CN110297948B - Relational network construction method and device - Google Patents

Relational network construction method and device Download PDF

Info

Publication number
CN110297948B
CN110297948B CN201910450538.5A CN201910450538A CN110297948B CN 110297948 B CN110297948 B CN 110297948B CN 201910450538 A CN201910450538 A CN 201910450538A CN 110297948 B CN110297948 B CN 110297948B
Authority
CN
China
Prior art keywords
event
medium
vector
main body
similarity
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201910450538.5A
Other languages
Chinese (zh)
Other versions
CN110297948A (en
Inventor
叶捷明
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Advanced New Technologies Co Ltd
Advantageous New Technologies Co Ltd
Original Assignee
Advanced New Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Advanced New Technologies Co Ltd filed Critical Advanced New Technologies Co Ltd
Priority to CN201910450538.5A priority Critical patent/CN110297948B/en
Publication of CN110297948A publication Critical patent/CN110297948A/en
Application granted granted Critical
Publication of CN110297948B publication Critical patent/CN110297948B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/90Details of database functions independent of the retrieved data types
    • G06F16/901Indexing; Data structures therefor; Storage structures
    • G06F16/9024Graphs; Linked lists
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/90Details of database functions independent of the retrieved data types
    • G06F16/95Retrieval from the web
    • G06F16/951Indexing; Web crawling techniques
    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02DCLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D10/00Energy efficient computing, e.g. low power processors, power management or thermal management

Abstract

The embodiment of the specification discloses a method and a device for constructing a relational network, wherein the method for constructing the relational network can greatly reduce the complexity of an obtained relational network by establishing the association relationship between an event main body and a medium. In addition, the relation network construction method is to obtain the weight between the event main body and the medium which are mutually related according to the similarity between the local behavior characteristics and the whole behavior characteristics, namely, the event main body which is originally mutually independent is pulled to the same space in an embedded mode to calculate the similarity, and the overall view of all event main bodies at the other end of the medium which is related to the event main body can be seen through one event main body, so that the accuracy of calculation by adopting the relation network can be ensured.

Description

Relational network construction method and device
Technical Field
The embodiment of the specification relates to the technical field of Internet, in particular to a method and a device for constructing a relational network.
Background
With the development of internet technology, social platforms and transaction platforms realized based on the internet are more and more. Through these platforms, a user may implement various events, such as a query event, a payment event, and so forth. According to the event which has occurred, the event main bodies of the event are associated, and a relation network can be formed, wherein the event main bodies can be user account numbers, equipment names, mobile phone numbers, bank card account numbers and the like. In practical applications, new applications are often performed according to a relational network. For example, for a social platform, a recommendation system can be created according to a social relationship network to make friend recommendations; for the transaction platform, partner fraud identification may be performed according to a transaction relationship network to identify illegal transactions handled by crime partners.
Before using a relational network, it is first necessary to build the relational network. In the prior art, event bodies having association relation with the same medium are generally associated in pairs so as to form a relation network. The resource consumption of the calculation by adopting the relational network is great, and the real-time implementation is difficult.
Disclosure of Invention
The embodiment of the specification provides a method and a device for constructing a relational network.
In a first aspect, an embodiment of the present disclosure provides a method for constructing a relational network, including:
extracting an event main body and a medium of a target event which occurs in a preset time period;
associating the event body with the medium;
and obtaining the weight between the event main body and the medium according to the similarity between the local behavior characteristics and the overall behavior characteristics, wherein the local behavior characteristics are the behavior characteristics of the event main body on the medium, and the overall behavior characteristics are the behavior characteristics of all event main bodies associated with the medium on the medium.
In a second aspect, embodiments of the present disclosure provide a relational network construction apparatus, including:
the extraction module is used for extracting an event main body and a medium of a target event which occurs in a preset time period;
the association module is used for associating the event main body with the medium;
the weight obtaining module is used for obtaining the weight between the event main body and the medium according to the similarity between the local behavior characteristics and the overall behavior characteristics, wherein the local behavior characteristics are the behavior characteristics of the event main body on the medium, and the overall behavior characteristics are the behavior characteristics of all event main bodies associated with the medium on the medium.
In a third aspect, embodiments of the present disclosure provide a computer device including a memory, a processor, and a computer program stored on the memory and executable on the processor, the processor implementing the steps of the above-described relational network construction method when the computer program is executed.
In a fourth aspect, embodiments of the present disclosure provide a computer-readable storage medium having stored thereon a computer program which, when executed by the processor, performs the steps of the above-described relational network construction method.
The embodiment of the specification has the following beneficial effects:
in the embodiment of the specification, an event main body and a medium of a target event are extracted, the event main body and the medium are associated, and a weight between the event main body and the medium is obtained according to the similarity between a local behavior characteristic and an overall behavior characteristic, wherein the local behavior characteristic is a behavior characteristic of the event main body on the medium, and the overall behavior characteristic is a behavior characteristic of all event main bodies associated with the medium on the medium. On one hand, because the embodiment of the specification establishes the association relationship between the event main body and the medium, compared with the association relationship between the event main body and the event main body established in the prior art, the complexity of the obtained relationship network is greatly reduced, so that the resource consumption for computing by adopting the relationship network can be reduced, and real-time computing is realized; on the other hand, in the embodiment of the specification, the weight between the event main body and the medium which are mutually related is obtained according to the similarity between the local behavior characteristics and the overall behavior characteristics, namely, the event main body which is originally mutually independent is pulled to the same space in an embedded mode to calculate the similarity, and the overall view of all event main bodies at the other end of the medium which is related to the event main body can be seen through one event main body, so that the relevance between the event main body and the event main body is not lost, and the accuracy of calculation by adopting a relational network is ensured.
Drawings
FIG. 1 is a flow chart of a method of constructing a relational network according to an embodiment of the present disclosure;
FIG. 2 is a schematic diagram of a relationship network constructed using the relationship network construction method of the embodiments of the present disclosure;
FIG. 3 is a schematic diagram of a relational network constructed using a prior art relational network construction method;
fig. 4 is a schematic structural diagram of a relational network construction device according to an embodiment of the present disclosure;
fig. 5 is a schematic structural diagram of a computer device according to an embodiment of the present disclosure.
Detailed Description
As described in the background, a user may implement various events, such as a query event, a payment event, etc., through a social platform, a transaction platform, etc., network platform. Based on events that have occurred, event bodies of the events are correlated to form a relational network. Because the association relationship between the event main body and the event main body is established, if a certain medium is commonly used by N event main bodies, the generated association relationship is in the order of N square. When N is large, the resource consumption of the calculation of the relational network constructed in the mode is large, and real-time implementation is difficult. Based on this, the embodiment of the present disclosure provides a method and an apparatus for constructing a relational network, by constructing an association relationship between an event main body and a medium, the order of magnitude of the association relationship in which a certain medium is commonly used by N event main bodies is reduced to N. In addition, in order to avoid losing the association relationship between the event main body and the event main body, the embodiment of the specification pulls the event main bodies which are originally independent to each other to the same space to calculate the similarity in an embedded mode, so that the accuracy of calculation by adopting a relationship network is ensured.
In order to better understand the technical solutions described above, the technical solutions of the embodiments of the present specification are described in detail below through the accompanying drawings and the specific embodiments, and it should be understood that the specific features of the embodiments of the present specification and the specific features of the embodiments of the present specification are detailed descriptions of the technical solutions of the embodiments of the present specification, and not limit the technical solutions of the present specification, and the technical features of the embodiments of the present specification may be combined with each other without conflict.
In a first aspect, embodiments of the present disclosure provide a method for constructing a relational network. Fig. 1 is a flowchart of the relationship network construction method including step S102 and step S106.
S102, extracting an event main body and a medium of a target event which occurs in a preset time period.
The target event may be an event occurring in the real world, or may be an event implemented through a network platform, including but not limited to an internet transaction event, a website access event, a mail receiving event, an instant messaging event, a forum access event, an online payment event, a login event, etc., which are not limited in this embodiment of the present disclosure. For different types of target events, the determined event main bodies and media are different, and the event main bodies and media of the target events are determined according to actual application scenes. Taking the target event as an internet transaction event as an example, in an application scenario of performing partner fraud identification according to a transaction relationship network, a user account number which is maliciously registered in batches needs to be identified according to the transaction relationship network constructed by the internet transaction event, and the partner fraud behavior has the following characteristics: the plurality of user accounts repeatedly use one or a plurality of bank card accounts for transaction, the plurality of user accounts repeatedly use one or a plurality of IP addresses for transaction, the plurality of user accounts repeatedly use one or a plurality of receiving addresses, and the like, so that the user accounts can be determined as event main bodies, and one or a plurality of IP addresses, bank card accounts and receiving addresses are used as media. In other application scenarios, a trade shop, a trade terminal, a telephone number, or the like may be used as a medium.
Typically, after the target event is completed, the parameters generated by the target event are stored in a specified database, so that the event body and medium of the target event can be extracted from the specified database. In the embodiment of the present specification, the event body and medium of some or all of the target events occurring within a certain fixed period of time may be extracted, or the event body and medium of some or all of the target events occurring within a set period of time may be extracted, so as to periodically construct a relational network. For example, event bodies and media of target events occurring within the past 24 hours may be extracted every 24 hours. By extracting event main bodies and media of target events occurring within a set time interval, the constructed relationship network can reflect the association relationship among event main bodies in the latest target event in real time.
And S104, associating the event main body with the medium.
Specifically, the event main body and the medium are taken as nodes, and an association relationship between the event main body and the medium is established. Taking the target event as an internet transaction event, taking the event main body as a user account and the medium as a transaction store as an example, if 7 internet transaction events occur in the preset time period, wherein the internet transaction event 1 is that the user account A1 is consumed in the transaction store B1, the internet transaction event 2 is that the user account A2 is consumed in the transaction store B1, the internet transaction event 3 is that the user account A3 is consumed in the transaction store B1, the internet transaction event 4 is that the user account A4 is consumed in the transaction store B1, the internet transaction event 5 is that the user account A5 is consumed in the transaction store B1, the internet transaction event 6 is that the user account A1 is consumed in the transaction store B2, the internet transaction event 7 is that the user account A5 is consumed in the transaction store B2, the node A1 is associated with the node B1, the node A2 is associated with the node B1, the node A3 is associated with the node B1, the node A5 is associated with the node B1, and the node A2 is associated with the node B2. The relationship network obtained after the association relationship is established is shown in fig. 2, wherein one end with the association relationship is a user account, and the other end with the association relationship is a trade shop.
S106, obtaining the weight between the event main body and the medium according to the similarity between the local behavior characteristics and the overall behavior characteristics, wherein the local behavior characteristics are the behavior characteristics of the event main body on the medium, and the overall behavior characteristics are the behavior characteristics of all event main bodies associated with the medium on the medium.
Specifically, by determining the similarity between the local behavior feature and the global behavior feature, the similarity between the local behavior feature and the global behavior feature may be directly determined as the weight between the event main body and the medium, or some mapping may be performed on the similarity between the local behavior feature and the global behavior feature, and the data obtained after mapping may be determined as the weight between the event main body and the medium. In the embodiment of the present specification, the event bodies which are originally independent of each other are pulled to the same space in an embedded manner to calculate the similarity.
The local behavior feature is converted into a first vector, i.e. the behavior feature of the event body on the medium is converted into the first vector. Taking the relationship network shown in fig. 2 as an example, if the behavior feature is a distribution of the consumption amount, when determining the weight between the user account A1 and the transaction portal B1, the event body is the user account A1 and the medium is the transaction portal B1, and the local behavior feature is the distribution of the consumption amount of the user account A1 in the transaction portal B1. If the consumption amount of all the user accounts at the trade shop B1 has 2, 4 and 10 elements, and the user account A1 consumes 2, 5, 4, 1 and 10 elements 0 times at the trade shop B1, the consumption amount distribution of the user account A1 at the trade shop B1 is converted into a vector (5, 1, 0), and the first vector (5, 1, 0) is obtained.
Similarly, the overall behavioral characteristics are converted to a second vector, i.e., the behavioral characteristics of all event agents associated with the medium on the medium are converted to a second vector. Still taking the relationship network shown in fig. 2 as an example, if the behavior feature is a consumption amount distribution, when determining the weight between the user account A1 and the transaction portal B1, the event body is the user account A1 and the medium is the transaction portal B1, and the overall behavior feature is that all the user accounts (the user account A1, the user account A2, the user account A3, the user account A4 and the user account A5) associated with the transaction portal B1 are distributed in the consumption amount of the transaction portal B1. If the consumption amount of all the user accounts at the trade shop B1 has 2, 4 and 10 elements, and the user accounts A1, A2, A3, A4 and A5 are consumed 2, 20 and 10 elements for 100 times, 4 and 5 times at the trade shop B1, the distribution of the consumption amounts of the user accounts A1, A2, A3, A4 and A5 at the trade shop B1 is converted into vectors (100, 20, 5), and the second vector is obtained as (100, 20, 5).
And obtaining the similarity between the local behavior feature and the overall behavior feature according to the first vector and the second vector. In this embodiment of the present disclosure, a cosine value between the first vector and the second vector is calculated, and the cosine value between the first vector and the second vector is a similarity between the local behavior feature and the global behavior feature. Taking the first vector as (5, 1, 0) and the second vector as (100, 20, 5) as an example, the cosine value cos [ (5, 1, 0), (100, 20, 5) ]= 0.9988 between the first vector and the second vector indicates that the consumption distribution of the user account A1 at the trade shop B1 is very similar to the consumption distribution of other user accounts at the trade shop B1. It should be noted that, the similarity between the local behavior feature and the global behavior feature may be obtained in other manners, for example, using other vector distance algorithms, which are not limited in the embodiments of the present disclosure.
It should be noted that, when executing step S102, the event body and the medium of the target event may be extracted in real time, that is, each time a target event occurs, the event body and the medium of the target event are extracted; and extracting the event main body and the medium of each target event after each target event occurs within the preset time period. If the event body and the medium of the target event are extracted in real time, the event body and the medium extracted from the newly generated target event are added into the existing relational network when the step S104 is executed, and the weight between the event body and the medium associated with each other is updated when the step S106 is executed.
Because the embodiment of the specification establishes the association relationship between the event main body and the medium, the complexity of the obtained relationship network is greatly reduced. Taking the relationship network shown in fig. 2 as an example, the transaction portal B1 is commonly used by the user account A1, the user account A2, the user account A3, the user account A4 and the user account A5, and the number of generated association relationships is 5 by establishing the association relationship between the event main body and the medium according to the embodiment of the present specification; the related relationship between event main bodies is established by adopting the prior art, the established relationship network is shown in figure 3, and the number of generated related relationships is C 5 2 =10, i.e. a certain medium is commonly used by N event bodies, the correlation produced using the prior art is of the order of N squared.
Therefore, compared with the prior art of establishing the association relationship between the event main body and the event main body, the complexity of the relationship network obtained by the embodiment of the specification is greatly reduced, so that the resource consumption of calculation by adopting the relationship network can be reduced, and real-time calculation is realized. In addition, in the embodiment of the specification, the weight between the event main body and the medium which are mutually related is obtained according to the similarity between the local behavior characteristics and the overall behavior characteristics, namely, the event main body which is originally mutually independent is pulled to the same space in an embedded mode to calculate the similarity, and the overall view of all event main bodies at the other end of the medium which is related to the event main body can be seen through one event main body, so that the relevance between the event main body and the event main body is not lost, and the accuracy of calculation by adopting a relational network is ensured.
In a second aspect, based on the same inventive concept, embodiments of the present specification provide a relational network construction apparatus. Fig. 4 is a schematic structural view of the relationship network constructing apparatus, which includes:
an extraction module 41, configured to extract an event main body and a medium of a target event occurring within a preset period of time;
an association module 42 for associating the event body with the medium;
the weight obtaining module 43 is configured to obtain weights between the event body and the medium according to a similarity between a local behavior feature and an overall behavior feature, where the local behavior feature is a behavior feature of the event body on the medium, and the overall behavior feature is a behavior feature of all event bodies associated with the medium on the medium.
In an alternative implementation, the weight obtaining module 43 includes:
a similarity determining module 431, configured to determine a similarity between the local behavior feature and the global behavior feature;
a weight determining module 432, configured to determine a similarity between the local behavior feature and the global behavior feature as a weight between the event body and the medium.
In an alternative implementation, the similarity determining module 431 includes:
a first conversion module for converting the local behavior feature into a first vector;
a second conversion module for converting the global behavioral characteristics into a second vector;
and the similarity obtaining module is used for obtaining the similarity between the local behavior characteristic and the whole behavior characteristic according to the first vector and the second vector.
In an alternative implementation, the similarity obtaining module is configured to calculate a cosine value between the first vector and the second vector, where the cosine value between the first vector and the second vector is a similarity between the local behavior feature and the global behavior feature.
In an alternative implementation, the extraction module 41 is configured to extract event bodies and media of target events that occur within a set time interval.
In an alternative implementation, the target event is an internet transaction event, the event body is a user account, and the medium is one or more of a transaction store, an IP address, a transaction terminal, a receiving address, a telephone number, and a bank card account.
In an alternative implementation, when the event body is a user account and the medium is a transaction store, the local behavior feature is a distribution of the amount of consumption of the user account at the transaction store, and the global behavior feature is a distribution of the amount of consumption of all user accounts associated with the transaction store at the transaction store.
In a third aspect, the present invention also provides a computer apparatus, as shown in fig. 5, based on the same inventive concept as the relationship network construction method in the foregoing embodiment. The computer device comprises a memory 504, a processor 502 and a computer program stored on the memory 504 and executable on the processor 502, which processor 502 implements the steps of the relationship network construction method of the previous embodiments when executing the computer program.
In FIG. 5, the bus architecture is represented by a bus 500, where the bus 500 may include any number of interconnected buses and bridges, with the bus 500 linking together various circuits, including one or more processors, represented by a processor 502, and memory, represented by a memory 504. Bus 500 may also link together various other circuits such as peripheral devices, voltage regulators, power management circuits, etc., as are well known in the art and, therefore, will not be described further herein. Bus interface 505 provides an interface between bus 500 and receiver 501 and transmitter 503. The receiver 501 and the transmitter 503 may be the same element, i.e. a transceiver, providing a means for communicating with various other apparatus over a transmission medium. The processor 502 is responsible for managing the bus 500 and general processing, while the memory 504 may be used to store data used by the processor 502 in performing operations.
In a fourth aspect, based on the same inventive concept as the relationship network construction method in the foregoing embodiment, the present invention also provides a computer-readable storage medium having stored thereon a computer program which, when executed by a processor, implements the steps of the relationship network construction method in the foregoing embodiment.
The present description is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the specification. It will be understood that each flow and/or block of the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
While preferred embodiments of the present description have been described, additional variations and modifications in those embodiments may occur to those skilled in the art once they learn of the basic inventive concepts. It is therefore intended that the following claims be interpreted as including the preferred embodiments and all such alterations and modifications as fall within the scope of the disclosure.
It will be apparent to those skilled in the art that various modifications and variations can be made in the present specification without departing from the spirit or scope of the specification. Thus, if such modifications and variations of the present specification fall within the scope of the claims and the equivalents thereof, the present specification is also intended to include such modifications and variations.

Claims (10)

1. A method of relational network construction comprising:
extracting an event main body and a medium of a target event which occurs in a preset time period;
associating the event body with the medium;
obtaining weights between the event main body and the medium according to the similarity between the local behavior characteristics and the overall behavior characteristics, wherein the local behavior characteristics are the behavior characteristics of the event main body on the medium, and the overall behavior characteristics are the behavior characteristics of all event main bodies associated with the medium on the medium;
the obtaining the weight between the event main body and the medium according to the similarity between the local behavior characteristics and the overall behavior characteristics comprises:
determining similarity between the local behavioral characteristics and the global behavioral characteristics includes: converting the local behavioral characteristics to a first vector; converting the global behavioral characteristics to a second vector; obtaining similarity between the local behavioral feature and the global behavioral feature from the first vector and the second vector, comprising: calculating a cosine value between the first vector and the second vector, wherein the cosine value between the first vector and the second vector is the similarity between the local behavior feature and the overall behavior feature;
and determining the similarity between the local behavior characteristic and the overall behavior characteristic as the weight between the event main body and the medium.
2. The method of claim 1, the extracting event bodies and media of the target event occurring within a preset period of time comprising:
and extracting an event main body and a medium of the target event which occurs in the set time interval.
3. The method of claim 1, wherein the target event is an internet transaction event, the event body is a user account, and the medium is one or more of a transaction store, an IP address, a transaction terminal, a receiving address, a telephone number, and a bank card account.
4. The method of claim 1, wherein when the event body is a user account and the medium is a transaction store, the local behavioral characteristic is a distribution of the user account's spending amount at the transaction store, and the global behavioral characteristic is a distribution of the user account's spending amount at the transaction store for all user accounts associated with the transaction store.
5. A relational network construction device comprising:
the extraction module is used for extracting an event main body and a medium of a target event which occurs in a preset time period;
the association module is used for associating the event main body with the medium;
the weight obtaining module is used for obtaining the weight between the event main body and the medium according to the similarity between the local behavior characteristics and the overall behavior characteristics, wherein the local behavior characteristics are the behavior characteristics of the event main body on the medium, and the overall behavior characteristics are the behavior characteristics of all event main bodies associated with the medium on the medium;
the weight obtaining module includes:
the similarity determining module is used for determining similarity between the local behavior characteristics and the overall behavior characteristics;
a weight determining module, configured to determine a similarity between the local behavior feature and the global behavior feature as a weight between the event main body and the medium;
the similarity determination module comprises:
a first conversion module for converting the local behavior feature into a first vector;
a second conversion module for converting the global behavioral characteristics into a second vector;
a similarity obtaining module, configured to obtain a similarity between the local behavior feature and the global behavior feature according to the first vector and the second vector; the method is particularly used for calculating cosine values between the first vector and the second vector, wherein the cosine values between the first vector and the second vector are the similarity between the local behavior characteristics and the whole behavior characteristics.
6. The apparatus of claim 5, the extraction module to extract event bodies and media for target events that occur within a set time interval.
7. The apparatus of claim 5, the target event is an internet transaction event, the event body is a user account, and the medium is one or more of a transaction store, an IP address, a transaction terminal, a receiving address, a telephone number, and a bank card account.
8. The apparatus of claim 5, wherein when the event body is a user account and the medium is a transaction store, the local behavioral characteristic is a distribution of the user account's spending amount at the transaction store, and the global behavioral characteristic is a distribution of the user account's spending amount at the transaction store for all user accounts associated with the transaction store.
9. A computer device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, the processor implementing the steps of the method of any one of claims 1 to 4 when the computer program is executed.
10. A computer readable storage medium having stored thereon a computer program which, when executed by a processor, implements the steps of the method of any of claims 1 to 4.
CN201910450538.5A 2019-05-28 2019-05-28 Relational network construction method and device Active CN110297948B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201910450538.5A CN110297948B (en) 2019-05-28 2019-05-28 Relational network construction method and device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201910450538.5A CN110297948B (en) 2019-05-28 2019-05-28 Relational network construction method and device

Publications (2)

Publication Number Publication Date
CN110297948A CN110297948A (en) 2019-10-01
CN110297948B true CN110297948B (en) 2023-08-22

Family

ID=68027229

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201910450538.5A Active CN110297948B (en) 2019-05-28 2019-05-28 Relational network construction method and device

Country Status (1)

Country Link
CN (1) CN110297948B (en)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111104562B (en) * 2019-11-05 2023-06-23 北京金堤科技有限公司 Method and device for generating principal relation network, electronic equipment and storage medium
CN111369264A (en) * 2020-02-13 2020-07-03 平安科技(深圳)有限公司 Entity association method, device, equipment and computer readable storage medium

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106022900A (en) * 2016-08-08 2016-10-12 北京京东尚科信息技术有限公司 User risk data mining method and device
CN106156151A (en) * 2015-04-14 2016-11-23 阿里巴巴集团控股有限公司 The Risk Identification Method of internetwork operation event and device
WO2018103456A1 (en) * 2016-12-06 2018-06-14 中国银联股份有限公司 Method and apparatus for grouping communities on the basis of feature matching network, and electronic device

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106156151A (en) * 2015-04-14 2016-11-23 阿里巴巴集团控股有限公司 The Risk Identification Method of internetwork operation event and device
CN106022900A (en) * 2016-08-08 2016-10-12 北京京东尚科信息技术有限公司 User risk data mining method and device
WO2018103456A1 (en) * 2016-12-06 2018-06-14 中国银联股份有限公司 Method and apparatus for grouping communities on the basis of feature matching network, and electronic device

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
基于事件关联网络的用户兴趣话题发现算法;乌吉斯古愣等;《现代电子技术》;20150315(第06期);全文 *

Also Published As

Publication number Publication date
CN110297948A (en) 2019-10-01

Similar Documents

Publication Publication Date Title
CN107872772B (en) Method and device for detecting fraud short messages
CN106682906B (en) Risk identification and service processing method and equipment
CN108269087B (en) Method and device for processing position information
CN109345417B (en) Online assessment method and terminal equipment for business personnel based on identity authentication
CN106301978A (en) The recognition methods of gang member account, device and equipment
CN110837653B (en) Label prediction method, apparatus and computer readable storage medium
CN110297948B (en) Relational network construction method and device
CN112533209A (en) Black product identification method and black product identification device
CN112039861B (en) Risk identification method and device, electronic equipment and computer readable storage medium
CN110766166B (en) Push model optimization method and device executed by user terminal
CN110427574B (en) Route similarity determination method, device, equipment and medium
CN109345252A (en) A kind of online trading control method, device and computer equipment
CN112632409A (en) Same user identification method, device, computer equipment and storage medium
CN112328802A (en) Data processing method and device and server
CN116302889A (en) Performance test method and device for functional module and server
CN112073554B (en) Global unique identifier generation method, device and computer readable storage medium
CN111506486B (en) Data processing method and system
CN109962907B (en) User identity recognition method based on big data and terminal equipment
CN113779116A (en) Object sorting method, related equipment and medium
CN111291019B (en) Similarity discrimination method and device for data model
CN113516065A (en) Data weight measuring and calculating method and device based on block chain, server and storage medium
CN111367634A (en) Information processing method, information processing device and terminal equipment
CN113743838A (en) Target user identification method and device, computer equipment and storage medium
CN112214387B (en) Knowledge graph-based user operation behavior prediction method and device
CN113313505B (en) Abnormality positioning method and device and computing equipment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
TA01 Transfer of patent application right

Effective date of registration: 20200928

Address after: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman Islands

Applicant after: Advanced innovation technology Co.,Ltd.

Address before: A four-storey 847 mailbox in Grand Cayman Capital Building, British Cayman Islands

Applicant before: Alibaba Group Holding Ltd.

Effective date of registration: 20200928

Address after: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman Islands

Applicant after: Innovative advanced technology Co.,Ltd.

Address before: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman Islands

Applicant before: Advanced innovation technology Co.,Ltd.

TA01 Transfer of patent application right
GR01 Patent grant
GR01 Patent grant