SG11201900533RA - Method and device for controlling service operation risk - Google Patents

Method and device for controlling service operation risk

Info

Publication number
SG11201900533RA
SG11201900533RA SG11201900533RA SG11201900533RA SG11201900533RA SG 11201900533R A SG11201900533R A SG 11201900533RA SG 11201900533R A SG11201900533R A SG 11201900533RA SG 11201900533R A SG11201900533R A SG 11201900533RA SG 11201900533R A SG11201900533R A SG 11201900533RA
Authority
SG
Singapore
Prior art keywords
service
service operation
user
offline
offline service
Prior art date
Application number
SG11201900533RA
Other languages
English (en)
Inventor
Jupeng Xia
Caiwei Li
Xi Gu
Bao Jiang
Original Assignee
Alibaba Group Holding Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Alibaba Group Holding Ltd filed Critical Alibaba Group Holding Ltd
Publication of SG11201900533RA publication Critical patent/SG11201900533RA/en

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/316—User authentication by observing the pattern of computer usage, e.g. typical user behaviour
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G06Q20/4016—Transaction verification involving fraud or risk level assessment in transaction processing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G06Q20/4014—Identity check for transactions
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40—Network security protocols
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G06F21/6245—Protecting personal data, e.g. for financial or medical purposes

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Accounting & Taxation (AREA)
  • Software Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Finance (AREA)
  • General Business, Economics & Management (AREA)
  • Strategic Management (AREA)
  • Health & Medical Sciences (AREA)
  • Social Psychology (AREA)
  • General Health & Medical Sciences (AREA)
  • Power Engineering (AREA)
  • Computing Systems (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Debugging And Monitoring (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
  • Stored Programmes (AREA)
SG11201900533RA 2016-07-22 2017-07-14 Method and device for controlling service operation risk SG11201900533RA (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201610587509.XA CN107645482B (zh) 2016-07-22 2016-07-22 一种针对业务操作的风险控制方法及装置
PCT/CN2017/092942 WO2018014789A1 (fr) 2016-07-22 2017-07-14 Procédé et dispositif de limitation du risque d'une opération de service

Publications (1)

Publication Number Publication Date
SG11201900533RA true SG11201900533RA (en) 2019-02-27

Family

ID=60991960

Family Applications (1)

Application Number Title Priority Date Filing Date
SG11201900533RA SG11201900533RA (en) 2016-07-22 2017-07-14 Method and device for controlling service operation risk

Country Status (8)

Country Link
US (3) US20190156342A1 (fr)
EP (1) EP3490215B1 (fr)
JP (1) JP6783923B2 (fr)
KR (1) KR102220083B1 (fr)
CN (1) CN107645482B (fr)
SG (1) SG11201900533RA (fr)
TW (1) TWI699720B (fr)
WO (1) WO2018014789A1 (fr)

Families Citing this family (41)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110120964B (zh) * 2018-02-07 2022-07-08 北京三快在线科技有限公司 用户行为监控方法和装置以及计算设备
CN108446821A (zh) * 2018-02-07 2018-08-24 中国平安人寿保险股份有限公司 风险监控的方法、装置、存储介质及终端
CN108615158B (zh) * 2018-03-22 2022-09-30 平安科技（深圳）有限公司 风险检测方法、装置、移动终端和存储介质
CN110300062B (zh) * 2018-03-23 2023-05-30 阿里巴巴集团控股有限公司 风控实现方法和系统
CN110533269B (zh) * 2018-05-23 2023-05-16 阿里巴巴集团控股有限公司 业务风险防控方法及装置
CN108875388A (zh) * 2018-05-31 2018-11-23 康键信息技术（深圳）有限公司 实时风险控制方法、装置及计算机可读存储介质
CN109002958A (zh) * 2018-06-06 2018-12-14 阿里巴巴集团控股有限公司 一种风险识别的方法、系统、装置及设备
CN109165940B (zh) * 2018-06-28 2022-08-09 创新先进技术有限公司 一种防盗方法、装置及电子设备
CN108985072A (zh) 2018-07-16 2018-12-11 北京百度网讯科技有限公司 操作防御方法、装置、设备及计算机可读介质
CN110798432A (zh) * 2018-08-03 2020-02-14 京东数字科技控股有限公司 安全认证方法、装置和系统，移动终端
CN109359972B (zh) * 2018-08-15 2020-10-30 创新先进技术有限公司 核身产品推送及核身方法和系统
CN108876600B (zh) * 2018-08-20 2023-09-05 平安科技（深圳）有限公司 预警信息推送方法、装置、计算机设备和介质
CN109344583B (zh) * 2018-08-22 2020-10-23 创新先进技术有限公司 阈值确定及核身方法、装置、电子设备及存储介质
CN109377390A (zh) * 2018-09-20 2019-02-22 阿里巴巴集团控股有限公司 养老风险评估方法及装置
CN109471782A (zh) * 2018-11-20 2019-03-15 北京芯盾时代科技有限公司 一种风险检测系统以及风险检测方法
CN109327473B (zh) * 2018-12-03 2021-10-01 北京工业大学 一种基于区块链技术的身份认证系统
CN109859030A (zh) * 2019-01-16 2019-06-07 深圳壹账通智能科技有限公司 基于用户行为的风险评估方法、装置、存储介质和服务器
CN111490964B (zh) * 2019-01-28 2023-09-05 北京京东尚科信息技术有限公司 安全认证方法、装置及终端
JP7234699B2 (ja) * 2019-03-05 2023-03-08 ブラザー工業株式会社 アプリケーションプログラムおよび情報処理装置
JP7215234B2 (ja) 2019-03-05 2023-01-31 ブラザー工業株式会社 アプリケーションプログラムおよび情報処理装置
CN110263530B (zh) * 2019-05-30 2023-12-08 创新先进技术有限公司 密码重置请求的鉴别方法与装置
CN110427971A (zh) * 2019-07-05 2019-11-08 五八有限公司 用户及ip的识别方法、装置、服务器和存储介质
CN112418259B (zh) * 2019-08-22 2023-05-26 上海哔哩哔哩科技有限公司 一种基于直播过程中用户行为的实时规则的配置方法、计算机设备及可读存储介质
CN110633915A (zh) * 2019-09-24 2019-12-31 北京明略软件系统有限公司 一种高危场所识别方法及装置
CN110647738B (zh) * 2019-09-29 2021-09-03 武汉极意网络科技有限公司 业务风控适配方法、装置、设备及存储介质
CN111047423A (zh) * 2019-11-01 2020-04-21 支付宝(杭州)信息技术有限公司 一种风险确定方法、装置及电子设备
CN111786936A (zh) * 2019-11-27 2020-10-16 北京沃东天骏信息技术有限公司 用于鉴权的方法和装置
CN111400168B (zh) * 2020-02-21 2023-10-20 中国平安财产保险股份有限公司 智能软件风控方法、电子装置及计算机可读存储介质
US11914719B1 (en) 2020-04-15 2024-02-27 Wells Fargo Bank, N.A. Systems and methods for cyberthreat-risk education and awareness
CN111581061A (zh) * 2020-05-15 2020-08-25 海信集团有限公司 服务下线方法、装置及设备
CN111639318A (zh) * 2020-05-26 2020-09-08 深圳壹账通智能科技有限公司 移动终端上基于手势监测的风控方法及相关装置
CN112232811B (zh) * 2020-10-12 2023-10-24 中钞信用卡产业发展有限公司 一种降低离线支付风险的方法和系统
CN113162912A (zh) * 2021-03-12 2021-07-23 中航智能建设(深圳)有限公司 基于大数据的网络安全保护方法、系统及存储设备
CN112966243B (zh) * 2021-03-30 2022-09-09 支付宝(杭州)信息技术有限公司 保护隐私的核身校验处理方法及装置
CN112948824B (zh) * 2021-03-31 2022-04-26 支付宝(杭州)信息技术有限公司 一种基于隐私保护的程序通信方法、装置及设备
CN113409051B (zh) * 2021-05-20 2022-05-24 支付宝(杭州)信息技术有限公司 针对目标业务的风险识别方法及装置
CN114971116B (zh) * 2021-05-24 2023-08-18 中移互联网有限公司 一种追踪风险终端的方法和装置
CN113627208B (zh) * 2021-08-17 2024-04-05 上海源慧信息科技股份有限公司 一种扫码登陆预警方法、装置、计算机设备和存储介质
CN114615034B (zh) * 2022-03-01 2023-09-29 中铁第四勘察设计院集团有限公司 业务传输的控制方法、装置、处理设备及存储介质
CN116232720B (zh) * 2023-03-02 2024-01-16 国网河南省电力公司信息通信分公司 一种api接口加密认证方法及存储装置
CN116881956B (zh) * 2023-09-08 2024-01-09 国网信息通信产业集团有限公司 一种面向多云资源管理的权限管理方法及装置

Family Cites Families (26)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20020086695A (ko) * 2000-03-24 2002-11-18 알티코 인크. 부정 트랜잭션을 검출하기 위한 시스템 및 방법
JP2004030176A (ja) * 2002-06-25 2004-01-29 Nec Infrontia Corp 指紋決済システム、方法及びプログラム
WO2004066159A1 (fr) * 2003-01-20 2004-08-05 Fujitsu Limited Procede de traitement de donnees d'authentification
JP2004240645A (ja) * 2003-02-05 2004-08-26 Ufj Bank Ltd 本人認証システム及び本人認証の方法
US7908645B2 (en) * 2005-04-29 2011-03-15 Oracle International Corporation System and method for fraud monitoring, detection, and tiered user authentication
JP4820593B2 (ja) * 2005-07-11 2011-11-24 株式会社みずほ銀行 本人認証方法及び本人認証システム
US20120204257A1 (en) * 2006-04-10 2012-08-09 International Business Machines Corporation Detecting fraud using touchscreen interaction behavior
US8739278B2 (en) * 2006-04-28 2014-05-27 Oracle International Corporation Techniques for fraud monitoring and detection using application fingerprinting
US20090164373A1 (en) * 2007-12-21 2009-06-25 Mastercard International, Inc. System and Method of Preventing Password Theft
US8595834B2 (en) * 2008-02-04 2013-11-26 Samsung Electronics Co., Ltd Detecting unauthorized use of computing devices based on behavioral patterns
JP5084712B2 (ja) * 2008-12-24 2012-11-28 日立オムロンターミナルソリューションズ株式会社 利用者認証端末、認証システム、利用者認証方法、および利用者認証プログラム
US8590021B2 (en) * 2009-01-23 2013-11-19 Microsoft Corporation Passive security enforcement
US9824199B2 (en) * 2011-08-25 2017-11-21 T-Mobile Usa, Inc. Multi-factor profile and security fingerprint analysis
WO2013082190A1 (fr) * 2011-11-28 2013-06-06 Visa International Service Association Appareils, procédés et systèmes d'adaptation graduée de sécurité de transaction et de transfert de risque
US20130304677A1 (en) * 2012-05-14 2013-11-14 Qualcomm Incorporated Architecture for Client-Cloud Behavior Analyzer
CN103279883B (zh) * 2013-05-02 2016-06-08 上海携程商务有限公司 电子支付交易风险控制方法及系统
CN103745397A (zh) * 2014-01-27 2014-04-23 上海坤士合生信息科技有限公司 基于位置场景识别实现电子交易风险控制的系统及方法
US9684787B2 (en) * 2014-04-08 2017-06-20 Qualcomm Incorporated Method and system for inferring application states by performing behavioral analysis operations in a mobile device
WO2015179637A1 (fr) * 2014-05-21 2015-11-26 Visa International Service Association Authentification hors ligne
CN104318138B (zh) * 2014-09-30 2018-05-08 杭州同盾科技有限公司 一种验证用户身份的方法和装置
CN105592014B (zh) * 2014-10-24 2019-02-15 阿里巴巴集团控股有限公司 一种可信终端验证方法、装置
CN104794616A (zh) * 2015-05-11 2015-07-22 易联支付有限公司 一种手机支付安全验证方法
CN105279405B (zh) * 2015-10-28 2018-06-26 同济大学 触屏用户按键行为模式构建与分析系统及其身份识别方法
CN106878236A (zh) * 2015-12-11 2017-06-20 阿里巴巴集团控股有限公司 一种用户请求处理方法和设备
CN105512938A (zh) * 2016-02-03 2016-04-20 宜人恒业科技发展（北京）有限公司 一种基于用户长期使用行为的在线信用风险评估方法
EP3208759B1 (fr) * 2016-02-18 2020-01-29 AO Kaspersky Lab Système et procédé de détection de transactions d'utilisateurs frauduleux

Also Published As

Publication number Publication date
EP3490215A4 (fr) 2019-07-31
JP2019521455A (ja) 2019-07-25
US20190156342A1 (en) 2019-05-23
KR102220083B1 (ko) 2021-03-02
EP3490215A1 (fr) 2019-05-29
CN107645482A (zh) 2018-01-30
JP6783923B2 (ja) 2020-11-11
TW201804397A (zh) 2018-02-01
US20200134630A1 (en) 2020-04-30
TWI699720B (zh) 2020-07-21
EP3490215B1 (fr) 2021-09-22
WO2018014789A1 (fr) 2018-01-25
CN107645482B (zh) 2020-08-07
US20200242614A1 (en) 2020-07-30
KR20190031545A (ko) 2019-03-26

Similar Documents

Publication Publication Date Title
SG11201900533RA (en) Method and device for controlling service operation risk
MX2018000954A (es) Metodos y sistemas para generar automaticamente una accion correctiva en una instalacion industrial.
SG11201803693VA (en) Information processing network based on uniform code issuance, method therefor, and sensing access device
SG10201900964QA (en) Cloud-based transactions methods and systems
WO2016019060A3 (fr) Génération et changement automatisés de mot de passe
WO2016196435A3 (fr) Techniques de segmentation de modèles utilisateur d'apprentissage pour suggérer des applications en réponse à un événement sur un dispositif
SG10201610585WA (en) Passsword management system and process
WO2016040204A3 (fr) Préservation de la protection de données avec une politique
WO2014151157A3 (fr) Traitement de requête sécurisée sur des données cryptées
WO2016036752A3 (fr) Systèmes et procédés permettant de créer et de modifier des listes de contrôle d'accès
SG10201903580QA (en) Method and device for verifying a trusted terminal
WO2014209894A3 (fr) Systèmes et procédés permettant de conserver un contenu d'entreprise
MY184710A (en) System and method for information security threat disruption via a border gateway
WO2013130561A3 (fr) Procédé de fonctionnement d'un dispositif informatique, dispositif informatique et programme informatique
SG11201809981QA (en) Processing method for preventing copy attack, and server and client
IN2015CH03327A (fr)
PH12020500145A1 (en) Method for setting operating record viewing right based on time period
SG11201805866UA (en) Permission management and resource control method and apparatus
IN2013CH01206A (fr)
PH12017500687A1 (en) Verification method and apparatus
WO2019070467A3 (fr) Désagrégation de causes latentes pour une optimisation de système informatique
PH12020500142A1 (en) Method for authorizing permission to operate content of mailbox account and instant messaging account in system
IN2013DE02920A (fr)
WO2015130378A3 (fr) Procédé d'obfuscation pour clés de chiffrement de mémoire
PH12019500762A1 (en) Method and apparatus for implementing accessibility function in applications