CN112365248B - Method and system for analyzing digital currency transaction path - Google Patents
Method and system for analyzing digital currency transaction path Download PDFInfo
- Publication number
- CN112365248B CN112365248B CN202011278504.1A CN202011278504A CN112365248B CN 112365248 B CN112365248 B CN 112365248B CN 202011278504 A CN202011278504 A CN 202011278504A CN 112365248 B CN112365248 B CN 112365248B
- Authority
- CN
- China
- Prior art keywords
- transaction
- digital currency
- database
- entity information
- utxo
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/04—Payment circuits
- G06Q20/06—Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme
- G06Q20/065—Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme using e-cash
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/36—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/389—Keeping log of transactions for guaranteeing non-repudiation of a transaction
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q40/00—Finance; Insurance; Tax strategies; Processing of corporate or income taxes
- G06Q40/04—Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q50/00—Systems or methods specially adapted for specific business sectors, e.g. utilities or tourism
- G06Q50/10—Services
- G06Q50/26—Government or public services
Abstract
The invention obtains the digital currency wallet address of the suspicious object and the entity information associated with the wallet address from the association way; acquiring block data of the digital currency through a wallet client of the digital currency, analyzing the block data to acquire a UTXO transaction record, storing the UTXO transaction record in a form of a relational database, and constructing a UTXO transaction record database; establishing a virtual-real mapping table for the transaction address and the entity information in the UTXO transaction record, and mapping the entity information and the data in the UTXO transaction record database based on the transaction address to construct a virtual-real mapping database; importing the entity information into an analysis database, and performing comprehensive data association collision analysis; and establishing a visual transaction network based on the comprehensive data correlation collision result and the virtual-real mapping database, and analyzing the transaction network, the fund flow direction and the transaction behavior. The transaction path analysis of the digital currency is more visual, convenient and efficient, and an effective means is provided for case detection work of crimes related to the digital currency.
Description
Technical Field
The invention relates to the technical field of electronic data forensics, in particular to a method and a system for analyzing a digital currency transaction path.
Background
With the rapid development of information technology, various kinds of digital currencies compete out, and the usage ratio of the digital currencies is increasing year by year due to the advantages of decentralization, high confidentiality, convenient payment and the like. In addition, the blockchain technology is used as a novel calculation paradigm and a cooperation mode for establishing trust at low cost in an untrusted competitive environment, the development of digital currency is greatly promoted, the difficult problem which cannot be solved by the traditional technology is effectively solved, the operation rules of various industries are changed by virtue of the unique characteristic advantages of the blockchain technology, and the blockchain technology is one of indispensable technologies for developing digital economy and constructing a novel trust system in the future.
With the spread of digital currency and blockchain technology, the illegal crimes surrounding blockchains, particularly related to digital currency, are on the rise, and also pose new challenges to electronic data forensics.
Currently, the anonymity problem of digital currency is the most difficult to solve for illegal crimes of the digital currency, and although the transaction records of the digital currency are completely published, entity information does not exist on the data. Although some tools for analyzing the digital currency transaction network exist, the analysis of the digital currency transaction path still has great difficulty due to the large amount of transaction data, the non-intuitive display of the analysis result and the like.
Disclosure of Invention
The invention provides a method and a system for analyzing a digital currency transaction path.
In one aspect, the present invention provides a method of analyzing a digital currency transaction path, the method comprising the steps of:
s1: acquiring the digital currency wallet address of the suspicious target and entity information associated with the wallet address from an association way;
s2: acquiring block data of the digital currency through a wallet client of the digital currency, analyzing the block data to acquire a UTXO transaction record, storing the UTXO transaction record in a form of a relational database, and constructing a UTXO transaction record database;
s3: and establishing a virtual-real mapping table for the transaction address and the entity information in the UTXO transaction record, and mapping the entity information and the data in the UTXO transaction record database based on the transaction address to construct a virtual-real mapping database.
The method obtains the information of the suspicious target through various ways, ensures the diversity and reliability of data, starts with analyzing and simplifying block chain data, carries out statistical analysis on the mapping relation between the transaction address and the entity information in the UTXO transaction record, establishes a transaction record database and a virtual-real mapping database, provides structural data which is convenient for retrieval, statistics and off-line analysis for the analysis of the digital currency transaction path, and provides an effective means for the detection work of digital currency related cases.
In a specific embodiment, the method further comprises step S4: and importing the entity information into a database, performing comprehensive data association collision analysis, sorting more than two groups of entity information of the same type, extracting a part with intersection of the entity information in the database through association query, and performing comparative analysis. Screening and comparing entity information in the database based on multiple dimensions such as time, space, transaction ways and the like, so that valuable results can be accurately obtained from mass data.
In a specific embodiment, the method further comprises step S5: and constructing a visual transaction network based on the result of the comprehensive data correlation collision analysis and the virtual-real mapping database, and analyzing the transaction network, the fund flow direction and the transaction behavior. According to the visual transaction network, the source tracing record analysis can be visually carried out on the transaction related to the suspicious target.
In a specific embodiment, the association route used for acquiring the digital money wallet address of the suspicious object in step S1 is selected according to the scenario related to the specific case, and includes: parsing the lemonavirus used by the suspect target, analyzing the dark network trace records used by the suspect target, or parsing the digital money wallet client in the electronic device associated with the suspect target. Due to the publicity of the digital currency transaction information, the digital currency wallet address of the suspicious target can be conveniently found through various publicity association ways.
In a specific embodiment, the association approach used for acquiring the entity information associated with the wallet address in step S1 includes: the electronic device, exchange App backend and bank card associated with the digital currency wallet address are parsed.
In a preferred embodiment, when the utilized association path includes an exchange APP background, the obtained entity information includes: account information associated with the digital currency wallet address, real name authentication information, asset information, historical orders, current commitments, withdrawal addresses, and associated payment channel information.
In a preferred embodiment, the entity information in step S1 further includes: a QQ account, a mailbox address, a mobile phone number, an identification card number and a bank card account which are associated with the address of the digital currency wallet.
In a specific embodiment, the step S2 of storing the UTXO transaction record in the form of a relational database specifically includes: and extracting transaction information, input information and output information from the UTXO transaction record, and establishing a relational database according to the corresponding relation of the three types of information. And the UTXO transaction record is converted into a relational database form for storage, so that the transaction data is convenient for fuzzy retrieval, regular synchronization and offline analysis.
In a specific embodiment, the construction of the virtual-to-real mapping database in step S3 includes aliasing the wallet address of the suspicious object. And the subsequent retrieval and analysis of the suspicious target are facilitated.
In a specific embodiment, the visual transaction network includes an operable graphical interface, which is formed by graphically processing the data after collision in step S5.
In a preferred embodiment, the graphical interface comprises: the method comprises the following steps of a suspicious target account number, an account number with a transaction with the suspicious target account number, a transaction amount flow direction, a transaction timestamp and an interactive window for retrieval.
According to a second aspect of the present invention, a computer-readable storage medium is proposed, on which a computer program is stored which, when being executed by a computer processor, carries out the method described above.
According to a third aspect of the present invention, there is provided a system for analyzing a digital money transaction path, the system comprising:
the suspicious target information acquisition module: configuring a digital currency wallet address for obtaining the suspicious target and entity information associated with the wallet address from an association means;
the UTXO transaction record database construction module: the method comprises the steps that a wallet client configured for digital currency obtains block data of the digital currency, analyzes the block data to obtain a UTXO transaction record, stores the UTXO transaction record in a relational database mode, and constructs a UTXO transaction record database;
a virtual-real mapping database construction module: and the virtual-real mapping table is configured and used for establishing a virtual-real mapping table for the transaction address and the entity information in the UTXO transaction record, and mapping the entity information and the data in the UTXO transaction record database based on the transaction address to establish a virtual-real mapping database.
In a specific embodiment, the system further comprises a comprehensive data association collision analysis module: the system is configured to import the entity information into a database, perform comprehensive data association collision analysis, sort more than two groups of entity information of the same type, extract a part with intersection of the entity information in the database through association query, and perform comparative analysis.
In a particular embodiment, the system further comprises a transaction network visualization analysis module: and configuring a visual transaction network based on the result of the comprehensive data association collision analysis and the virtual-real mapping database, and analyzing the transaction network, the fund flow direction and the transaction behavior.
The method comprises the steps of obtaining a digital currency wallet address and block chain data information of a suspicious target from an open channel or a wallet client end associated with the suspicious target, simultaneously carrying out investigation and evidence obtaining on electronic equipment associated with the suspicious target or analyzing a transaction client end and a background thereof to obtain entity information related to the suspicious target, analyzing the block chain data to obtain UTXO transaction records, storing the UTXO transaction records in a relational database form, establishing a mapping table between the entity information and transaction addresses in the transaction records, mapping the entity information and data in the UTXO transaction record database based on the transaction addresses, establishing a virtual-real mapping database, carrying out comprehensive data association collision analysis on the entity information, establishing a visual transaction network based on a collision analysis result and the virtual-real mapping database, and visually analyzing a digital currency transaction path of the suspicious target. The invention converts the UTXO transaction record into a relational database form for storage, so that the transaction data is convenient for retrieval, synchronization and off-line analysis, mapping of virtual and real data is realized by associating the entity information associated with the suspicious target with the virtual transaction address in the transaction record, and the associated entity information data is gradually accumulated by collision analysis, thereby improving the problem of inconvenient analysis caused by the anonymity of digital currency to a certain extent.
Drawings
The accompanying drawings are included to provide a further understanding of the embodiments and are incorporated in and constitute a part of this specification. The drawings illustrate embodiments and together with the description serve to explain the principles of the invention. Other embodiments and many of the intended advantages of embodiments will be readily appreciated as they become better understood by reference to the following detailed description. Other features, objects and advantages of the present application will become more apparent upon reading of the following detailed description of non-limiting embodiments thereof, made with reference to the accompanying drawings in which:
FIG. 1 is a flow diagram of a method of analyzing a digital currency transaction path according to one embodiment of the invention;
figure 2 is a relational data model diagram of a UTXO transaction record of an embodiment of the present invention;
FIG. 3 is a diagram of a virtual-to-real mapping table of digital currency blockchain transaction addresses and entity information according to an embodiment of the present invention;
fig. 4 is a map of UTXO transaction information and entity information according to an embodiment of the present invention;
FIG. 5 is an architecture diagram of a method of analyzing a digital currency transaction path in accordance with one embodiment of the present invention;
FIG. 6 is a block diagram of a system for analyzing digital currency transaction paths, in accordance with one embodiment of the present invention.
Detailed Description
The present application will be described in further detail with reference to the drawings and examples. It is to be understood that the specific embodiments described herein are merely illustrative of the relevant invention and not restrictive of the invention. It should be noted that, for convenience of description, only the portions related to the present invention are shown in the drawings.
It should be noted that, in the present application, the embodiments and features of the embodiments may be combined with each other without conflict. The present application will be described in detail below with reference to the embodiments with reference to the attached drawings.
Fig. 1 shows a flowchart of a method of analyzing a digital money transaction path according to an embodiment of the present invention. As shown in fig. 1, the method comprises the steps of:
s101: the digital currency wallet address of the suspicious object and entity information associated with the wallet address are obtained from an association means. Because the transaction records of the digital currency are completely public, the wallet address, the transaction records and other information of the suspicious target can be obtained through a public channel or a wallet client, and related entity information is tracked according to the wallet address or the transaction records related to the suspicious target through analysis.
In a specific embodiment, the association approach used to obtain the digital currency wallet address of the suspicious object is selected according to the scenario involved in the specific case, which includes: parsing the lemonavirus used by the suspect target, analyzing the dark network trace records used by the suspect target, or parsing the digital money wallet client in the electronic device associated with the suspect target.
In a specific embodiment, the association approach for acquiring entity information associated with a wallet address includes: the electronic device, exchange App backend and bank card associated with the digital currency wallet address are parsed.
In a preferred embodiment, when the utilized association path includes an exchange APP background, the obtained entity information includes: account information associated with the digital currency wallet address, real name authentication information, asset information, historical orders, current commitments, withdrawal addresses and associated payment channel information.
In a preferred embodiment, the entity information available through the association means further includes: a QQ account, a mailbox address, a mobile phone number, an identification card number and a bank card account which are associated with the address of the digital currency wallet.
It should be appreciated that the association route used for obtaining the wallet address and the entity information and the obtained entity information include and not only those described above, and the appropriate association route and the entity information to be analyzed need to be selected according to the scenario involved in the actual case.
S102: and acquiring block data of the digital currency through a wallet client of the digital currency, analyzing the block data to acquire a UTXO transaction record, storing the UTXO transaction record in a form of a relational database, and constructing a UTXO transaction record database.
Figure 2 illustrates a relational data model diagram of a UTXO transaction record of one embodiment of the present invention. The transaction information, the input information and the output information are extracted from the UTXO transaction record, and as can be known from the block chain data structure, one block corresponds to a plurality of transaction information, one transaction information corresponds to a plurality of input information and a plurality of output information, and besides the input of the Coinbase, one input corresponds to the output of another transaction. The data model shown in fig. 2 is obtained according to the corresponding relationship among the transaction information 201, the output information 202 and the input information 203. Useful information is extracted from the transaction records, so that massive block chain data can be simplified and converted into a data set which is easy to count, retrieve and analyze.
In a preferred embodiment, according to the data model shown in fig. 2, the transaction information, the input information, and the output information in the UTXO transaction record are written into three files in the format of text files, and then are imported into the MySQL relational database in batch to obtain the UTXO transaction record database.
S103: and establishing a virtual-real mapping table for the transaction address and the entity information in the UTXO transaction record, and mapping the entity information and the data in the UTXO transaction record database based on the transaction address to construct a virtual-real mapping database.
Fig. 3 is a virtual-real mapping table diagram of the digital currency blockchain transaction address and the entity information according to an embodiment of the present invention, in which the correspondence relationship between one transaction address and a plurality of entity information in the digital currency blockchain data is recorded.
Fig. 4 illustrates a map of UTXO transaction information and entity information in accordance with an embodiment of the present invention. The transaction information 401 in the figure includes: transaction ID, transaction hash, input ID, output ID, timestamp, and other transaction details; the output information 402 includes: transaction ID, transaction hash, transaction address, transaction output quantity, and other output details; the input information 403 includes: transaction ID, transaction hash, pen-on hash, transaction input quantity, and other input details. By matching the same transaction address, the virtual-real mapping table 404 is mapped with the transaction information 401, the output information 402 and the input information 403, so as to realize mapping between the entity information and the UTXO transaction information in the table diagram shown in fig. 3.
In particular embodiments, the construction of the virtual-to-real mapping database includes aliasing the wallet address of the suspicious target. The wallet address is simplified as a remark name, and analysis and retrieval are convenient.
S104: and importing the entity information into a database, performing comprehensive data association collision analysis, sorting more than two groups of entity information of the same type, and extracting the intersection of the entity information in the database through association query.
Figure 5 shows an architecture diagram of a method of analyzing a digital currency transaction path in accordance with one embodiment of the present invention. According to the specific case 501 related to the blockchain, case-related transaction electronic device evidence analysis 504 is performed through criminal investigation means, data records in the electronic device evidence are analyzed, digital currency wallet client analysis 505 is performed, and wallet address acquisition 503 is achieved. In addition, wallet address acquisition 503 may also be implemented through the associated public channel 502 of the blockchain related case 501. Block data UTXO transaction record analysis 506 is performed on UTXO transaction records associated with wallet addresses, and combined with the results of electronic device evidence deep analysis 507 and exchange background analysis 509, comprehensive data association collision analysis 510 is performed on associated entity data.
In a particular embodiment, the integrated data correlation collision analysis includes an entity information data analysis portion and an entity information data collision portion. The entity information data analysis part can be analyzed through various dimensions in combination with actual needs, such as: a) Further analyzing the mail traffic relationship of the suspicious target through the mailbox address associated with the digital currency wallet address of the suspicious target; b) Analyzing the friend relationship of the suspicious target through the social network account number of the suspicious target, such as QQ, weChat or What' sApp and the like; c) And obtaining the track information of the suspicious target through the dimension of time and the geographical position information obtained on the associated computer and the mobile phone.
In a specific embodiment, the entity information data collision can be realized by various means, such as 1) importing entity information into an EXCEL table, and performing collision analysis by using the processing function of the EXCEL table; 2) Importing the entity information into an Access database, and performing collision analysis by using an SQL language; 3) Collision analysis was performed using collision software such as Bcompare.
S105: and constructing a visual transaction network based on the result of the comprehensive data association collision analysis and the virtual-real mapping database, and analyzing the transaction network, the fund flow direction and the transaction behavior.
In a specific embodiment, the visual transaction network used for the digital currency transaction path analysis includes an operable graphical interface formed by graphically processing the collision analyzed data.
The visual interactive interface graph comprises the following steps: the method comprises the steps of a suspicious target account number, an account number having transaction with the suspicious target account number, a transaction amount flow direction, a transaction timestamp and a retrieval frame. Based on the specific scheme described by the invention, the block chain data of the digital currency wallet is analyzed and synchronized to the MySQL relational database, a virtual-real mapping relation is established, and the entity information associated with the suspicious target is used as the remark of the address of the digital currency wallet of the suspicious target. And analyzing the UXTO transaction record through the suspicious target account number acquired by the public channel, and presenting the analyzed transaction record in a visual mode, so that the transaction network related to the suspicious target account number can be visually displayed. In the embodiment, the user can quickly retrieve the corresponding wallet address and the entity information of the remark through the retrieval frame, and can intuitively perform tracing record analysis and the like of related transactions through interface graphical operation.
FIG. 6 illustrates a block diagram of a system for analyzing digital currency transaction paths, according to one embodiment of the invention. The system comprises a suspicious target information acquisition module 601, a UTXO transaction record database construction module 602, a virtual-real mapping database construction module 603, a comprehensive data association collision analysis module 604 and a transaction network visualization analysis module 605.
In a particular embodiment, the suspicious target information acquisition module 601 is configured to acquire the digital currency wallet address of the suspicious target and entity information associated with the wallet address from an association approach. The UTXO transaction record database construction module 602 is configured to obtain the chunk data of the digital currency through the wallet client of the digital currency, parse the chunk data to obtain the UTXO transaction record, store the UTXO transaction record in the form of a relational database, and construct the UTXO transaction record database. The virtual-real mapping database construction module 603 is configured to establish a virtual-real mapping table for the transaction address and the entity information in the UTXO transaction record, map the entity information and the data in the UTXO transaction record database based on the transaction address, and construct a virtual-real mapping database. The comprehensive data association collision analysis module 604 is configured to import the entity information into the database, perform comprehensive data association collision analysis, sort two or more groups of entity information of the same type, extract a part of the database where the entity information has an intersection through association query, and perform comparative analysis. The transaction network visualization analysis module 605 is configured to construct a visualization transaction network, analyze the transaction network, the fund flow direction, and the transaction behavior based on the result of the integrated data association collision analysis and the virtual-real mapping database. Through the combined action of the modules, the effective information related to the suspicious target is extracted from massive digital currency transaction record data, statistics, mapping and analysis are carried out by combining associated entity information, and finally the effective information is displayed in a visual interactive interface mode, so that the transaction path analysis of the digital currency is more visual and convenient, and an effective means is provided for case detection work of digital currency related crimes.
Embodiments of the present invention also relate to a computer-readable storage medium having stored thereon a computer program which, when executed by a computer processor, implements the method above. The computer program comprises program code for performing the method illustrated in the flow chart. It should be noted that the computer readable medium of the present application can be a computer readable signal medium or a computer readable medium or any combination of the two.
The invention obtains the digital currency wallet address of the suspicious object and entity information associated with the wallet address from an association way. And acquiring block data of the digital currency through a wallet client of the digital currency, analyzing the block data to acquire a UTXO transaction record, storing the UTXO transaction record in a form of a relational database, and constructing a UTXO transaction record database. And establishing a virtual-real mapping table for the transaction address and the entity information in the UTXO transaction record, and mapping the entity information and the data in the UTXO transaction record database based on the transaction address to construct a virtual-real mapping database. And importing the entity information into an analysis database to perform comprehensive data association collision analysis. And establishing a visual transaction network based on the comprehensive data association collision result and the virtual-real mapping database, and analyzing the transaction network, the fund flow direction and the transaction behavior. Starting from analyzing and simplifying block chain data, the mapping relation between the transaction address and the entity information in the UTXO transaction record is subjected to statistical analysis, effective information related to a suspicious target is gradually accumulated, and finally the effective information is displayed in a visual interactive interface mode, so that the transaction path analysis of the digital currency is more visual and convenient, and an effective means is provided for case detection work of crimes related to the digital currency.
The foregoing description is only exemplary of the preferred embodiments of the application and is illustrative of the principles of the technology employed. It will be appreciated by those skilled in the art that the scope of the invention herein disclosed is not limited to the particular combination of features described above, but also encompasses other arrangements formed by any combination of the above features or their equivalents without departing from the spirit of the invention. For example, the above features may be replaced with (but not limited to) features having similar functions disclosed in the present application.
Claims (11)
1. A method of analyzing a digital currency transaction path, comprising the steps of:
s1: acquiring a digital currency wallet address of a suspicious target and entity information associated with the wallet address from an association way;
s2: obtaining block data of the digital currency through a wallet client of the digital currency, analyzing the block data to obtain a UTXO transaction record, storing the UTXO transaction record in a form of a relational database, and constructing a UTXO transaction record database;
s3: establishing a virtual-real mapping table for the transaction address in the UTXO transaction record and the entity information, and mapping the entity information and the data in the UTXO transaction record database based on the transaction address to construct a virtual-real mapping database;
s4: importing the entity information into a database, performing comprehensive data association collision analysis, sorting more than two groups of entity information of the same type, extracting a part with intersection of the entity information in the database through association query, and performing comparative analysis;
s5: and constructing a visual transaction network based on the result of the comprehensive data association collision analysis and the virtual-real mapping database, and analyzing the transaction network, the fund flow direction and the transaction behavior.
2. The method for analyzing transaction path of digital currency according to claim 1, wherein the association route used for obtaining the address of the digital currency wallet of the suspicious object in step S1 is selected according to the scenario related to the specific case, which comprises: parsing the Lesox virus used by the suspicious target, analyzing a dark network trace record used by the suspicious target, or parsing a digital money wallet client in an electronic device associated with the suspicious target.
3. The method for analyzing a transaction path of digital money according to claim 1, wherein the association route used for acquiring the entity information associated with the wallet address in step S1 includes: parsing the electronic device, exchange App back office, and bank card associated with the digital currency wallet address.
4. The method of analyzing a digital currency transaction path according to claim 3, wherein when the associated pathway utilized comprises an exchange APP background, the entity information obtained comprises: account information associated with the digital currency wallet address, real name authentication information, asset information, historical orders, current commitments, withdrawal addresses, and associated payment channel information.
5. The method for analyzing a digital money transaction path according to any one of claims 1 and 4, wherein the entity information in step S1 further comprises: and the QQ account, the mailbox address, the mobile phone number, the identification card number and the bank card account are associated with the digital currency wallet address.
6. The method of analyzing a digital currency transaction path according to claim 1, wherein storing said UTXO transaction record in the form of a relational database in said step S2 comprises: and extracting transaction information, input information and output information from the UTXO transaction record, and establishing a relational database according to the corresponding relation of the three types of information.
7. The method of analyzing a digital currency transaction path according to claim 1, wherein the constructing of the virtual-to-real mapping database in step S3 comprises aliasing a wallet address of the suspicious object.
8. The method for analyzing transaction paths of digital currency according to claim 1, wherein said visual transaction network comprises a graphical interface operable to graphically process said data after said step S5 collision.
9. The method of analyzing a digital currency transaction path according to claim 8, wherein said graphical interface comprises: the method comprises the following steps of a suspicious target account number, an account number with a transaction with the suspicious target account number, a transaction amount flow direction, a transaction timestamp and an interactive window for retrieval.
10. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a computer processor, carries out the method of any one of claims 1 to 9.
11. A system for analyzing a digital currency transaction path, comprising:
the suspicious target information acquisition module: configuring a digital currency wallet address for obtaining a suspicious target and entity information associated with the wallet address from an association means;
the UTXO transaction record database construction module comprises: the method comprises the steps that the wallet client side configured for the digital currency obtains block data of the digital currency, analyzes the block data to obtain a UTXO transaction record, stores the UTXO transaction record in a relational database mode, and constructs a UTXO transaction record database;
a virtual-real mapping database construction module: configuring a virtual-real mapping table used for establishing a transaction address in the UTXO transaction record and the entity information, mapping the entity information and data in the UTXO transaction record database based on the transaction address, and constructing a virtual-real mapping database;
the comprehensive data association collision analysis module: the system is configured and used for importing the entity information into a database, performing comprehensive data association collision analysis, sorting more than two groups of entity information of the same type, extracting a part with intersection of the entity information in the database through association query, and performing comparative analysis;
the transaction network visualization analysis module: and the system is configured to construct a visual transaction network based on the result of the comprehensive data association collision analysis and a virtual-real mapping database, and analyze the transaction network, the fund flow direction and the transaction behavior.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011278504.1A CN112365248B (en) | 2020-11-16 | 2020-11-16 | Method and system for analyzing digital currency transaction path |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011278504.1A CN112365248B (en) | 2020-11-16 | 2020-11-16 | Method and system for analyzing digital currency transaction path |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN112365248A CN112365248A (en) | 2021-02-12 |
| CN112365248B true CN112365248B (en) | 2023-01-24 |
Family
ID=74514874
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202011278504.1A Active CN112365248B (en) | 2020-11-16 | 2020-11-16 | Method and system for analyzing digital currency transaction path |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112365248B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115660837B (en) * | 2022-09-05 | 2023-05-30 | 淮阴工学院 | Knowledge graph-based virtual currency address portrait construction method and device |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108874634A (en) * | 2018-06-05 | 2018-11-23 | 迪肯区块链科技(重庆)有限公司 | A kind of method for visualizing and browser of digital cash block chain operating status |
| CN110766384A (en) * | 2019-09-06 | 2020-02-07 | 安徽高山科技有限公司 | Method for tracking digital currency flow direction in block chain |
| CN111028083A (en) * | 2019-12-11 | 2020-04-17 | 北京知道创宇信息技术股份有限公司 | Evaluation method, device and system for address of block chain wallet and storage medium |
| WO2020153688A1 (en) * | 2019-01-22 | 2020-07-30 | (주)에스투더블유랩 | Method and system for analyzing cryptocurrency transaction |
| CN111506557A (en) * | 2020-04-10 | 2020-08-07 | 上海七印信息科技有限公司 | UTXO library establishing method, UTXO library establishing device, computer equipment and storage medium |
-
2020
- 2020-11-16 CN CN202011278504.1A patent/CN112365248B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108874634A (en) * | 2018-06-05 | 2018-11-23 | 迪肯区块链科技(重庆)有限公司 | A kind of method for visualizing and browser of digital cash block chain operating status |
| WO2020153688A1 (en) * | 2019-01-22 | 2020-07-30 | (주)에스투더블유랩 | Method and system for analyzing cryptocurrency transaction |
| CN110766384A (en) * | 2019-09-06 | 2020-02-07 | 安徽高山科技有限公司 | Method for tracking digital currency flow direction in block chain |
| CN111028083A (en) * | 2019-12-11 | 2020-04-17 | 北京知道创宇信息技术股份有限公司 | Evaluation method, device and system for address of block chain wallet and storage medium |
| CN111506557A (en) * | 2020-04-10 | 2020-08-07 | 上海七印信息科技有限公司 | UTXO library establishing method, UTXO library establishing device, computer equipment and storage medium |
Also Published As
| Publication number | Publication date |
|---|---|
| CN112365248A (en) | 2021-02-12 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN107844565B (en) | Commodity searching method and device | |
| CN109299334B (en) | Data processing method and device of knowledge graph | |
| CN110956547A (en) | Search engine-based method and system for identifying cheating group in real time | |
| US20180157851A1 (en) | Systems and methods for authentication of access based on multi-data source information | |
| CN103605651A (en) | Data processing showing method based on on-line analytical processing (OLAP) multi-dimensional analysis | |
| CA3179620A1 (en) | Method and system for querying abnormal financial data on basis of knowledge map | |
| US9691065B2 (en) | Automated transactions clearing system and method | |
| US7054833B1 (en) | Method and system for processing unclaimed property information | |
| CN112445870B (en) | Knowledge graph string parallel case analysis method based on mobile phone evidence obtaining electronic data | |
| CN108205575B (en) | Data processing method and device | |
| CN111666346A (en) | Information merging method, transaction query method, device, computer and storage medium | |
| CN104579909A (en) | Method and equipment for classifying user information and acquiring user grouping information | |
| CN111563098A (en) | Structured and unstructured data query method, device, storage medium and device | |
| CN114357000A (en) | Block chain transaction data retrieval system, method, equipment and storage medium | |
| CN109002470A (en) | Knowledge mapping construction method and device, client | |
| CN111125118B (en) | Associated data query method, device, equipment and medium | |
| CN111274283A (en) | Track display method and device | |
| CN111046083A (en) | Data analysis method and system and big data platform | |
| CN112365248B (en) | Method and system for analyzing digital currency transaction path | |
| CN114840527A (en) | Data processing method, device and computer readable storage medium | |
| CN108734021B (en) | Financial loan big data risk assessment method and system based on privacy-removing data | |
| CN110942312A (en) | POS machine cash register identification method, system, equipment and storage medium | |
| US11308130B1 (en) | Constructing ground truth when classifying data | |
| CN109902129B (en) | Insurance agent classifying method and related equipment based on big data analysis | |
| CN111861733A (en) | Fraud prevention and control system and method based on address fuzzy matching |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |