CN103886250B - The data processing method of service-oriented support system, device, controller and system - Google Patents
The data processing method of service-oriented support system, device, controller and system Download PDFInfo
- Publication number
- CN103886250B CN103886250B CN201210555103.5A CN201210555103A CN103886250B CN 103886250 B CN103886250 B CN 103886250B CN 201210555103 A CN201210555103 A CN 201210555103A CN 103886250 B CN103886250 B CN 103886250B
- Authority
- CN
- China
- Prior art keywords
- user
- information
- group
- mark
- parameter
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Software Systems (AREA)
- General Health & Medical Sciences (AREA)
- Computer Hardware Design (AREA)
- Computer Security & Cryptography (AREA)
- Health & Medical Sciences (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Bioethics (AREA)
- Debugging And Monitoring (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
The embodiment of the invention discloses data processing method, device, controller and the system of a kind of service-oriented support system, this data processing method, including: capturing the operation information in User operation log, described operation information includes operation mark and operating parameter；Identify this user's owning user group, search reference operation mark corresponding with described operation mark in this user's group；Extract the standard operation parameter with reference to operation mark described in this user's group；This user operation parameter of comparison and described standard operation parameter, export the comparison result for this user's operation information.This processing method can comprehensively, quickly and accurately know whether user operation exists risk, and the process for violation operation provides reference.
Description
Technical field
The present invention relates to mobile communication business processing technology field, more particularly, it relates to one is towards industry
The business data processing method of support system, device, controller and system.
Background technology
Mobile communication business support system houses substantial amounts of client-aware information (customer data, client
The identification authentication information such as order business, consumption information, client password) and operate for these sensitive informations
Produced daily record, owing to current operation is of a great variety, operation flow is complicated, and produced daily record amount is non-
The hugest, security audit person can only be audited by the method for sampling in audit process.
But, the method not only efficiency of artificial sampling audit is low, due to described client personal information and operation
Daily record data amount huge cannot complete audit, and the accuracy of auditing result can not be guaranteed.
Summary of the invention
In view of this, the present invention provide the data processing method of a kind of service-oriented support system, device,
Controller and system, high to realize audit efficiency, and the comprehensive and result accuracy of auditing is guaranteed.
On the one hand, the invention provides the data processing method of a kind of service-oriented support system, including:
Capturing the operation information in User operation log, described operation information includes operation mark and operation
Parameter；
Identify this user's owning user group, search ginseng corresponding with described operation mark in this user's group
Examine operation mark；
Extract the standard operation parameter with reference to operation mark described in this user's group；
This user operation parameter of comparison and described standard operation parameter, output is for this user's operation information
Comparison result.
Alternatively, said method also includes:
Judge whether described comparison result indicates standard operation corresponding to described operation information and this user's group
Information is consistent:
Judge to obtain the instruction of described comparison result consistent, then the information that feedback operation is errorless；
Judge to obtain the instruction of described comparison result inconsistent, then there is the information of risk in feedback operation, described
The information that there is risk includes: does not finds the reference operation mark corresponding with described operation mark, or uses
Family operating parameter is inconsistent with described standard operation parameter.
Alternatively, there is the information of risk and include in feedback operation described in said method:
Risk is there is by sending note feedback operation.
Alternatively, said method also includes:
Extract and resolve the Operation Log that there is risk, it is judged that whether described Operation Log exists behaviour in violation of rules and regulations
Make；
Judge to draw and described Operation Log does not exist violation operation, then search for the new behaviour in this Operation Log
Make information, and this new operation information is added to the operation information of this user's group.
Alternatively, said method also includes: build user's group and standard operation information, including:
According to pre-conditioned, user is divided into multiple user's group；
Follow the tracks of and extract the operation behavior in the Operation Log of each user in each user's group；
For user's group, the operation behavior reaching pre-set user quantity is identified as with reference to behaviour
Make a check mark；
Standard operation parameter is mated to described with reference to operation mark according to described operation behavior.
On the other hand, the invention provides the data processing equipment of a kind of service-oriented support system, including:
Operation information acquisition unit, for capturing the operation information in User operation log, described operation is believed
Breath includes operation mark and operating parameter；
Operation information identificating unit, is used for identifying this user's owning user group, searches in this user's group
The reference operation mark corresponding with described operation mark；
Extraction unit, for extracting the standard operation parameter of reference operation mark described in this user's group；
Comparing unit, for this user operation parameter of comparison and described standard operation parameter, output is for this
The comparison result of user's operation information.
On the other hand, the invention provides the data processing controller of a kind of service-oriented support system, bag
Include:
Processor and memorizer, described processor reads and performs the instruction in described memorizer, described in deposit
Instruction in reservoir includes:
Operation information acquisition module, for capturing the operation information in User operation log, described operation is believed
Breath includes operation mark and operating parameter；
Operation information identification module, is used for identifying this user's owning user group, searches in this user's group
The reference operation mark corresponding with described operation mark；
Extraction module, for extracting the standard operation parameter of reference operation mark described in this user's group；
Comparing unit, for this user operation parameter of comparison and described standard operation parameter, output is for this
The comparison result of user's operation information.
On the other hand, the invention provides the data handling system of a kind of service-oriented support system, including:
The data processing controller of above-mentioned service-oriented support system.
From above-mentioned technical scheme it can be seen that the number of service-oriented support system the embodiment of the present invention
The operation information produced in daily record for user operation according to processing method carries out automatic inspection, i.e. user
In owning user group, by operation mark and with reference to operation mark mate, and comparison user operation parameter with
Standard operation parameter, exports comparison result, and this processing method can comprehensively, quickly and accurately know user
Whether operation exists risk, and the process for violation operation provides reference.
Accompanying drawing explanation
In order to be illustrated more clearly that the embodiment of the present invention or technical scheme of the prior art, below will be to reality
Execute the required accompanying drawing used in example or description of the prior art to be briefly described, it should be apparent that below,
Accompanying drawing in description is only some embodiments of the present invention, for those of ordinary skill in the art,
On the premise of not paying creative work, it is also possible to obtain other accompanying drawing according to these accompanying drawings.
Fig. 1 is the data processing method flow process of a kind of service-oriented support system disclosed in the embodiment of the present invention
Figure；
Fig. 2 is the data processing method of a kind of service-oriented support system disclosed in further embodiment of this invention
Flow chart；
Fig. 3 is the data processing method of a kind of service-oriented support system disclosed in further embodiment of this invention
Flow chart；
Fig. 4 is the data processing method of a kind of service-oriented support system disclosed in further embodiment of this invention
Flow chart；
Fig. 5 is the data processing equipment of a kind of service-oriented support system disclosed in further embodiment of this invention
Structural representation；
Fig. 6 is the data processing controller knot of a kind of service-oriented support system disclosed in the embodiment of the present invention
Structure schematic diagram；
Fig. 7 is the data processing and control of a kind of service-oriented support system disclosed in further embodiment of this invention
Device structural representation；
Fig. 8 is the data handling system structure of a kind of service-oriented support system disclosed in the embodiment of the present invention
Schematic diagram.
Detailed description of the invention
Below in conjunction with the accompanying drawing in the embodiment of the present invention, the technical scheme in the embodiment of the present invention is carried out
Clearly and completely describe, it is clear that described embodiment is only a part of embodiment of the present invention, and
It is not all, of embodiment.Based on the embodiment in the present invention, those of ordinary skill in the art are not making
Go out the every other embodiment obtained under creative work premise, broadly fall into the scope of protection of the invention.
Business support system houses substantial amounts of client-aware information and operates the generation of these sensitive informations
Daily record, owing to class of business is various, operation flow is complicated, so the daily record amount produced is the hugest,
Security audit person can only be audited by the method for sampling during audit, easily causes audit not
The situation that comprehensive or audit is slipped, thus the situation causing customer information to reveal occurs.Audit at present is adopted
Method be all the experience according to security audit personnel, daily record to magnanimity by the way of simple sampling
Information is analyzed, and not only audit efficiency is low, and the comprehensive and auditing result accuracy rate of audit is low.
The embodiment of the invention discloses the data processing method of a kind of service-oriented support system, device, control
Device processed and system, high to realize audit efficiency, and the comprehensive and result accuracy of auditing is guaranteed.
Fig. 1 shows the data processing method of a kind of service-oriented support system, including:
S11: capture the operation information in User operation log, described operation information include operation mark and
Operating parameter；
Operation information in described crawl User operation log, is being currently generated that user carries out operating
Real-time logs, or transfer the process extracting operation note in the User operation log generated.
Described operation information is to include the operation note that user logins the behavior of business support system, generation,
It includes the operation mark associated with operation behavior, such as:
When user logs in business support system, this logs in operation mark corresponding to behavior can be designated as 01, this use
Family logs in the operation mark of rear persistent period can be designated as 02, the enquiry number institute in business operated by this user
Corresponding operation mark can be designated as 03, and the mode of this user operation is for using function menu, then operation mark
04 etc. can be designated as, and while realizing this data processing method, it is desirable to have this user operation can be examined and determine
Daily record operates information category and whether has data base and the basis for estimation of violation operation.
See Fig. 2, Fig. 2 and show the implementation building user's group with standard operation information, including:
S21: user is divided into multiple user's group according to pre-conditioned；
The personnel of contact and access service support system have polytype, the different merits to business support system
Can conduct interviews and call, the operation behavior that the user of each type is used difference.Each is used
When family carries out the division of user's group, described pre-conditioned can referring to signs in in business support system
User log in the difference of pass-through command, such as the user name suffix etc. of different group users.
S22: follow the tracks of and extract the operation behavior in the Operation Log of each user in each user's group；
Before the determination carrying out standard operation information, need to be accustomed to according to user's practical operation in each group
Carry out the demarcation of operation information, e.g., follow the tracks of and extract the trimestral Operation Log of party A-subscriber of senior customer service,
The actual operation behavior of this user is on Monday between at 9 in the morning at 4 in afternoon of Friday, registering service
Support system, uses drop-down menu selection mode, changes client traffic title, increases certain client and use certain
The time limit etc. of business.
S23: for user's group, the operation behavior reaching pre-set user quantity is identified as ginseng
Examine operation mark；
If the operation behavior of the most of user member in this user's group is same or similar, then according to this behaviour
Carry out operation mark as behavior, and mate corresponding with reference to operating parameter.That is, standard operation information bag
Include the operation behavior that in this group, all users may relate to, and the canonical parameter for this operation behavior.
S24: mate standard operation parameter to described with reference to operation mark according to described operation behavior.
Such as, the reference operation mark of the landing time of the user A of this senior customer service group is 10, standard
Operating parameter be 9 o'clock to ten one points.
The classification of described user's group, reference operation mark, and standard operation parameter all can be stored in number
According in storehouse, call when user's group is audited, or call during real-time auditing.
S12: identify this user's owning user group, search in this user's group corresponding with described operation mark
Reference operation mark；
S13: extract the standard operation parameter with reference to operation mark described in this user's group；
In certain day Operation Log of the user A of this senior customer service group, it is related to this user A when logging in
Between be the record of nine thirty, the reference operation mark of the landing time in this group is 10, and standard operation is joined
Number be 9 o'clock to ten one points, then for operation information in this Operation Log for, there is not wind in user A
Danger operation and violation operation.
It should be noted that the described corresponding relation with reference to operation mark with described standard operation parameter can lead to
The mode crossing contingency table realizes, but does not limit to.
This user operation parameter of S14: comparison and described standard operation parameter, output is believed for this user operation
The comparison result of breath.
The foundation that described comparison result processes as follow-up violation operation.
The data processing method of the service-oriented support system in above-described embodiment produces day for user operation
Operation information in will carries out automatic inspection, i.e. in user's owning user group, by operation mark and
Mate with reference to operation mark, and comparison user operation parameter and standard operation parameter, export comparison result,
This processing method can comprehensively, quickly and accurately know whether user operation exists risk, and steps on for abnormal
Record time period, abnormal access IP, abnormal inquiry frequency, the unlawful practice such as abnormal operation object behaviour in violation of rules and regulations
The process made provides reference.
Fig. 3 shows the data processing method of another service-oriented support system, including:
S31: capture the operation information in User operation log, described operation information include operation mark and
Operating parameter；
S32: identify this user's owning user group, search in this user's group corresponding with described operation mark
Reference operation mark；
S33: judge whether to find reference operation mark corresponding with described operation mark in this user's group,
If it is, perform S34；Otherwise perform S38；
S34: extract the standard operation parameter with reference to operation mark described in this user's group；
This user operation parameter of S35: comparison and described standard operation parameter；
S36: judge whether described comparison result indicates standard corresponding to described operation information and this user's group
Operation information is consistent, if consistent, perform S37, otherwise performs S38；
The information that S37: feedback operation is errorless；
There is the information of risk in S38: feedback operation, the described information that there is risk includes: do not find with
The reference operation mark that described operation mark is corresponding, or user operation parameter is with described standard operation parameter not
Unanimously.
The judgement that described user operation parameter is inconsistent with described standard operation parameter, is to possess described behaviour
Make under the conditions of the reference operation mark of correspondence that makes a check mark, if without the operation corresponding with operation mark reference
Mark, the most directly sends operation and there is the information of risk.
It should be noted that as preferably, there is the information of risk by sending note in described feedback operation
Mode realize, the most also can inform auditor by modes such as mails, not limit to.
Fig. 4 shows the data processing method of another service-oriented support system, Fig. 3 diagram and
On the basis of corresponding explanation, when described operation information exists risk, proceed as follows, including:
S41: extract and resolve the Operation Log that there is risk；
The described Operation Log that there is risk actually can not directly judge whether it is violation or behaviour in violation of rules and regulations
Make, need to further confirm that.
S42: judge whether there is violation operation in described Operation Log, if existing, then performs S43, no
Then perform S44；
S43: process there is violation operation.
S44: search for the new operation information in this Operation Log, and this new operation information is added to this user
In the operation information of group.
When being not belonging to violation operation, belong to the normal operating behavior that user increases newly, now will more
New storage has with reference to operation mark and the data base of standard operation parameter.
Fig. 5 shows the data processing equipment of a kind of service-oriented support system, including:
Operation information acquisition unit 51, for capturing the operation information in User operation log, described operation
Information includes operation mark and operating parameter；
Operation information identificating unit 52, is used for identifying this user's owning user group, searches this user's group
In the reference operation mark corresponding with described operation mark；
Extraction unit 53, for extracting the standard operation parameter of reference operation mark described in this user's group；
Comparing unit 54, for this user operation parameter of comparison and described standard operation parameter, export for
The comparison result of this user's operation information.
Fig. 6 shows the data processing equipment of another service-oriented support system, Fig. 5 diagram and
Also include on the basis of explanation:
Judging unit 61, is used for judging whether described comparison result indicates described operation information and this user's group
The most corresponding standard operation information is consistent:
And feedback unit 62, obtain the instruction of described comparison result for judgement consistent, then feedback operation without
Information by mistake；
Judge to obtain the instruction of described comparison result inconsistent, then there is the information of risk in feedback operation, described
The information that there is risk includes: does not finds the reference operation mark corresponding with described operation mark, or uses
Family operating parameter is inconsistent with described standard operation parameter.
As preferably, described feedback unit includes: note feedback unit, for by sending note feedback
There is risk in operation.
And,
, there is the Operation Log of risk for extraction parsing in risk operations journal processing unit 63, it is judged that
Whether described Operation Log exists violation operation；
Judge to draw and described Operation Log does not exist violation operation, then search for the new behaviour in this Operation Log
Make information, and this new operation information is added to the operation information of this user's group.
And, build user's group and standard operation information unit 64, be used for:
According to pre-conditioned, user is divided into multiple user's group；
Follow the tracks of and extract the operation behavior in the Operation Log of each user in each user's group；
For user's group, the operation behavior reaching pre-set user quantity is identified as with reference to behaviour
Make a check mark；
Standard operation parameter is mated to described with reference to operation mark according to described operation behavior.
Said apparatus, for illustrating and the corresponding consistent functional module of each step of method in embodiment with Fig. 1-4,
The device limited by such functional module is as the functional module construction realizing technical solution of the present invention.
Fig. 7 shows the data processing controller of a kind of service-oriented support system, including:
Processor 71 and memorizer 72, described processor 71 reads and performs the finger in described memorizer 72
Order, the instruction in described memorizer 72 includes:
Operation information acquisition module, for capturing the operation information in User operation log, described operation is believed
Breath includes operation mark and operating parameter；
Operation information identification module, is used for identifying this user's owning user group, searches in this user's group
The reference operation mark corresponding with described operation mark；
Extraction module, for extracting the standard operation parameter of reference operation mark described in this user's group；
Comparing unit, for this user operation parameter of comparison and described standard operation parameter, output is for this
The comparison result of user's operation information.
Instruction in described memorizer also includes:
Judge module, is used for judging whether described comparison result indicates described operation information and this user's group
Corresponding standard operation information is consistent:
And feedback module, obtaining the instruction of described comparison result for judgement consistent, then feedback operation is errorless
Information；
Judge to obtain the instruction of described comparison result inconsistent, then there is the information of risk in feedback operation, described
The information that there is risk includes: does not finds the reference operation mark corresponding with described operation mark, or uses
Family operating parameter is inconsistent with described standard operation parameter.
Described feedback module includes: note feedback module, for there is wind by transmission note feedback operation
Danger.
Instruction in described memorizer also includes；
, there is the Operation Log of risk for extraction parsing, it is judged that institute in risk operations log processing module
State in Operation Log and whether there is violation operation；
Judge to draw and described Operation Log does not exist violation operation, then search for the new behaviour in this Operation Log
Make information, and this new operation information is added to the operation information of this user's group.
Instruction in described memorizer also includes building user's group and standard operation information module, is used for:
According to pre-conditioned, user is divided into multiple user's group；
Follow the tracks of and extract the operation behavior in the Operation Log of each user in each user's group；
For user's group, the operation behavior reaching pre-set user quantity is identified as with reference to behaviour
Make a check mark；
Standard operation parameter is mated to described with reference to operation mark according to described operation behavior.
One of ordinary skill in the art will appreciate that all or part of flow process realizing in above-described embodiment method,
Can be by computer program and complete to instruct relevant hardware, described program can be stored in calculating
In machine read/write memory medium, this program is upon execution, it may include such as the stream of the embodiment of above-mentioned each method
Journey.Wherein, described storage medium can be magnetic disc, CD, read-only store-memory body (Read-Only
Memory, ROM) or random store-memory body (Random Access Memory, RAM) etc..
Fig. 8 shows the data handling system of a kind of service-oriented support system, Fig. 7 diagram and correspondence thereof
The data processing controller of the service-oriented support system in explanation, described data processing controller can embed
In server 81, described data handling system can be construed to include the auditing system of institute's data server,
Described auditing system can realize the User operation log audit function of business support system 82, and can be for
Auditing result carries out alignment processing.
The structure of described data processing controller sees Fig. 7 diagram and to it should be noted that described data process
The operation principle of controller sees the diagram of Fig. 1-4 and to it should be noted that repeat no more.
In sum:
The data processing method of the service-oriented support system in the embodiment of the present invention produces for user operation
Operation information in daily record carries out automatic inspection, i.e. in user's owning user group, by operation mark
Mate with reference to operation mark, and comparison user operation parameter and standard operation parameter, export comparison result,
This processing method can comprehensively, quickly and accurately know whether user operation exists risk, and is to grasp in violation of rules and regulations
The process made provides reference.
In this specification, each embodiment uses the mode gone forward one by one to describe, and each embodiment stresses
Being the difference with other embodiments, between each embodiment, identical similar portion sees mutually.
For device disclosed in embodiment, owing to it corresponds to the method disclosed in Example, so describing
Fairly simple, relevant part sees method part and illustrates.
The method described in conjunction with the embodiments described herein or the step of algorithm can directly use hardware,
The software module that processor performs, or the combination of the two implements.Software module can be placed in and deposit at random
Reservoir (RAM), internal memory, read only memory (ROM), electrically programmable ROM, electric erasable can
Well known in programming ROM, depositor, hard disk, moveable magnetic disc, CD-ROM or technical field
In any other form of storage medium.
Described above to the disclosed embodiments, makes professional and technical personnel in the field be capable of or uses
The present invention.Multiple amendment to these embodiments will be aobvious and easy for those skilled in the art
Seeing, generic principles defined herein can be in the spirit or scope without departing from the embodiment of the present invention
In the case of, realize in other embodiments.Therefore, the embodiment of the present invention is not intended to be limited to institute herein
These embodiments shown, and it is to fit to consistent with principles disclosed herein and features of novelty the widest
Scope.
Claims (13)
1. the data processing method of a service-oriented support system, it is characterised in that including:
Capturing the operation information in User operation log, described operation information includes operation mark and operating parameter；
Identify this user's owning user group, search reference operation mark corresponding with described operation mark in this user's group；
Extract the standard operation parameter with reference to operation mark described in this user's group；
This user operation parameter of comparison and described standard operation parameter, export the comparison result for this user's operation information；
Also include: build user's group and standard operation information, including:
According to pre-conditioned, user is divided into multiple user's group；
Follow the tracks of and extract the operation behavior in the Operation Log of each user in each user's group；
For user's group, the operation behavior reaching pre-set user quantity is identified as with reference to operation mark；
Standard operation parameter is mated to described with reference to operation mark according to described operation behavior.
2. the data processing method of service-oriented support system as claimed in claim 1, it is characterised in that also include:
Judge whether described comparison result indicates standard operation information corresponding to described operation information and this user's group consistent:
Judge to obtain the instruction of described comparison result consistent, then the information that feedback operation is errorless；
Judge to obtain the instruction of described comparison result inconsistent, then there is the information of risk in feedback operation, and the described information that there is risk includes: do not find the reference operation mark corresponding with described operation mark, or user operation parameter is inconsistent with described standard operation parameter.
3. the data processing method of service-oriented support system as claimed in claim 2, it is characterised in that described feedback operation exists the information of risk and includes:
Risk is there is by sending note feedback operation.
4. the data processing method of service-oriented support system as claimed in claim 3, it is characterised in that also include:
Extract and resolve the Operation Log that there is risk, it is judged that whether described Operation Log exists violation operation；
Judge to draw and described Operation Log does not exist violation operation, then search for the new operation information in this Operation Log, and this new operation information is added to the operation information of this user's group.
5. the data processing equipment of a service-oriented support system, it is characterised in that including:
Operation information acquisition unit, for capturing the operation information in User operation log, described operation information includes operation mark and operating parameter；
Operation information identificating unit, is used for identifying this user's owning user group, searches reference operation mark corresponding with described operation mark in this user's group；
Extraction unit, for extracting the standard operation parameter of reference operation mark described in this user's group；
Comparing unit, for this user operation parameter of comparison and described standard operation parameter, exports the comparison result for this user's operation information；
Also include: build user's group and standard operation information unit, be used for:
According to pre-conditioned, user is divided into multiple user's group；
Follow the tracks of and extract the operation behavior in the Operation Log of each user in each user's group；
For user's group, the operation behavior reaching pre-set user quantity is identified as with reference to operation mark；
Standard operation parameter is mated to described with reference to operation mark according to described operation behavior.
6. the data processing equipment of service-oriented support system as claimed in claim 5, it is characterised in that also include, it is judged that unit, is used for judging whether described comparison result indicates standard operation information corresponding to described operation information and this user's group consistent:
And feedback unit, obtain the instruction of described comparison result for judgement consistent, then the information that feedback operation is errorless；
Judge to obtain the instruction of described comparison result inconsistent, then there is the information of risk in feedback operation, and the described information that there is risk includes: do not find the reference operation mark corresponding with described operation mark, or user operation parameter is inconsistent with described standard operation parameter.
7., for there is risk by transmission note feedback operation in the data processing equipment of service-oriented support system as claimed in claim 6, it is characterised in that described feedback unit includes: note feedback unit.
8. the data processing equipment of service-oriented support system as claimed in claim 7, it is characterised in that also include:
, there is the Operation Log of risk for extraction parsing, it is judged that whether described Operation Log exists violation operation in risk operations journal processing unit；
Judge to draw and described Operation Log does not exist violation operation, then search for the new operation information in this Operation Log, and this new operation information is added to the operation information of this user's group.
9. the data processing controller of a service-oriented support system, it is characterised in that including:
Processor and memorizer, described processor reads and performs the instruction in described memorizer, and the instruction in described memorizer includes:
Operation information acquisition module, for capturing the operation information in User operation log, described operation information includes operation mark and operating parameter；
Operation information identification module, is used for identifying this user's owning user group, searches reference operation mark corresponding with described operation mark in this user's group；
Extraction module, for extracting the standard operation parameter of reference operation mark described in this user's group；
Comparing unit, for this user operation parameter of comparison and described standard operation parameter, exports the comparison result for this user's operation information；
Instruction in described memorizer also includes building user's group and standard operation information module, is used for:
According to pre-conditioned, user is divided into multiple user's group；
Follow the tracks of and extract the operation behavior in the Operation Log of each user in each user's group；
For user's group, the operation behavior reaching pre-set user quantity is identified as with reference to operation mark；
Standard operation parameter is mated to described with reference to operation mark according to described operation behavior.
10. the data processing controller of service-oriented support system as claimed in claim 9, it is characterised in that the instruction in described memorizer also includes:
Judge module, is used for judging whether described comparison result indicates standard operation information corresponding to described operation information and this user's group consistent:
And feedback module, obtain the instruction of described comparison result for judgement consistent, then the information that feedback operation is errorless；
Judge to obtain the instruction of described comparison result inconsistent, then there is the information of risk in feedback operation, and the described information that there is risk includes: do not find the reference operation mark corresponding with described operation mark, or user operation parameter is inconsistent with described standard operation parameter.
, for there is risk by transmission note feedback operation in the data processing controller of 11. service-oriented support systems as claimed in claim 10, it is characterised in that described feedback module includes: note feedback unit.
The data processing controller of 12. service-oriented support systems as claimed in claim 11, it is characterised in that the instruction in described memorizer also includes:
, there is the Operation Log of risk for extraction parsing, it is judged that whether described Operation Log exists violation operation in risk operations log processing module；
Judge to draw and described Operation Log does not exist violation operation, then search for the new operation information in this Operation Log, and this new operation information is added to the operation information of this user's group.
The data handling system of 13. 1 kinds of service-oriented support systems, it is characterised in that including: the data processing controller of the service-oriented support system described in any one of claim 9-12.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210555103.5A CN103886250B (en) | 2012-12-19 | 2012-12-19 | The data processing method of service-oriented support system, device, controller and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210555103.5A CN103886250B (en) | 2012-12-19 | 2012-12-19 | The data processing method of service-oriented support system, device, controller and system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103886250A CN103886250A (en) | 2014-06-25 |
| CN103886250B true CN103886250B (en) | 2016-11-23 |
Family
ID=50955136
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201210555103.5A Active CN103886250B (en) | 2012-12-19 | 2012-12-19 | The data processing method of service-oriented support system, device, controller and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103886250B (en) |
Families Citing this family (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106485504A (en) * | 2015-08-12 | 2017-03-08 | 阿里巴巴集团控股有限公司 | A kind of method and apparatus differentiated by operation behavior to customer service |
| CN107239680B (en) * | 2017-05-22 | 2019-09-06 | 微梦创科网络科技（中国）有限公司 | A kind of couple of user logs in the method and device for carrying out risk assessment |
| CN109190408B (en) * | 2018-09-12 | 2021-01-05 | 江苏满运软件科技有限公司 | Data information security processing method and system |
| CN109446188B (en) * | 2018-10-17 | 2021-06-25 | 大国创新智能科技(东莞)有限公司 | Tracking and auditing method based on big data and deep learning and robot system |
| CN109858735A (en) * | 2018-12-14 | 2019-06-07 | 深圳壹账通智能科技有限公司 | Consumer's risk scoring assessment method, device, computer equipment and storage medium |
| CN112769729B (en) * | 2019-10-21 | 2023-03-03 | 广州汽车集团股份有限公司 | Server intrusion alarm method and system |
| CN112287397B (en) * | 2020-12-28 | 2021-04-23 | 曜立科技(北京)有限公司 | System and method for improving and guaranteeing safety of patient information transmission |
Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101399658A (en) * | 2007-09-24 | 2009-04-01 | 北京启明星辰信息技术有限公司 | Safe log analyzing method and system |
-
2012
- 2012-12-19 CN CN201210555103.5A patent/CN103886250B/en active Active
Patent Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101399658A (en) * | 2007-09-24 | 2009-04-01 | 北京启明星辰信息技术有限公司 | Safe log analyzing method and system |
Non-Patent Citations (1)
| Title |
|---|
| 《基于日志挖掘的网络安全审计系统研究与实现》;宁兴旺;《中国优秀硕士学位论文全文数据库-信息科技辑》;20110315(第3期);第1-3、9-11、25-40页 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN103886250A (en) | 2014-06-25 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103886250B (en) | The data processing method of service-oriented support system, device, controller and system | |
| CN103875015B (en) | Gathered using the multiple-factor identity fingerprint of user behavior | |
| CN104486346B (en) | A kind of springboard machine system | |
| CN109587125B (en) | Network security big data analysis method, system and related device | |
| CN106708700B (en) | A kind of O&M monitoring method and device applied to server-side | |
| CN105138709B (en) | Remote evidence taking system based on physical memory analysis | |
| CN105825094A (en) | Method and apparatus for managing identity data discovered from network data traffic | |
| US9807125B2 (en) | System and method for tracking and auditing data access in a network environment | |
| CN107004088A (en) | Determining device, determine method and determination program | |
| CN104640105B (en) | Associated method and system is analyzed and threatened to mobile phone viruses | |
| KR101503701B1 (en) | Method and Apparatus for Protecting Information Based on Big Data | |
| KR20140035146A (en) | Apparatus and method for information security | |
| CN107409134A (en) | Method card analysis | |
| CN113572757B (en) | Server access risk monitoring method and device | |
| CN116562931A (en) | Method, device, equipment and storage medium for processing consumption coupon transaction data | |
| CN107872440A (en) | Identification authentication methods, devices and systems | |
| CN107689958A (en) | A kind of network audit subsystem applied to cloud auditing system | |
| CN111800292A (en) | Early warning method and device based on historical flow, computer equipment and storage medium | |
| CN109840704A (en) | A kind of wisdom control of stamping system | |
| CN113709170A (en) | Asset safe operation system, method and device | |
| CN104579771B (en) | A kind of analysis method for the action trail that application system is published to user | |
| CN112437034B (en) | False terminal detection method and device, storage medium and electronic device | |
| CN110891071A (en) | Network traffic information acquisition method, device and related equipment | |
| CN116886440A (en) | Threat information production method, threat information production device, threat information production equipment and storage medium | |
| CN101286903B (en) | Method for enhancing integrity of sessions in network audit field |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant |