Specific embodiment
In order to realize the purpose of the application, the embodiment of the present application provides a kind of association road for determining different user
The method and apparatus in footpath, obtains the cyberrelationship data of first user and the cyberrelationship data of second user,
The cyberrelationship data are performed for characterizing the first user/second user using internet platform
The data that Internet service is produced, visitor of the cyberrelationship packet containing used login internet platform
The IP address of family end equipment and the first user/second user set up user's letter of socialization relation
It is at least one or various in breath, the first user/second user position information;According to
The cyberrelationship data of the first user and the cyberrelationship data of the second user, set up for described
The network of personal connections of first user and the second user;Based on the network of personal connections, the first user and institute are determined
State the associated path between second user.So, by obtaining the cyberrelationship data of different user, utilize
The network of personal connections that the cyberrelationship data for getting are set up between different user, and network of personal connections is utilized, it is determined that different
Associated path between user, cyberrelationship data that can be effectively according to different user determine different user
Associated path, and then for the quick degree of association determined between different user lays the foundation, improve identification different
The efficiency of incidence relation between user.
With reference to Figure of description, to the application, each embodiment is described in further detail.Obviously, institute
The embodiment of description is only some embodiments of the present application, rather than whole embodiments.Based on the application
In embodiment, it is all that those of ordinary skill in the art are obtained under the premise of creative work is not made
Other embodiments, belong to the scope of the application protection.
A kind of flow of the method for the associated path of determination different user that Fig. 1 is provided for the embodiment of the present application is shown
It is intended to.Methods described can be with as follows.
Step 101:Obtain the cyberrelationship data of first user and the cyberrelationship data of second user.
Wherein, the cyberrelationship data use interconnection for characterizing the first user/second user
Net platform performs the data that Internet service is produced.
The data that Internet service is produced are being performed using internet platform for different user, can formed mutually
The related network of networked platforms.In related network, equipment, the IP ground that user (people), user are commonly used
The informations such as location, position are into the node in network, pass of the user (people) and IP address, equipment between
Side in being abstracted into network if connection, the information (such as record of conversing, transfer accounts) between user and user, association
Number of times or the degree of association can be calculated in network between each node with the abstract weight as side according to each weight
Distance, and then the related network of internet platform can be generated according to distance value size.
Therefore, the IP of client device of the cyberrelationship packet containing used login internet platform
Address and the first user/second user set up the user profile of socialization relation, described first
It is at least one or various in user/second user position information.
In a step 101, due to the generation of the network case such as network fraud, existed by analyzing suspect
The data that network fraud behavior is produced are performed on internet platform, it may be determined that the network case such as network fraud
Occur whether as carried out by the suspect.But, some network cases belong to joint crime, or belong to
Gang crime, so needs to determine to be closed with the presence or absence of association between two suspects by data analysis
System.
With the presence or absence of before incidence relation between two targeted customers are analyzed, firstly, it is necessary to from log services
The cyberrelationship data of targeted customer are obtained in the database of device or the webserver.Here cyberrelationship
Data refer to the various data that targeted customer produces when Internet service is performed using internet platform, comprising
The data of used hardware device, also comprising the business datum produced in process of service execution, are also included in industry
The socialization relation data set up between targeted customer and other users in business implementation procedure, also uses comprising target
Positional information where family etc., does not limit here.
Described " first user " and " second user " can be referred to as target in the embodiment of the present application
User, then the number of described targeted customer can be multiple in the embodiment of the present application, for wherein
The different targeted customer of any two can using the scheme described in the embodiment of the present application judge between be
The no power that there is incidence relation or there is the degree of association of incidence relation.That is, the embodiment of the present application
Described in " first user " in " first " and " second user " in " second " it is not special
Implication, is only to refer to two different users.
Step 102:The cyberrelationship of cyberrelationship data and the second user according to the first user
Data, set up the network of personal connections for the first user and the second user.
In a step 102, the cyberrelationship data of first user and the cyberrelationship of second user are being got
During data, the cyberrelationship data of the first user are analyzed, set up the network of personal connections for the first user;
And/or, the cyberrelationship data of the second user are analyzed, set up the network of personal connections for the second user.
For example:Assuming that the thing used comprising first user in the cyberrelationship data of the first user for getting
The device identification of reason equipment and the IP address for being used, first user are held each time on internet platform
The positional information and first user that are used during row Internet service set up the other users of socialization relation
ID etc..So according to the cyberrelationship data of first user for getting, it may be determined that described the
The device identification of the physical equipment that one user commonly uses;Position letter where can also determining first user often
Breath;Can also determine to lead between first user in first user sets up the other users of socialization relation
Letter or data transmission times are more than the ID of the other users of setting numerical value.
So the analysis result based on the cyberrelationship data to first user, can set up for first user
Network of personal connections.In the network of personal connections, network node centered on first user, different types of other data/
The ID of other users is respectively other network nodes, between other network nodes and central network node
Set up directly/indirectly annexation.
Follow-up description for convenience, it is assumed here that the analysis knot based on the cyberrelationship data to first user
Really, can set up in the network of personal connections for first user comprising 6 network nodes, network node 11 is the
One user, 12~network node of network node 16 is marked for the user of different types of other data/other users
Know, be the structural representation of the association net set up for first user shown in such as Fig. 2 (a).
Be can be seen that from Fig. 2 (a) with the corresponding network node of first user is network of personal connections center, outwards
The multiple network nodes of radiation.
The cyberrelationship data of second user are analyzed using aforesaid way, and according to analysis result, are built
The vertical cyberrelationship net for second user.In the network of personal connections, network node centered on second user, no
The ID of other data/other users of same type is respectively other network nodes, other network nodes
Directly/indirectly annexation is set up between central network node.
Follow-up description for convenience, it is assumed here that the analysis knot based on the cyberrelationship data to second user
Really, can set up in the network of personal connections for second user comprising 6 network nodes, network node 21 is the
One user, 22~network node of network node 26 is marked for the user of different types of other data/other users
Know, be the structural representation of the association net set up for second user shown in such as Fig. 2 (b).
Be can be seen that from Fig. 2 (b) with the corresponding network node of second user is network of personal connections center, outwards
The multiple network nodes of radiation.
It should be noted that, although the network node in network node 12 in Fig. 2 (a) and Fig. 2 (b)
22 label is different, but analysis finds that network node 12 and network node 22 belong to same cyberrelationship
Data are (for example:Same physical equipment) corresponding network node;Same reason, network node 16
Same cyberrelationship data are fallen within network node 26 (for example:3rd user respectively with first user
Socialization relation is set up with second user) corresponding network node.
The network of personal connections for first user and the network of personal connections for second user are being respectively obtained, can be by closing
And mode obtain for first user and the network of personal connections for second user.
Still illustrated by taking above-mentioned Fig. 2 (a) and Fig. 2 (b) as an example.Will Fig. 2 (a) and Fig. 2 (b)
Merge, the network node in Fig. 2 (a) can be incorporated into Fig. 2 (b), it is also possible to by Fig. 2
B the network node in () is incorporated into Fig. 2 (a), can obtain being used for first shown in Fig. 3 (a)
Family and the schematic diagram of the network of personal connections for second user.
As can be seen that including identical cyberrelationship in Fig. 2 (a) and Fig. 2 (b) from Fig. 3 (a)
Merged at the corresponding network node of data.
In another embodiment of the application, the cyberrelationship data according to the first user and described
The cyberrelationship data of two users, set up the network of personal connections for the first user and the second user, also
Can obtain as follows:
The first step, for the cyberrelationship data of first user and the cyberrelationship number of second user that get
According to using the filtering rule of setting, respectively from the cyberrelationship data and second use of the first user
In the cyberrelationship data at family, the network pass for belonging to the first user and the second user jointly is filtered out
Coefficient evidence.
The filtering rule of described setting can be the net by comparing first user in the embodiment of the present application
The cyberrelationship data of network relation data and second user, select and not only belong to first user but also belong to the second use
The cyberrelationship data at family;Can also be capable of determining that to belong to the first user jointly by other means
With the cyberrelationship data of the second user, do not limit here.
Second step, according between the cyberrelationship data for filtering out and the different cyberrelationship data
Incidence relation, sets up the connected graph for the first user and the second user.
Wherein, the start node of the connected graph is the first user, and the terminal node of the connected graph is
The second user, the intermediate node of the connected graph is the cyberrelationship data for filtering out.
Because the cyberrelationship data for filtering out may belong between first user and/or second user
There is direct correlation relation, it is also possible to belong to and there is indirect association between first user and/or second user
Relation.
Still by taking Fig. 2 (a) and Fig. 2 (b) as an example, in the manner described above, it may be determined that network node 12 (or
Person's network node 22) and network node 16 (or network node 26) for belong to jointly it is described first use
Family and the cyberrelationship data of the second user.Wherein, network node 12 (or network node 22)
Belong to and there is direct correlation relation between first user and/or second user, network node 16 (or
Network node 26) belong to and there is indirect association relation between first user and/or second user, then
For the cyberrelationship data of indirect association relation, when connected graph is set up, it is thus necessary to determine that first user correspondence
The corresponding network node of network node/second user and set up indirect association relation network node between
Other network nodes, so, according to the cyberrelationship data for filtering out, other network nodes of determination
Corresponding cyberrelationship data, first user and second user, set up for first user and second user
Connected graph.As shown in Fig. 3 (b), to set up connecting for the first user and the second user
The structural representation of figure.
It should be noted that passing through screen relation data, it is possible to reduce follow-up amount of calculation, mitigate system
The computational load of system, lifting system performance.
Step 103:Based on the network of personal connections, the pass between the first user and the second user is determined
Connection path.
In step 103, either network of personal connections or connected graph, it is assumed that the corresponding network node of first user
It is start node, the corresponding network node of second user is terminal node, then traversal network of personal connections/connected graph,
Determine the access path between start node and terminal node.
Specifically, since the start node, travel through the connected graph, it is determined that from the start node to
Up to the path of the terminal node, and the path that will be determined is used as the first user with described second
Associated path between family;
And/or,
Since the terminal node, the connected graph is traveled through, it is determined that from described in the terminal node is reached
The path of beginning node, and the path that will be determined is used as between the first user and the second user
Associated path.
It should be noted that being directed to network of personal connections/connected graph, can be begun stepping through from start node, it is also possible to
Begun stepping through from terminal node, can also be begun stepping through from start node and terminal node respectively, the application reality
Apply and do not limit in example.
In another embodiment of the application, methods described also includes:
It is determined that the number of the associated path between the first user and the second user is more than or equal to 2
When, according to the subpath included in each associated path, calculate each road of the associated path
Footpath is worth;According to each path values of the associated path, selection wherein path values meet the pass of given threshold
Connection path is used as the crucial associated path between the first user and the second user.
Wherein, the subpath is obtained according to network node adjacent in the network of personal connections, the path values root
It is worth to according to the weight of the corresponding heterogeneous networks node of number or the subpath of the subpath, it is each
One cyberrelationship data of the individual network node correspondence.
It should be noted that subpath described in the embodiment of the present application, with the net shown in Fig. 3 (b)
Illustrated as a example by network node.Line between network node 11 and network node 13 can be referred to as one
Subpath, the line between network node 13 and network node 15 can be referred to as a single sub path again.
So in the path values of each associated path of calculating, can be according to each association road
The number of the subpath included in footpath, using the number as each path values of the associated path.
Still illustrated by taking the network node shown in Fig. 3 (b) as an example.Determine first user and second user
Between associated path include:Network node 11- network node 12- network nodes 21, network node 11- nets
Network node 12- network node 15- network node 16- network nodes 21, network node 11- network nodes 13-
Network node 15- network node 16- network nodes 21, network node 11- network node 13- network nodes 15-
Network node 12- network nodes 21.
Wherein, the number of the subpath of network node 11- network nodes 12- network nodes 21 is 2;Network
The number of the subpath of node 11- network node 12- network node 15- network node 16- network nodes 21 is
4;The subpath of network node 11- network node 13- network node 15- network node 16- network nodes 21
Number is 4;Network node 11- network node 13- network node 15- network node 12- network nodes 21
The number of subpath is 4.
Additionally, in the path values of each associated path of calculating, can also calculate in the following ways:
For each associated path, following operation is performed:
Wherein one associated path of selection, the subpath included in the associated path for determining selection;
According to the property value of the corresponding network node of each subpath, each son is calculated respectively
The weighted value in path, wherein, the property value of the network node is closed according to the corresponding network of the network node
The type of coefficient evidence determines;
According to each weighted value of the subpath, each path of the associated path is calculated
Value.
Aforesaid way can respectively determine the power of each single sub path according to the mode of figure side attribute in diagram data
Weight values, and then it is calculated each path values of associated path.
Still illustrated by taking the content shown in Fig. 3 (b) as an example.For example:Assuming that network node 12 is represented
Positional information, the cyberrelationship data 90 percent of network node 11 (i.e. first user) are in the position
Produce, the cyberrelationship data 20 percent of network node 21 (i.e. second user) are produced in the position
Raw, then the weighted value of the subpath of network node 11- network nodes 12 can be 0.9;Network node
The weighted value of the subpath of 21- network nodes 12 can be 0.1.
Again for example:Assuming that network node 13 represents the 3rd user, network node 15 represents fourth user, that
Business pass is set up between network node 11 (i.e. first user) and network node 13 (i.e. the 3rd user)
It is 1000 times;Network node 13 (i.e. the 3rd user) build and network node 15 (i.e. fourth user) between
Vertical business relations 100 times, then the weighted value of the subpath between network node 11- network nodes 13 can be with
It is 0.1;The weighted value of the subpath between network node 13- network nodes 15 can be 0.01.
After the weighted value for obtaining each single sub path, all sons that will can be included in an associated path
The weighted value summation in path obtains the path values of associated path;To can also be included in an associated path
The weighted value of all subpaths is averaged and obtains the path values of associated path;Can also be and calculated by other
Mode obtains the path values of associated path, is not specifically limited here.
Specifically, according to each path values of the associated path, selection wherein path values meet setting threshold
The associated path of value as the crucial associated path between the first user and the second user, including:
Path values maximum can be selected;Path values minimum can also be selected;It is also an option that path values are big
In a plurality of associated path of given threshold, it is not specifically limited in the embodiment of the present application, can be according to reality
Need unrestricted choice.
In another embodiment of the application, methods described also includes:
According to the path values of the crucial associated path, determine between the first user and the second user
The degree of association.
In the embodiment of the present application, it is calculated between different user after the path values of associated path, can be with
Determine the degree of association between different user according to the path values, and then aid in determining whether other criminals of joint crime
Guilty suspect.
The technical scheme provided by the embodiment of the present application, obtains the cyberrelationship data and second of first user
The cyberrelationship data of user, the cyberrelationship data are used to characterize the first user/second use
Family performs the data that Internet service is produced using internet platform, and the cyberrelationship packet is containing being used
Login internet platform client device IP address and the first user/second user build
In user profile, the first user/second user position information of vertical socialization relation extremely
Lack one or more;The network of cyberrelationship data and the second user according to the first user is closed
Coefficient evidence, sets up the network of personal connections for the first user and the second user;Based on the network of personal connections,
Determine the associated path between the first user and the second user.So, by obtaining different user
Cyberrelationship data, the network of personal connections set up between different user using the cyberrelationship data for getting, and
Using network of personal connections, the associated path between different user is determined, can effectively according to the network of different user
Relation data determines the associated path of different user, and then for the quick degree of association determined between different user is established
Fixed basis, improves the efficiency of incidence relation between identification different user.
A kind of device structure of the associated path of determination different user that Fig. 4 is provided for the embodiment of the present application is illustrated
Figure.The equipment includes:Acquiring unit 41, unit 42 and determining unit 43 are set up, wherein:
Acquiring unit 41, for obtaining the cyberrelationship data of first user and the cyberrelationship number of second user
According to, wherein, the cyberrelationship data use internet for characterizing the first user/second user
Platform performs the data that Internet service is produced, and the cyberrelationship packet contains used login internet
The IP address of the client device of platform and the first user/second user set up socialization relation
User profile, the first user/second user position information in it is at least one or many
Kind;
Unit 42 is set up, for cyberrelationship data and the net of the second user according to the first user
Network relation data, sets up the network of personal connections for the first user and the second user;
Determining unit 43, for based on the network of personal connections, determine the first user and the second user it
Between associated path.
Alternatively, the equipment also includes:Computing unit 44, wherein:
Computing unit 44, for it is determined that associated path between the first user and the second user
When number is more than or equal to 2, according to the subpath included in each associated path, each institute is calculated
The path values of associated path are stated, wherein, the subpath is obtained according to network node adjacent in the network of personal connections
Arrive, the path values are according to the corresponding heterogeneous networks node of number or the subpath of the subpath
Weight is worth to, each one described cyberrelationship data of the network node correspondence;
The determining unit 43, specifically for according to each path values of the associated path, selection is wherein
Path values meet the associated path of given threshold as the pass between the first user and the second user
Key associated path.
In another embodiment of the application, the computing unit 44 is according to each associated path
In the subpath that includes, calculate each path values of the associated path, including:
For each associated path, following operation is performed:
Wherein one associated path of selection, the subpath included in the associated path for determining selection;
According to the property value of the corresponding network node of each subpath, each son is calculated respectively
The weighted value in path, wherein, the property value of the network node is closed according to the corresponding network of the network node
The type of coefficient evidence determines;
According to each weighted value of the subpath, each path of the associated path is calculated
Value.
In another embodiment of the application, the computing unit 44 is according to each associated path
In the subpath that includes, calculate each path values of the associated path, including:
According to the number of the subpath included in each associated path, using the number as each
The path values of the associated path.
In another embodiment of the application, the determining unit 43 is additionally operable to according to the crucial association
The path values in path, determine the degree of association between the first user and the second user.
In another embodiment of the application, the network for setting up unit 42 according to the first user
The cyberrelationship data of relation data and the second user, set up and are directed to the first user and described second
The network of personal connections of user, including:
Using the filtering rule of setting, from the cyberrelationship data of the first user and the second user
In cyberrelationship data, the cyberrelationship number for belonging to the first user and the second user jointly is filtered out
According to;
Closed according to the association between the cyberrelationship data for filtering out and the different cyberrelationship data
System, set up the connected graph for the first user and the second user, wherein, the connected graph rises
Beginning node is the first user, and the terminal node of the connected graph is the second user, the connected graph
Intermediate node be the cyberrelationship data for filtering out.
In another embodiment of the application, the determining unit 42 is based on the network of personal connections, determines institute
The associated path between first user and the second user is stated, including:
Since the start node, the connected graph is traveled through, it is determined that reaching the end from the start node
The only path of node, and the path that will be determined is used as between the first user and the second user
Associated path;
And/or,
Since the terminal node, the connected graph is traveled through, it is determined that from described in the terminal node is reached
The path of beginning node, and the path that will be determined is used as between the first user and the second user
Associated path.
It should be noted that the equipment provided in the embodiment of the present application can be realized by software mode,
Can be realized by as hardware modes such as processors, do not limited here.What the embodiment of the present application was provided sets
The standby cyberrelationship data by obtaining different user, different use are set up using the cyberrelationship data for getting
Network of personal connections between family, and network of personal connections is utilized, determine the associated path between different user, can be effectively
Cyberrelationship data according to different user determine the associated path of different user, and then determine difference for quick
The degree of association between user lays the foundation, and improves the efficiency of incidence relation between identification different user.
It will be understood by those skilled in the art that embodiments herein can be provided as method, device (equipment),
Or computer program product.Therefore, the application can using complete hardware embodiment, complete software embodiment,
Or the form of the embodiment in terms of combination software and hardware.And, the application can use at one or more it
In include computer-usable storage medium (the including but not limited to disk storage of computer usable program code
Device, CD-ROM, optical memory etc.) on implement computer program product form.
The application is with reference to the method according to the embodiment of the present application, device (equipment) and computer program product
Flow chart and/or block diagram describe.It should be understood that can by computer program instructions realize flow chart and/or
Flow in each flow and/or square frame and flow chart and/or block diagram and/or square frame in block diagram
With reference to.These computer program instructions to all-purpose computer, special-purpose computer, Embedded Processor can be provided
Or the processor of other programmable data processing devices is producing a machine so that by computer or other
The instruction of the computing device of programmable data processing device produce for realizing in one flow of flow chart or
The device of the function of being specified in one square frame of multiple flows and/or block diagram or multiple square frames.
These computer program instructions may be alternatively stored in can guide computer or the treatment of other programmable datas to set
In the standby computer-readable memory for working in a specific way so that storage is in the computer-readable memory
Instruction produce include the manufacture of command device, the command device realization in one flow of flow chart or multiple
The function of being specified in one square frame of flow and/or block diagram or multiple square frames.
These computer program instructions can be also loaded into computer or other programmable data processing devices, made
Obtain and series of operation steps is performed on computer or other programmable devices to produce computer implemented place
Reason, so as to the instruction performed on computer or other programmable devices is provided for realizing in flow chart one
The step of function of being specified in flow or multiple one square frame of flow and/or block diagram or multiple square frames.
Although having been described for the preferred embodiment of the application, those skilled in the art once know base
This creative concept, then can make other change and modification to these embodiments.So, appended right will
Ask and be intended to be construed to include preferred embodiment and fall into having altered and changing for the application scope.
Obviously, those skilled in the art can carry out various changes and modification without deviating from this Shen to the application
Spirit and scope please.So, if the application these modification and modification belong to the application claim and
Within the scope of its equivalent technologies, then the application is also intended to comprising these changes and modification.