CN113065901A - Wind control system and method for integral business system - Google Patents
Wind control system and method for integral business system Download PDFInfo
- Publication number
- CN113065901A CN113065901A CN202110398645.5A CN202110398645A CN113065901A CN 113065901 A CN113065901 A CN 113065901A CN 202110398645 A CN202110398645 A CN 202110398645A CN 113065901 A CN113065901 A CN 113065901A
- Authority
- CN
- China
- Prior art keywords
- wind control
- user
- module
- point
- information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q30/00—Commerce
- G06Q30/02—Marketing; Price estimation or determination; Fundraising
- G06Q30/0207—Discounts or incentives, e.g. coupons or rebates
- G06Q30/0225—Avoiding frauds
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q30/00—Commerce
- G06Q30/02—Marketing; Price estimation or determination; Fundraising
- G06Q30/0207—Discounts or incentives, e.g. coupons or rebates
- G06Q30/0208—Trade or exchange of goods or services in exchange for incentives or rewards
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q30/00—Commerce
- G06Q30/02—Marketing; Price estimation or determination; Fundraising
- G06Q30/0207—Discounts or incentives, e.g. coupons or rebates
- G06Q30/0226—Incentive systems for frequent usage, e.g. frequent flyer miles programs or point systems
- G06Q30/0232—Frequent usage rewards other than merchandise, cash or travel
Landscapes
- Business, Economics & Management (AREA)
- Accounting & Taxation (AREA)
- Finance (AREA)
- Strategic Management (AREA)
- Engineering & Computer Science (AREA)
- Development Economics (AREA)
- Economics (AREA)
- Game Theory and Decision Science (AREA)
- Entrepreneurship & Innovation (AREA)
- Marketing (AREA)
- Physics & Mathematics (AREA)
- General Business, Economics & Management (AREA)
- General Physics & Mathematics (AREA)
- Theoretical Computer Science (AREA)
- Tourism & Hospitality (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
The invention provides a wind control system and a wind control method of an integral service system, which relate to the technical field of computer application, and the system comprises: a business scene wind control system and a data engine; the business scene wind control system comprises: a user logs in the scene wind control subsystem, the integral acquisition scene wind control subsystem and the integral exchange scene wind control subsystem; the business scene wind control system is used for exporting the tag data to the data engine in real time; the data engine is used for classifying the received label data and sending the classified label data to the business scene wind control system, so that the business scene wind control system can be called in the wind control decision rule to realize corresponding wind control decision. The system can greatly improve the identification rate of the risk users, resist the attack of a large number of attacking users on various service scenes, and improve the safety of the scoring system.
Description
Technical Field
The invention relates to the technical field of computer application, in particular to a wind control system and a wind control method of an integral business system.
Background
As a common user incentive mode, the point system can be widely applied to scenes such as large-scale voyages, hotels, banks, business surpasses, retail brands and the like because the point system can achieve the purposes of increasing user viscosity and guiding customer behaviors through an incentive mechanism, and for internet products, the point system is also the standard configuration of a large-scale application program APP. Risk control of the integral system is therefore increasingly important. However, the rise of the so-called 'wool party' causes the internet integration system to be greatly impacted, and a large amount of marketing cost is occupied by the wool party in batches. Even a large case of tens of millions of pieces lost once is exploded. It is understood that the wool party forms an industrial chain of more than 15 industrial varieties, more than 160 million workers and industrial scale of no less than 1000 billion Yuan RMB at present.
The existing wind control system for the integral service basically follows the wind control of off-line business modes and sets rules by means of expert experience. The online wind control and the offline wind control are greatly different, users can be registered in large batch by the online service through various technologies, and the purpose of earning benefits is achieved by collecting the reward of a point system through an abnormal means, and the users who register benefits through the abnormal means can be called black grey product users. Many times, a single black and gray product user completely accords with the rules, and the reasonable and legal reward of a point collecting system cannot be prevented by offline expert experience. To avoid the loss, only the strength of the point excitation can be reduced, but the normal user has no power to participate in the point activity, and the whole point system becomes a layout. That is to say, the prior art is difficult to resist the attack of a large number of attacking users to various service scenes, resulting in lower security of the scoring system.
Disclosure of Invention
The invention aims to provide a wind control system and a wind control method of an integral service system, so as to solve the technical problem that the integral system is low in safety because a large number of attacking users are difficult to resist the attack of various service scenes in the prior art.
In order to achieve the above purpose, the embodiment of the present invention adopts the following technical solutions:
in a first aspect, an embodiment of the present invention provides a wind control system for a point service system, including: a business scene wind control system and a data engine; the business scene wind control system comprises: a user logs in the scene wind control subsystem, the integral acquisition scene wind control subsystem and the integral exchange scene wind control subsystem; the business scene wind control system is used for exporting the tag data to the data engine in real time; the data engine is used for classifying the received label data and sending the classified label data to the business scene wind control system for the business scene wind control system to call in a wind control decision rule so as to realize corresponding wind control decision.
In some possible embodiments, the user login scene wind control subsystem includes a login information acquisition module, a login feature derivation module, a login decision module, and a login handling module; the login information acquisition module is used for acquiring equipment information fields and user information fields logged in by a user; the login feature derivation module is used for analyzing the information field acquired by the information acquisition module to acquire login derived features; the login decision module is used for generating a first configuration rule based on the equipment information field, the user information field and the login derivative characteristics, and sending the first configuration rule to the data engine; the login handling module is used for responding to a login request of a user based on a wind control decision rule.
In some possible embodiments, the login information collection module includes: the system comprises a login equipment information interface, a login equipment feature processing unit and a login user information interface.
In some possible embodiments, the device information field includes: equipment brand, version number, mac address, IP address; the user information field includes: the user binds the mobile phone number, the IP address, the mailbox and the login time; the login-derived features include: IP attribution information and the number of login mobile phone numbers related to the same IP address in a period of time.
In some possible embodiments, the integral acquisition scenario wind control subsystem comprises: the system comprises a point acquisition information acquisition module, a point acquisition feature derivation module, a point acquisition decision module and a point acquisition treatment module; the integral acquisition information acquisition module is used for acquiring equipment information fields, user information fields and user activity information fields of user login; the integral acquisition characteristic derivation module is used for analyzing the information fields acquired by the integral acquisition information acquisition module to acquire integral acquisition derivation characteristics; the integral obtaining decision module is used for generating a second configuration rule based on the equipment information field, the user activity information field and the integral obtaining derivative characteristics, and sending the second configuration rule to the data engine; the point acquisition handling module is used for responding to a point acquisition request of a user based on a wind control decision rule.
In some possible embodiments, the user activity information field includes: participation channel, activity id, integral value and participation time; the integral acquisition derived features include: the sum of the integral values obtained by the same user in a period of time and the number of the activity ids participated in by the same user in a period of time.
In some possible embodiments, the integral obtaining information module includes: the system comprises a point acquisition equipment information interface, a point acquisition equipment feature processing unit, a point acquisition user information interface and a point acquisition activity information interface.
In some possible embodiments, the credit redemption scenario wind control subsystem includes: the system comprises a point exchange information acquisition module, a point exchange characteristic derivation module, a point exchange decision module and a point exchange disposal module; the point exchange information acquisition module is used for acquiring equipment information fields, user information fields and user transaction information fields logged by a user; the point exchange characteristic derivation module is used for analyzing the information fields acquired by the point exchange information acquisition module to acquire point exchange derivation characteristics; the point exchange decision module is used for generating a third configuration rule based on the equipment information field, the user transaction information field and the point exchange derivative characteristics, and sending the third configuration rule to the data engine; the point exchange processing module is used for responding to the point exchange request of the user based on the wind control decision rule.
In some possible embodiments, the point redemption information collection module includes: the system comprises a point exchange equipment information interface, a point exchange equipment characteristic processing unit, a point exchange user information interface and a point exchange transaction information interface.
In a second aspect, an embodiment of the present invention provides a wind control method for a point service system, which is applied to a wind control system for any one of the point service systems in the first aspect, where the method includes: a business scene wind control system collects scene data and processes the scene data to generate label data; the business scene wind control system exports the label data to a data engine in real time; and the data engine classifies the received label data and sends the classified label data to the business scene wind control system, so that the business scene wind control system can be called in a wind control decision rule to realize a corresponding wind control decision.
The invention provides a wind control system and a wind control method of an integral service system, wherein the system comprises: a business scene wind control system and a data engine; the business scene wind control system comprises: a user logs in the scene wind control subsystem, the integral acquisition scene wind control subsystem and the integral exchange scene wind control subsystem; the business scene wind control system is used for exporting the tag data to the data engine in real time; the data engine is used for classifying the received label data and sending the classified label data to the business scene wind control system, so that the business scene wind control system can be called in the wind control decision rule to realize corresponding wind control decision. The system can greatly improve the identification rate of the risk users, resist the attack of a large number of attacking users on various service scenes, and improve the safety of the scoring system.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and other drawings can be obtained by those skilled in the art without creative efforts.
Fig. 1 is a schematic structural diagram of a wind control system of a point service system according to an embodiment of the present invention;
fig. 2 is a schematic structural diagram of a wind control subsystem of a user login scene according to an embodiment of the present invention;
fig. 3 is a schematic structural diagram of a wind control subsystem of an integral acquisition scene according to an embodiment of the present invention;
fig. 4 is a schematic structural diagram of a point redemption scene wind control subsystem according to an embodiment of the present invention;
fig. 5 is a schematic structural diagram of an electronic device according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention. The components of embodiments of the present invention generally described and illustrated in the figures herein may be arranged and designed in a wide variety of different configurations.
Thus, the following detailed description of the embodiments of the present invention, presented in the figures, is not intended to limit the scope of the invention, as claimed, but is merely representative of selected embodiments of the invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
As a common user incentive mode, the point system can be widely applied to scenes such as large-scale voyages, hotels, banks, business surpasses, retail brands and the like because the point system can achieve the purposes of increasing user viscosity and guiding customer behaviors through an incentive mechanism, and for internet products, the point system is also the standard configuration of a large-scale application program APP. Risk control of the integral system is therefore increasingly important.
The existing wind control system for the integral service basically follows the wind control of off-line business modes and sets rules by means of expert experience. The online wind control and the offline wind control are greatly different, users can be registered in a large batch by the online service through various technologies (such as a code receiving platform, IP software exchange, a multi-open simulator, a cat pool and the like), and the reward of a point system is collected in an abnormal way to achieve the purpose of earning benefits, and the user who registers earning benefits in the abnormal way can be called as a black grey product user. Many times, a single black and gray product user completely accords with the rules, and the reasonable and legal reward of a point collecting system cannot be prevented by offline expert experience. To avoid the loss, only the strength of the point excitation can be reduced, but the normal user has no power to participate in the point activity, and the whole point system becomes a layout. The attack users who produce black and gray products are automatically executed in a large batch, and the behavior form is single, the regularity is strong, and the aggregation is strong, so that the attack users are obviously different from normal users in many indexes.
The cost of such an attack has increased to some extent, which requires that the attacker have to use a large number of accounts, since the gains from a small number of accounts do not cover the cost. Therefore, the account numbers have certain aggregation on a series of wind control indexes such as a login period, a login duration, an integral obtaining mode, an integral obtaining quantity, an integral using mode and the like. Through the joint judgment of the indexes, various attacks of black and gray products can be effectively identified. For a lower level attack, the IP and the device fingerprint are fixed, so that the attack IP and the attack device can be identified by counting the login times of a single IP or a single device and marked as a high risk. For higher level attacks, technologies such as code receiving platforms, IP software and cat pools are used. However, for technical reasons, the IP can be changed continuously, but cannot be changed to the designated IP, so that when the IP is registered for a plurality of times and the integral is acquired for a plurality of times, the IP is completely different, and even the IP home location has a large jump. And the IP is continuously converted into a wind control index through multiple logins.
The existing wind control system is corresponding to a database collision attack, depends on a list database and equipment dimensions during batch registration and batch login risks, and is easy to break through when a scene that terminal equipment cannot be obtained or a dark gray product uses a second-playing IP method or an equipment fingerprint cracking technology. The cost of the second broadcasting IP method and the equipment fingerprint cracking technology is not very high, so the cost of the wind control system for increasing the black and gray products is not enough, and a large amount of black and gray products are invaded in a plurality of slightly valuable service scenes.
That is to say, the prior art has a low recognition rate for the attacking users, which results in that a large number of slightly valuable service scenes are attacked by the attacking users produced in black and grey, and the security of the scoring system is difficult to guarantee.
Based on this, the embodiment of the invention provides a wind control system and a wind control method of an integral service system. To facilitate understanding of the embodiment, first, a wind control system of a point service system disclosed in the embodiment of the present invention is described in detail, referring to a schematic structural diagram of a wind control system of a point service system shown in fig. 1, where the system includes: a business scenario wind control system and data engine D01; the business scene wind control system comprises: the user logs in the scene wind control subsystem A01, the integral acquisition scene wind control subsystem B01 and the integral exchange scene wind control subsystem C01; the business scene wind control system is used for exporting the tag data to the data engine in real time; the data engine is used for classifying the received label data and sending the classified label data to the business scene wind control system for the business scene wind control system to call in a wind control decision rule so as to realize corresponding wind control decision.
Referring to a schematic structural diagram of a user login scene wind control subsystem shown in fig. 2, the user login scene wind control subsystem a01 includes: the system comprises a login information acquisition module, a login feature derivation module, a login decision module and a login handling module.
The login information acquisition module is used for acquiring equipment information fields and user information fields logged in by a user; as a specific example, the login information collection module may include: the system comprises a login equipment information interface, a login equipment feature processing unit and a login user information interface. The device information field includes: information such as equipment brand, version number, mac address, IP address and the like; the user information field includes: and the user binds information such as a mobile phone number, an IP address, a mailbox, login time and the like.
The login feature derivation module is used for analyzing the information field acquired by the information acquisition module to obtain login derived features; the login-derived features include: IP home location information, the number of registered mobile phone numbers associated with the same IP address in a period of time, and the like, for example: the IP address can derive the IP home city and the IP home province through field analysis, the number of login mobile phone numbers related to the same IP address in nearly 10 minutes, the number of login mobile phone numbers related to the same IP address in nearly 1 hour, the number of login mobile phone numbers related to the same IP address in nearly 1 day and the like can be derived by the IP address and the mobile phone number address bound by the user and the dimension of time slices.
The login decision module is used for generating a first configuration rule based on the equipment information field, the user information field and the login derivative characteristics, and sending the first configuration rule to the data engine. That is, the login decision module can configure the field and the derived feature configuration rule, and return the hit data labeled with different labels, for example, when the IP attribution is not equal to china and the number of login mobile phone numbers associated with the IP in about 10 minutes is higher than a certain threshold value, the request meeting the logic is labeled as high risk, and the labeled data (such as the user mobile phone number and the user IP) is exported to the data engine for precipitation.
The login handling module is used for responding to a login request of a user based on a wind control decision rule. That is, different handling is performed on different label data, for example, a high-risk user request is rejected, and a corresponding dialog is returned, for example, if 'your account login is abnormal, a customer service is required to be contacted to check a specific reason'; requesting a low-risk user to go to a normal business process; the user request for intermediate risk is again authenticated.
Referring to a schematic structural diagram of an integral acquisition scene wind control subsystem shown in fig. 3, the integral acquisition scene wind control subsystem B01 includes: the system comprises an integral acquisition information acquisition module, an integral acquisition feature derivation module, an integral acquisition decision module and an integral acquisition treatment module.
Wherein, the integral acquisition information module includes: the system comprises a point acquisition equipment information interface, a point acquisition equipment feature processing unit, a point acquisition user information interface and a point acquisition activity information interface. The integral acquisition information acquisition module can be used for acquiring user activity information fields besides equipment information fields and user information fields for user login; the user activity information field includes: participation channel, activity id, integral value, participation time and other information.
The integral acquisition characteristic derivation module is used for analyzing the information fields acquired by the integral acquisition information acquisition module to acquire integral acquisition derivation characteristics. The integral acquisition derivative features include: the sum of the integral values obtained by the same user in a period of time and the number of the activity ids participated in by the same user in a period of time. For example: the sum of the integral values obtained by the same user in nearly 1 minute, the sum of the integral values obtained by the same user in nearly 10 minutes and the sum of the integral values obtained by the same user in nearly 1 hour can be derived by adding the integral values and the user id fields and the time slice dimension; the number of activity ids participating with the user in the last 1 minute, the number of activity ids participating with the user in the last 10 minutes, the number of activity ids participating with the user in the last 1 hour, and the like can be derived through the activity id field, the user id field and the time slice dimension.
The integral obtaining decision module is used for generating a second configuration rule based on the equipment information field, the user activity information field and the integral obtaining derivative characteristics, and sending the second configuration rule to the data engine; that is to say, the decision module can configure the field and the derived feature configuration rule, and return the hit data labeled with different tags, for example, when the configuration rule participates in 10 active IDs with the user ID in approximately 10 minutes and the user ID switches 10 IP addresses in approximately 10 minutes, the requests meeting the logic are labeled as extremely high risk blacklists for disposal, and the labeled data (such as the user mobile phone number and the user IP) is exported to the data engine for deposition.
The point acquisition handling module is used for responding to a point acquisition request of a user based on a wind control decision rule. That is, different treatments are interfaced for different tag data, such as: for the user request with extremely high risk, directly pulling the user into a blacklist; rejecting the high-risk user request, and returning a corresponding dialog, if 'the account login of your is abnormal, please contact the customer service to check a specific reason', and correspondingly showing that the point acquisition of the type of the customer fails; the user request for the intermediate risk needs to be verified again; the request of the user without risk can be directly passed through, and the corresponding points of the clients are successfully obtained.
Referring to the schematic structural diagram of a point redemption scenario wind control subsystem shown in fig. 4, the point redemption scenario wind control subsystem C01 includes: the system comprises a point exchange information acquisition module, a point exchange characteristic derivation module, a point exchange decision module and a point exchange disposal module.
The point exchange information acquisition module comprises: the system comprises a point exchange equipment information interface, a point exchange equipment characteristic processing unit, a point exchange user information interface and a point exchange transaction information interface. The point exchange information acquisition module is used for acquiring equipment information fields and user information fields logged by a user and also can be used for acquiring user transaction information fields; wherein the transaction information field includes: participation channel, converted commodity id, converted merchant id, converted integral value, participation time, receiving address and other information.
The point exchange characteristic derivation module is used for analyzing the information fields acquired by the point exchange information acquisition module to obtain point exchange derivative characteristics. For example, the commodity id and user id fields plus the time slice dimension can derive the same user and commodity exchange times in approximately 1 minute, the same user and commodity exchange times in approximately 10 minutes, the same user and commodity exchange times in approximately 1 hour, and the like.
The point exchange decision module is used for generating a third configuration rule based on the equipment information field, the user transaction information field and the point exchange derivative characteristics, and sending the third configuration rule to the data engine; the point exchange processing module is used for responding to the point exchange request of the user based on the wind control decision rule.
That is, the point exchange decision module can configure the rules of the fields and the derived features and return the hit data labeled with different labels, for example, when the configuration rule is that the commodity type is equal to the special price activity commodity and the ordering times of the same commodity of the user are more than 1 in nearly 1 natural day, the requests meeting the logic are all labeled as high risk, the processing is carried out according to the exchange failure, and the user is prompted that the Japanese commodity reaches the exchange upper limit at present and requests the next day; marking requests far exceeding logic into extremely high risk, handling according to deduction points, and prompting the user account number to be abnormal; marking the request meeting one of the requirement that the commodity type is equal to the special price activity commodity or the requirement that the ordering times of the same user and the commodity on the near 1 natural day is more than 1 as the medium risk, and further verifying; requests that do not satisfy any of the above logics at the same time are marked as risk-free and are handled as redemption success.
As a specific example, this embodiment provides a wind control system for internet credit system service, including: a user logs in a scene wind control system A001, an integral acquisition scene wind control system B001, an integral conversion scene wind control system C001 and a data engine interface D001; the three business scene A001, B001 and C001 wind control systems respectively and independently operate, but the marked data can be exported to a data engine D001 in real time to be subjected to data precipitation, the data engine D001 receives label data transmitted by the business scenes A001, B001 and C001, the marked data are classified, and the classified data are provided for the scenes A001, B001 and C001 to be called in a wind control decision rule.
Based on this, an embodiment of the present invention further provides a wind control method for an integral service system, where the method is applied to wind control of the integral service system in any one of the above embodiments, and as a specific embodiment, the specific implementation steps of each module in the system are as follows:
(1) accessing a user login scene, a user point acquisition scene and a user point exchange scene into a wind control, building a data engine, and realizing the precipitation of marking data and the calling of data in the data engine;
(2) accessing a user login scene into a wind control, and acquiring equipment information and user information; the device information field needs to collect information such as a device brand, a version number, a mac address, an IP address and the like, and the user information field needs to collect information such as a user binding mobile phone number, an IP address, a mailbox, login time and the like;
(3) after information acquisition is finished, performing feature derivation by taking a field as an entry parameter, for example, IP addresses can derive IP home cities, IP home provinces and the like through field analysis, and the number of login mobile phones associated with the same IP address in nearly 10 minutes, the number of login mobile phones associated with the same IP address in nearly 1 hour, the number of login mobile phones associated with the same IP address in nearly 1 day and the like can be derived by adding a time slice dimension to the IP addresses and the mobile phone addresses bound by the users;
(4) the decision module can realize the configuration rule of the field and the derived feature, and return the hit data with different labels, if the configuration rule is that the IP attribution is not equal to China and the number of login mobile phone numbers associated with the IP in nearly 10 minutes is higher than a certain threshold, the request meeting the logic is marked as high risk, and the marked data (such as the mobile phone number of the user and the IP of the user) is exported to a data engine for precipitation;
(5) the handling module carries out different handling on different label data, such as refusing a high-risk user request and returning a corresponding word, for example, if the account login of a user is abnormal, the user is required to contact the customer service to check a specific reason'; requesting a low-risk user to go to a normal business process;
(6) a user acquires an integral scene to access wind control and needs to acquire equipment information, user information and activity information; the description in the step (2) can be seen in the field needing to collect the equipment information and the user information, and the field needing to collect the activity information comprises information such as participation channels, activity ids, integral values, participation time and the like;
(7) after information collection is finished, the fields are used as input parameters to carry out feature derivation, and for example, the sum of the integral values acquired by the same user in nearly 1 minute, the sum of the integral values acquired by the same user in nearly 10 minutes and the sum of the integral values acquired by the same user in nearly 1 hour can be derived by adding the integral values and the user id fields to the time slice dimension; the number of activity ids participating with the user in nearly 1 minute, the number of activity ids participating with the user in nearly 10 minutes, the number of activity ids participating with the user in nearly 1 hour and the like can be derived through the activity id field, the user id field and the time slice dimension;
(8) the decision module can configure the field and the derived feature to be regular, and return the hit data labeled with different labels, if the configuration rule participates in 10 activity IDs with the user ID in nearly 10 minutes and the user ID switches 10 IP addresses in nearly 10 minutes, the requests meeting the logic are all labeled as extremely high risk blacklisting for disposal, and the labeled data (such as the user mobile phone number and the user IP) are exported to a data engine for precipitation;
(9) accessing a user point exchange scene into wind control, and acquiring equipment information, user information and transaction information; the fields of the equipment information and the user information which need to be collected can be seen from the description in the step (2), and the fields of the transaction information which need to be collected comprise information such as participation channels, converted commodity ids, converted merchant ids, converted integral values, participation time, receiving addresses and the like;
(10) after information acquisition is finished, the fields are used as entries to carry out feature derivation, for example, the commodity id and user id fields plus the time slice dimension can derive the same user and commodity exchange times in nearly 1 minute, the same user and commodity exchange times in nearly 10 minutes, the same user and commodity exchange times in nearly 1 hour and the like;
(11) the decision module can realize the configuration rule of the field and the derived feature, and return the hit data labeled with different tags, such as the configuration rule: when the commodity type is equal to the special price activity commodity and the ordering times of the same commodity of the user are more than 1 in nearly 1 natural day, marking the requests meeting the logic as high-risk exchange failure disposal, and prompting the user that the Japanese commodity reaches the exchange upper limit at present and asking the next day;
(12) the data engine D001 classifies and deposits the data transmitted by the user logging in the scene wind control system A001, the integral acquisition scene wind control system B001 and the integral conversion scene wind control system C001, and can be called by 3 scenes in real time in decision making; if a rule is configured in a decision module of a point exchange scene wind control system C001, when a user id is matched with a database marked as a high-risk label in a login scene, marking the user as a high risk, and outputting the user id and a user mobile phone number field in the request to a decision engine for precipitation; matching the fields of the exchanged user id and the user mobile phone number in a decision module of the exchange scene, and if the matching is successful, performing the treatment of refusing the exchange; and finishing the integration system flow.
The invention provides a wind control system and a wind control method of an integral service system, wherein the system comprises: a business scene wind control system and a data engine; the business scene wind control system comprises: the system comprises a user login scene wind control subsystem, an integral acquisition scene wind control subsystem and an integral exchange scene wind control subsystem. The wind control system covers the links of login, point acquisition and point exchange, the protection capability of the internet point system is improved, and index design suitable for the point system is carried out aiming at corresponding attack means. The system can greatly improve the identification rate of the risk users, resist the attack of a large number of attacking users on various service scenes, and improve the safety of the scoring system.
The embodiment of the application further provides an electronic device, and specifically, the electronic device comprises a processor and a storage device; the storage means has stored thereon a computer program which, when executed by the processor, performs the method of any of the above described embodiments.
Fig. 5 is a schematic structural diagram of an electronic device according to an embodiment of the present application, where the electronic device 400 includes: a processor 40, a memory 41, a bus 42 and a communication interface 43, wherein the processor 40, the communication interface 43 and the memory 41 are connected through the bus 42; the processor 40 is arranged to execute executable modules, such as computer programs, stored in the memory 41.
The Memory 41 may include a high-speed Random Access Memory (RAM) and may also include a non-volatile Memory (non-volatile Memory), such as at least one disk Memory. The communication connection between the network element of the system and at least one other network element is realized through at least one communication interface 43 (which may be wired or wireless), and the internet, a wide area network, a local network, a metropolitan area network, etc. may be used.
The bus 42 may be an ISA bus, PCI bus, EISA bus, or the like. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of illustration, only one double-headed arrow is shown in FIG. 5, but this does not indicate only one bus or one type of bus.
The memory 41 is used for storing a program, the processor 40 executes the program after receiving an execution instruction, and the method executed by the apparatus defined by the flow process disclosed in any of the foregoing embodiments of the present invention may be applied to the processor 40, or implemented by the processor 40.
The processor 40 may be an integrated circuit chip having signal processing capabilities. In implementation, the steps of the above method may be performed by integrated logic circuits of hardware or instructions in the form of software in the processor 40. The Processor 40 may be a general-purpose Processor, and includes a Central Processing Unit (CPU), a Network Processor (NP), and the like; the device can also be a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), a Field-Programmable Gate Array (FPGA), or other Programmable logic devices, discrete Gate or transistor logic devices, discrete hardware components. The various methods, steps and logic blocks disclosed in the embodiments of the present invention may be implemented or performed. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like. The steps of the method disclosed in connection with the embodiments of the present invention may be directly implemented by a hardware decoding processor, or implemented by a combination of hardware and software modules in the decoding processor. The software module may be located in ram, flash memory, rom, prom, or eprom, registers, etc. storage media as is well known in the art. The storage medium is located in a memory 41, and the processor 40 reads the information in the memory 41 and completes the steps of the method in combination with the hardware thereof.
Corresponding to the method, the embodiment of the application also provides a computer readable storage medium, wherein the computer readable storage medium stores machine executable instructions, and when the computer executable instructions are called and executed by a processor, the computer executable instructions cause the processor to execute the steps of the method.
In the embodiments provided in the present application, it should be understood that the disclosed apparatus and method may be implemented in other ways. The above-described embodiments of the apparatus are merely illustrative, and for example, the division of the units is only one logical division, and there may be other divisions when actually implemented, and for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection of devices or units through some communication interfaces, and may be in an electrical, mechanical or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
In addition, functional units in the embodiments provided in the present application may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit.
The functions, if implemented in the form of software functional units and sold or used as a stand-alone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, an electronic device, or a network device) to perform all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk or an optical disk, and other various media capable of storing program codes.
It should be noted that: like reference numbers and letters indicate like items in the figures, and thus once an item is defined in a figure, it need not be further defined or explained in subsequent figures, and moreover, the terms "first," "second," "third," etc. are used merely to distinguish one description from another and are not to be construed as indicating or implying relative importance.
Finally, it should be noted that: the above-mentioned embodiments are only specific embodiments of the present invention, which are used for illustrating the technical solutions of the present invention and not for limiting the same, and the protection scope of the present invention is not limited thereto, although the present invention is described in detail with reference to the foregoing embodiments, those skilled in the art should understand that: any person skilled in the art can modify or easily conceive the technical solutions described in the foregoing embodiments or equivalent substitutes for some technical features within the technical scope of the present disclosure; such modifications, changes or substitutions do not depart from the spirit and scope of the embodiments of the present invention, and they should be construed as being included therein.
Claims (10)
1. A wind control system for a point service architecture, comprising: a business scene wind control system and a data engine; the business scene wind control system comprises: a user logs in the scene wind control subsystem, the integral acquisition scene wind control subsystem and the integral exchange scene wind control subsystem;
the business scene wind control system is used for exporting the tag data to the data engine in real time;
the data engine is used for classifying the received label data and sending the classified label data to the business scene wind control system for the business scene wind control system to call in a wind control decision rule so as to realize corresponding wind control decision.
2. The wind control system of a point business system according to claim 1, wherein the user login scene wind control subsystem comprises a login information acquisition module, a login feature derivation module, a login decision module and a login handling module;
the login information acquisition module is used for acquiring equipment information fields and user information fields logged in by a user;
the login feature derivation module is used for analyzing the information field acquired by the information acquisition module to acquire login derived features;
the login decision module is used for generating a first configuration rule based on the equipment information field, the user information field and the login derivative characteristics, and sending the first configuration rule to the data engine;
the login handling module is used for responding to a login request of a user based on a wind control decision rule.
3. The wind control system of a credit business system of claim 2, wherein the login information collection module comprises: the system comprises a login equipment information interface, a login equipment feature processing unit and a login user information interface.
4. The wind control system of credit business architecture of claim 2, wherein said device information field comprises: equipment brand, version number, mac address, IP address; the user information field includes: the user binds the mobile phone number, the IP address, the mailbox and the login time;
the login-derived features include: IP attribution information and the number of login mobile phone numbers related to the same IP address in a period of time.
5. The wind control system of a point business system according to claim 1, wherein the point acquisition scenario wind control subsystem comprises: the system comprises a point acquisition information acquisition module, a point acquisition feature derivation module, a point acquisition decision module and a point acquisition treatment module;
the integral acquisition information acquisition module is used for acquiring equipment information fields, user information fields and user activity information fields of user login;
the integral acquisition characteristic derivation module is used for analyzing the information fields acquired by the integral acquisition information acquisition module to acquire integral acquisition derivation characteristics;
the integral obtaining decision module is used for generating a second configuration rule based on the equipment information field, the user activity information field and the integral obtaining derivative characteristics, and sending the second configuration rule to the data engine;
the point acquisition handling module is used for responding to a point acquisition request of a user based on a wind control decision rule.
6. The system of claim 5, wherein the user activity information field comprises: participation channel, activity id, integral value and participation time; the integral acquisition derived features include: the sum of the integral values obtained by the same user in a period of time and the number of the activity ids participated in by the same user in a period of time.
7. The wind control system of a point business system according to claim 6, wherein the point acquisition information module comprises: the system comprises a point acquisition equipment information interface, a point acquisition equipment feature processing unit, a point acquisition user information interface and a point acquisition activity information interface.
8. The system of claim 1, wherein the credit redemption scenario wind control subsystem comprises: the system comprises a point exchange information acquisition module, a point exchange characteristic derivation module, a point exchange decision module and a point exchange disposal module;
the point exchange information acquisition module is used for acquiring equipment information fields, user information fields and user transaction information fields logged by a user;
the point exchange characteristic derivation module is used for analyzing the information fields acquired by the point exchange information acquisition module to acquire point exchange derivation characteristics;
the point exchange decision module is used for generating a third configuration rule based on the equipment information field, the user transaction information field and the point exchange derivative characteristics, and sending the third configuration rule to the data engine;
the point exchange processing module is used for responding to the point exchange request of the user based on the wind control decision rule.
9. The wind control system of a credit business system of claim 8, wherein the credit redemption information collection module comprises: the system comprises a point exchange equipment information interface, a point exchange equipment characteristic processing unit, a point exchange user information interface and a point exchange transaction information interface.
10. A wind control method of a point service system is characterized in that the method is applied to the wind control system of the point service system, and comprises the following steps:
a business scene wind control system collects scene data and processes the scene data to generate label data;
the business scene wind control system exports the label data to a data engine in real time;
and the data engine classifies the received label data and sends the classified label data to the business scene wind control system, so that the business scene wind control system can be called in a wind control decision rule to realize a corresponding wind control decision.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110398645.5A CN113065901A (en) | 2021-04-14 | 2021-04-14 | Wind control system and method for integral business system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110398645.5A CN113065901A (en) | 2021-04-14 | 2021-04-14 | Wind control system and method for integral business system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN113065901A true CN113065901A (en) | 2021-07-02 |
Family
ID=76566945
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110398645.5A Pending CN113065901A (en) | 2021-04-14 | 2021-04-14 | Wind control system and method for integral business system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113065901A (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114004660A (en) * | 2021-11-09 | 2022-02-01 | 中国工商银行股份有限公司 | Data processing method and device, electronic equipment and storage medium |
| CN116957666A (en) * | 2023-09-19 | 2023-10-27 | 南京大数据集团有限公司 | Integral data processing method and system based on circulation feature recognition |
| CN117010953A (en) * | 2023-06-16 | 2023-11-07 | 东莞市莞云信息科技有限公司 | Mall point exchange system |
-
2021
- 2021-04-14 CN CN202110398645.5A patent/CN113065901A/en active Pending
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114004660A (en) * | 2021-11-09 | 2022-02-01 | 中国工商银行股份有限公司 | Data processing method and device, electronic equipment and storage medium |
| CN117010953A (en) * | 2023-06-16 | 2023-11-07 | 东莞市莞云信息科技有限公司 | Mall point exchange system |
| CN116957666A (en) * | 2023-09-19 | 2023-10-27 | 南京大数据集团有限公司 | Integral data processing method and system based on circulation feature recognition |
| CN116957666B (en) * | 2023-09-19 | 2024-04-02 | 南京大数据集团有限公司 | Integral data processing method and system based on circulation feature recognition |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN113065901A (en) | Wind control system and method for integral business system | |
| CN111435507A (en) | Advertisement anti-cheating method and device, electronic equipment and readable storage medium | |
| CN110620770B (en) | Method and device for analyzing network black product account number | |
| CN107437223A (en) | Credit information checking method, device and equipment | |
| CN113383362B (en) | User identification method and related product | |
| CN111949702B (en) | Abnormal transaction data identification method, device and equipment | |
| CN113412607B (en) | Content pushing method and device, mobile terminal and storage medium | |
| CN111552680A (en) | Construction method and device of business fraud identification database and computer equipment | |
| CN113206909A (en) | Crank call interception method and device | |
| CN111476640B (en) | Authentication method, system, storage medium and big data authentication platform | |
| CN109787883A (en) | Information processing method, device, electronic equipment and computer-readable storage medium | |
| CN110956503A (en) | User identification method and device with loan demand based on user network behavior | |
| CN112307464A (en) | Fraud identification method and device and electronic equipment | |
| CN115577172A (en) | Article recommendation method, device, equipment and medium | |
| CN111259216B (en) | Information identification method, device and equipment | |
| CN112468444B (en) | Internet domain name abuse identification method and device, electronic equipment and storage medium | |
| CN111325580B (en) | User account management method, device, equipment and storage medium | |
| CN113923011A (en) | Phishing early warning method and device, computer equipment and storage medium | |
| CN111245815B (en) | Data processing method and device, storage medium and electronic equipment | |
| CN110852338A (en) | User portrait construction method and device | |
| CN115983907A (en) | Data recommendation method and device, electronic equipment and computer readable medium | |
| CN113570166A (en) | Wind control real-time prediction identification method and device | |
| CN112950222A (en) | Resource processing abnormity detection method and device, electronic equipment and storage medium | |
| CN112132693A (en) | Transaction verification method, transaction verification device, computer equipment and computer-readable storage medium | |
| CN108055661B (en) | Telephone number blacklist establishing method and device based on communication network |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |