CN111524042A

CN111524042A - Early warning method, early warning device and computer readable storage medium

Info

Publication number: CN111524042A
Application number: CN201910108690.5A
Authority: CN
Inventors: 吴刊
Original assignee: Alibaba Group Holding Ltd
Current assignee: Alibaba Group Holding Ltd
Priority date: 2019-02-03
Filing date: 2019-02-03
Publication date: 2020-08-11

Abstract

The invention provides an early warning method, an early warning device and a computer readable storage medium. The method comprises the following steps: acquiring a plurality of first events to be analyzed; determining event element consistency relations among the plurality of first events to be analyzed; removing repeated events to be analyzed in the first events to be analyzed according to the determined event element consistency relationship to obtain a plurality of second events to be analyzed; and carrying out early warning according to the plurality of second events to be analyzed. According to the invention, repeated dispute events can be screened and removed, and early warning is realized based on the de-duplicated dispute events, so that the total amount of the dispute events is reduced, the processing time of the dispute events is shortened, and the processing efficiency of the dispute events is improved.

Description

Early warning method, early warning device and computer readable storage medium

Technical Field

The present invention relates to the field of big data processing technologies, and in particular, to an early warning method, an early warning device, and a computer-readable storage medium.

Background

With the transformation of market economy, the treatment of dispute events becomes a social problem to be solved. The arrival of the big data era provides a brand-new opportunity for the development of the work of troubleshooting and debugging of dispute events.

The existing dispute event resolving platform with the help of big data has the functions of online consultation, assessment, mediation, arbitration, litigation and the like by relying on the Internet technology, artificial intelligence and the big data. The dispute events are filtered and shunted continuously, disputes can be solved to the greatest extent, and cases entering litigation procedures are reduced. Therefore, dispute events can be solved online and efficiently.

However, the above prior art only relates to improving the efficiency of dispute resolution, and does not relate to analysis and early warning before dispute events occur. Therefore, the inventor believes that an early warning method is needed.

Disclosure of Invention

An object of the embodiments of the present invention is to provide a new technical solution for early warning.

According to a first aspect of the embodiments of the present invention, there is provided an early warning method, including:

acquiring a plurality of first events to be analyzed;

determining event element consistency relations among the plurality of first events to be analyzed;

removing repeated events to be analyzed in the first events to be analyzed according to the determined event element consistency relationship to obtain a plurality of second events to be analyzed;

and carrying out early warning according to the plurality of second events to be analyzed.

Optionally, the determining an event element consistency relationship between the plurality of first events to be analyzed includes:

acquiring corresponding event elements from the plurality of first events to be analyzed;

and calculating the similarity among the plurality of first events to be analyzed according to the event elements.

Optionally, the removing, according to the determined event element consistency relationship, repeated events to be analyzed in the first events to be analyzed to obtain a plurality of second events to be analyzed includes:

and when the similarity is greater than a first preset threshold value, removing repeated events to be analyzed in the first events to be analyzed to obtain a plurality of second events to be analyzed.

Optionally, the method further includes:

and grouping a plurality of second events to be analyzed, of which the similarity is smaller than the first preset threshold and larger than a second preset threshold, into a group.

Optionally, the performing early warning according to the plurality of second events to be analyzed includes:

and when a preset early warning triggering condition is met, early warning is carried out according to the grouping of the plurality of second events to be analyzed.

Optionally, the event element includes at least one of: time, address, person, event source, event type.

Optionally, the method further includes:

determining event objects of the second events to be analyzed;

determining an association relationship between the plurality of event objects.

Optionally, the determining the association relationship between the event objects includes:

and forming the relation network by taking the event objects as nodes in the relation network and taking the relation between the event objects as edges in the relation network.

and early warning is carried out according to the relationship network among the plurality of second events to be analyzed.

Optionally, the event to be analyzed includes at least one of: dispute events, enterprise information and social security information;

the acquiring a plurality of first events to be analyzed includes:

acquiring the dispute event from a dispute reporting platform;

acquiring the enterprise information from an enterprise information system; or

And obtaining the social security information from a social security system.

According to a second aspect of the present invention, there is provided an early warning device, the device comprising: a memory for storing executable instructions and a processor; the processor is configured to perform the warning method according to any one of the first aspect of the invention under control of the instructions.

According to a third aspect of the present invention, there is provided an early warning apparatus, the apparatus comprising:

the acquisition module is used for acquiring a plurality of first events to be analyzed;

the determining module is used for determining event element consistency relations among the plurality of first events to be analyzed;

the duplication removing module is used for removing repeated events to be analyzed in the plurality of first events to be analyzed according to the event element consistent relation determined by the determining module to obtain a plurality of second events to be analyzed;

and the early warning module is used for early warning according to the plurality of second events to be analyzed.

According to a fourth aspect of the present invention, there is provided a computer-readable storage medium having stored thereon computer instructions which, when executed by a processor, implement the warning method according to any one of the first aspect of the present invention.

According to one embodiment of the invention, repeated dispute events can be discriminated and removed, and early warning is realized based on the de-duplicated dispute events, so that the total amount of dispute events is reduced, the processing time of the dispute events is shortened, and the processing efficiency of the dispute events is improved.

Other features of the present invention and advantages thereof will become apparent from the following detailed description of exemplary embodiments thereof, which proceeds with reference to the accompanying drawings.

Drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments of the invention and together with the description, serve to explain the principles of the invention.

Fig. 1 is a block diagram of a hardware configuration of an early warning system that can be used to implement an embodiment of the present invention.

Fig. 2 is a schematic flow chart of a first embodiment of the warning method according to the present invention.

Fig. 3 is a schematic flow chart of a second embodiment of the warning method according to the present invention.

Fig. 4 is a schematic diagram of a relationship network according to an embodiment of the invention.

Fig. 5 is a schematic diagram of a hardware structure of an early warning apparatus according to a first embodiment of the present invention.

Fig. 6 is a schematic diagram of a hardware structure of an early warning apparatus according to a second embodiment of the present invention.

Detailed Description

Various exemplary embodiments of the present invention will now be described in detail with reference to the accompanying drawings. It should be noted that: the relative arrangement of the components and steps, the numerical expressions and numerical values set forth in these embodiments do not limit the scope of the present invention unless specifically stated otherwise.

The following description of at least one exemplary embodiment is merely illustrative in nature and is in no way intended to limit the invention, its application, or uses.

Techniques, methods, and apparatus known to those of ordinary skill in the relevant art may not be discussed in detail but are intended to be part of the specification where appropriate.

In all examples shown and discussed herein, any particular value should be construed as merely illustrative, and not limiting. Thus, other examples of the exemplary embodiments may have different values.

It should be noted that: like reference numbers and letters refer to like items in the following figures, and thus, once an item is defined in one figure, further discussion thereof is not required in subsequent figures.

Various embodiments and examples according to embodiments of the present invention are described below with reference to the accompanying drawings.

< hardware configuration >

As shown in fig. 1, the early warning system 1000 includes a server 1100, a client 1200, and a network 1300.

Server 1100 may be, for example, a blade server or the like. In one example, the server 1100 can be a computer. In another example, the server 1100 may be as shown in FIG. 1, including a processor 1110, a memory 1120, an interface device 1130, a communication device 1140, a display device 1150, and an input device 1160. Although the server 1100 may also include a speaker, a microphone, and the like, these components are not relevant to the present invention and are omitted here.

The processor 1110 may be, for example, a central processing unit CPU, a microprocessor MCU, or the like. The memory 1120 includes, for example, a ROM (read only memory), a RAM (random access memory), a nonvolatile memory such as a hard disk, and the like. The interface device 1130 includes, for example, a USB interface, a serial interface, and the like. The communication device 1140 is capable of wired or wireless communication, for example. The display device 1150 is, for example, a liquid crystal display panel. Input devices 1160 may include, for example, a touch screen, a keyboard, and the like.

Client 1200 may be a laptop (1200-1), desktop (1200-2), cell phone (1200-3), tablet (1200-4), etc. As shown in fig. 1, client 1200 may include a processor 1210, memory 1220, interface device 1230, communication device 1240, display device 1250, input device 1260, speaker 1270, microphone 1280, and so on. The processor 1210 may be a central processing unit CPU, a microprocessor MCU, or the like. The memory 1220 includes, for example, a ROM (read only memory), a RAM (random access memory), a nonvolatile memory such as a hard disk, and the like. The interface device 1230 includes, for example, a USB interface, a headphone interface, and the like. The communication device 1240 can perform wired or wireless communication, for example. The display device 1250 is, for example, a liquid crystal display, a touch display, or the like. The input device 1260 may include, for example, a touch screen, a keyboard, and the like. A user can input/output voice information through the speaker 1270 and the microphone 1280.

The communication network 1300 may be a wireless network or a network, a local area network or a wide area network. In the early warning system 1000 shown in fig. 1, clients 1200-1, 1200-2, 1200-3, 1200-4 and server 1100 may communicate over a communication network 1300.

The early warning system 1100 shown in fig. 1 is merely illustrative and is in no way intended to limit the present invention, its application, or uses. In an embodiment of the present invention, the memory 1120 of the server 1100 is configured to store instructions for controlling the processor 1110 to perform any one of the warning methods provided by the embodiment of the present invention. In addition, the memory 1220 of the client 1200 is used for storing instructions for controlling the processor 1210 to operate to execute any one of the warning methods provided by the embodiments of the present invention. It will be appreciated by those skilled in the art that although a number of devices are shown in FIG. 1 for both server 1100 and client 1200, the present invention may refer to only some of the devices, for example, server 1100 may refer to only processor 1110 and storage 1120, or client 1200 may refer to only processor 1210 and storage 1220, etc. The skilled person can design the instructions according to the disclosed solution. How the instructions control the operation of the processor is well known in the art and will not be described in detail herein.

< method examples >

Fig. 2 is a schematic flow chart of an embodiment of the warning method according to the present invention.

The warning method of the present embodiment may be specifically executed by the server 1100 shown in fig. 1.

As shown in fig. 2, at step 2100, a first plurality of events to be analyzed is obtained.

Wherein the first event to be analyzed may include at least: dispute events, enterprise information, and social security information. In this step, the server 1100 may specifically obtain the dispute event from a dispute reporting platform, obtain the enterprise information from an enterprise information system, or obtain the social security information from a social security system.

For example, the dispute events may include basic daily dispute events, network dispute events, traffic accident dispute events, owing dispute events, and the like. Users can upload basic daily dispute events through the basic comprehensive treatment platform, network dispute events through the 12315 system, traffic accident dispute events through the road traffic accident dispute integrated treatment platform, and owing dispute events from the arbitration system.

Correspondingly, the server 1100 can obtain the daily dispute events of the base from the comprehensive treatment platform of the base; acquiring a network dispute event from a 12315 system; and acquiring a traffic accident dispute event from the road traffic accident dispute integrated processing platform, and acquiring a debt dispute event from the arbitration system.

The enterprise information may include, for example, enterprise credit information and enterprise base information. Users can report the enterprise credit information and the enterprise basic information through the enterprise information system. Accordingly, the server 1100 may obtain the enterprise base information and the enterprise credit information from the enterprise information system. The enterprise information system may be, for example, an enterprise credit information publicity system, an enterprise credit information inquiry system, or the like. This embodiment is not particularly limited thereto.

Step 2200, determining an event element consistency relationship between the plurality of first events to be analyzed.

Wherein the event elements include at least one of: time, address, person, event source, event type. The time refers to the time when the server 1100 acquires the first event to be analyzed. The address refers to an address where the first event to be analyzed occurs, and the representation form of the address may be represented in a form of latitude and longitude, a form of a detailed address, or a form of an abbreviated address, for example. The person refers to a person participating in the first event to be analyzed, such as a leader and a victim of a dispute event, and/or a reporter of the dispute event. The event source refers to a way to obtain the first event to be analyzed, for example, the first event to be analyzed is obtained from a road traffic accident dispute integrated processing platform or an arbitration system. The event type refers to a type of the first event to be analyzed, such as a specific dispute event.

In this step, when determining the event element consistency relationship between the first events to be analyzed, the server 1100 obtains corresponding event elements from the first events to be analyzed, and calculates the similarity between the first events to be analyzed according to the event elements.

In practical applications, the server 1100 may calculate, based on the event elements, similarities between the first events to be analyzed by using a cluster analysis algorithm, and determine the first events to be analyzed with high similarities as having an event element consistent relationship.

2300, removing repeated events to be analyzed in the plurality of first events to be analyzed according to the determined event element consistency relationship to obtain a plurality of second events to be analyzed.

Specifically, when removing repeated events to be analyzed according to the event element consistency relationship, the server 1100 performs determination based on the similarity calculated in step 2200. That is, when the server 1100 determines that the similarity is greater than the first preset threshold, the repeated events to be analyzed in the multiple events to be analyzed are removed.

For example, a first preset threshold is set to 90. The server 1100 calculates that the similarity between the events to be analyzed A, B, C is 95 and is greater than the first preset threshold according to the event element consistency relationship, and the server 1100 determines that the event to be analyzed A, B, C is a repeated event to be analyzed, and may identify the event to be analyzed A, B, C as the same event and remove any two events to be analyzed. For example, three people in sequence report the same traffic accident dispute event through the road traffic accident dispute integrated processing platform, and the server 1100 determines the three traffic accident dispute events as one traffic accident dispute event.

It should be noted that, in order to avoid that the representation forms of the addresses in the first events to be analyzed, which are obtained from different ways, are not uniform, so that the same location cannot be accurately identified, in this embodiment, after obtaining the corresponding event elements from the plurality of first events to be analyzed, the server 1100 needs to further convert the addresses into the uniform representation form. For example, the address may be subjected to a structuring process, including a word segmentation process, an error correction process, a completion process, and the like; or, the addresses can be converted into longitude and latitude to be expressed; alternatively, the addresses may be collectively converted into specific addresses for representation, and the like. This embodiment is not particularly limited thereto.

Further, the server 1100 may group the second event to be analyzed according to the calculated similarity. Specifically, the plurality of second events to be analyzed whose similarity is smaller than the first preset threshold and larger than the second preset threshold may be grouped into one group.

For example, a first preset threshold value is set to 90, and a second preset threshold value is set to 60. The server 1100 calculates, according to the event elements, that the similarity between the events D and E to be analyzed is 80, is smaller than the first preset threshold 90 and is greater than the second preset threshold 60, and the server 1100 may determine that there is a certain similarity between the events D and E to be analyzed, and group the events D and E to be analyzed into a group. For example, in the same enterprise, the event D to be analyzed is an event of insufficient salary uploaded from the arbitration system by the enterprise employee a, the event E to be analyzed is an event of insufficient salary uploaded from the arbitration system by the enterprise employee b, and the events of insufficient salary are all occurred in the enterprise, so that the events D and E to be analyzed can be grouped into one group.

And 2400, performing early warning according to the plurality of second events to be analyzed.

Specifically, the server 1100 may perform early warning according to the group of the second event to be analyzed when a preset early warning trigger condition is satisfied. For example, when the second event to be analyzed occurs, the server 1100 determines a group in which the second event to be analyzed is located, and performs early warning according to other second events to be analyzed in the group. For example, the server 1100 may perform risk tagging on other second events to be analyzed in the group, or may send an early warning message to a management department that processes the other second events to be analyzed. For example, the preset early warning trigger condition is that the same owing dispute event reaches 4. When the same owing dispute event is reported for 2 times, the server 1100 may perform risk marking on the owing dispute event in the system, and when the reporting times for the owing dispute event reaches 4 times, the server 1100 determines that the preset early warning trigger condition is satisfied, and sends a warning message to the staff of the arbitration system, so that the related staff can process the owing dispute event of the enterprise as early as possible, and the situation expansion is avoided. Optionally, the early warning message may be a short message, a telephone call, an email, an instant messaging message, or the like. This embodiment is not particularly limited thereto.

In an embodiment, as shown in fig. 3, the warning method of the embodiment may further include the following steps 3100 to 3200:

at step 3100, event objects for the second plurality of events to be analyzed are determined.

The event object refers to a specific subject in the event, for example, the event object may be a legal representative, an enterprise, or a factory. And is not particularly limited herein.

Step 3200, determining an association relationship between the plurality of event objects.

Specifically, in this step, the server 1100 may use the event objects as nodes in a relationship network, and use the relationships between the event objects as edges in the relationship network, so as to form the relationship network.

For example, when the server 1100 constructs a relationship network between an enterprise, a legal representative, and a site/factory, the legal representative, the enterprise, and the site/factory may be represented as nodes by using the event objects, the relationships between the legal representative and the enterprise, the relationships between the enterprise and the site/factory, and the relationships between the business and the site/factory may be represented as edges by using the enterprise basic information, the enterprise credit information, the site information, and the factory information obtained from the enterprise information platform, and the relationship between the legal representative, the enterprise, and the site/factory may be represented as the thickness of the edges by using the social security information obtained from the social security system. The server 1100 may store the relational network in the form of a data table structure

The relationship between the legal representative and the enterprise, and between the enterprise and the worksite, is clearly illustrated in the relationship network shown in FIG. 4. The legal representatives have participated in Enterprise A and Enterprise B, Enterprise A owns worksite A, B, C, D, Enterprise B owns worksites E and F, and the legal representatives, Enterprise A, Enterprise B, worksite A, B, C, D, E and F all serve as the event objects and are represented by nodes. The relationships between the legal representatives and enterprise A and enterprise B, between enterprise A and worksite A, B, C, D, and between enterprise B and worksites E and F, are represented by edges, forming a relationship network. The strength of the relationship between the legal representative and the enterprise can be determined according to the proportion of the legal representative to the stocks, for example, the relationship is stronger if the ratio of the stocks is larger.

Correspondingly, when the early warning is performed according to the plurality of second events to be analyzed in the step 2400, the method specifically includes: and early warning is carried out according to the relationship network among the plurality of second events to be analyzed.

In this embodiment, the server 1100 may be implemented based on the constructed relationship network. That is to say, when the second event to be analyzed occurs, taking the event object where the second event to be analyzed occurs as an initial node, and performing early warning according to the event objects corresponding to other nodes connected to the initial node along the edge of the relationship network.

Specifically, when a node in the relationship network has a dispute event, the dispute risk may be propagated along the edge of the relationship network. The probability of dispute risk transfer is different according to the different thicknesses of the edges among the nodes, and the thicker the edges are, the stronger the relationship between the event objects corresponding to the nodes is, the higher the probability of dispute risk transfer is. Therefore, when a dispute event occurs at a node, the server 1100 may perform early warning based on the relationship network by using the node as an initial node and according to event objects corresponding to other connected nodes along the edge of the relationship network, so as to implement early warning of the dispute event.

In practical application, when performing early warning according to event objects corresponding to other connected nodes, the server 1100 may perform early warning only according to event objects corresponding to other nodes connected to the start node; and early warning can be carried out layer by layer along the relationship network, and the possibility that the second event to be analyzed occurs at each node is gradually decreased layer by layer in the layer by layer early warning. This embodiment is not particularly limited thereto.

For example, if a site/factory is under-paid, it indicates that enterprise a to which the site/factory belongs is financially bad, and if enterprise a owns several factories/sites at the same time, it is highly likely that enterprise a will move the wages of factory/site a to compensate the wages of factory/site B. If enterprise a runs poorly, it is highly likely that several factories/worksites will have underway dispute events at the same time. Based on the relationship network, the server 1100 may perform risk tagging on other factories/construction sites owned by the enterprise a when an owing dispute event occurs at one factory/construction site, or send an early warning message to a responsible person of the relevant department, so that the responsible person of the relevant department checks detailed operation conditions, credit conditions, industry trends, and the like of the enterprise a according to the early warning message, and timely take effective measures to avoid the owing dispute event occurring at other factories/construction sites of the enterprise a.

According to the early warning method, a plurality of first events to be analyzed are obtained; determining event element consistency relations among the plurality of first events to be analyzed; and removing duplication of the first event to be analyzed according to the determined event element consistency relationship to obtain a plurality of second events to be analyzed, and performing early warning according to the plurality of second events to be analyzed. According to the embodiment, repeated dispute events can be screened and removed, and early warning is realized based on the de-duplicated dispute events, so that the total amount of the dispute events is reduced, the processing time of the dispute events is shortened, and the processing efficiency of the dispute events is improved.

< apparatus embodiment >

As shown in fig. 5, the warning apparatus 5000 of the present embodiment may include a memory 5200 and a processor 5100. Memory 5200 is used to store instructions that control processor 5100 to operate to perform the warning method of any of the embodiments of the present invention. The early warning device may be provided in a server as shown in fig. 1, for example. The skilled person can design the instructions according to the disclosed solution. How the instructions control the operation of the processor is well known in the art and will not be described in detail herein.

As shown in fig. 6, the warning device 6000 of the present embodiment may include: an acquisition module 6100, a determination module 6200, a deduplication module 6300, and an early warning module 6400.

The obtaining module 6100 is configured to obtain a plurality of first events to be analyzed; the determining module 6200 is configured to determine event element consistency relationships among the first events to be analyzed; the duplicate removal module 6300 is configured to remove a repeated event to be analyzed from the multiple first events to be analyzed according to the event element consistency relationship determined by the determination module, so as to obtain multiple second events to be analyzed; the early warning module 6400 is configured to perform early warning according to the plurality of second events to be analyzed.

Wherein the event elements include at least one of: time, address, person, event source, event type.

Specifically, the determining module 6200 may, when determining the event element consistency relationship among the first events to be analyzed, obtain a corresponding event element from the first events to be analyzed; and calculating the similarity among the plurality of first events to be analyzed according to the event elements.

The deduplication module 6300 may be specifically configured to, when the similarity is greater than a first preset threshold, remove a repeated event to be analyzed from the multiple first events to be analyzed to obtain multiple second events to be analyzed.

The early warning apparatus 6000 of this embodiment may further include a grouping module (not shown in the figure) configured to group a plurality of second events to be analyzed, of which the similarity is smaller than the first preset threshold and larger than a second preset threshold, into a group.

Correspondingly, the early warning module 6400 is specifically configured to perform early warning according to the grouping of the second events to be analyzed when a preset early warning trigger condition is met.

Further, the determining module 6200 may be further configured to determine event objects of the second events to be analyzed; determining an association relationship between the plurality of event objects. Specifically, when determining the association relationship between the event objects, the determining module 6200 takes the event objects as nodes in a relationship network and takes the relationship between the event objects as edges in the relationship network to form the relationship network.

Correspondingly, the early warning module 6400 is further configured to perform early warning according to a relationship network between the plurality of second events to be analyzed.

Specifically, the event to be analyzed includes at least one of the following: dispute events, enterprise information, and social security information. Correspondingly, the obtaining module 6100 may be specifically configured to obtain the dispute event from a dispute reporting platform; acquiring the enterprise information from an enterprise information platform; alternatively, the social security information is obtained from a social security system.

The early warning apparatus of this embodiment may be used to implement the technical solutions of the above method embodiments, and the implementation principles and technical effects thereof are similar, and are not described herein again.

< computer-readable storage Medium >

In this embodiment, a computer-readable storage medium is further provided, where the storage medium stores computer instructions, and when the computer instructions in the storage medium are executed by a processor, the computer instructions implement any one of the warning methods provided in the foregoing embodiments.

It is well known to those skilled in the art that with the development of electronic information technology such as large scale integrated circuit technology and the trend of software hardware, it has been difficult to clearly divide the software and hardware boundaries of a computer system. As any of the operations may be implemented in software or hardware. Execution of any of the instructions may be performed by hardware, as well as by software. Whether a hardware implementation or a software implementation is employed for a certain machine function depends on non-technical factors such as price, speed, reliability, storage capacity, change period, and the like. A software implementation and a hardware implementation are equivalent for the skilled person. The skilled person can choose software or hardware to implement the above described scheme as desired. Therefore, specific software or hardware is not limited herein.

The present invention may be an apparatus, method and/or computer program product. The computer program product may include a computer-readable storage medium having computer-readable program instructions embodied therewith for causing a processor to implement various aspects of the present invention.

The computer readable storage medium may be a tangible device that can hold and store the instructions for use by the instruction execution device. The computer readable storage medium may be, for example, but not limited to, an electronic memory device, a magnetic memory device, an optical memory device, an electromagnetic memory device, a semiconductor memory device, or any suitable combination of the foregoing. More specific examples (a non-exhaustive list) of the computer readable storage medium would include the following: a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a Static Random Access Memory (SRAM), a portable compact disc read-only memory (CD-ROM), a Digital Versatile Disc (DVD), a memory stick, a floppy disk, a mechanical coding device, such as punch cards or in-groove projection structures having instructions stored thereon, and any suitable combination of the foregoing. Computer-readable storage media as used herein is not to be construed as transitory signals per se, such as radio waves or other freely propagating electromagnetic waves, electromagnetic waves propagating through a waveguide or other transmission medium (e.g., optical pulses through a fiber optic cable), or electrical signals transmitted through electrical wires.

The computer-readable program instructions described herein may be downloaded from a computer-readable storage medium to a respective computing/processing device, or to an external computer or external storage device via a network, such as the internet, a local area network, a wide area network, and/or a wireless network. The network may include copper transmission cables, fiber optic transmission, wireless transmission, routers, firewalls, switches, gateway computers and/or edge servers. The network adapter card or network interface in each computing/processing device receives computer-readable program instructions from the network and forwards the computer-readable program instructions for storage in a computer-readable storage medium in the respective computing/processing device.

The computer program instructions for carrying out operations of the present invention may be assembler instructions, Instruction Set Architecture (ISA) instructions, machine-related instructions, microcode, firmware instructions, state setting data, or source or object code written in any combination of one or more programming languages, including an object oriented programming language such as Smalltalk, C + + or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The computer-readable program instructions may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet service provider). In some embodiments, aspects of the present invention are implemented by personalizing an electronic circuit, such as a programmable logic circuit, a Field Programmable Gate Array (FPGA), or a Programmable Logic Array (PLA), with state information of computer-readable program instructions, which can execute the computer-readable program instructions.

Aspects of the present invention are described herein with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and/or block diagrams, and combinations of blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer-readable program instructions.

These computer-readable program instructions may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks. These computer-readable program instructions may also be stored in a computer-readable storage medium that can direct a computer, programmable data processing apparatus, and/or other devices to function in a particular manner, such that the computer-readable medium storing the instructions comprises an article of manufacture including instructions which implement the function/act specified in the flowchart and/or block diagram block or blocks.

The computer readable program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other devices to cause a series of operational steps to be performed on the computer, other programmable apparatus or other devices to produce a computer implemented process such that the instructions which execute on the computer, other programmable apparatus or other devices implement the functions/acts specified in the flowchart and/or block diagram block or blocks.

The flowchart and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of instructions, which comprises one or more executable instructions for implementing the specified logical function(s). In some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions. It is well known to those skilled in the art that implementation by hardware, by software, and by a combination of software and hardware are equivalent.

Having described embodiments of the present invention, the foregoing description is intended to be exemplary, not exhaustive, and not limited to the embodiments disclosed. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The terminology used herein is chosen in order to best explain the principles of the embodiments, the practical application, or improvements made to the technology in the marketplace, or to enable others of ordinary skill in the art to understand the embodiments disclosed herein. The scope of the invention is defined by the appended claims.

Claims

1. An early warning method, characterized in that the method comprises:

acquiring a plurality of first events to be analyzed;

2. The method of claim 1, wherein determining an event element consensus relationship between the first plurality of events to be analyzed comprises:

3. The method according to claim 2, wherein the removing repeated events to be analyzed from the first events to be analyzed according to the determined event element consistency relationship to obtain a second events to be analyzed comprises:

4. The method of claim 3, further comprising:

5. The method of claim 4, wherein the pre-warning according to the second plurality of events to be analyzed comprises:

6. The method of claim 2, wherein the event elements comprise at least one of: time, address, person, event source, event type.

7. The method of claim 1, further comprising:

determining event objects of the second events to be analyzed;

determining an association relationship between the plurality of event objects.

8. The method of claim 7, wherein the determining the associative relationship between the plurality of event objects comprises:

9. The method of claim 8, wherein the pre-warning according to the second plurality of events to be analyzed comprises:

10. The method of claim 1, wherein the event to be analyzed comprises at least one of: dispute events, enterprise information and social security information;

the acquiring a plurality of first events to be analyzed includes:

acquiring the dispute event from a dispute reporting platform;

acquiring the enterprise information from an enterprise information system; or

And obtaining the social security information from a social security system.

11. An early warning device, the device comprising: a memory for storing executable instructions and a processor; the processor is configured to execute the warning method according to any one of claims 1-10 under the control of the instructions.

12. An early warning device, the device comprising:

13. A computer-readable storage medium having stored thereon computer instructions which, when executed by a processor, implement the warning method of any one of claims 1-10.