CN101873333B - Enterprise data maintenance method, device and system based on banking system - Google Patents

Abstract

The invention provides an enterprise data maintenance method, device and system based on a banking system. The method comprises the following steps: receiving an enterprise client login request containing a digital certificate from an enterprise client; calling a security authentication server to authenticate the identity of the enterprise client; sending function information corresponding to the operation authority of the enterprise client to the enterprise client after the authentication is successful; receiving the selected function information from the enterprise client, acquiring the corresponding enterprise data from a bank database and then sending the enterprise data to the enterprise client for the enterprise client to maintain; receiving the maintained enterprise data from the enterprise client; verifying the legitimacy of the maintained enterprise data; storing the maintained enterprise data into the bank database after the verification is successful; receiving an enterprise data inquiry request from a business management client, acquiring the corresponding enterprise data from the bank database and then sending the enterprise data to the business management client for the business management client to recheck and receiving the recheck result.

Description

Enterprise data maintenance method, Apparatus and system based on banking system

Technical field

The present invention relates to information security field, particularly, relate to a kind of enterprise data maintenance method based on banking system, Apparatus and system.

Background technology

The security requirement of bank client data is very high, generally all is to manage maintenance by bank's built-in system.If customer profile data need change, then the client can only propose the change request to banking establishment earlier, is finished the change maintenance of customer data again by bank clerk.The work efficiency of this changing process method is lower, and since data fully by manually transmitting and safeguard, the consistance of data and security can not get ensureing.

For example, supplementary pension refers to outside public pension or national pension that government enforces, enterprise sets up according to self economic strength and economic situation under the guidance of national policy, the complementarity pension system that provides retirement income to a certain degree to ensure for the worker of this enterprise.In the professional operation of supplementary pension, insured enterprises need carry out more information interaction with annuity management organizations such as bank, insurance companies as the clientage.Main implementation is that enterprises and annuity management organization dispose a cover management system respectively at present, enterprise gathers the annuity data by the management system of inside and safeguards, derive corresponding business datum, submit to annuity management organization by various outside channels, again by the business personnel of the annuity management organization management system with this annuity management organization of data importing of receiving, and in this system, the data that receive are handled.The shortcoming of this mode is that enterprises and annuity management organization all need to carry out a large amount of information processings, comprising a lot of repetitive operation.Because both sides carry out exchanges data by modes such as mail, phone, mailing, this has caused treatment effeciency low, and the consistance of data, security also can not get ensureing.

In sum, there is the problem that efficient is low, security is low and error rate is high in present maintenance for the bank client data.

Summary of the invention

The fundamental purpose of the embodiment of the invention is to provide a kind of enterprise data maintenance method based on banking system, Apparatus and system, has the problem that efficient is low, security is low and error rate is high to solve the maintenance for the banking establishments data of the prior art.

To achieve these goals, the embodiment of the invention provides a kind of enterprise data maintenance method based on banking system, and this method comprises: the corporate client that comprises digital certificate that receives from enterprise client lands request; Call the Security Authentication Service device, according to described digital certificate described enterprise client is carried out authentication; To described enterprise client authentication success the time, pre-stored sent to described enterprise client with the corresponding function information of described enterprise client operating right; The function information that reception is selected from described enterprise client; Function information according to described enterprise client is selected obtains corresponding business data from banking data base, and the business data that obtains is sent to described enterprise client, safeguards for enterprise client; Business data after reception is safeguarded from described enterprise client; Business data after the described maintenance is carried out legitimate verification; To the success of the business data legitimate verification after the described maintenance time, the business data after the described maintenance is saved in described banking data base; Reception is from the business data query requests of service management client; According to described business data query requests, obtain corresponding business data from described banking data base, and the business data that obtains is sent to described service management client, for described service management client review; Reception is from the result that checks of described service management client.

Business data after the described maintenance is saved in after the described banking data base, and said method also comprises: judge whether the business data after the described maintenance needs the higher level to examine; If desired, then the business data after the described maintenance is sent to described enterprise client, examine for enterprise client.

Particularly, the business data after the described maintenance being carried out legitimate verification comprises: whether the form of judging the business data after the described maintenance meets preassigned; Judge whether the business data after the described maintenance is crucial transaction, if, then call the business data of described Security Authentication Service device after to described maintenance and carry out signature verification, wherein, described crucial transaction comprises client's signing messages.

The embodiment of the invention also provides a kind of business data attending device based on banking system, and described device comprises: land the request receiving element, the corporate client that comprises digital certificate that is used for receiving from enterprise client lands request; The certificate server call unit is used for calling the Security Authentication Service device and according to described digital certificate described enterprise client is carried out authentication; The function information transmitting element is used for to described enterprise client authentication success the time, and pre-stored sent to described enterprise client with the corresponding function information of described enterprise client operating right; The function information receiving element is used for receiving the function information of selecting from described enterprise client; The business data transmitting element is used for the function information according to described enterprise client selection, obtains corresponding business data from banking data base, and the business data that obtains is sent to described enterprise client, safeguards for enterprise client; The service data receiving element is used for receiving the business data from after the described enterprise client maintenance; The service data authentication unit is used for the business data after the described maintenance is carried out legitimate verification; Service data is preserved the unit, is used for to the success of the business data legitimate verification after the described maintenance time business data after the described maintenance being saved in described banking data base; The query requests receiving element is used for receiving the business data query requests from the service management client; The data query acquiring unit is used for according to described business data query requests, obtains corresponding business data from described banking data base, and the business data that obtains is sent to described service management client, for described service management client review; Check information receiving unit, be used for receiving the result that checks from described service management client.

Said apparatus also comprises: the higher level examines judging unit, is used for judging whether the business data after the described maintenance needs the higher level to examine; The msu message transmitting element when needing the higher level to examine for the business data after described maintenance, sends to described enterprise client with the business data after the described maintenance, examines for enterprise client.

Particularly, above-mentioned service data authentication unit comprises: the form judge module is used for judging whether the form of the business data after the described maintenance meets preassigned; Crucial transaction judge module is used for judging whether the business data after the described maintenance is crucial transaction; The signature verification module when being used for business data after described maintenance and be crucial transaction, is called the business data of described Security Authentication Service device after to described maintenance and is carried out signature verification, and wherein, described crucial the transaction comprises client's signing messages.

The embodiment of the invention also provides a kind of banking establishments data maintenance system, this system comprises: enterprise client, service management client, Web server, banking data base, Security Authentication Service device and above-mentioned business data attending device, wherein, described enterprise client and service management client communicate by described Web server and described business data attending device respectively.

By means of technique scheme one of at least, the present invention can improve efficient, the security of data transmission and maintenance, and can reduce the error rate of data.

Description of drawings

In order to be illustrated more clearly in the embodiment of the invention or technical scheme of the prior art, the accompanying drawing of required use is done to introduce simply in will describing embodiment below, apparently, accompanying drawing in describing below only is some embodiments of the present invention, for those of ordinary skills, under the prerequisite of not paying creative work, can also obtain other accompanying drawing according to these accompanying drawings.

Fig. 1 is the process flow diagram based on the banking system enterprise data maintenance method according to the embodiment of the invention;

Fig. 2 is the detail flowchart according to the supplementary pension data maintaining method of the embodiment of the invention;

Fig. 3 is the detail flowchart according to the digital certificate checking of the embodiment of the invention;

Fig. 4 is the detail flowchart according to the crucial trading signature checking of the embodiment of the invention;

Fig. 5 is the structured flowchart according to the banking establishments data maintenance system of the embodiment of the invention;

Fig. 6 is the structured flowchart according to the attendingdevice 6 of the embodiment of the invention;

Fig. 7 is the structured flowchart according to the servicedata authentication unit 607 of the embodiment of the invention;

Fig. 8 is the detailed block diagram according to the attendingdevice 6 of the embodiment of the invention;

Fig. 9 is the concrete structure block diagram according to the banking establishments data maintenance system of the embodiment of the invention.

Embodiment

Below in conjunction with the accompanying drawing in the embodiment of the invention, the technical scheme in the embodiment of the invention is clearly and completely described, obviously, described embodiment only is the present invention's part embodiment, rather than whole embodiment.Based on the embodiment among the present invention, those of ordinary skills belong to the scope of protection of the invention not making the every other embodiment that obtains under the creative work prerequisite.

The embodiment of the invention provides a kind of enterprise data maintenance method based on banking system and banking establishments data maintenance system.The present invention is described in detail below in conjunction with accompanying drawing.

Embodiment one

The embodiment of the invention provides a kind of enterprise data maintenance method based on banking system, and as shown in Figure 1, this method comprises:

Step 101, the corporate client that comprises digital certificate that receives from enterprise client lands request, and the enterprise client here can be enterprise client PC;

Step 102 is called the Security Authentication Service device, according to digital certificate enterprise client is carried out authentication;

Step 103 to the enterprise client authentication success time, sends to enterprise client with pre-stored with the corresponding function information of enterprise client operating right;

Step 104 receives the function information of selecting from enterprise client;

Step 105, the function information according to enterprise client is selected obtains corresponding business data from banking data base, and the business data that obtains is sent to enterprise client, safeguards for enterprise client;

Step 106 receives from the business data after the enterprise client maintenance;

Step 107 is carried out legitimate verification to the business data after safeguarding;

Step 108 to the business data legitimate verification success after safeguarding the time, is saved in banking data base with the business data after safeguarding;

Step 109 receives the business data query requests from the service management client;

Step 110 according to the business data query requests, is obtained corresponding business data from banking data base, and the business data that obtains is sent to the service management client, for the service management client review;

Step 111 receives the result that checks from the service management client.

The information of above-mentioned reception can be to send to Web server earlier by enterprise client PC, is transmitted by Web server then.For example, step 101 can be that enterprise client PC transmission comprises that the corporate client of digital certificate lands request to Web server, and then be transmitted by Web server.

By above description as can be seen, after carrying out authentication according to the request of landing of the client from enterprise client, directly after extracting related data, database server issues enterprise client according to the function information of customer selecting then, by the client these data are safeguarded, after to the data validation success after safeguarding, data after this maintenance are saved in banking data base, for checking of downstream industry's client, than the mail that passes through of the prior art, phone, modes such as mailing are carried out data maintenance, the embodiment of the invention owing to directly communicate by network, the efficient that makes data transmission and maintenance, security is all higher, and has reduced the error rate of data.

Particularly, the business data after 107 pairs of maintenances of above-mentioned steps carries out legitimate verification and comprises: whether the form of the business data after judge safeguarding meets preassigned, and wherein, form comprises between data type, field length and date field etc.; Judge whether the business data after safeguarding is crucial transaction, if, then call the Security Authentication Service device business data after safeguarding is carried out signature verification, wherein, crucial transaction comprises client's signing messages.Like this, provide security guarantee for data maintenance.

After execution instep 109, need also to judge whether the business data after the maintenance needs the higher level to examine; If desired, the business data after then will safeguarding sends to enterprise client, examines for enterprise client.

In order further to understand the present invention, below be example with supplementary pension maintenance management operation, describe the embodiment of the invention in detail.

Fig. 2 is the detail flowchart according to the supplementary pension data maintaining method of the embodiment of the invention, and as shown in Figure 2, this method comprises:

Step 200, corporate client and the annuity management organization book of signing an agreement, and obtain the registration digital certificate;

Step 201, corporate client is initiated logging request by enterprise client PC to application server, and this application server can be realized the method for above-described embodiment;

Step 202, application server are called the Security Authentication Service device and are obtained user's digital certificate and check its log-on message, and whether checking is authorized user; Enterstep 204 if the verification passes, otherwise enterstep 203;

Step 203 is refused this user's visit;

Step 204, application server returns the feature list that the active user has authority to use to enterprise client PC, and corporate client is selected a certain function, initiates transaction request (being the data maintenance request) to application server;

Step 205, application server access database server (that is, banking data base) feeds back to corporate client with the needed relevant information of current transaction request;

Step 206, enterprise client PC incoming traffic information can perhaps import data by file in batches by going into the supplementary pension data by notes, submits data maintenance application request to, and crucial transaction data is signed;

Step 207, application server carries out the legitimacy verification to the data that client is submitted to, for example, and data type, between field length and date field etc., verification is not passed through, and returns to corporate client to make amendment, and after verification is passed through, entersstep 208;

Step 208, application server judge that whether current application is the key transaction that relates to the change of the supplementary pension amount of money, if then enterstep 209, otherwise directly entersstep 211;

Step 209, application server are called the signature verification that the Security Authentication Service device is finished transaction data; If signing messages is correct, then entersstep 211, otherwise enterstep 210;

Step 210 stops current signature verification, Fail Transaction;

Step 211, application server is saved in database server with the supplementary pension data of corporate client typing;

Step 212, application server judge that whether the data that corporate client is submitted to need to examine, and if desired, enterstep 213, otherwise enterstep 214;

Step 213, the corporate client with relevant power of examination and approval is examined the data of submitting to; By enteringstep 214 after examining, not by then returningstep 204, need the corporate client of submit applications application is made amendment or to resubmit;

Corporate client is by the self-defined auditing flow of access application server, and general enterprise can arrange first trial and reexamination, and conglomerate can submit to higher level enterprise to examine after the corresponding levels examining finished again;

Step 214, the interior business personnel of annuity management organization initiate request by management organization's client rs PC to application server, the professional application of the annuity that the inquiry corporate client is submitted to;

Step 215, the application server access database server, the application of the data maintenance that current corporate client has been submitted to represents to the business personnel;

Step 216, the business personnel checks the annuity data that corporate client is submitted to, if check by then enterstep 217, otherwise gets back to step 204, needs corporate client to revise this data, perhaps rebuilds submit applications;

Step 217, application server is saved in database server with annuity Business review information, and this moment, corporate client was just finished the operation flow of this data maintenance.

For the checking of the digital certificate in the above-mentionedsteps 202, Fig. 3 shows idiographic flow, and as shown in Figure 3, this flow process comprises:

Step 301, the user is connected to enterprise client PC with the digital certificate medium, initiates logging request;

Step 302, the password of enterprise client PC prompting user input digit certificate;

Step 303, the password of enterprise client PC checking input if correctly enterstep 305, otherwise entersstep 304;

Step 304 stops this user's login;

Step 305, enterprise client PC sends to application server with user's logging request and digital certificate information and handles, application server calls the Security Authentication Service device, whether whether the checking digital certificate before the deadline and correct, if certificate effectively then enterstep 307, otherwise enterstep 306;

Step 306 stops this user's login;

Step 307, application server are obtained the digital certificate ID of current login, and call the Security Authentication Service device and judge whether this certificate ID user exists and whether this User Status is normal; If User Status is normal, then entersstep 309, otherwise enterstep 308;

Step 308 stops this user's login;

Step 309, authentication is passed through, and application server returns the feature list that the active user has authority to use to enterprise client PC, to carry out data maintenance.

By above-mentioned digital certificate authentication, can guarantee the security of data maintenance.

For the signature verification to the key transaction of above-mentionedsteps 209, Fig. 4 shows detailed process, and as shown in Figure 4, the signature verification flow process that key is concluded the business comprises:

Step 401, the user selects the key transaction of supplementary pension, submits the data maintenance application to, and enterprise client PC prompting user inserts digital certificate, and the prompting client imports cryptographic certificate;

Step 402, the password of user's input digit certificate;

Step 403, enterprise client PC is, and password is verified, if correctly enterstep 405, otherwise entersstep 404;

Step 404 stops current transaction;

Step 405, enterprise client PC carries out digital signature to the transaction service data, and Transaction Information and digital signature information (comprising plaintext, ciphertext, signature time etc.) are sent to application server handle, whether the ID of application server checking digital certificate is corresponding with the coding of current login user, if then enterstep 407, otherwise enterstep 406;

Step 406 stops current transaction;

Step 407, application server is committed to the Security Authentication Service device with data such as the plaintext of this transaction, ciphertext, signature time, certificate ID;

Step 408, the Security Authentication Service device carries out verification to signing messages, entersstep 409 if information is incorrect, otherwise entersstep 410;

Step 409 stops current transaction;

Step 410, signature authentication passes through, and carries out above-mentionedsteps 211.

By above-mentioned signature verification, can further guarantee the security of data maintenance.

Embodiment two

The embodiment of the invention also provides a kind of banking establishments data maintenance system, as shown in Figure 5, this system comprises:enterprise client 1,service management client 2,Web server 3,banking data base 4, SecurityAuthentication Service device 5 and businessdata attending device 6, wherein,enterprise client 1 andservice management client 2 communicate byWeb server 3 and businessdata attending device 6 respectively.The attendingdevice 6 here is the application server in above-described embodiment one, can realize the method that above-described embodiment one provides.

By this system, can so that client and managerial personnel directly just data are managed and safeguard by network, carry out data maintenance than of the prior art by modes such as mail, phone, mailing, the embodiment of the invention owing to directly communicate by network, make that efficient, the security of data transmission and maintenance are all higher, and reduced the error rate of data.

Fig. 6 is the structured flowchart of attendingdevice 6, and as shown in Figure 6, this attendingdevice 6 comprises:

Landrequest receiving element 601, the corporate client that comprises digital certificate that is used for receiving from enterprise client lands request;

Certificateserver call unit 602 is used for calling the Security Authentication Service device and according to digital certificate enterprise client is carried out authentication;

Functioninformation transmitting element 603 is used for to the enterprise client authentication success time, and pre-stored sent to enterprise client with the corresponding function information of enterprise client operating right;

Functioninformation receiving element 604 is used for receiving the function information of selecting from enterprise client;

Businessdata transmitting element 605 is used for the function information according to the enterprise client selection, obtains corresponding business data from banking data base, and the business data that obtains is sent to enterprise client, safeguards for enterprise client;

Servicedata receiving element 606 is used for receiving the business data from after the enterprise client maintenance;

Servicedata authentication unit 607 is used for the business data after safeguarding is carried out legitimate verification;

Service data is preservedunit 608, is used for to the business data legitimate verification success after safeguarding the time business data after safeguarding being saved in banking data base;

Queryrequests receiving element 609 is used for receiving the business data query requests from the service management client;

Dataquery acquiring unit 610 is used for according to the business data query requests, obtains corresponding business data from banking data base, and the business data that obtains is sent to the service management client, for the service management client review;

Checkinformation receiving unit 611, be used for receiving the result that checks from the service management client.

Wherein, as shown in Figure 7, servicedata authentication unit 607 specifically comprises:

Form judge module 6071 is used for judging whether the form of the business data after safeguarding meets preassigned;

Crucial transaction judge module 6072 is used for judging whether the business data after safeguarding is crucial transaction;

Signature verification module 6073 when being crucial transaction for the business data after maintenance, being called the Security Authentication Service device business data after safeguarding is carried out signature verification, and wherein, the crucial transaction comprises client's signing messages.

Particularly, as shown in Figure 8, attendingdevice 6 also comprises:

The higher level examines judgingunit 612, is used for judging whether the business data after safeguarding needs the higher level to examine;

Msumessage transmitting element 613 when needing the higher level to examine for the business data after maintenance, sends to enterprise client with the business data after safeguarding, examines for enterprise client.

Fig. 9 is to be the structural representation of the maintenance system of example according to the embodiment of the invention with the annuity management, as shown in Figure 9, this system comprisesenterprise client 901, annuitymanagement organization client 902,internet Internet 903, LAN (Local Area Network)Intranet 904,Web server 905, supplementarypension application server 906, SecurityAuthentication Service device 907 anddatabase server 908, wherein:

Enterprise client 901 is PC that web browser is installed, after outside corporate client and annuity management organization sign an agreement, can useenterprise client 901 byinternet Internet 903visit Web servers 905, through after the digital certificate authentication, can inquiry, typing or audit supplementary pension data;

Annuitymanagement organization client 902 is PC that web browser is installed, the business personnel of annuity management organization uses annuitymanagement organization client 902 by LAN (Local Area Network)Intranet 904visit Web servers 905, realizes checking of supplementary pension data thatenterprise client 901 is submitted to;

Internet 903 provides the channel ofenterprise client 901 visit native systems;

Intranet 904 provides the channel of annuitymanagement organization client 902 visit native systems;

Web server 905 is responsible for handling the visits ofenterprise clients 901 and annuitymanagement organization client 902, and client requests is forwarded to supplementarypension application server 906, and the response data ofapplication server 906 is returned to client represents;

Supplementarypension application server 906 is responsible for accessingdatabase server 908, and related data is represented to client; Simultaneously, provide copying platform by Web toenterprise client 901 and annuitymanagement organization client 902, deposit the data of user's typing indatabase server 908;

SecurityAuthentication Service device 907 is responsible in the dataacquisitions enterprise client 901 being carried out authentication and control of authority, and carries out the dynamic signature authentication whenenterprise client 901 carried out crucial transaction;

Database server 908 is stored clients and is passed through the business datum that the supplementary pension administrative institute ofWeb server 905 andapplication server 906 typings needs, the essential information that comprises enterprise and employee, the annuity plan information, and various application, pay the fees, data such as investment, income.

As seen from the above description, this system has made things convenient for corporate client and annuity management organization to carry out omnidistance data acquisition in the annuity operation, comprises first collection and follow-up maintenance modification.Corporate client is by Internet access to netwoks annuity data collector provided by the invention, relevant information to enterprise is carried out typing and maintenance, the business personnel of annuity management organization visits annuity data collector provided by the invention by internal network, and corresponding data are checked.This system is by adopting the B/S three-tier architecture, substantially realized platform-neutral, corporate client can directly carry out typing and the maintenance of data by the Web channel, than the mode of intelligence transmission such as conventional mail, fax, mailing between the enterprises at different levels of the prior art, between enterprise and the annuity management organization, this system has improved data acquisition efficiency, reduce the data acquisition cost, for customer care annuity data are provided convenience.

In sum, the present invention initiatively carries out collection and the maintenance of data by corporate client, the problem that solved that data acquisition efficiency of the prior art is low, data integrity, consistance, security can not get ensureing, reached the raising data acquisition efficiency, ensure the purpose of data integrity, consistance, security, thereby made things convenient for data are concentrated statistics, management.The pattern of centralized data processing provided by the invention has been broken the restriction in time and space, and client any place at any time handles the annuity business by the internet, for the client provides convenient.

One of ordinary skill in the art will appreciate that all or part of step that realizes in above-described embodiment method can instruct relevant hardware to finish by program, this program can be stored in the computer read/write memory medium, such as ROM/RAM, magnetic disc, CD etc.

Above-described specific embodiment; purpose of the present invention, technical scheme and beneficial effect are further described; institute is understood that; the above only is specific embodiments of the invention; and be not intended to limit the scope of the invention; within the spirit and principles in the present invention all, any modification of making, be equal to replacement, improvement etc., all should be included within protection scope of the present invention.

Claims (4)

1. the enterprise data maintenance method based on banking system is characterized in that, described method comprises:

Reception is landed request from the corporate client that comprises digital certificate of enterprise client;

Call the Security Authentication Service device, according to described digital certificate described enterprise client is carried out authentication;

To described enterprise client authentication success the time, pre-stored sent to described enterprise client with the corresponding function information of described enterprise client operating right;

The function information that reception is selected from described enterprise client;

Function information according to described enterprise client is selected obtains corresponding business data from banking data base, and the business data that obtains is sent to described enterprise client, safeguards for enterprise client;

Business data after reception is safeguarded from described enterprise client;

Business data after the described maintenance is carried out legitimate verification;

To the success of the business data legitimate verification after the described maintenance time, the business data after the described maintenance is saved in described banking data base;

Reception is from the business data query requests of service management client;

According to described business data query requests, obtain corresponding business data from described banking data base, and the business data that obtains is sent to described service management client, for described service management client review;

Reception is from the result that checks of described service management client;

Wherein, the business data after the described maintenance being carried out legitimate verification comprises:

Whether the form of judging the business data after the described maintenance meets preassigned;

Judge whether the business data after the described maintenance is crucial transaction, if, then call the business data of described Security Authentication Service device after to described maintenance and carry out signature verification, wherein, described crucial transaction comprises client's signing messages.

2. method according to claim 1 is characterized in that, the business data after the described maintenance is saved in after the described banking data base, and described method also comprises:

Judge whether the business data after the described maintenance needs the higher level to examine;

If desired, then the business data after the described maintenance is sent to described enterprise client, examine for enterprise client.

3. business data attending device based on banking system is characterized in that described device comprises:

Land the request receiving element, the corporate client that comprises digital certificate that is used for receiving from enterprise client lands request;

The certificate server call unit is used for calling the Security Authentication Service device and according to described digital certificate described enterprise client is carried out authentication;

The function information transmitting element is used for to described enterprise client authentication success the time, and pre-stored sent to described enterprise client with the corresponding function information of described enterprise client operating right;

The function information receiving element is used for receiving the function information of selecting from described enterprise client;

The business data transmitting element is used for the function information according to described enterprise client selection, obtains corresponding business data from banking data base, and the business data that obtains is sent to described enterprise client, safeguards for enterprise client;

The service data receiving element is used for receiving the business data from after the described enterprise client maintenance;

The service data authentication unit is used for the business data after the described maintenance is carried out legitimate verification;

Service data is preserved the unit, is used for to the success of the business data legitimate verification after the described maintenance time business data after the described maintenance being saved in described banking data base;

The query requests receiving element is used for receiving the business data query requests from the service management client;

The data query acquiring unit is used for according to described business data query requests, obtains corresponding business data from described banking data base, and the business data that obtains is sent to described service management client, for described service management client review;

Check information receiving unit, be used for receiving the result that checks from described service management client;

The higher level examines judging unit, is used for judging whether the business data after the described maintenance needs the higher level to examine;

The msu message transmitting element when needing the higher level to examine for the business data after described maintenance, sends to described enterprise client with the business data after the described maintenance, examines for enterprise client;

Wherein, described service data authentication unit comprises:

The form judge module is used for judging whether the form of the business data after the described maintenance meets preassigned;

Crucial transaction judge module is used for judging whether the business data after the described maintenance is crucial transaction;

The signature verification module when being used for business data after described maintenance and be crucial transaction, is called the business data of described Security Authentication Service device after to described maintenance and is carried out signature verification, and wherein, described crucial the transaction comprises client's signing messages.

4. banking establishments data maintenance system, it is characterized in that, described system comprises: enterprise client, service management client, Web server, banking data base, Security Authentication Service device and business data attending device as claimed in claim 3, wherein, described enterprise client and service management client communicate by described Web server and described business data attending device respectively.

Images