CN113596402A - In-service monitoring method, device, equipment, system and storage medium - Google Patents
In-service monitoring method, device, equipment, system and storage medium Download PDFInfo
- Publication number
- CN113596402A CN113596402A CN202110863366.1A CN202110863366A CN113596402A CN 113596402 A CN113596402 A CN 113596402A CN 202110863366 A CN202110863366 A CN 202110863366A CN 113596402 A CN113596402 A CN 113596402A
- Authority
- CN
- China
- Prior art keywords
- behavior
- early warning
- operator
- operation behavior
- warning information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000012544 monitoring process Methods 0.000 title claims abstract description 58
- 238000000034 method Methods 0.000 title claims abstract description 46
- 230000002159 abnormal effect Effects 0.000 claims abstract description 97
- 230000006399 behavior Effects 0.000 claims description 273
- 238000004458 analytical method Methods 0.000 claims description 12
- 238000012216 screening Methods 0.000 claims description 6
- 238000004590 computer program Methods 0.000 claims description 5
- 230000003542 behavioural effect Effects 0.000 claims description 3
- 238000012806 monitoring device Methods 0.000 claims description 3
- 238000007726 management method Methods 0.000 description 35
- 238000012545 processing Methods 0.000 description 11
- 230000008569 process Effects 0.000 description 8
- 238000010586 diagram Methods 0.000 description 6
- 230000005540 biological transmission Effects 0.000 description 5
- 230000004044 response Effects 0.000 description 4
- 238000004140 cleaning Methods 0.000 description 3
- 230000006870 function Effects 0.000 description 3
- 230000003287 optical effect Effects 0.000 description 3
- 238000012550 audit Methods 0.000 description 2
- 238000004891 communication Methods 0.000 description 2
- 238000013500 data storage Methods 0.000 description 2
- 230000007246 mechanism Effects 0.000 description 2
- 230000000737 periodic effect Effects 0.000 description 2
- 230000002093 peripheral effect Effects 0.000 description 2
- 206010000117 Abnormal behaviour Diseases 0.000 description 1
- 238000003491 array Methods 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000013523 data management Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 230000008520 organization Effects 0.000 description 1
- 230000008707 rearrangement Effects 0.000 description 1
- 238000007670 refining Methods 0.000 description 1
- 238000009877 rendering Methods 0.000 description 1
- 238000012552 review Methods 0.000 description 1
- 239000000126 substance Substances 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 230000007704 transition Effects 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N7/00—Television systems
- H04N7/18—Closed-circuit television [CCTV] systems, i.e. systems in which the video signal is not broadcast
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/70—Information retrieval; Database structures therefor; File system structures therefor of video data
- G06F16/71—Indexing; Data structures therefor; Storage structures
-
- G—PHYSICS
- G08—SIGNALLING
- G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
- G08B21/00—Alarms responsive to a single specified undesired or abnormal condition and not otherwise provided for
- G08B21/18—Status alarms
- G08B21/24—Reminder alarms, e.g. anti-loss alarms
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N5/00—Details of television systems
- H04N5/76—Television signal recording
Landscapes
- Engineering & Computer Science (AREA)
- Multimedia (AREA)
- General Physics & Mathematics (AREA)
- Signal Processing (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- Business, Economics & Management (AREA)
- Software Systems (AREA)
- Data Mining & Analysis (AREA)
- Databases & Information Systems (AREA)
- General Engineering & Computer Science (AREA)
- Emergency Management (AREA)
- Debugging And Monitoring (AREA)
Abstract
The embodiment of the application discloses a method, a device, equipment, a system and a storage medium for in-service monitoring, wherein the method comprises the following steps: performing screen recording on behavior operation of an operator in a service platform to obtain behavior video data; when the operation party executes an operation behavior, determining whether the operation behavior belongs to an abnormal operation behavior; if yes, generating early warning information in real time, and controlling to monitor and remind a supervisor according to the abnormal level of the operation behavior; and storing the early warning information and the behavior video data corresponding to the operation behavior in an associated manner. According to the technical scheme, in-service monitoring of an operator is achieved, timeliness of monitoring is improved, evidence is reserved in a data association storage mode, tracing and positioning are facilitated, and the situations of unclear monitoring responsibility and inaccurate positioning after the fact are effectively avoided.
Description
Technical Field
The embodiment of the application relates to the technical field of computers, in particular to an in-service monitoring method, device, equipment, system and storage medium.
Background
With the continuous development of computer technology, service enterprises generally set a uniform service platform, and perform operations on a service device side carrying the service platform by a salesman, so as to provide corresponding service for users, thereby improving service efficiency. For example, a bank enterprise logs in a service platform through a computer at different sites such as a head office, a branch office or a branch office, and the like, so as to handle related services for different users.
In order to improve the service quality and avoid the loss of users or enterprises caused by abnormal operation of the operators, the business operation of each operator needs to be monitored. In the prior art, when the business operation of an operator is supervised, the system usually has certain hysteresis, so that the problems of unclear responsibility, inaccurate positioning and the like exist in subsequent responsibility tracing.
Disclosure of Invention
The application provides an in-service monitoring method, device, equipment, system and storage medium, so as to realize in-service monitoring of a service operator and improve monitoring timeliness.
In a first aspect, an embodiment of the present application provides an in-flight monitoring method, including:
performing screen recording on behavior operation of an operator in a service platform to obtain behavior video data;
when the operation party executes an operation behavior, determining whether the operation behavior belongs to an abnormal operation behavior;
if yes, generating early warning information in real time, and controlling to monitor and remind a supervisor according to the abnormal level of the operation behavior;
and storing the early warning information and the behavior video data corresponding to the operation behavior in an associated manner.
In a second aspect, an embodiment of the present application provides an in-flight monitoring apparatus, including:
the behavior video data obtaining module is used for carrying out screen recording on behavior operation of an operator in the service platform to obtain behavior video data;
the abnormal operation behavior determining module is used for determining whether the operation behavior belongs to the abnormal operation behavior when the operation party executes the operation behavior;
the early warning information generating module is used for generating early warning information in real time if the operation behavior is abnormal, and controlling to monitor and remind a supervisor according to the abnormal level of the operation behavior;
and the association storage module is used for associating and storing the early warning information with the behavior video data corresponding to the operation behavior.
In a third aspect, an embodiment of the present application provides an electronic device, including:
one or more processors;
a memory for storing one or more programs;
when the one or more programs are executed by the one or more processors, the one or more processors implement any one of the in-flight monitoring methods provided in the embodiments of the first aspect.
In a fourth aspect, an embodiment of the present application further provides an in-business monitoring system, which includes a service system and a storage management and control system;
the business system is used for carrying out screen recording on behavior operation of an operator in the business platform to obtain behavior video data;
the business system is further used for determining whether the operation behavior belongs to an abnormal operation behavior when the operation party executes the operation behavior; if yes, generating early warning information in real time, and controlling to monitor and remind a supervisor according to the abnormal level of the operation behavior;
and the storage management and control system is used for storing the early warning information and the behavior video data corresponding to the operation behaviors in a correlation manner.
In a fifth aspect, an embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored, where the computer program, when executed by a processor, implements any one of the in-flight monitoring methods provided in the embodiments of the first aspect.
The method comprises the steps that screen recording is carried out on behavior operation of an operator in a service platform, and behavior video data are obtained; when an operator executes an operation behavior, determining whether the operation behavior belongs to an abnormal operation behavior; if yes, generating early warning information in real time, and controlling to monitor and remind a supervisor according to the abnormal level of the operation behavior; and storing the early warning information and behavior video data corresponding to the operation behaviors in an associated manner. According to the technical scheme, the operation behavior of the operator can be monitored in the operation process of the operator executing behavior, and the monitoring timeliness is improved. Meanwhile, the early warning information and the behavior video data corresponding to the operation behaviors are stored in an associated mode, evidence can be stored under the condition that an operation party has abnormal operation behaviors, so that responsibility positioning is facilitated, and the conditions that monitoring responsibility is not clear afterwards and positioning is not accurate are effectively avoided.
Drawings
Fig. 1A is a block diagram of a monitoring system according to an embodiment of the present disclosure;
fig. 1B is a flowchart of a monitoring method in an event according to an embodiment of the present application;
fig. 2 is a flowchart of a monitoring method in fact according to a second embodiment of the present application;
fig. 3 is a flowchart of a monitoring method in fact according to a third embodiment of the present application;
fig. 4 is a structural diagram of a monitoring device in an event according to a fourth embodiment of the present application;
fig. 5 is a structural diagram of an electronic device according to a fifth embodiment of the present application.
Detailed Description
The present application will be described in further detail with reference to the following drawings and examples. It is to be understood that the specific embodiments described herein are merely illustrative of the application and are not limiting of the application. It should be further noted that, for the convenience of description, only some of the structures related to the present application are shown in the drawings, not all of the structures.
For ease of understanding, the in-flight monitoring system will first be described in detail.
Referring to fig. 1A, the in-service monitoring system includes a business system 10 and a storage management and control system 20.
The service system 10 is provided with at least one service device 11, and each service device 11 carries a service platform, so that an operator network accesses the service platform and provides a service for a user based on the service platform. The service devices 11 may be distributed in a certain area as needed.
Each service device 11 in the service system 10 is configured to perform screen recording on behavior operation of an operator in a service platform to obtain behavior video data; the operation side is also used for determining whether the operation behavior belongs to abnormal operation behavior when the operation side executes the operation behavior; if yes, generating early warning information in real time, and controlling to monitor and remind a supervisor according to the abnormal level of the operation behavior;
and the storage management and control system 20 is provided with at least one storage server and is used for storing the early warning information and behavior video data corresponding to the operation behaviors in a correlation manner.
It should be noted that the service system 10 and the storage management and control system 20 may be integrated into one system, or may be separately provided, which is not limited in this embodiment.
In an alternative embodiment, the storage management system 20 may include a headquarters server 21 and at least one department server 22. The headquarters server 21 is configured to store all the warning information generated by the service system 10; the department server 22 is used to store the behavior video data generated by the proximity business apparatus 11. It can be understood that by means of decentralized storage, bandwidth pressure is reduced, and unified management is facilitated.
It is to be understood that data transmission may be performed between the headquarters server 21 and the division servers 22 for the purpose of uniform management.
In an alternative embodiment, the headquarters server 21 can provide management control service for the supervisor or the manager, so as to realize management control of each service device 11 in the service system 10.
The in-affair monitoring method and the in-affair monitoring system provided by the embodiment of the application are suitable for the scene that the in-affair monitoring system shown in FIG. 1A is adopted to carry out in-affair monitoring on the operation behavior of the operation party. The monitoring method in each event provided by the embodiment of the present application may be executed by an event monitoring apparatus, where the apparatus is implemented by software and/or hardware and is specifically configured in an electronic device, and the electronic device may be a bearer device of any service platform in a service system, for example, may be a service operating device. It should be noted that the service operation device may be, for example, a service device in the service system 10.
Referring to fig. 1B, a method for in-flight monitoring includes:
and S110, performing screen recording on behavior operation of an operator in the service platform to obtain behavior video data.
Illustratively, each service platform in the service system may capture an operation behavior of the operator through a Hook mechanism or call a system interface, and perform screen recording when the operator performs a service operation on the service platform, to obtain behavior video data.
In order to reduce the data volume of the behavior video data, in an optional embodiment, pixel difference points before and after the operation behavior is executed by the operator can be identified and recorded, and recording of irrelevant video data is not needed in idle time of the operator, so that the redundancy degree of the behavior video data is reduced.
And S120, when the operation party executes the operation behavior, determining whether the operation behavior belongs to abnormal operation behavior.
The abnormal operation behavior is a behavior which does not conform to the business rule of the operator, for example, behaviors which violate an industry supervision requirement, a department regulation and a system, a wind control audit system, a practice regulation and the like are all abnormal operation behaviors. The business rules can be set by a supervision unit or a manager according to needs or experience.
For example, in the service transaction process, a behavior of the operator acquiring user data irrelevant to the current service transaction, a behavior of the operator suspending an exception of a service to be processed in the service platform, a behavior of the operator selecting a task in the service platform, a behavior of the operator not performing double review as required in the process of handling a special service, a behavior of the operator not checking a client seal impression in the process of handling a special service, and the like all belong to exception operation behaviors of the operator.
Optionally, an abnormal operation behavior list may be preset, and whether the current operation behavior of the operator is an abnormal operation behavior is determined by comparing the abnormal operation behavior list. Or optionally, a standard operation behavior list may be preset, and whether the current operation behavior of the operator is the standard operation behavior or not is determined by comparing the standard operation behavior list, and the non-standard operation behavior is determined as the abnormal operation behavior.
And S130, if so, generating early warning information in real time, and controlling to monitor and remind a monitor according to the abnormal level of the operation behavior.
And S140, storing the early warning information and behavior video data corresponding to the operation behaviors in an associated manner.
The early warning information is used for marking and/or reminding abnormal operation behaviors of the operation party. Wherein, specific reminding mode can be set according to actual demand.
Optionally, the early warning information for marking the abnormal operation behavior of the operator may be embodied by setting a preset marking field. Wherein the warning information for the marking may or may not inform the operator.
Optionally, the early warning information for reminding the abnormal operation behavior of the operator may be presented to the operator in a manner of presenting additional information, such as text reminding, pop-up window reminding, mail reminding or short message reminding.
It can be understood that the evidence of the abnormal operation behavior of the operator can be timely obtained by generating the early warning information in real time, so that the responsibility positioning can be conveniently carried out subsequently.
Because the influence brought by different operation behaviors is different, the operation behaviors can be classified into abnormal grades according to the influence degree brought by the operation behaviors, and according to the abnormal grades, the abnormal operation behaviors need to be monitored and reminded to a monitor, and the abnormal operation behaviors do not need to be monitored and reminded to the monitor, so that the longitudinal tolerance of the abnormal operation behaviors and the transition disturbance of the monitor are avoided. The supervisor may be a supervisor in a department to which the operator belongs, or may be a third party other than the department to which the operator belongs, such as a headquarters manager, or may be a third party organization other than the department to which the operator belongs.
For example, an exception level list may be preset, and is used to record exception levels corresponding to different abnormal operation behaviors, and determine an exception level corresponding to an operation behavior of an operator by querying the exception level list when needed.
Of course, the above description only illustrates the determination method of the abnormal level corresponding to the abnormal behavior, and the present application may also determine the abnormal level corresponding to the operation behavior of the operator in other manners, which should not be construed as limiting the present application.
In order to timely stop the abnormal operation behavior of the operator and achieve the purpose of intervention in the accident, in an optional embodiment, the operator can also be subjected to behavior intervention, and early warning information is generated based on the operation behavior and the intervention condition.
In an alternative embodiment, the behavioral intervention on the operator can be implemented as follows: determining an intervention level according to the abnormal level of the abnormal operation behavior; and determining an intervention means and an intervention duration matched with the intervention grade, and performing behavior intervention on the operator.
For example, intervention levels corresponding to different exception levels may be preset. In general, the higher the abnormal level is, the higher the corresponding intervention level is, so as to achieve the purpose of performing differential intervention on abnormal operation behaviors of different degrees.
For example, different intervention levels can be preset to set corresponding intervention means and intervention duration respectively, so that the intervention means and the intervention duration matched with the current intervention level are determined according to the corresponding relation, and then behavior intervention is performed on the operator according to the determined intervention means and intervention duration.
The intervention means may include at least one of input device disable, computer state limit (e.g., sleep, lock screen), and network connection state disable, among others. Wherein, the intervention grade corresponding to each intervention means is gradually increased. Of course, the skilled person can also set other intervention means according to needs or experience, and the application is not limited in this respect.
For example, the input device that can be disabled may include at least one of a keyboard, a mouse, an image capture device, a microphone, and the like.
For example, the computer state restriction may include setting a sleep or lock screen for the service execution device; network connection state disabling may be understood as limiting the transmission of communications by the service execution apparatus.
In order to divide the intervention degree of different intervention behaviors, different intervention grades can be set according to the abnormal grade of the abnormal operation behavior, and the intervention duration is set according to each intervention grade. The higher the intervention level is, the higher the corresponding intervention duration is, and the correspondingly higher the forbidden duration of the operator is.
According to the technical scheme, the intervention means is selected in different intervention means such as input equipment forbidding, computer state restriction and network connection state forbidding according to the abnormal level of the abnormal operation behavior, so that differential behavior intervention is performed on the operation party through the selected intervention means, and the purpose of restricting the service operation of the operation party in the service execution equipment to different degrees is achieved.
It can be understood that when the early warning information is generated, the early warning information carries the intervention condition corresponding to the operation behavior of the operation party, and the content carried in the early warning information is enriched, so that the post-tracking and the post-accountability of the monitoring condition in the event are facilitated, and the accuracy of responsibility positioning is improved.
In an optional embodiment, the behavior video data corresponding to the operation behavior and the early warning information are stored in an associated manner, which can be realized by introducing the positioning associated information, so that tracing positioning can be performed based on the positioning associated information.
Optionally, the positioning related information may include timestamp information for characterizing the occurrence time of the operation behavior.
Optionally, in order to facilitate the location of the service device executing the abnormal operation behavior, when the early warning information and the behavior video data are stored in association, a device identifier may be added to the location association information. The device identifier is used for distinguishing different service devices in the service system. It should be noted that, when different service devices are dispersedly configured in different areas, an area identifier may be added to the device identifier, which is convenient for area location.
Optionally, in order to facilitate operator positioning, when the early warning information and the behavior video data are stored in association, an operator identifier may be added to the positioning association information.
Of course, other content may be added as needed to realize the associated storage between the early warning information and the behavior video data, which is not limited in this application.
The method comprises the steps that screen recording is carried out on behavior operation of an operator in a service platform, and behavior video data are obtained; when an operator executes an operation behavior, determining whether the operation behavior belongs to an abnormal operation behavior; if yes, generating early warning information in real time, and controlling to monitor and remind a supervisor according to the abnormal level of the operation behavior; and storing the early warning information and behavior video data corresponding to the operation behaviors in an associated manner. According to the technical scheme, the operation behavior of the operator can be monitored in the operation process of the operator executing behavior, and the monitoring timeliness is improved. Meanwhile, the early warning information and the behavior video data corresponding to the operation behaviors are stored in an associated mode, evidence can be stored under the condition that an operation party has abnormal operation behaviors, so that responsibility positioning is facilitated, and the conditions that monitoring responsibility is not clear afterwards and positioning is not accurate are effectively avoided.
Example two
On the basis of the technical schemes, the method for monitoring the traffic environment is optimized and improved.
Further, the operation of determining whether the operation behavior belongs to the abnormal operation behavior is refined into the operation rule determined according to the service scene of the operation party; and determining whether the operation behavior belongs to the abnormal operation behavior according to the business rule, and perfecting a determination mechanism of the abnormal operation behavior.
It should be noted that, for parts not described in detail in the embodiments of the present application, reference may be made to the description of the foregoing embodiments, and details are not described herein again.
Referring to fig. 2, a method of in-flight monitoring includes:
and S210, screen recording is carried out on behavior operation of an operator in the service platform, and behavior video data are obtained.
And S220, when the operation party executes the operation behavior, determining the service rule according to the service scene of the operation party.
The service rules corresponding to different service scenarios are different, and therefore, the corresponding service rules need to be determined according to the service scenario of the operator.
For example, the corresponding relationship between different service scenarios and service rules may be preset; correspondingly, when the in-service monitoring method is executed, the business rule corresponding to the business scene of the operation party is determined according to the corresponding relation.
The service scenario may be determined according to a service type, for example, in a banking system, corresponding service rules of a general exchange service, a periodic debit service, a periodic credit service, and the like are at least partially different.
Because the abnormal operation behavior of the operator has a great influence on enterprises or users, for example, the abnormal operation behavior of the bank operator may bring certain property loss to the enterprises or users, the business rules can be expanded according to actual requirements, so that stricter behavior constraint on the operator is realized, and the influence of the operator on the enterprises or users due to the abnormal operation of the operator is effectively avoided.
In an alternative embodiment, the business rules may include at least one of regulations of a department to which the operator belongs, a wind-controlled auditing system in a business scenario, and standard operating specifications in a business scenario.
For example, a banking system includes branches at different levels, such as a head office, branches, and branches. When each branch body implements the regulation set by the supervision department, the regulation of the branch body can be added in a personalized way, so that the specific expression forms of the regulations of different bodies have certain difference. Therefore, by setting the rules and regulations of the department to which the operating party belongs in the business rules, the targeted monitoring can be performed for different departments on the basis of uniformly monitoring the business system, and the monitoring range and the accuracy of the monitoring result are effectively expanded.
In the former case, due to the industry attribute of the bank system, an operator may have an excessive user information acquisition behavior in the process of handling corresponding services for the user. In order to avoid the above situation or other similar situations, a wind control department, an auditing department, etc. are usually set in a bank system, and a sub-control auditing system is established, so that the operation behavior of an operator is restricted based on the set wind control auditing system, and the transitional acquisition of user information is avoided.
Continuing the previous example, the bank system can also avoid the situation that the operator misses the necessary operation due to personal error, such as the authentication of the user, by setting the standard operation specifications in different business scenarios, and therefore, the operation behavior of the operator can be constrained by adding the standard operation specifications in the business rules, thereby avoiding the missing of the necessary operation.
And S230, determining whether the operation behavior belongs to the abnormal operation behavior according to the business rule.
Exemplarily, if the operation behavior meets the determined business rule, determining that the operation behavior of the operator is a normal operation behavior; and if the operation behavior does not accord with the determined business rule, determining the operation behavior of the operator as an abnormal operation behavior.
And S240, if so, generating early warning information in real time, and controlling to monitor and remind a monitor according to the abnormal level of the operation behavior.
And S250, storing the early warning information and behavior video data corresponding to the operation behaviors in an associated manner.
The method comprises the steps of refining the determination operation of abnormal operation behaviors into a service scene according to an operator, and determining a service rule; and determining whether the operation behavior is an abnormal operation behavior according to the service rules, so that the abnormal operation behavior is determined by adopting differentiated service rules according to different service scenes, the accuracy of the determination result of the abnormal operation behavior is improved, and the accuracy of the monitoring result in the event is further improved.
EXAMPLE III
On the basis of the technical schemes, the method for monitoring the traffic environment is optimized and improved.
Further, the operation of storing the early warning information and behavior video data corresponding to the operation behavior in an associated manner is refined into the operation of storing the early warning information and corresponding timestamp information to a headquarter server; and storing the behavior video data and the corresponding timestamp information to a department server of a department to which the operator belongs so as to reduce the storage resource and bandwidth influence caused by centralized data storage.
It should be noted that, for parts not described in detail in the embodiments of the present application, reference may be made to the description of the foregoing embodiments, and details are not described herein again.
Referring to fig. 3, a method of in-flight monitoring includes:
and S310, screen recording is carried out on behavior operation of an operator in the service platform, and behavior video data are obtained.
And S320, when the operation side executes the operation behavior, determining whether the operation behavior belongs to abnormal operation behavior.
And S330, if so, generating early warning information in real time, and controlling to monitor and remind a monitor according to the abnormal level of the operation behavior.
And S340, storing the early warning information and the corresponding positioning related information to a headquarter server.
It should be noted that, the early warning information corresponding to different service platforms in the service system is stored in the headquarters server in a centralized manner, so that the abnormal operation behavior of the corresponding operator of each service platform can be managed in a unified manner.
And S350, storing the behavior video data and the corresponding positioning associated information to a department server of a department to which the operation party belongs.
The number of department servers may be at least one, and the relationship between the departments and the department servers may be one-to-one or many-to-one, which is not limited in this application.
It should be noted that, in a general business system, service sites (e.g., bank addresses) of different business platforms are dispersedly configured according to a certain area, and therefore servers of different departments are also dispersedly configured according to a certain area. Generally, the distance between a department with a correspondence relationship and a part of servers is short, and the distance between a department without a correspondence relationship and a department server is long. Therefore, by storing the behavior video data nearby, the data bandwidth pressure can be reduced, and the storage efficiency is improved.
Still taking the bank system as an example, the headquarter server may be arranged in a headquarter, the department servers are arranged in each branch nearby, and the early warning information of each branch, and the like supervised by the headquarter and the headquarter is stored in the headquarter server in a centralized manner, so that the headquarter can conveniently perform centralized management, analysis, query, and the like on abnormal operation conditions in the bank system. Correspondingly, the behavior video data corresponding to the abnormal operation behaviors are dispersedly stored in the department servers corresponding to the branches, and the department servers corresponding to the branches are connected with the headquarter server through a network, so that the behavior video data does not need to be transmitted remotely on the basis of ensuring unified management, the bandwidth pressure is greatly relieved, and the limitation on the file size, the file quantity and the like in the remote transmission process is solved.
In an optional embodiment, data cleaning can be performed on the behavior video data according to a set cleaning strategy, invalid data are removed, and further, when the behavior video data are stored in a department server, storage pressure caused by redundant data is avoided, and storage requirements are reduced. The specific content of the cleaning strategy is not limited in any way, and can be set or adjusted by a skilled person according to needs or experience values, for example.
Illustratively, a set encoding mode can be adopted to encode the behavior video data, so that the network transmission bandwidth and the storage space are effectively reduced while the image quality of the behavior video data is ensured.
In a specific implementation manner, H265 coding and a difference algorithm can be adopted to process behavior video data, so that network transmission bandwidth and storage space occupation are reduced, and true color or 256 color image coding rendering is adopted, so that image quality can be guaranteed to the greatest extent.
It can be understood that time stamp information is stored in both the headquarter server and the department server, so that the associated acquisition of behavior video data corresponding to the early warning information can be performed by positioning the associated information.
Optionally, the positioning related information may include timestamp information, which is used to perform operation time positioning on the abnormal operation behavior; or optionally, the positioning related information may include an equipment identifier, which is used to perform equipment positioning on the service equipment generating the abnormal operation behavior; or optionally, the positioning related information may include an operator identifier, which is used to perform personnel positioning on an operator performing an abnormal operation behavior.
On the basis of the above technical solutions, in order to facilitate the management party to perform data management, in an optional embodiment, the early warning information of each operating party stored in the headquarters server can be processed according to the management condition corresponding to the management operation in response to the management operation of the management party, and the processing result is displayed.
Illustratively, a management interface is presented to a manager, and a management condition corresponding to a management operation is generated in response to the management operation of the manager on the management interface; processing the early warning information of each operation tool stored in the headquarter server according to the management conditions to obtain a processing result; and displaying the processing result in the management interface.
The display mode can be presented through a preset format or a custom format, and the specific display mode is not limited in any way. For example, the display mode information may be carried in the management condition, and correspondingly, the processing result may be displayed on the management interface according to the display mode information carried in the management condition.
In order to facilitate the operation of the management party, a export control can be set in the management interface, and the selected processing result is exported by triggering the export control. It is understood that, in order to avoid data leakage, management authority may be optionally assigned to each manager, so that management service is provided only to users with the management authority.
In a specific implementation manner, in response to the analysis operation of the management party, the early warning information of each operation party stored in the headquarter server is analyzed according to the analysis condition, and the analysis result is displayed, so that the analysis and management of the early warning information are realized.
In another specific implementation manner, in response to the query operation of the management party, the early warning information of each operation party stored in the headquarter server is screened according to the query condition, the screening result is displayed, and the behavior video data in the server of the display department is controlled according to the query condition, so that the screening management of the early warning information is realized.
Specifically, if the query condition includes a behavior video data viewing request, the behavior video data is acquired from the department server according to the behavior video data viewing request and the timestamp information corresponding to the early warning information, and is output.
Example four
Fig. 4 is a block diagram of an in-service monitoring apparatus according to an embodiment of the present application, where the embodiment is applied to a scenario in which an operation behavior of an operator is monitored in-service by using the in-service monitoring system shown in fig. 1A. The apparatus is implemented by software and/or hardware, and is specifically configured in an electronic device, where the electronic device may be a bearer device of any service platform in a service system, and may be a service server, for example.
Referring to fig. 4, the in-flight monitoring apparatus includes: the system comprises a behavior video data obtaining module 410, an abnormal operation behavior determining module 420, an early warning information generating module 430 and an associated storage module 440. Wherein the content of the first and second substances,
a behavior video data obtaining module 410, configured to perform screen recording on behavior operation of an operator in a service platform to obtain behavior video data;
an abnormal operation behavior determining module 420, configured to determine whether an operation behavior belongs to an abnormal operation behavior when the operation behavior is executed by the operator;
the early warning information generating module 430 is configured to generate early warning information in real time if the operation behavior is abnormal, and control to perform monitoring reminding on a monitoring party according to the abnormal level of the operation behavior;
and an association storage module 440, configured to store the early warning information in association with the behavior video data corresponding to the operation behavior.
The method comprises the steps that screen recording is carried out on behavior operation of an operator in a service platform, and behavior video data are obtained; when an operator executes an operation behavior, determining whether the operation behavior belongs to an abnormal operation behavior; if yes, generating early warning information in real time, and controlling to monitor and remind a supervisor according to the abnormal level of the operation behavior; and storing the early warning information and behavior video data corresponding to the operation behaviors in an associated manner. According to the technical scheme, the operation behavior of the operator can be monitored in the operation process of the operator executing behavior, and the monitoring timeliness is improved. Meanwhile, the early warning information and the behavior video data corresponding to the operation behaviors are stored in an associated mode, evidence can be stored under the condition that an operation party has abnormal operation behaviors, so that responsibility positioning is facilitated, and the conditions that monitoring responsibility is not clear afterwards and positioning is not accurate are effectively avoided.
In an optional embodiment, the abnormal operation behavior determination module 420 includes:
a service rule determining unit, configured to determine a service rule according to a service scenario of the operator;
and the abnormal operation behavior determining unit is used for determining whether the operation behavior belongs to the abnormal operation behavior according to the service rule.
In an optional embodiment, the business rule comprises at least one of a regulation of a department to which the operator belongs, a wind control audit regulation in the business scenario, and a standard operating specification in the business scenario.
In an optional embodiment, the warning information generating module 430 includes:
and the behavior intervention unit is used for performing behavior intervention on the operation party and generating the early warning information in real time based on the operation behavior and the intervention condition.
In an alternative embodiment, the behavioral intervention unit comprises:
the intervention level determining subunit is used for determining an intervention level according to the abnormal level of the abnormal operation behavior;
and the behavior intervention subunit is used for determining an intervention means and an intervention duration which are matched with the intervention grade, and performing behavior intervention on the operator.
In an optional embodiment, the association storage module 440 includes:
the early warning information storage unit is used for storing the early warning information and the corresponding positioning associated information to a headquarter server;
the behavior video data storage unit is used for storing the behavior video data and the corresponding positioning associated information to a department server of a department to which the operating party belongs;
wherein the positioning related information comprises at least one of timestamp information, a device identification and an operator identification.
In an optional embodiment, the apparatus further comprises:
the analysis module is used for responding to the analysis operation of the management party, analyzing the early warning information of each operation party stored in the headquarter server according to the analysis conditions and displaying the analysis result; and/or the presence of a gas in the gas,
and the query module is used for responding to query operation of a manager, screening the early warning information of each operator stored in the headquarter server according to query conditions, displaying a screening result and controlling and displaying the behavior video data in the department server according to the query conditions.
The in-flight monitoring device can execute the in-flight monitoring method provided by any embodiment of the application, and has corresponding functional modules and beneficial effects for executing the in-flight monitoring method.
EXAMPLE five
Fig. 5 is a structural diagram of an electronic device according to a fifth embodiment of the present application. FIG. 5 illustrates a block diagram of an exemplary electronic device 512 suitable for use in implementing embodiments of the present application. The electronic device 512 shown in fig. 5 is only an example and should not bring any limitation to the functions and the scope of use of the embodiments of the present application.
As shown in fig. 5, electronic device 512 is in the form of a general purpose computing device. Components of the electronic device 512 may include, but are not limited to: one or more processors or processing units 516, a system memory 528, and a bus 518 that couples the various system components including the system memory 528 and the processing unit 516.
The system memory 528 may include computer system readable media in the form of volatile memory, such as Random Access Memory (RAM)530 and/or cache memory 532. The electronic device 512 may further include other removable/non-removable, volatile/nonvolatile computer system storage media. By way of example only, storage system 534 may be used to read from and write to non-removable, nonvolatile magnetic media (not shown in FIG. 5, and commonly referred to as a "hard drive"). Although not shown in FIG. 5, a magnetic disk drive for reading from and writing to a removable, nonvolatile magnetic disk (e.g., a "floppy disk") and an optical disk drive for reading from or writing to a removable, nonvolatile optical disk (e.g., a CD-ROM, DVD-ROM, or other optical media) may be provided. In these cases, each drive may be connected to bus 518 through one or more data media interfaces. Memory 528 may include at least one program product having a set (e.g., at least one) of program modules that are configured to carry out the functions of embodiments of the application.
A program/utility 540 having a set (at least one) of program modules 542, including but not limited to an operating system, one or more application programs, other program modules, and program data, may be stored in, for example, the memory 528, each of which examples or some combination may include an implementation of a network environment. The program modules 542 generally perform the functions and/or methods of the embodiments described herein.
The electronic device 512 may also communicate with one or more external devices 514 (e.g., keyboard, pointing device, display 524, etc.), with one or more devices that enable a user to interact with the electronic device 512, and/or with any devices (e.g., network card, modem, etc.) that enable the electronic device 512 to communicate with one or more other computing devices. Such communication may occur via input/output (I/O) interfaces 522. Also, the electronic device 512 may communicate with one or more networks (e.g., a Local Area Network (LAN), a Wide Area Network (WAN), and/or a public network, such as the internet) via the network adapter 520. As shown, the network adapter 520 communicates with the other modules of the electronic device 512 via the bus 518. It should be appreciated that although not shown, other hardware and/or software modules may be used in conjunction with the electronic device 512, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems, among others.
The processing unit 516 executes various functional applications and data processing by executing at least one of other programs stored in the system memory 528, for example, to implement the in-fact monitoring method provided by the embodiment of the present application.
EXAMPLE six
An embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored, where the computer program, when executed by a processor, implements an in-flight monitoring method provided in any embodiment of the present application, and includes: performing screen recording on behavior operation of an operator in a service platform to obtain behavior video data; when the operation party executes an operation behavior, determining whether the operation behavior belongs to an abnormal operation behavior; if yes, generating early warning information in real time, and controlling to monitor and remind a supervisor according to the abnormal level of the operation behavior; and storing the early warning information and the behavior video data corresponding to the operation behavior in an associated manner.
It is to be noted that the foregoing is only illustrative of the preferred embodiments of the present application and the technical principles employed. It will be understood by those skilled in the art that the present application is not limited to the particular embodiments described herein, but is capable of various obvious changes, rearrangements and substitutions as will now become apparent to those skilled in the art without departing from the scope of the application. Therefore, although the present application has been described in more detail with reference to the above embodiments, the present application is not limited to the above embodiments, and may include other equivalent embodiments without departing from the spirit of the present application, and the scope of the present application is determined by the scope of the appended claims.
Claims (10)
1. An in-flight monitoring method, comprising:
performing screen recording on behavior operation of an operator in a service platform to obtain behavior video data;
when the operation party executes an operation behavior, determining whether the operation behavior belongs to an abnormal operation behavior;
if yes, generating early warning information in real time, and controlling to monitor and remind a supervisor according to the abnormal level of the operation behavior;
and storing the early warning information and the behavior video data corresponding to the operation behavior in an associated manner.
2. The method of claim 1, wherein the determining whether the operational behavior pertains to abnormal operational behavior comprises:
determining a business rule according to the business scene of the operator;
determining whether the operation behavior belongs to abnormal operation behavior according to the business rule;
the business rule comprises at least one of a regulation system of a department to which the operating party belongs, a wind control auditing system under the business scene and a standard operation specification under the business scene.
3. The method of claim 1, wherein the generating early warning information in real time comprises:
and performing behavior intervention on the operation party, and generating the early warning information in real time based on the operation behavior and the intervention condition.
4. The method of claim 3, wherein the performing behavioral intervention on the operator comprises:
determining an intervention level according to the abnormal level of the abnormal operation behavior;
and determining an intervention means and an intervention duration matched with the intervention grade, and performing behavior intervention on the operator.
5. The method according to any one of claims 1 to 4, wherein the storing the early warning information in association with the behavior video data corresponding to the operation behavior comprises:
storing the early warning information and the corresponding positioning associated information to a headquarter server;
storing the behavior video data and the corresponding positioning associated information to a department server of a department to which the operating party belongs;
wherein the positioning related information comprises at least one of timestamp information, a device identification and an operator identification.
6. The method of claim 5, further comprising:
responding to the analysis operation of a manager, analyzing the early warning information of each operator stored in the headquarter server according to analysis conditions, and displaying the analysis result; and/or the presence of a gas in the gas,
responding to the query operation of a manager, screening the early warning information of each operator stored in the headquarter server according to the query condition, displaying the screening result, and controlling and displaying the behavior video data in the department server according to the query condition.
7. An in-flight monitoring device, comprising:
the behavior video data obtaining module is used for carrying out screen recording on behavior operation of an operator in the service platform to obtain behavior video data;
the abnormal operation behavior determining module is used for determining whether the operation behavior belongs to the abnormal operation behavior when the operation party executes the operation behavior;
the early warning information generating module is used for generating early warning information in real time if the operation behavior is abnormal, and controlling to monitor and remind a supervisor according to the abnormal level of the operation behavior;
and the association storage module is used for associating and storing the early warning information with the behavior video data corresponding to the operation behavior.
8. An electronic device, comprising:
one or more processors;
a memory for storing one or more programs;
when executed by the one or more processors, cause the one or more processors to implement an in-flight monitoring method as claimed in any one of claims 1-6.
9. The in-business monitoring system is characterized by comprising a service system and a storage management and control system;
the business system is used for carrying out screen recording on behavior operation of an operator in the business platform to obtain behavior video data;
the business system is further used for determining whether the operation behavior belongs to an abnormal operation behavior when the operation party executes the operation behavior; if yes, generating early warning information in real time, and controlling to monitor and remind a supervisor according to the abnormal level of the operation behavior;
and the storage management and control system is used for storing the early warning information and the behavior video data corresponding to the operation behaviors in a correlation manner.
10. A computer-readable storage medium, on which a computer program is stored which, when being executed by a processor, carries out a method of event monitoring according to any one of claims 1 to 6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110863366.1A CN113596402A (en) | 2021-07-29 | 2021-07-29 | In-service monitoring method, device, equipment, system and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110863366.1A CN113596402A (en) | 2021-07-29 | 2021-07-29 | In-service monitoring method, device, equipment, system and storage medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN113596402A true CN113596402A (en) | 2021-11-02 |
Family
ID=78251772
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110863366.1A Pending CN113596402A (en) | 2021-07-29 | 2021-07-29 | In-service monitoring method, device, equipment, system and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113596402A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN116976655A (en) * | 2023-06-15 | 2023-10-31 | 四川仕虹腾飞信息技术有限公司 | Distributed banking website transaction flow supervision system and method thereof |
Citations (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108364219A (en) * | 2018-02-28 | 2018-08-03 | 深圳市买买提信息科技有限公司 | A kind of single monitoring method of record and terminal |
| CN108429632A (en) * | 2017-02-15 | 2018-08-21 | 阿里巴巴集团控股有限公司 | A kind of business monitoring method and device |
| CN108446821A (en) * | 2018-02-07 | 2018-08-24 | 中国平安人寿保险股份有限公司 | Method, apparatus, storage medium and the terminal of risk monitoring and control |
| CN108920690A (en) * | 2018-07-13 | 2018-11-30 | 北京朋创天地科技有限公司 | Visual network method for auditing safely and system |
| CN109284221A (en) * | 2018-10-31 | 2019-01-29 | 中国农业银行股份有限公司 | A kind of early warning system and method |
| CN110505497A (en) * | 2019-07-31 | 2019-11-26 | 湖南微算互联信息技术有限公司 | A kind of cloud mobile phone operational monitoring method, system, device and storage medium |
| CN110765189A (en) * | 2019-09-18 | 2020-02-07 | 苏宁云计算有限公司 | Exception management method and system for Internet products |
| CN110866820A (en) * | 2019-10-22 | 2020-03-06 | 陈华 | Real-time monitoring system, method, equipment and storage medium for banking business |
| CN111782876A (en) * | 2020-06-30 | 2020-10-16 | 杭州海康机器人技术有限公司 | Data processing method, device and system and storage medium |
| CN112333549A (en) * | 2021-01-04 | 2021-02-05 | 深圳壹账通智能科技有限公司 | Video processing method and device, electronic equipment and storage medium |
| CN112348521A (en) * | 2020-10-21 | 2021-02-09 | 上海淇玥信息技术有限公司 | Intelligent risk quality inspection method and system based on business audit and electronic equipment |
| CN113095138A (en) * | 2021-03-10 | 2021-07-09 | 深兰人工智能芯片研究院（江苏）有限公司 | Abnormal behavior identification method and related device |
-
2021
- 2021-07-29 CN CN202110863366.1A patent/CN113596402A/en active Pending
Patent Citations (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108429632A (en) * | 2017-02-15 | 2018-08-21 | 阿里巴巴集团控股有限公司 | A kind of business monitoring method and device |
| CN108446821A (en) * | 2018-02-07 | 2018-08-24 | 中国平安人寿保险股份有限公司 | Method, apparatus, storage medium and the terminal of risk monitoring and control |
| CN108364219A (en) * | 2018-02-28 | 2018-08-03 | 深圳市买买提信息科技有限公司 | A kind of single monitoring method of record and terminal |
| CN108920690A (en) * | 2018-07-13 | 2018-11-30 | 北京朋创天地科技有限公司 | Visual network method for auditing safely and system |
| CN109284221A (en) * | 2018-10-31 | 2019-01-29 | 中国农业银行股份有限公司 | A kind of early warning system and method |
| CN110505497A (en) * | 2019-07-31 | 2019-11-26 | 湖南微算互联信息技术有限公司 | A kind of cloud mobile phone operational monitoring method, system, device and storage medium |
| CN110765189A (en) * | 2019-09-18 | 2020-02-07 | 苏宁云计算有限公司 | Exception management method and system for Internet products |
| CN110866820A (en) * | 2019-10-22 | 2020-03-06 | 陈华 | Real-time monitoring system, method, equipment and storage medium for banking business |
| CN111782876A (en) * | 2020-06-30 | 2020-10-16 | 杭州海康机器人技术有限公司 | Data processing method, device and system and storage medium |
| CN112348521A (en) * | 2020-10-21 | 2021-02-09 | 上海淇玥信息技术有限公司 | Intelligent risk quality inspection method and system based on business audit and electronic equipment |
| CN112333549A (en) * | 2021-01-04 | 2021-02-05 | 深圳壹账通智能科技有限公司 | Video processing method and device, electronic equipment and storage medium |
| CN113095138A (en) * | 2021-03-10 | 2021-07-09 | 深兰人工智能芯片研究院（江苏）有限公司 | Abnormal behavior identification method and related device |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN116976655A (en) * | 2023-06-15 | 2023-10-31 | 四川仕虹腾飞信息技术有限公司 | Distributed banking website transaction flow supervision system and method thereof |
| CN116976655B (en) * | 2023-06-15 | 2024-05-24 | 四川仕虹腾飞信息技术有限公司 | Distributed banking website transaction flow supervision system and method thereof |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| JP3351318B2 (en) | Computer system monitoring method | |
| US11769010B2 (en) | Document management workflow for redacted documents | |
| CN115114305B (en) | Lock management method, device, equipment and storage medium for distributed database | |
| CN107025411A (en) | A kind of system and method for fine-grained data permission dynamic control | |
| RU2759210C1 (en) | System and method for protecting electronic documents containing confidential information from unauthorised access | |
| CN112150122A (en) | Agile network resource positioning and decision-making system | |
| CN111125284A (en) | Integrated space-time big data and geographic information public service cloud platform | |
| CN110868322A (en) | Network management method, system, device and storage medium for distributed message service | |
| CN113761552A (en) | Access control method, device, system, server and storage medium | |
| CN113596402A (en) | In-service monitoring method, device, equipment, system and storage medium | |
| CN116992411A (en) | Access right management method and equipment based on access behaviors | |
| US6751509B2 (en) | Method for access control of aggregated data | |
| CN113255000A (en) | Data access control method and device, electronic equipment and readable storage medium | |
| CN117540404A (en) | Management authority matching method, device and system | |
| CN112149112A (en) | Enterprise information security management method based on authority separation | |
| CN116910023A (en) | Data management system | |
| CN116071152A (en) | Data processing method and device, electronic equipment and storage medium | |
| CN116932324A (en) | Memory bank fault prediction method and device and electronic equipment | |
| CN115629880A (en) | Log desensitization method, device, equipment and storage medium | |
| CN115168848A (en) | Interception feedback processing method based on big data analysis interception | |
| CN114662095A (en) | Safety monitoring method, device and equipment based on operation data and storage medium | |
| CN116561718A (en) | Invisible watermark technology-based data right-determining and circulation tracing application system and method | |
| CN109697212B (en) | Data processing method and data processing device | |
| JP2018106492A (en) | Event information visualization device, program and method | |
| CN112070385A (en) | Flexible employment supervision method, device, platform, equipment and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |