CN106940697B - A method and device for visualizing time series data - Google Patents

Abstract

The invention discloses a time sequence data visualization method, which comprises the steps of establishing a coordinate system graph by taking time and each entity account as coordinate axes according to a preset time range after determining an entity account to be detected and acquiring payment and receipt information among the entity accounts, and connecting the entity accounts with the payment and receipt information among the coordinate system graphs through rays corresponding to the payment and receipt moments.

Description

A method and device for visualizing time series data

technical field

The present application relates to the field of communication technologies, and in particular, to a method for visualizing time series data. The present application also relates to a time series data visualization device.

Background technique

In people's current Internet behavior, entity accounts are generally used to refer to participants in activities, and entity accounts can be accounts, natural persons, mobile phone numbers, enterprises, and so on. Activity between entity accounts is a common phenomenon in nature, and activities are divided into normal and abnormal. Analyzing and discovering anomalies in social activities (especially in the financial field) is of great significance for maintaining social stability and financial security. Therefore, anomaly detection, which is used to find some activities that are different from others (such as fraudulent transactions, money laundering transactions, etc. from capital flows), has increasingly become the focus of Internet platform operators or service providers.

In the process of anomaly detection, time series data is a very important analysis factor. Time series data is data with time information. Taking capital transaction data as an example, each capital transaction has a time point. The traditional time series anomaly analysis method generally uses feature extraction, extracts many features (such as the average number of interactions per day) from the time series data, and then uses statistical learning methods to discriminate whether the anomalies are abnormal or not. This method is more efficient and does not require manual intervention. Unusual activity can be detected. However, it is difficult to intuitively display and understand the method of time series anomaly analysis based on statistical learning. Statistical learning requires a sample set. The quality of the sample set determines the performance of the discrimination, and the statistical learning method can only learn the abnormal pattern of the sample set. Could not discover new patterns. Therefore, how to display transactions between different entity accounts through the time dimension, so as to further assist technicians to improve the efficiency of anomaly detection, has become an urgent technical problem to be solved by those skilled in the art.

SUMMARY OF THE INVENTION

The present application provides a time series data visualization method, which can generate an intuitive and easy-to-view visualization graph based on the time series data of an existing entity account, and can adjust the visualization graph adaptively, thereby facilitating data analysis by analysts and improving data processing. efficiency. The method includes:

Acquiring payment information between various entity accounts, where the entity accounts include a first entity account that initiates payment and a second entity account that receives payment;

Establish a Cartesian coordinate system graph with time and each of the entity accounts as coordinate axes;

Corresponding to the moment of each payment and receipt, the entity accounts with payment and payment information in the coordinate system graph are connected to each other through rays;

Wherein, each of the rays is in one-to-one correspondence with each of the payment and receipt information, the first entity account is the starting point of the ray, and the second entity account is the end point of the ray.

Preferably, the time coordinate axis in the coordinate system graph is provided with a time range selection slider, further comprising:

When the left border or right border of the time range selection slider is dragged, keep the span of the time range unchanged, and simultaneously change the time of the time axis according to the dragging direction of the left border or right border start and end of time;

When the time range selection slider is dragged, the time display density of the time axis on the left side of the time range selection slider and the time range selection slider are respectively adjusted according to the lengths of the left and right frames after dragging The time on the right time axis shows the density.

Preferably, it also includes:

When receiving the user's display instruction for the ray in the coordinate system graphic, display the detailed information of the payment information corresponding to the ray, and put away the detailed information after the user's display instruction is revoked;

When a user's selection instruction for a ray in the coordinate system graph is received, the detailed information of the payment and payment information corresponding to the ray is displayed and fixed.

Preferably, it also includes:

When receiving the display instruction from the user for the entity account in the coordinate system graph, generate and display interactive summary information according to all the receipt and payment information of the entity account within the time range, and according to the type of the display instruction Change the display effect between rays of the entity account and other entity accounts.

Preferably, after connecting the entity accounts that have payment and receipt information with each other in the coordinate system graph through rays, the method further includes:

When receiving the user's frame selection instruction for the area in the coordinate system graph, modify the time range of the time axis of the coordinate system graph to the time range corresponding to the frame selection instruction, and update the coordinate system graph .

Preferably, the method further includes, based on the user's query authority, displaying the payment information between the entity accounts to the user, including:

If the user has the query authority, display the entity accounts of all current users to the user, and determine the entity account to be detected according to the user's selection operation;

If the user does not have the query authority, the entity accounts of other users who currently have payment and receipt information with the user are displayed to the user, and the entity account to be detected is determined according to the user's selection operation.

Correspondingly, the present application also proposes a time series data visualization device, including:

an acquisition module, which acquires payment and receipt information between various entity accounts, where the entity accounts include a first entity account that initiates payment and a second entity account that receives payment;

Establishing a module to establish a Cartesian coordinate system graph with time and each of the entity accounts as coordinate axes;

The connection module, corresponding to each time of payment and receipt, connects the entity accounts with payment and payment information in the coordinate system graph to each other through rays;

Wherein, each of the rays is in one-to-one correspondence with each of the payment and receipt information, the first entity account is the starting point of the ray, and the second entity account is the end point of the ray.

Preferably, the time coordinate axis in the coordinate system graph is provided with a time range selection slider, further comprising:

The adjustment module, when the left border or right border of the time range selection slider is dragged, keeps the span of the time range unchanged, and simultaneously changes the time according to the dragging direction of the left border or the right border The time start point and time end point of the coordinate axis, and when the time range selection slider is dragged, adjust the time coordinate axis on the left side of the time range selection slider according to the lengths of the dragged left border and right border respectively. The time display density and the time display density of the time axis to the right of the time range selection slider.

Preferably, it also includes:

The presentation module, when receiving the presentation instruction of the user for the ray in the coordinate system graph, displays the detailed information of the payment and payment information corresponding to the ray, and folds the presentation instruction after the user's presentation instruction is revoked Detailed information, and when a user's selection instruction for a ray in the coordinate system graph is received, the detailed information of the payment and payment information corresponding to the ray is displayed and fixed.

Preferably, it also includes:

The display module, when receiving the user's display instruction for the entity account in the coordinate system graph, generates and displays the interactive summary information according to all the receipt and payment information of the entity account within the time range, and according to the The type of presentation instruction changes the presentation effect between rays of the entity account and other entity accounts.

Preferably, it also includes:

The update module, when receiving the user's frame selection instruction for the area in the coordinate system graphic, modifies the time range of the time axis of the coordinate system graphic to the time range corresponding to the frame selection instruction, and updates the time range of the frame selection instruction. Coordinate system graphics.

Preferably, based on the user's query authority, the payment information between the entity accounts is displayed to the user, further comprising:

The determining module, when the user has the query authority, displays the entity accounts of all current users to the user, and determines the entity account to be detected according to the user's selection operation, and when the user does not have all the entity accounts The query permission is displayed to the user, and the entity accounts of other users who currently have payment information with the user are displayed to the user, and the entity account to be detected is determined according to the user's selection operation.

It can be seen that, by applying the technical solution of the present application, after determining the entity account to be detected and obtaining the payment and receipt information between the entity accounts, the establishment can be established with time and each entity account as the coordinate axis according to the preset time range. The coordinate system graphics, and corresponding to the moment of each payment and payment, the entity accounts with the payment and payment information in the coordinate system graphics are connected to each other through rays. Visual graphics can show transaction details of entity account activities over a period of time, thereby assisting technicians to quickly determine whether there are suspicious transactions and activities, and improving data processing efficiency.

Description of drawings

1 is a schematic flowchart of a time series data visualization method proposed by the application;

2 is a schematic diagram of selecting an entity account in a specific embodiment of the present application;

3 is a schematic diagram of a time series data visualization graph proposed by a specific embodiment of the present application;

4 is a schematic diagram of time range selection in a specific embodiment of the present application;

5 is a schematic diagram of interactive display of activities in a specific embodiment of the present application;

6 is a schematic diagram of a summary display of entity account activities in a specific embodiment of the present application;

FIG. 7 is a schematic diagram of frame selection and magnification in a specific embodiment of the present application;

FIG. 8 is a schematic structural diagram of a time series data visualization device proposed by the present application.

Detailed ways

In view of the problem that the time series data of entity accounts cannot be displayed intuitively and conveniently in the prior art, the present application proposes a time series data visualization method, which enables technicians to Analyze the interaction activities between multiple entity accounts in the time dimension, and adjust the time range of the analysis, so as to intuitively display the intensity, density and trend of the entity account activities, which greatly improves the detection and positioning efficiency of abnormal activities.

As shown in FIG. 1 , a schematic flowchart of a time series data visualization method proposed by this application includes the following steps:

S101: Acquire payment and receipt information between various entity accounts, where the entity accounts include a first entity account that initiates payment and a second entity account that receives payment.

It should be noted that the first entity account and the second entity account in this application are only used to distinguish the roles of the payee and the payer. Correspondingly, those skilled in the art can also use other naming methods to distinguish the two. , these all belong to the protection scope of the present application.

Since this application aims to generate a visual image of the transfer records in the form of data between existing accounts. Therefore, it is first necessary to determine the accounts that need targeted operations. The account can be the user's payment account or bank account. There is often money or other payment and payment information with similar currency functions between these accounts. The technician can flexibly set this based on the actual application scenario, which does not affect the the scope of protection of this application.

Since the current interaction data between each user is generally kept in the browser in the form of Json, in the specific embodiment of this application, after the operator inputs a batch of entity accounts, the specific embodiment will use the The dynamic programming language (eg JavaScript) of the dynamic interaction of the web page requests the detailed data of the interaction among the batches of users from the background database. In order to enable technicians to observe users who only need to pay attention, the preferred embodiment of the present application also provides the function of screening entity accounts. As shown in FIG. 2, when 10 entity accounts are entered, the In the process of account activity, technicians may need to pay special attention to certain entity accounts. At this time, by filtering entity accounts, they can only see the interaction between these entity accounts, and provide clear and select all for batch operations. That is, the current entity account is screened based on the user's selection, so as to determine the entity account to be detected.

In addition, since the collection and payment information between multiple entity accounts targeted by the technical solution of the present application is observed, and these processing objects belong to the sensitive information of the user, the preferred embodiment of the present application is based on the user's query for different operators. The right to display the payment information between the entity accounts to the user, specifically, after receiving the user's time series data query request, determine the user's query authority, and process based on the following results:

(1) If the user has the query authority, display the entity accounts of all current users to the user, and determine the entity account to be detected according to the user's selection operation;

(2) If the user does not have the query authority, display the entity accounts of other users who currently have payment and receipt information with the user to the user, and determine the entity to be detected according to the user's selection operation account.

S102, a Cartesian coordinate system graph is established with time and each of the entity accounts as coordinate axes.

In most cases, operators only need to observe the receipt and payment information of entity accounts within a certain time range. Therefore, when establishing the coordinate axis graph, different accounts and time are used as the coordinate axis establishment factors. Specifically, what is shown in FIG. 3 is a specific coordinate system graph.

In order to facilitate the operator to observe the large-span time range, in a preferred embodiment of the present application, a time range selection slider is set for the center of the time axis in the established coordinate system graph. Drag and drop to achieve different viewing effects:

(1) When the left border or right border of the time range selection slider is dragged, keep the span of the time range unchanged, and simultaneously change the time coordinate according to the dragging direction of the left border or right border Time start and time end of the axis;

(2) When the time range selection slider is dragged, adjust the time display density of the time axis on the left side of the time range selection slider and the time range according to the lengths of the left and right frames after dragging Select the time display density for the time axis to the right of the slider.

Taking the coordinate graph shown in Figure 4 as an example, there is a time range selection slider below the coordinate graph. When the time range selection is required, the left border of the slider is stretched, the time range is extended forward, and the slider is stretched. Right border, the time range is extended backward, drag in the middle of the slider, save the time span unchanged, and the time start and end points are shifted forward or backward at the same time.

S103: Corresponding to each time of payment and receipt, connect entity accounts with payment and payment information in the coordinate system graph to each other through rays.

Wherein, each of the rays is in one-to-one correspondence with each of the payment and receipt information, the first entity account is the start point of the ray, and the second entity account is the end point of the ray.

After the coordinate graph corresponding to the entity account and time is established through S102, in this step, the corresponding connection lines can be set in the coordinate graph for the direct receipt and payment information of each entity account, so that the technician can visually see each entity Interaction records between accounts. At the same time, in order to enable operators to distinguish each entity account and its role in payment and receipt, the preferred embodiment of the present application sets the rays of each entity account to have different display effects, and at the same time adds a direction indication for the rays: initiate payment The first entity account of the ray is the starting point of the ray, and the second entity account that receives the payment is the end point of the ray. The specific effect diagram is shown in Figure 3.

After the corresponding diagram is displayed to the operator according to the current payment and receipt information between entity accounts, in order to further meet the operator's needs for operations on some factors in the diagram, in a preferred embodiment of the present application, for The following different functions provide corresponding implementation steps:

(1) Interactive display of activities

This specific embodiment provides different interaction modes based on the operator's mouse movement and mouse click: when receiving a user's display instruction for a ray in the coordinate system graphic, the display corresponds to the ray. The detailed information of the payment information, and the detailed information is put away after the user's display instruction is revoked; when the user's selection instruction for the ray in the coordinate system graph is received, the ray is displayed and fixed with the ray Details of the corresponding payment information. .

In the specific embodiment shown in Figure 5, after the entity account and time range are selected, the component will display the details of the activities in the current time range in the form of rays. The starting point of the ray represents the initiator of the activity, and the end point represents the recipient of the activity. For example, when the activity is a fund transaction, the starting point is the payer and the end point is the payee; when the mouse moves on the interactive ray, a floating window will pop up to display the detailed information of the activity; when the mouse is moved out, the floating window disappears; when the mouse clicks an interaction The line is, the floating window displaying the detailed information of the activity will be fixed, which is convenient for the operator to copy the information.

(2) Summary display of entity account activities

Although the diagram generated in S103 shows each receipt and payment information between the various entity accounts, the operator also needs to query the total amount of receipts and payments of the entity accounts, so when the user receives the coordinate system graphics When displaying the instruction of the entity account in , generate and display interactive summary information according to all the receipt and payment information of the entity account within the time range, and change the relationship between the entity account and other entity accounts according to the type of the display instruction. Display effect between rays.

In the specific embodiment shown in FIG. 6 , the ordinate on the left represents the entity account. When the mouse is moved to the entity account name, the component will dynamically calculate the interaction summary information of the entity account within the current time range. The summary information includes Start time, number of out-chains, number of in-chains, as well as out-flow and in-flow amounts for capital activities; click the entity account name, highlight the activity (in-chain) from this entity account to other entity accounts, and double-click the entity account name , highlight the activities of the entity account to other entity accounts and the activities of other entity accounts to the entity account (out chain + in chain).

(3) Frame selection enlargement and component stretching

When viewing the receipt and payment transaction graph of the entity account, the operator may need to carefully check the transaction in a certain area. Therefore, when receiving the user's frame selection instruction for the area in the coordinate system graph, the preferred embodiment will The time range of the time coordinate axis of the coordinate system graph is modified to the time range corresponding to the frame selection instruction, and the coordinate system graph is updated.

Taking the diagram of FIG. 7 as an example, in this specific embodiment, the operator can use the mouse to perform frame selection in the interactive display area, and the time range of exploration will be enlarged to the time range of frame selection, which is convenient for the operator to make intensive interactions. Zoom in on the activity. If the number of selected entity accounts is large, the upper border of the component can be stretched to adjust the height, so that the interaction details can be clearly viewed.

By applying the technical solutions of the above embodiments, operators can locate and discover abnormal behaviors of time-series activities in a timely manner. For example, by checking the capital transactions between several entities in the last three months, it can be easily seen as the intensity of capital transactions. , amount size, periodicity, so as to quickly determine whether it is suspicious transactions and activities.

In order to achieve the above technical purpose, the present application also proposes a time series data visualization device, as shown in FIG. 7 , including:

The obtaining module 810 obtains the payment information between each entity account, where the entity account includes a first entity account that initiates payment and a second entity account that receives payment;

Establishing module 820, using time and each of the entity accounts as coordinate axes to establish a Cartesian coordinate system graph;

The connection module 830, corresponding to each time of receipt and payment, connects entity accounts with payment and receipt information in the coordinate system graph to each other through rays;

Wherein, each of the rays is in one-to-one correspondence with each of the payment and receipt information, the first entity account is the starting point of the ray, and the second entity account is the end point of the ray.

In a specific application scenario, a time range selection slider is set in the center of the time coordinate axis in the coordinate system graph, and further includes:

The adjustment module, when the left border or right border of the time range selection slider is dragged, keeps the span of the time range unchanged, and simultaneously changes the time coordinate according to the dragging direction of the left border or the right border The time start point and time end point of the axis, and when the time range selection slider is dragged, adjust the time of the time axis on the left side of the time range selection slider according to the lengths of the left border and right border after dragging. Displays the density as well as the time display density of the time axis to the right of the time range selection slider.

In specific application scenarios, it also includes:

The presentation module, when receiving the presentation instruction of the user for the ray in the coordinate system graph, displays the detailed information of the payment and payment information corresponding to the ray, and folds the presentation instruction after the user's presentation instruction is revoked Detailed information, and when a user's selection instruction for a ray in the coordinate system graph is received, the detailed information of the payment and payment information corresponding to the ray is displayed and fixed.

In specific application scenarios, it also includes:

The display module, when receiving the user's display instruction for the entity account in the coordinate system graph, generates and displays the interactive summary information according to all the receipt and payment information of the entity account within the time range, and according to the The type of presentation instruction changes the presentation effect between rays of the entity account and other entity accounts.

In specific application scenarios, it also includes:

The update module, when receiving the user's frame selection instruction for the area in the coordinate system graphic, modifies the time range of the time axis of the coordinate system graphic to the time range corresponding to the frame selection instruction, and updates the time range of the frame selection instruction. Coordinate system graphics.

In a specific application scenario, the payment information between the entity accounts is displayed to the user based on the user's query authority, and further includes:

The determining module, when the user has the query authority, displays the entity accounts of all current users to the user, and determines the entity account to be detected according to the user's selection operation, and when the user does not have all the entity accounts The query permission is displayed to the user, and the entity accounts of other users who currently have payment information with the user are displayed to the user, and the entity account to be detected is determined according to the user's selection operation.

It can be seen that, by applying the technical solution of the present application, after determining the entity account to be detected and obtaining the payment and receipt information between the entity accounts, the establishment can be established with time and each entity account as the coordinate axis according to the preset time range. The coordinate system graphics, and corresponding to the moment of each payment and payment, the entity accounts with the payment and payment information in the coordinate system graphics are connected to each other through rays. Visual graphics can show transaction details of entity account activities over a period of time, thereby assisting technicians to quickly determine whether there are suspicious transactions and activities, and improving data processing efficiency.

From the description of the above embodiments, those skilled in the art can clearly understand that the present invention can be implemented by hardware, and can also be implemented by means of software plus a necessary general hardware platform. Based on this understanding, the technical solution of the present invention can be embodied in the form of a software product, and the software product can be stored in a non-volatile storage medium (which may be CD-ROM, U disk, mobile hard disk, etc.), including several The instructions are used to cause a computer device (which may be a personal computer, a server, or a network device, etc.) to execute the methods described in various implementation scenarios of the present invention.

Those skilled in the art can understand that the accompanying drawing is only a schematic diagram of a preferred implementation scenario, and the modules or processes in the accompanying drawing are not necessarily necessary to implement the present invention.

Those skilled in the art can understand that the modules in the device in the implementation scenario may be distributed in the device in the implementation scenario according to the description of the implementation scenario, or may be located in one or more devices different from the implementation scenario with corresponding changes. The modules of the above implementation scenarios may be combined into one module, or may be further split into multiple sub-modules.

The above serial numbers of the present invention are only for description, and do not represent the pros and cons of the implementation scenarios.

The above disclosures are only a few specific implementation scenarios of the present invention, however, the present invention is not limited thereto, and any changes that can be conceived by those skilled in the art should fall within the protection scope of the present invention.

Claims (10)

1. A method for visualizing time series data, comprising:

acquiring payment information among entity accounts, wherein the entity accounts comprise a first entity account initiating payment and a second entity account receiving payment;

establishing a rectangular coordinate system graph by taking time and each entity account as coordinate axes;

corresponding to each time of receiving and paying, connecting the entity accounts with the receiving and paying information among the coordinate system graphs with each other through rays;

the first entity account is used as a starting point of the ray, and the second entity account is used as an end point of the ray;

when a display instruction of a user for a ray in the coordinate system graph is received, detail information of collection and payment information corresponding to the ray is displayed, and the detail information is collected after the display instruction of the user is cancelled;

and when a selection instruction of a user for the ray in the coordinate system graph is received, displaying and fixing detailed information of the receipt and payment information corresponding to the ray.

2. The method of claim 1, wherein the time coordinate axis in the coordinate system graph is provided with a time range selection slider, further comprising:

when the left frame or the right frame of the time range selection slider is dragged, keeping the span of the time range unchanged, and simultaneously changing the time starting point and the time ending point of the time coordinate axis according to the dragging direction of the left frame or the right frame;

when the time range selection slider is dragged, respectively adjusting the time display density of the time coordinate axis on the left side of the time range selection slider and the time display density of the time coordinate axis on the right side of the time range selection slider according to the lengths of the left frame and the right frame after dragging.

3. The method of any of claims 1-2, further comprising:

when a display instruction of a user for an entity account in the coordinate system graph is received, generating and displaying interactive summary information according to all payment information of the entity account in a time range, and changing a display effect between rays of the entity account and other entity accounts according to the type of the display instruction.

4. The method of any one of claims 1-2, further comprising, after connecting physical accounts having payment receipt information with respect to each other in the coordinate system graph to each other by a ray, further comprising:

when receiving a region framing instruction in the coordinate system graph by a user, modifying the time range of the time coordinate axis of the coordinate system graph into the time range corresponding to the framing instruction, and updating the coordinate system graph.

5. The method of claim 1, further comprising presenting to the user payment and receipt information between the entity accounts based on the user's query authority, comprising:

if the user has the inquiry authority, displaying the entity accounts of all the current users to the user, and determining the entity account to be detected according to the selection operation of the user;

and if the user does not have the inquiry authority, displaying the entity accounts of other users who currently have payment receiving and paying information with the user to the user, and determining the entity account to be detected according to the selection operation of the user.

6. A time series data visualization apparatus, comprising:

the system comprises an acquisition module, a payment and receipt module and a payment and receipt module, wherein the acquisition module is used for acquiring payment and receipt information among entity accounts, and the entity accounts comprise a first entity account for initiating payment and a second entity account for receiving payment;

the establishing module is used for establishing a rectangular coordinate system graph by taking time and each entity account as coordinate axes;

the connecting module is used for connecting the entity accounts with the payment receiving and paying information among the entity accounts in the coordinate system graph through rays corresponding to the payment receiving and paying time;

the first entity account is a starting point of the ray, and the second entity account is an ending point of the ray;

the display module displays detail information of the collection and payment information corresponding to the ray when receiving a display instruction of a user for the ray in the coordinate system graph, collects the detail information after the display instruction of the user is cancelled, and displays and fixes the detail information of the collection and payment information corresponding to the ray when receiving a selection instruction of the user for the ray in the coordinate system graph.

7. The apparatus of claim 6, wherein the time axis in the coordinate system graph is provided with a time range selection slider, further comprising:

and the adjusting module keeps the span of the time range unchanged when the left frame or the right frame of the time range selection slider is dragged, simultaneously changes the time starting point and the time ending point of the time coordinate axis according to the dragging direction of the left frame or the right frame, and respectively adjusts the time display density of the time coordinate axis on the left side of the time range selection slider and the time display density of the time coordinate axis on the right side of the time range selection slider according to the lengths of the dragged left frame and the dragged right frame when the time range selection slider is dragged.

8. The apparatus of any of claims 6-7, further comprising:

and the display module generates and displays interactive summary information according to all the payment and receipt information of the entity account in a time range when receiving a display instruction of a user for the entity account in the coordinate system graph, and changes a display effect between the rays of the entity account and other entity accounts according to the type of the display instruction.

9. The apparatus of any of claims 6-7, further comprising:

and the updating module is used for modifying the time range of the time coordinate axis of the coordinate system graph into the time range corresponding to the framing instruction and updating the coordinate system graph when receiving the area framing instruction in the coordinate system graph by the user.

10. The apparatus of claim 6, wherein receipt and payment information between the entity accounts is presented to the user based on the user's query authority, further comprising:

and the determining module is used for displaying the entity accounts of all the current users to the users when the users have the inquiry authority, determining the entity account to be detected according to the selection operation of the users, displaying the entity accounts of other users who currently have payment receiving and paying information with the users to the users when the users do not have the inquiry authority, and determining the entity account to be detected according to the selection operation of the users.

Images