third Participant.
[11] In the above solution, when the Second Participant's funds flow is
abnormal, the First
Participant requests the account management server of the Second Participant
to freeze at
least part of the funds of the Second Participant account; After the funds are
successfully
flozen, the account management server of the Second Participant delivers the
Second
Participant of the electronic certificate through the Third Participant's
account management
server to notify Third Participant that the Third Participant can be promptly
notified to the
Third Participant when the flow of the Second Participant is abnormal, so as
to effectively
ensure that Third Participant's financial interests are not compromised. The
Second
Participant's Account Management Server can also notify Third Participants via
the Third
Participant's account management server when the freeze period expires,
releasing the
funds frozen in the electronic certificate to ensure that Third Participant
has real-time
2
CA 02993528 2018-01-22
WO 2017/011999 PCT/CN2015/084566
visibility into the second Participants electronic certificate.
[12] In order to solve the above technical problem, a third technical
solution adopted by the
present invention is to provide a data interaction processing method, where
the method
includes: the first interactive party delivers a request for freezing the data
value of the at
least partial data of the second interactive party data unit to the First
Service Party; wherein
the request includes at least a frozen data value and a freeze period; and
when receiving the
request, the First Service Party performs identity verification on the first
interactive party;
and when the First Service Party passes the identity verification of the First
interaction
Party, and confirms that the data value that needs to be frozen includes at
least part of the
data value of the data certificate of the second interactive Party, the
freezing is not greater
than the first data size of the data certificate data value, and delivers the
data certificate
information frozen in the first data to a Second Service Party; and Second
Service Party
send the data certificate information received to the third Party; the third
interactive party
obtains the data certificate information.
[13] In order to solve the above technical problem, a fourth technical
solution adopted by the
present invention is to provide a data interaction processing method, where
the method
including: The First Service Party receives the request for freezing the data
value of the at
least part of the data of the second interactive party delivered by the first
interactive party,
and performs identity verification on the first interactive party, where the
request includes
at least the identification of the data unit that needs to be frozen, the data
value that needs
to be frozen, and the freeze period; and when the identity verification passes
and
confirming that the data value to be frozen includes at least a part of the
data value of the
data certificate of the second interactive party, freezing the data value not
greater than the
data certificate data value; and delivering the data certificate information
that has been
frozen the first data to a Second Service Party.
[14] In order to solve the above technical problem, a fifth technical
solution adopted by the
present invention is to provide a data interaction processing device, where
the device
includes a receiving module is used for requesting, by the first interacting
party, the data
value of the at least part of the data of the second interacting party data
unit that is frozen,
Verifying the identity of the first interactive party, confirm whether the
data value that
needs to be frozen includes at least part of the data value of the data
certificate of the
second interactive party, wherein the request includes at least the
identification of the data
unit that needs to be frozen, the data value that needs to be frozen, and the
freeze period; a
verification module is used to verify the identity of the first interaction
party; and a
processing module is used for freezing the first data of the data certificate
data that is not
3
CA 02993528 2018-01-22
WO 2017/011999 PCT/CN2015/084566
larger than the data certificate data value when the verification module
passes the
identification check and confirms that the data value that needs to be frozen
includes at
least part of the data value of the second party of the interactive party; and
a delivering
module is used to deliver the data certificate information of the frozen first
data to the
Second Service Party.
[15] In the above solution, when the data flow of the second interactive
party is abnormal, the
service party of the second interactive party in the first interacting party
requests to freeze
the data value of the at least partial data of the data unit of the second
interactive party;
after the service party of the second interactive party transfers data
certificate to
successfully freeze the first data in the data certificate according to the
request, the change
information of the data certificate of the second interactive party is
notified to the third
party by the service party of the third interactive party, when the data flow
of the second
interactive party is abnormal, the third interactive party can be timely
notified to avoid the
risk of data security of the third party.
[16] The service party of the second interactive party may also notify the
third interactive party
through the service party of the third interactive party when the freezing
time limit expires
to unfreeze the frozen data value in the data certificate, so as to ensure
that the third
interactive party learns the dynamic information of the data certificate of
the second
interacting party in real time.
[17] [Brief Description]
[18] Figure 1 is a schematic flow chart of an example of an online fund
management method
according to the present invention;
[19] Figure 2 is a schematic diagram of online funds management
relationship in the example of
the present invention;
[20] Figure 3 is a schematic flow chart of another example of an online
fund management
method according to the present invention;
[21] Figure 4 is a schematic flow chart of an example of a data interaction
processing method
according to the present invention;
[22] Figure 5 is a schematic flow chart of another example of a data
interaction processing
method according to the present invention;
[23] Figure 6 is a schematic structural diagram of an example of a data
interaction processing
system according to the present invention;
[24] Figure 7 is a schematic structural diagram of an example of a data
interaction processing
device according to the present invention. Figure
[25] [Description of the Preferred Examples]
4
CA 02993528 2018-01-22
WO 2017/011999 PCT/CN2015/084566
[26] In order to explain on the technical content, construction
characteristics, the purpose and
effect of the invention, the following combination of the attached drawings
and the
embodiment of the invention are explained in detail.
[27] Please refer to Figure 1, it is a schematic flow chart of an example
of an online fund
management method according to the present invention. Please refer to Figure 2
together.
Figure 2 is a schematic diagram of online funds management according to an
example of
the present invention. The online funds management method includes the
following steps:
[28] S101: First Participant delivers a request to the First Funds-
Management server to freeze
funds for the Second Participant account.
[29] When the Second Participant purchases the commodity/services from
Third Participant, the
funds flow of the Second Participant account is abnormal (for example, when
the Second
Participant falls into a civil economic dispute), the First Participant
intervenes.
[30] First Participant delivers a request to the First Funds-Management
server to freeze the
funds of the Second Participant account. Wherein, the request includes at
least a freeze
account, a credit limit to be frozen, and a freeze period. The first Funds-
Management
server is the account manager of Second Participant.
[31] Further, First Participant is a third-party institution that has the
right to freeze funds. The
third party is at least one of the public security organs, the procuratorate,
the courts, the
security organs, the army security department, the prison security department,
the customs
and the taxation, but it is not limited thereto and may also be other
institutions that have the
authority to freeze funds, Department without restriction.
[32] S102: In response to the request, the first Funds-Management server
performs identity
verification on the First Participant.
[33] After receiving the request delivered by First Participant, the first
Funds-Management
server responds to the request, and performs identity verification on the
First Participant's
identity information to confirm whether First Participant's identity
information is valid and
confimi whether the funds required to be deducted include at least some of the
funds for
the Second Participant's electronic certificate.
[34] Wherein, when the first Funds-Management server confirms that the
funds except the
electronic certificate in the Second Participant account are less than the
funds that need to
be frozen, the funds that need to be frozen include at least part of the funds
of the Second
Participant's electronic certificate.
[35] When First Funds-Management server confirms that First Participant's
identity information
is untrue, it delivers First Participant an error message indicating that
First Participant's
identity information is incorrect.
CA 02993528 2018-01-22
WO 2017/011999 PCT/CN2015/084566
[36] When the first Funds-Management server confirms that the identity
information of the First
Participant is valid and confirms that the funds to be frozen include at least
part of the
funds of the second Participant's electronic certificate, step S103 is
performed.
[37] S103: After the first Funds-Management server verifies the identity
information of the First
Participant and confirms that the funds that need to be frozen include at
least part of the
funds of the second Participant's electronic certificate, frozen the funds
which is not greater
than the amount of the electronic certificate, so as to frozen funds from the
target account
and deliver the electronic certificate information after the funds are
deducted to the second
Funds-Management server.
[38] When the first Funds-Management server confirms that the First
Participant's identity
information is valid and confirms that the funds to be frozen include at least
part of the
funds of the Second Participant's electronic certificate, the electronic
certificate of the
pre-saved Second Participant is transferred to read the information in the
electronic
certificate and freeze the amount of funds that are not greater than the
electronic certificate
amount to stop the Second Participant from using at least some of the frozen
funds in the
electronic certificate. Deliver the electronic certificate information after
the frozen Funds to
the second Funds-Management server.
[39] It can be understood that all the funds corresponding to the
electronic certificate can be
frozen, or only part of the funds in the electronic certificate can be frozen,
which is not
limited herein.
[40] Wherein, the electronic certificate involved in the example of the
present invention may be
referred to as "Bank Credit Certificate". Bank Credit Certificate is a payment
certificate of
electronic credit commitment which is based on the application of the first
participant by
the funds management institution to freeze the applicant's funds or credit
limit and opened
in the name of the bank and commits to settle in accordance with the agreed
conditions.
[41] Electronic certificate include at least the funding limit. Electronic
certificate information
includes at least the amount of funds available. The second Funds-Management
server is
the account administration server for the Third Participant. The second Funds-
Management
server is the account administration server for the Third Participant.
[42] Further, the first Funds-Management server is the Funds-Management
server of the first
bank, the second Funds-Management server is the Funds-Management server of the
second
bank; the released funds are the deposits of the Second Participant on the
first
Funds-Management server or the credits of the Second Participant on the first
Funds-Management server or the funds corresponding to the real estate
mortgaged by the
Second Participant on the first Funds-Management server.
6
CA 02993528 2018-01-22
WO 2017/011999 PCT/CN2015/084566
[43] Further, in another example, the first Funds-Management server and the
second
Funds-Management server may be the same Funds-Management server.
[44] Further, the freezing information of funds is recorded after freezing
funds that are not more
than electronic certificate. Wherein, the funds freeze information includes at
least the
available funds and can include information such as the First Participant
information
requesting the frozen funds and the frozen amount of funds.
[45] Further, after the first Funds-Management server delivers the funds-
frozen electronic
certificate information to the second Funds-Management server, the first
Funds-Management server determines whether the freezing period of the
electronic
certificate expires, and confirms whether to receive a request from First
Participant to
continue the funds freeze for the Second Participant account.
[46] When the first Funds-Management server determines that the freezing
period of the
electronic certificate expires and receives a request from the First
Participant to continue to
freeze the funds of the Second Participant account, the first Funds-Management
server
returns to step S102 to perform identity verification on the First
Participant.
[47] When the first Funds-Management server determines that the freezing
period of the
electronic certificate expires and does not receive a request from First
Participant to
continue the freezing of the funds of the Second Participant account, the
first
Funds-Management server releases the frozen funds in the electronic
certificate and freezes
the funds after the electronic certificate information delivered to the second
Funds-Management server.
[48] S104: the second Funds-Management server delivers the received
electronic certificate
information to the Third Participant.
[49] The second Funds-Management server delivers the received electronic
certificate
information delivered by the first Funds-Management server to the Third
Participant.
[50] S105: the Third Participant obtains the electronic certificate
information.
[51] After receiving the electronic certificate information delivered by
the second
Funds-Management server, Third Participant obtains the amount of available
funds for the
electronic certificate and confirms whether to continue the transaction with
Second
Participant.
[52] For example, the Third Participant refuses to continue trading with
the Second Participant
when the amount of funds in the second Participant's electronic certificate is
less than the
amount corresponding to the commodity / services purchased by Second
Participant. Third
Participant may not ship to Second Participant, or may recall commodity that
have already
been issued.
7
CA 02993528 2018-01-22
WO 2017/011999 PCT/CN2015/084566
[53] In the above solution, when the Second Participant's funds flow is
abnormal, the First
Participant requests the account management server of the Second Participant
to freeze at
least part of the funds of the Second Participant account; After the funds are
successfully
frozen, the account management server of the Second Participant delivers the
Second
Participant of the electronic certificate through the Third Participant's
account management
server to notify Third Participant that the Third Participant can be promptly
notified to the
Third Participant when the flow of the Second Participant is abnormal, so as
to effectively
ensure that Third Participant's financial interests are not compromised.
[54] The Second Participant's Account Management Server can also notify
Third Participants
via the Third Participant's account management server when the freeze period
expires,
releasing the funds frozen in the electronic certificate to ensure that Third
Participant has
real-time visibility into the second Participant's electronic certificate.
[55] Please refer to Figure 3, Figure 3 is a schematic flowchart of an
online funds management
method according to an example of the present invention. The executive body in
this
example is a first Funds-Management server. The online fund management method
in this
example includes the following steps:
[56] S201: the first Funds-Management server receives a request from the
First Participant to
freeze the funds of the Second Participant account, and performs identity
verification on
the First Participant.
[57] When the Second Participant purchases the commodity/services from
Third Participant, the
funds flow of the Second Participant account is abnormal (for example, when
the Second
Participant falls into a civil economic dispute), the First Participant
intervenes.
[58] When First Participant delivers a request for freezing Second
Participant account funds to
the First Funds-Management server, the first Funds-Management server receives
the
request, verifies the First Participant to confirm First Whether Participant's
identity
information is truly legal, and whether the funds required to be frozen
include at least part
of the funds of the Second Participant's electronic certificate.
[59] Wherein, the request includes at least a freeze account, a credit
limit to be frozen, and a
freeze period. The first Funds-Management server is the account manager of
Second
Participant.
[60] Wherein, when the first Funds-Management server confirms that the
funds except the
electronic certificate in the Second Participant account are less than the
funds that need to
be frozen, the funds that need to be frozen include at least part of the funds
of the Second
Participant's electronic certificate.
[61] When First Funds-Management server confirms that First Participant's
identity information
8
CA 02993528 2018-01-22
WO 2017/011999 PCT/CN2015/084566
is untrue, it delivers First Participant an error message indicating that
First Participant's
identity information is incorrect.
[62] When the first Funds-Management server confirms that the identity
information of the First
Participant is valid and confirms that the funds to be frozen include at least
part of the
funds of the second Participant's electronic certificate, step S202 is
performed.
[63] S202: When the identity verification is passed, and the funds that
need to be frozen include
at least part of the funds of the electronic certificate of the Second
Participant, the amount
of the electronic certificate shall be frozen.
[64] When the first Funds-Management server confirms that the First
Participant's identity
information is valid, the electronic certificate of the pre-saved Second
Participant is
transferred to read the information in the electronic certificate and freeze
the amount of
funds that are not greater than the electronic certificate amount to stop the
Second
Participant from using at least some of the frozen funds in the electronic
certificate. It can
be understood that all the funds corresponding to the electronic certificate
can be frozen or
only part of the funds in the electronic certificate can be frozen, which is
not limited herein.
[65] Wherein, the electronic certificate involved in the example of the
present invention may be
referred to as "Bank Credit Certificate". Bank Credit Certificate is a payment
certificate of
electronic credit commitment which is based on the application of the first
participant by
the funds management institution to freeze the applicant's funds or credit
limit and opened
in the name of the bank and commits to settle in accordance with the agreed
conditions.
The basic business process of Bank Credit Certificate: the issuing bank will
freeze the
required amount of funds according to the issuer's application to open a Bank
Credit
Certificate. When the agreed terms for the settlement are reached, the issuing
bank will
settle the funds for payment settlement.
[66] Electronic certificate include at least the funding limit. The second
Funds-Management
server is the account administration server for the Third Participant. The
second
Funds-Management server is the account administration server for the Third
Participant.
[67] Further, the freezing information of funds is recorded after freezing
funds that are not more
than electronic certificate. Wherein, the funds freeze information includes at
least the
available funds and can include information such as the First Participant
information
requesting the frozen funds and the frozen amount of funds.
[68] S203: Deliver the electronic certificate after the funds are frozen to
a second
Funds-Management server.
[69] After the first Funds-Management server freezes the funds not larger
than the amount of
the electronic certificate according to the request, the first Funds-
Management server
9
CA 02993528 2018-01-22
WO 2017/011999 PCT/CN2015/084566
delivers the information of the electronic certificate after the funds are
frozen to the second
Funds-Management server so that the second Funds-Management server will
receive
electronic certificate information to Third Participant so that Third
Participant can confirm
whether to continue trading with Second Participant after obtaining the
electronic
certificate information.
[70] Wherein, the electronic certificate information includes at least the
amount of available
funds, and the second Funds-Management server is the account management server
of the
Third Participant.
[71] Further, First Participant is a third-party institution that has the
right to freeze funds. The
third party is at least one of the public security organs, the procuratorate,
the courts, the
security organs, the army security department, the prison security department,
the customs
and the taxation, but it is not limited thereto and may also be other
institutions that have the
authority to freeze funds, Depar tment without restriction.
[72] Further, after the first Funds-Management server delivers the funds-
frozen electronic
certificate information to the second Funds-Management server, the first
Funds-Management server determines whether the freezing period of the
electronic
certificate expires, and confirms whether to receive a request from First
Participant to
continue the funds freeze for the Second Participant account.
[73] When the first Funds-Management server determines that the freezing
period of the
electronic certificate expires and receives a request from the First
Participant to continue to
freeze the funds of the Second Participant account, the first Funds-Management
server
returns to step S102 to perform identity verification on the First
Participant.
[74] When the first Funds-Management server determines that the freezing
period of the
electronic certificate expires and does not receive a request from First
Participant to
continue the freezing of the funds of the Second Participant account, the
first
Funds-Management server releases the frozen funds in the electronic
certificate and freezes
the funds after the electronic certificate information delivered to the second
Funds-Management server.
[75] In the above solution, the first Funds-Management server responds to
the request of the
First Participant to freeze the funds of the Second Participant account when
the flow of the
Second Participant is abnormal. After the funds of the Second Participant
account are
successfully frozen according to the request, Third Participant is notified of
the electronic
certificate information of the Second Participant account through Third
Participant's
account management server so that Third Participant can be promptly notified
when the
flow of the Second Participant is abnormal, so as to effectively ensure that
Third
CA 02993528 2018-01-22
WO 2017/011999 PCT/CN2015/084566
Participant's interests are not impaired.
[76] The First Funds-Management server can also notify the Third
Participant through Third
Participant's account management server when the freeze period expires,
releasing the
funds frozen in the electronic certificate to ensure that Third Participant
has real-time
visibility into the second Participant's electronic certificate.
[77] Please refer to Figure 4, Figure 4 is a schematic flow chart of third
example of a data
interaction processing method according to the present invention. The data
interaction
processing method in this example includes the following steps:
[78] S301: The First Service Party receives the request for freezing the
data value of the at least
part of the data of the second interactive party delivered by the first
interactive party, and
performs identity verification on the first interactive party.
[79] When the second interactive party performs data interaction with the
third interactive party
and an abnormality occurs in the data unit of the second interactive party,
the first
interactive party delivers data of freezing at least part of the data of the
second interacting
data unit Value request. Wherein, the request at least includes an identifier
of a data unit to
be frozen, a data value to be frozen, and a freeze period.
[80] S302: the First Service Party, upon receiving the request, performs
identity verification on
the first interacting party.
[81] Upon receiving the request, the First Service Party performs identity
verification on the
identity information of the first interacting party to confirm whether the
identity
information of the first interacting party is true and confirm whether the
data values that
need to be frozen include at least part of the data value of the data
certificate of the second
interactive party.
[82] Wherein, when the First Service Party verifies that the data value of
the second interacting
party data unit except the data value of the data certificate is smaller than
the data value to
be frozen, the data value that needs to be frozen includes at least a part of
the data value of
the data certificate of the second interacting party.
[83] When the First Service Party confirms that the identity information of
the First Participant
is not true, it delivers an identity error message to First Participant to
indicate that the First
Participant identity information is incorrect.
[84] When the First Service Party confirms the identity information of the
First interacting
party, and the data value that needs to be frozen includes at least part of
the data value of
the data certificate of the second interactive Party, the execution step S302.
[85] S303: the First Service Party passes the identity verification of the
first user, and confirms
that the data value that needs to be frozen includes at least part of the data
value of the data
11
CA 02993528 2018-01-22
WO 2017/011999 PCT/CN2015/084566
certificate of the second interactive Party, freezing no more than the first
data of the data
certificate data value.
[86] When the First Service Party confirms that the identity information of
the first interactive
party is true and confirms whether the data value to be frozen includes at
least part of the
data valuesof the data certificate of the second interactive party, calling
the pre-saved
second interactive party data certificate to obtain the information contained
in the data
certificate and freeze the first data not larger than the data certificate
data value to stop
second interactive party from using the frozen first data. It can be
understood that the first
data can be the data value of the data certificate, or it can be less than the
data value of the
data certificate.
[87] After that, the data certificate of the frozen first data is delivered
to the Second Service
Party. The data certificate information includes at least the data value that
has not been
frozen.
[88] Further, after the First Service Party delivers the data certificate
information of freezing the
first data to the Second Service Party, the First Service Party also
determines whether the
freeze period of the data certificate has expired and whether a request
delivered by the first
interacting party to continue to freeze the data value of at least part of the
data of the
second interacting party data unit is received.
[89] When the First Service Party determines that the freeze period of the
data certificate has
expired and receives a request for continuing to freeze the data value of at
least part of the
data of the second interactive party delivered by the first interactive party,
the First Service
Party returns to step S302, make an identification of the first interactive
party.
[90] When the First Service Party determines that the freeze period of the
data certificate has
expired and the request for continuing to freeze the data value of at least
part of the data of
the second interactive party delivered by the first interactive party is not
received, release
the first data of data certificate and deliver the data certificate
information after the first
data to the Second Service Party.
[91] S304: the Second Service Party delivers the received data certificate
information to a third
interactive party.
[92] The Second Service Party delivers the received data certificate
information to the third
interactive party.
[93] S305: the third interaction party obtains the data certificate
information.
[94] The third party obtains the data certificate information delivered by
the Second Service
Party, and then confirms whether to continue with the Second Participant.
[95] The data interaction processing method in the example of the present
invention is described
12
CA 02993528 2018-01-22
WO 2017/011999 PCT/CN2015/084566
below by way of example.
[96] For example, the first Interacting Party is User A, the second
interacting party is User B,
User B corresponds to First Service Party, the third interacting party is for
C, and user C
corresponds to Second Service Party. User B is an administrator for more than
one client
and has a corresponding password for each client for administrator privileges.
User A has
higher administrative privileges than User B. Clients can be personal
computers, tablets,
smart phones and other devices that can exchange data with servers through the
network.
[97] When the user C obtains the password of the management authority of
the Client 2 from
the User B, applies for the data certificate of the User B from the First
Server party through
the Second Service Party, and when User B's data flow appears abnormal, User A
with
higher administrative authority is involved in management. User A delivers a
request to the
First Service Party to freeze the password for administrative privileges on at
least some of
the clients of the User B data unit.
[98] When the First Service Party passes identity verification on User A
and confirms that the
password for managing the client managed by User B needs to be frozen includes
the
password for managing at least some clients in the data certificate of User B,
transfer User
B's data certificate to obtain the password of the administrative authority of
all clients
managed by User B, and freeze the password of the administrative authority of
some
clients.
[99] The First Service Party delivers the updated data certificate
information of User B to the
Second Service Party so that the Second Service Party notifies User C of the
change
information, so that after obtaining the change information of User B's data
certificate, it is
possible to confirm whether or not the password of the management authority of
the Client
2 can also be obtained. When the password of the Client 2 cannot be obtained,
the User A
cannot interact with the data. Wherein, the change information of User B's
data certificate
includes at least the password of the management authority for the frozen
client.
[100] In the above, User A has higher management authority than User B. When
User B has
abnormal account information, User A performs risk control on the data
interaction
between user C and User B, It avoids the problem that the user C can't get the
client data
and avoid the risk of the security of the client data.
[101] Further, the requested data may also be text data, audio data, video
data, program data or
financial data in the financial field, etc. if it is the financial data, such
as funds, then the
second parties have the authority institutions of third party (such as the
court, the customs,
the tax authorities), the first interactive party is the buyer, the third
interaction is the seller,
the First Service Party is the First Funds-Management server, Second Service
Party is the
13
CA 02993528 2018-01-22
WO 2017/011999 PCT/CN2015/084566
Second Funds-Management server, for example, the bank. If it is audio data,
such as a
song, the data requester and the data initiator may be clients with multimedia
playing
functions such as mobile phones, and the server is a music website server.
[102] In the above solution, when the data flow of the second interactive
party is abnormal, the
service party of the second interactive party in the first interacting party
requests to freeze
the data value of the at least partial data of the data unit of the second
interactive party;
after the service party of the second interactive party transfers data
certificate to
successfully freeze the first data in the data certificate according to the
request, the change
information of the data certificate of the second interactive party is
notified to the third
party by the service party of the third interactive party, when the data flow
of the second
interactive party is abnormal, the third interactive party can be timely
notified to avoid the
risk of data security of the third party.
[103] The service party of the second interactive party may also notify the
third interactive party
through the service party of the third interactive party when the freezing
time limit expires
to unfreeze the frozen data value in the data certificate, so as to ensure
that the third
interactive party learns the dynamic information of the data certificate of
the second
interacting party in real time.
[104] Please refer to Figure 5, Figure 5 is a schematic flowchart of another
example of a data
interaction processing method according to the present invention. The
executive body of
this example is First Service Party. The data interaction processing method in
this example
includes the following steps:
[105] S401: The First Service Party receives a request for freezing the data
value of the at least
part of the data of the second interactive party delivered by the first
interactive party,
performs identity verification on the first interactive party, and performs
identity
verification on the first interactive party.
[106] When the second interactive party performs data interaction with the
third interactive party
and an abnormality occurs in the data unit of the second interactive party,
the First Service
Party receives the request for the data value of at least part of the data in
the second
interactive data unit delivered by the First Service Party. Wherein, the
request at least
includes an identifier of a data unit to be frozen, a data value to be frozen,
and a freeze
period.
[107] Upon receiving the request, the First Service Party performs identity
verification on the
information of the first interacting party to confirm whether the identity
information of the
first interacting party is true and confirm whether the data values that need
to be frozen
include at least part of the data value of the data certificate of the second
interactive party.
14
CA 02993528 2018-01-22
WO 2017/011999 PCT/CN2015/084566
[108] Wherein, when the First Service Party verifies that the data value of
the second interacting
party data unit except the data value of the data certificate is smaller than
the data value to
be frozen, the data value that needs to be frozen includes at least a part of
the data value of
the data certificate of the second interacting party.
[109] When the First Service Party confirms that the identity information of
the First Participant
is not true, it delivers an identity error message to First Participant to
indicate that the First
Participant identity information is incorrect.
[110] When the First Service Party confirms the identity information of the
First interacting
party, and the data value that needs to be frozen includes at least part of
the data value of
the data certificate of the second interactive Party, the execution step S402.
[111] S402: When the authentication is passed and the data value that needs to
be frozen includes
at least part of the data value of the data certificate of the second
interactive party, the
freezing is not greater than the first data of the data value of the data
certificate.
[112] When the First Service Party confirms that the identity information of
the first interacting
party is real, the data certificate of the second interacting party that is
saved in advance is
called to get the information contained in the data certificate. The data
certificate
information includes at least the data value.
[113] The First Service Party, after obtaining the information contained in
the data certificate,
freezes the first data whose size is not larger than the data certificate data
value. It can be
understood that the first data can be the data value of the data certificate,
or it can be less
than the data value of the data certificate.
[114] S403: Deliver the data certificate information to the Second Service
Party after freezing the
first data.
[115] After that, the First Service Party will deliver the data certificate
information of the frozen
first data to the Second Service Party, so that when the third party receives
the data
certificate information delivered by the Second Service Party, the third party
obtains the
data certificate information, and then confirm whether to continue with the
Second
Participant. The data certificate information includes at least the data value
that has not
been frozen.
[116] Further, after the First Service Party delivers the data certificate
information of freezing the
first data to the Second Service Party, the First Service Party also
determines whether the
freeze period of the data certificate has expired and whether a request
delivered by the first
interacting party to continue to freeze the data value of at least part of the
data of the
second interacting party data unit is received.
[117] When the First Service Party determines that the freeze period of the
data certificate has
CA 02993528 2018-01-22
WO 2017/011999 PCT/CN2015/084566
expired and receives a request for continuing to freeze the data value of at
least part of the
data of the second interactive party delivered by the first interactive party,
the First Service
Party returns to step, make an identification of the first interactive party.
[118] When the First Service Party determines that the freeze period of the
data certificate has
expired and the request for continuing to freeze the data value of at least
part of the data of
the second interactive party delivered by the first interactive party is not
received, release
the first data of data certificate and deliver the data certificate
information after the first
data to the Second Service Party.
[119] In the above solution, when the data flow of the second interactive
party is abnormal, the
First Service Party receives the request for freezing the data value of the at
least partial data
of the data units of the second interactive party delivered by the first
interactive party; in
the First Service Party after calling the data certificate of the second
interactive party
according to the data value of the at least partial data that is successfully
frozen according
to the request, notifying the third interactive party of the change
information of the data
certificate of the second interactive party through the service party of the
third interactive
party, when the data exchange between the two parties is abnormal, the third
party is
notified in time to effectively avoid the data security risk of the third
party.
[120] The First Service Party may also notify the third interactive party
through the service party
of the third interactive party when the freezing time limit expires to
unfreeze the frozen
data value in the data certificate, so as to ensure that the third interactive
party learns the
dynamic information of the data certificate of the second interacting party in
real time.
[121] Please refer to Figure 6, Figure 6 is a schematic structural diagram of
an example of a data
interaction processing system according to the present invention. The data
interaction
processing system in this example includes a first interactive party, a second
interactive
party, a First Service Party, a Second Service Party, and a third interactive
party. Each
interactive party and the service party included in the data interaction
processing system in
this example are used to execute each step in the example corresponding to
Figure 4 and
Figure 4. For specific details, refer to the examples corresponding to Figure
4 and Figure 4,
which are not covered here.
[122] The first interactive party used to send a request to the First Service
Party for data values
that freeze at least part of the data unit of the second interactive Party.
Wherein, the request
at least includes an identifier of a data unit to be frozen, a data value to
be frozen, and a
freeze period.
[123] The First Service Party is used to receive the request and perform
identity verification on
the first interactive party; after the identity verification on the first
interactive party passes
16
CA 02993528 2018-01-22
WO 2017/011999 PCT/CN2015/084566
and confirming that the data value to be frozen includes the data certificate
of the second
interactive party, freezing the first data not larger than the data
certificate data value when
the at least part of the data value is frozen; wherein, the data certificate
at least comprises
the data value.
[124] Second Service Party is used to deliver the received data certificate
information to the third
party.
[125] The third party is used to obtain data certificate information.
[126] In the above solution, when the data flow of the second interactive
party is abnormal, the
First Service Party receives the request for freezing the data value of the at
least partial data
of the data units of the second interactive party delivered by the first
interactive party; in
the First Service Party after calling the data certificate of the second
interactive party
according to the data value of the at least partial data that is successfully
frozen according
to the request, notifying the third interactive party of the change
information of the data
certificate of the second interactive party through the service party of the
third interactive
party, when the data exchange between the two parties is abnormal, the third
party is
notified in time to effectively avoid the data security risk of the third
party.
[127] The First Service Party may also notify the third interactive party
through the service party
of the third interactive party when the freezing time limit expires to
unfreeze the frozen
data value in the data certificate, so as to ensure that the third interactive
party learns the
dynamic information of the data certificate of the second interacting party in
real time.
[128] Please refer to Figure 7, Figure 7 is a schematic structural diagram of
an example of a data
interaction processing device according to the present invention. Each module
included in
the data interaction processing device in this example is used to execute each
step in the
example corresponding to Figure 5 and Figure 5. For details, refer to the
example
corresponding to Figure 5 and Figure 5, and details are not described herein
again. The data
interaction processing device 700 in this example includes a receiving module
710, a
verification module 720, a processing module 730, and a delivery module 740.
[129] The receiving module 710 is used to perform identity verification on the
first interactive
party by using the request for freezing the data value of the at least partial
data of the
second interacting data unit delivered by the first interactive party, where
the request
includes at least the identification of the data unit that needs to be frozen,
the data value
that needs to be frozen, and the freeze period.
[130] The verification module 720 is used to perform identity verification on
the first interactive
party, and confirm whether the data value that needs to be frozen includes at
least a part of
the data value of the data certificate of the second interactive party.
17
CA 02993528 2018-01-22
WO 2017/011999 PCT/CN2015/084566
[131] The processing module 730 is used to invoke the second interactive party
when the
verification module 720 passes the identity verification and confirms that the
data value
that needs to be frozen includes at least a part of the data value of the data
certificate of the
second interaction party's data certificate, freeze the first data that is not
greater than the
data value of the data certificate.
[132] The delivering module 740 is used to deliver data certificate
information that has been
frozen the first data to a Second Service Party, where the data certificate
information at
least includes data valuesthat are not frozen.
[133] Further, the processing module 730 is also used to deliver the data
certificate information
through the frozen first data to the Second Service Party after the
transmission module 740,
determine whether the freezing period of the data certificate expires and
determine whether
the receiving module 710 receives a request delivered by the first interactive
party and
continuing to freeze the data value of the at least part of the data of the
second interactive
party data unit;
[134] When the processing module 730 determines that the freeze period of the
data certificate
has expired and the receiving module 710 receives the request delivered by the
first
interactive party to continuously freeze the data value of the at least
partial data of the
second interactive party data unit, identify the first interactive party;
[135] When the processing module 730 determines that the freezing period of
the data certificate
expires and the receiving module 710 does not receive the request for
continuing to freeze
the data value of the at least part of the data of the second interactive
party delivered by the
first interactive party, release data certificate and controls the delivering
module 740 to
deliver the data certificate information after unfreezing the first data to
the Second Service
Party.
[136] In the above solution, when the data flow of the second interactive
party is abnormal, the
data interaction processing device receives the request for freezing the data
value of the at
least partial data of the data units of the second interactive party delivered
by the first
interactive party; in the data interaction processing device after calling the
data certificate
of the second interactive party according to the data value of the at least
partial data that is
successfully frozen according to the request, notifying the third interactive
party of the
change information of the data certificate of the second interactive party
through the
service party of the third interactive party, when the data exchange between
the two parties
is abnormal, the third party is notified in time to effectively avoid the data
security risk of
the third party.
[137] The data interaction processing device may also notify the third
interactive party through
18
the service party of the third interactive party when the freezing time limit
expires to
unfreeze the frozen data value in the data certificate, so as to ensure that
the third
interactive party learns the dynamic information of the data certificate of
the second
interacting party in real time.
[138] A
person of skill in the art considers the problems disclosed herein and sought
to be solved
by the present disclosure to be exclusively computer problems and contemplates
only
solutions to those problems that include essential computer elements. Abstract
ideas, mere
schemes, plans, rules, or mental processes that do not include computer
elements are
expressly excluded from this application.
[139] The above is only an example of the present invention and is not
intended to limit the scope
of the invention as a matter of limitation, either by way of equivalent
construction or
equivalent process transformation using the present specification and the
accompanying
drawings, directly or indirectly used in other related technical fields, which
are included in
the scope of the patent protection of the present invention.
19
Date Recue/Date Received 2020-06-02