CN113379525A - Financial supervision method and device, electronic equipment and storage medium - Google Patents
Financial supervision method and device, electronic equipment and storage medium Download PDFInfo
- Publication number
- CN113379525A CN113379525A CN202110652928.8A CN202110652928A CN113379525A CN 113379525 A CN113379525 A CN 113379525A CN 202110652928 A CN202110652928 A CN 202110652928A CN 113379525 A CN113379525 A CN 113379525A
- Authority
- CN
- China
- Prior art keywords
- node
- transaction
- target
- information
- equipment
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 46
- 239000000523 sample Substances 0.000 claims abstract description 59
- 239000003999 initiator Substances 0.000 claims description 13
- 238000004590 computer program Methods 0.000 claims description 7
- 238000012544 monitoring process Methods 0.000 description 15
- 230000006854 communication Effects 0.000 description 6
- 230000003287 optical effect Effects 0.000 description 6
- 238000010586 diagram Methods 0.000 description 5
- 230000008569 process Effects 0.000 description 5
- 238000012545 processing Methods 0.000 description 5
- 230000009286 beneficial effect Effects 0.000 description 4
- 238000005516 engineering process Methods 0.000 description 4
- 230000006870 function Effects 0.000 description 4
- 238000004458 analytical method Methods 0.000 description 3
- 230000006399 behavior Effects 0.000 description 3
- 230000005540 biological transmission Effects 0.000 description 3
- 238000012163 sequencing technique Methods 0.000 description 3
- 238000012806 monitoring device Methods 0.000 description 2
- 239000013307 optical fiber Substances 0.000 description 2
- 230000002093 peripheral effect Effects 0.000 description 2
- 230000000644 propagated effect Effects 0.000 description 2
- 238000003491 array Methods 0.000 description 1
- 230000002457 bidirectional effect Effects 0.000 description 1
- 238000004891 communication Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 230000000977 initiatory effect Effects 0.000 description 1
- 238000007689 inspection Methods 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 230000000149 penetrating effect Effects 0.000 description 1
- 230000008707 rearrangement Effects 0.000 description 1
- 238000012216 screening Methods 0.000 description 1
- 239000004065 semiconductor Substances 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 238000012546 transfer Methods 0.000 description 1
- 238000012795 verification Methods 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q40/00—Finance; Insurance; Tax strategies; Processing of corporate or income taxes
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
- H04L67/104—Peer-to-peer [P2P] networks
Landscapes
- Engineering & Computer Science (AREA)
- Business, Economics & Management (AREA)
- Marketing (AREA)
- Strategic Management (AREA)
- Accounting & Taxation (AREA)
- Development Economics (AREA)
- Economics (AREA)
- Finance (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Technology Law (AREA)
- Physics & Mathematics (AREA)
- General Business, Economics & Management (AREA)
- General Physics & Mathematics (AREA)
- Theoretical Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The embodiment of the invention discloses a financial supervision method, a financial supervision device, electronic equipment and a storage medium. Wherein, the method comprises the following steps: acquiring a transaction link of a transaction request from a seed node to a target node and transaction information of any node in the transaction link through a probe node deployed in a blockchain network; acquiring equipment information of the equipment IP receiving the transaction request through a data flow probe deployed in a local area network; and determining a target equipment IP corresponding to the target node based on a preset information comparison condition according to the transaction information and the equipment information so as to realize supervision on the target equipment IP. By determining the final target equipment IP of the transaction, the transaction is traced and supervised, and the accuracy and efficiency of financial supervision are improved.
Description
Technical Field
The embodiment of the invention relates to computer technology, in particular to a financial supervision method, a financial supervision device, electronic equipment and a storage medium.
Background
With the development of the economic and financial industries, the supervision of financial transactions becomes more and more difficult. For example, when an illegal transaction is performed, the transaction request is often forwarded multiple times to reach the target account after passing through multiple accounts. The staff cannot accurately know the target account, and the supervision of the transaction is influenced.
In the prior art, the account number IP of the public link account is anonymous, and only a virtual account number address can be identified when tracking and identifying a transaction, and an actual IP address bound by the virtual account number address cannot be obtained. Manual intervention is required to analyze the transaction data on the chain. Because the related data sources are more, the data formats are more, a large amount of supervision resources are consumed, and the efficiency and the precision of financial supervision are lower.
Disclosure of Invention
The embodiment of the invention provides a financial supervision method, a financial supervision device, electronic equipment and a storage medium, and aims to improve the accuracy and efficiency of financial supervision.
In a first aspect, an embodiment of the present invention provides a financial monitoring method, where the method includes:
acquiring a transaction link of a transaction request from a seed node to a target node and transaction information of any node in the transaction link through a probe node deployed in a blockchain network;
acquiring equipment information of the equipment IP receiving the transaction request through a data flow probe deployed in a local area network;
and determining a target equipment IP corresponding to the target node based on a preset information comparison condition according to the transaction information and the equipment information so as to realize supervision on the target equipment IP.
In a second aspect, an embodiment of the present invention further provides a financial monitoring apparatus, where the apparatus includes:
the node link acquisition module is used for acquiring a transaction link of a transaction request from a seed node to a target node and transaction information of any node in the transaction link through a probe node deployed in a blockchain network;
the equipment information acquisition module is used for acquiring the equipment information of the equipment IP receiving the transaction request through a data flow probe deployed in a local area network;
and the target equipment determining module is used for determining a target equipment IP corresponding to the target node based on a preset information comparison condition according to the transaction information and the equipment information so as to realize supervision on the target equipment IP.
In a third aspect, an embodiment of the present invention further provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, where the processor executes the computer program to implement the financial monitoring method according to any embodiment of the present invention.
In a fourth aspect, embodiments of the present invention also provide a storage medium containing computer-executable instructions, which when executed by a computer processor, are used to perform a financial administration method according to any of the embodiments of the present invention.
The embodiment of the invention sends the transaction request to the seed node through the block chain, and the seed node sends the transaction request to the final target node step by step. And obtaining the transaction information of each node and the transaction link of the transaction request among the nodes according to the probe nodes deployed in the block chain. And acquiring the actual communication process of the transaction request in the local area network through the data flow probe, namely determining the equipment information of the transaction request received. And comparing the transaction information with the equipment information, determining that the equipment IP corresponding to the target node is the target equipment IP, and supervising the transaction on the target equipment IP. The problem that in the prior art, the transaction request cannot be automatically tracked is solved, manpower and time are saved, the transaction of the IP of the target equipment is supervised by determining the IP of the target equipment, and the efficiency and the precision of financial supervision are improved.
Drawings
FIG. 1 is a flow chart illustrating a financial monitoring method according to an embodiment of the present invention;
FIG. 2 is a flow chart illustrating a financial monitoring method according to a second embodiment of the present invention;
FIG. 3 is a block diagram of a financial monitoring apparatus according to a third embodiment of the present invention;
fig. 4 is a schematic structural diagram of a financial monitoring device in the fourth embodiment of the present invention.
Detailed Description
The present invention will be described in further detail with reference to the accompanying drawings and examples. It is to be understood that the specific embodiments described herein are merely illustrative of the invention and are not limiting of the invention. It should be further noted that, for the convenience of description, only some of the structures related to the present invention are shown in the drawings, not all of the structures.
Example one
Fig. 1 is a flowchart illustrating a financial monitoring method according to an embodiment of the present invention, which is applicable to tracking and monitoring financial transactions, and the method can be executed by a financial monitoring apparatus. As shown in fig. 1, the method specifically includes the following steps:
When people perform illegal transactions, in order to cover the illegal behaviors, transaction requests are generally required to be forwarded by nodes in the blockchain network for multiple times and are finally transmitted to a target node, so that when financial transactions are supervised, transaction tracing needs to be performed on each node in the blockchain network, the target node is determined, and financial supervision is performed on the target node. A client node is added in a block chain, a worker can initiate a transaction from a client, a probe is deployed in the client node, namely the client node can be a probe node, and the probe node can acquire transaction information of each node in a block chain network. That is, probe nodes are deployed on the public link, and the probe nodes can collect transaction information of each server node in the public link network by using a node discovery mechanism in the public link technology.
The staff may preset one or more seed nodes from the plurality of nodes, for example, the staff may analyze each server node in advance, search for a suspicious node, use the suspicious node as a seed node, and use the suspicious node as a node that may perform illegal transactions. With the seed node as the initial node for the transaction request, the transaction request may be first issued to the seed node by the client node. The client node acts as a probe node and requests transaction information from the seed node, which may include the user account number of the transaction initiator, the time when the transaction request was received, the size of the received data packet, etc. After receiving the transaction request, the seed node can forward the transaction request in the blockchain network, the node receiving the transaction request can forward the transaction request again until the last node does not forward the transaction request, the node receiving the transaction request finally is a target node, and the target node is a node needing to be supervised. Through recursive acquisition, the probe node finally obtains the transaction information of each node receiving the transaction request in the public link network and the transaction link of the transaction request, and the forwarding process among the server nodes is the transaction link from the seed node to the target node of the transaction request.
In this embodiment, optionally, the obtaining, by a probe node disposed in the blockchain network, a transaction link of the transaction request from the seed node to the target node and transaction information of any node in the transaction link includes: sending a transaction request to a preset seed node through a client, and acquiring transaction information of the seed node based on probe nodes deployed in a block chain network; judging whether the first-order neighbor node exists in the seed node, if so, sending a transaction request to the first-order neighbor node by the seed node, and acquiring transaction information of the first-order neighbor node through the probe node; judging whether a first-order neighbor node has a second-order neighbor node, if not, determining the first-order neighbor node as a target node, and the transaction information of the first-order neighbor node as the transaction information of the target node; and determining a transaction link from the seed node to the target node of the transaction request according to the node forwarding sequence of the transaction request in the block link network.
Specifically, the staff member sends a preset transaction request from the client node to one seed node, for example, the transaction request may be a transfer request. The method comprises the steps that a probe is deployed in a client node, the client node is deployed in a block chain network, namely the client node deployed in the block chain network can be used as the probe node, and when a client sends a transaction request to a seed node, the client node serves as the probe node to acquire transaction information of the seed node. For example, the probe node may obtain the content of the transaction request received by the seed node, the user account number of the transaction initiator, the time when the transaction request is received, the size of the received data packet, and the like. Each node in the blockchain corresponds to a unique user account number which can be used for initiating a transaction. Each server node in the blockchain network may be connected to each other to form a network topology. Each node can determine its own neighbor node according to the connection sequence, for example, if the node a is connected to the node B, and the node B is connected to the node C, then the node a is an upper node of the node B, the node B is a neighbor node of the node a, the node B is an upper node of the node C, and the node C is a neighbor node of the node B.
After the seed node receives the transaction request, whether the seed node has a neighbor node or not is determined, and the neighbor node of the seed node is a first-order neighbor node. And if so, forwarding the transaction request to the first-order neighbor node by the seed node. After the first-order neighbor node receives the data packet of the transaction request, the probe node acquires the transaction information of the first-order neighbor node. The probe node can determine a transmission process of the transaction request forwarded from the seed node to the first-order neighbor node according to the transaction information of the seed node and the first-order neighbor node. After the first-order neighbor node receives the transaction request, whether the first-order neighbor node has a neighbor node of the first-order neighbor node can be judged, and the neighbor node of the first-order neighbor node is a second-order neighbor node. If the first-order neighbor node does not exist, the first-order neighbor node is determined to be the last node, namely the first-order neighbor node is the target node of the transaction request, the transaction object of the transaction request is the user of the first-order neighbor node, and the transaction information of the first-order neighbor node is the transaction information of the target node. The probe node acquires the transaction information of each node and determines the forwarding sequence of the transaction request among the nodes. And obtaining a transaction link of the transaction request from the seed node to the target node according to the forwarding sequence. The transaction link is a path of the transaction request between nodes, for example, the transaction request starts from the client, passes through the seed node first, and then passes through the target node, and completes the transaction. The beneficial effect of the arrangement is that the transaction link of the transaction request can be obtained by deploying the probe node, the target node which finally receives the transaction request is determined, the transaction request is convenient to track, the target node is supervised, the intermediate nodes are prevented from being supervised, the target node is omitted, and the efficiency and the precision of financial supervision are improved.
In this embodiment, optionally, after determining whether the first-order neighbor node has the second-order neighbor node, the method further includes: if the first-order neighbor node has a second-order neighbor node, the first-order neighbor node sends a transaction request to the second-order neighbor node, and transaction information of the second-order neighbor node is acquired through the probe node; and judging whether a third-order neighbor node exists in the second-order neighbor node, if not, determining the second-order neighbor node as a target node, and the transaction information of the second-order neighbor node as the transaction information of the target node.
Specifically, after the transaction request is sent to the first-order neighbor node, whether the first-order neighbor node has a second-order neighbor node is determined. If the second-order neighbor node exists, the first-order neighbor node forwards the transaction request to the second-order neighbor node, and the probe node acquires the transaction information of the second-order neighbor node. And judging whether the second-order neighbor node has a neighbor node, wherein the neighbor node of the second-order neighbor node is a third-order neighbor node, if not, determining the second-order neighbor node as a target node, and the transaction information of the second-order neighbor node is the transaction information of the target node. The transaction link of the transaction request is that the transaction request is sent to the seed node from the client node, forwarded to the first-order neighbor node by the seed node, and forwarded to the second-order neighbor node by the first-order neighbor node, so as to complete the transaction. If the third-order neighbor node exists, the second-order neighbor node sends the transaction request to the third-order neighbor node, the probe node acquires the transaction information of the third-order neighbor node and judges whether the fourth-order neighbor node exists in the third-order neighbor node or not until the transaction request is sent to the target node. The beneficial effect who sets up like this lies in, can traverse each neighbour node, and the accurate target node of finding avoids the node to miss, practices thrift manpower and time, improves the efficiency and the precision of financial supervision.
The probe node establishes a topological graph of the monitoring network around the seed node, continuously collects transaction information in the monitoring network, and public link transactions are transmitted in a network layer in a flooding mode, namely the seed node firstly forwards a transaction request to a neighbor node, and then the neighbor node continuously forwards the transaction request to the own neighbor node. And repeating the steps until the transaction request is transmitted to the target node in the public chain network, so as to trace the source of the transaction of the node.
And step 120, acquiring the equipment information of the equipment IP receiving the transaction request through a data flow probe deployed in the local area network.
After the transaction request is forwarded on the transaction link, the traffic analysis function of a DPI (Deep Packet Inspection) device and a web crawler are deployed to obtain device information associated with the transaction request in the local area network, for example, the local area network may be a metropolitan area network, a data traffic probe may be deployed in a machine room of an operator to obtain the device information of the transaction request, and the device information may be information of a device IP that has received or forwarded the transaction request. The transaction information can be obtained through keywords in the transaction request, the device IP which receives the transaction request is determined, and the data packet of the transaction request received by each device IP is obtained. By analyzing the data packet, the time when each device IP receives the data packet, the size of the data packet, and the like can be obtained. Each device IP corresponds to a unique user account which is consistent with the user account in the block chain link point. The device information of the transaction request may include an IP address of the device that received the transaction request, a time at which the transaction request was received, a user account number at which the transaction request was received, a size of the received data packet, and the like.
And step 130, determining a target device IP corresponding to the target node based on a preset information comparison condition according to the transaction information and the device information so as to realize supervision on the target device IP.
After the transaction link and the transaction information of the transaction request in the blockchain and the device information in the local area network are obtained, the transaction information and the device information can be compared, and the transmission sequence of the transaction request among the device IPs is determined according to a preset information comparison condition. And determining the equipment IP corresponding to the target node according to the sequence of the equipment IP transmission transaction requests. And taking the equipment IP corresponding to the target node as the target equipment IP, and finishing the tracking of the target equipment IP. The staff can perform financial supervision on the target device IP, for example, the staff can perform comprehensive analysis on the transaction data of the target device IP to determine whether there is illegal behavior such as high-frequency transaction or large-amount transaction, thereby realizing the supervision on the target device IP.
In this embodiment, optionally, the transaction information includes a user account of a transaction initiator of the node, and the device information includes a user account of a transaction initiator of the device IP; correspondingly, according to the transaction information and the device information, based on the preset information comparison condition, determining the target device IP corresponding to the target node, including: comparing the user account in the transaction information of the target node with the user account in the IP equipment information of any equipment; and if the user account in the equipment IP equipment information is consistent with the user account in the target node transaction information, determining that the equipment IP is the target equipment IP corresponding to the target node.
Specifically, the user account is an account for a user to initiate a transaction, and each server node receives one user account when receiving a transaction request, for example, the seed node sends a transaction request to the first-order neighbor node, and the first-order neighbor node may receive the user account of the seed node as a transaction initiator. For another example, if the first IP sends a transaction request to the second IP, the second IP can obtain the account of the transaction initiator of the first IP. And acquiring the transaction information of each node in the probe node, acquiring the user account of the transaction initiator of each node, and acquiring the user account of the transaction initiator of each equipment IP address in the local area network. And comparing the user account number of each node with the user account number of each equipment IP address, determining a transaction link of the transaction request in the local area network according to the transaction link and the user account number of the node, namely sequencing the equipment IP addresses according to the transaction link of the node, determining the IP address of the transaction request transmitted from the IP address of the seed node to the target node, and determining the equipment IP corresponding to the target node. Or directly searching the user account in the transaction information of the target node, and searching the user account consistent with the user account of the target node from the device information of the device IP, wherein the device IP corresponding to the user account is the target device IP. The method has the advantages that the public chain account has IP address anonymity, only the virtual account address can be identified after the target node is determined, the actual service IP address bound by the virtual account address cannot be determined, and the practical effect on supervision cannot be achieved. The real IP address of the target node in the local area network can be obtained through the user account of the transaction initiator, and block chain project supervision of financial application is achieved.
In this embodiment, optionally, after determining a target device IP corresponding to the target node based on a preset information comparison condition according to the transaction information and the device information, the method further includes: and acquiring historical transaction information of the IP of the target equipment, and auditing the historical transaction information according to a preset transaction supervision rule.
Specifically, after the target device IP address corresponding to the target node is determined, historical transaction information of the target device IP address is obtained. Transaction supervision rules are set in advance, for example, keywords of illegal transactions are set. And searching whether the transaction containing the key words exists in the historical transaction information or not according to transaction supervision rules, and if so, determining that the illegal transaction exists in the IP of the target equipment, thereby realizing the examination and verification of the historical transaction information. For example, the maximum value of the transaction amount may be set, whether the historical transaction amount of the target device IP exceeds the maximum value of the transaction amount is determined, and if yes, it is determined that the target device IP has a behavior of large-amount transaction. The method has the advantages that any transaction information of the IP of the target equipment can be audited, the manual auditing process is reduced, and the efficiency and the precision of financial supervision are improved.
Based on a node protocol identification technology of a block chain P2P (Peer-to-Peer, Peer-to-Peer network), and combining technologies such as a web crawler and data traffic acquisition and analysis, bidirectional result tracing is performed on transactions on the chain and data in a local area network, namely, the source and the final destination of funds among accounts are traced, an actual IP address and a topological graph in the transaction process are determined, and penetrating supervision is realized.
According to the technical scheme of the embodiment, the transaction request is sent to the seed node through the block chain, and then the seed node gradually sends the transaction request to the last target node. And obtaining the transaction information of each node and the transaction link of the transaction request among the nodes according to the probe nodes deployed in the block chain. And acquiring the actual communication process of the transaction request in the local area network through the data flow probe, namely determining the equipment information of the transaction request received. And comparing the transaction information with the equipment information, determining that the equipment IP corresponding to the target node is the target equipment IP, and supervising the transaction on the target equipment IP. The problem that in the prior art, the transaction request cannot be automatically tracked is solved, manpower and time are saved, the transaction of the IP of the target equipment is supervised by determining the IP of the target equipment, and the efficiency and the precision of financial supervision are improved.
Example two
Fig. 2 is a flow chart of a financial monitoring method according to a second embodiment of the present invention, which is further optimized based on the second embodiment. As shown in fig. 2, the method specifically includes the following steps:
The transaction information may include the time when the node receives the transaction request, and the device information may include the device IP address when the transaction request is received and the time when the device IP receives the transaction request. If the transaction information and the device information do not include the user account, the time when each node receives the transaction request may be compared with the time when each device IP receives the transaction request. And determining the equipment IP corresponding to each node according to the time of receiving the transaction request. And sequencing the equipment IPs according to the transaction link of the transaction request in the blockchain network to obtain the communication process of the transaction request in the local area network. And obtaining the equipment IP corresponding to the target node according to the sequencing of the equipment IPs. Or directly comparing the time when the target node receives the transaction request with the time when the device IP receives the transaction request, and searching the target device IP corresponding to the target node. In the process of comparing the receiving time, if the time when only one device IP receives the transaction request is consistent with the time when the target node receives the transaction request, the device IP is determined to be the target device IP. The beneficial effect of the arrangement is that under the condition that the account number of the user cannot be known, the IP of the target device can be determined through the receiving time of the transaction request, the transaction can be tracked, the flexibility and the efficiency of financial supervision are improved,
in this embodiment, optionally, the transaction information includes a size of a data packet received by the node; the device information includes the size of a data packet received by the device IP; correspondingly, after comparing the time when the transaction request is received by the target node with the time when the transaction request is received by any device IP, the method further comprises the following steps: if the time that at least two equipment IPs receive the transaction request is consistent with the time that the target node receives the transaction request, comparing the size of the data packet received by the target node with the size of the data packet received by the at least two equipment IPs; and determining the device IP with the size consistent with the size of the data packet received by the target node in the at least two device IPs as the target device IP corresponding to the target node.
Specifically, the transaction information may further include a size of a data packet received by the node, and the device information may further include a size of a data packet received by the device IP. After the comparison of the receiving times, it may happen that the time for receiving the transaction request by the multiple device IPs is the same, for example, the device information includes the device information of the multiple transaction requests, that is, when the device information of the transaction request is obtained, the device information of other transaction requests may also be obtained. Different transaction requests may be initiated at the same time, and the device IP corresponding to the node cannot be determined by the receiving time of the transaction request. In order to further screen the device IPs, the size of the data packet received by each device IP may be obtained, and the size of the data packet received by the device IP is compared with the size of the data packet received by the node. For example, if there are two device IPs that receive the transaction request at the same time as one node receives the transaction request, the sizes of the data packets received by the two device IPs and the size of the data packet received by the node are respectively compared. And determining the device IP which is consistent with the size of the data packet received by the node from the two device IPs, and determining the device IP as the device IP corresponding to the node. The time when the target node receives the transaction request can be directly compared with the time when each device IP receives the transaction request, and if a plurality of device IPs which are consistent with the time when the target node receives the transaction request exist, the target device IP can be directly determined from the device IPs. The method has the advantages that the IP of the target equipment is screened according to the time and the size of the data packet, and the determining precision of the IP of the target equipment is improved. In step 220, transaction information of other transactions may appear, and through secondary screening, the device IP related in other transaction processes can be prevented from being used as the target device IP, so that the accuracy of financial supervision is effectively improved.
The embodiment of the invention sends the transaction request to the seed node through the block chain, and the seed node sends the transaction request to the final target node step by step. And obtaining the transaction information of each node and the transaction link of the transaction request among the nodes according to the probe nodes deployed in the block chain. And acquiring the actual communication process of the transaction request in the local area network through the data flow probe, namely determining the equipment information of the transaction request received. And comparing the transaction information with the time for receiving the transaction request in the equipment information, determining that the equipment IP corresponding to the target node is the target equipment IP, and supervising the transaction on the target equipment IP by the staff. The problem that in the prior art, the transaction request cannot be automatically tracked is solved, manpower and time are saved, the transaction of the IP of the target equipment is supervised by determining the IP of the target equipment, and the efficiency and the precision of financial supervision are improved.
EXAMPLE III
Fig. 3 is a block diagram of a financial monitoring apparatus according to a third embodiment of the present invention, which is capable of executing a financial monitoring method according to any embodiment of the present invention, and has functional modules and beneficial effects corresponding to the execution method. As shown in fig. 3, the apparatus specifically includes:
a node link obtaining module 301, configured to obtain, through a probe node deployed in a blockchain network, a transaction link from a seed node to a target node of a transaction request and transaction information of any node in the transaction link;
an equipment information obtaining module 302, configured to obtain, through a data traffic probe deployed in a local area network, equipment information of an equipment IP that receives the transaction request;
and the target device determining module 303 is configured to determine, according to the transaction information and the device information, a target device IP corresponding to the target node based on a preset information comparison condition, so as to implement supervision on the target device IP.
Optionally, the node link obtaining module 301 includes:
the system comprises a seed node acquisition unit, a block chain network acquisition unit and a block chain management unit, wherein the seed node acquisition unit is used for sending a transaction request to a preset seed node through a client and acquiring transaction information of the seed node based on a probe node deployed in the block chain network;
the first-order node determining unit is used for judging whether the seed node has a first-order neighbor node or not, if so, the seed node sends the transaction request to the first-order neighbor node, and transaction information of the first-order neighbor node is acquired through the probe node;
the second-order node judging unit is used for judging whether a second-order neighbor node exists in the first-order neighbor node or not, if not, the first-order neighbor node is determined to be a target node, and the transaction information of the first-order neighbor node is the transaction information of the target node;
and the transaction link determining unit is used for determining a transaction link of the transaction request from the seed node to the target node according to the node forwarding sequence of the transaction request in the block chain network.
Optionally, the node link obtaining module 301 further includes:
the second-order node acquisition module is used for sending the transaction request to the second-order neighbor node by the first-order neighbor node if the first-order neighbor node has the second-order neighbor node after judging whether the first-order neighbor node has the second-order neighbor node, and acquiring the transaction information of the second-order neighbor node through the probe node;
the third-order node judging unit is used for judging whether a third-order neighbor node exists in the second-order neighbor node or not, if not, the second-order neighbor node is determined to be a target node, and the transaction information of the second-order neighbor node is the transaction information of the target node;
and the node transaction link determining unit is used for executing the node forwarding sequence in the block chain network according to the transaction request and determining the transaction link from the seed node to the target node of the transaction request.
Optionally, the transaction information includes a user account of a transaction initiator of the node, and the device information includes a user account of a transaction initiator of the device IP;
accordingly, the target device determining module 303 includes:
the user account comparison unit is used for comparing a user account in the transaction information of the target node with a user account in any piece of equipment IP equipment information;
and the equipment IP determining unit is used for determining that the equipment IP is the target equipment IP corresponding to the target node if the user account in the equipment IP equipment information is consistent with the user account in the target node transaction information.
Optionally, the transaction information includes time when the node receives the transaction request, and the device information includes time when the device IP receives the transaction request;
accordingly, the target device determining module 303 includes:
the time comparison unit is used for comparing the time when the target node receives the transaction request with the time when any equipment IP receives the transaction request;
and the target IP determining unit is used for determining that the equipment IP is the target equipment IP corresponding to the target node if the time that one equipment IP receives the transaction request is consistent with the time that the target node receives the transaction request.
Optionally, the transaction information includes a size of a data packet received by the node; the device information comprises the size of a data packet received by the device IP;
accordingly, the target device determining module 303 further includes:
the data packet comparison unit is used for comparing the size of a data packet received by the target node with the size of a data packet received by at least two equipment IPs if the time of the transaction request received by the at least two equipment IPs is consistent with the time of the transaction request received by the target node after comparing the time of the transaction request received by the target node with the time of the transaction request received by any equipment IP;
and the target device IP determining unit is used for determining a device IP which is consistent with the size of the data packet received by the target node in the at least two device IPs as the target device IP corresponding to the target node.
Optionally, the apparatus further comprises:
and the transaction supervision module is used for acquiring historical transaction information of the target equipment IP after determining the target equipment IP corresponding to the target node based on a preset information comparison condition according to the transaction information and the equipment information, and auditing the historical transaction information according to a preset transaction supervision rule.
The embodiment of the invention sends the transaction request to the seed node through the block chain, and the seed node sends the transaction request to the final target node step by step. And obtaining the transaction information of each node and the transaction link of the transaction request among the nodes according to the probe nodes deployed in the block chain. And acquiring the actual communication process of the transaction request in the local area network through the data flow probe, namely determining the equipment information of the transaction request received. And comparing the transaction information with the equipment information, determining that the equipment IP corresponding to the target node is the target equipment IP, and supervising the transaction on the target equipment IP. The problem that in the prior art, the transaction request cannot be automatically tracked is solved, manpower and time are saved, the transaction of the IP of the target equipment is supervised by determining the IP of the target equipment, and the efficiency and the precision of financial supervision are improved.
Example four
Fig. 4 is a schematic structural diagram of a financial monitoring device according to a fourth embodiment of the present invention. The financial administration device is an electronic device and fig. 4 shows a block diagram of an exemplary electronic device 400 suitable for use in implementing embodiments of the present invention. The electronic device 400 shown in fig. 4 is only an example and should not bring any limitation to the function and the scope of use of the embodiments of the present invention.
As shown in fig. 4, electronic device 400 is embodied in the form of a general purpose computing device. The components of electronic device 400 may include, but are not limited to: one or more processors or processing units 401, a system memory 402, and a bus 403 that couples the various system components (including the system memory 402 and the processing unit 401).
The system memory 402 may include computer system readable media in the form of volatile memory, such as Random Access Memory (RAM)404 and/or cache memory 405. The electronic device 400 may further include other removable/non-removable, volatile/nonvolatile computer system storage media. By way of example only, storage system 406 may be used to read from and write to non-removable, nonvolatile magnetic media (not shown in FIG. 4, and commonly referred to as a "hard drive"). Although not shown in FIG. 4, a magnetic disk drive for reading from and writing to a removable, nonvolatile magnetic disk (e.g., a "floppy disk") and an optical disk drive for reading from or writing to a removable, nonvolatile optical disk (e.g., a CD-ROM, DVD-ROM, or other optical media) may be provided. In these cases, each drive may be connected to the bus 403 by one or more data media interfaces. Memory 402 may include at least one program product having a set (e.g., at least one) of program modules that are configured to carry out the functions of embodiments of the invention.
A program/utility 408 having a set (at least one) of program modules 407 may be stored, for example, in memory 402, such program modules 407 including, but not limited to, an operating system, one or more application programs, other program modules, and program data, each of which examples or some combination thereof may comprise an implementation of a network environment. Program modules 407 generally perform the functions and/or methods of the described embodiments of the invention.
The electronic device 400 may also communicate with one or more external devices 409 (e.g., keyboard, pointing device, display 410, etc.), with one or more devices that enable a user to interact with the electronic device 400, and/or with any devices (e.g., network card, modem, etc.) that enable the electronic device 400 to communicate with one or more other computing devices. Such communication may be through input/output (I/O) interface 411. Also, the electronic device 400 may communicate with one or more networks (e.g., a Local Area Network (LAN), a Wide Area Network (WAN), and/or a public network, such as the internet) via the network adapter 412. As shown in FIG. 4, the network adapter 412 communicates with the other modules of the electronic device 400 over the bus 403. It should be appreciated that although not shown in FIG. 4, other hardware and/or software modules may be used in conjunction with electronic device 400, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems, among others.
The processing unit 401 executes various functional applications and data processing by executing programs stored in the system memory 402, for example, implementing a financial administration method provided by an embodiment of the present invention, including:
acquiring a transaction link of a transaction request from a seed node to a target node and transaction information of any node in the transaction link through a probe node deployed in a blockchain network;
acquiring equipment information of the equipment IP receiving the transaction request through a data flow probe deployed in a local area network;
and determining a target equipment IP corresponding to the target node based on a preset information comparison condition according to the transaction information and the equipment information so as to realize supervision on the target equipment IP.
EXAMPLE five
The fifth embodiment of the present invention further provides a storage medium containing computer-executable instructions, where the storage medium stores a computer program, and when the computer program is executed by a processor, the computer program implements a financial monitoring method according to the fifth embodiment of the present invention, where the method includes:
acquiring a transaction link of a transaction request from a seed node to a target node and transaction information of any node in the transaction link through a probe node deployed in a blockchain network;
acquiring equipment information of the equipment IP receiving the transaction request through a data flow probe deployed in a local area network;
and determining a target equipment IP corresponding to the target node based on a preset information comparison condition according to the transaction information and the equipment information so as to realize supervision on the target equipment IP.
Computer storage media for embodiments of the invention may employ any combination of one or more computer-readable media. The computer readable medium may be a computer readable signal medium or a computer readable storage medium. A computer readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the foregoing. More specific examples (a non-exhaustive list) of the computer readable storage medium would include the following: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the context of this document, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device.
A computer readable signal medium may include a propagated data signal with computer readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated data signal may take many forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium may also be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device.
Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.
Computer program code for carrying out operations for aspects of the present invention may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, Smalltalk, C + + or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet service provider).
It is to be noted that the foregoing is only illustrative of the preferred embodiments of the present invention and the technical principles employed. It will be understood by those skilled in the art that the present invention is not limited to the particular embodiments described herein, but is capable of various obvious changes, rearrangements and substitutions as will now become apparent to those skilled in the art without departing from the scope of the invention. Therefore, although the present invention has been described in greater detail by the above embodiments, the present invention is not limited to the above embodiments, and may include other equivalent embodiments without departing from the spirit of the present invention, and the scope of the present invention is determined by the scope of the appended claims.
Claims (10)
1. A financial administration method, the method comprising:
acquiring a transaction link of a transaction request from a seed node to a target node and transaction information of any node in the transaction link through a probe node deployed in a blockchain network;
acquiring equipment information of the equipment IP receiving the transaction request through a data flow probe deployed in a local area network;
and determining a target equipment IP corresponding to the target node based on a preset information comparison condition according to the transaction information and the equipment information so as to realize supervision on the target equipment IP.
2. The method of claim 1, wherein obtaining a transaction link from a seed node to a target node for a transaction request and transaction information for any node in the transaction link via a probe node deployed in a blockchain network comprises:
sending a transaction request to a preset seed node through a client, and acquiring transaction information of the seed node based on a probe node deployed in a block chain network;
judging whether the seed node has a first-order neighbor node, if so, sending the transaction request to the first-order neighbor node by the seed node, and acquiring the transaction information of the first-order neighbor node through the probe node;
judging whether a second-order neighbor node exists in the first-order neighbor node, if not, determining that the first-order neighbor node is a target node, and the transaction information of the first-order neighbor node is the transaction information of the target node;
and determining a transaction link of the transaction request from the seed node to a target node according to the node forwarding sequence of the transaction request in a block chain network.
3. The method of claim 2, after determining whether a second-order neighbor node exists for the first-order neighbor node, further comprising:
if the first-order neighbor node has a second-order neighbor node, the first-order neighbor node sends the transaction request to the second-order neighbor node, and transaction information of the second-order neighbor node is acquired through the probe node;
judging whether a third-order neighbor node exists in the second-order neighbor node, if not, determining that the second-order neighbor node is a target node, and the transaction information of the second-order neighbor node is the transaction information of the target node;
and executing the node forwarding sequence in the block chain network according to the transaction request, and determining a transaction link from the seed node to the target node of the transaction request.
4. The method of claim 1, wherein the transaction information includes a user account number of a transaction initiator of the node, and the device information includes a user account number of a transaction initiator of the device IP;
correspondingly, according to the transaction information and the device information, based on a preset information comparison condition, determining a target device IP corresponding to the target node, including:
comparing the user account in the transaction information of the target node with the user account in the equipment information of any equipment IP;
and if the user account in the equipment IP equipment information is consistent with the user account in the target node transaction information, determining that the equipment IP is the target equipment IP corresponding to the target node.
5. The method of claim 1, wherein the transaction information includes a time at which a transaction request was received by a node, and the device information includes a time at which a transaction request was received by a device IP;
correspondingly, according to the transaction information and the device information, based on a preset information comparison condition, determining a target device IP corresponding to the target node, further comprising:
comparing the time when the target node receives the transaction request with the time when any equipment IP receives the transaction request;
and if the time that one equipment IP receives the transaction request is consistent with the time that the target node receives the transaction request, determining that the equipment IP is the target equipment IP corresponding to the target node.
6. The method of claim 5, wherein the transaction information includes a packet size received by the node; the device information comprises the size of a data packet received by the device IP;
correspondingly, after comparing the time when the transaction request is received by the target node with the time when the transaction request is received by any device IP, the method further comprises the following steps:
if the time that at least two equipment IPs receive the transaction request is consistent with the time that the target node receives the transaction request, comparing the size of a data packet received by the target node with the size of a data packet received by the at least two equipment IPs;
and determining the device IP with the size consistent with the size of the data packet received by the target node in the at least two device IPs as the target device IP corresponding to the target node.
7. The method of claim 1, further comprising, after determining a target device IP corresponding to the target node based on a preset information comparison condition according to the transaction information and the device information, further comprising:
and acquiring historical transaction information of the IP of the target equipment, and auditing the historical transaction information according to a preset transaction supervision rule.
8. A financial administration apparatus, comprising:
the node link acquisition module is used for acquiring a transaction link of a transaction request from a seed node to a target node and transaction information of any node in the transaction link through a probe node deployed in a blockchain network;
the equipment information acquisition module is used for acquiring the equipment information of the equipment IP receiving the transaction request through a data flow probe deployed in a local area network;
and the target equipment determining module is used for determining a target equipment IP corresponding to the target node based on a preset information comparison condition according to the transaction information and the equipment information so as to realize supervision on the target equipment IP.
9. An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, wherein the processor, when executing the program, implements a financial administration method as claimed in any one of claims 1 to 7.
10. A storage medium containing computer-executable instructions for performing the financial administration method of any one of claims 1-7 when executed by a computer processor.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202110652928.8A CN113379525A (en) | 2021-06-11 | 2021-06-11 | Financial supervision method and device, electronic equipment and storage medium |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202110652928.8A CN113379525A (en) | 2021-06-11 | 2021-06-11 | Financial supervision method and device, electronic equipment and storage medium |
Publications (1)
Publication Number | Publication Date |
---|---|
CN113379525A true CN113379525A (en) | 2021-09-10 |
Family
ID=77574118
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN202110652928.8A Pending CN113379525A (en) | 2021-06-11 | 2021-06-11 | Financial supervision method and device, electronic equipment and storage medium |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN113379525A (en) |
Citations (8)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN108009807A (en) * | 2017-10-17 | 2018-05-08 | 国家计算机网络与信息安全管理中心 | A kind of bit coin transaction identity method |
CN110569408A (en) * | 2019-09-04 | 2019-12-13 | 广州大学 | digital currency tracing method and system |
CN110796449A (en) * | 2019-10-28 | 2020-02-14 | 网易(杭州)网络有限公司 | Transaction processing method, system, medium and computing device |
CN111163182A (en) * | 2020-03-20 | 2020-05-15 | 杭州海康威视数字技术股份有限公司 | Block chain-based device registration method and apparatus, electronic device, and storage medium |
CN112235278A (en) * | 2020-10-10 | 2021-01-15 | 杭州溪塔科技有限公司 | Method and device for monitoring address information of trader and electronic equipment |
CN112351119A (en) * | 2021-01-11 | 2021-02-09 | 北京知帆科技有限公司 | Probability-based block chain transaction originating IP address determination method and device |
CN112418859A (en) * | 2020-12-04 | 2021-02-26 | 腾讯科技(深圳)有限公司 | Block chain consensus method and device, electronic equipment and readable storage medium |
CN112804299A (en) * | 2020-12-30 | 2021-05-14 | 成都知道创宇信息技术有限公司 | Node mapping method, node mapping device, mapping equipment and readable storage medium |
-
2021
- 2021-06-11 CN CN202110652928.8A patent/CN113379525A/en active Pending
Patent Citations (8)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN108009807A (en) * | 2017-10-17 | 2018-05-08 | 国家计算机网络与信息安全管理中心 | A kind of bit coin transaction identity method |
CN110569408A (en) * | 2019-09-04 | 2019-12-13 | 广州大学 | digital currency tracing method and system |
CN110796449A (en) * | 2019-10-28 | 2020-02-14 | 网易(杭州)网络有限公司 | Transaction processing method, system, medium and computing device |
CN111163182A (en) * | 2020-03-20 | 2020-05-15 | 杭州海康威视数字技术股份有限公司 | Block chain-based device registration method and apparatus, electronic device, and storage medium |
CN112235278A (en) * | 2020-10-10 | 2021-01-15 | 杭州溪塔科技有限公司 | Method and device for monitoring address information of trader and electronic equipment |
CN112418859A (en) * | 2020-12-04 | 2021-02-26 | 腾讯科技(深圳)有限公司 | Block chain consensus method and device, electronic equipment and readable storage medium |
CN112804299A (en) * | 2020-12-30 | 2021-05-14 | 成都知道创宇信息技术有限公司 | Node mapping method, node mapping device, mapping equipment and readable storage medium |
CN112351119A (en) * | 2021-01-11 | 2021-02-09 | 北京知帆科技有限公司 | Probability-based block chain transaction originating IP address determination method and device |
Non-Patent Citations (2)
Title |
---|
朱里奇: "《现代通信网概论》", 30 September 2013, 天津大学出版社, pages: 105 * |
高峰: ""轻量级比特币交易溯源机制"", 《计算机学报》, vol. 41, no. 5, pages 989 - 1004 * |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US20130346841A1 (en) | Tracking Interactions with a Shared Link Through a Chain of Forwarding | |
CN109039787B (en) | Log processing method and device and big data cluster | |
CN111435393B (en) | Object vulnerability detection method, device, medium and electronic equipment | |
CN109672722B (en) | Data deployment method and device, computer storage medium and electronic equipment | |
CN103279380A (en) | Information processing system and method | |
CN111726358A (en) | Attack path analysis method and device, computer equipment and storage medium | |
CN111245642A (en) | Method and device for acquiring dependency relationship between multiple systems and electronic equipment | |
US11449408B2 (en) | Method, device, and computer program product for obtaining diagnostic information | |
CN114356785B (en) | Data processing method and device, electronic equipment and storage medium | |
CN115034596A (en) | Risk conduction prediction method, device, equipment and medium | |
CN113360376A (en) | Buried point testing method and device | |
CN114301694A (en) | Network abnormal flow analysis method, device, equipment and medium | |
JP7090131B2 (en) | Methods and equipment for generating information | |
CN112134870B (en) | Network security threat blocking method, device, equipment and storage medium | |
US11516138B2 (en) | Determining network flow direction | |
CN113094236A (en) | System data acquisition method and device, computer equipment and storage medium | |
KR20130068769A (en) | Apparatus for analyzing connections about security events based on rule and method thereof | |
CN108399128A (en) | A kind of generation method of user data, device, server and storage medium | |
CN115412358B (en) | Network security risk assessment method and device, electronic equipment and storage medium | |
CN115022201B (en) | Data processing function test method, device, equipment and storage medium | |
CN113379525A (en) | Financial supervision method and device, electronic equipment and storage medium | |
US9141460B2 (en) | Identify failed components during data collection | |
CN112749078B (en) | Buried point testing method and device | |
CN114185656A (en) | Test task processing method, device, equipment and storage medium | |
CN115187250B (en) | Detection method, terminal and storage medium for ether house privacy transaction |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination |