Authentication and authorization method, tax-related business platform and related device

Abstract

The embodiment of the invention discloses an authentication and authorization method, a tax-related business platform, a tax bureau front-end system, an anti-fake tax control device and a tax-related system, in order to improve the test reliability and validity of the authentication and authorization. The method disclosed by the embodiment of the invention comprises the following steps: the tax-related business platform obtains authorization information comprising a PIN code of the anti-fake tax control device of a tax user, and the tax-related business platform obtains a private key and then performs signature on preset information according to the private key to obtain an encryption factor; the tax-related business platform calls an interface of the anti-fake tax control device according to the PIN code and sends the encryption factor to the anti-fake tax control device through the interface of the anti-fake tax control device; the tax-related business platform obtains signature data sent by the anti-fake tax control device so as to send the signature data to the tax bureau front-end system; and thus, the tax-related business platform obtains authorization success information sent by the tax bureau front-end system. Management and control are performed by the encryption factor and the private key, thereby improving the reliability of testing whether the tax-related business platform is authorized by the tax user and ensuring the validity of the authorization of the tax user of the anti-fake tax control device to the tax-related business platform.

Description

technical field [0001] The invention relates to the field of data processing, in particular to an authentication and authorization method, a tax-related business platform, a tax bureau front-end system, anti-counterfeit tax control equipment and a tax-related system. Background technique [0002] With the tax system reform of the State Administration of Taxation and the promotion of business tax reform, more and more enterprises have turned to use anti-counterfeiting tax control equipment for invoicing. [0003] The core of anti-counterfeiting tax control equipment is based on CA technology to build user identity security. In the use link, it is mostly the relationship between two subjects, that is, the server verifies the identity of the client through the anti-counterfeiting tax control equipment, and provides information in the system based on effective authentication. Related services are generally completed within the system. [0004] If a tax user handles relevant tax...

AI Technical Summary

Problems solved by technology

[0009] The authorization behavior of the anti-counterfeiting tax control equipment is generally authorized every time a tax-related business is operated, and the transmission behavior of the authorization behavior cannot be flexibly applied to various scenarios of the third-party tax-related system, that is, in some application scenarios, the authorization will be invalid. Must re-authorize to continue

[0010] If in the existing scheme, only one authorization of the user is considered to allow the third-party tax-related system to perform tax-related business on behalf of the tax user multiple times, there will be risks of counterfeiting and interception by the third-party tax-related system

Images