CN110147967A - Risk prevention system method and device - Google Patents

Risk prevention system method and device Download PDF

Info

Publication number
CN110147967A
CN110147967A CN201910452218.3A CN201910452218A CN110147967A CN 110147967 A CN110147967 A CN 110147967A CN 201910452218 A CN201910452218 A CN 201910452218A CN 110147967 A CN110147967 A CN 110147967A
Authority
CN
China
Prior art keywords
risk
event
information
risk identification
stage
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201910452218.3A
Other languages
Chinese (zh)
Other versions
CN110147967B (en
Inventor
周荣旺
杨程远
杨志雄
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Advanced New Technologies Co Ltd
Advantageous New Technologies Co Ltd
Original Assignee
Alibaba Group Holding Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Alibaba Group Holding Ltd filed Critical Alibaba Group Holding Ltd
Priority to CN201910452218.3A priority Critical patent/CN110147967B/en
Publication of CN110147967A publication Critical patent/CN110147967A/en
Application granted granted Critical
Publication of CN110147967B publication Critical patent/CN110147967B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q10/00—Administration; Management
    • G06Q10/06—Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
    • G06Q10/063—Operations research, analysis or management
    • G06Q10/0635—Risk analysis of enterprise or organisation activities
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q10/00—Administration; Management
    • G06Q10/06—Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
    • G06Q10/067—Enterprise or organisation modelling

Landscapes

  • Business, Economics & Management (AREA)
  • Human Resources & Organizations (AREA)
  • Engineering & Computer Science (AREA)
  • Strategic Management (AREA)
  • Entrepreneurship & Innovation (AREA)
  • Economics (AREA)
  • Operations Research (AREA)
  • Physics & Mathematics (AREA)
  • Game Theory and Decision Science (AREA)
  • Marketing (AREA)
  • Development Economics (AREA)
  • Quality & Reliability (AREA)
  • Tourism & Hospitality (AREA)
  • Educational Administration (AREA)
  • General Business, Economics & Management (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
  • Telephonic Communication Services (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

This specification one or more embodiment discloses a kind of risk prevention system method and device, to promote the effect of risk prevention system.The described method includes: when receive it is from client, for first event execution request when, determine the first event corresponding first execution stage；The stage is executed according to described first, determines the first risk identification strategy for being directed to the first event；Wherein, the different execution stages corresponds to different risk identification strategies；Risk identification is carried out to the first event according to the first risk identification strategy, obtains the first risk identification result；And the corresponding risk assessment information of the first event is determined according to the first risk identification result；The risk assessment information is sent to the client, so that the client carries out corresponding risk prevention system to the first event according to the risk assessment information.

Description

Risk prevention system method and device
Technical field
This specification is related to risk prevention system technical field more particularly to a kind of risk prevention system method and device.
Background technique
In the prior art, in order to attract clients, each airline makes member's system customer-centric, and handle one after another Mileage is fed back by way of integral in member's system, and the modes disks such as marketing activity, integral system and integral store are passed through Entire member's system living makes user be ready to enter and use the official website of airline along with strategies such as the cheap tickets of official website.But It is due to lacking risk prevention system, black produce falsely uses a large amount of member of generation by rubbish registration or identity, so that airline throws The integral or marketing resource entered is largely ulled up wool, and member's system of airline is caused to perform practically no function.
In view of the above-mentioned problems, solution on the market is usually the level or primitive rule level from system prevention and control at present It sets out, such as APP reinforcing, junk traffic prevention and control, IP blacklist, the verifying of more elements etc..Although these methods are to a certain extent It solves the machine lot size problem of boat trip, the cost of black production can be increased, but very serious to bothering for normal users, and because Interests are sufficiently large, black production can bypass system prevention and control, therefore the risk control for service layer in such a way that machine and people combine The problem of processed, can not still solve.
Summary of the invention
The purpose of this specification one or more embodiment is to provide a kind of risk prevention system method and device, to promote wind The effect of dangerous prevention and control.
In order to solve the above technical problems, this specification one or more embodiment is achieved in that
On the one hand, this specification one or more embodiment provides a kind of risk prevention system method, comprising:
When receive it is from client, for first event execution request when, determine that the first event is corresponding First executes the stage；
The stage is executed according to described first, determines the first risk identification strategy for being directed to the first event；Wherein, different The execution stage correspond to different risk identification strategies；
Risk identification is carried out to the first event according to the first risk identification strategy, obtains the first risk identification knot Fruit；And the corresponding risk assessment information of the first event is determined according to the first risk identification result；
The risk assessment information is sent to the client, so that the client is according to the risk assessment information Corresponding risk prevention system is carried out to the first event.
In one embodiment, described that the corresponding risk of the first event is determined according to the first risk identification result Assess information；Include:
Determine at least one second execution stage by the client executing and before the first execution stage；
Obtain corresponding second risk identification result of each second execution stage；
According to each second risk identification result and first risk identification as a result, determining that the first event is corresponding The risk assessment information.
In one embodiment, the first risk identification result includes the first risk assessment value；Second risk is known Other result includes the second risk assessment value；The risk assessment information includes overall risk assessed value；
Correspondingly, it is described according to each second risk identification result and first risk identification as a result, determine described in The corresponding risk assessment information of first event, comprising:
Determine each second risk identification result and the corresponding weight of the first risk identification result；
According to each second risk identification result and the corresponding weight of the first risk identification result, to each institute It states the second risk assessment value and the first risk assessment value is weighted, it is corresponding described total to obtain the first event Risk assessment value.
In one embodiment, the risk identification strategy includes air control model；The air control model is according to each execution Made of the event information of multiple historical events in stage and the corresponding historical risk recognition result training of each historical events；
Correspondingly, described execute the stage according to described first, the first risk identification plan for being directed to the first event is determined Slightly；Risk identification is carried out to the first event according to the first risk identification strategy, obtains the first risk identification result；Packet It includes:
According to the corresponding relationship between preset execution stage and air control model, determine that the first execution stage is corresponding First air control model；
Risk identification is carried out to the first event according to the first air control model, obtains the first risk identification knot Fruit.
In one embodiment, the method also includes:
User is obtained to the feedback information of each execution stage corresponding risk identification result；
Determine that the corresponding third of the feedback information executes the stage；And determine that the third executes the stage corresponding second Air control model；
Stage corresponding risk identification result and the feedback information are executed according to the third, rank is executed to the third The corresponding second air control model of section is updated.
In one embodiment, the risk assessment information includes the risk class of the first event；
Correspondingly, described be sent to the client for the risk assessment information, so that the client is according to Risk assessment information carries out corresponding risk prevention system to the first event, comprising:
According to the corresponding relationship between preset risk class and air control strategy, the risk class of the first event is determined The first corresponding air control strategy；
The risk class of the first event and its corresponding first air control strategy are sent to the client, with The client is set to carry out corresponding risk prevention system to the first event according to the first air control strategy.
In one embodiment, the risk class includes low risk level, risk grade or high-risk grade；
Correspondingly, the corresponding relationship according between preset risk class and air control strategy, determines first thing First air control strategy corresponding to the risk class of part, comprising:
When the risk class of the first event is the risk grade, the first air control strategy is determined to utilize Specified risk identification mode carries out quadratic risk function identification to the first event；
Wherein, the specified risk identification mode includes at least one of short-message verification, biological characteristic validation identification side Formula.
In one embodiment, the method also includes:
Determine the user information for executing the first user of the first event；
According to the user information, the second user for meeting default related condition between first user is excavated；
According to the corresponding risk assessment information of the first event, the second thing performed by the second user is predicted The corresponding risk assessment information of part.
In one embodiment, the default related condition of the satisfaction includes at least one of the following:
The first specify information in the user information is identical；
The second specify information in the user information has the social networks of specified type；
Communication number between communication information in the user information is more than preset value；
Wherein, the user information include certificate information, account information, communication information, in used facility information At least one of.
On the other hand, this specification one or more embodiment provides a kind of risk prevention system device, comprising:
First determining module, for when receive it is from client, for first event execution request when, determine institute State the first event corresponding first execution stage；
Second determining module determines the first risk for being directed to the first event for executing the stage according to described first Recognition strategy；Wherein, the different execution stages corresponds to different risk identification strategies；
Identification and determining module, for carrying out risk knowledge to the first event according to the first risk identification strategy Not, the first risk identification result is obtained；And the corresponding risk of the first event is determined according to the first risk identification result Assess information；
Sending module, for the risk assessment information to be sent to the client, so that the client is according to institute It states risk assessment information and corresponding risk prevention system is carried out to the first event.
In one embodiment, the identification and determining module include:
First determination unit, for determining by the client executing and before the first execution stage at least One second execution stage；
Acquiring unit, for obtaining corresponding second risk identification result of each second execution stage；
Second determination unit is used for according to each second risk identification result and first risk identification as a result, really Determine the corresponding risk assessment information of the first event.
In one embodiment, the first risk identification result includes the first risk assessment value；Second risk is known Other result includes the second risk assessment value；The risk assessment information includes overall risk assessed value；
Correspondingly, second determination unit is also used to:
Determine each second risk identification result and the corresponding weight of the first risk identification result；
According to each second risk identification result and the corresponding weight of the first risk identification result, to each institute It states the second risk assessment value and the first risk assessment value is weighted, it is corresponding described total to obtain the first event Risk assessment value.
In one embodiment, the risk identification strategy includes air control model；The air control model is according to each execution Made of the event information of multiple historical events in stage and the corresponding historical risk recognition result training of each historical events；
Correspondingly, second determining module includes:
Third determination unit, described in determining according to the corresponding relationship between preset execution stage and air control model First executes stage corresponding first air control model；
The identification and determining module include:
Recognition unit obtains described for carrying out risk identification to the first event according to the first air control model First risk identification result.
In one embodiment, described device further include:
Module is obtained, for obtaining user to the feedback letter of each execution stage corresponding risk identification result Breath；
Third determining module, for determining that the corresponding third of the feedback information executes the stage；And determine that the third is held The corresponding second air control model of row order section；
Update module is right for executing stage corresponding risk identification result and the feedback information according to the third The third executes the stage corresponding second air control model and is updated.
In one embodiment, the risk assessment information includes the risk class of the first event；
Correspondingly, the sending module includes:
4th determination unit, described in determining according to the corresponding relationship between preset risk class and air control strategy First air control strategy corresponding to the risk class of first event；
Transmission unit, for the risk class of the first event and its corresponding first air control strategy to be sent to The client is prevented so that the client carries out corresponding risk to the first event according to the first air control strategy Control.
In one embodiment, the risk class includes low risk level, risk grade or high-risk grade；
Correspondingly, the 4th determination unit is also used to:
When the risk class of the first event is the risk grade, the first air control strategy is determined to utilize Specified risk identification mode carries out quadratic risk function identification to the first event；
Wherein, the specified risk identification mode includes at least one of short-message verification, biological characteristic validation identification side Formula.
In one embodiment, described device further include:
4th determining module, for determining the user information for executing the first user of the first event；
Excavating gear, for according to the user information, excavating and meeting default correlation item between first user The second user of part；
Prediction module, for predicting the second user according to the corresponding risk assessment information of the first event The corresponding risk assessment information of performed second event.
In one embodiment, the default related condition of the satisfaction includes at least one of the following:
The first specify information in the user information is identical；
The second specify information in the user information has the social networks of specified type；
Communication number between communication information in the user information is more than preset value；
Wherein, the user information include certificate information, account information, communication information, in used facility information At least one of.
In another aspect, this specification one or more embodiment provides a kind of risk prevention system equipment, comprising:
Processor；And
It is arranged to the memory of storage computer executable instructions, the executable instruction makes the place when executed Manage device:
When receive it is from client, for first event execution request when, determine that the first event is corresponding First executes the stage；
The stage is executed according to described first, determines the first risk identification strategy for being directed to the first event；Wherein, different The execution stage correspond to different risk identification strategies；
Risk identification is carried out to the first event according to the first risk identification strategy, obtains the first risk identification knot Fruit；And the corresponding risk assessment information of the first event is determined according to the first risk identification result；
The risk assessment information is sent to the client, so that the client is according to the risk assessment information Corresponding risk prevention system is carried out to the first event.
In another aspect, the embodiment of the present application provides a kind of storage medium, for storing computer executable instructions, it is described can It executes instruction and realizes following below scheme when executed:
When receive it is from client, for first event execution request when, determine that the first event is corresponding First executes the stage；
The stage is executed according to described first, determines the first risk identification strategy for being directed to the first event；Wherein, different The execution stage correspond to different risk identification strategies；
Risk identification is carried out to the first event according to the first risk identification strategy, obtains the first risk identification knot Fruit；And the corresponding risk assessment information of the first event is determined according to the first risk identification result；
The risk assessment information is sent to the client, so that the client is according to the risk assessment information Corresponding risk prevention system is carried out to the first event.
Using the technical solution of this specification one or more embodiment, can receive it is from client, be directed to When the execution request of first event, the first event corresponding first execution stage is determined, and needle is determined according to the first execution stage To the first risk identification strategy of first event, wherein the different execution stages correspond to different risk identification strategies；And then root Risk identification is carried out to first event according to the first risk identification strategy, and is determined according to the first risk identification result that identification obtains The corresponding risk assessment information of first event.As it can be seen that the technical solution when carrying out risk prevention system, can be directed to different events The execution stage uses different risk prevention system strategies, so that risk prevention system is more targeted, it is equal compared to previous any stage For by the way of same strategy, it can targetedly identify that different event executes the potential risk in stage.In addition, should Technical solution is enabled a client to according to risk assessment information by the way that risk assessment information is sent to client to the first thing Part carries out corresponding risk prevention system, so that the risk problem that may be faced in solution business, realizes the high efficiency of risk prevention system.
Detailed description of the invention
In order to illustrate more clearly of this specification one or more embodiment or technical solution in the prior art, below will A brief introduction will be made to the drawings that need to be used in the embodiment or the description of the prior art, it should be apparent that, it is described below Attached drawing is only some embodiments recorded in this specification one or more embodiment, and those of ordinary skill in the art are come It says, without any creative labor, is also possible to obtain other drawings based on these drawings.
Fig. 1 is the schematic flow chart according to a kind of risk prevention system method of one embodiment of this specification；
Fig. 2 is the air control strategy schematic diagram in a kind of risk prevention system method according to one embodiment of this specification；
Fig. 3 is the schematic block diagram according to a kind of risk prevention system device of one embodiment of this specification；
Fig. 4 is the schematic block diagram according to a kind of risk prevention system equipment of one embodiment of this specification.
Specific embodiment
This specification one or more embodiment provides a kind of risk prevention system method and device, to promote risk prevention system Effect.
In order to make those skilled in the art more fully understand the technical solution in this specification one or more embodiment, Below in conjunction with the attached drawing in this specification one or more embodiment, to the technology in this specification one or more embodiment Scheme is clearly and completely described, it is clear that and described embodiment is only this specification a part of the embodiment, rather than Whole embodiments.Based on this specification one or more embodiment, those of ordinary skill in the art are not making creativeness The model of this specification one or more embodiment protection all should belong in every other embodiment obtained under the premise of labour It encloses.
The risk prevention system method that this specification one or more embodiment provides can be used for multiple business field, such as to boat trip Risk in the operational process of class APP, shopping class APP etc. carries out prevention and control.
Fig. 1 be according to a kind of schematic flow chart of risk prevention system method of one embodiment of this specification, as shown in Figure 1, This method comprises:
S102, when receive it is from client, for first event execution request when, determine that first event is corresponding First executes the stage.
Wherein, first event can be any executable event of the user in client application operational process.With the trip of boat For class APP, first event can be browsing event, registered events, log-in events, information modification event, consumption event, vote buying Event, marketing event etc..The first event corresponding first execution stage then can be the browsing stage, registration phase, entry stage, Information modification stage, is bought tickets stage, marketing stage etc. at consumer phase.
S104 executes the stage according to first, determines the first risk identification strategy for being directed to first event.
Wherein, the different execution stages corresponds to different risk identification strategies.Still by taking the trip of boat class APP as an example, the present embodiment Risk identification strategy used by registration phase and consumer phase is different.
S106 carries out risk identification to first event according to the first risk identification strategy, obtains the first risk identification result； And the corresponding risk assessment information of first event is determined according to the first risk identification result.
Risk assessment information is sent to client by S108, so that client is according to risk assessment information to first event Carry out corresponding risk prevention system.
Using the technical solution of this specification one or more embodiment, can receive it is from client, be directed to When the execution request of first event, the first event corresponding first execution stage is determined, and needle is determined according to the first execution stage To the first risk identification strategy of first event, wherein the different execution stages correspond to different risk identification strategies；And then root Risk identification is carried out to first event according to the first risk identification strategy, and is determined according to the first risk identification result that identification obtains The corresponding risk assessment information of first event.As it can be seen that the technical solution when carrying out risk prevention system, can be directed to different events The execution stage uses different risk prevention system strategies, so that risk prevention system is more targeted, it is equal compared to previous any stage For by the way of same strategy, it can targetedly identify that different event executes the potential risk in stage.In addition, should Technical solution is enabled a client to according to risk assessment information by the way that risk assessment information is sent to client to the first thing Part carries out corresponding risk prevention system, so that the risk problem that may be faced in solution business, realizes the high efficiency of risk prevention system.
In one embodiment, risk identification strategy includes air control model；Air control model is more according to each execution stage Made of a historical events and the corresponding historical risk recognition result training of each historical events.Therefore, the present embodiment is executing When S104-S106, it can determine that the first execution stage corresponding according to the corresponding relationship between preset execution stage and air control model The first air control model, and then according to the first air control model to first event carry out risk identification, obtain the first risk identification knot Fruit.
In the present embodiment, the different event execution stages corresponds to different air control models.
By taking the trip of boat class APP as an example, by acquiring the event information of multiple historical viewings events in browsing stage, (i.e. user is clear The related pages of Lan Hang trip class APP) and the corresponding historical risk recognition result of each historical viewings event, wherein historical viewings thing The event information of part may include user information (such as User ID, name, geographical location information), surfing, browsing content, clear Look at duration etc.；The corresponding historical risk recognition result of each historical viewings event may include risky or devoid of risk.And then according to institute The event information and the corresponding historical risk recognition result of each historical viewings event of multiple historical viewings events of acquisition are instructed Practice, to obtain browsing stage corresponding air control model.It is available when detecting that user browses the related pages of boat trip's class APP Browsing stage corresponding air control model carries out risk identification to current browsing event.
For another example (i.e. user is in boat trip's class APP for the event information of multiple history registry events by acquisition registration phase Upper progress account registration) and the corresponding historical risk recognition result of each history registry event, wherein the event of history registry event Information may include user information (such as User ID, name, geographical location information), register account number information (such as account number length, account The rule etc. met), log-in password etc.；The corresponding historical risk recognition result of each history registry event may include it is risky or Devoid of risk.And then according to the event information and the corresponding history wind of each history registry event of multiple history registry events collected Dangerous recognition result is trained, to obtain the corresponding air control model of registration phase.When detect user boat trip's class APP on carry out When account is registered, risk identification is carried out to current registered events using registration phase corresponding air control model.
In training each execution stage corresponding air control model, the historical events in each execution stage collected should include each Any event that can be performed in the execution stage, so that air control model made of training can cover appointing for corresponding execution stage Event information and its corresponding risk identification as a result, therefore using air control model to first event carry out risk identification when, Can more accurately identify any risk being likely to occur in first event, avoid the sample of model training excessively thin and The case where causing risk to be omitted.
By taking the trip of boat class APP as an example, registration phase be likely to occur identity falsely use, cheating of marketing, rubbish registration etc. a variety of wind Danger, then should make to acquire at collecting sample data (including historical events and the corresponding risk identification result of each historical events) To sample data as far as possible include above-mentioned all historical risk events, so that the obtained air control model of training be enable to cover The event information for all risk cases that registration phase is likely to occur and its corresponding risk identification result.
In one embodiment, based on above-mentioned trained air control model, due to corresponding air control model of each execution stage The event information for all risk cases that the corresponding execution stage is likely to occur can be covered, therefore, utilize these air control models It also may include risk case type in the risk identification result identified, such as in boat trip's class APP, risk case type can Seat is accounted for including falseness, integral is falsely taken, the types such as steal-number risk.The risk case type that server can will identify that is sent to visitor Family end, so that client makes corresponding air control strategy according to risk identification type, and then carries out effective wind to first event Dangerous prevention and control.
In one embodiment, risk identification strategy includes blacklist strategy, it may be assumed that by the thing of fixed high risk event Part information aggregate is in blacklist, thus when carrying out risk identification to current event, it is only necessary to judge the event letter of current event Breath if it exists in blacklist, then can determine that current event has high risk with the presence or absence of in blacklist；If it does not exist in black In list, then it can determine that current event does not have high risk.Wherein, event information may include the user information of execution event (such as User ID, name, identification card number, communication number etc.), event type (as boat trip's class APP in vote buying event, registered events, account for Seat event etc.) etc.；High risk event may include the event that risk assessment value reaches certain threshold value.
In one embodiment, risk identification strategy includes the verification strategy to certificate, it may be assumed that the current thing of client executing The certificate of the user of part verifies, such as whether the type of credential of verification user, certificate title, certificate information meet default rule Then.If meeting preset rules, it can determine that current event does not have high risk；If not meeting preset rules, can determine current Event has high risk.
In addition to the above-mentioned several risk identification strategies enumerated, other any one or more feasible risks also can be used and know It is not tactful, including preset risk identification rule etc., it is numerous to list herein.
In one embodiment, stage corresponding first risk identification strategy is executed to first event, progress according to first Risk identification, after obtaining the first risk identification result, it may be determined that by client executing and before the first execution stage At least one second execution stage；Then corresponding second risk identification result of each second execution stage is obtained；Further according to Each second risk identification result and the first risk identification result determine the corresponding risk assessment information of first event.
Under normal conditions, user can execute a series of multiple orderly events in client, such as user uses boat trip's class When APP, browsing event, log-in events and vote buying event may be successively executed.The technical solution of the present embodiment is so used, it is first First when user executes browsing event, using browsing stage corresponding risk identification strategy (such as the corresponding air control of browsing stage Model) risk identification is carried out to browsing event, the risk identification in browsing stage is obtained as a result, being recorded as risk identification result A；Its It is secondary user execute log-in events when, using entry stage corresponding risk identification strategy (the corresponding air control of such as entry stage Model) risk identification is carried out to log-in events, the risk identification of entry stage is obtained as a result, being recorded as risk identification result B；So Afterwards when user executes vote buying event, using the stage of vote buying corresponding risk identification strategy (such as stage corresponding air control of buying tickets Model) risk identification is carried out to vote buying event, the risk identification in vote buying stage is obtained as a result, being recorded as risk identification result C.Base In above-mentioned each risk identification as a result, can integrated risk recognition result A and risk identification result B determine corresponding to log-in events Risk assessment information, can integrated risk recognition result A, risk identification result B and risk identification result C determine vote buying event institute Corresponding risk assessment information.
As it can be seen that risk assessment information corresponding to first event not necessarily utilizes the first risk to know in the present embodiment Not strategy obtained the first risk identification after risk identification is carried out to first event as a result, but by the first execution stage and its it Preceding all execution stages occurred corresponding risk identification result is comprehensive to be determined, ladder air control mode can be referred to as.Due to Performed event is to be mutually related, therefore each event can be executed the stage by this ladder air control mode to user in each stage Risk identification result integrate and considered, to more accurately determine that risk assessment corresponding to each event is believed Breath, promotes the accuracy of risk prevention system.
In one embodiment, when carrying out risk identification using ladder air control mode, it is corresponding that each execution stage can be assigned The respective risk assessment value of risk identification result and weight.Therefore, the first risk identification result may include the first risk assessment value； Second risk identification result may include the second risk assessment value；Risk assessment information may include overall risk assessed value.According to each When two risk identification results and the first risk identification result determine first event corresponding risk assessment information, following lines can be passed through Property weighting mode: determine each second risk identification result and the corresponding weight of the first risk identification result first；In turn According to each second risk identification result and the corresponding weight of the first risk identification result, to each second risk assessment value and One risk assessment value is weighted, and obtains the corresponding overall risk assessed value of first event.
Continue to use the example above, it is assumed that when boat trip's class APP operation, the risk assessment value for browsing the stage is a, corresponding weight For x；The risk assessment value of entry stage is b, and corresponding weight is y；The risk assessment value in vote buying stage is c, corresponding Weight is z.So determine that the overall risk assessed value in each execution stage is as follows according to ladder air control mode: the browsing stage is due to it It is preceding to execute the stage without other, therefore the overall risk assessed value for browsing the stage is the risk assessment value a in browsing stage；Log in rank The overall risk assessed value of section is a*x+b*y；The overall risk assessed value in vote buying stage is a*x+b*y+c*z.
In one embodiment, when carrying out risk identification using ladder air control mode, it is based on corresponding wind of each execution stage Dangerous assessed value and weight can also be handled by nonlinear function, wherein nonlinear function can be simple exponential distribution Cluster, and can be fitted by deep learning.
Continue to use the example above, it is assumed that when boat trip's class APP operation, the risk assessment value for browsing the stage is a, the wind of entry stage Dangerous assessed value is b, and the risk assessment value in stage of buying tickets is c.So according to ladder air control mode, it may be determined that go out the total of entry stage Risk assessment value is f1 (a, s1), wherein f1 is nonlinear function, and s1 is the variable that entry stage is relied on.The vote buying stage Overall risk assessed value is f2 (a, b, s2), wherein f2 is nonlinear function, and s2 is the variable relied in the vote buying stage.
Certainly, when carrying out risk identification using ladder air control mode, it is not limited to the above-mentioned two ways enumerated, ancestor Purport is that the overall risk assessed value of the latter half is acquired by the risk assessment value synthesis in previous (a little) stages.
In one embodiment, user can be obtained to the feedback letter of corresponding risk identification result of each execution stage Breath；Then it determines each feedback information corresponding execution stage, and determines corresponding air control model of each execution stage；And then according to each Risk identification result and feedback information corresponding to the feedback information corresponding execution stage, execution rank corresponding to each feedback information Air control model corresponding to section is updated.
By taking the trip of boat class APP as an example, it is assumed that in the feedback information got, including entry stage and vote buying stage respectively correspond Feedback information, then using feedback information wherein corresponding with entry stage, to the corresponding air control model of entry stage into Row updates；Using wherein feedback information corresponding with the stage of vote buying, vote buying stage corresponding air control model is updated.
The thought of active prevention and control is introduced into the risk prevention system of Liao Hang trip class APP by the present embodiment, i.e., by providing user The function of mark allows users to feed back the risk identification result in each execution stage, to utilize the feedback information of user Air control model is updated, efficiently solves air control model with air control effect caused by time or the black variation for producing attacking and defending The problem of decaying, it is ensured that the lasting effectiveness of air control model.
In one embodiment, the hysteresis quality and single user to solve user's mark distinguish fortune brought by mark The burden problem that work as a hired labourer is made, the present embodiment provide the function of group's mark, also on the basis of providing user's mark function It is to say, server, which disposably obtains, belongs to the feedback information that all users of the same group are carried out using mark function, and benefit Air control model is updated with these feedback informations, all users of the same group are presented to operation simultaneously to realize Effect, improve the efficiency of efficiency of operation and batch mark.
In the present embodiment, belong to the same group user meet in the following conditions at least one of:
(1) the first specify information in user information is identical.
Wherein, user information includes certificate information, account information, communication information, used facility information etc..First refers to Determining information can be certificate information (such as identification card number), account information (the Alipay account as carried out funds transaction), communication letter Cease (such as cell-phone number), used facility information (physical address of the equipment such as used, IP address).
(2) the second specify information in user information has the social networks of specified type.
Wherein, the second specify information can be certificate information (such as identification card number), account information (as carried out funds transaction Alipay account), communication information (such as cell-phone number), used facility information (physical address of the equipment such as used, IP address Deng) etc..
Specified type such as relatives, friend, classmate, colleague etc..Social networks between user can be stored in advance in server End, for example, belonging to kinship between account A and account B.Judging both parties --- it is pre- whether account A and account B meets If when related condition, the social networks between account A and account B can be obtained from server end, and then according to accessed Social networks judge whether the two meets default related condition.
(3) the communication number between the communication information in user information is more than preset value.
In one embodiment, risk assessment information includes the risk class of first event；Therefore, by risk assessment information When being sent to client, the wind of first event can be determined according to the corresponding relationship between preset risk class and air control strategy First air control strategy corresponding to dangerous grade；And then the risk class of first event and its corresponding first air control strategy are sent To client, so that client carries out corresponding risk prevention system to first event according to the first air control strategy.
In the present embodiment, risk class may include low risk level, risk grade or high-risk grade.Work as first event Risk class when being risk grade, it may be determined that the corresponding first air control strategy of the risk grade is to be known using specified risk Other mode carries out quadratic risk function identification to first event.Wherein, specifying risk identification mode includes that short-message verification, biological characteristic are tested At least one of card identification method.
That is, the present embodiment can inform client to the first thing by the first risk policy when being determined as risk grade Part carries out quadratic risk function identification, to promote the accuracy of risk identification.
In addition, illustrating that first event does not have risk, therefore can be true when the risk class of first event is low risk level The fixed corresponding air control strategy of the low risk level is to be identified by, i.e., user can continue to execute first event；When first event When risk class is high-risk grade, illustrate that first event is risky, therefore can determine the corresponding air control plan of the high-risk grade Slightly refusal executes, i.e., user can not execute first event.
By taking the trip of boat class APP as an example, for the kinds of risks event that each execution stage is likely to occur, such as steals card and buy tickets, integrate It is stolen brush, lose one's seat, refund is falsely taken, arbitrage risk, is ulled up wool etc..The technical solution can provide and each risk case Corresponding air control strategy.Fig. 2 shows the air control strategies for respectively executing the stage in an embodiment and corresponding to various risks event.Certainly, Fig. 2 is only schematically to list some air control strategies, can carry out the adjustment of different air control strategies in practice as needed.
In reference axis shown in Fig. 2, it is each execution stage in service operation that horizontal axis is corresponding, the longitudinal axis is corresponding be The risk case that each execution stage is likely to occur, wherein honey jar mechanism, water purifying tank, fortune mechanism these types strategy are existing Technology, details are not described herein again.Core body is the verification to subscriber identity information, such as verifies biological characteristic, the certificate information of user It is whether correct.
As it can be seen that can to cover the institute that each execution stage is likely to occur risky for all kinds of air control strategies provided by the present embodiment Event, therefore can be effectively solved all air control problems that boat trip faces.
In one embodiment, the user information that can first determine to execute the first user of first event, then according to the The user information of one user, excavates the second user for meeting default related condition between the first user, and then according to the The corresponding risk assessment information prediction of one event goes out the corresponding risk assessment information of second event performed by second user.Its In, user information includes certificate information, account information, communication information, used facility information etc..
For example, if the corresponding risk class of first event performed by the first user is high-risk grade, then predictable The corresponding risk class of second event performed by second user is also high-risk grade out.
In the present embodiment, meets default related condition and include at least one of the following:
(1) the first specify information in user information is identical.
Wherein, the first specify information can be certificate information (such as identification card number), account information (as carried out funds transaction Alipay account), communication information (such as cell-phone number), used facility information (physical address of the equipment such as used, IP address Deng) etc..
(2) the second specify information in user information has the social networks of specified type.
Wherein, the second specify information can be certificate information (such as identification card number), account information (as carried out funds transaction Alipay account), communication information (such as cell-phone number), used facility information (physical address of the equipment such as used, IP address Deng) etc..
Specified type such as relatives, friend, classmate, colleague etc..Social networks between user can be stored in advance in server End, for example, belonging to kinship between account A and account B.Judging both parties --- it is pre- whether account A and account B meets If when related condition, the social networks between account A and account B can be obtained from server end, and then according to accessed Social networks judge whether the two meets default related condition.
(3) the communication number between the communication information in user information is more than preset value.
In the present embodiment, it is capable of between the risk assessment information prediction and the user of the event according to performed by a user full The risk assessment information of event performed by the other users of the default related condition of foot, to not only promote the effect of risk identification Rate, and more potential risks can be recognized by the relevance between multiple users.
To sum up, the specific embodiment of this theme is described.Other embodiments are in the appended claims In range.In some cases, the movement recorded in detail in the claims can execute and still in a different order Desired result may be implemented.In addition, process depicted in the drawing not necessarily requires the particular order shown or continuous suitable Sequence, to realize desired result.In some embodiments, multitasking and parallel processing can be advantageous.
The above are the risk prevention system methods that this specification one or more embodiment provides, and are based on same thinking, this theory Bright book one or more embodiment also provides a kind of risk prevention system device.
Fig. 3 is according to a kind of schematic block diagram of risk prevention system device of one embodiment of this specification, as shown in figure 3, wind Dangerous prevention and control device 300 includes:
First determining module 310, for when receive it is from client, for first event execution request when, really Determine first event corresponding first and executes the stage；
Second determining module 320 determines the first risk identification plan for being directed to first event for executing the stage according to first Slightly；Wherein, the different execution stages corresponds to different risk identification strategies；
Identification and determining module 330 are obtained for carrying out risk identification to first event according to the first risk identification strategy First risk identification result；And the corresponding risk assessment information of first event is determined according to the first risk identification result；
Sending module 340, for risk assessment information to be sent to client, so that client is according to risk assessment information Corresponding risk prevention system is carried out to first event.
In one embodiment, identification and determining module 330 include:
First determination unit, for determine by client executing and before the first execution stage at least one second The execution stage；
Acquiring unit, for obtaining corresponding second risk identification result of each second execution stage；
Second determination unit is used for according to each second risk identification result and the first risk identification as a result, determining the first thing The corresponding risk assessment information of part.
In one embodiment, the first risk identification result includes the first risk assessment value；Second risk identification result packet Include the second risk assessment value；Risk assessment information includes overall risk assessed value；
Correspondingly, the second determination unit is also used to:
Determine each second risk identification result and the corresponding weight of the first risk identification result；
According to each second risk identification result and the corresponding weight of the first risk identification result, each second risk is commented Valuation and the first risk assessment value are weighted, and obtain the corresponding overall risk assessed value of first event.
In one embodiment, risk identification strategy includes air control model；Air control model is more according to each execution stage Made of the event information of a historical events and the corresponding historical risk recognition result training of each historical events；
Correspondingly, the second determining module 320 includes:
Third determination unit, for determining first according to the corresponding relationship between preset execution stage and air control model Execution stage corresponding first air control model；
Identification and determining module 330 include:
Recognition unit obtains the first risk identification for carrying out risk identification to first event according to the first air control model As a result.
In one embodiment, device 300 further include:
Module is obtained, for obtaining user to the feedback information of corresponding risk identification result of each execution stage；
Third determining module, for determining that the corresponding third of feedback information executes the stage；And determine that third executes the stage pair The the second air control model answered；
Update module executes third for executing stage corresponding risk identification result and feedback information according to third Stage, corresponding second air control model was updated.
In one embodiment, risk assessment information includes the risk class of first event；
Correspondingly, sending module 340 includes:
4th determination unit, for determining first according to the corresponding relationship between preset risk class and air control strategy First air control strategy corresponding to the risk class of event；
Transmission unit, for the risk class of first event and its corresponding first air control strategy to be sent to client, So that client carries out corresponding risk prevention system to first event according to the first air control strategy.
In one embodiment, risk class includes low risk level, risk grade or high-risk grade；
Correspondingly, the 4th determination unit is also used to:
When the risk class of first event is risk grade, the first air control strategy is determined to utilize specified risk identification Mode carries out quadratic risk function identification to first event；
Wherein, specifying risk identification mode includes at least one of short-message verification, biological characteristic validation identification method.
In one embodiment, device 300 further include:
4th determining module, for determining the user information for executing the first user of first event；
Excavating gear, for excavating and meeting the second of default related condition between the first user according to user information User；
Prediction module, for predicting second performed by second user according to the corresponding risk assessment information of first event The corresponding risk assessment information of event.
In one embodiment, meet default related condition to include at least one of the following:
The first specify information in user information is identical；
The second specify information in user information has the social networks of specified type；
Communication number between communication information in user information is more than preset value；
Wherein, user information include certificate information, account information, communication information, in used facility information at least One.
Using the device of this specification one or more embodiment, can receive it is from client, for first When the execution request of event, the first event corresponding first execution stage is determined, and execute the stage according to first and determine for the First risk identification strategy of one event, wherein the different execution stages correspond to different risk identification strategies；And then according to the One risk identification strategy carries out risk identification to first event, and determines first according to the first risk identification result that identification obtains The corresponding risk assessment information of event.As it can be seen that the device when carrying out risk prevention system, can execute the stage for different events Using different risk prevention system strategies, so that risk prevention system is more targeted, it is all made of compared to previous any stage same For the mode of strategy, it can targetedly identify that different event executes the potential risk in stage.In addition, the device passes through Risk assessment information is sent to client, enables a client to carry out first event according to risk assessment information corresponding Risk prevention system, so that the risk problem that may be faced in solution business, realizes the high efficiency of risk prevention system.
It should be understood that above-mentioned risk prevention system device can be used to realize that previously described risk is anti- Prosecutor method, datail description therein should be described with method part above it is similar, it is cumbersome to avoid, do not repeat separately herein.
Based on same thinking, this specification one or more embodiment also provides a kind of risk prevention system equipment, such as Fig. 4 institute Show.Risk prevention system equipment can generate bigger difference because configuration or performance are different, may include one or more Processor 401 and memory 402 can store one or more storage application programs or data in memory 402.Its In, memory 402 can be of short duration storage or persistent storage.Be stored in memory 402 application program may include one or More than one module (diagram is not shown), each module may include executable to the series of computation machine in risk prevention system equipment Instruction.Further, processor 401 can be set to communicate with memory 402, execute memory in risk prevention system equipment Series of computation machine executable instruction in 402.Risk prevention system equipment can also include one or more power supplys 403, one A or more than one wired or wireless network interface 404, one or more input/output interfaces 405, one or one with Upper keyboard 406.
Specifically in the present embodiment, risk prevention system equipment includes memory and one or more program, In one perhaps more than one program is stored in memory and one or more than one program may include one or one With upper module, and each module may include and being configured to the series of computation machine executable instruction in risk prevention system equipment With by one or more than one processor execute this or more than one program include can for carrying out following computer It executes instruction:
When receive it is from client, for first event execution request when, determine that the first event is corresponding First executes the stage；
The stage is executed according to described first, determines the first risk identification strategy for being directed to the first event；Wherein, different The execution stage correspond to different risk identification strategies；
Risk identification is carried out to the first event according to the first risk identification strategy, obtains the first risk identification knot Fruit；And the corresponding risk assessment information of the first event is determined according to the first risk identification result；
The risk assessment information is sent to the client, so that the client is according to the risk assessment information Corresponding risk prevention system is carried out to the first event.
Optionally, computer executable instructions when executed, can also make the processor:
Determine at least one second execution stage by the client executing and before the first execution stage；
Obtain corresponding second risk identification result of each second execution stage；
According to each second risk identification result and first risk identification as a result, determining that the first event is corresponding The risk assessment information.
Optionally, the first risk identification result includes the first risk assessment value；The second risk identification result packet Include the second risk assessment value；The risk assessment information includes overall risk assessed value；
Correspondingly, computer executable instructions are when executed, the processor can also be made:
Determine each second risk identification result and the corresponding weight of the first risk identification result；
According to each second risk identification result and the corresponding weight of the first risk identification result, to each institute It states the second risk assessment value and the first risk assessment value is weighted, it is corresponding described total to obtain the first event Risk assessment value.
Optionally, the risk identification strategy includes air control model；The air control model is more according to each execution stage Made of the event information of a historical events and the corresponding historical risk recognition result training of each historical events；
Correspondingly, computer executable instructions are when executed, the processor can also be made:
According to the corresponding relationship between preset execution stage and air control model, determine that the first execution stage is corresponding First air control model；
Risk identification is carried out to the first event according to the first air control model, obtains the first risk identification knot Fruit.
Optionally, computer executable instructions when executed, can also make the processor:
User is obtained to the feedback information of each execution stage corresponding risk identification result；
Determine that the corresponding third of the feedback information executes the stage；And determine that the third executes the stage corresponding second Air control model；
Stage corresponding risk identification result and the feedback information are executed according to the third, rank is executed to the third The corresponding second air control model of section is updated.
Optionally, the risk assessment information includes the risk class of the first event；
Correspondingly, computer executable instructions are when executed, the processor can also be made:
According to the corresponding relationship between preset risk class and air control strategy, the risk class of the first event is determined The first corresponding air control strategy；
The risk class of the first event and its corresponding first air control strategy are sent to the client, with The client is set to carry out corresponding risk prevention system to the first event according to the first air control strategy.
Optionally, the risk class includes low risk level, risk grade or high-risk grade；
Correspondingly, computer executable instructions are when executed, the processor can also be made:
When the risk class of the first event is the risk grade, the first air control strategy is determined to utilize Specified risk identification mode carries out quadratic risk function identification to the first event；
Wherein, the specified risk identification mode includes at least one of short-message verification, biological characteristic validation identification side Formula.
Optionally, computer executable instructions when executed, can also make the processor:
Determine the user information for executing the first user of the first event；
According to the user information, the second user for meeting default related condition between first user is excavated；
According to the corresponding risk assessment information of the first event, the second thing performed by the second user is predicted The corresponding risk assessment information of part.
Optionally, the default related condition of the satisfaction includes at least one of the following:
The first specify information in the user information is identical；
The second specify information in the user information has the social networks of specified type；
Communication number between communication information in the user information is more than preset value；
Wherein, the user information include certificate information, account information, communication information, in used facility information At least one of.
This specification one or more embodiment also proposed a kind of computer readable storage medium, this is computer-readable to deposit Storage media stores one or more programs, which includes instruction, and it is included multiple application programs which, which works as, Electronic equipment when executing, the electronic equipment can be made to execute above-mentioned risk prevention system method, and be specifically used for executing:
When receive it is from client, for first event execution request when, determine that the first event is corresponding First executes the stage；
The stage is executed according to described first, determines the first risk identification strategy for being directed to the first event；Wherein, different The execution stage correspond to different risk identification strategies；
Risk identification is carried out to the first event according to the first risk identification strategy, obtains the first risk identification knot Fruit；And the corresponding risk assessment information of the first event is determined according to the first risk identification result；
The risk assessment information is sent to the client, so that the client is according to the risk assessment information Corresponding risk prevention system is carried out to the first event.
System, device, module or the unit that above-described embodiment illustrates can specifically realize by computer chip or entity, Or it is realized by the product with certain function.It is a kind of typically to realize that equipment is computer.Specifically, computer for example may be used Think personal computer, laptop computer, cellular phone, camera phone, smart phone, personal digital assistant, media play It is any in device, navigation equipment, electronic mail equipment, game console, tablet computer, wearable device or these equipment The combination of equipment.
For convenience of description, it is divided into various units when description apparatus above with function to describe respectively.Certainly, implementing this The function of each unit can be realized in the same or multiple software and or hardware when specification one or more embodiment.
It should be understood by those skilled in the art that, this specification one or more embodiment can provide for method, system or Computer program product.Therefore, complete hardware embodiment can be used in this specification one or more embodiment, complete software is implemented The form of example or embodiment combining software and hardware aspects.Moreover, this specification one or more embodiment can be used one It is a or it is multiple wherein include computer usable program code computer-usable storage medium (including but not limited to disk storage Device, CD-ROM, optical memory etc.) on the form of computer program product implemented.
This specification one or more embodiment is referring to according to the method for the embodiment of the present application, equipment (system) and meter The flowchart and/or the block diagram of calculation machine program product describes.It should be understood that can be realized by computer program instructions flow chart and/ Or the combination of the process and/or box in each flow and/or block and flowchart and/or the block diagram in block diagram.It can These computer program instructions are provided at general purpose computer, special purpose computer, Embedded Processor or other programmable datas The processor of equipment is managed to generate a machine, so that holding by the processor of computer or other programmable data processing devices Capable instruction generates for realizing in one or more flows of the flowchart and/or one or more blocks of the block diagram The device of specified function.
These computer program instructions, which may also be stored in, is able to guide computer or other programmable data processing devices with spy Determine in the computer-readable memory that mode works, so that it includes referring to that instruction stored in the computer readable memory, which generates, Enable the manufacture of device, the command device realize in one box of one or more flows of the flowchart and/or block diagram or The function of being specified in multiple boxes.
These computer program instructions also can be loaded onto a computer or other programmable data processing device, so that counting Series of operation steps are executed on calculation machine or other programmable devices to generate computer implemented processing, thus in computer or The instruction executed on other programmable devices is provided for realizing in one or more flows of the flowchart and/or block diagram one The step of function of being specified in a box or multiple boxes.
In a typical configuration, calculating equipment includes one or more processors (CPU), input/output interface, net Network interface and memory.
Memory may include the non-volatile memory in computer-readable medium, random access memory (RAM) and/or The forms such as Nonvolatile memory, such as read-only memory (ROM) or flash memory (flash RAM).Memory is computer-readable medium Example.
Computer-readable medium includes permanent and non-permanent, removable and non-removable media can be by any method Or technology come realize information store.Information can be computer readable instructions, data structure, the module of program or other data. The example of the storage medium of computer includes, but are not limited to phase change memory (PRAM), static random access memory (SRAM), moves State random access memory (DRAM), other kinds of random access memory (RAM), read-only memory (ROM), electric erasable Programmable read only memory (EEPROM), flash memory or other memory techniques, read-only disc read only memory (CD-ROM) (CD-ROM), Digital versatile disc (DVD) or other optical storage, magnetic cassettes, tape magnetic disk storage or other magnetic storage devices Or any other non-transmission medium, can be used for storage can be accessed by a computing device information.As defined in this article, it calculates Machine readable medium does not include temporary computer readable media (trans itory media), such as the data-signal and carrier wave of modulation.
It should also be noted that, the terms "include", "comprise" or its any other variant are intended to nonexcludability It include so that the process, method, commodity or the equipment that include a series of elements not only include those elements, but also to wrap Include other elements that are not explicitly listed, or further include for this process, method, commodity or equipment intrinsic want Element.In the absence of more restrictions, the element limited by sentence "including a ...", it is not excluded that including described want There is also other identical elements in the process, method of element, commodity or equipment.
This specification one or more embodiment can computer executable instructions it is general on It hereinafter describes, such as program module.Generally, program module includes executing particular task or realization particular abstract data type Routine, programs, objects, component, data structure etc..The application can also be practiced in a distributed computing environment, at these In distributed computing environment, by executing task by the connected remote processing devices of communication network.In distributed computing In environment, program module can be located in the local and remote computer storage media including storage equipment.
All the embodiments in this specification are described in a progressive manner, same and similar portion between each embodiment Dividing may refer to each other, and each embodiment focuses on the differences from other embodiments.Especially for system reality For applying example, since it is substantially similar to the method embodiment, so being described relatively simple, related place is referring to embodiment of the method Part explanation.
The foregoing is merely this specification one or more embodiments, are not limited to this specification.For this For the technical staff of field, this specification one or more embodiment can have various modifications and variations.It is all in this specification one Any modification, equivalent replacement, improvement and so within the spirit and principle of a or multiple embodiments, should be included in this explanation Within the scope of the claims of book one or more embodiment.

Claims (15)

1. a kind of risk prevention system method, comprising:
When receive it is from client, for first event execution request when, determine the first event corresponding first The execution stage；
The stage is executed according to described first, determines the first risk identification strategy for being directed to the first event；Wherein, different to hold Row order section corresponds to different risk identification strategies；
Risk identification is carried out to the first event according to the first risk identification strategy, obtains the first risk identification result； And the corresponding risk assessment information of the first event is determined according to the first risk identification result；
The risk assessment information is sent to the client, so that the client is according to the risk assessment information to institute It states first event and carries out corresponding risk prevention system.
2. according to the method described in claim 1, described determine the first event pair according to the first risk identification result The risk assessment information answered；Include:
Determine at least one second execution stage by the client executing and before the first execution stage；
Obtain corresponding second risk identification result of each second execution stage；
According to each second risk identification result and first risk identification as a result, determining the corresponding institute of the first event State risk assessment information.
3. according to the method described in claim 2, the first risk identification result includes the first risk assessment value；Described second Risk identification result includes the second risk assessment value；The risk assessment information includes overall risk assessed value；
Correspondingly, it is described according to each second risk identification result and first risk identification as a result, determine described first The corresponding risk assessment information of event, comprising:
Determine each second risk identification result and the corresponding weight of the first risk identification result；
According to each second risk identification result and the corresponding weight of the first risk identification result, to each described Two risk assessment values and the first risk assessment value are weighted, and obtain the corresponding overall risk of the first event Assessed value.
4. according to the method described in claim 1, the risk identification strategy includes air control model；The air control model is basis The corresponding historical risk recognition result training of the event information and each historical events of each multiple historical events for executing the stage Made of；
Correspondingly, described execute the stage according to described first, the first risk identification strategy for being directed to the first event is determined；Root Risk identification is carried out to the first event according to the first risk identification strategy, obtains the first risk identification result；Include:
According to the corresponding relationship between preset execution stage and air control model, the first execution stage corresponding first is determined Air control model；
Risk identification is carried out to the first event according to the first air control model, obtains the first risk identification result.
5. according to the method described in claim 4, further include:
User is obtained to the feedback information of each execution stage corresponding risk identification result；
Determine that the corresponding third of the feedback information executes the stage；And determine that the third executes stage corresponding second air control Model；
Stage corresponding risk identification result and the feedback information are executed according to the third, the stage pair is executed to the third The the second air control model answered is updated.
6. according to the method described in claim 1, the risk assessment information includes the risk class of the first event；
Correspondingly, described be sent to the client for the risk assessment information, so that the client is according to the risk It assesses information and corresponding risk prevention system is carried out to the first event, comprising:
According to the corresponding relationship between preset risk class and air control strategy, determine that the risk class institute of the first event is right The the first air control strategy answered；
The risk class of the first event and its corresponding first air control strategy are sent to the client, so that institute It states client and corresponding risk prevention system is carried out to the first event according to the first air control strategy.
7. according to the method described in claim 6, the risk class includes low risk level, risk grade or high risk etc. Grade；
Correspondingly, the corresponding relationship according between preset risk class and air control strategy, determines the first event First air control strategy corresponding to risk class, comprising:
When the risk class of the first event is the risk grade, it is specified to utilize to determine the first air control strategy Risk identification mode carries out quadratic risk function identification to the first event；
Wherein, the specified risk identification mode includes at least one of short-message verification, biological characteristic validation identification method.
8. according to the method described in claim 1, further include:
Determine the user information for executing the first user of the first event；
According to the user information, the second user for meeting default related condition between first user is excavated；
According to the corresponding risk assessment information of the first event, second event pair performed by the second user is predicted The risk assessment information answered.
9. according to the method described in claim 8, the default related condition of the satisfaction includes at least one of the following:
The first specify information in the user information is identical；
The second specify information in the user information has the social networks of specified type；
Communication number between communication information in the user information is more than preset value；
Wherein, the user information include certificate information, account information, communication information, in used facility information at least One.
10. a kind of risk prevention system device, comprising:
First determining module, for when receive it is from client, requested for the execution of first event when, determine described the One event corresponding first executes the stage；
Second determining module determines the first risk identification for being directed to the first event for executing the stage according to described first Strategy；Wherein, the different execution stages corresponds to different risk identification strategies；
Identification and determining module are obtained for carrying out risk identification to the first event according to the first risk identification strategy To the first risk identification result；And the corresponding risk assessment of the first event is determined according to the first risk identification result Information；
Sending module, for the risk assessment information to be sent to the client, so that the client is according to the wind Danger assessment information carries out corresponding risk prevention system to the first event.
11. device according to claim 10, the identification and determining module include:
First determination unit, for determining at least one by the client executing and before the first execution stage Second executes the stage；
Acquiring unit, for obtaining corresponding second risk identification result of each second execution stage；
Second determination unit is used for according to each second risk identification result and first risk identification as a result, determining institute State the corresponding risk assessment information of first event.
12. device according to claim 11, the first risk identification result includes the first risk assessment value；Described Two risk identification results include the second risk assessment value；The risk assessment information includes overall risk assessed value；
Correspondingly, second determination unit is also used to:
Determine each second risk identification result and the corresponding weight of the first risk identification result；
According to each second risk identification result and the corresponding weight of the first risk identification result, to each described Two risk assessment values and the first risk assessment value are weighted, and obtain the corresponding overall risk of the first event Assessed value.
13. device according to claim 10, the risk identification strategy includes air control model；The air control model is root According to the event information of multiple historical events in each execution stage and the corresponding historical risk recognition result instruction of each historical events Made of white silk；
Correspondingly, second determining module includes:
Third determination unit, for determining described first according to the corresponding relationship between preset execution stage and air control model Execution stage corresponding first air control model；
The identification and determining module include:
Recognition unit obtains described first for carrying out risk identification to the first event according to the first air control model Risk identification result.
14. a kind of risk prevention system equipment, comprising:
Processor；And
It is arranged to the memory of storage computer executable instructions, the executable instruction makes the processing when executed Device:
When receive it is from client, for first event execution request when, determine the first event corresponding first The execution stage；
The stage is executed according to described first, determines the first risk identification strategy for being directed to the first event；Wherein, different to hold Row order section corresponds to different risk identification strategies；
Risk identification is carried out to the first event according to the first risk identification strategy, obtains the first risk identification result； And the corresponding risk assessment information of the first event is determined according to the first risk identification result；
The risk assessment information is sent to the client, so that the client is according to the risk assessment information to institute It states first event and carries out corresponding risk prevention system.
15. a kind of storage medium, for storing computer executable instructions, the executable instruction is realized following when executed Process:
When receive it is from client, for first event execution request when, determine the first event corresponding first The execution stage；
The stage is executed according to described first, determines the first risk identification strategy for being directed to the first event；Wherein, different to hold Row order section corresponds to different risk identification strategies；
Risk identification is carried out to the first event according to the first risk identification strategy, obtains the first risk identification result； And the corresponding risk assessment information of the first event is determined according to the first risk identification result；
The risk assessment information is sent to the client, so that the client is according to the risk assessment information to institute It states first event and carries out corresponding risk prevention system.
CN201910452218.3A 2019-05-28 2019-05-28 Risk prevention and control method and device Active CN110147967B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201910452218.3A CN110147967B (en) 2019-05-28 2019-05-28 Risk prevention and control method and device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201910452218.3A CN110147967B (en) 2019-05-28 2019-05-28 Risk prevention and control method and device

Publications (2)

Publication Number Publication Date
CN110147967A true CN110147967A (en) 2019-08-20
CN110147967B CN110147967B (en) 2023-05-30

Family

ID=67593422

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201910452218.3A Active CN110147967B (en) 2019-05-28 2019-05-28 Risk prevention and control method and device

Country Status (1)

Country Link
CN (1) CN110147967B (en)

Cited By (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110855703A (en) * 2019-11-22 2020-02-28 秒针信息技术有限公司 Intelligent risk identification system and method and electronic equipment
CN111080306A (en) * 2019-12-17 2020-04-28 中国建设银行股份有限公司 Transaction risk determination method, device, equipment and storage medium
CN111144744A (en) * 2019-12-26 2020-05-12 支付宝(杭州)信息技术有限公司 Service processing method and device and electronic equipment
CN111613281A (en) * 2020-05-15 2020-09-01 首都医科大学 Delirium risk assessment method and system based on hospital information system
CN112418578A (en) * 2019-08-22 2021-02-26 贝壳技术有限公司 Business risk early warning method, electronic device and storage medium
CN112907132A (en) * 2021-03-25 2021-06-04 支付宝(杭州)信息技术有限公司 Full-link interactive wind control method and system
CN112989929A (en) * 2021-02-04 2021-06-18 支付宝(杭州)信息技术有限公司 Target user identification method and device and electronic equipment
CN113421136A (en) * 2021-08-25 2021-09-21 深圳兆瑞优品科技有限公司 Online shopping wind control method, device and system
CN113992429A (en) * 2021-12-22 2022-01-28 支付宝(杭州)信息技术有限公司 Event processing method, device and equipment
CN115345533A (en) * 2022-10-20 2022-11-15 阿里健康科技(杭州)有限公司 Order data processing method, device, equipment and storage medium
CN116151627A (en) * 2023-04-04 2023-05-23 支付宝(杭州)信息技术有限公司 Business wind control method and device, storage medium and electronic equipment

Citations (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102164138A (en) * 2011-04-18 2011-08-24 奇智软件（北京）有限公司 Method for ensuring network security of user and client
US20130055337A1 (en) * 2011-08-24 2013-02-28 International Business Machines Corporation Risk-based model for security policy management
US20150186995A1 (en) * 2013-12-26 2015-07-02 Trading Technologies International, Inc. Systems and Methods to Monitor Risk of Trading Strategies
US20160155070A1 (en) * 2011-06-08 2016-06-02 Accenture Global Services Limited Decision tree machine learning
CN106156151A (en) * 2015-04-14 2016-11-23 阿里巴巴集团控股有限公司 The Risk Identification Method of internetwork operation event and device
CN106953738A (en) * 2016-10-11 2017-07-14 阿里巴巴集团控股有限公司 Risk control method and device
CN107067157A (en) * 2017-03-01 2017-08-18 北京奇艺世纪科技有限公司 Business risk appraisal procedure, device and air control system
CN107644340A (en) * 2016-07-22 2018-01-30 阿里巴巴集团控股有限公司 Risk Identification Method, client device and risk recognition system
CN108062629A (en) * 2017-12-26 2018-05-22 平安科技（深圳）有限公司 Processing method, terminal device and the medium of transaction event
CN108460681A (en) * 2017-02-20 2018-08-28 阿里巴巴集团控股有限公司 A kind of risk management and control method and device
US20180247312A1 (en) * 2017-02-28 2018-08-30 Early Warning Services, Llc Authentication and security for mobile-device transactions
CN109064175A (en) * 2018-06-11 2018-12-21 阿里巴巴集团控股有限公司 A kind of account takeover risk prevention system method and device
CN109714301A (en) * 2017-10-25 2019-05-03 北京京东尚科信息技术有限公司 Register Risk Identification Method, device, electronic equipment and storage medium

Patent Citations (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102164138A (en) * 2011-04-18 2011-08-24 奇智软件（北京）有限公司 Method for ensuring network security of user and client
US20160155070A1 (en) * 2011-06-08 2016-06-02 Accenture Global Services Limited Decision tree machine learning
US20130055337A1 (en) * 2011-08-24 2013-02-28 International Business Machines Corporation Risk-based model for security policy management
US20150186995A1 (en) * 2013-12-26 2015-07-02 Trading Technologies International, Inc. Systems and Methods to Monitor Risk of Trading Strategies
CN106156151A (en) * 2015-04-14 2016-11-23 阿里巴巴集团控股有限公司 The Risk Identification Method of internetwork operation event and device
CN107644340A (en) * 2016-07-22 2018-01-30 阿里巴巴集团控股有限公司 Risk Identification Method, client device and risk recognition system
CN106953738A (en) * 2016-10-11 2017-07-14 阿里巴巴集团控股有限公司 Risk control method and device
CN108460681A (en) * 2017-02-20 2018-08-28 阿里巴巴集团控股有限公司 A kind of risk management and control method and device
US20180247312A1 (en) * 2017-02-28 2018-08-30 Early Warning Services, Llc Authentication and security for mobile-device transactions
CN107067157A (en) * 2017-03-01 2017-08-18 北京奇艺世纪科技有限公司 Business risk appraisal procedure, device and air control system
CN109714301A (en) * 2017-10-25 2019-05-03 北京京东尚科信息技术有限公司 Register Risk Identification Method, device, electronic equipment and storage medium
CN108062629A (en) * 2017-12-26 2018-05-22 平安科技（深圳）有限公司 Processing method, terminal device and the medium of transaction event
CN109064175A (en) * 2018-06-11 2018-12-21 阿里巴巴集团控股有限公司 A kind of account takeover risk prevention system method and device

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
王新宇;牛李凤华;贺坤;: "APP隐私泄露风险评估与保护方案", 通信学报 *

Cited By (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112418578A (en) * 2019-08-22 2021-02-26 贝壳技术有限公司 Business risk early warning method, electronic device and storage medium
CN110855703A (en) * 2019-11-22 2020-02-28 秒针信息技术有限公司 Intelligent risk identification system and method and electronic equipment
CN111080306A (en) * 2019-12-17 2020-04-28 中国建设银行股份有限公司 Transaction risk determination method, device, equipment and storage medium
CN111144744B (en) * 2019-12-26 2022-06-24 支付宝(杭州)信息技术有限公司 Service processing method and device and electronic equipment
CN111144744A (en) * 2019-12-26 2020-05-12 支付宝(杭州)信息技术有限公司 Service processing method and device and electronic equipment
CN111613281A (en) * 2020-05-15 2020-09-01 首都医科大学 Delirium risk assessment method and system based on hospital information system
CN111613281B (en) * 2020-05-15 2023-11-14 首都医科大学 Delirium risk assessment method and system based on hospital information system
CN112989929A (en) * 2021-02-04 2021-06-18 支付宝(杭州)信息技术有限公司 Target user identification method and device and electronic equipment
CN112907132A (en) * 2021-03-25 2021-06-04 支付宝(杭州)信息技术有限公司 Full-link interactive wind control method and system
CN113421136A (en) * 2021-08-25 2021-09-21 深圳兆瑞优品科技有限公司 Online shopping wind control method, device and system
CN113992429A (en) * 2021-12-22 2022-01-28 支付宝(杭州)信息技术有限公司 Event processing method, device and equipment
CN115345533A (en) * 2022-10-20 2022-11-15 阿里健康科技(杭州)有限公司 Order data processing method, device, equipment and storage medium
CN116151627A (en) * 2023-04-04 2023-05-23 支付宝(杭州)信息技术有限公司 Business wind control method and device, storage medium and electronic equipment
CN116151627B (en) * 2023-04-04 2023-09-01 支付宝(杭州)信息技术有限公司 Business wind control method and device, storage medium and electronic equipment

Also Published As

Publication number Publication date
CN110147967B (en) 2023-05-30

Similar Documents

Publication Publication Date Title
CN110147967A (en) Risk prevention system method and device
CN106097043B (en) The processing method and server of a kind of credit data
CN109034660A (en) Based on the determination method and relevant apparatus of the risk control strategy of prediction model
CN105493587B (en) Adaptive location disturbance
CN104836781B (en) Distinguish the method and device for accessing user identity
Noor et al. Reputation attacks detection for effective trust assessment among cloud services
CN109063966A (en) The recognition methods of adventure account and device
CN108256720A (en) A kind of settlement of insurance claim methods of risk assessment and terminal device
RU2743626C1 (en) Strategy search in strategic interaction between parties
CN112465627B (en) Financial loan auditing method and system based on block chain and machine learning
CN109784959A (en) A kind of target user's prediction technique, device, background server and storage medium
CN109543726A (en) A kind of method and device of training pattern
CN108830443A (en) A kind of contract review method and device
CN107220867A (en) object control method and device
CN107657357B (en) Data processing method and device
CN110020865A (en) Transaction identification method and device
CN107346463A (en) Training, mode input data determination method and the device of risk control model
Tiwari et al. ACCOS: A Hybrid Anomaly-Aware Cloud Computing Formulation-Based Ontology Services in Clouds.
CN112948274A (en) Test case scoring model training method and test case selection method
CN109213758A (en) Data access method, device, equipment and computer readable storage medium
CN112488163A (en) Abnormal account identification method and device, computer equipment and storage medium
CN103593355A (en) User original content recommending method and device
CN112702410B (en) Evaluation system, method and related equipment based on blockchain network
CN110532773A (en) Malicious access Activity recognition method, data processing method, device and equipment
WO2016032531A1 (en) Improvement message based on element score

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
TA01 Transfer of patent application right

Effective date of registration: 20200923

Address after: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman, British Islands

Applicant after: Innovative advanced technology Co.,Ltd.

Address before: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman, British Islands

Applicant before: Advanced innovation technology Co.,Ltd.

Effective date of registration: 20200923

Address after: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman, British Islands

Applicant after: Advanced innovation technology Co.,Ltd.

Address before: A four-storey 847 mailbox in Grand Cayman Capital Building, British Cayman Islands

Applicant before: Alibaba Group Holding Ltd.

TA01 Transfer of patent application right
GR01 Patent grant
GR01 Patent grant