CN116894642A

CN116894642A - Information processing method and device, electronic equipment and computer readable storage medium

Info

Publication number: CN116894642A
Application number: CN202310892493.3A
Authority: CN
Inventors: 连城
Original assignee: Industrial and Commercial Bank of China Ltd ICBC
Current assignee: Industrial and Commercial Bank of China Ltd ICBC
Priority date: 2023-07-19
Filing date: 2023-07-19
Publication date: 2023-10-17

Abstract

The present disclosure provides an information processing method and apparatus, an electronic device, and a computer-readable storage medium, which can be applied to the fields of computer technology, big data technology, and financial technology. The information processing method comprises the following steps: in response to receiving the information processing request, acquiring operation behavior information corresponding to the service identifier to be processed according to the service identifier to be processed in the information processing request, wherein the operation behavior information comprises operation log information, operation transaction information, operation address information and operation login information which are respectively corresponding to at least one operation behavior identifier; performing association processing on the operation log information and the operation transaction information according to the operation behavior identification to obtain first association information; performing association processing on the operation address information and the operation login information according to the operation behavior identification to obtain second association information; and determining an information processing result corresponding to the service identifier to be processed according to the first association information and the second association information.

Description

Information processing method and device, electronic equipment and computer readable storage medium

Technical Field

The present disclosure relates to the fields of computer technology, big data technology, and financial technology, and more particularly, to an information processing method and apparatus, an electronic device, a computer-readable storage medium, and a computer program product.

Background

As financial institutions open a variety of online services, customers' login transactions increase, producing more and more data. The data range covered by the login transaction is gradually expanded to relevant data such as enterprise network bank, enterprise mobile phone, merchant service system and the like, so that the difficulty of information processing is increased.

In the process of implementing the disclosed concept, the inventor finds that at least the following problems exist in the related art: under the big data application scene, the traditional method usually counts the relevant detail data corresponding to the login transaction behavior in a batch processing mode, and has the problems of slower processing speed and poorer timeliness.

Disclosure of Invention

In view of this, the present disclosure provides an information processing method and apparatus, an electronic device, a computer-readable storage medium, and a computer program product.

According to an aspect of the present disclosure, there is provided an information processing method including:

in response to receiving the information processing request, according to the service identifier to be processed in the information processing request, acquiring operation behavior information corresponding to the service identifier to be processed, wherein the operation behavior information comprises operation log information, operation transaction information, operation address information and operation login information corresponding to at least one operation behavior identifier. And carrying out association processing on the operation log information and the operation transaction information according to the operation behavior identification to obtain first association information. And carrying out association processing on the operation address information and the operation login information according to the operation behavior identification to obtain second association information. And determining an information processing result corresponding to the service identifier to be processed according to the first association information and the second association information.

According to an embodiment of the present disclosure, the operation log information includes at least one first predetermined field, the operation transaction information includes at least one second predetermined field, and the first association information includes first association sub-information corresponding to each of the at least one operation behavior identification. Performing association processing on the operation log information and the operation transaction information according to the operation behavior identification, and obtaining first association information comprises: and processing the operation log information corresponding to the operation behavior identifiers according to at least one first preset field aiming at each operation behavior identifier in the at least one operation behavior identifiers to obtain information corresponding to each of the at least one first preset field. And processing the operation transaction information corresponding to the operation behavior identification according to the at least one second preset field to obtain information corresponding to each of the at least one second preset field. And determining at least one first predetermined field, information corresponding to each of the at least one first predetermined field, at least one second predetermined field, and information corresponding to each of the at least one second predetermined field as first associated sub-information corresponding to the operation behavior identification.

According to an embodiment of the present disclosure, the at least one first predetermined field includes an operation object identification field and an operation time field, and the at least one second predetermined field includes an operation channel field. Processing the operation log information corresponding to the operation behavior identification according to at least one first preset field, and obtaining the information corresponding to each of the at least one first preset field comprises the following steps: and performing field detection on the operation log information corresponding to the operation behavior identifier according to the operation object identifier field to obtain a first operation object identifier. And performing field detection on the operation log information corresponding to the operation behavior identifier according to the operation time field to obtain first operation time information. Processing the operation transaction information corresponding to the operation behavior identification according to at least one second preset field, and obtaining the information corresponding to each of the at least one second preset field comprises the following steps: and according to the operation channel field, carrying out field detection on the operation transaction information corresponding to the operation behavior identification to obtain the operation channel identification.

According to an embodiment of the present disclosure, the operation address information includes at least one third predetermined field, the operation login information includes at least one fourth predetermined field, and the second association information includes second association sub-information corresponding to each of the at least one operation behavior identification. Performing association processing on the operation address information and the operation login information according to the operation behavior identification, and obtaining second association information comprises: and processing the operation address information corresponding to the operation behavior identifiers according to at least one third preset field aiming at each operation behavior identifier in the at least one operation behavior identifier to obtain information corresponding to each of the at least one third preset field. And processing the operation login information corresponding to the operation behavior identification according to the at least one fourth preset field to obtain information corresponding to each of the at least one fourth preset field. And determining at least one third predetermined field, information corresponding to each of the at least one third predetermined field, at least one fourth predetermined field, and information corresponding to each of the at least one fourth predetermined field as second associated sub-information corresponding to the operation behavior identification.

According to an embodiment of the present disclosure, the at least one third predetermined field includes an internet device identification field and a local area network device identification field, and the at least one fourth predetermined field includes an operation object identification field and an operation time field. Processing the operation address information corresponding to the operation behavior identifier according to at least one third predetermined field, and obtaining information corresponding to each of the at least one third predetermined field comprises: and performing field detection on the operation address information corresponding to the operation behavior identifier according to the Internet equipment identifier field to obtain the Internet equipment identifier. And performing field detection on the operation address information corresponding to the operation behavior identifier according to the local area network equipment identifier field to obtain the local area network equipment identifier. According to at least one fourth predetermined field, processing the operation login information corresponding to the operation behavior identifier to obtain information corresponding to each of the at least one fourth predetermined field, wherein the information comprises: and according to the operation object identification field, performing field detection on the operation login information corresponding to the operation behavior identification to obtain a second operation object identification. And performing field detection on the operation login information corresponding to the operation behavior identifier according to the operation time field to obtain second operation time information.

According to an embodiment of the present disclosure, determining, according to first association information and second association information, an information processing result corresponding to a service identifier to be processed includes: and respectively matching the second operation object identifiers corresponding to the at least one second association sub-information according to the first operation object identifiers in the first association sub-information aiming at each first association sub-information in the at least one first association sub-information to obtain at least one candidate second association sub-information. And respectively matching the second operation time information corresponding to each of the at least one candidate second association sub-information according to the first operation time information in the first association sub-information to obtain target second association sub-information. And determining an information processing sub-result corresponding to the first associated sub-information according to the operation channel identifier in the first associated sub-information, the Internet equipment identifier and the local area network equipment identifier in the target second associated sub-information. And determining an information processing result according to the information processing sub-result corresponding to each of the at least one first associated sub-information.

According to an embodiment of the present disclosure, before the receiving the information processing request, according to the service identifier to be processed in the information processing request, the method further includes obtaining operation behavior information corresponding to the service identifier to be processed: in response to detecting an operational behavior of the object for the service, a candidate service identification and a candidate operational behavior identification corresponding to the operational behavior are determined. And storing the candidate service identification and the candidate operation behavior identification in a data lake in an associated mode. And acquiring candidate operation log information, candidate operation transaction information, candidate operation address information and candidate operation login information corresponding to the candidate operation behavior identification. And storing the candidate operation behavior identification, the candidate operation log information, the candidate operation transaction information, the candidate operation address information and the candidate operation login information in a data lake in an associated mode.

According to an embodiment of the present disclosure, the data lake includes at least one candidate business identification and at least one candidate operational behavior identification corresponding to the candidate business identification. In response to receiving the information processing request, according to the service identifier to be processed in the information processing request, acquiring the operation behavior information corresponding to the service identifier to be processed includes: and respectively matching at least one candidate service identifier in the data lake according to the service identifier to be processed in response to the received information processing request to obtain a target service identifier. And determining at least one candidate operation behavior identifier corresponding to the target service identifier as a target operation behavior identifier. And determining candidate operation log information, candidate operation transaction information, candidate operation address information and candidate operation login information corresponding to the target operation behavior identification as operation behavior information.

According to another aspect of the present disclosure, there is provided an information processing apparatus including:

the acquisition module is used for responding to the received information processing request, and acquiring operation behavior information corresponding to the service identifier to be processed according to the service identifier to be processed in the information processing request, wherein the operation behavior information comprises operation log information, operation transaction information, operation address information and operation login information corresponding to at least one operation behavior identifier. And the first association processing module is used for carrying out association processing on the operation log information and the operation transaction information according to the operation behavior identification to obtain first association information. And the second association processing module is used for carrying out association processing on the operation address information and the operation login information according to the operation behavior identification to obtain second association information. And the determining module is used for determining an information processing result corresponding to the service identifier to be processed according to the first association information and the second association information.

According to another aspect of the present disclosure, there is provided an electronic device including:

one or more processors;

a memory for storing one or more instructions,

wherein the one or more instructions, when executed by the one or more processors, cause the one or more processors to implement the method as described above.

According to another aspect of the present disclosure, there is provided a computer readable storage medium having stored thereon executable instructions which, when executed by a processor, cause the processor to implement a method as described above.

According to another aspect of the present disclosure, there is provided a computer program product comprising computer executable instructions which, when executed, are adapted to carry out the method as described above.

According to the embodiment of the disclosure, the first association information is obtained by performing association processing on the operation log information and the operation transaction information according to the operation behavior identification, and the second association information is obtained by performing association processing on the operation address information and the operation login information according to the operation behavior identification, so that association processing on the operation behavior information corresponding to the service identification to be processed is realized. On the basis, as the information processing result is determined according to the first association information and the second association information, the association processing of the operation behavior information corresponding to the service identifier to be processed can be automatically realized, so that the technical problems of slower processing speed and poorer timeliness of the traditional batch processing are at least partially overcome, the efficiency of operation behavior information processing is improved, and the accuracy of the information processing result is further improved.

Drawings

The above and other objects, features and advantages of the present disclosure will become more apparent from the following description of embodiments thereof with reference to the accompanying drawings in which:

FIG. 1 schematically illustrates a system architecture to which an information processing method may be applied, according to an embodiment of the present disclosure;

FIG. 2 schematically illustrates a flow chart of an information processing method according to an embodiment of the present disclosure;

FIG. 3A schematically illustrates an example schematic diagram of a process of processing operation log information corresponding to operation behavior identifiers according to at least one first predetermined field to obtain information corresponding to each of the at least one first predetermined field according to an embodiment of the present disclosure;

FIG. 3B schematically illustrates an example schematic diagram of a process of processing operational transaction information corresponding to operational behavior identifiers according to at least one second predetermined field to obtain information corresponding to each of the at least one second predetermined field, in accordance with an embodiment of the present disclosure;

FIG. 4A schematically illustrates an example schematic diagram of a process of processing operation address information corresponding to an operation behavior identification according to at least one third predetermined field to obtain information corresponding to each of the at least one third predetermined field according to an embodiment of the present disclosure;

FIG. 4B schematically illustrates an example schematic diagram of a process of processing operation login information corresponding to an operation behavior identifier according to at least one fourth predetermined field to obtain information corresponding to each of the at least one fourth predetermined field according to an embodiment of the present disclosure;

fig. 5 schematically shows a block diagram of an information processing apparatus according to an embodiment of the present disclosure; and

fig. 6 schematically shows a block diagram of an electronic device adapted to implement an information processing method according to an embodiment of the disclosure.

Detailed Description

Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings. It should be understood that the description is only exemplary and is not intended to limit the scope of the present disclosure. In the following detailed description, for purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding of the embodiments of the present disclosure. It may be evident, however, that one or more embodiments may be practiced without these specific details. In addition, in the following description, descriptions of well-known structures and techniques are omitted so as not to unnecessarily obscure the concepts of the present disclosure.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the disclosure. The terms "comprises," "comprising," and/or the like, as used herein, specify the presence of stated features, steps, operations, and/or components, but do not preclude the presence or addition of one or more other features, steps, operations, or components.

All terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art unless otherwise defined. It should be noted that the terms used herein should be construed to have meanings consistent with the context of the present specification and should not be construed in an idealized or overly formal manner.

Where expressions like at least one of "A, B and C, etc. are used, the expressions should generally be interpreted in accordance with the meaning as commonly understood by those skilled in the art (e.g.," a system having at least one of A, B and C "shall include, but not be limited to, a system having a alone, B alone, C alone, a and B together, a and C together, B and C together, and/or A, B, C together, etc.).

In the technical scheme of the disclosure, the acquisition, storage, application and the like of the related personal information of the user all conform to the regulations of related laws and regulations, necessary security measures are taken, and the public order harmony is not violated.

In the technical scheme of the disclosure, the authorization or consent of the user is obtained before the personal information of the user is obtained or acquired.

However, in the big data application scenario, the conventional method usually counts the relevant detail data corresponding to the login transaction behavior in a batch processing mode, so that the problems of low processing speed and poor timeliness exist.

In order to at least partially solve the technical problems existing in the related art, the present disclosure provides an information processing method, including: in response to receiving the information processing request, according to the service identifier to be processed in the information processing request, acquiring operation behavior information corresponding to the service identifier to be processed, wherein the operation behavior information comprises operation log information, operation transaction information, operation address information and operation login information corresponding to at least one operation behavior identifier. And carrying out association processing on the operation log information and the operation transaction information according to the operation behavior identification to obtain first association information. And carrying out association processing on the operation address information and the operation login information according to the operation behavior identification to obtain second association information. And determining an information processing result corresponding to the service identifier to be processed according to the first association information and the second association information.

It should be noted that the information processing method and apparatus provided by the embodiments of the present disclosure may be used in the field of computer technology and the field of big data technology. The information processing method and the information processing device provided by the embodiment of the disclosure can also be used in any field except the technical field of computers and the technical field of big data, for example, the information processing method and the information processing device are applied to the technical field of finance. The application fields of the information processing method and the information processing device provided by the embodiment of the disclosure are not limited.

Fig. 1 schematically illustrates a system architecture to which an information processing method may be applied according to an embodiment of the present disclosure. It should be noted that fig. 1 is only an example of a system architecture to which embodiments of the present disclosure may be applied to assist those skilled in the art in understanding the technical content of the present disclosure, but does not mean that embodiments of the present disclosure may not be used in other devices, systems, environments, or scenarios.

As shown in fig. 1, a system architecture 100 according to this embodiment may include a first terminal device 101, a second terminal device 102, a third terminal device 103, a network 104, and a server 105. The network 104 is a medium used to provide a communication link between the first terminal device 101, the second terminal device 102, the third terminal device 103, and the server 105. The network 104 may include various connection types, such as wired, wireless communication links, or fiber optic cables, among others.

The user may interact with the server 105 through the network 104 using at least one of the first terminal device 101, the second terminal device 102, the third terminal device 103, to receive or send messages, etc. Various communication client applications, such as a shopping class application, a web browser application, a search class application, an instant messaging tool, a mailbox client, social platform software, etc. (by way of example only) may be installed on the first terminal device 101, the second terminal device 102, and the third terminal device 103.

The first terminal device 101, the second terminal device 102, the third terminal device 103 may be various electronic devices having a display screen and supporting web browsing, including but not limited to smartphones, tablets, laptop and desktop computers, and the like.

The server 105 may be a server providing various services, such as a background management server (by way of example only) providing support for websites browsed by the user using the first terminal device 101, the second terminal device 102, and the third terminal device 103. The background management server may analyze and process the received data such as the user request, and feed back the processing result (e.g., the web page, information, or data obtained or generated according to the user request) to the terminal device.

It should be noted that, the information processing method provided by the embodiment of the present disclosure may be generally executed by the server 105. Accordingly, the information processing apparatus provided by the embodiments of the present disclosure may be generally provided in the server 105. The information processing method provided by the embodiment of the present disclosure may also be performed by a server or a server cluster that is different from the server 105 and is capable of communicating with the first terminal device 101, the second terminal device 102, the third terminal device 103, and/or the server 105. Accordingly, the information processing apparatus provided by the embodiments of the present disclosure may also be provided in a server or a server cluster that is different from the server 105 and is capable of communicating with the first terminal device 101, the second terminal device 102, the third terminal device 103, and/or the server 105.

Alternatively, the information processing method provided by the embodiment of the present disclosure may also be performed by the first terminal apparatus 101, the second terminal apparatus 102, or the third terminal apparatus 103, or may also be performed by other terminal apparatuses other than the first terminal apparatus 101, the second terminal apparatus 102, or the third terminal apparatus 103. Accordingly, the information processing apparatus provided by the embodiments of the present disclosure may also be provided in the first terminal device 101, the second terminal device 102, or the third terminal device 103, or in other terminal devices different from the first terminal device 101, the second terminal device 102, or the third terminal device 103.

It should be understood that the number of terminal devices, networks and servers in fig. 1 is merely illustrative. There may be any number of terminal devices, networks, and servers, as desired for implementation.

It should be noted that the sequence numbers of the respective operations in the following methods are merely representative of the operations for the purpose of description, and should not be construed as representing the order of execution of the respective operations. The method need not be performed in the exact order shown unless explicitly stated.

Fig. 2 schematically shows a flowchart of an information processing method according to an embodiment of the present disclosure.

As shown in fig. 2, the information processing method includes operations S210 to S240.

In operation S210, in response to receiving the information processing request, operation behavior information corresponding to the service identifier to be processed is acquired according to the service identifier to be processed in the information processing request.

In operation S220, according to the operation behavior identifier, the operation log information and the operation transaction information are subjected to association processing, so as to obtain first association information.

In operation S230, according to the operation behavior identifier, the operation address information and the operation login information are associated to obtain second association information.

In operation S240, an information processing result corresponding to the service identifier to be processed is determined according to the first association information and the second association information.

According to an embodiment of the present disclosure, the information processing request may be a request for counting relevant detail data corresponding to a user login transaction behavior. For example, the information processing request may be "A financial institution 12 month loan transaction data statistics".

According to an embodiment of the present disclosure, the operation behavior information may include operation log information, operation transaction information, operation address information, and operation login information, each corresponding to at least one operation behavior identification.

According to embodiments of the present disclosure, the service identification to be processed may be a financial institution-related service identification. The service identifier to be processed is not limited to the financial institution related service identifier, but may be a marketing service identifier, a purchasing service identifier, etc. For example, the business identifier to be processed may be "loan transaction", "sales transaction for car a", "purchase transaction for a product".

For example, the service identifier to be processed may be "loan transaction", and the operation behavior identifier corresponding to the "loan transaction" may be a login sequence number and/or a batch number of the loan transaction.

According to embodiments of the present disclosure, the operation log information may be a daily log-in information table regarding operations, such as an "enterprise network banking channel transaction audit log table".

According to embodiments of the present disclosure, the operational transaction information may be a transaction instruction table regarding operations, such as "a public application transaction instruction table".

According to an embodiment of the present disclosure, the first association information may be obtained by performing association processing on operation log information and operation information after the same user logs in the operation transaction information. The first association information is not limited to the one obtained by performing association processing according to the operation information after the same user logs in, and may be one obtained by performing association processing according to the login sequence number of the operation behavior identifier and the instruction operation time information in the operation information table.

According to embodiments of the present disclosure, the operation address information may be information such as an internet protocol address (Internet Protocol Address, IP), a media access control address (Media Access Control Address, MAC), etc. when an enterprise or an individual user performs a process service.

According to embodiments of the present disclosure, the operation login information may be login, logout, etc. information when an enterprise or an individual user performs a business transaction.

According to an embodiment of the present disclosure, the second association information may be obtained by associating an IP login time in the operation address with a service transaction login time in the operation login information. The second association information is not limited to the IP registration time in the operation address and the service transaction registration time in the operation registration information, and may be obtained by performing association processing according to the IP registration time in the operation address and the service transaction registration time in the operation registration information.

According to an embodiment of the present disclosure, the information processing result may be obtained by counting the first association relationship and the second association relationship.

For example, the first preset field may be a login user "a business" in the operation log information, the second preset field may be an "online banking transaction" in the operation transaction information, and the operation behavior identifier may be a "loan". And processing the information with the operation behavior identifier of 'loan' in the 'A enterprise' in the operation log information aiming at the operation behavior identifier of 'loan', so as to obtain the information of loan with the A enterprise. And processing the operation transaction information corresponding to the operation behavior identification loan according to the second preset field of online banking transaction to obtain loan information in online banking transaction. From the obtained "information of the a-business loan" and "loan in online banking transaction information", the first associated sub-information, i.e., "loan information of the a-business through online banking transaction", can be determined.

According to the embodiment of the disclosure, the first associated sub-information corresponding to the operation behavior identification can be determined by counting the operation behavior identification corresponding to the first predetermined field and the second predetermined field, so that the information processing speed is improved.

An information processing method 200 according to an embodiment of the present invention is further described below with reference to fig. 3A and 3B.

Fig. 3A schematically illustrates an example schematic diagram of a process of processing operation log information corresponding to operation behavior identifiers according to at least one first predetermined field to obtain information corresponding to each of the at least one first predetermined field according to an embodiment of the present disclosure.

As shown in fig. 3A, performing association processing on the operation log information and the operation transaction information according to the operation behavior identifier, and obtaining the first association information may include: according to the operation object identification field 301, field detection is performed on the operation log information 302 corresponding to the operation behavior identification, and a first operation object identification 303 is obtained. And performing field detection on the operation log information 302 corresponding to the operation behavior identifier according to the operation time field 304 to obtain first operation time information 305.

According to an embodiment of the present disclosure, the at least one first predetermined field includes an operation object identification field and an operation time field, and the at least one second predetermined field includes an operation channel field.

For example, the first preset field may be an operation object identification field, which may be a commit id, and an operation time field, which may be a commit time. Assuming that the commit id may be "1#1.30.25×2&3", the commit time may be "2022, 06, 30, 10:00". And according to the submitted id '1#1.30.25.2 & 3', performing field detection on the operation log information corresponding to the 'lending', and obtaining 'lending' information in the id '1#1.30.25.2 & 3' in the operation log information, wherein the first operation object identifier is 'submitted id1# 1.30.25.2 & 3'. According to the commit time "2022, 06, 30, 10:00", field detection is performed on the operation log information corresponding to" lending ", and 10 is obtained on the 30 th day of" 2022, 06: 00 "submitted" loan "information, wherein the first operation time information is" 2022, 06, 30, 10:00".

Fig. 3B schematically illustrates an example schematic diagram of a process of processing operation transaction information corresponding to an operation behavior identifier according to at least one second predetermined field to obtain information corresponding to each of the at least one second predetermined field according to an embodiment of the present disclosure.

As shown in fig. 3B, processing the operation transaction information corresponding to the operation behavior identifier according to at least one second predetermined field, to obtain information corresponding to each of the at least one second predetermined field includes: according to the operation channel field 306, field detection is performed on the operation transaction information 307 corresponding to the operation behavior identifier, and an operation channel identifier 308 is obtained.

For example, the operation channel field in the second predetermined field may be a channel event number. The operation behavior identification may be lending, and the channel event number may be "125& & +. And carrying out field detection on the operation transaction information corresponding to the borrowing according to the channel event number' 125 &. Wherein the operation channel identifier may be "online banking". It should be noted that, a transaction corresponds to a channel event number, the channel event number and the channel are related, and a channel corresponding to a number code of a certain number is fixed in the channel event number.

According to the embodiment of the disclosure, the operation object identification field and the operation time field are used for carrying out field detection on the operation log information, and the operation transaction information is used for carrying out field detection on the operation transaction information through the operation channel field, so that the targeted operation transaction information is obtained, and the information processing timeliness is greatly improved.

According to an embodiment of the present disclosure, the operation address information includes at least one third predetermined field, the object login information includes at least one fourth predetermined field, and the second association information includes second association sub-information corresponding to each of the at least one operation behavior identification. Performing association processing on the operation address information and the operation login information according to the operation behavior identification, and obtaining second association information comprises: and processing the operation address information corresponding to the operation behavior identifiers according to at least one third preset field aiming at each operation behavior identifier in the at least one operation behavior identifier to obtain information corresponding to each of the at least one third preset field. And processing the operation login information corresponding to the operation behavior identification according to the at least one fourth preset field to obtain information corresponding to each of the at least one fourth preset field. And determining at least one third predetermined field, information corresponding to each of the at least one third predetermined field, at least one fourth predetermined field, and information corresponding to each of the at least one fourth predetermined field as second associated sub-information corresponding to the operation behavior identification.

For example, the third preset field may be "a corporation's login IP" in the operation address information, and the fourth preset field may be "login time 10" in the operation login information: 00", the operational behavior identification may be" loan ". And processing the information with the operation behavior identifier of 'loan' in the 'A enterprise login IP' in the operation address information to obtain the information of loan with the A enterprise. According to the second preset field ' login time ', processing operation login information corresponding to the operation behavior identification ' loan ', and obtaining ' login time 10:00", loan information. From the obtained "information of the a-business loan" and "loan in online banking transaction information", the second associated sub-information, namely "a-business at login time 10: loan information of 00).

According to the embodiment of the disclosure, the second associated sub-information corresponding to the operation behavior identification can be determined by counting the operation behavior identification corresponding to the third predetermined field and the fourth predetermined field, so that the information processing speed is improved.

An information processing method 200 according to an embodiment of the present invention is further described below with reference to fig. 4A and 4B.

Fig. 4A schematically illustrates an example schematic diagram of a process of processing operation address information corresponding to an operation behavior identifier according to at least one third predetermined field to obtain information corresponding to each of the at least one third predetermined field according to an embodiment of the present disclosure.

As shown in fig. 4A, processing the operation address information corresponding to the operation behavior identifier according to at least one third predetermined field, to obtain information corresponding to each of the at least one third predetermined field includes: according to the internet equipment identification field 401, field detection is performed on the operation address information 402 corresponding to the operation behavior identification, and the internet equipment identification 403 is obtained. According to the local area network equipment identification field 404, field detection is performed on the operation address information 402 corresponding to the operation behavior identification, and a local area network equipment identification 405 is obtained.

According to an embodiment of the present disclosure, the at least one third predetermined field includes an internet device identification field and a local area network device identification field, and the at least one fourth predetermined field includes an operation object identification field and an operation time field.

For example, the third predetermined field may be an internet device identification field and a local area network device identification field. The operational behavior identification may be a "lending". The internet device identification field may be a login ip and the local area network device identification field may be a login mac. And according to the login ip, performing field detection on the operation address information corresponding to the borrowing and lending to obtain the Internet equipment identifier. And according to the login mac, performing field detection on the operation address information corresponding to the borrowing, and obtaining the equipment identifier of the local area network.

Fig. 4B schematically illustrates an example schematic diagram of a process of processing operation login information corresponding to an operation behavior identifier according to at least one fourth predetermined field to obtain information corresponding to each of the at least one fourth predetermined field according to an embodiment of the present disclosure.

As shown in fig. 4B, processing the operation login information corresponding to the operation behavior identifier according to at least one fourth predetermined field, to obtain information corresponding to each of the at least one fourth predetermined field includes: according to the operation object identification field 406, field detection is performed on the operation login information 407 corresponding to the operation behavior identification, and a second operation object identification 408 is obtained. And performing field detection on the operation login information 407 corresponding to the operation behavior identifier according to the operation time field 409 to obtain second operation time information 410.

For example, the fourth predetermined field includes an operation object identification field and an operation time field, the operation behavior identification may be lending, the operation object identification field may be commit id, and the commit id may be "1×30.25$.253". The operation time field may be a commit time, which may be "10:20". And according to the submitted id '1, 30.25, 253', performing field detection on the operation login information corresponding to the lending to obtain a second operation object identifier. Depending on the commit time can be "10: and 20', performing field detection on the operation login information corresponding to the lending to obtain second operation time information.

According to the embodiment of the disclosure, field detection is performed on the operation address information through the Internet equipment identification field and the local area network equipment identification field, and field detection is performed on the operation login information through the operation object identification field and the operation time field, so that targeted operation transaction information is obtained, and information processing timeliness is greatly improved.

For example, the first association information may be an information table composed of "loan information of a corporation through online banking transaction". The first association information comprises at least one first association sub-information. The first operation object identification may be "commit id 1.30.25$.253", and the first operation time information may be "2022 year 06 month". The second association may be "a enterprise at login time 10: loan information of 00. The second operation object identification may be "commit id 1. 30.25$.253", and the second operation time information may be "2022, 6, 10:00".

For example, according to the first operation object identifier "submit id1 $.30.25$.253" in the first association sub-information, the second operation object identifiers "submit id1 $.30.25$.253" corresponding to the at least one second association sub-information respectively are matched, so as to obtain at least one candidate second association sub-information. According to the operation channel identifier 'network bank' in the first associated sub-information and the Internet equipment identifier 'login ip' in the target second associated sub-information: # # # and lan device identification "mac:00-1$ -2 $ -3 × 4D-56", and determining an information processing sub-result corresponding to the first associated sub-information. And determining an information processing result according to the information processing sub-result corresponding to each of the at least one first associated sub-information.

According to the embodiment of the disclosure, the first associated sub-information and the second associated sub-information are obtained by matching the first associated information with the related information in the second associated information, so that the information processing result is determined through the operation channel identifier in the first associated sub-information, the Internet equipment identifier and the local area network equipment identifier in the target second associated sub-information, the information reliability is improved by utilizing the relevance among the information, and the information processing effect is improved.

According to embodiments of the present disclosure, the candidate operational behavior identification may be associated with a candidate traffic identification. For example, the candidate business identifier may be a "loan", the candidate operational behavior identifier may be "credit verification", "collection", "transaction processing", and the like.

According to embodiments of the present disclosure, a data lake may be a repository or system that stores data in a raw format.

According to the embodiment of the disclosure, the information processing efficiency can be improved by performing associated storage on the relevant candidate service identification information in the operation behaviors of the service.

For example, a request of information processing 'enterprise loan' is received, the business identifier to be processed is 'loan', and candidate business identifiers in the data lake are matched through the business identifier to be processed 'loan', so as to obtain a target business identifier 'loan'. At least one candidate operational behavior identifier corresponding to the target business identifier "loan" is determined as the target operational behavior identifier. For example, the target operational behavior identification is "cash". The candidate operation log information, the candidate operation transaction information, the candidate operation address information, and the candidate operation login information corresponding to the target operation behavior identification "collection" are determined as operation behavior information.

According to the embodiment of the disclosure, candidate service identifiers in the data lake are matched through the service identifiers to be processed, so that operation behavior information is obtained, and the accuracy of information processing can be improved.

Fig. 5 schematically shows a block diagram of an information processing apparatus according to an embodiment of the present disclosure.

As shown in fig. 5, an information processing apparatus 500 may include an acquisition module 510, a first association processing module 520, a second association processing module 530, and a determination module 540.

The obtaining module 510 is configured to obtain, in response to receiving the information processing request, operation behavior information corresponding to the service identifier to be processed according to the service identifier to be processed in the information processing request. In an embodiment, the obtaining module 510 may be configured to perform the operation S210 described above, which is not described herein.

The first association processing module 520 is configured to perform association processing on the operation log information and the operation transaction information according to the operation behavior identifier, so as to obtain first association information. In an embodiment, the first association processing module 520 may be configured to perform the operation S220 described above, which is not described herein.

And the second association processing module 530 is configured to perform association processing on the operation address information and the operation login information according to the operation behavior identifier, so as to obtain second association information. In an embodiment, the second association processing module 530 may be configured to perform the operation S230 described above, which is not described herein.

The determining module 540 is configured to determine an information processing result corresponding to the service identifier to be processed according to the first association information and the second association information. In an embodiment, the determining module 540 may be configured to perform the operation S240 described above, which is not described herein.

According to an embodiment of the present disclosure, the first association processing module 520 includes a first processing sub-module, a second processing sub-module, and a first determination sub-module. The first processing sub-module is used for processing the operation log information corresponding to the operation behavior identifiers according to at least one first preset field for each operation behavior identifier in the at least one operation behavior identifiers to obtain information corresponding to each of the at least one first preset field. And the second processing sub-module is used for processing the operation transaction information corresponding to the operation behavior identification according to at least one second preset field to obtain information corresponding to each of the at least one second preset field. The first determining sub-module is used for determining at least one first preset field, information corresponding to each of the at least one first preset field, at least one second preset field and information corresponding to each of the at least one second preset field as first associated sub-information corresponding to the operation behavior identification.

According to an embodiment of the present disclosure, the first processing sub-module includes a first field detection unit and a second field detection unit. The first field detection unit is used for carrying out field detection on the operation log information corresponding to the operation behavior identifier according to the operation object identifier field to obtain a first operation object identifier. And the second field detection unit is used for carrying out field detection on the operation log information corresponding to the operation behavior identifier according to the operation time field to obtain the first operation time information. The second processing sub-module includes a third field detection unit. The third field detection unit is used for carrying out field detection on the operation transaction information corresponding to the operation behavior identification according to the operation channel field to obtain the operation channel identification.

According to an embodiment of the present disclosure, the second association processing module 530 includes a third processing sub-module, a fourth processing sub-module, and a second determination sub-module. The third processing sub-module is used for processing the operation address information corresponding to the operation behavior identifiers according to at least one third preset field for each operation behavior identifier in the at least one operation behavior identifiers to obtain information corresponding to each of the at least one third preset field. And the fourth processing submodule is used for processing the operation login information corresponding to the operation behavior identifier according to at least one fourth preset field to obtain information corresponding to each of the at least one fourth preset field. And the second determining sub-module is used for determining at least one third preset field, information corresponding to each of the at least one third preset field, at least one fourth preset field and information corresponding to each of the at least one fourth preset field as second associated sub-information corresponding to the operation behavior identification.

According to an embodiment of the present disclosure, the third processing sub-module includes a fourth field detection unit and a fifth field detection unit. And the fourth field detection unit is used for carrying out field detection on the operation address information corresponding to the operation behavior identifier according to the Internet equipment identifier field to obtain the Internet equipment identifier. And the fifth field detection unit is used for carrying out field detection on the operation address information corresponding to the operation behavior identification according to the local area network equipment identification field to obtain the local area network equipment identification. The fourth processing sub-module includes a sixth field detection unit and a seventh field detection unit. And the sixth field detection unit is used for carrying out field detection on the operation login information corresponding to the operation behavior identifier according to the operation object identifier field to obtain a second operation object identifier. And the seventh field detection unit is used for carrying out field detection on the operation login information corresponding to the operation behavior identifier according to the operation time field to obtain second operation time information.

According to an embodiment of the present disclosure, the determining module 540 includes a first matching sub-module, a second matching sub-module, a third determining sub-module, and a fourth determining sub-module. The first matching sub-module is used for matching each first associated sub-information in the at least one first associated sub-information according to the first operation object identification in the first associated sub-information, and respectively matching the second operation object identifications corresponding to the at least one second associated sub-information to obtain at least one candidate second associated sub-information. The second matching sub-module is used for respectively matching the second operation time information corresponding to each of the at least one candidate second association sub-information according to the first operation time information in the first association sub-information to obtain target second association sub-information. And the third determining sub-module is used for determining an information processing sub-result corresponding to the first associated sub-information according to the operation channel identifier in the first associated sub-information, the Internet equipment identifier and the local area network equipment identifier in the target second associated sub-information. And the fourth determining sub-module is used for determining an information processing result according to the information processing sub-result corresponding to each of the at least one first associated sub-information.

According to an embodiment of the present disclosure, the acquisition module 510 includes a fifth determination sub-module, a first associated storage sub-module, an acquisition sub-module, and a second associated storage sub-module. And the fifth determining submodule is used for determining a candidate service identifier and a candidate operation behavior identifier corresponding to the operation behavior in response to detecting the operation behavior of the object for the service. And the first association storage sub-module is used for storing the candidate service identification and the candidate operation behavior identification in the data lake in an association manner. And the acquisition sub-module is used for acquiring the candidate operation log information, the candidate operation transaction information, the candidate operation address information and the candidate operation login information corresponding to the candidate operation behavior identification. And the second association storage sub-module is used for storing the candidate operation behavior identification, the candidate operation log information, the candidate operation transaction information, the candidate operation address information and the candidate operation login information in an association manner to the data lake.

According to an embodiment of the present disclosure, the acquisition module 510 includes an acquisition sub-module, a fourth determination sub-module, and a fifth determination sub-module. The acquisition sub-module is used for responding to the received information processing request, and respectively matching at least one candidate service identifier in the data lake according to the service identifier to be processed to obtain a target service identifier. And the fourth determining submodule is used for determining at least one candidate operation behavior identifier corresponding to the target service identifier as the target operation behavior identifier. And a fifth determining sub-module for determining candidate operation log information, candidate operation transaction information, candidate operation address information and candidate operation login information corresponding to the target operation behavior identification as operation behavior information.

Any number of modules, sub-modules, units, sub-units, or at least some of the functionality of any number of the sub-units according to embodiments of the present disclosure may be implemented in one module. Any one or more of the modules, sub-modules, units, sub-units according to embodiments of the present disclosure may be implemented as split into multiple modules. Any one or more of the modules, sub-modules, units, sub-units according to embodiments of the present disclosure may be implemented at least in part as a hardware circuit, such as a Field Programmable Gate Array (FPGA), a Programmable Logic Array (PLA), a system-on-chip, a system-on-substrate, a system-on-package, an Application Specific Integrated Circuit (ASIC), or in any other reasonable manner of hardware or firmware that integrates or encapsulates the circuit, or in any one of or a suitable combination of three of software, hardware, and firmware. Alternatively, one or more of the modules, sub-modules, units, sub-units according to embodiments of the present disclosure may be at least partially implemented as computer program modules, which when executed, may perform the corresponding functions.

For example, any of the acquisition module 510, the first association processing module 520, the second association processing module 530, and the determination module 540 may be combined in one module/unit/sub-unit, or any of the modules/units/sub-units may be split into a plurality of modules/units/sub-units. Alternatively, at least some of the functionality of one or more of these modules/units/sub-units may be combined with at least some of the functionality of other modules/units/sub-units and implemented in one module/unit/sub-unit. According to embodiments of the present disclosure, at least one of the acquisition module 510, the first association processing module 520, the second association processing module 530, and the determination module 540 may be implemented at least in part as hardware circuitry, such as a Field Programmable Gate Array (FPGA), a Programmable Logic Array (PLA), a system-on-chip, a system-on-substrate, a system-on-package, an application-specific integrated circuit (ASIC), or in hardware or firmware, such as any other reasonable manner of integrating or packaging the circuitry, or in any one of or a suitable combination of three of software, hardware, and firmware. Alternatively, at least one of the acquisition module 510, the first association processing module 520, the second association processing module 530, and the determination module 540 may be at least partially implemented as a computer program module, which when executed, may perform the respective functions.

It should be noted that, in the embodiment of the present disclosure, the information processing apparatus portion corresponds to the information processing method portion in the embodiment of the present disclosure, and the description of the information processing apparatus portion specifically refers to the information processing method portion, which is not described herein.

Fig. 6 schematically shows a block diagram of an electronic device adapted to implement an information processing method according to an embodiment of the disclosure. The electronic device shown in fig. 6 is merely an example and should not be construed to limit the functionality and scope of use of the disclosed embodiments.

As shown in fig. 6, a computer electronic device 600 according to an embodiment of the present disclosure includes a processor 601 that can perform various appropriate actions and processes according to a program stored in a Read Only Memory (ROM) 602 or a program loaded from a storage section 609 into a Random Access Memory (RAM) 603. The processor 601 may include, for example, a general purpose microprocessor (e.g., a CPU), an instruction set processor and/or an associated chipset and/or a special purpose microprocessor (e.g., an Application Specific Integrated Circuit (ASIC)), or the like. Processor 601 may also include on-board memory for caching purposes. The processor 601 may comprise a single processing unit or a plurality of processing units for performing different actions of the method flows according to embodiments of the disclosure.

In the RAM 603, various programs and data necessary for the operation of the electronic apparatus 600 are stored. The processor 601, the ROM 602, and the RAM 603 are connected to each other through a bus 604. The processor 601 performs various operations of the method flow according to the embodiments of the present disclosure by executing programs in the ROM 602 and/or the RAM 603. Note that the program may be stored in one or more memories other than the ROM 602 and the RAM 603. The processor 601 may also perform various operations of the method flow according to embodiments of the present disclosure by executing programs stored in the one or more memories.

According to an embodiment of the present disclosure, the electronic device 600 may also include an input/output (I/O) interface 605, the input/output (I/O) interface 605 also being connected to the bus 604. The electronic device 600 may also include one or more of the following components connected to an input/output (I/O) interface 605: an input portion 606 including a keyboard, mouse, etc.; an output portion 607 including a Cathode Ray Tube (CRT), a Liquid Crystal Display (LCD), and the like, a speaker, and the like; a storage section 608 including a hard disk and the like; and a communication section 609 including a network interface card such as a LAN card, a modem, or the like. The communication section 609 performs communication processing via a network such as the internet. The drive 610 is also connected to an input/output (I/O) interface 605 as needed. Removable media 611 such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, or the like is installed as needed on drive 610 so that a computer program read therefrom is installed as needed into storage section 608.

According to embodiments of the present disclosure, the method flow according to embodiments of the present disclosure may be implemented as a computer software program. For example, embodiments of the present disclosure include a computer program product comprising a computer program embodied on a computer readable storage medium, the computer program comprising program code for performing the method shown in the flowcharts. In such an embodiment, the computer program may be downloaded and installed from a network through the communication portion 609, and/or installed from the removable medium 611. The above-described functions defined in the system of the embodiments of the present disclosure are performed when the computer program is executed by the processor 601. The systems, devices, apparatus, modules, units, etc. described above may be implemented by computer program modules according to embodiments of the disclosure.

The present disclosure also provides a computer-readable storage medium that may be embodied in the apparatus/device/system described in the above embodiments; or may exist alone without being assembled into the apparatus/device/system. The computer-readable storage medium carries one or more programs which, when executed, implement methods in accordance with embodiments of the present disclosure.

According to embodiments of the present disclosure, the computer-readable storage medium may be a non-volatile computer-readable storage medium. Examples may include, but are not limited to: a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the context of this disclosure, a computer-readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device.

For example, according to embodiments of the present disclosure, the computer-readable storage medium may include ROM 602 and/or RAM 603 and/or one or more memories other than ROM 602 and RAM 603 described above.

Embodiments of the present disclosure also include a computer program product comprising a computer program comprising program code for performing the methods provided by the embodiments of the present disclosure, the program code for causing an electronic device to implement the information processing methods provided by the embodiments of the present disclosure when the computer program product is run on the electronic device.

The above-described functions defined in the system/apparatus of the embodiments of the present disclosure are performed when the computer program is executed by the processor 601. The systems, apparatus, modules, units, etc. described above may be implemented by computer program modules according to embodiments of the disclosure.

In one embodiment, the computer program may be based on a tangible storage medium such as an optical storage device, a magnetic storage device, or the like. In another embodiment, the computer program may also be transmitted, distributed in the form of signals over a network medium, and downloaded and installed via the communication section 609, and/or installed from the removable medium 611. The computer program may include program code that may be transmitted using any appropriate network medium, including but not limited to: wireless, wired, etc., or any suitable combination of the foregoing.

According to embodiments of the present disclosure, program code for performing computer programs provided by embodiments of the present disclosure may be written in any combination of one or more programming languages, and in particular, such computer programs may be implemented in high-level procedural and/or object-oriented programming languages, and/or assembly/machine languages. Programming languages include, but are not limited to, such as Java, c++, python, "C" or similar programming languages. The program code may execute entirely on the user's computing device, partly on the user's device, partly on a remote computing device, or entirely on the remote computing device or server. In the case of remote computing devices, the remote computing device may be connected to the user computing device through any kind of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or may be connected to an external computing device (e.g., connected via the Internet using an Internet service provider).

The flowcharts and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams or flowchart illustration, and combinations of blocks in the block diagrams or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions. Those skilled in the art will appreciate that the features recited in the various embodiments of the disclosure and/or in the claims may be combined in various combinations and/or combinations, even if such combinations or combinations are not explicitly recited in the disclosure. In particular, the features recited in the various embodiments of the present disclosure and/or the claims may be variously combined and/or combined without departing from the spirit and teachings of the present disclosure. All such combinations and/or combinations fall within the scope of the present disclosure.

The embodiments of the present disclosure are described above. However, these examples are for illustrative purposes only and are not intended to limit the scope of the present disclosure. Although the embodiments are described above separately, this does not mean that the measures in the embodiments cannot be used advantageously in combination. The scope of the disclosure is defined by the appended claims and equivalents thereof. Various alternatives and modifications can be made by those skilled in the art without departing from the scope of the disclosure, and such alternatives and modifications are intended to fall within the scope of the disclosure.

Claims

1. An information processing method, comprising:

in response to receiving an information processing request, acquiring operation behavior information corresponding to a to-be-processed service identifier according to the to-be-processed service identifier in the information processing request, wherein the operation behavior information comprises operation log information, operation transaction information, operation address information and operation login information which respectively correspond to at least one operation behavior identifier;

performing association processing on the operation log information and the operation transaction information according to the operation behavior identification to obtain first association information;

performing association processing on the operation address information and the operation login information according to the operation behavior identifier to obtain second association information; and

And determining an information processing result corresponding to the service identifier to be processed according to the first association information and the second association information.

2. The method of claim 1, wherein the operation log information comprises at least one first predetermined field, the operation transaction information comprises at least one second predetermined field, and the first association information comprises first association sub-information respectively corresponding to the at least one operation behavior identification;

performing association processing on the operation log information and the operation transaction information according to the operation behavior identifier, and obtaining first association information includes:

for each of the at least one operational behavior identification,

processing the operation log information corresponding to the operation behavior identification according to the at least one first preset field to obtain information corresponding to each of the at least one first preset field;

processing operation transaction information corresponding to the operation behavior identification according to the at least one second preset field to obtain information corresponding to each of the at least one second preset field; and

and determining the at least one first preset field, the information corresponding to each of the at least one first preset field, the at least one second preset field and the information corresponding to each of the at least one second preset field as the first associated sub-information corresponding to the operation behavior identification.

3. The method of claim 2, wherein the at least one first predetermined field comprises an operation object identification field and an operation time field, and the at least one second predetermined field comprises an operation channel field;

the processing the operation log information corresponding to the operation behavior identifier according to the at least one first predetermined field to obtain information corresponding to each of the at least one first predetermined field includes:

according to the operation object identification field, performing field detection on operation log information corresponding to the operation behavior identification to obtain a first operation object identification; and

performing field detection on the operation log information corresponding to the operation behavior identifier according to the operation time field to obtain first operation time information;

the processing the operation transaction information corresponding to the operation behavior identifier according to the at least one second predetermined field, and obtaining the information corresponding to each of the at least one second predetermined field includes:

and according to the operation channel field, performing field detection on the operation transaction information corresponding to the operation behavior identification to obtain the operation channel identification.

4. The method of claim 1, wherein the operation address information includes at least one third predetermined field, the operation login information includes at least one fourth predetermined field, and the second association information includes second association sub-information corresponding to each of the at least one operation behavior identification;

performing association processing on the operation address information and the operation login information according to the operation behavior identifier to obtain second association information, wherein the second association information comprises:

for each of the at least one operational behavior identification,

processing the operation address information corresponding to the operation behavior identifier according to the at least one third preset field to obtain information corresponding to each of the at least one third preset field;

processing the operation login information corresponding to the operation behavior identifier according to the at least one fourth preset field to obtain information corresponding to each of the at least one fourth preset field; and

and determining the at least one third predetermined field, the information corresponding to each of the at least one third predetermined field, the at least one fourth predetermined field and the information corresponding to each of the at least one fourth predetermined field as the second associated sub-information corresponding to the operation behavior identification.

5. The method of claim 4, wherein the at least one third predetermined field comprises an internet device identification field and a local area network device identification field, and the at least one fourth predetermined field comprises an operation object identification field and an operation time field;

the processing the operation address information corresponding to the operation behavior identifier according to the at least one third predetermined field, and obtaining the information corresponding to each of the at least one third predetermined field includes:

performing field detection on the operation address information corresponding to the operation behavior identification according to the Internet equipment identification field to obtain an Internet equipment identification; and

according to the local area network equipment identification field, performing field detection on the operation address information corresponding to the operation behavior identification to obtain a local area network equipment identification;

the processing the operation login information corresponding to the operation behavior identifier according to the at least one fourth predetermined field to obtain information corresponding to each of the at least one fourth predetermined field includes:

according to the operation object identification field, performing field detection on operation login information corresponding to the operation behavior identification to obtain a second operation object identification; and

And performing field detection on the operation login information corresponding to the operation behavior identifier according to the operation time field to obtain second operation time information.

6. The method according to any one of claims 1 to 5, wherein the determining, according to the first association information and the second association information, an information processing result corresponding to the service identifier to be processed includes:

for each of the at least one first associated sub-information,

respectively matching second operation object identifiers corresponding to the at least one second association sub-information according to the first operation object identifiers in the first association sub-information to obtain at least one candidate second association sub-information;

respectively matching the second operation time information corresponding to each of the at least one candidate second association sub-information according to the first operation time information in the first association sub-information to obtain target second association sub-information;

determining an information processing sub-result corresponding to the first associated sub-information according to the operation channel identifier in the first associated sub-information, the Internet equipment identifier and the local area network equipment identifier in the target second associated sub-information; and

And determining the information processing result according to the information processing sub-result corresponding to each of the at least one first associated sub-information.

7. The method of any of claims 1 to 5, further comprising, prior to the obtaining, in response to receiving an information processing request, operational behavior information corresponding to a pending service identification in the information processing request from the pending service identification:

in response to detecting an operation behavior of an object for a service, determining a candidate service identifier and a candidate operation behavior identifier corresponding to the operation behavior;

the candidate service identification and the candidate operation behavior identification are stored in a data lake in an associated mode;

acquiring candidate operation log information, candidate operation transaction information, candidate operation address information and candidate operation login information corresponding to the candidate operation behavior identification; and

and storing the candidate operation behavior identification, the candidate operation log information, the candidate operation transaction information, the candidate operation address information and the candidate operation login information in a relevant mode to the data lake.

8. The method of claim 7, wherein the data lake comprises at least one of the candidate business identifications and at least one of the candidate operational behavior identifications corresponding to the candidate business identifications;

The responding to the received information processing request, according to the service identifier to be processed in the information processing request, the obtaining operation behavior information corresponding to the service identifier to be processed comprises the following steps:

respectively matching the at least one candidate service identifier in the data lake according to the service identifier to be processed in response to the information processing request to obtain a target service identifier;

determining the at least one candidate operation behavior identifier corresponding to the target service identifier as a target operation behavior identifier; and

and determining the candidate operation log information, the candidate operation transaction information, the candidate operation address information and the candidate operation login information corresponding to the target operation behavior identification as the operation behavior information.

9. An information processing apparatus comprising:

the information processing module is used for receiving an information processing request, and acquiring operation behavior information corresponding to the service identifier to be processed according to the service identifier to be processed in the information processing request, wherein the operation behavior information comprises operation log information, operation transaction information, operation address information and operation login information corresponding to at least one operation behavior identifier;

The first association processing module is used for carrying out association processing on the operation log information and the operation transaction information according to the operation behavior identification to obtain first association information;

the second association processing module is used for carrying out association processing on the operation address information and the operation login information according to the operation behavior identification to obtain second association information; and

and the determining module is used for determining an information processing result corresponding to the service identifier to be processed according to the first association information and the second association information.

10. An electronic device, comprising:

one or more processors;

a memory for storing one or more instructions,

wherein the one or more instructions, when executed by the one or more processors, cause the one or more processors to implement the method of any of claims 1 to 8.

11. A computer readable storage medium having stored thereon executable instructions which when executed by a processor cause the processor to implement the method of any of claims 1 to 8.

12. A computer program product comprising computer executable instructions for implementing the method of any one of claims 1 to 8 when executed.