CN103561115B - Obtain the method for electronics code, open platform and system in real time - Google Patents

Abstract

The present invention relates to a method, an open platform and a system for obtaining an electronic code in real time. The method includes: after the open platform receives a front-end payment request sent by a third-party application server, it sends a notification message to the third-party application server through a first interface; The second interface receives the order verification request returned by the third-party application server according to the notification message; when it is determined that the order verification request is legal, returns a verification success message to the third-party application server; receives the order verification request returned by the third-party application server after receiving the verification success message Verifying the electronic code corresponding to the request, and providing the electronic code to a preset user terminal. This solves the problem in the prior art that the third-party application server must manually import a certain batch of electronic codes into the open platform in advance, which causes cumbersome operations and the like.

Description

Method, open platform and system for obtaining electronic code in real time

technical field

The invention relates to the technical field of network communication, in particular to a method, an open platform and a system for obtaining electronic codes in real time.

Background technique

The open platform can encapsulate various services provided by it into a series of data interfaces that are easy to recognize by the computer. Third-party developers can directly call these open data interfaces to enjoy the corresponding services of the open platform. These open data interfaces are also called Open API. Platforms that provide these Open APIs are called open platforms themselves.

It is a typical application of the current open platform to use the electronic code provided by the third-party application server to provide the push service of the electronic code to the user. In this application scenario, the third-party application server needs to provide the electronic code that can be circulated, and push the provided electronic code to the user terminal that needs the electronic code through the open platform. Fig. 1 shows a schematic diagram of the above application scenario. As shown in Figure 1, in order to realize the circulation of electronic codes on the open platform, third-party application developers (that is, the operators who operate the above-mentioned third-party application servers) need to manually transfer the electronic codes to be circulated on the open platform in advance. into the open platform. The specific import process is shown in Figure 2. First, the third-party application developer needs to generate a serial number file for storing the electronic code; then log in to the import background provided by the open platform, and submit the third-party application on the import background The developer's information, and upload the serial number file generated before; finally, confirm the upload result to realize the final import of the electronic code. After the electronic code is imported, the open platform can provide users with electronic code push services based on the imported electronic code. Figure 1 also shows the retrieval function of the electronic code, which has little to do with the present invention and will not be introduced here.

It can be seen that before using the existing open platform to realize the circulation of the electronic code, the electronic code must first be imported into the platform. However, the above-mentioned operation method of manually importing the electronic code is very cumbersome and requires a lot of labor costs. Moreover, when manually importing electronic codes, a certain batch of electronic codes is usually imported into the open platform at one time for circulation. In this way, the open platform also needs to prepay certain fees for these pre-imported electronic codes, so the open platform will also bear the loss risk of the prepaid cost.

Contents of the invention

In view of the above problems, the present invention is proposed to provide a method, an open platform and a system for obtaining electronic codes in real time which overcome the above problems or at least partly solve the above problems.

According to one aspect of the present invention, a method for obtaining an electronic code in real time is provided, including: after the open platform receives the front-end payment request sent by the third-party application server, it sends a notification message to the third-party application server through the first interface; The second interface receives the order verification request returned by the third-party application server according to the notification message; when the order verification request is determined to be legal, returns a verification success message to the third-party application server; receives the order verification returned by the third-party application server after receiving the verification success message Request the corresponding electronic code, and provide the electronic code to the preset user terminal.

According to another aspect of the present invention, an open platform for real-time acquisition of electronic codes is provided, including: a first communication module, adapted to receive a front-end payment request sent by a third-party application server; a first interface module, adapted to send a payment request to a third party The application server sends a notification message; the second interface module is adapted to receive the order verification request returned by the third-party application server according to the notification message; the verification module is adapted to determine whether the order verification request is legal; the second communication module is adapted to receive the order verification request in the order verification request When it is legal, return a verification success message to the third-party application server, and receive the electronic code corresponding to the order verification request returned by the third-party application server after receiving the verification success message, and provide the electronic code to the preset user terminal.

According to another aspect of the present invention, a system for obtaining electronic codes in real time is provided, including the above-mentioned open platform, one or more user terminals and one or more third-party application servers.

In the method, open platform and system for obtaining electronic codes in real time provided by the present invention, two open interfaces (the first interface and the second interface) are provided for the third-party application server. Through these two interfaces, the open platform can be realized. Real-time data interaction with the third-party application server, so that the open platform can send a notification message to the third-party application server every time it receives the front-end payment request sent by the third-party application server, and receive and verify the return of the third-party application server The order verification request, and after the verification is passed, return a verification success message to the third-party application server, and finally receive the electronic code returned by the third-party application server accordingly. The two-way verification mechanism between the open platform and the third-party application server can be realized through the above method, and the security of data transmission between the open platform and the third-party application server can be improved. On the premise that the security is guaranteed, the third-party application server can send the required electronic code to the open platform in real time after receiving the front-end payment request related to the electronic code sent by the user each time. This solves the problem in the prior art that the third-party application server must manually import a certain batch of electronic codes into the open platform in advance, which causes cumbersome operations and the like.

The above description is only an overview of the technical solution of the present invention. In order to better understand the technical means of the present invention, it can be implemented according to the contents of the description, and in order to make the above and other purposes, features and advantages of the present invention more obvious and understandable , the specific embodiments of the present invention are enumerated below.

Description of drawings

Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiment. The drawings are only for the purpose of illustrating a preferred embodiment and are not to be considered as limiting the invention. Also throughout the drawings, the same reference numerals are used to designate the same parts. In the attached picture:

Fig. 1 shows a schematic diagram of a scene when a third-party application developer imports an electronic code into an open platform in the prior art;

Fig. 2 shows the flow chart of the method when the third-party application developer imports the electronic code into the open platform in the prior art;

Fig. 3 shows the flowchart of the method for obtaining electronic code in real time provided by one embodiment of the present invention;

FIG. 4 shows a flow chart of a method for obtaining an electronic code in real time according to another embodiment of the present invention;

Fig. 5 shows a structural diagram of an open platform for real-time acquisition of electronic codes provided by an embodiment of the present invention;

Fig. 6 shows a structural diagram of a system for obtaining electronic codes in real time according to an embodiment of the present invention.

detailed description

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided for more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

The embodiment of the present invention provides a method, an open platform and a system for obtaining electronic codes in real time, which are used to solve the problem that the third-party application server must manually import a certain batch of electronic codes into the open platform in advance in the prior art. cumbersome issues.

Fig. 3 shows a flowchart of a method for obtaining an electronic code in real time provided by an embodiment of the present invention. As shown in Fig. 3, the method starts at step S101. In step S101, the open platform sends a notification message to the third-party application server through the first interface after receiving the front-end payment request sent by the third-party application server. Wherein, the first interface may be realized through a preset first callback function, a first function pointer or a first URL address.

Next, in step S102, the open platform receives the order verification request returned by the third-party application server according to the notification message through the second interface. Wherein, the second interface can also be realized through a preset second callback function, a second function pointer or a second URL address.

Then, in step S103, the open platform determines whether the above-mentioned order verification request is legal, and returns a verification success message to the third-party application server when it is determined that it is legal.

Finally, in step S104, the open platform receives the electronic code corresponding to the order verification request returned by the third-party application server after receiving the verification success message, and provides the electronic code to the preset user terminal.

Optionally, in order to improve the security of data transmission, the notification message sent in the above step S101 further includes relevant information of the front-end payment request, and the relevant information is signed by a preset digital signature algorithm. Correspondingly, after receiving the notification message, the third-party application server first verifies the notification message through a preset signature verification algorithm, and then returns an order verification request according to relevant information obtained after passing the verification. Wherein, the step of the third-party application server returning the order verification request according to the relevant information obtained after the verification is passed further includes: first obtaining the parameters to be verified contained in the relevant information, then signing the parameters to be verified by a preset digital signature algorithm, and finally sending the The signed parameters to be verified can be encapsulated in the order verification request. Correspondingly, in step S103, the open platform verifies whether the order verification request is legal in the following manner: first, the open platform verifies the order verification request through a preset signature verification algorithm to obtain the parameters to be verified; then, if it obtains If the parameter to be verified is legal, it can be determined that the order verification request is legal.

Through the above method, the two-way verification between the open platform and the third-party application server can be realized, which can prevent someone from pretending to be an open platform to deceive the third-party application server to send an electronic code to it, and can also prevent someone from pretending to be a third-party application server. Open platforms transmit malicious data. In addition, in order to further ensure that the electronic code is not tampered with or intercepted during the process of sending it to the open platform, the electronic code can also be further encrypted by a third-party application server. To this end, the method in this embodiment may also include the following details: when communicating between the open platform and the third-party application server through the first type of data transmission protocol (such as HTTPS protocol with higher security, etc.), the third-party application The electronic code returned by the server is an unencrypted electronic code, and the open platform can directly provide the electronic code to the preset user terminal, which can simplify the operation of the transmission link under the condition of high network security; when the open platform and the first When the third-party application servers communicate through the second type of data transmission protocol (such as HTTP protocol with low security, etc.), the electronic code returned by the third-party application server is an encrypted electronic code, and the open platform will decrypt the electronic code. After that, the electronic code is provided to the preset user terminal, which can improve the transmission security in the case of low network security and prevent data from being stolen at the level below the network application layer.

The two-way verification mechanism between the open platform and the third-party application server can be realized through the above method, and the security of data transmission between the open platform and the third-party application server can be improved. On the premise that the security is guaranteed, the third-party application server can send the required electronic code to the open platform in real time after receiving the front-end payment request related to the electronic code sent by the user each time. This solves the problem in the prior art that the third-party application server must manually import a certain batch of electronic codes into the open platform in advance, which causes cumbersome operations and the like.

In another embodiment of the present invention, taking the application scenario of a user reading a paid novel as an example, the method for obtaining an electronic code in real time provided by the present invention is introduced in detail. Wherein, the third-party application server in this embodiment is a server that provides paid novels to users, and the electronic code provided by the server is used to activate specific chapters of the novel so that users can read these chapters. FIG. 4 shows a flow chart of the method for obtaining an electronic code in real time provided by this embodiment. As shown in Figure 4, the method includes the following steps:

Step S201: the user terminal sends an activation request to a third-party application server.

Normally, this step is triggered when the user wishes to read a paid chapter of the electronic novel. For example, when a user wishes to further read the remaining chapters of the novel after browsing the summary prompt content of the novel through a user terminal such as a computer, the user needs to first activate these chapters through an electronic code. To this end, the user may send the above-mentioned activation request by clicking a button with words such as "activate now" displayed on the browser of the user terminal.

Usually, the activation request will include information such as user account, novel title and chapter number. For this reason, after the user clicks the "Activate Now" button, the browser page can first jump to the corresponding page for purchasing the activation code. Click the "Quick Purchase" option, and the user is required to fill in the order information, including: application name (such as electronic novel), product unit price (such as the reading fee for reading a novel), product quantity (such as the number of chapters of the novel), user contact method (such as mobile phone number and/or email address, etc.); if the user clicks on the "login to purchase" option, the user needs to enter the login information such as the user account and password before filling in the corresponding order information. It can be seen that, in the above process, the browser can obtain relevant information of the activation request, and write the relevant information into the activation request. In addition, in the above process, it may further include a link in which the user pays for the electronic code through payment methods such as Alipay, which can be realized through various existing payment methods.

Step S202: After receiving the activation request from the user terminal, the third-party application server sends a front-end payment request to the open platform.

The third-party application server first parses the activation request, and obtains information such as the user account, novel name, and chapter number included in the activation request; then, constructs a front-end payment request based on these information, and sends the front-end payment request to the open platform.

Step S203: After receiving the front-end payment request sent by the third-party application server, the open platform sends a notification message to the third-party application server through the first interface.

Specifically, the open platform parses the front-end payment request to obtain information such as the user account, novel name, and chapter number contained therein, and then constructs a notification message based on the information, and sends the notification message to a third-party application server through the first interface . Wherein, the first interface may be implemented in various ways such as a preset callback function, function pointer or URL address. For example, the first interface may be an Open API preset by the open platform. When the third-party application server first accesses the open platform, it realizes the connection with the open platform by loading the Open API including the first interface. Therefore, in this step, the open platform can send a notification message to the third-party application server by directly invoking the first interface.

The notification message needs to include some parameter information that needs to be confirmed by the third-party application server. Table 1 shows the parameter information included in the notification message:

Table 1

callback parameters required Parameter Description app_key true Apply App key (add signature) order_id true Open platform order flow id (add signature) order_amount true Product unit price (in cents) (add signature) order_count true Purchase Quantity (Add Signature) product_id true Recharge product id (add signature) sign_type true Signature algorithm (do not add signature) sign_return true Parameters returned by the application to the order verification interface (no signature added) sign true Extracted signature (Signature method as in 3.1)

The attributes of the above parameters are all true, that is to say, in this embodiment, the above parameters are mandatory parameters. Among them, the parameter app_key represents the name or key value of the application, which is used to uniquely identify an application. In this embodiment, the application is an application such as an electronic novel reader, and the specific value of this parameter is based on the sending front-end payment Determined by the type of third-party application server requested. The parameter order_id indicates the order serial number of the open platform, which is used to uniquely identify the order currently being processed by the open platform. The specific value of this parameter is automatically determined according to the number of orders currently processed by the open platform. The parameter order_amount indicates the unit price of the product. In this embodiment, it is the reading fee of the corresponding novel. The specific value of this parameter can be pre-agreed between the open platform and the third-party application server, or it can be obtained from the front end of the open platform. Obtained in the payment request. The parameter order_count indicates the purchase quantity. In this embodiment, the specific value of this parameter can be determined according to the number of chapter numbers contained in the front-end payment request. The parameter product_id represents the label of the product to be recharged, and is used to uniquely identify the product to be recharged. In this embodiment, the specific value of this parameter can be determined according to the title of the novel contained in the front-end payment request. The parameter sign_type indicates the type of signature algorithm, for example, it can be various signature algorithms such as 3DES algorithm or AES algorithm, and the above parameters are signed by the signature algorithm indicated by sign_type, so as to realize security verification. The parameter sign_return indicates the relevant information required by the third-party application server when constructing the order verification request, and this parameter does not need to be signed. The parameter sign indicates the correct signature extracted from the notification message by the third-party application server.

Step S204: The open platform receives the order verification request returned by the third-party application server according to the notification message through the second interface.

After receiving the above notification message, the third-party application server must first parse the notification message and obtain the parameter sign_type contained in it, so as to determine the signature algorithm adopted by each parameter in the notification message, and then sign according to the corresponding signature algorithm The verification algorithm verifies the signed parameters (such as parameters app_key, order_id, order_amount, order_count, product_id, etc.) in the notification message to obtain the signatures of these parameters. Then, compare the obtained signature of the above parameters with the signature identified by the parameter sign in the notification message. If they are the same, it is confirmed that each parameter in the notification message is true and legal, and the third-party application server will Each parameter constructs the order verification request.

When constructing an order verification request, it can be constructed in various ways. For example, the content contained in the sign_return parameter in the above parameters can be signed by the signature algorithm indicated by the sign_type parameter, and the signed data can be packaged as an order Verify request. The order verification request is sent to the open platform through the second interface. Wherein, the second interface can also be implemented in multiple ways such as a preset callback function, function pointer or URL address. Moreover, the second interface and the above-mentioned first interface may be different interfaces, or may be the same interface.

Step S205: The open platform determines whether the above-mentioned order verification request is legal, and returns a verification success message to the third-party application server if it is legal.

Specifically, the open platform verifies the parameters in the order verification request according to the signature verification algorithm corresponding to the sign_type parameter, obtains the signature, and judges whether the order verification request is legal according to the signature. In addition, the open platform can also determine the legitimacy of the order verification request by judging whether the parameters included in the order verification request are consistent with the sign_return parameter in the previously sent notification message.

Optionally, in other embodiments of the present invention, the open platform may also determine the legitimacy of the order verification request based on other information. For example, the third-party application server can include product unit price information (that is, the reading cost of novel chapters) in the order verification request, and the open platform judges whether the product unit price information exceeds a preset threshold, and if so, confirms that the order verification request is illegal. For example, suppose that in actual situations, the reading cost of a novel does not exceed 100 yuan. Therefore, if the product unit price information contained in the order verification request obviously exceeds the normal value, it can be determined that the order verification request is illegal. In short, the open platform can determine the legitimacy of the order verification request in combination with the actual situation, and the present invention does not limit the specific determination method.

Step S206: The open platform receives the electronic code corresponding to the order verification request returned by the third-party application server after receiving the verification success message, and provides the electronic code to the preset user terminal.

Wherein, the electronic code corresponding to the order verification request refers to the electronic code used to activate the corresponding chapter of the novel. When the open platform provides the electronic code to the preset user terminal, it can determine the address of the user terminal receiving the electronic code according to the user account number contained in the front-end payment request. The user terminal address may be the address of the user terminal sending the activation request in step S201, or the address of other user terminals. For example, assuming that in step S201, the user sends the above-mentioned activation request to the third-party application server through his own computer terminal, after the processing of the above-mentioned steps, in step S206, the open platform first obtains the The user account information contained in the front-end payment request, and then, according to the relevant information provided by the user account during registration, such as mobile phone number or email address, etc., send an electronic code to the mobile terminal with the corresponding number or the email address with the corresponding address. , and then, the user can obtain the electronic code through the mobile phone terminal or email, and then use the electronic code to activate the specified chapter of the paid novel.

It can be seen that, through the above method, the open platform can complete the two-way verification with the third-party application server through the first interface and the second interface after receiving the front-end payment request sent by the third-party application server each time, and verify After passing, receive the electronic code provided by the third-party application server in real time. This can prevent someone from pretending to be an open platform to trick a third-party application server into sending an electronic code to it, and can also prevent someone from pretending to be a third-party application server to transmit malicious data to the open platform. Therefore, data can be securely transmitted in real time between the open platform and the third-party application server. This avoids the cumbersome operation problems caused by manually importing a certain batch of electronic codes into the open platform in advance in the prior art, and avoids the risk of loss of prepaid costs caused by the prepaid electronic code fees on the open platform.

In addition, in order to further ensure that the electronic code is not tampered with or intercepted during the process of sending it to the open platform, in the above step S206, the third-party application server may further encrypt the electronic code, and provide the encrypted electronic code with Give an open platform. For specific encryption, 3DES encryption algorithm or AES encryption algorithm can be selected. At this time, the format of the electronic code received by the open platform is shown in Table 2.

Table 2

It can be seen from Table 2 that the encrypted electronic code contains the following parameters: the operating parameter config; the parameter encryption used to indicate the encryption method. When the value of this parameter is empty or NONE, it means no encryption; when the value of this parameter is TRIPLEDES Indicates the 3DES encryption method; the parameter iv used to indicate the initialization vector, the default value of this parameter is the last 8 digits of the encrypted string; the parameter signature used to indicate the signature method, which is used to verify the integrity of the message, and its default value It is MD5; the parameter mac used to indicate the integrity verification string; and the parameter ret used to indicate the data content (that is, the content of the electronic code), which can be transmitted in two ways: encrypted or unencrypted.

The code representation of the above parameters is given below:

In the above code segment, the encryption method is TRIPLEDES, the initialization vector is a random number, and includes the parameter completion used to represent the "integrity verification string" and the parameter signature used to represent the signature method.

Analyze the received electronic code according to the above code segment, and get the data content "ret" contained in it. After decrypting "ret", one of the following two results may be obtained depending on the actual situation:

In the first result, the obtained electronic code is a single electronic code, that is to say, the third-party application server only returns one electronic code at a time. At this time, the decryption result of "ret" is as follows:

In the second result, the obtained electronic code is multiple electronic codes, that is to say, the third-party application server returns multiple electronic codes at one time. At this time, the decryption result of "ret" is as follows:

Through the above encrypted transmission method, it can be ensured that the electronic code will not be tampered with or intercepted during the process of sending it to the open platform, thereby further improving security.

Fig. 5 shows a structural diagram of an open platform for real-time acquisition of electronic codes provided by an embodiment of the present invention. As shown in FIG. 5 , the open platform 50 includes a first communication module 51 , a first interface module 52 , a second interface module 53 , a verification module 54 and a second communication module 55 .

The first communication module 51 receives the front-end payment request sent by the third-party application server.

The first interface module 52 sends a notification message to the third-party application server. Wherein, the first interface module 52 sends the notification message through a preset first callback function, a first function pointer or a first URL address.

The second interface module 53 receives the order verification request returned by the third-party application server according to the notification message. Wherein, the second interface module 53 receives the order verification request through a preset second callback function, a second function pointer or a second URL address.

The verification module 54 determines whether the order verification request is legitimate. The second communication module 55 returns a verification success message to the third-party application server when the order verification request is legal, and receives the electronic code corresponding to the order verification request returned by the third-party application server after receiving the verification success message, and provides the electronic code to the pre-order set user terminal. Wherein, when the electronic code returned by the third-party application server is an encrypted electronic code, the second communication module 55 further decrypts the electronic code.

Optionally, the notification message sent by the first interface module 52 includes relevant information of the front-end payment request, and the relevant information is signed by a preset digital signature algorithm; after receiving the notification message, the third-party application server first passes The preset signature verification algorithm verifies the notification message, and then returns the order verification request according to the relevant information obtained after the verification is passed. Wherein, the order verification request includes the parameters to be verified obtained from the relevant information by the third-party application server, and these parameters to be verified are signed by a preset digital signature algorithm; The order verification request is verified, and the parameters to be verified are obtained. If the parameters to be verified are legal, it is determined that the order verification request is legal.

Fig. 6 shows a structural diagram of a system for obtaining electronic codes in real time according to an embodiment of the present invention. As shown in Figure 6, the system includes: the above-mentioned open platform 50 and a third-party application server 60, the system also includes one or more user terminals (not shown in the figure), the number of the third-party application server is also Can be multiple. For the specific structure of the open platform, reference may be made to the descriptions of the foregoing embodiments, which will not be repeated here.

In the method and open platform for obtaining electronic codes in real time provided by the present invention, two open interfaces (the first interface and the second interface) are provided for the third-party application server. Through these two interfaces, the open platform and the second interface can be realized. Real-time data interaction between the three-party application servers, so that the open platform can send a notification message to the third-party application server every time it receives the front-end payment request sent by the third-party application server, and receive and verify the order returned by the third-party application server Verify the request, and return a verification success message to the third-party application server after the verification is passed, and finally receive the electronic code returned by the third-party application server accordingly. The two-way verification mechanism between the open platform and the third-party application server can be realized through the above method, and the security of data transmission between the open platform and the third-party application server can be improved. On the premise that the security is guaranteed, the third-party application server can send the required electronic code to the open platform in real time after receiving the front-end payment request related to the electronic code sent by the user each time. This solves the problem in the prior art that the third-party application server must manually import a certain batch of electronic codes into the open platform in advance, which causes cumbersome operations and the like.

The algorithms and displays presented herein are not inherently related to any particular computer, virtual system, or other device. Various generic systems can also be used with the teachings based on this. The structure required to construct such a system is apparent from the above description. Furthermore, the present invention is not specific to any particular programming language. It should be understood that various programming languages can be used to implement the content of the present invention described herein, and the above description of specific languages is for disclosing the best mode of the present invention.

In the description provided herein, numerous specific details are set forth. However, it is understood that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure the understanding of this description.

Similarly, it should be appreciated that in the foregoing description of exemplary embodiments of the invention, in order to streamline this disclosure and to facilitate an understanding of one or more of the various inventive aspects, various features of the invention are sometimes grouped together in a single embodiment, figure, or its description. This method of disclosure, however, is not to be interpreted as reflecting an intention that the claimed invention requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the Detailed Description are hereby expressly incorporated into this Detailed Description, with each claim standing on its own as a separate embodiment of this invention.

Those skilled in the art can understand that the modules in the device in the embodiment can be adaptively changed and arranged in one or more devices different from the embodiment. Modules or units or components in the embodiments may be combined into one module or unit or component, and furthermore may be divided into a plurality of sub-modules or sub-units or sub-assemblies. All features disclosed in this specification (including accompanying claims, abstract and drawings), as well as any method or method so disclosed, may be used in any combination, except that at least some of such features and/or processes or units are mutually exclusive. All processes or units of equipment are combined. Each feature disclosed in this specification (including accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.

Furthermore, those skilled in the art will understand that although some embodiments described herein include some features included in other embodiments but not others, combinations of features from different embodiments are meant to be within the scope of the invention. and form different embodiments. For example, in the following claims, any of the claimed embodiments may be used in any combination.

The various component embodiments of the present invention may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. Those skilled in the art should understand that a microprocessor or a digital signal processor (DSP) may be used in practice to implement some or all functions of some or all components in the device according to the embodiment of the present invention. The present invention can also be implemented as an apparatus or an apparatus program (for example, a computer program and a computer program product) for performing a part or all of the methods described herein. Such a program for realizing the present invention may be stored on a computer-readable medium, or may be in the form of one or more signals. Such a signal may be downloaded from an Internet site, or provided on a carrier signal, or provided in any other form.

It should be noted that the above-mentioned embodiments illustrate rather than limit the invention, and that those skilled in the art will be able to design alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention can be implemented by means of hardware comprising several distinct elements, and by means of a suitably programmed computer. In a unit claim enumerating several means, several of these means can be embodied by one and the same item of hardware. The use of the words first, second, and third, etc. does not indicate any order. These words can be interpreted as names.

Claims (11)

1. a method for real-time acquisition electronics code, including:

After open platform receives the front-end payment request that third-party application server sends, connect by first Mouth sends a notification message to described third-party application server；Wherein, described in described notification message comprises The relevant information of front-end payment request；

By third-party application server described in the second interface according to the institute comprised in described notification message Request examined by the order of the relevant information return stating front-end payment request；

When determine described order examine request legal time, to described third-party application server return verify into Merit message；

Receive described third-party application server receive described in be proved to be successful after message that return with described order Examine the electronics code that request is corresponding, and described electronics code is supplied to the user terminal preset.

The most described first interface is by the first readjustment preset Function, the first function pointer or a URL address realize, and described second interface is by default second time Letter of transfer number, the second function pointer or the 2nd URL address realize.

The described front end comprised in the most described notification message is propped up The relevant information paying request is signed by the Digital Signature Algorithm preset；

After described third-party application server receives described notification message, first pass through default signature verification and calculate Described notification message is verified by method, returns institute further according to the described relevant information obtained after being verified State order and examine request.

4. method as claimed in claim 3, wherein, described third-party application server is logical according to checking Later the described relevant information described order of return obtained is examined the step of request and is included: obtain described relevant The parameter to be verified comprised in information, by described default Digital Signature Algorithm to described parameter to be verified Sign, the parameter to be verified after signature is encapsulated in described order and examines in request；

Described open platform determines that described order is examined the legal step of request and included: by default signature Described order is examined request and is verified by verification algorithm, obtains parameter to be verified therein, if described Parameter to be verified is legal, it is determined that it is legal that request examined by described order.

5. the method as described in claim 1-4 is arbitrary, wherein, when described open platform and the described 3rd When being communicated by primary sources host-host protocol between side's application server, described third-party application takes The electronics code that business device returns is the electronics code do not encrypted, and the most described open platform is directly by described electronics code It is supplied to the user terminal preset；Wherein, described primary sources host-host protocol includes HTTPS agreement；

By secondary sources host-host protocol between described open platform and described third-party application server When communicating, the electronics code that described third-party application server returns is the electronics code through encryption, then Described electronics code is supplied to the user preset by described open platform again after being decrypted described electronics code Terminal；Wherein, described secondary sources host-host protocol includes http protocol.

6. an open platform for real-time acquisition electronics code, including:

First communication module, is suitable to receive the front-end payment request that third-party application server sends；

First interface module, is suitable to send a notification message to described third-party application server；Wherein, institute State the relevant information comprising described front-end payment request in notification message；

Second interface module, is suitable to receive described third-party application server and wraps according in described notification message Request examined by the order that the relevant information of the described front-end payment request contained returns；

Authentication module, is adapted to determine that request examined by described order the most legal；

Second communication module, is suitable to service to described third-party application when described order is examined and asked legal Device returns and is proved to be successful message, and receive described third-party application server receive described in be proved to be successful message Corresponding electronics code is asked in examining with described order of rear return, and described electronics code is supplied to the use preset Family terminal.

7. open platform as claimed in claim 6, wherein, described first interface module is passed through default First call back function, the first function pointer or a URL address send described notification message；

Described second interface module is by the second call back function, the second function pointer or the 2nd URL that preset Address receives described order and examines request.

8. open platform as claimed in claim 6, wherein, the notice that described first interface module sends The relevant information of the described front-end payment request comprised in message is signed by the Digital Signature Algorithm preset Name；

After described third-party application server receives described notification message, first pass through default signature verification and calculate Described notification message is verified by method, returns institute further according to the described relevant information obtained after being verified State order and examine request.

9. open platform as claimed in claim 8, wherein, described order examine request comprises described The parameter to be verified that third-party application server obtains from described relevant information, and described parameter to be verified Signed by default Digital Signature Algorithm；

Described authentication module is suitable to, by default signature verification algorithm, described order is examined request and tests Card, obtains parameter to be verified therein, if described parameter to be verified is legal, it is determined that described order core Real request is legal.

10. the open platform as described in claim 6-9 is arbitrary, wherein, when described third-party application takes The electronics code that business device returns is the electronics code through encryption, the second communication module in described open platform It is further adapted for described electronics code is decrypted.

The system of 11. 1 kinds of real-time acquisition electronics codes, including: opening as described in claim 6-10 is arbitrary Set level platform, one or more user terminals and one or more third-party application server.