CN105574728A - Transaction information tracking method and apparatus - Google Patents
Transaction information tracking method and apparatus Download PDFInfo
- Publication number
- CN105574728A CN105574728A CN201410542509.9A CN201410542509A CN105574728A CN 105574728 A CN105574728 A CN 105574728A CN 201410542509 A CN201410542509 A CN 201410542509A CN 105574728 A CN105574728 A CN 105574728A
- Authority
- CN
- China
- Prior art keywords
- information
- transaction information
- probability
- currency transaction
- historical transactional
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Abstract
The invention discloses a transaction information tracking method and apparatus. According to the method, for current transaction information, if all specific attribute values included in the current transaction information are different, a server determines an attribute value set formed by all the specific attribute values included in the current transaction information; historical transaction information including the attribute value set is searched; according to all searched historical transaction information, the probability that the current transaction information is illegal transaction information is determined; and whether the probability is greater than a preset threshold is determined, if probability is greater than a preset threshold, the current transaction information is tracked, if not, the current transaction information is not tracked. Through adoption of the method, the server does not track the transaction information with the probability less than the preset threshold, so that the quantity of the transaction information tracked by the server is lowered, and the resource consumption of the server is reduced.
Description
Technical field
The application relates to field of computer technology, particularly relates to a kind of Transaction Information method for tracing and device.
Background technology
Along with Internet era arrival, network is opening more and more, and the quantity of online various transaction also increases greatly, this wherein major part be licit traffic, but also some is illegal transaction.
At present, the Transaction Information of online every transaction has a lot of attribute, and some particular community wherein can be examination illegal transaction and provides reference frame.
Such as, for the Transaction Information of certain transaction, its particular community comprised can have: the distribution area of the bank card that buyer user uses, the area etc. of receiving of buyer user.Wherein, the value (referred to as particular attribute-value) of these particular communitys can be concrete national title.
General, for most licit traffic, because its each bargain link often carries out in same area, such as, buyer user uses the bank card of oneself country's distribution to pay, and receives in oneself country, above-mentioned particular attribute-value then in this Transaction Information is identical, also namely, the distribution area of bank card is identical with the area of receiving of buyer user, is all the title of buyer user oneself country.And for illegal transaction, in order to prevent this illegal transaction from being followed the trail of by the police, each bargain link may be arranged at different areas to carry out, thus each particular attribute-value in black Transaction Information may not be identical.
In the prior art, wind control server can be followed the trail of, to obtain black clue by the Transaction Information not identical to all each particular attribute-value.
But, due in actual applications, the transaction that in Transaction Information, each particular attribute-value is not identical might not be illegal transaction, therefore, All Activity information not identical to each particular attribute-value in prior art is all followed the trail of, and will waste the resource of wind control server.
Summary of the invention
The embodiment of the present application provides a kind of Transaction Information method for tracing and device, adds the problem of the resource consumption of server in order to solve processing mode that in prior art, the current Transaction Information not identical to all each particular attribute-value is all followed the tracks of.
A kind of Transaction Information method for tracing that the embodiment of the present application provides, comprising:
For currency transaction information, when each particular attribute-value comprised in described currency transaction information is not identical, determine the property value set be made up of each particular attribute-value comprised in described currency transaction information;
Search the historical transactional information comprising described property value set;
According to each historical transactional information found, determine that described currency transaction information is the probability of illegal transaction information;
Judge whether described probability is greater than predetermined threshold value, if so, then follow the trail of described currency transaction information, otherwise, do not follow the trail of described currency transaction information.
A kind of Transaction Information method for tracing that the embodiment of the present application provides, comprising:
For currency transaction information, when each particular attribute-value comprised in described currency transaction information is not identical, determine the property value set be made up of each particular attribute-value comprised in described currency transaction information;
Search in advance for the probability that described property value set sets;
Judge whether described probability is greater than predetermined threshold value, if so, then follow the trail of described currency transaction information, otherwise, do not follow the trail of described currency transaction information.
A kind of Transaction Information follow-up mechanism that the embodiment of the present application provides, comprising:
Search module, for for currency transaction information, when each particular attribute-value comprised in described currency transaction information is not identical, determines the property value set be made up of each particular attribute-value comprised in described currency transaction information, search the historical transactional information comprising described property value set;
Determination module, for according to searching each historical transactional information that module searches arrives, determines that described currency transaction information is the probability of illegal transaction information;
Judge module, for judging whether described probability is greater than predetermined threshold value, if so, then follows the trail of described currency transaction information, otherwise, do not follow the trail of described currency transaction information.
A kind of Transaction Information follow-up mechanism that the embodiment of the present application provides, comprising:
Setting module, for setting probability for described property value set in advance;
Search module, for for currency transaction information, when each particular attribute-value comprised in described currency transaction information is not identical, determine the property value set be made up of each particular attribute-value comprised in described currency transaction information, search setting module in advance for the probability that described property value set sets;
Judge module, for judging whether described probability is greater than predetermined threshold value, if so, then follows the trail of described currency transaction information, otherwise, do not follow the trail of described currency transaction information.
The embodiment of the present application provides a kind of Transaction Information method for tracing and device, the method server is for currency transaction information, if each particular attribute-value comprised in currency transaction information is not identical, then determine the property value set be made up of each particular attribute-value comprised in currency transaction information, search the historical transactional information comprising this property value set, according to each historical transactional information found, determine that currency transaction information is the probability of illegal transaction information, judge whether this probability is greater than predetermined threshold value, if, then follow the trail of currency transaction information, otherwise, do not follow the trail of currency transaction information.By said method, because server can not follow the trail of the Transaction Information that described probability is less than predetermined threshold value, therefore, decrease the quantity of the Transaction Information of server tracks, reduce the resource consumption of server.
Accompanying drawing explanation
Accompanying drawing described herein is used to provide further understanding of the present application, and form a application's part, the schematic description and description of the application, for explaining the application, does not form the improper restriction to the application.In the accompanying drawings:
The first Transaction Information tracing process that Fig. 1 provides for the embodiment of the present application;
The second Transaction Information tracing process that Fig. 2 provides for the embodiment of the present application;
The first Transaction Information follow-up mechanism structural representation that Fig. 3 provides for the embodiment of the present application;
The second Transaction Information follow-up mechanism structural representation that Fig. 4 provides for the embodiment of the present application.
Embodiment
For making the object of the application, technical scheme and advantage clearly, below in conjunction with the application's specific embodiment and corresponding accompanying drawing, technical scheme is clearly and completely described.Obviously, described embodiment is only some embodiments of the present application, instead of whole embodiments.Based on the embodiment in the application, those of ordinary skill in the art are not making the every other embodiment obtained under creative work prerequisite, all belong to the scope of the application's protection.
The Transaction Information tracing process that Fig. 1 provides for the embodiment of the present application, specifically comprises the following steps:
S101: server is for currency transaction information, if each particular attribute-value comprised in currency transaction information is not identical, then determines the property value set be made up of each particular attribute-value comprised in currency transaction information.
In the embodiment of the present application, described server can be any wind control server, and this server can be used for analyzing currency transaction information, and judges whether to follow the trail of currency transaction information.Described Transaction Information can comprise a lot of attribute, such as Transaction Name, exchange hour etc., wherein, server can determine at least two particular communitys in advance from these attributes, the reference frame of following the trail of this Transaction Information is judged whether as server, such as, the distribution area (hereinafter referred to as distribution area) of bank card that during buyer's customer transaction, the area (hereinafter referred to as transaction area) at place, the area of receiving (hereinafter referred to as area of receiving) of buyer user, buyer user use, the delivery area etc. of seller user.
General, for the Transaction Information that licit traffic is corresponding, the value (value of particular community, hereinafter referred to as particular attribute-value) of its above-mentioned each particular community comprised is identical.Such as, for area and these two particular communitys of distribution area of receiving, its particular attribute-value can be concrete national title, because the area of receiving of buyer user generally is same country with the distribution area of the bank card used during transaction, as China, then these two particular attribute-value also identical (being China).And may carry out at country variant due to black links, then for the Transaction Information that illegal transaction is corresponding, its above-mentioned each particular attribute-value comprised is not identical, and area of such as receiving is for China, and distribution area is the U.S..
Therefore, the Transaction Information that server can be not identical for each particular attribute-value comprised is analyzed, then may get black related thread in subsequent process.And for each particular community, because the value that each particular community is possible has multiple, when then each particular attribute-value of comprising in currency transaction information of server is not identical, determine the property value set be made up of each particular attribute-value comprised in this currency transaction information, and carry out subsequent treatment based on this property value set.
S102: search the historical transactional information comprising this property value set.
In the embodiment of the present application, server in advance for each transaction occurred, can record the Transaction Information of this transaction, as the historical transactional information that this transaction is corresponding.Then after the property value set of server determination currency transaction information, the historical transactional information comprising this property value set can be searched.
Wherein, whether contain this historical transactional information in described historical transactional information is black result of determination.
S103: according to each historical transactional information found, determines that currency transaction information is the probability of illegal transaction information.
After whois lookup to the historical transactional information comprising this property value set, because whether each historical transactional information found is that illegal transaction information is determined, then can determine accordingly under the condition that each particular attribute-value of currency transaction information is not identical, this currency transaction information is the probability of illegal transaction information.
S104: judge whether this probability is greater than predetermined threshold value, if so, then performs step S105, otherwise, perform step S106.
In the embodiment of the present application, server determination currency transaction information is after the probability of illegal transaction information, according to the size of this probability, can weigh and whether this currency transaction information is considered as doubtful illegal transaction information, and follow the trail of follow-up.Such as, assuming that the predetermined threshold value of server is 0.3, then when this probability is greater than 0.3, server can think that currency transaction information has greater probability to be illegal transaction information, then perform step S105, follow the trail of currency transaction information, when this probability is not more than 0.3, perform step S106, do not follow the trail of currency transaction information.Obviously, the predetermined threshold value of server is less, and the follow-up quantity of the Transaction Information followed the trail of that needs is more.
S105: follow the trail of currency transaction information.
S106: do not follow the trail of currency transaction information.
Pass through said method, because server is for the not identical Transaction Information of each each particular attribute-value, all determine according to historical information the probability that this Transaction Information is illegal transaction information, and judge whether to follow the tracks of this Transaction Information by predetermined threshold value, and then only follow the trail of the Transaction Information that described probability is greater than predetermined threshold value, instead of follow the trail of the whole Transaction Informations comprising this each particular attribute-value, therefore, reduce the resource consumption of server.
In the embodiment of the present application, because whether the historical transactional information of server record is that illegal transaction information is determined, therefore, the quantity of illegal transaction information can be added up in historical transactional information, and determine that currency transaction information is the probability of illegal transaction information on this basis.In above-mentioned steps S103, concrete, server is for the not identical currency transaction information of each particular attribute-value comprised, after determining the property value set that each particular attribute-value comprised in by currency transaction information is formed, the historical transactional information comprising this property value set can be searched, in each historical transactional information found, determine the quantity of illegal transaction information, as the first quantity, by the ratio of described first quantity with the quantity of each historical transactional information found, be defined as the probability that described currency transaction information is illegal transaction information.
Such as, assuming that currency transaction information contains area of receiving, these two particular communitys of distribution area, these two particular attribute-value are respectively " China ", " U.S. ", server can judge that two particular attribute-value that currency transaction information comprises are not identical, then server can determine that the property value set that these two particular attribute-value are formed (can be denoted as { area of receiving=" China ", distribution area=" U.S. " }), then the historical transactional information comprising this property value set is searched, also be, whois lookup receives area also for Chinese, distribution area is also each historical transactional information of the U.S..Assuming that the quantity of the historical transactional information found is 100, in 100 historical transactional information found, then determine the quantity of illegal transaction information further, assuming that determine that the quantity of illegal transaction information is 40, can determine that currency transaction information be the probability of illegal transaction information is 40/100=0.4, and then whether follow the trail of currency transaction information by this probabilistic determination.
In above-mentioned steps S103, by another kind of method, server, after finding the historical transactional information comprising described property value set, also determines that described currency transaction information is the probability of illegal transaction information.Concrete, server is for the not identical currency transaction information of each particular attribute-value comprised, after determining the property value set that each particular attribute-value comprised in by currency transaction information is formed, the historical transactional information comprising this property value set can be searched, the each historical transactional information found is divided at least two information groups, for each information group, determine the quantity of the illegal transaction information comprised in this information group, as the second quantity, by the ratio of the quantity of all historical transactional information in this second quantity and this information group, be defined as probability to be screened, according to the probability to be screened determined for each information group, determine that described currency transaction information is the probability of illegal transaction information.
Further, server can divide described information group according to different conditions.Such as, the each historical transactional information found according to each time period of presetting, can be divided into multiple information group, wherein by server, all record transaction time of origin in each historical transactional information, the historical transactional information that transaction time of origin drops on section is at the same time drawn in same information group.Obviously, because the time of origin of transaction corresponding to each historical transactional information is different, therefore these transaction distributions on time coordinate are uneven, similar, the distribution of illegal transaction on time coordinate in these transaction is also uneven, therefore, based on this method division information group, and determine the probability to be screened often organizing historical transactional information, after rejecting the larger probability to be screened of deviation, then the currency transaction information determined be the probability of illegal transaction information is more reliable.
Further, after server determines the probability to be screened that each information group is corresponding, also have multiple to the method that each probability to be screened screens.Only a kind of wherein feasible method is described in the embodiment of the present application.
Concrete, after server determines the probability to be screened that each information group is corresponding, according to the probability to be screened determined for each information group, determine mean value and the standard deviation of each probability to be screened, judge whether the ratio of standard deviation and the mean value determined is greater than default ratio, if, determine the information group of the maximum absolute value of the difference of probability to be screened and this mean value, as invalid group, determine mean value and the standard deviation of the probability to be screened that each information group except described invalid group is corresponding, until when the ratio of the standard deviation determined and mean value is not more than default ratio, be the probability of illegal transaction information as currency transaction information using the mean value determined, otherwise, be the probability of illegal transaction information as currency transaction information using the mean value determined.
It should be noted that, described standard deviation can reflect the dispersion degree of described each probability to be screened, because some probability to be screened may depart from described mean value (be also comparatively far, the to be screened probability relatively large with the absolute value of the difference of described mean value), this a part of probability to be screened can not reflect under most application scenarios, currency transaction information is the probability of illegal transaction information, therefore, after this part of probability to be screened can being rejected, again the mean value of remaining each probability to be screened is defined as the probability that currency transaction information is illegal transaction information.
Still be combined into { area of receiving=" China ", distribution area=" U.S. " } with the attribute value set in currency transaction information to be described for example.
Assuming that default ratio is 0.1, predetermined threshold value is 0.3.The each historical transactional information found to the historical transactional information comprising this property value set in nearest a year, and is divided into 4 information group A, B, C, D according to season by whois lookup.Respectively for each information group, determine that the historical transactional information quantity that each information group comprises is respectively N
all1, N
all2, N
all3, N
all4, determine the illegal transaction information content N respectively that each information group comprises
bad1, N
bad2, N
bad3, N
bad4, then can the probability to be screened of comformed information group A be P
a=N
bad1/ N
all1, the probability to be screened of information group B is P
b=N
bad2/ N
all2, the probability to be screened of information group C is P
c=N
bad3/ N
all3, the probability to be screened of information group D is P
d=N
bad4/ N
all4.
Assuming that determine P
a=0.5, P
b=0.55, P
c=0.45, P
d=0.1;
Mean value is:
Standard deviation is:
Obviously, 0.1768/0.4=0.442>0.1, is also, the ratio of standard deviation and mean value is greater than default ratio, again because the information group of the maximum absolute value of the difference of probability to be screened and this mean value is information group D, then using information group D as invalid group, reject P
d, and redefine mean value and standard deviation (also namely, P
a, P
b, P
cmean value and standard deviation).
The mean value redefined is:
The standard deviation redefined is:
Obviously, 0.0408/0.5=0.0816<0.1, also, the standard deviation redefined and the ratio of mean value are less than default ratio, namely therefore, as currency transaction information can be using the mean value redefined the probability (also 0.5) of illegal transaction information.Server can judge that this probability (0.5) is greater than predetermined threshold value (0.3), therefore, and server this currency transaction information traceable.
The second Transaction Information tracing process that Fig. 2 provides for the embodiment of the present application, specifically comprises the following steps:
S201: server is for currency transaction information, if each particular attribute-value comprised in currency transaction information is not identical, then determines the property value set be made up of each particular attribute-value comprised in currency transaction information.
S202: search in advance for the probability that this property value set sets.
In the embodiment of the present application, server can for all possible property value set, for each property value set presets corresponding probability, wherein, and the probability of this probability to be the currency transaction information comprising this property value set be illegal transaction information.
S203: judge whether this probability is greater than predetermined threshold value, if so, then performs step S204, otherwise, perform step S205.
S204: follow the trail of currency transaction information.
S205: do not follow the trail of currency transaction information.
Pass through said method, because server is for each property value set, be all that this property value set has preset probability, then server is for each transaction information, the property value set comprised in this Transaction Information can be determined, search the probability that property value set is corresponding again, and judge whether to follow the tracks of this Transaction Information by predetermined threshold value, and then only follow the trail of the Transaction Information that described probability is greater than predetermined threshold value, instead of follow the trail of the whole Transaction Informations comprising this property value set, therefore, the resource consumption of server is reduced.
It should be noted that, for the Transaction Information method for tracing shown in Fig. 1, server determines that the currency transaction information comprising the combination of certain property value is the probability of illegal transaction information in real time, and for the Transaction Information method for tracing shown in Fig. 2, server combines for each property value in advance, setting the probability that the combination of each property value is corresponding respectively, when judging currency transaction information the need of tracking, only need search corresponding probability.Certainly, in these two kinds of Transaction Information method for tracing, determine that the method for described probability can be identical.
In the embodiment of the present application, server can, in advance according to the historical transactional information of record, be the probability that each property value set setting is corresponding.Concrete, server is in advance for every attribute value combination, search each historical transactional information comprising the combination of this property value, in each historical transactional information found, determine the quantity of illegal transaction information, as the first quantity, by the ratio of this first quantity with the quantity of each historical transactional information found, be defined as the probability set for this property value set.
In the embodiment of the present application, server, also by another kind of method, is the probability of each property value set setting correspondence according to the historical transactional information of record.Concrete, server is in advance for every attribute value combination, search each historical transactional information comprising the combination of this property value, the each historical transactional information found is divided at least two information groups, for each information group, determine the quantity of the illegal transaction information comprised in this information group, as the second quantity, by the ratio of the quantity of all historical transactional information in this second quantity and this information group, be defined as probability to be screened, according to the probability to be screened determined for each information group, determine mean value and the standard deviation of each probability to be screened, judge whether the ratio of standard deviation and the mean value determined is greater than default ratio, if, determine the information group of the maximum absolute value of the difference of probability to be screened and this mean value, as invalid group, determine mean value and the standard deviation of the probability to be screened that each information group except described invalid group is corresponding, until when the ratio of the standard deviation determined and mean value is not more than default ratio, using the mean value determined as the probability set for this property value set, otherwise, using the mean value determined as the probability set for this property value set.
For the Transaction Information method for tracing shown in Fig. 2, because server is according to historical transactional information, the described probability preset, and follow-uply may have newly-increased historical transactional information, therefore, in this case, server can be revised the described probability preset.Concrete, determining that currency transaction information is illegal transaction information or for after licit traffic information, this currency transaction information can be recorded as newly-increased historical transactional information by server, then according to this newly-increased historical transactional information, and other historical transactional information that the property value set comprised is identical with this newly-increased historical transactional information, revise the probability that sets for this property value set, the method for correction can to preset the method for described probability identical with server, do not repeat them here.
In addition, determining that a newly-increased transaction is illegal transaction information or for after licit traffic information, server also can not revise the probability preset immediately, but once described probability can revised every setting-up time interval, such as, server can every other month, according to each newly-increased historical transactional information, be revised described probability, thus, namely can reduce the frequency of amendment of server to described probability, and then reduce resource cost, also can ensure the actual effect of described probability.
Be the Transaction Information method for tracing that the embodiment of the present application provides above, based on same thinking, the embodiment of the present application also provides corresponding Transaction Information follow-up mechanism, as shown in Figure 3, Figure 4.
The first Transaction Information follow-up mechanism structural representation that Fig. 3 provides for the embodiment of the present application, specifically comprises:
Search module 301, for for currency transaction information, when each particular attribute-value comprised in described currency transaction information is not identical, determines the property value set be made up of each particular attribute-value comprised in described currency transaction information, search the historical transactional information comprising described property value set;
Determination module 302, for according to searching each historical transactional information that module 301 finds, determines that described currency transaction information is the probability of illegal transaction information;
Judge module 303, for judging whether described probability is greater than predetermined threshold value, if so, then follows the trail of described currency transaction information, otherwise, do not follow the trail of described currency transaction information.
Described determination module 302 specifically for, search in each historical transactional information that module 301 finds described, determine the quantity of illegal transaction information, as the first quantity, by the ratio of described first quantity with the quantity of each historical transactional information found, be defined as the probability that described currency transaction information is illegal transaction information.
Described determination module 302 specifically for, search each historical transactional information that module 301 finds be divided at least two information groups by described, for each information group, determine the quantity of the illegal transaction information comprised in this information group, as the second quantity, by the ratio of the quantity of all historical transactional information in described second quantity and this information group, be defined as probability to be screened, according to the probability to be screened determined for each information group, determine that described currency transaction information is the probability of illegal transaction information.
Described determination module 302 specifically for, according to the probability to be screened determined for each information group, determine mean value and the standard deviation of each probability to be screened, judge whether the ratio of standard deviation and the mean value determined is greater than default ratio, if, determine the information group of the maximum absolute value of the difference of probability to be screened and described mean value, as invalid group, determine mean value and the standard deviation of the probability to be screened that each information group except described invalid group is corresponding, until when the ratio of the standard deviation determined and mean value is not more than described default ratio, be the probability of illegal transaction information as described currency transaction information using the mean value determined, otherwise, be the probability of illegal transaction information as described currency transaction information using the mean value determined.
Concrete above-mentioned device as shown in Figure 3 can be positioned on server.
The second Transaction Information follow-up mechanism structural representation that Fig. 4 provides for the embodiment of the present application, specifically comprises:
Setting module 401, for setting probability for described property value set in advance;
Search module 402, for for currency transaction information, when each particular attribute-value comprised in described currency transaction information is not identical, determine the property value set be made up of each particular attribute-value comprised in described currency transaction information, search described setting module 401 in advance for the probability that described property value set sets;
Judge module 403, for judging whether described probability is greater than predetermined threshold value, if so, then follows the trail of described currency transaction information, otherwise, do not follow the trail of described currency transaction information.
Described setting module 401 specifically for, in advance for every attribute value combination, search each historical transactional information comprising the combination of this property value, in each historical transactional information found, determine the quantity of illegal transaction information, as the first quantity, by the ratio of described first quantity with the quantity of each historical transactional information found, be defined as the probability set for this property value set.
Described setting module 401 specifically for, in advance for every attribute value combination, search each historical transactional information comprising the combination of this property value, the each historical transactional information found is divided at least two information groups, for each information group, determine the quantity of the illegal transaction information comprised in this information group, as the second quantity, by the ratio of the quantity of all historical transactional information in described second quantity and this information group, be defined as probability to be screened, according to the probability to be screened determined for each information group, determine mean value and the standard deviation of each probability to be screened, judge whether the ratio of standard deviation and the mean value determined is greater than default ratio, if, determine the information group of the maximum absolute value of the difference of probability to be screened and described mean value, as invalid group, determine mean value and the standard deviation of the probability to be screened that each information group except described invalid group is corresponding, until when the ratio of the standard deviation determined and mean value is not more than described default ratio, using the mean value determined as the probability set for this property value set, otherwise, using the mean value determined as the probability set for this property value set.
Described device also comprises:
Correcting module 404, for determining that described currency transaction information is illegal transaction information or for after illegal transaction information, being recorded as newly-increased historical transactional information, revising according to described newly-increased historical transactional information to described probability by described currency transaction information.
Concrete above-mentioned device as shown in Figure 4 can be positioned on server.
The embodiment of the present application provides a kind of Transaction Information tracking and device, the method server is for currency transaction information, if each particular attribute-value comprised in currency transaction information is not identical, then determine the property value set be made up of each particular attribute-value comprised in currency transaction information, search the historical transactional information comprising this property value set, according to each historical transactional information found, determine that currency transaction information is the probability of illegal transaction information, judge whether this probability is greater than predetermined threshold value, if, then follow the trail of currency transaction information, otherwise, do not follow the trail of currency transaction information.By said method, because server can not follow the trail of the Transaction Information that described probability is less than predetermined threshold value, therefore, decrease the quantity of the Transaction Information of server tracks, reduce the resource consumption of server.
Those skilled in the art should understand, embodiments of the invention can be provided as method, system or computer program.Therefore, the present invention can adopt the form of complete hardware embodiment, completely software implementation or the embodiment in conjunction with software and hardware aspect.And the present invention can adopt in one or more form wherein including the upper computer program implemented of computer-usable storage medium (including but not limited to magnetic disk memory, CD-ROM, optical memory etc.) of computer usable program code.
The present invention describes with reference to according to the process flow diagram of the method for the embodiment of the present invention, equipment (system) and computer program and/or block scheme.Should understand can by the combination of the flow process in each flow process in computer program instructions realization flow figure and/or block scheme and/or square frame and process flow diagram and/or block scheme and/or square frame.These computer program instructions can being provided to the processor of multi-purpose computer, special purpose computer, Embedded Processor or other programmable data processing device to produce a machine, making the instruction performed by the processor of computing machine or other programmable data processing device produce device for realizing the function of specifying in process flow diagram flow process or multiple flow process and/or block scheme square frame or multiple square frame.
These computer program instructions also can be stored in can in the computer-readable memory that works in a specific way of vectoring computer or other programmable data processing device, the instruction making to be stored in this computer-readable memory produces the manufacture comprising command device, and this command device realizes the function of specifying in process flow diagram flow process or multiple flow process and/or block scheme square frame or multiple square frame.
These computer program instructions also can be loaded in computing machine or other programmable data processing device, make on computing machine or other programmable devices, to perform sequence of operations step to produce computer implemented process, thus the instruction performed on computing machine or other programmable devices is provided for the step realizing the function of specifying in process flow diagram flow process or multiple flow process and/or block scheme square frame or multiple square frame.
In one typically configuration, computing equipment comprises one or more processor (CPU), input/output interface, network interface and internal memory.
Internal memory may comprise the volatile memory in computer-readable medium, and the forms such as random access memory (RAM) and/or Nonvolatile memory, as ROM (read-only memory) (ROM) or flash memory (flashRAM).Internal memory is the example of computer-readable medium.
Computer-readable medium comprises permanent and impermanency, removable and non-removable media can be stored to realize information by any method or technology.Information can be computer-readable instruction, data structure, the module of program or other data.The example of the storage medium of computing machine comprises, but be not limited to phase transition internal memory (PRAM), static RAM (SRAM), dynamic RAM (DRAM), the random access memory (RAM) of other types, ROM (read-only memory) (ROM), Electrically Erasable Read Only Memory (EEPROM), fast flash memory bank or other memory techniques, read-only optical disc ROM (read-only memory) (CD-ROM), digital versatile disc (DVD) or other optical memory, magnetic magnetic tape cassette, tape magnetic rigid disk stores or other magnetic storage apparatus or any other non-transmitting medium, can be used for storing the information can accessed by computing equipment.According to defining herein, computer-readable medium does not comprise temporary computer readable media (transitorymedia), as data-signal and the carrier wave of modulation.
Also it should be noted that, term " comprises ", " comprising " or its any other variant are intended to contain comprising of nonexcludability, thus make to comprise the process of a series of key element, method, commodity or equipment and not only comprise those key elements, but also comprise other key elements clearly do not listed, or also comprise by the intrinsic key element of this process, method, commodity or equipment.When not more restrictions, the key element limited by statement " comprising ... ", and be not precluded within process, method, commodity or the equipment comprising described key element and also there is other identical element.
It will be understood by those skilled in the art that the embodiment of the application can be provided as method, system or computer program.Therefore, the application can adopt the form of complete hardware embodiment, completely software implementation or the embodiment in conjunction with software and hardware aspect.And the application can adopt in one or more form wherein including the upper computer program implemented of computer-usable storage medium (including but not limited to magnetic disk memory, CD-ROM, optical memory etc.) of computer usable program code.
The foregoing is only the embodiment of the application, be not limited to the application.To those skilled in the art, the application can have various modifications and variations.Any amendment done within all spirit in the application and principle, equivalent replacement, improvement etc., within the right that all should be included in the application.
Claims (16)
1. a Transaction Information method for tracing, is characterized in that, comprising:
For currency transaction information, when each particular attribute-value comprised in described currency transaction information is not identical, determine the property value set be made up of each particular attribute-value comprised in described currency transaction information;
Search the historical transactional information comprising described property value set;
According to each historical transactional information found, determine that described currency transaction information is the probability of illegal transaction information;
Judge whether described probability is greater than predetermined threshold value, if so, then follow the trail of described currency transaction information, otherwise, do not follow the trail of described currency transaction information.
2. the method for claim 1, is characterized in that, according to each historical transactional information found, determines that described currency transaction information is the probability of illegal transaction information, specifically comprises:
In each historical transactional information found, determine the quantity of illegal transaction information, as the first quantity;
By the ratio of described first quantity with the quantity of each historical transactional information found, be defined as the probability that described currency transaction information is illegal transaction information.
3. the method for claim 1, is characterized in that, according to each historical transactional information found, determines that described currency transaction information is the probability of illegal transaction information, specifically comprises:
The each historical transactional information found is divided at least two information groups;
For each information group, determine the quantity of the illegal transaction information comprised in this information group, as the second quantity, by the ratio of the quantity of all historical transactional information in described second quantity and this information group, be defined as probability to be screened;
According to the probability to be screened determined for each information group, determine that described currency transaction information is the probability of illegal transaction information.
4. method as claimed in claim 3, is characterized in that, according to the probability to be screened determined for each information group, determine that described currency transaction information is the probability of illegal transaction information, specifically comprise:
According to the probability to be screened determined for each information group, determine mean value and the standard deviation of each probability to be screened;
Judge whether the ratio of standard deviation and the mean value determined is greater than default ratio;
If, determine the information group of the maximum absolute value of the difference of probability to be screened and described mean value, as invalid group, determine mean value and the standard deviation of the probability to be screened that each information group except described invalid group is corresponding, until when the ratio of the standard deviation determined and mean value is not more than described default ratio, be the probability of illegal transaction information as described currency transaction information using the mean value determined;
Otherwise, be the probability of illegal transaction information as described currency transaction information using the mean value determined.
5. a Transaction Information method for tracing, is characterized in that, comprising:
For currency transaction information, when each particular attribute-value comprised in described currency transaction information is not identical, determine the property value set be made up of each particular attribute-value comprised in described currency transaction information;
Search in advance for the probability that described property value set sets;
Judge whether described probability is greater than predetermined threshold value, if so, then follow the trail of described currency transaction information, otherwise, do not follow the trail of described currency transaction information.
6. method as claimed in claim 5, is characterized in that, in advance for described property value set setting probability, specifically comprises:
In advance for every attribute value combination, search each historical transactional information comprising the combination of this property value;
In each historical transactional information found, determine the quantity of illegal transaction information, as the first quantity;
By the ratio of described first quantity with the quantity of each historical transactional information found, be defined as the probability set for this property value set.
7. method as claimed in claim 5, is characterized in that, in advance for described property value set setting probability, specifically comprises:
In advance for every attribute value combination, search each historical transactional information comprising the combination of this property value;
The each historical transactional information found is divided at least two information groups;
For each information group, determine the quantity of the illegal transaction information comprised in this information group, as the second quantity, by the ratio of the quantity of all historical transactional information in described second quantity and this information group, be defined as probability to be screened;
According to the probability to be screened determined for each information group, determine mean value and the standard deviation of each probability to be screened, judge whether the ratio of standard deviation and the mean value determined is greater than default ratio;
If, determine the information group of the maximum absolute value of the difference of probability to be screened and described mean value, as invalid group, determine mean value and the standard deviation of the probability to be screened that each information group except described invalid group is corresponding, until when the ratio of the standard deviation determined and mean value is not more than described default ratio, using the mean value determined as the probability set for this property value set;
Otherwise, using the mean value determined as the probability set for this property value set.
8. method as claimed in claim 5, it is characterized in that, described method also comprises:
Determining that described currency transaction information is illegal transaction information or for after licit traffic information, described currency transaction information is recorded as newly-increased historical transactional information;
According to described newly-increased historical transactional information, described probability is revised.
9. a Transaction Information follow-up mechanism, is characterized in that, comprising:
Search module, for for currency transaction information, when each particular attribute-value comprised in described currency transaction information is not identical, determines the property value set be made up of each particular attribute-value comprised in described currency transaction information, search the historical transactional information comprising described property value set;
Determination module, for searching each historical transactional information that module searches arrives described in basis, determines that described currency transaction information is the probability of illegal transaction information;
Judge module, for judging whether described probability is greater than predetermined threshold value, if so, then follows the trail of described currency transaction information, otherwise, do not follow the trail of described currency transaction information.
10. device as claimed in claim 9, it is characterized in that, described determination module specifically for, described search module searches to each historical transactional information in, determine the quantity of illegal transaction information, as the first quantity, by the ratio of described first quantity with the quantity of each historical transactional information found, be defined as the probability that described currency transaction information is illegal transaction information.
11. devices as claimed in claim 9, it is characterized in that, described determination module specifically for, by described search module searches to each historical transactional information be divided at least two information groups, for each information group, determine the quantity of the illegal transaction information comprised in this information group, as the second quantity, by the ratio of the quantity of all historical transactional information in described second quantity and this information group, be defined as probability to be screened, according to the probability to be screened determined for each information group, determine that described currency transaction information is the probability of illegal transaction information.
12. devices as claimed in claim 11, it is characterized in that, described determination module specifically for, according to the probability to be screened determined for each information group, determine mean value and the standard deviation of each probability to be screened, judge whether the ratio of standard deviation and the mean value determined is greater than default ratio, if, determine the information group of the maximum absolute value of the difference of probability to be screened and described mean value, as invalid group, determine mean value and the standard deviation of the probability to be screened that each information group except described invalid group is corresponding, until when the ratio of the standard deviation determined and mean value is not more than described default ratio, be the probability of illegal transaction information as described currency transaction information using the mean value determined, otherwise, be the probability of illegal transaction information as described currency transaction information using the mean value determined.
13. 1 kinds of Transaction Information follow-up mechanisms, is characterized in that, comprising:
Setting module, for setting probability for described property value set in advance;
Search module, for for currency transaction information, when each particular attribute-value comprised in described currency transaction information is not identical, determine the property value set be made up of each particular attribute-value comprised in described currency transaction information, search described setting module in advance for the probability that described property value set sets;
Judge module, for judging whether described probability is greater than predetermined threshold value, if so, then follows the trail of described currency transaction information, otherwise, do not follow the trail of described currency transaction information.
14. devices as claimed in claim 13, it is characterized in that, described setting module specifically for, in advance for every attribute value combination, search each historical transactional information comprising the combination of this property value, in each historical transactional information found, determine the quantity of illegal transaction information, as the first quantity, by the ratio of described first quantity with the quantity of each historical transactional information found, be defined as the probability set for this property value set.
15. devices as claimed in claim 13, it is characterized in that, described setting module specifically for, in advance for every attribute value combination, search each historical transactional information comprising the combination of this property value, the each historical transactional information found is divided at least two information groups, for each information group, determine the quantity of the illegal transaction information comprised in this information group, as the second quantity, by the ratio of the quantity of all historical transactional information in described second quantity and this information group, be defined as probability to be screened, according to the probability to be screened determined for each information group, determine mean value and the standard deviation of each probability to be screened, judge whether the ratio of standard deviation and the mean value determined is greater than default ratio, if, determine the information group of the maximum absolute value of the difference of probability to be screened and described mean value, as invalid group, determine mean value and the standard deviation of the probability to be screened that each information group except described invalid group is corresponding, until when the ratio of the standard deviation determined and mean value is not more than described default ratio, using the mean value determined as the probability set for this property value set, otherwise, using the mean value determined as the probability set for this property value set.
16. devices as claimed in claim 13, it is characterized in that, described device also comprises:
Correcting module, for determining that described currency transaction information is illegal transaction information or for after illegal transaction information, being recorded as newly-increased historical transactional information, revising according to described newly-increased historical transactional information to described probability by described currency transaction information.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410542509.9A CN105574728B (en) | 2014-10-14 | 2014-10-14 | A kind of Transaction Information method for tracing and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410542509.9A CN105574728B (en) | 2014-10-14 | 2014-10-14 | A kind of Transaction Information method for tracing and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105574728A true CN105574728A (en) | 2016-05-11 |
| CN105574728B CN105574728B (en) | 2019-08-30 |
Family
ID=55884829
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410542509.9A Active CN105574728B (en) | 2014-10-14 | 2014-10-14 | A kind of Transaction Information method for tracing and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105574728B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP7316984B2 (en) | 2020-09-07 | 2023-07-28 | セカンドサイトアナリティカ株式会社 | Information processing system and information processing method |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1049236A (en) * | 1989-06-02 | 1991-02-13 | 西方三次多项数据有限公司 | The tracking of ticket operating position and system |
| CN101034462A (en) * | 2006-03-06 | 2007-09-12 | 冲电气工业株式会社 | Illegal trade preventing system, illegal trade preventing device and computer program |
| US7516368B2 (en) * | 2004-06-21 | 2009-04-07 | Fujitsu Limited | Apparatus, method, and computer product for pattern detection |
| CN103164802A (en) * | 2013-03-14 | 2013-06-19 | 北京恒远创智信息技术有限公司 | Position detection based method and system for preventing illegal electronic transaction |
-
2014
- 2014-10-14 CN CN201410542509.9A patent/CN105574728B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1049236A (en) * | 1989-06-02 | 1991-02-13 | 西方三次多项数据有限公司 | The tracking of ticket operating position and system |
| US7516368B2 (en) * | 2004-06-21 | 2009-04-07 | Fujitsu Limited | Apparatus, method, and computer product for pattern detection |
| CN101034462A (en) * | 2006-03-06 | 2007-09-12 | 冲电气工业株式会社 | Illegal trade preventing system, illegal trade preventing device and computer program |
| CN103164802A (en) * | 2013-03-14 | 2013-06-19 | 北京恒远创智信息技术有限公司 | Position detection based method and system for preventing illegal electronic transaction |
Non-Patent Citations (5)
| Title |
|---|
| 中国建筑材料检验认证中心，等；: "《卫生洁具机器配件检测技术 2010年2月第1版》", 28 February 2010, 中国计量出版社 * |
| 刘珮君，: "招商银行信用卡业务非现场审计系统的研究与实施", 《中国优秀硕士学位论文全文数据库经济与管理科学辑（月刊）》 * |
| 唐旭，译；: "《美国银行保密法/反洗钱检查手册 2009年8月第1版 》", 31 August 2009, 中国检察出版社 * |
| 石中林，主编；: "《建筑材料检测（上）2013年2月第1版》", 28 February 2013, 华中科技大学出版社 * |
| 翁丽芳，: "基于银行机构客户账户的可疑洗钱交易行为识别研究", 《中国优秀博硕士学位论文全文数据库（硕士）经济与管理科学辑（月刊）》 * |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP7316984B2 (en) | 2020-09-07 | 2023-07-28 | セカンドサイトアナリティカ株式会社 | Information processing system and information processing method |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105574728B (en) | 2019-08-30 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN104731816A (en) | Method and device for processing abnormal business data | |
| CN105005582A (en) | Recommendation method and device for multimedia information | |
| CN105740667A (en) | User behavior based information identification method and apparatus | |
| CN111080304A (en) | Credible relationship identification method, device and equipment | |
| CN106897342A (en) | A kind of data verification method and equipment | |
| CN105335143A (en) | Business processing method and apparatus | |
| CN106325826A (en) | Configuration file detection method and apparatus | |
| CN105630475A (en) | Data label organization system and organization method | |
| CN109033365B (en) | Data processing method and related equipment | |
| CN105989457A (en) | Information query method and apparatus thereof | |
| CN106650519A (en) | Device tracking method and system | |
| CN107045695A (en) | A kind of invoice new line information variation, device and managing bill system | |
| CN107832446A (en) | A kind of searching method and computing device of configuration item information | |
| CN105354195A (en) | Information search method and apparatus | |
| CN106469182A (en) | A kind of information recommendation method based on mapping relations and device | |
| CN105677677A (en) | Information classification and device | |
| CN105574728A (en) | Transaction information tracking method and apparatus | |
| CN105512564A (en) | Method and device for data tamper-proof verification | |
| CN109597706B (en) | Detection method, device and system for checking difference data | |
| US10884704B2 (en) | Sorting a table in analytical databases | |
| CN111131474A (en) | Method, device and medium for managing user protocol based on block chain | |
| CN115659045A (en) | User operation identification method and device, storage medium and electronic equipment | |
| CN105721527A (en) | Data processing method and server | |
| CN104239021A (en) | Search engine query string generation method and device and search engine system | |
| CN106888244A (en) | A kind of method for processing business and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20200918 Address after: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman Islands Patentee after: Innovative advanced technology Co.,Ltd. Address before: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman Islands Patentee before: Advanced innovation technology Co.,Ltd. Effective date of registration: 20200918 Address after: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman Islands Patentee after: Advanced innovation technology Co.,Ltd. Address before: A four-storey 847 mailbox in Grand Cayman Capital Building, British Cayman Islands Patentee before: Alibaba Group Holding Ltd. |