CN117390000A - Resource exchange data processing method, system, computer device and storage medium - Google Patents

Resource exchange data processing method, system, computer device and storage medium Download PDF

Info

Publication number
CN117390000A
CN117390000A CN202311099742.XA CN202311099742A CN117390000A CN 117390000 A CN117390000 A CN 117390000A CN 202311099742 A CN202311099742 A CN 202311099742A CN 117390000 A CN117390000 A CN 117390000A
Authority
CN
China
Prior art keywords
interval
resource
resource exchange
record
abnormal
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202311099742.XA
Other languages
Chinese (zh)
Inventor
曹仰止
何怀莹
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Bank of China Ltd
Original Assignee
Bank of China Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Bank of China Ltd filed Critical Bank of China Ltd
Priority to CN202311099742.XA priority Critical patent/CN117390000A/en
Publication of CN117390000A publication Critical patent/CN117390000A/en
Pending legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/21Design, administration or maintenance of databases
    • G06F16/215Improving data quality; Data cleansing, e.g. de-duplication, removing invalid entries or correcting typographical errors
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/20Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
    • G06F16/24Querying
    • G06F16/245Query processing
    • G06F16/2458Special types of queries, e.g. statistical queries, fuzzy queries or distributed queries
    • G06F16/2462Approximate or statistical queries
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q40/00Finance; Insurance; Tax strategies; Processing of corporate or income taxes
    • G06Q40/04Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange

Landscapes

  • Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Databases & Information Systems (AREA)
  • Business, Economics & Management (AREA)
  • Finance (AREA)
  • Data Mining & Analysis (AREA)
  • Probability & Statistics with Applications (AREA)
  • General Engineering & Computer Science (AREA)
  • Accounting & Taxation (AREA)
  • Quality & Reliability (AREA)
  • Computational Linguistics (AREA)
  • Software Systems (AREA)
  • Mathematical Physics (AREA)
  • Fuzzy Systems (AREA)
  • Development Economics (AREA)
  • Economics (AREA)
  • Marketing (AREA)
  • Strategic Management (AREA)
  • Technology Law (AREA)
  • General Business, Economics & Management (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The application relates to a resource exchange data processing method, a system, a computer device and a storage medium. The method is applied to the financial field or other fields, and comprises the following steps: receiving at least one first resource exchange total record sent by a first platform; the first resource exchange total record comprises a plurality of first resource exchange total values corresponding to the first resource exchange records and interval resource values of the first intervals; aiming at each first resource exchange total record, acquiring a second resource exchange total record corresponding to the first resource exchange total record in a second platform; under the condition that the first resource exchange total value is inconsistent with the second resource exchange total value, comparing the interval resource value of each first interval with the interval resource value of the corresponding second interval; judging the first interval and the corresponding second interval which are inconsistent in comparison as abnormal; and determining abnormal resource exchange records according to the abnormal first interval and the abnormal second interval. By adopting the method, the efficiency of anomaly detection can be improved.

Description

Resource exchange data processing method, system, computer device and storage medium
Technical Field
The present invention relates to the field of data processing technologies, and in particular, to a method, a system, a computer device, and a storage medium for processing resource exchange data.
Background
With the development of internet technology, in order to prevent the risk of abnormal resource exchange records caused by network abnormality, malicious tampering, and the like, a financial institution generally stores the resource exchange records of each resource exchange in two different platforms, and regularly performs abnormality inspection on the resource exchange records of the two platforms, and locates the abnormal resource exchange records, thereby timely processing the abnormal resource exchange records.
In the conventional technology, an anomaly check is performed on each resource exchange record in a piece-by-piece check manner.
However, in the case where the number of resource exchange records is large, the method of performing anomaly checking on each of the resource exchange records by collation is long in time, resulting in low efficiency of anomaly checking.
Disclosure of Invention
In view of the foregoing, it is desirable to provide a resource exchange data processing method, system, computer device, computer-readable storage medium, and computer program product that can improve the efficiency of anomaly detection.
In a first aspect, the present application provides a method for processing resource exchange data. The method comprises the following steps: receiving at least one first resource exchange total record sent by a first platform; the first resource exchange total records comprise first resource exchange total values corresponding to a plurality of first resource exchange records and interval resource values of first intervals divided by the plurality of first resource exchange records; acquiring a second resource exchange total record corresponding to the first resource exchange total record in a second platform aiming at each first resource exchange total record; the second resource exchange total record comprises second resource exchange total values corresponding to a plurality of second resource exchange records and interval resource values of second intervals divided by the plurality of second resource exchange records; comparing the interval resource value of each first interval with the interval resource value of the corresponding second interval under the condition that the first resource exchange total value is inconsistent with the second resource exchange total value; judging the first interval and the corresponding second interval which are inconsistent in comparison as abnormal; and determining abnormal resource exchange records according to the abnormal first interval and the abnormal second interval.
In a second aspect, the present application also provides a resource exchange data processing system. The system comprises: the system comprises an anomaly detection platform, a first platform and a second platform; the anomaly detection platform is used for receiving at least one first resource exchange total record sent by the first platform; the first resource exchange total records comprise first resource exchange total values corresponding to a plurality of first resource exchange records and interval resource values of first intervals divided by the plurality of first resource exchange records; acquiring a second resource exchange total record corresponding to the first resource exchange total record in the second platform aiming at each first resource exchange total record; the second resource exchange total record comprises second resource exchange total values corresponding to a plurality of second resource exchange records and interval resource values of second intervals divided by the plurality of second resource exchange records; comparing the interval resource value of each first interval with the interval resource value of the corresponding second interval under the condition that the first resource exchange total value is inconsistent with the second resource exchange total value; judging the first interval and the corresponding second interval which are inconsistent in comparison as abnormal; and determining abnormal resource exchange records according to the abnormal first interval and the abnormal second interval.
In some embodiments, the anomaly detection platform is further to: dividing a second resource exchange record in the abnormal second interval into a plurality of second subintervals; counting the resource exchange values of the second resource exchange records in the second subinterval aiming at each second subinterval to obtain the subinterval resource values of the second subinterval; transmitting the subinterval resource value of each second subinterval to the first platform;
the first platform is used for dividing a plurality of first resource exchange records in a first interval corresponding to the abnormal second interval into a plurality of first subintervals, and comparing the subinterval resource value of each first subinterval with the subinterval resource value of a corresponding second subinterval so as to perform abnormal identification on the first subinterval and the second subinterval.
In some embodiments, the anomaly detection platform is further to: if the second resource exchange record in the abnormal second section is one, the second resource exchange record in the abnormal second section is determined as an abnormal resource exchange record.
In some embodiments, each of the first interval and each of the second interval corresponds to an interval number; the anomaly detection platform is also used for: comparing the interval resource value of the first interval with the interval resource value of the corresponding second interval according to the sequence from the smaller interval sequence number to the larger interval sequence number through a first comparison process; and comparing the interval resource value of the first interval with the interval resource value of the corresponding second interval according to the sequence from the big interval sequence number to the small interval sequence number through a second comparison process in parallel.
In some embodiments, the first platform is further to: acquiring a first resource exchange record of at least one resource exchange type; counting the resource values of each first resource exchange record belonging to the resource exchange type aiming at each resource exchange type to obtain a first resource exchange total value of the resource exchange type; dividing each first resource exchange record belonging to the resource exchange type to obtain a plurality of first intervals, and determining respective interval resource values of each first interval; and generating a first resource exchange total record of the resource exchange type based on the first resource exchange total value of the resource exchange type and the interval resource value of each first interval.
In some embodiments, the first platform is further to: determining the number of first resource exchange records belonging to the resource exchange type to obtain the number of records; according to the record quantity, equally dividing each first resource exchange record belonging to the resource exchange type to obtain a plurality of first intervals; and counting the resource values of each first resource exchange record in the first interval aiming at each first interval to obtain the interval resource value corresponding to the first interval.
In a third aspect, the present application also provides a computer device. The computer device comprises a memory storing a computer program and a processor implementing the steps of the resource exchange data processing method described above when the processor executes the computer program.
In a fourth aspect, the present application also provides a computer-readable storage medium. The computer readable storage medium has stored thereon a computer program which, when executed by a processor, implements the steps of the resource exchange data processing method described above.
In a fifth aspect, the present application also provides a computer program product. The computer program product comprises a computer program which, when executed by a processor, implements the steps of the resource exchange data processing method described above.
According to the resource exchange data processing method, the system, the computer equipment, the storage medium and the computer program product, as the first resource exchange total record comprises the first resource exchange total value and the interval resource values of the first intervals, the second resource exchange total record comprises the second resource exchange total value and the interval resource values of the second intervals, the second resource exchange total record corresponding to the first resource exchange total record in the second platform is obtained for each first resource exchange total record, under the condition that the first resource exchange total value is inconsistent with the second resource exchange total value, the interval resource values of the first intervals are respectively compared with the interval resource values of the corresponding second intervals, the first intervals and the corresponding second intervals which are inconsistent in comparison are judged to be abnormal, the abnormal resource exchange record is determined according to the abnormal first intervals and the second intervals, the abnormal intervals can be rapidly located through the comparison of the interval resource values, the abnormal resource exchange record is not required to be searched for in a rapid manner according to the abnormal intervals, and the detection efficiency of all abnormal resource exchange records is improved.
Drawings
FIG. 1 is a diagram of an application environment for a resource exchange data processing method in one embodiment;
FIG. 2 is a flow chart of a method for processing resource exchange data in one embodiment;
FIG. 3 is a schematic diagram of a first resource exchange summary record in one embodiment;
FIG. 4 is a flow diagram of a method for obtaining a first total record of resource exchanges in one embodiment;
FIG. 5 is a block diagram of a resource exchange data processing system in one embodiment;
FIG. 6 is an internal block diagram of a computer device in one embodiment;
fig. 7 is an internal structural diagram of a computer device in one embodiment.
Detailed Description
In order to make the objects, technical solutions and advantages of the present application more apparent, the present application will be further described in detail with reference to the accompanying drawings and examples. It should be understood that the specific embodiments described herein are for purposes of illustration only and are not intended to limit the present application.
The resource exchange data processing method provided by the embodiment of the application can be applied to an application environment shown in fig. 1. The application environment includes an anomaly detection platform 102, a first platform 104 and a second platform 106, where the anomaly detection platform 102, the first platform 104 and the second platform 106 may belong to different financial institutions, or may belong to the same financial institution, such as a bank, the anomaly detection platform 102 may be a platform used by the financial institution to perform anomaly detection, the first platform 104 may be an online service platform provided by the financial institution, and the second platform 106 may be a core accounting platform of the financial institution. The anomaly detection platform 102 communicates with the first platform 104 and the second platform 106 through a network, and the anomaly detection platform 102, the first platform 104 and the second platform 106 may be implemented by using independent servers or a server cluster formed by a plurality of servers.
Specifically, the anomaly detection platform 102 receives at least one first resource exchange total record sent by the first platform 104; the first resource exchange total record comprises first resource exchange total values corresponding to the plurality of first resource exchange records and interval resource values of a first interval divided by the plurality of first resource exchange records; for each first resource exchange total record, acquiring a second resource exchange total record corresponding to the first resource exchange total record in the second platform 106; the second resource exchange total record comprises second resource exchange total values corresponding to the plurality of second resource exchange records and interval resource values of second intervals divided by the plurality of second resource exchange records; when the first resource exchange total value is inconsistent with the second resource exchange total value, the anomaly detection platform 102 compares the interval resource value of each first interval with the interval resource value of the corresponding second interval; judging the first interval and the corresponding second interval which are inconsistent in comparison as abnormal; and determining abnormal resource exchange records according to the abnormal first interval and the abnormal second interval.
Those skilled in the art will appreciate that the application environment shown in fig. 1 is only a partial scenario related to the present application scenario, and does not constitute a limitation on the application environment of the present application scenario.
In some embodiments, as shown in fig. 2, a resource exchange data processing method is provided, which is taken as an example and applied to the anomaly detection platform 102 in fig. 1, and includes the following steps:
step 202, receiving at least one first resource exchange total record sent by a first platform; the first resource exchange total record comprises first resource exchange total values corresponding to the plurality of first resource exchange records and interval resource values of the first intervals divided by the plurality of first resource exchange records.
The first platform is any one of a plurality of online service platforms of a financial institution, a user can exchange resources through the first platform, the resource exchange can also be referred to as a transaction, for example, the financial institution can be a bank, the online service platform can be a private transaction platform of the bank, and the user can purchase financial products of the bank through the private transaction platform. The first platform may generate a plurality of first resource exchange records each day, where the first resource exchange records are used to record information about resource exchanges, where one first resource exchange record corresponds to one resource exchange, and the first resource exchange record may also be referred to as a first transaction record. The first resource exchange record includes at least one of type identification information, resource exchange time, and resource exchange value. The type identification information is used to identify the type of resource exchange to which the first resource exchange record belongs, e.g., the type identification information may include at least one of a billing agency, currency, accounting code, and product code. The resource exchange time is the time at which the resource exchange occurs, and the value of the resource exchange may also be referred to as the transaction amount.
The first resource exchange total records are generated based on the first resource exchange records, and the type identification information of each first resource exchange record corresponding to each first resource exchange total record is the same. The first resource exchange total record comprises type identification information, a first resource exchange total value, a record number and interval resource values of a plurality of first intervals. The type identification information may also identify a resource exchange type to which the first resource exchange total record belongs. The first resource exchange total value is a sum of the resource exchange values of each of the plurality of first resource exchange records. The number of records may be a number of first resource exchange records corresponding to the first resource exchange total record. The first interval is obtained by dividing a plurality of first resource exchange records, and each first interval comprises at least one first resource exchange record. The interval resource value of the first interval is the sum of the resource exchange values of the first resource exchange records in the first interval, and can also be called interval amount.
For example, as shown in fig. 3, a plurality of first resource exchange total records of the first platform are shown, and the plurality of first resource exchange total records are stored as a first accounting file in a table form, so the first resource exchange total records may also be referred to as first accounting records. The first resource exchange total value comprises a debit balance and a credit balance, the recorded quantity comprises a debit count and a credit count, the first section comprises five first sections from section 1 to section 5, and each first resource exchange total record comprises a billing mechanism, currency, an accounting code, a product code, the debit balance, the credit balance, the debit count, the credit count and section amounts respectively corresponding to section 1 to section 5. Taking the first total record of the first resource exchange in the form as an example, the billing agency is 11290, the currency is AUD, the accounting code is 1002, and the product code is 158; the sum of the resource values of 48 first resource exchange records is 103.8, and the interval amounts from interval 1 to interval 5 are respectively 50, 20, 15 and 3.8, wherein the debit balance is 103.8 and the debit number is 48.
Specifically, the first platform periodically acquires a plurality of first resource exchange records of at least one resource exchange type, and generates a first resource exchange total record corresponding to each resource exchange type. The first platform then sends at least one first resource exchange aggregate record to the anomaly detection platform. The anomaly detection platform receives at least one first resource exchange total record sent by the first platform.
In some embodiments, for each resource exchange type, the first platform may count respective resource values of each first resource exchange record belonging to the resource exchange type to obtain a first resource exchange total value; dividing each first resource exchange record belonging to the resource exchange type to obtain a plurality of first intervals, counting the resource values of the first resource exchange records in each first interval to obtain respective interval resource values of each first interval, and generating a first resource exchange total record based on the first resource exchange total value and the respective interval resource values of the plurality of first intervals.
Step 204, for each first resource exchange total record, obtaining a second resource exchange total record corresponding to the first resource exchange total record in the second platform; the second resource exchange total record comprises second resource exchange total values corresponding to the plurality of second resource exchange records and interval resource values of second intervals divided by the plurality of second resource exchange records.
The second platform is a core accounting platform of the financial institution, and the financial institution can back up and store the resource exchange records of the online service platforms through the second platform to obtain a plurality of second resource exchange records. The second resource exchange record may be understood as a record backup of the first resource exchange record. The second resource exchange total record is generated based on a plurality of second resource exchange records, and has the same format as the first resource exchange total record, and the second resource exchange total record comprises type identification information, a second resource exchange total value, a record number and interval resource values of a plurality of second intervals. The second resource exchange total value is a sum of the resource exchange values of each of the plurality of second resource exchange records. The number of records may be a number of second resource exchange records corresponding to the second resource exchange total record. The second interval is obtained by dividing a plurality of second resource exchange records, and each second interval comprises at least one second resource exchange record. The interval resource value of the second interval is the sum of the resource exchange values of the second resource exchange records in the second interval.
Specifically, the second platform stores second resource exchange records of a plurality of online service platforms, and for each online service platform, the second platform may generate at least one second resource exchange total record of the online service platform, and the specific process may refer to the process of generating the first resource exchange total record, which is not described herein. After receiving at least one first resource exchange total record sent by the first platform, the anomaly detection platform may acquire second resource exchange total records corresponding to each first resource exchange total record from the second platform, for example, may acquire second resource exchange total records consistent with type identification information in the first resource exchange total records as second resource exchange total records corresponding to the first resource exchange total records.
In some embodiments, the first platform responds to the resource exchange request sent by the user terminal, generates a first resource exchange record corresponding to the resource exchange request, and sends the first resource exchange record to the second platform. The second platform receives the first resource exchange record sent by the first platform, and stores the first resource exchange record as a corresponding second resource exchange record. In general, the first resource exchange record and the corresponding second resource exchange record are identical, but due to the problems of unstable network environment, network attack, and the like, there may be a case that a certain first resource exchange record or a certain second resource exchange record is maliciously tampered, so that the first resource exchange record and the corresponding second resource exchange record are inconsistent, and therefore, it is necessary to periodically perform anomaly checking.
In step 206, when the first resource exchange total value and the second resource exchange total value are not consistent, the interval resource values of the first intervals are compared with the interval resource values of the corresponding second intervals.
Specifically, the process of comparing the first resource exchange total record with the corresponding second resource exchange total record by the anomaly detection platform may also be referred to as reconciliation processing. The anomaly detection platform can compare the first resource exchange total value with the second resource exchange total value, and judge the first resource exchange total record and the second resource exchange total record as normal under the condition that the comparison is consistent; and when the comparison is inconsistent, comparing the section resource values of the first sections with the section resource values of the corresponding second sections.
In some embodiments, each first section and each second section respectively correspond to a section sequence number, the section sequence numbers are used to identify the arrangement sequence of the sections in the resource exchange total record, the anomaly detection platform may determine a target section from each first section according to the sequence from the smaller section sequence number to the larger section sequence number, determine the second section identical to the section sequence number of the target section as the second section corresponding to the target section, compare the section resource value of the target section with the section resource value of the corresponding second section, determine the target section backward to the first section as a new target section if the comparison is consistent, and repeat the comparison process until each first section is traversed. For example, the first section includes 5 sections, and the section numbers are 1, 2, 3, 4, and 5, respectively, and the first section with the section number 1 may be determined as a target section, the section resource value of the target section may be compared with the corresponding second section, and if the comparison is consistent, the first section with the section number 2 may be determined as a new target section.
Step 208, the first section and the corresponding second section, which are inconsistent in comparison, are determined to be abnormal.
The first section and the corresponding second section determined to be abnormal may be referred to as an abnormal section.
Specifically, when the section resource value of the first section and the section resource value of the corresponding second section are not aligned, the first section and the corresponding second section are determined to be abnormal.
Step 210, determining an abnormal resource exchange record according to the abnormal first interval and the abnormal second interval.
The abnormal resource exchange record refers to a first resource exchange record or a second resource exchange record with an abnormality, for example, the resource value of the first resource exchange record is inconsistent with the resource value of the corresponding second resource exchange record, and at least one of the resource value of the first resource exchange record or the resource value of the second resource exchange record may have an error.
Specifically, the anomaly detection platform firstly determines the number of second resource exchange records in a second section of the anomaly, and in the case that the second resource exchange record in the second section of the anomaly is one, the anomaly detection platform determines the second resource exchange record in the second section of the anomaly as an anomaly resource exchange record; when the second resource exchange records in the abnormal second section are multiple, the abnormality checking platform may divide each second resource exchange record in the abnormal second section into multiple second subsections, determine the respective subinterval resource values of each second subinterval, then send the respective subinterval resource values of each second subinterval to the first platform, and then check the abnormal second section and the corresponding first section again by the first platform until the abnormal resource exchange record is found.
In some embodiments, the first platform receives the subinterval resource values of the second subintervals, divides the plurality of first resource exchange records in the first interval corresponding to the abnormal second interval into a plurality of first subintervals, compares the subinterval resource value of each first subinterval with the subinterval resource value of the corresponding second subinterval, and determines the first subinterval and the corresponding second subinterval inconsistent in comparison as abnormal. When the number of the first resource exchange records in the first subinterval of the abnormality is multiple, the first platform can divide each first resource exchange record in the first subinterval again, then sends the divided result to the abnormality checking platform, repeats the abnormality checking process, and repeatedly performs interval division and checking until the abnormality checking platform or the first platform finds a specific abnormality resource exchange record.
In the above method for processing resource exchange data, since the first total record of resource exchange includes a first total value of resource exchange and a plurality of first interval resource values, the second total record of resource exchange includes a second total value of resource exchange and a plurality of second interval resource values, for each first total record of resource exchange, a second total record of resource exchange corresponding to the first total record of resource exchange in the second platform is obtained, when the first total value of resource exchange is inconsistent with the second total value of resource exchange, the interval resource values of each first interval are compared with the interval resource values of the corresponding second interval, the first interval and the corresponding second interval inconsistent with each other are determined to be abnormal, the abnormal resource exchange record is determined according to the abnormal first interval and the second interval, and the abnormal interval can be rapidly located by comparing the interval resource values, so that the abnormal resource exchange record can be more rapidly found according to the abnormal interval, and the efficiency of abnormality inspection is improved without comparing all the resource exchange records one by one.
In some embodiments, determining an abnormal resource exchange record from the first interval and the second interval of the abnormality comprises: dividing a second resource exchange record in the abnormal second interval into a plurality of second subintervals; counting the resource exchange values of the second resource exchange records in the second subinterval aiming at each second subinterval to obtain subinterval resource values of the second subinterval; and sending the subinterval resource values of each second subinterval to the first platform so that the first platform divides a plurality of first resource exchange records in a first interval corresponding to the abnormal second interval into a plurality of first subintervals, and comparing the subinterval resource value of each first subinterval with the subinterval resource value of the corresponding second subinterval to perform abnormal identification on the first subinterval and the second subinterval.
The second subinterval is obtained by dividing each second resource exchange record in the second interval, the first subinterval is obtained by dividing each first resource exchange record in the first interval, the subinterval resource value of the first subinterval is the sum of the resource values of each first resource exchange record in the first subinterval, and the subinterval resource value of the second subinterval is the sum of the resource values of each second resource exchange record in the second subinterval.
Specifically, the anomaly detection platform may further obtain a plurality of second resource records corresponding to the second resource total record from the second platform. When the number of the second resource exchange records in the abnormal second section is multiple, the abnormality checking platform can also determine each second resource exchange record in the abnormal second section according to the type identification information of the total second resource exchange records and the section identification of the abnormal second section, divide the second resource exchange records in the abnormal second section into multiple second subsections, and perform summation operation on the resource exchange values of the second resource exchange records in the second subsections for each second subsection to obtain subsection resource values of the second subsections.
In some embodiments, the anomaly detection platform may send the type identification information of the total record of the first resource exchange, the interval sequence number of the first interval of the anomaly, and the subinterval resource values of the second subintervals to the first platform. The first platform can determine each first resource exchange record in the abnormal first interval according to the type identification information and the interval serial number of the abnormal first interval, then divide each first resource exchange record in the abnormal first interval into a plurality of first subintervals, determine the subinterval resource value corresponding to each first resource exchange record in each first subinterval, compare the subinterval resource value of the first subinterval with the subinterval resource value of the corresponding second subinterval for each first subinterval, and judge the first subinterval and the second subinterval which are inconsistent in comparison as abnormal.
In this embodiment, the first platform identifies the first subinterval and the second subinterval by dividing the second interval of the abnormality into a plurality of second subintervals again, so that the range of searching for abnormal resource exchange records is reduced, and the abnormal resource exchange records are found faster by continuously and repeatedly dividing the intervals and comparing the values of the interval resources, thereby further improving the efficiency of abnormality inspection.
In some embodiments, the step of dividing the second resource exchange record within the abnormal second interval into a plurality of second sub-intervals is performed with the second resource exchange record within the abnormal second interval being a plurality; the resource exchange data processing method further comprises the following steps: if the second resource exchange record in the abnormal second section is one, the second resource exchange record in the abnormal second section is determined as the abnormal resource exchange record.
Specifically, in the case where the second resource exchange record in the abnormal second section is one, the abnormality checking platform may directly determine the second resource exchange record in the abnormal second section as the abnormal resource exchange record. After determining the abnormal resource exchange record, the abnormal inspection platform can generate abnormal prompt information and send the abnormal prompt information to the terminal of the financial staff so as to remind the financial staff to process the abnormal resource exchange record.
In this embodiment, when the second resource exchange record in the abnormal second section is one, the second resource exchange record in the abnormal second section can be directly determined as the abnormal resource exchange record, and it is not necessary to check all the resource exchange records, thereby improving the efficiency of abnormality detection.
In some embodiments, each first section and each second section corresponds to a section number; the comparing of the interval resource value of each first interval with the interval resource value of the corresponding second interval comprises the following steps: comparing the interval resource value of the first interval with the interval resource value of the corresponding second interval according to the sequence from the smaller interval sequence number to the larger interval sequence number through a first comparison process; and comparing the interval resource value of the first interval with the corresponding interval resource value of the second interval according to the sequence from the larger interval sequence number to the smaller interval sequence number through the second comparison process in parallel.
The first comparison process and the second comparison process are started simultaneously, but the sequence of the first comparison process and the second comparison process for comparing the intervals is opposite, the first comparison process performs comparison according to the sequence from the interval sequence number to the large sequence number, and the second comparison process performs comparison according to the sequence from the large sequence number to the small sequence number.
Specifically, for each first resource exchange total record and the corresponding second resource exchange total record, the anomaly detection platform can call two comparison processes to perform comparison according to different sequences. The first platform calls a first comparison process and a second comparison process at the same time, and the interval resource value of a first interval is compared with the interval resource value of a corresponding second interval according to the sequence from the smaller interval sequence number to the larger interval sequence number through the first comparison process; and comparing the interval resource value of the first interval with the corresponding interval resource value of the second interval according to the sequence from the larger interval sequence number to the smaller interval sequence number through the second comparison process in parallel.
For example, assuming that the first section includes a first section 1 to a first section 5 and the second section includes a second section 1 to a second section 5, the first comparison process starts checking from the first section 1 and the second section 1 while the second comparison process starts checking from the first section 5 and the second section 5, and if they are identical, the first comparison process again checks the first section 2 and the second section 2 while the second comparison process again checks the first section 4 and the second section 4 until all the first section and the second section are traversed.
In this embodiment, by calling two comparison processes to compare the section resource values of the section at the same time, the efficiency of comparing the section resource values is improved, so that the efficiency of anomaly detection is improved.
In some embodiments, as shown in fig. 4, a flow diagram of obtaining a first resource exchange total record is illustrated:
step 402, a first resource exchange record of at least one resource exchange type is obtained.
Specifically, the first platform may periodically obtain a first resource exchange record of at least one resource exchange type generated within a preset period of time. Wherein the preset time period is preset, for example, 9 am every day: 00 obtains a plurality of first resource exchange records generated in a previous day.
Step 404, counting the resource values of each first resource exchange record belonging to the resource exchange type for each resource exchange type to obtain a first resource exchange total value of the resource exchange type.
Step 406, dividing each first resource exchange record belonging to the resource exchange type to obtain a plurality of first intervals, and determining respective interval resource values of each first interval.
Specifically, the first platform may sort the first resource exchange records belonging to the same resource exchange type according to the sequence of the resource exchange time, and then divide the sorted first resource exchange records to obtain a plurality of first intervals, for example, the first intervals may be divided into a preset number of first intervals, where the preset number may be preset, for example, may be 5.
Step 408, generating a first resource exchange total record of the resource exchange type based on the first resource exchange total value of the resource exchange type and the respective interval resource values of the first intervals.
Specifically, each first resource exchange record belonging to the same resource exchange type has the same type identification information, and the first platform can combine the type identification information corresponding to the resource exchange type, the first resource exchange total value and the respective interval resource value of each first interval to obtain the first resource exchange record of the resource exchange type.
In this embodiment, a plurality of first intervals are obtained by dividing each first resource exchange record, and respective interval resource values of each first interval are determined, so that a first resource exchange total record generated based on a first resource exchange total value and respective interval resource values of each first interval includes respective interval resource values of a plurality of first intervals, and a method for performing anomaly detection according to intervals is implemented on the basis of the first resource exchange total value and the respective interval resource values of each first interval.
In some embodiments, dividing each first resource exchange record with type identification information to obtain a plurality of first intervals, and determining an interval resource value of each first interval includes: determining the number of first resource exchange records belonging to the resource exchange type to obtain the number of records; according to the number of records, equally dividing each first resource exchange record belonging to the resource exchange type to obtain a plurality of first intervals; and counting the resource values of the first resource exchange records in the first interval aiming at each first interval to obtain the interval resource value corresponding to the first interval.
Specifically, the first platform may count the number of the first resource exchange records belonging to the same resource exchange type, to obtain the number of records corresponding to each resource exchange type. For each resource exchange type, the first resource exchange records belonging to the resource exchange type can be equally divided according to the number of records, so that the number of the first resource exchange records in each first interval is as consistent as possible. For example, taking the first general ledger record in the table of fig. 3 as an example, in a preset period of time, the first platform generates 48 first resource exchange records belonging to the same resource exchange type, and orders the first resource exchange records according to the sequence of the transaction time, so that the 1 st to 10 th transactions can be classified into a section 1, the 11 th to 20 th transactions can be classified into a section 2, the 21 st to 30 th transactions can be classified into a section 3, the 31 st to 40 th transactions can be classified into a section 4, and the 40 th to 48 th transactions can be classified into a section 5. The sum of the debit balances of 10 transactions in interval 1 is 50 and the sum of the debit balances of 10 transactions in interval 2 is 20.
In this embodiment, the number of the first resource exchange records in each first interval is as consistent as possible by equally dividing each first resource exchange record belonging to the same resource exchange type according to the number of records.
It should be understood that, although the steps in the flowcharts related to the above embodiments are sequentially shown as indicated by arrows, these steps are not necessarily sequentially performed in the order indicated by the arrows. The steps are not strictly limited to the order of execution unless explicitly recited herein, and the steps may be executed in other orders. Moreover, at least some of the steps in the flowcharts described in the above embodiments may include a plurality of steps or a plurality of stages, which are not necessarily performed at the same time, but may be performed at different times, and the order of the steps or stages is not necessarily performed sequentially, but may be performed alternately or alternately with at least some of the other steps or stages.
Based on the same inventive concept, the embodiment of the application also provides a resource exchange data processing system for realizing the above-mentioned related resource exchange data processing method. The implementation of the solution provided by the system is similar to the implementation described in the above method, so the specific limitation in one or more embodiments of the resource exchange data processing system provided below may refer to the limitation of the resource exchange data processing method hereinabove, and will not be repeated herein.
In some embodiments, as shown in FIG. 5, there is provided a resource exchange data processing system comprising: anomaly inspection platform 502, first platform 504, and second platform 506, wherein:
an anomaly detection platform 502 for receiving at least one first resource exchange total record sent by a first platform 504; the first resource exchange total record comprises first resource exchange total values corresponding to the plurality of first resource exchange records and interval resource values of a first interval divided by the plurality of first resource exchange records; for each first resource exchange total record, obtaining a second resource exchange total record corresponding to the first resource exchange total record from the second platform 506; the second resource exchange total record comprises second resource exchange total values corresponding to the plurality of second resource exchange records and interval resource values of second intervals divided by the plurality of second resource exchange records; under the condition that the first resource exchange total value is inconsistent with the second resource exchange total value, comparing the interval resource value of each first interval with the interval resource value of the corresponding second interval; judging the first interval and the corresponding second interval which are inconsistent in comparison as abnormal; and determining abnormal resource exchange records according to the abnormal first interval and the abnormal second interval.
In some embodiments, anomaly inspection platform 502 is further configured to: dividing a second resource exchange record in the abnormal second interval into a plurality of second subintervals; counting the resource exchange values of the second resource exchange records in the second subinterval aiming at each second subinterval to obtain subinterval resource values of the second subinterval; transmitting the subinterval resource values of each second subinterval to the first platform 504; the first platform 504 is configured to divide a plurality of first resource exchange records in a first interval corresponding to the abnormal second interval into a plurality of first subintervals, and compare a subinterval resource value of each first subinterval with a subinterval resource value of a corresponding second subinterval, so as to identify the abnormality of the first subinterval and the second subinterval.
In some embodiments, anomaly inspection platform 502 is further configured to: if the second resource exchange record in the abnormal second section is one, the second resource exchange record in the abnormal second section is determined as the abnormal resource exchange record.
In some embodiments, each first section and each second section corresponds to a section number; anomaly inspection platform 502 is also for: comparing the interval resource value of the first interval with the interval resource value of the corresponding second interval according to the sequence from the smaller interval sequence number to the larger interval sequence number through a first comparison process; and comparing the interval resource value of the first interval with the corresponding interval resource value of the second interval according to the sequence from the larger interval sequence number to the smaller interval sequence number through the second comparison process in parallel.
In some embodiments, the first platform 504 is further configured to: acquiring a first resource exchange record of at least one resource exchange type; counting the resource values of each first resource exchange record belonging to the resource exchange type aiming at each resource exchange type to obtain a first resource exchange total value of the resource exchange type; dividing each first resource exchange record belonging to the resource exchange type to obtain a plurality of first intervals, and determining respective interval resource values of each first interval; and generating a first resource exchange total record of the resource exchange type based on the first resource exchange total value of the resource exchange type and the interval resource value of each first interval.
In some embodiments, the first platform 504 is further configured to: determining the number of first resource exchange records belonging to the resource exchange type to obtain the number of records; according to the number of records, equally dividing each first resource exchange record belonging to the resource exchange type to obtain a plurality of first intervals; and counting the resource values of the first resource exchange records in the first interval aiming at each first interval to obtain the interval resource value corresponding to the first interval.
The various modules in the resource exchange data processing system described above may be implemented in whole or in part in software, hardware, or a combination thereof. The above modules may be embedded in hardware or may be independent of a processor in the computer device, or may be stored in software in a memory in the computer device, so that the processor may call and execute operations corresponding to the above modules.
In some embodiments, a computer device is provided, which may be a server, the internal structure of which may be as shown in fig. 6. The computer device includes a processor, a memory, an Input/Output interface (I/O) and a communication interface. The processor, the memory and the input/output interface are connected through a system bus, and the communication interface is connected to the system bus through the input/output interface. Wherein the processor of the computer device is configured to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, computer programs, and a database. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage media. The database of the computer device is used for storing relevant data related to the resource exchange data processing method. The input/output interface of the computer device is used to exchange information between the processor and the external device. The communication interface of the computer device is used for communicating with an external terminal through a network connection. The computer program is executed by a processor to implement a resource exchange data processing method.
In some embodiments, a computer device is provided, which may be a terminal, and the internal structure of which may be as shown in fig. 7. The computer device includes a processor, a memory, an input/output interface, a communication interface, a display unit, and an input means. The processor, the memory and the input/output interface are connected through a system bus, and the communication interface, the display unit and the input device are connected to the system bus through the input/output interface. Wherein the processor of the computer device is configured to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage media. The input/output interface of the computer device is used to exchange information between the processor and the external device. The communication interface of the computer device is used for carrying out wired or wireless communication with an external terminal, and the wireless mode can be realized through WIFI, a mobile cellular network, NFC (near field communication) or other technologies. The computer program is executed by a processor to implement a resource exchange data processing method. The display unit of the computer device is used for forming a visual picture, and can be a display screen, a projection device or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer equipment can be a touch layer covered on the display screen, can also be a key, a track ball or a touch pad arranged on the shell of the computer equipment, and can also be an external keyboard, a touch pad or a mouse and the like.
It will be appreciated by those skilled in the art that the structures shown in fig. 6 and 7 are block diagrams of only some of the structures associated with the present application and are not intended to limit the computer device to which the present application may be applied, and that a particular computer device may include more or fewer components than shown, or may combine certain components, or have a different arrangement of components.
In some embodiments, a computer device is provided, comprising a memory having a computer program stored therein and a processor, which when executing the computer program implements the steps of the resource exchange data processing method described above.
In some embodiments, a computer readable storage medium is provided, on which a computer program is stored which, when executed by a processor, implements the steps of the resource exchange data processing method described above.
In some embodiments, a computer program product is provided comprising a computer program which, when executed by a processor, implements the steps of the resource exchange data processing method described above.
It should be noted that, the user information (including, but not limited to, user equipment information, user personal information, etc.) and the data (including, but not limited to, data for analysis, stored data, presented data, etc.) referred to in the present application are information and data authorized by the user or sufficiently authorized by each party, and the collection, use and processing of the related data are required to comply with the related laws and regulations and standards of the related countries and regions.
Those skilled in the art will appreciate that implementing all or part of the above described methods may be accomplished by way of a computer program stored on a non-transitory computer readable storage medium, which when executed, may comprise the steps of the embodiments of the methods described above. Any reference to memory, database, or other medium used in the various embodiments provided herein may include at least one of non-volatile and volatile memory. The nonvolatile Memory may include Read-Only Memory (ROM), magnetic tape, floppy disk, flash Memory, optical Memory, high density embedded nonvolatile Memory, resistive random access Memory (ReRAM), magnetic random access Memory (Magnetoresistive Random Access Memory, MRAM), ferroelectric Memory (Ferroelectric Random Access Memory, FRAM), phase change Memory (Phase Change Memory, PCM), graphene Memory, and the like. Volatile memory can include random access memory (Random Access Memory, RAM) or external cache memory, and the like. By way of illustration, and not limitation, RAM can be in the form of a variety of forms, such as static random access memory (Static Random Access Memory, SRAM) or dynamic random access memory (Dynamic Random Access Memory, DRAM), and the like. The databases referred to in the various embodiments provided herein may include at least one of relational databases and non-relational databases. The non-relational database may include, but is not limited to, a blockchain-based distributed database, and the like. The processors referred to in the embodiments provided herein may be general purpose processors, central processing units, graphics processors, digital signal processors, programmable logic units, quantum computing-based data processing logic units, etc., without being limited thereto.
The technical features of the above embodiments may be arbitrarily combined, and all possible combinations of the technical features in the above embodiments are not described for brevity of description, however, as long as there is no contradiction between the combinations of the technical features, they should be considered as the scope of the description.
The above examples only represent a few embodiments of the present application, which are described in more detail and are not to be construed as limiting the scope of the present application. It should be noted that it would be apparent to those skilled in the art that various modifications and improvements could be made without departing from the spirit of the present application, which would be within the scope of the present application. Accordingly, the scope of protection of the present application shall be subject to the appended claims.

Claims (10)

1. A method for processing resource exchange data, the method comprising:
receiving at least one first resource exchange total record sent by a first platform; the first resource exchange total records comprise first resource exchange total values corresponding to a plurality of first resource exchange records and interval resource values of first intervals divided by the plurality of first resource exchange records;
Acquiring a second resource exchange total record corresponding to the first resource exchange total record in a second platform aiming at each first resource exchange total record; the second resource exchange total record comprises second resource exchange total values corresponding to a plurality of second resource exchange records and interval resource values of second intervals divided by the plurality of second resource exchange records;
comparing the interval resource value of each first interval with the interval resource value of the corresponding second interval under the condition that the first resource exchange total value is inconsistent with the second resource exchange total value;
judging the first interval and the corresponding second interval which are inconsistent in comparison as abnormal;
and determining abnormal resource exchange records according to the abnormal first interval and the abnormal second interval.
2. The method of claim 1, wherein determining an abnormal resource exchange record from the first interval and the second interval of anomalies comprises:
dividing a second resource exchange record in the abnormal second interval into a plurality of second subintervals;
counting the resource exchange values of the second resource exchange records in the second subinterval aiming at each second subinterval to obtain the subinterval resource values of the second subinterval;
Transmitting the subinterval resource value of each second subinterval to the first platform, so that the first platform divides a plurality of first resource exchange records in a first interval corresponding to the abnormal second interval into a plurality of first subintervals, and compares the subinterval resource value of each first subinterval with the subinterval resource value of the corresponding second subinterval to perform abnormal identification on the first subinterval and the second subinterval.
3. The method of claim 2, wherein the step of dividing the second resource exchange record within the abnormal second interval into a plurality of second sub-intervals is performed if the second resource exchange record within the abnormal second interval is a plurality of;
the method further comprises the steps of:
if the second resource exchange record in the abnormal second section is one, the second resource exchange record in the abnormal second section is determined as an abnormal resource exchange record.
4. The method of claim 1, wherein each of the first intervals and each of the second intervals correspond to an interval number; the comparing the interval resource value of each first interval with the interval resource value of the corresponding second interval includes:
Comparing the interval resource value of the first interval with the interval resource value of the corresponding second interval according to the sequence from the smaller interval sequence number to the larger interval sequence number through a first comparison process;
and comparing the interval resource value of the first interval with the interval resource value of the corresponding second interval according to the sequence from the big interval sequence number to the small interval sequence number through a second comparison process in parallel.
5. The method of claim 1, wherein the step of obtaining the first resource exchange aggregate record comprises:
acquiring a first resource exchange record of at least one resource exchange type;
counting the resource values of each first resource exchange record belonging to the resource exchange type aiming at each resource exchange type to obtain a first resource exchange total value of the resource exchange type;
dividing each first resource exchange record belonging to the resource exchange type to obtain a plurality of first intervals, and determining respective interval resource values of each first interval;
and generating a first resource exchange total record of the resource exchange type based on the first resource exchange total value of the resource exchange type and the interval resource value of each first interval.
6. The method of claim 5, wherein dividing each first resource exchange record belonging to the resource exchange type to obtain a plurality of first intervals, and determining an interval resource value of each first interval comprises:
determining the number of first resource exchange records belonging to the resource exchange type to obtain the number of records;
according to the record quantity, equally dividing each first resource exchange record belonging to the resource exchange type to obtain a plurality of first intervals;
and counting the resource values of each first resource exchange record in the first interval aiming at each first interval to obtain the interval resource value corresponding to the first interval.
7. A resource exchange data processing system, the system comprising: the system comprises an anomaly detection platform, a first platform and a second platform;
the anomaly detection platform is used for receiving at least one first resource exchange total record sent by the first platform; the first resource exchange total records comprise first resource exchange total values corresponding to a plurality of first resource exchange records and interval resource values of first intervals divided by the plurality of first resource exchange records; acquiring a second resource exchange total record corresponding to the first resource exchange total record in the second platform aiming at each first resource exchange total record; the second resource exchange total record comprises second resource exchange total values corresponding to a plurality of second resource exchange records and interval resource values of second intervals divided by the plurality of second resource exchange records; comparing the interval resource value of each first interval with the interval resource value of the corresponding second interval under the condition that the first resource exchange total value is inconsistent with the second resource exchange total value; judging the first interval and the corresponding second interval which are inconsistent in comparison as abnormal; and determining abnormal resource exchange records according to the abnormal first interval and the abnormal second interval.
8. A computer device comprising a memory and a processor, the memory storing a computer program, characterized in that the processor implements the steps of the method of any of claims 1 to 6 when the computer program is executed.
9. A computer readable storage medium, on which a computer program is stored, characterized in that the computer program, when being executed by a processor, implements the steps of the method of any of claims 1 to 6.
10. A computer program product comprising a computer program, characterized in that the computer program, when being executed by a processor, implements the steps of the method of any of claims 1 to 6.
CN202311099742.XA 2023-08-29 2023-08-29 Resource exchange data processing method, system, computer device and storage medium Pending CN117390000A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202311099742.XA CN117390000A (en) 2023-08-29 2023-08-29 Resource exchange data processing method, system, computer device and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202311099742.XA CN117390000A (en) 2023-08-29 2023-08-29 Resource exchange data processing method, system, computer device and storage medium

Publications (1)

Publication Number Publication Date
CN117390000A true CN117390000A (en) 2024-01-12

Family

ID=89463792

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202311099742.XA Pending CN117390000A (en) 2023-08-29 2023-08-29 Resource exchange data processing method, system, computer device and storage medium

Country Status (1)

Country Link
CN (1) CN117390000A (en)

Similar Documents

Publication Publication Date Title
US20230019494A1 (en) Data verification method and apparatus, computer device, and computer readable storage medium
CN113312259A (en) Interface testing method and device
CN117172450A (en) Service sequence processing method, device, equipment, medium and product
CN117035980A (en) Resource borrowing evaluation method, device, computer equipment and storage medium
CN116401270A (en) Data query method, device, computer equipment and storage medium
CN117390000A (en) Resource exchange data processing method, system, computer device and storage medium
CN114490415A (en) Service testing method, computer device, storage medium, and computer program product
CN114820158A (en) Method and device for monitoring security data by bank based on rule engine
CN113902415A (en) Financial data checking method and device, computer equipment and storage medium
CN114493821B (en) Data verification and cancellation method and device, computer equipment and storage medium
CN114579462A (en) Method and device for determining test case execution information and computer equipment
CN115905692A (en) Resource borrowing evaluation data pushing method and device and computer equipment
CN116881245A (en) Service data splicing method, device, computer equipment and storage medium
CN118035095A (en) Method and device for testing business processing object, computer equipment and storage medium
CN116909844A (en) Resource interaction information early warning method and device, computer equipment and storage medium
CN116010171A (en) Resource record processing method, device, computer equipment and storage medium
CN117132283A (en) Identification method, apparatus, computer device, storage medium, and program product
CN117035762A (en) Account resource management method, device, computer equipment and storage medium
CN117439982A (en) Resource management method, device, computer equipment and storage medium
CN118260655A (en) Supervision information reporting method and device, computer equipment and storage medium
CN116862296A (en) User qualification checking method, device, computer equipment and storage medium
CN116993358A (en) Service processing method, device, computer equipment, storage medium and program product
CN117408695A (en) Information reporting method, information reporting device, computer equipment and storage medium
CN118171213A (en) Abnormality detection method, abnormality detection device, computer device, and storage medium
CN115936830A (en) Enterprise credit risk assessment method and device

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination