WO2019218432A1 - 跨境异常交易的确定方法、装置、终端及存储介质 - Google Patents

跨境异常交易的确定方法、装置、终端及存储介质 Download PDF

Info

Publication number
WO2019218432A1
WO2019218432A1 PCT/CN2018/093822 CN2018093822W WO2019218432A1 WO 2019218432 A1 WO2019218432 A1 WO 2019218432A1 CN 2018093822 W CN2018093822 W CN 2018093822W WO 2019218432 A1 WO2019218432 A1 WO 2019218432A1
Authority
WO
WIPO (PCT)
Prior art keywords
transaction
user
abnormal
account information
user account
Prior art date
Application number
PCT/CN2018/093822
Other languages
English (en)
French (fr)
Inventor
谢翠萍
谭志荣
魏尧东
Original Assignee
平安科技（深圳）有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 平安科技（深圳）有限公司 filed Critical 平安科技（深圳）有限公司
Publication of WO2019218432A1 publication Critical patent/WO2019218432A1/zh

Links

Images

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F19/00—Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines
    • G07F19/20—Automatic teller machines [ATMs]
    • G07F19/209—Monitoring, auditing or diagnose of functioning of ATMs
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q40/00—Finance; Insurance; Tax strategies; Processing of corporate or income taxes
    • G06Q40/02—Banking, e.g. interest calculation or account maintenance

Definitions

  • the present application relates to the field of data processing technologies, and in particular, to a method and an apparatus for determining a cross-border abnormal transaction.
  • ATM Automated Teller Machine
  • overseas cash withdrawal not only avoids the management of the annual total purchase of foreign exchange and the verification of the separation and sale of foreign exchange, facilitates the illegal transfer of domestic assets to the outside world, and also becomes an underground bank, fraud group, etc. A tool for money laundering by criminals. Therefore, timely monitoring and evaluation of cross-border transactions is required.
  • the existing cross-border ATM cash withdrawal is based on the customer's identity information, and the fixed threshold is determined by the transaction amount and transaction frequency to determine the abnormal transaction. For example, when the transaction amount and transaction frequency satisfy all the feature settings.
  • the threshold is fixed, it is determined that the monitoring standard is reached, and the customer and the transaction information are alerted.
  • some key monitoring targets meet the monitoring standards, but non-critical monitoring objects do not meet the monitoring standards, and no early warnings are issued. The unclear situation of such monitoring targets seriously affects the accuracy of early warning and reduces the efficiency of determining cross-border abnormal transactions.
  • the present application provides a method and device for determining cross-border abnormal transactions, and the main purpose thereof is to solve the problem that the existing cross-border ATM cash withdrawal is unclear due to unclear monitoring targets, seriously affecting the accuracy of early warning, and reducing the efficiency of cross-border abnormal transactions. problem.
  • a method for determining a cross-border abnormal transaction including:
  • the transaction generated by the monitoring cross-border transaction user is determined as a cross-border abnormal transaction.
  • a device for determining a cross-border abnormal transaction including:
  • An obtaining unit configured to acquire, by using a backend system of the ATM, user account information and historical transaction information of the cross-border transaction user;
  • a determining unit configured to determine, according to the user account information and a transaction characteristic of the historical transaction information, whether the abnormal abnormal trading condition is met, where the preset abnormal trading condition includes an abnormality when different trading features configured according to different importance are in an abnormal transaction condition;
  • the determining unit is configured to determine, when the preset abnormal trading condition is met, the transaction generated by the monitoring cross-border transaction user as a cross-border abnormal transaction.
  • a storage medium having stored therein at least one executable instruction that causes a processor to perform an operation corresponding to a determination method of the cross-border abnormal transaction described above.
  • a terminal including: a processor, a memory, a communication interface, and a communication bus, wherein the processor, the memory, and the communication interface complete mutual communication through the communication bus ;
  • the memory is configured to store at least one executable instruction that causes the processor to perform an operation corresponding to the determining method of the cross-border abnormal transaction.
  • the technical solution provided by the embodiment of the present application has at least the following advantages:
  • the present application provides a method, a device, a terminal, and a storage medium for determining a cross-border abnormal transaction.
  • an ATM back-end system is used to acquire user account information and historical transaction information of a cross-border transaction user, and then according to the user account information and Whether the transaction characteristics of the historical transaction information meet the preset abnormal trading conditions, the preset abnormal trading conditions include abnormal conditions in which different trading features configured according to different importance are in abnormal trading, and if the abnormal abnormal trading conditions are met,
  • the transaction generated by the monitoring cross-border transaction user is determined to be a cross-border abnormal transaction.
  • the fixed threshold is set by the related characteristics of the transaction amount, the transaction frequency and the like to determine the abnormal transaction
  • the embodiment of the present application obtains the user who withdraws the cash from the ATM.
  • User account information and transaction characteristics of historical transaction information to determine whether it meets abnormal trading conditions of different importance, determine abnormal transactions using ATM for cross-border transactions, and increase accurate judgment of abnormal transactions, which can be different for different monitoring objects.
  • the abnormal conditions are judged to improve the accuracy and efficiency of cross-border abnormal transactions.
  • FIG. 1 is a flowchart of a method for determining a cross-border abnormal transaction according to an embodiment of the present application
  • FIG. 2 is a flowchart of another method for determining a cross-border abnormal transaction provided by an embodiment of the present application
  • FIG. 3 is a block diagram of a determining apparatus for a cross-border abnormal transaction according to an embodiment of the present application
  • FIG. 4 is a block diagram of another apparatus for determining a cross-border abnormal transaction provided by an embodiment of the present application.
  • FIG. 5 is a schematic diagram of a terminal provided by an embodiment of the present application.
  • the embodiment of the present application provides a method for determining a cross-border abnormal transaction. As shown in FIG. 1 , the method includes:
  • the ATM may be an automatic depositing and dispensing machine configured by a bank or a domestic bank in a cooperative relationship with a Chinese domestic bank in all countries outside China, and the background system is for recording and saving bank users to deposit and withdraw funds through ATM.
  • the user account information includes a user ID number, a user name, a user bank card number, and the like, which are not specifically limited in this embodiment.
  • the historical transaction information includes a transaction type, a transaction place, a transaction currency, a user acquisition current, a user access ratio, and a transaction channel, and the transaction type includes deposit, withdrawal, and transfer, and the transaction occurs at a deposit, Locations for operations such as withdrawals, such as Thailand, Vietnam, Brunei, Malaysia, Indonesia, Turkey, Iran, Iraq, Iran, Afghanistan, Pakistan, Egypt, Ukraine, Kyrgyzstan, Uzbekistan, Tarikistan, etc.
  • the preset abnormal transaction condition includes an abnormal condition when different transaction features configured according to different importance are in an abnormal transaction, and the transaction feature is specific feature data generated by the user when performing overseas ATM deposit and withdrawal, and an abnormal condition.
  • the transaction location that can be set as an abnormal transaction is In Georgia, it is determined whether the transaction takes place in Georgia, and if so, it is directly determined to be an abnormal transaction, and the embodiment of the present application does not specifically limit it.
  • the user access ratio as the source of the funds to be deposited or remitted in cash
  • the transaction of the entire account is 60% or more of the total account transaction, which is an abnormal transaction, etc., which is not specifically limited in the embodiment of the present application.
  • the preset abnormal transaction condition is generally an abnormal condition set in advance through the abnormal transaction that has been determined, wherein the transaction feature determined by the transaction characteristics of the user account information and the historical transaction information may be required as the transaction feature. If the object is judged to be abnormal, it can be determined to meet the preset abnormal trading conditions. Generally, the importance refers to the user account information, the transaction type, the place where the transaction occurs, the transaction currency, the user takes the current status, and the user saves. In the acquisition ratio and transaction channel, the degree of transaction anomaly can be determined by a feature. For example, if the user account information is a sensitive country user, it is directly determined as an abnormal transaction user, thereby avoiding all transaction characteristics as evaluation objects. Simplify and accurately judge the judgment of important features when an abnormality occurs in a transaction.
  • the transaction generated by the monitoring cross-border transaction user is determined as a cross-border abnormal transaction.
  • the transaction generated by the monitored cross-border transaction user is determined as a cross-border abnormal transaction.
  • the user can display the user identity information of the monitoring user, and the like.
  • the present application provides a method for determining a cross-border abnormal transaction, and determining an abnormal transaction phase by setting a fixed threshold according to a related value of a transaction amount, a transaction frequency, and the like according to an existing cross-border ATM cash withdrawal.
  • determining the transaction characteristics of the user account information and the historical transaction information of the cash withdrawal user from the ATM it is determined whether the abnormal transaction conditions of different importance are met, and the abnormal transaction using the ATM for cross-border transactions is determined, and the abnormal transaction is increased. Accurate judgment of abnormal transactions can be judged according to different abnormal conditions for different monitoring objects, thereby improving the accuracy and efficiency of cross-border abnormal transactions.
  • the embodiment of the present application provides another method for determining a cross-border abnormal transaction. As shown in FIG. 2, the method includes:
  • the ATM back-end system at different monitoring locations may be an ATM back-end data storage system divided according to provinces, cities, counties, etc. For example, Beijing may be divided into Chaoyang District and Haidian District ATM back-office systems according to each district.
  • the embodiment of the present application is not specifically limited.
  • the preset time interval may be 1 day, 1 week, etc., which is not specifically limited in the embodiment of the present application.
  • the ATM identifier that needs to be acquired may be carried, and the transaction period and transaction period of the information may be carried.
  • the transaction period is from January 2015 to the present, and the transaction period is 30 working days.
  • the embodiments of the present application are not specifically limited.
  • This step is the same as the method in step 101 shown in FIG. 1, and details are not described herein again.
  • the terminal that currently requests the monitoring information acquisition request receives the corresponding user account information and historical transaction information of the monitoring cross-border transaction user, so as to use the data to perform the determination.
  • the quantification is to quantify or index the transaction features.
  • the account passes through the country within one month after receiving the cash deposit (investment of funds).
  • ATM cash withdrawal can be quantified to obtain a value of 8.
  • the source of funds is stored or remitted in cash, which can be quantified by accounting for more than 60% (inclusive) of the entire account transaction. 28
  • the account receives cash deposits (imported funds) The withdrawal from overseas ATMs within the next month can be quantified28.
  • the time information is the time of deposit and withdrawal, for example, the value may be quantized to a larger value within one month, and quantized one month later.
  • the embodiment of the present application is not specifically limited.
  • the location information is used to quantify the important transaction locations for numerical statistics in step 205. For example, Pakistan is classified as a transaction risk and is directly quantified as a larger value 50, which is not specifically limited in this embodiment.
  • the transaction currency, the transaction type, the user's current transaction, the user access ratio, and the transaction characteristics of the transaction channel are non-uniform values or names in the transaction information, in order to facilitate the numerical statistics in step 205, the corresponding transaction features are performed. Quantize, thereby increasing the computational efficiency of the values.
  • the total number of cash credits/transaction total is greater than a preset value, such as 8, it is determined to be an abnormal transaction, and an early warning is made.
  • the quantification is required, quantify the user account information, the transaction type, the place where the transaction occurs, the transaction currency, the current user acquisition rate, the user access ratio, and the transaction channel, and according to the quantized user account information and the transaction. Type, transaction location, transaction currency, user current, user access ratio, transaction channel to determine the transaction characteristics.
  • the corresponding quantization may be compared and quantized according to a preset quantization list, where the preset quantization list includes different user account information, different transaction types, different transaction occurrences, and different transaction currencies. Different users take the current, different user access ratios, and different transaction channels corresponding to the quantified values, so as to ensure consistency in the quantification process, the quantified specific values can be used as numerical values of transaction characteristics. .
  • the step 204b along with the step 204a, if no quantization is needed, is directly determined to be an abnormal transaction according to the user account information.
  • the need for quantification refers to high-risk areas, transactions, or transaction information that has been determined to be an abnormal user.
  • the transaction occurs in the acquired monitoring information.
  • the abnormal transaction is determined directly according to the user account information, that is, the user identity information can be determined from the user account information, thereby reducing the risk of abnormal transactions.
  • each transaction feature needs to be comprehensively considered, that is, a value is calculated according to the value of each transaction feature, so as to be statistically based on the statistics. The value is used to determine if it is an abnormal transaction.
  • the step 205 may specifically include: configuring and presetting the value according to the place where the transaction occurs, the transaction currency, the user account information, the user access ratio, the user's current transaction, the transaction channel, and the transaction type.
  • the value, a 6 is the value of the trading channel, and a 7 is the value of the transaction type.
  • transaction currency in order to reflect the user account information, the transaction type, the place where the transaction occurs, the transaction currency, the current user acquisition, the user access ratio, and the different importance levels in the transaction statistics, according to the transaction place , transaction currency, user account information, user access ratio, user acquisition current, transaction channel, transaction type order to sort the values of each transaction feature, thereby matching the right from a 1 to a 7 in the preset statistical formula The value is obtained as a statistical result of decreasing the weight of the transaction, the transaction currency, the user account information, the user access ratio, the user's current transaction, the transaction channel, and the transaction type.
  • the preset abnormal transaction threshold is set according to the overall situation of abnormal transactions in the history, and since the statistical result is always a specific value, the preset transaction
  • the preset is also a value greater than 0, and may be 20, 50, etc., which is not specifically limited in the embodiment of the present application.
  • the early warning information is generated according to the identity of the user in the user account information and the transaction occurrence of the last withdrawal of the user.
  • the information of the abnormal transaction user may be extracted, and the user identity information may be extracted according to the user account information, and the location where the user finally withdraws the transaction, so as to determine the location of the user who recently used the ATM to withdraw the cash, for example, if the user determined according to the user account information is the police wanted
  • the personnel of the present invention can determine the location of the overnight person by using the last cash withdrawal transaction, or directly freeze the user account information, which is not specifically limited in the embodiment of the present application.
  • the process if it is not greater than the preset abnormal transaction threshold, the process returns to step 201 to continue monitoring.
  • the present application provides another method for determining a cross-border abnormal transaction.
  • the embodiment of the present application first determines whether the user account information of the cash-out user and the transaction characteristics of the historical transaction information are obtained from the ATM, and first determines whether quantization is needed.
  • the statistical result can be statistically calculated by the preset statistical formula, and then according to the statistical result, it is judged whether the preset abnormal transaction preset is exceeded, and the abnormal transaction using the ATM for cross-border trading is determined, and the accuracy of the abnormal transaction is increased. Judging, pre-determined the user account information, the transaction type, the place where the transaction occurred, the transaction currency, the current user acquisition, the user access ratio, the transaction in the transaction channel, and further screened out the abnormal situation. To simplify the judgment process of abnormal transactions, thereby improving the accuracy and efficiency of cross-border abnormal transactions.
  • the embodiment of the present application provides a device for determining a cross-border abnormal transaction.
  • the device includes: an obtaining unit 31, a determining unit 32, and a determining unit. 33.
  • the obtaining unit 31 is configured to acquire, by using a background system of the ATM, user account information and historical transaction information for monitoring a cross-border transaction user;
  • the determining unit 32 is configured to determine, according to the user account information and the transaction characteristics of the historical transaction information, whether the preset abnormal transaction condition is met, and the preset abnormal transaction condition includes that different transaction features configured according to different importance are in an abnormal transaction Abnormal condition
  • the determining unit 33 is configured to determine, when the preset abnormal transaction condition is met, the transaction generated by the monitoring cross-border transaction user as a cross-border abnormal transaction.
  • the present application provides a determining device for a cross-border abnormal transaction, and determining an abnormal trading phase by setting a fixed threshold according to a related value of a transaction amount, a transaction frequency, and the like according to an existing cross-border ATM cash withdrawal.
  • determining the transaction characteristics of the user account information and the historical transaction information of the cash withdrawal user from the ATM it is determined whether the abnormal transaction conditions of different importance are met, and the abnormal transaction using the ATM for cross-border transactions is determined, and the abnormal transaction is increased. Accurate judgment of abnormal transactions can be judged according to different abnormal conditions for different monitoring objects, thereby improving the accuracy and efficiency of cross-border abnormal transactions.
  • the embodiment of the present application provides another apparatus for determining a cross-border abnormal transaction.
  • the apparatus includes: an obtaining unit 41, a determining unit 42, and a determination.
  • the obtaining unit 41 is configured to acquire, by using a background system of the ATM, user account information and historical transaction information of the cross-border transaction user;
  • the determining unit 42 is configured to determine, according to the user account information and the transaction characteristics of the historical transaction information, whether the preset abnormal transaction condition is met, and the preset abnormal transaction condition includes that different transaction characteristics configured according to different importance are in an abnormal transaction Abnormal condition
  • the determining unit 43 is configured to determine, when the preset abnormal trading condition is met, the transaction generated by the monitoring cross-border transaction user as a cross-border abnormal transaction. Further, the historical transaction information includes a transaction type, a place where the transaction occurs, a transaction currency, a current user acquisition rate, a user access ratio, and a transaction channel.
  • the apparatus further includes: a quantization unit 44,
  • the determining unit 42 is further configured to determine whether the user account information, the transaction type, the place where the transaction occurs, the transaction currency, the current user acquisition rate, the user access ratio, and whether the transaction channel needs to be quantified;
  • the quantizing unit 44 is configured to quantize the user account information, the transaction type, the place where the transaction occurs, the transaction currency, the current user acquisition rate, the user access ratio, and the transaction channel if the quantization is needed, and according to the quantization User account information and transaction type, transaction location, transaction currency, user acquisition current, user access ratio, transaction channel to determine transaction characteristics;
  • the determining unit 43 is configured to directly determine an abnormal transaction according to the user account information if no quantization is needed.
  • the determining unit 42 includes:
  • the statistics module 4201 is configured to perform numerical statistics according to the value of the transaction account determined by the user account information, the transaction type, the place where the transaction occurs, the transaction currency, the current user acquisition rate, the user access ratio, and the transaction channel;
  • the determining module 4202 is configured to determine, according to the statistical result, whether the threshold is greater than a preset abnormal transaction threshold.
  • the statistic module 4201 is specifically configured to configure and preset the value according to a transaction place, a transaction currency, a user account information, a user access ratio, a user acquisition current, a transaction channel, and a transaction type.
  • the determining unit 43 is specifically configured to: if greater than the preset abnormal transaction threshold, generate the early warning information according to the user identity in the user account information and the transaction occurrence of the last withdrawal of the user.
  • the device further includes:
  • the sending unit 45 is configured to send a monitoring information acquisition request to the ATM backend system located at different monitoring locations according to a preset time interval.
  • the present application provides another apparatus for determining a cross-border abnormality transaction.
  • the embodiment of the present application by acquiring the transaction account characteristics of the user account information and the historical transaction information of the user from the ATM, it is first determined whether quantization is needed, and if quantization is required, The statistical result can be statistically calculated by the preset statistical formula, and then according to the statistical result, it is judged whether the preset abnormal transaction preset is exceeded, and the abnormal transaction using the ATM for cross-border trading is determined, and the accuracy of the abnormal transaction is increased. Judging, pre-determined the user account information, the transaction type, the place where the transaction occurred, the transaction currency, the current user acquisition, the user access ratio, the transaction in the transaction channel, and further screened out the abnormal situation. To simplify the judgment process of abnormal transactions, thereby improving the accuracy and efficiency of cross-border abnormal transactions.
  • a storage medium which may be a non-volatile readable storage medium, where the storage medium stores at least one executable instruction, the computer executable instruction may perform any of the above methods A method of determining a cross-border abnormal transaction in an embodiment.
  • FIG. 5 is a schematic structural diagram of a terminal according to an embodiment of the present application.
  • the specific implementation of the present application does not limit the specific implementation of the terminal.
  • the terminal may include a processor 502, a communications interface 504, a memory 506, and a communication bus 508.
  • the processor 502, the communication interface 504, and the memory 506 complete communication with each other via the communication bus 508.
  • the communication interface 504 is configured to communicate with network elements of other devices, such as clients or other servers.
  • the processor 502 is configured to execute the program 510. Specifically, the related steps in the foregoing method for determining a cross-border abnormal transaction may be performed.
  • program 510 can include program code, the program code including computer operating instructions.
  • the processor 502 may be a central processing unit CPU, or an Application Specific Integrated Circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present application.
  • the one or more processors included in the terminal may be the same type of processor, such as one or more CPUs; or may be different types of processors, such as one or more CPUs and one or more ASICs.
  • the memory 506 is configured to store the program 510.
  • Memory 506 may include high speed RAM memory and may also include non-volatile memory, such as at least one disk memory.
  • Program 510 can be specifically configured to cause processor 502 to perform the following operations:
  • the transaction generated by the monitoring cross-border transaction user is determined as a cross-border abnormal transaction.
  • modules in the devices of the embodiments can be adaptively changed and placed in one or more devices different from the embodiment.
  • the modules or units or components of the embodiments may be combined into one module or unit or component, and further they may be divided into a plurality of sub-modules or sub-units or sub-components.
  • any combination of the features disclosed in the specification, including the accompanying claims, the abstract and the drawings, and any methods so disclosed, or All processes or units of the device are combined.
  • Each feature disclosed in this specification (including the accompanying claims, the abstract and the drawings) may be replaced by alternative features that provide the same, equivalent or similar purpose.
  • the various component embodiments of the present application can be implemented in hardware, or in a software module running on one or more processors, or in a combination thereof.
  • a microprocessor or digital signal processor may be used in practice to implement some or all of some or all of the components of the method and apparatus for determining cross-border anomaly transactions in accordance with embodiments of the present application. All features.
  • the application can also be implemented as a device or device program (e.g., a computer program and a computer program product) for performing some or all of the methods described herein.
  • Such a program implementing the present application may be stored on a computer readable medium or may be in the form of one or more signals. Such signals may be downloaded from an Internet website, provided on a carrier signal, or provided in any other form.

Landscapes

  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Finance (AREA)
  • Physics & Mathematics (AREA)
  • Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Development Economics (AREA)
  • Economics (AREA)
  • Marketing (AREA)
  • Strategic Management (AREA)
  • Technology Law (AREA)
  • General Business, Economics & Management (AREA)
  • Theoretical Computer Science (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

本申请公开了一种跨境异常交易的确定方法、装置、终端及存储介质，涉及一种数据处理技术领域，主要目的在于解决现有跨境ATM取现因监测对象不明确，严重影响预警准确性，降低跨境异常交易的确定效率的问题。主要技术方案：通过ATM的后台系统获取监测跨境交易用户的用户账号信息以及历史交易信息；根据所述用户账户信息以及历史交易信息的交易特征判定是否符合预置异常交易条件，所述预置异常交易条件包括按照不同重要性配置的不同交易特征处于异常交易时的异常条件；若符合预置异常交易条件，则将所述监测跨境交易用户产生的交易确定为跨境异常交易。

Description

跨境异常交易的确定方法、装置、终端及存储介质
本申请要求于2018年5月14日提交中国专利局、申请号为201810458743.1、发明名称为“基于ATM的跨境异常交易的确定方法及装置”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本申请涉及一种数据处理技术领域，特别是涉及一种跨境异常交易的确定方法及装置。
背景技术
随着国内外经济的全球化发展，不同的银行公司都会通过自动提款机ATM(Automated Teller Machine)提供跨境交易服务，以便不同的用户在各个国家都可以进行取现、存现交易。其中，对跨境取现来说，境外取现不仅规避了个人购汇年度总额的管理和分拆结售汇的核查，便利了境内资产向境外的非法转移，同时也成为了地下钱庄、诈骗集团等犯罪分子洗钱的工具。因此，需要对跨境交易进行及时的监控评估。
目前，现有跨境ATM取现根据客户的身份信息限定区域，再通过交易金额、交易频次等特征设定固定阀值，来确定异常交易，例如，当交易金额、交易频次满足全部的特征设定固定阀值时，则确定为到达监测标准，将该客户以及对于的交易信息进行预警。但是，有些关键监测对象达到监测标准但非关键监测对象没达到监测标准，不会进行预警，这种监测对象不明确的情况，严重影响预警准确性，降低跨境异常交易的确定效率。
发明内容
有鉴于此，本申请提供一种跨境异常交易的确定方法及装置，主要目的在于解决现有跨境ATM取现因监测对象不明确，严重影响预警准确性，降低跨境异常交易的确定效率的问题。
依据本申请一个方面，提供了一种跨境异常交易的确定方法，包括：
通过ATM的后台系统获取监测跨境交易用户的用户账号信息以及历史交易信息；
根据所述用户账户信息以及历史交易信息的交易特征判定是否符合预置异常交易条件，所述预置异常交易条件包括按照不同重要性配置的不同交易特征处于异常交易时的异常条件；
若符合预置异常交易条件，则将所述监测跨境交易用户产生的交易确定为跨境异常交易。
依据本申请一个方面，提供了一种跨境异常交易的确定装置，包括：
获取单元，用于通过ATM的后台系统获取监测跨境交易用户的用户账号信息以及历史交易信息；
判断单元，用于根据所述用户账户信息以及历史交易信息的交易特征判定是否符合预置异常交易条件，所述预置异常交易条件包括按照不同重要性配置的不同交易特征处于异常交易时的异常条件；
确定单元，用于若符合预置异常交易条件，则将所述监测跨境交易用户产生的交易确定为跨境异常交易。
根据本申请的又一方面，提供了一种存储介质，所述存储介质中存储有至少一可执行指令，所述可执行指令使处理器执行如上述跨境异常交易的确定方法对应的操作。
根据本申请的再一方面，提供了一种终端，包括：处理器、存储器、通信接口和通信总线，所述处理器、所述存储器和所述通信接口通过所述通信总线完成相互间的通信；
所述存储器用于存放至少一可执行指令，所述可执行指令使所述处理器执行上述跨境异常交易的确定方法对应的操作。
借由上述技术方案，本申请实施例提供的技术方案至少具有下列优点：
本申请提供了一种跨境异常交易的确定方法、装置、终端及存储介质，首先通过ATM的后台系统获取监测跨境交易用户的用户账号信息以及历史交易信息，然后根据所述用户账户信息以及历史交易信息的交易特征判定是否符合预置异常交易条件，所述预置异常交易条件 包括按照不同重要性配置的不同交易特征处于异常交易时的异常条件，若符合预置异常交易条件，则将所述监测跨境交易用户产生的交易确定为跨境异常交易。与现有跨境ATM取现根据客户的身份信息限定区域，通过交易金额、交易频次等相关的特征设定固定阀值，来确定异常交易相比，本申请实施例通过获取从ATM进行取现用户的用户账号信息及历史交易信息的交易特征来判断是否符合不同重要性的异常交易条件，确定出利用ATM进行跨境交易的异常交易，增加了对异常交易的精确判断，可以针对不同监测对象根据不同的异常条件进行判断，从而提高跨境异常交易的准确性及高效性。
上述说明仅是本申请技术方案的概述，为了能够更清楚了解本申请的技术手段，而可依照说明书的内容予以实施，并且为了让本申请的上述和其它目的、特征和优点能够更明显易懂，以下特举本申请的具体实施方式。
附图说明
通过阅读下文优选实施方式的详细描述，各种其他的优点和益处对于本领域普通技术人员将变得清楚明了。附图仅用于示出优选实施方式的目的，而并不认为是对本申请的限制。而且在整个附图中，用相同的参考符号表示相同的部件。在附图中：
图1示出了本申请实施例提供的一种跨境异常交易的确定方法流程图；
图2示出了本申请实施例提供的另一种跨境异常交易的确定方法流程图；
图3示出了本申请实施例提供的一种跨境异常交易的确定装置框图；
图4示出了本申请实施例提供的另一种跨境异常交易的确定装置框图；
图5示出了本申请实施例提供的一种终端示意图。
具体实施方式
下面将参照附图更详细地描述本公开的示例性实施例。虽然附图 中显示了本公开的示例性实施例，然而应当理解，可以以各种形式实现本公开而不应被这里阐述的实施例所限制。相反，提供这些实施例是为了能够更透彻地理解本公开，并且能够将本公开的范围完整的传达给本领域的技术人员。
本申请实施例提供了一种跨境异常交易的确定方法，如图1所示，所述方法包括：
101、通过ATM的后台系统获取监测跨境交易用户的用户账号信息以及历史交易信息。
其中，所述ATM可以为位于中国境外的所有国家的、与中国国内银行有合作关系的银行或本国银行配置的自动存取款机，所述后台系统为记录、保存银行用户通过ATM存取款的信息，以便为数据处理做信息支撑。所述用户账号信息包括用户身份证号、用户名称、用户银行卡号等，本申请实施例不做具体限定。所述历史交易信息包括交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道，所述交易类型包括存款、取款、转账，所述交易发生地为发生存款、取款转账等操作的地点，例如泰国、越南、文莱、马来西亚、印度尼西亚、土耳其、叙利亚、伊拉克、伊朗、阿富汗、巴基斯坦、埃及、哈萨克斯坦、吉尔吉斯斯坦、乌兹别克斯坦、塔吉克斯坦等，所述交易币种包括CNY(人民币)、MYR(马来西亚林吉特)、THB(泰铢)、TRY(土耳其里拉)、VND(越南盾)、SYP(叙利亚镑)、AZN(阿塞拜疆马纳特)、PKR(巴基斯坦卢比)、AFN(阿富汗尼)、KZT(哈萨克斯坦坚戈)、KGS(吉尔吉斯斯坦索姆)、UZS(乌兹别克斯坦苏姆)、TJS(塔吉克斯坦索莫尼)、SAR(沙特阿拉伯里亚尔)、MMK(缅甸元)、JPY(日元)、EUR(欧元)，所述用户取现行为包括取现、不取现，所述用户取存占比即为存款与取款之比，所述交易渠道包括国内存现且境外ATM取现、境外存现且国内取现等，本申请实施例不做具体限定。
需要说明的是，一般的，不同的银行可以通过本行配置的ATM的后台系统来获取对应的信息，若用户出现跨行存取款，则需要进行异常交易确定的银行向其他银行请求合作，从而得到对应的存取款信息。
102、根据所述用户账户信息以及历史交易信息的交易特征判定是否符合预置异常交易条件。
其中，所述预置异常交易条件包括按照不同重要性配置的不同交易特征处于异常交易时的异常条件，所述交易特征为用户在进行境外ATM存取款时所生成的具体特征数据，异常条件包括用户账户信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道的异常条件，例如，针对交易发生地，可以设定为异常交易的交易发生地为巴勒斯坦，则判断交易发生地是否为巴勒斯坦，若是，则直接确定为异常交易，本申请实施例不做具体限定。再如，可以设定用户存取占比为资金来源以现金存入或汇入的占整个账户交易的60％(含)以上是为异常交易等，本申请实施例不做具体限定。
需要说明的是，预置异常交易条件一般为预先通过已经确定的异常交易设定的异常条件，其中，可以需要按照用户账户信息以及历史交易信息中重要性不同的交易特征来判断的交易特征作为判断对象，若有一个交易特征为异常，则可以确定为符合预置异常交易条件，一般的，重要性是指用户账户信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道中，通过一个特征就可以确定出交易异常的程度，例如，用户账户信息为敏感国家身份的用户，则直接确定为异常交易用户，从而避免将所有交易特征都作为评估对象，简化及精确判断对交易发生异常时的重要特征的判断。
103、若符合预置异常交易条件，则将所述监测跨境交易用户产生的交易确定为跨境异常交易。
对于本申请实施例，为了准确确定出跨境交易的异常情况，若符合预置异常交易条件，则将监测的跨境交易用户产生的交易确定为跨境异常交易。另外，为了及时向银行提供信息，起到预警作用，还可以解析出监测用户的用户身份信息等，本申请实施例不做具体限定。
本申请提供了一种跨境异常交易的确定方法，与现有跨境ATM取现根据客户的身份信息限定区域，通过交易金额、交易频次等相关的特征设定固定阀值，来确定异常交易相比，本申请实施例通过获取从ATM进行取现用户的用户账号信息及历史交易信息的交易特征来判断 是否符合不同重要性的异常交易条件，确定出利用ATM进行跨境交易的异常交易，增加了对异常交易的精确判断，可以针对不同监测对象根据不同的异常条件进行判断，从而提高跨境异常交易的准确性及高效性。
本申请实施例提供了另一种跨境异常交易的确定方法，如图2所示，所述方法包括：
201、按照预设时间间隔向位于不同监测地点的ATM后台系统发送监控信息获取请求。
其中，所述位于不同监测地点的ATM后台系统可以为按照省、市、县等区域进行划分的ATM后台数据存储系统，例如，北京市可以按照各个区划分为朝阳区、海淀区的ATM后台系统，本申请实施例不做具体限定。为了及时掌握待监控对象，需要按照预设时间间隔设定发送监控信息获取请求，所述预设时间间隔可以为1天、1周等，本申请实施例不做具体限定。
需要说明的是，对于发送的监控信息获取请求，可以携带需要获取的ATM标识，还可以携带信息的交易时段、交易周期等，如交易时段为2015年1月至今，交易周期为30个工作日等，本申请实施例不做具体限定。
202、通过ATM的后台系统获取监测跨境交易用户的用户账号信息以及历史交易信息。
本步骤与图1所示的步骤101方法相同，在此不再赘述。
需要说明的是，在发送监控信息获取请求后，当前请求发送监控信息获取请求的终端会接收到对应的监控跨境交易用户的用户账号信息以及历史交易信息，以便利用这些数据进行判断。
203、判断所述用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道是否需要量化。
对于本申请实施例，为了简化监控数据的处理数量，以便在步骤205时进行数值统计，对于一些数据量过大的交易特征可以进行量化操作，并避免每个交易特征都判断不出异常交易时，所有特征作为整体时遗漏掉可能存在异常交易的情况，所述量化即为将交易特征数值 化或者为指标化，例如，账户收到现金存入(汇入资金)后1个月内通过境外ATM取现可以进行量化,得到数值8，资金来源以现金存入或汇入的占整个账户交易的60％(含)以上可以进行量化得到的数据28，账户收到现金存入(汇入资金)后1个月内通过境外ATM取现可以进行量化得到28。
需要说明的是，对于判断量化的方法，可以根据时间信息、地点信息、交易信息进行判断，时间信息为存取款时间段，例如1个月以内可以量化为较大的数值，一个月后量化为较小的数值，本申请实施例不做具体限定。地点信息用于将重要的交易地进行数量化，以便在步骤205中进行数值统计，例如，将巴基斯坦属于交易危险地，直接量化为一个较大的数值50，本申请实施例不做具体限定。由于交易信息中的交易币种、交易类型、用户取现行为、用户存取占比、交易渠道的交易特征为不统一的数值或名称，为了便于步骤205中的数值统计，将对应的交易特征进行量化，从而提高数值的计算效率。
例如，现金入账总笔数/交易总笔数大于一个预设的数值，如8，则确定为异常交易，进行预警。
204a、若需要量化，则对所述用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道进行量化，并根据量化后的用户账号信息以及交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道确定出交易特征。
对于本申请实施例，对应的量化可以根据预先设定的量化列表进行对比量化，预设的量化列表中包括不同的用户账号信息、不同的交易类型、不同的交易发生地、不同的交易币种、不同的用户取现行为、不同的用户存取占比、不同的交易渠道分别对应的量化数值，从而确保在量化过程中的一致性，量化后的具体数值即可以作为交易特征的数值进行数值统计。
对于本申请实施例，与步骤204a并列的步骤204b、若不需要量化，则根据所述用户账号信息直接确定为异常交易。
需要说明的是，一般对于不需要量化是指高风险地区、交易，或者已经确定为异常用户的交易信息，例如，设定伊拉克为高风险地区， 则在获取到的监控信息中交易发生地为伊拉克时，直接根据用户账号信息确定为异常交易，即可以从用户账号信息中确定出用户身份信息，从而降低异常交易的风险。
例如，由于异常的取现交易一般都发生在异常的地点，或者异常的交易币种等，因此需要对客户的交易记录进行进行提取，从而判断出是否存在量化列表中的预先设置的情况，如客户的身份特征直接判断是否预警包括：用户来源于恐怖活动多发、敏感的高风险国家或地区人员，即查询客户信息表身份证以65开头的或国籍为敏感国家的；用户名称在8个字节(含)以上，即查询个人客户信息表客户名称长度>＝8个字节(4个汉字)，确定为异常交易用户。
205、根据所述用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道确定出的交易特征的数值进行数值统计。
对于本申请实施例，为了准确确定出监测的跨境交易用户是否为异常交易的用户，则需要将每个交易特征综合考虑，即根据每个交易特征的数值来统计出一个数值，以便根据统计的数值来确定出是否为异常交易。
对于本申请实施例，步骤205具体可以包括：按照交易发生地、交易币种、用户账号信息、用户存取占比、用户取现行为、交易渠道、交易类型顺序对将所述数值配置与预设统计公式中，得到统计结果，所述预设统计公式为A＝a 1+0.8a 2+0.6a 3+0.4a 4+0.2a 5+0.1a 6+0.05a 7，其中，所述A为数值统计的结果，a 1为交易发生地的数值，a 2为交易币种的数值，a 3为用户账号信息的数值，a 4为用户存取占比的数值，a 5为用户取现行为的数值、a 6为交易渠道的数值，a 7为交易类型的数值。
需要说明的是，为了体现用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道之间在进行数值统计时的不同重要程度，按照交易发生地、交易币种、用户账号信息、用户存取占比、用户取现行为、交易渠道、交易类型顺序对各个交易特征的数值进行排序，从而匹配预设统计公式中的从a 1至a 7的权值，得到以交易发生地、交易币种、用户账号信息、用户存取占比、用户 取现行为、交易渠道、交易类型依次权值减少的统计结果。
206、根据统计的结果判定是否大于预置异常交易阈值。
对于本申请实施例，为了对统计的结果进行总体评价，所述预置异常交易阈值为根据历史出现异常交易的总体情况而设定的，由于统计的结果为一直具体数值，因此，预置交易预置也为一个大于0的数值，可以为20、50等，本申请实施例不做具体限定。
207、若大于预置异常交易阈值，则根据所述用户账号信息中的用户身份以及用户末次取现的交易发生地发生预警信息。
对于本申请实施例，为了将判断出大于预置异常交易阈值的监测跨境交易用户确定为异常交易的用户，从而准确找到发生异常交易的用户，需要向银行或监测方提供预警，为了准确找到出现异常交易用户的信息，可以根据用户账号信息提取用户身份信息，以及用户末次取现的交易发生地，以便确定用户最近一次利用ATM取现的位置，例如，若根据用户账号信息确定的用户为警方通缉的人员，则可以利用末次取现的交易发生地确定通缉人员所在位置，或者根据用户账号信息直接进行冻结，本申请实施例不做具体限定。
对于本申请实施例，若不大于预置异常交易阈值，则返回步骤201进行继续监控。
本申请提供了另一种跨境异常交易的确定方法，本申请实施例通过获取从ATM进行取现用户的用户账号信息及历史交易信息的交易特征来，先确定是否需要进行量化，若需要量化，则可以通过预设统计公式对量化后的交易特征进行统计结果，再根据统计结果判断是否超过预置异常交易预置，确定出利用ATM进行跨境交易的异常交易，增加了对异常交易的精确判断，预先确定出用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道中存在异常的交易，进一步地的筛查出已经出现异常情况的甲乙，简化异常交易的判断过程，从而提高跨境异常交易的准确性及高效性。
进一步的，作为对上述图1所示方法的实现，本申请实施例提供了一种跨境异常交易的确定装置，如图3所示，该装置包括：获取单元31、判断单元32、确定单元33。
获取单元31，用于通过ATM的后台系统获取监测跨境交易用户的用户账号信息以及历史交易信息；
判断单元32，用于根据所述用户账户信息以及历史交易信息的交易特征判定是否符合预置异常交易条件，所述预置异常交易条件包括按照不同重要性配置的不同交易特征处于异常交易时的异常条件；
确定单元33，用于若符合预置异常交易条件，则将所述监测跨境交易用户产生的交易确定为跨境异常交易。
本申请提供了一种跨境异常交易的确定装置，与现有跨境ATM取现根据客户的身份信息限定区域，通过交易金额、交易频次等相关的特征设定固定阀值，来确定异常交易相比，本申请实施例通过获取从ATM进行取现用户的用户账号信息及历史交易信息的交易特征来判断是否符合不同重要性的异常交易条件，确定出利用ATM进行跨境交易的异常交易，增加了对异常交易的精确判断，可以针对不同监测对象根据不同的异常条件进行判断，从而提高跨境异常交易的准确性及高效性。
进一步的，作为对上述图2所示方法的实现，本申请实施例提供了另一种跨境异常交易的确定装置，如图4所示，该装置包括：获取单元41、判断单元42、确定单元43、量化单元44、发送单元45。
获取单元41，用于通过ATM的后台系统获取监测跨境交易用户的用户账号信息以及历史交易信息；
判断单元42，用于根据所述用户账户信息以及历史交易信息的交易特征判定是否符合预置异常交易条件，所述预置异常交易条件包括按照不同重要性配置的不同交易特征处于异常交易时的异常条件；
确定单元43，用于若符合预置异常交易条件，则将所述监测跨境交易用户产生的交易确定为跨境异常交易。进一步地，所述历史交易信息包括交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道。
进一步地，所述装置还包括：量化单元44，
所述判断单元42，还用于判断所述用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道是 否需要量化；
所述量化单元44，用于若需要量化，则对所述用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道进行量化，并根据量化后的用户账号信息以及交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道确定出交易特征；
所述确定单元43，用于若不需要量化，则根据所述用户账号信息直接确定为异常交易。
进一步地，所述判断单元42包括：
统计模块4201，用于根据所述用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道确定出的交易特征的数值进行数值统计；
判断模块4202，用于根据统计的结果判定是否大于预置异常交易阈值。
进一步地，所述统计模块4201，具体用于按照交易发生地、交易币种、用户账号信息、用户存取占比、用户取现行为、交易渠道、交易类型顺序对将所述数值配置与预设统计公式中，得到统计结果，并根据所述统计结果判断是否大于预置异常交易阈值，所述预设统计公式为A＝a 1+0.8a 2+0.6a 3+0.4a 4+0.2a 5+0.1a 6+0.05a 7，其中，所述A为数值统计的结果，a 1为交易发生地的数值，a 2为交易币种的数值，a 3为用户账号信息的数值，a 4为用户存取占比的数值，a 5为用户取现行为的数值、a 6为交易渠道的数值，a 7为交易类型的数值。
进一步地，所述确定单元43，具体用于若大于预置异常交易阈值，则根据所述用户账号信息中的用户身份以及用户末次取现的交易发生地发生预警信息。
进一步地，所述装置还包括：
发送单元45，用于按照预设时间间隔向位于不同监测地点的ATM后台系统发送监控信息获取请求。
本申请提供了另一种跨境异常交易的确定装置，本申请实施例通过获取从ATM进行取现用户的用户账号信息及历史交易信息的交易 特征来，先确定是否需要进行量化，若需要量化，则可以通过预设统计公式对量化后的交易特征进行统计结果，再根据统计结果判断是否超过预置异常交易预置，确定出利用ATM进行跨境交易的异常交易，增加了对异常交易的精确判断，预先确定出用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道中存在异常的交易，进一步地的筛查出已经出现异常情况的甲乙，简化异常交易的判断过程，从而提高跨境异常交易的准确性及高效性。
根据本申请一个实施例提供了一种存储介质，所述存储介质可以为非易失性可读存储介质，所述存储介质存储有至少一可执行指令，该计算机可执行指令可执行上述任意方法实施例中的跨境异常交易的确定方法。
图5示出了根据本申请一个实施例提供的一种终端的结构示意图，本申请具体实施例并不对终端的具体实现做限定。
如图5所示，该终端可以包括：处理器(processor)502、通信接口(Communications Interface)504、存储器(memory)506、以及通信总线508。
其中：处理器502、通信接口504、以及存储器506通过通信总线508完成相互间的通信。
通信接口504，用于与其它设备比如客户端或其它服务器等的网元通信。
处理器502，用于执行程序510，具体可以执行上述跨境异常交易的确定方法实施例中的相关步骤。
具体地，程序510可以包括程序代码，该程序代码包括计算机操作指令。
处理器502可能是中央处理器CPU，或者是特定集成电路ASIC(Application Specific Integrated Circuit)，或者是被配置成实施本申请实施例的一个或多个集成电路。终端包括的一个或多个处理器，可以是同一类型的处理器，如一个或多个CPU；也可以是不同类型的处理器，如一个或多个CPU以及一个或多个ASIC。
存储器506，用于存放程序510。存储器506可能包含高速RAM 存储器，也可能还包括非易失性存储器(non-volatile memory)，例如至少一个磁盘存储器。
程序510具体可以用于使得处理器502执行以下操作：
通过ATM的后台系统获取监测跨境交易用户的用户账号信息以及历史交易信息；
根据所述用户账户信息以及历史交易信息的交易特征判定是否符合预置异常交易条件，所述预置异常交易条件包括按照不同重要性配置的不同交易特征处于异常交易时的异常条件；
若符合预置异常交易条件，则将所述监测跨境交易用户产生的交易确定为跨境异常交易。
在此提供的算法和显示不与任何特定计算机、虚拟系统或者其它设备固有相关。各种通用系统也可以与基于在此的示教一起使用。根据上面的描述，构造这类系统所要求的结构是显而易见的。此外，本申请也不针对任何特定编程语言。应当明白，可以利用各种编程语言实现在此描述的本申请的内容，并且上面对特定语言所做的描述是为了披露本申请的最佳实施方式。
在此处所提供的说明书中，说明了大量具体细节。然而，能够理解，本申请的实施例可以在没有这些具体细节的情况下实践。在一些实例中，并未详细示出公知的方法、结构和技术，以便不模糊对本说明书的理解。
类似地，应当理解，为了精简本公开并帮助理解各个申请方面中的一个或多个，在上面对本申请的示例性实施例的描述中，本申请的各个特征有时被一起分组到单个实施例、图、或者对其的描述中。然而，并不应将该公开的方法解释成反映如下意图：即所要求保护的本申请要求比在每个权利要求中所明确记载的特征更多的特征。更确切地说，如下面的权利要求书所反映的那样，发明方面在于少于前面公开的单个实施例的所有特征。因此，遵循具体实施方式的权利要求书由此明确地并入该具体实施方式，其中每个权利要求本身都作为本申请的单独实施例。
本领域那些技术人员可以理解，可以对实施例中的设备中的模块 进行自适应性地改变并且把它们设置在与该实施例不同的一个或多个设备中。可以把实施例中的模块或单元或组件组合成一个模块或单元或组件，以及此外可以把它们分成多个子模块或子单元或子组件。除了这样的特征和/或过程或者单元中的至少一些是相互排斥之外，可以采用任何组合对本说明书(包括伴随的权利要求、摘要和附图)中公开的所有特征以及如此公开的任何方法或者设备的所有过程或单元进行组合。除非另外明确陈述，本说明书(包括伴随的权利要求、摘要和附图)中公开的每个特征可以由提供相同、等同或相似目的的替代特征来代替。
此外，本领域的技术人员能够理解，尽管在此所述的一些实施例包括其它实施例中所包括的某些特征而不是其它特征，但是不同实施例的特征的组合意味着处于本申请的范围之内并且形成不同的实施例。例如，在下面的权利要求书中，所要求保护的实施例的任意之一都可以以任意的组合方式来使用。
本申请的各个部件实施例可以以硬件实现，或者以在一个或者多个处理器上运行的软件模块实现，或者以它们的组合实现。本领域的技术人员应当理解，可以在实践中使用微处理器或者数字信号处理器(DSP)来实现根据本申请实施例的跨境异常交易的确定方法及装置中的一些或者全部部件的一些或者全部功能。本申请还可以实现为用于执行这里所描述的方法的一部分或者全部的设备或者装置程序(例如，计算机程序和计算机程序产品)。这样的实现本申请的程序可以存储在计算机可读介质上，或者可以具有一个或者多个信号的形式。这样的信号可以从因特网网站上下载得到，或者在载体信号上提供，或者以任何其他形式提供。
应该注意的是上述实施例对本申请进行说明而不是对本申请进行限制，并且本领域技术人员在不脱离所附权利要求的范围的情况下可设计出替换实施例。在权利要求中，不应将位于括号之间的任何参考符号构造成对权利要求的限制。单词“包含”不排除存在未列在权利要求中的元件或步骤。位于元件之前的单词“一”或“一个”不排除存在多个这样的元件。本申请可以借助于包括有若干不同元件的硬件以及 借助于适当编程的计算机来实现。在列举了若干装置的单元权利要求中，这些装置中的若干个可以是通过同一个硬件项来具体体现。单词第一、第二、以及第三等的使用不表示任何顺序。可将这些单词解释为名称。

Claims (20)

  1. 一种跨境异常交易的确定方法，其特征在于，包括：
    通过ATM的后台系统获取监测跨境交易用户的用户账号信息以及历史交易信息；
    根据所述用户账户信息以及历史交易信息的交易特征判定是否符合预置异常交易条件，所述预置异常交易条件包括按照不同重要性配置的不同交易特征处于异常交易时的异常条件；
    若符合预置异常交易条件，则将所述监测跨境交易用户产生的交易确定为跨境异常交易。
  2. 根据权利要求1所述的方法，其特征在于，所述历史交易信息包括交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道。
  3. 根据权利要求2所述的方法，其特征在于，所述根据所述用户账户信息以及历史交易信息的交易特征判断是否符合预置异常交易条件之前，所述方法还包括：
    判断所述用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道是否需要量化；
    若需要量化，则对所述用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道进行量化，并根据量化后的用户账号信息以及交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道确定出交易特征；
    若不需要量化，则根据所述用户账号信息直接确定为异常交易。
  4. 根据权利要求3所述的方法，其特征在于，所述根据所述用户账户信息以及历史交易信息的交易特征判断是否符合预置异常交易条件包括：
    根据所述用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道确定出的交易特征的数值进行数值统计；
    根据统计的结果判定是否大于预置异常交易阈值。
  5. 根据权利要求4所述的方法，其特征在于，所述根据所述用 户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道确定出的交易特征的数值进行数值统计包括：
    按照交易发生地、交易币种、用户账号信息、用户存取占比、用户取现行为、交易渠道、交易类型顺序对将所述数值配置与预设统计公式中，得到统计结果，所述预设统计公式为
    A＝a 1+0.8a 2+0.6a 3+0.4a 4+0.2a 5+0.1a 6+0.05a 7，
    其中，所述A为数值统计的结果，a 1为交易发生地的数值，a 2为交易币种的数值，a 3为用户账号信息的数值，a 4为用户存取占比的数值，a 5为用户取现行为的数值、a 6为交易渠道的数值，a 7为交易类型的数值。
  6. 根据权利要求5所述的方法，其特征在于，所述若符合预置异常交易条件，则将所述监测跨境交易用户产生的交易确定为跨境异常交易包括：
    若大于预置异常交易阈值，则根据所述用户账号信息中的用户身份以及用户末次取现的交易发生地发生预警信息。
  7. 根据权利要求1任一项所述的方法，其特征在于，所述通过ATM的后台系统获取监测跨境交易用户的用户账号信息以及历史交易信息之前，所述方法还包括：
    按照预设时间间隔向位于不同监测地点的ATM后台系统发送监控信息获取请求。
  8. 一种跨境异常交易的确定装置，其特征在于，包括：
    获取单元，用于通过ATM的后台系统获取监测跨境交易用户的用户账号信息以及历史交易信息；
    判断单元，用于根据所述用户账户信息以及历史交易信息的交易特征判定是否符合预置异常交易条件，所述预置异常交易条件包括按照不同重要性配置的不同交易特征处于异常交易时的异常条件；
    确定单元，用于若符合预置异常交易条件，则将所述监测跨境交易用户产生的交易确定为跨境异常交易。
  9. 如权利要求8所述的装置，其特征在于，所述历史交易信息包括交易类型、交易发生地、交易币种、用户取现行为、用户存取占 比、交易渠道。
  10. 如权利要求9所述的装置，其特征在于，所述装置还包括量化单元；
    所述判断单元，还用于判断所述用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道是否需要量化；
    所述量化单元，用于若需要量化，则对所述用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道进行量化，并根据量化后的用户账号信息以及交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道确定出交易特征；
    所述确定单元，还用于若不需要量化，则根据所述用户账号信息直接确定为异常交易。
  11. 如权利要求10所述的装置，其特征在于，所述判断单元42包括：
    统计模块，用于根据所述用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道确定出的交易特征的数值进行数值统计；
    判断模块，用于根据统计的结果判定是否大于预置异常交易阈值。
  12. 如权利要求10所述的装置，其特征在于，所述统计模块4201，具体用于按照交易发生地、交易币种、用户账号信息、用户存取占比、用户取现行为、交易渠道、交易类型顺序对将所述数值配置与预设统计公式中，得到统计结果，并根据所述统计结果判断是否大于预置异常交易阈值，所述预设统计公式为
    A＝a 1+0.8a 2+0.6a 3+0.4a 4+0.2a 5+0.1a 6+0.05a 7，
    其中，所述A为数值统计的结果，a 1为交易发生地的数值，a 2为交易币种的数值，a 3为用户账号信息的数值，a 4为用户存取占比的数值，a 5为用户取现行为的数值、a 6为交易渠道的数值，a 7为交易类型的数值。
  13. 一种存储介质，所述存储介质中存储有至少一可执行指令，所述可执行指令被处理器时实现以下操作：
    通过ATM的后台系统获取监测跨境交易用户的用户账号信息以及历史交易信息；
    根据所述用户账户信息以及历史交易信息的交易特征判定是否符合预置异常交易条件，所述预置异常交易条件包括按照不同重要性配置的不同交易特征处于异常交易时的异常条件；
    若符合预置异常交易条件，则将所述监测跨境交易用户产生的交易确定为跨境异常交易。
  14. 如权利要求13所述的存储介质，其特征在于，所述历史交易信息包括交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道。
  15. 如权利要求14所述的存储介质，其特征在于，所述可执行指令被处理器执行时还实现以下操作：
    判断所述用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道是否需要量化；
    若需要量化，则对所述用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道进行量化，并根据量化后的用户账号信息以及交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道确定出交易特征；
    若不需要量化，则根据所述用户账号信息直接确定为异常交易。
  16. 如权利要求15所述的存储介质，其特征在于，所述根据所述用户账户信息以及历史交易信息的交易特征判断是否符合预置异常交易条件包括：
    根据所述用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道确定出的交易特征的数值进行数值统计；
    根据统计的结果判定是否大于预置异常交易阈值。
  17. 一种终端，其特征在于，所述终端包括处理器、存储器、通信接口和通信总线，所述处理器、所述存储器和所述通信接口通过所 述通信总线完成相互间的通信；
    所述存储器用于存放至少一可执行指令，所述可执行指令被所述处理器执行时实现如下操作：
    通过ATM的后台系统获取监测跨境交易用户的用户账号信息以及历史交易信息；
    根据所述用户账户信息以及历史交易信息的交易特征判定是否符合预置异常交易条件，所述预置异常交易条件包括按照不同重要性配置的不同交易特征处于异常交易时的异常条件；
    若符合预置异常交易条件，则将所述监测跨境交易用户产生的交易确定为跨境异常交易。
  18. 如权利要求17所述的终端，其特征在于，所述历史交易信息包括交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道。
  19. 如权利要求18所述的终端，其特征在于，所述可执行指令被所述处理器执行时还实现以下操作：
    判断所述用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道是否需要量化；
    若需要量化，则对所述用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道进行量化，并根据量化后的用户账号信息以及交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道确定出交易特征；
    若不需要量化，则根据所述用户账号信息直接确定为异常交易。
  20. 如权利要求19所述的终端，其特征在于，所述根据所述用户账户信息以及历史交易信息的交易特征判断是否符合预置异常交易条件包括：
    根据所述用户账号信息、交易类型、交易发生地、交易币种、用户取现行为、用户存取占比、交易渠道确定出的交易特征的数值进行数值统计；
    根据统计的结果判定是否大于预置异常交易阈值。
PCT/CN2018/093822 2018-05-14 2018-06-29 跨境异常交易的确定方法、装置、终端及存储介质 WO2019218432A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201810458743.1A CN108682088A (zh) 2018-05-14 2018-05-14 基于atm的跨境异常交易的确定方法及装置
CN201810458743.1 2018-05-14

Publications (1)

Publication Number Publication Date
WO2019218432A1 true WO2019218432A1 (zh) 2019-11-21

Family

ID=63806317

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2018/093822 WO2019218432A1 (zh) 2018-05-14 2018-06-29 跨境异常交易的确定方法、装置、终端及存储介质

Country Status (2)

Country Link
CN (1) CN108682088A (zh)
WO (1) WO2019218432A1 (zh)

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110009365B (zh) * 2019-01-23 2021-07-06 腾讯科技（深圳）有限公司 非正常转移电子资产的用户群体检测方法、装置和设备
CN109978692A (zh) * 2019-03-28 2019-07-05 上海诺融信息科技有限公司 基于金融大数据的信息处理方法及装置
CN111127030A (zh) * 2019-12-31 2020-05-08 中国银行股份有限公司 交易预警方法、装置和设备
CN112037026A (zh) * 2020-09-01 2020-12-04 中国银行股份有限公司 自动化异常交易工单处理方法、装置和系统
CN112801800A (zh) * 2021-04-14 2021-05-14 深圳格隆汇信息科技有限公司 行为资金分析系统、方法、计算机设备及存储介质

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104867011A (zh) * 2014-02-21 2015-08-26 中国电信股份有限公司 对移动支付进行安全控制的方法与装置
CN106991145A (zh) * 2017-03-23 2017-07-28 中国银联股份有限公司 一种监测数据的方法及装置
CN107862600A (zh) * 2017-10-24 2018-03-30 深圳四方精创资讯股份有限公司 基于区块链的银行汇款方法及其系统
CN107918905A (zh) * 2017-11-22 2018-04-17 阿里巴巴集团控股有限公司 异常交易识别方法、装置及服务器

Family Cites Families (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101236638A (zh) * 2008-02-20 2008-08-06 中国工商银行股份有限公司 一种基于Web的银行卡风险监测方法及系统
US20100241535A1 (en) * 2009-03-19 2010-09-23 Brad Nightengale Account activity alert
CN101714273A (zh) * 2009-05-26 2010-05-26 北京银丰新融科技开发有限公司 一种基于规则引擎的银行异常业务监控方法和系统
US20150235312A1 (en) * 2014-02-14 2015-08-20 Stephen Dodson Method and Apparatus for Detecting Rogue Trading Activity
CN104106276B (zh) * 2011-10-12 2019-03-19 万事达移动交易方案公司 多层安全移动交易使能平台
US10163158B2 (en) * 2012-08-27 2018-12-25 Yuh-Shen Song Transactional monitoring system
CN103049851A (zh) * 2012-12-27 2013-04-17 中国建设银行股份有限公司 一种基于交易数据的反欺诈监控方法和装置
US11829350B2 (en) * 2014-07-28 2023-11-28 Micro Focus Llc Detection of abnormal transaction loops
CN106897931A (zh) * 2016-06-12 2017-06-27 阿里巴巴集团控股有限公司 一种异常交易数据的识别方法及装置
CN106340138B (zh) * 2016-08-23 2019-08-27 深圳怡化电脑股份有限公司 一种交易行为检测方法及装置
CN106547838B (zh) * 2016-10-14 2019-06-18 北京银丰新融科技开发有限公司 基于资金网络监测可疑资金交易的方法
CN106548343B (zh) * 2016-10-21 2020-11-10 中国银联股份有限公司 一种非法交易检测方法及装置
CN106780024A (zh) * 2016-11-30 2017-05-31 东软集团股份有限公司 交易异常监测方法及装置

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104867011A (zh) * 2014-02-21 2015-08-26 中国电信股份有限公司 对移动支付进行安全控制的方法与装置
CN106991145A (zh) * 2017-03-23 2017-07-28 中国银联股份有限公司 一种监测数据的方法及装置
CN107862600A (zh) * 2017-10-24 2018-03-30 深圳四方精创资讯股份有限公司 基于区块链的银行汇款方法及其系统
CN107918905A (zh) * 2017-11-22 2018-04-17 阿里巴巴集团控股有限公司 异常交易识别方法、装置及服务器

Also Published As

Publication number Publication date
CN108682088A (zh) 2018-10-19

Similar Documents

Publication Publication Date Title
WO2019218432A1 (zh) 跨境异常交易的确定方法、装置、终端及存储介质
AU2012230299B2 (en) An automated fraud detection method and system
US8600872B1 (en) System and method for detecting account compromises
US9626666B2 (en) Dual validator self-service kiosk
EP1904965A2 (en) Mass compromise / point of compromise analytic detection and compromised card portfolio management system
EP3304446A1 (en) False positive reduction in abnormality detection system models
EP1461754A2 (en) Transaction surveillance
CN108053318A (zh) 一种对异常交易进行识别的方法及装置
CN101236638A (zh) 一种基于Web的银行卡风险监测方法及系统
CN105389728A (zh) 一种银行账户性质的检测方法及系统
CN109660529B (zh) 用于售卖机的安全风控方法、装置、售卖机和系统
EP1503329A2 (en) Method and system for determining whether a situation is logically true or false upon occurrence of an event
CN111612991A (zh) 一种atm维护方法及装置
CN105427166A (zh) 一种银行账户类型的检测方法及系统
CN112801667A (zh) 一种实时的交易异常检测方法及装置
WO2018170548A1 (en) Computer systems, computer-implemented methods and software for processing payouts
CN112823502B (zh) 针对资源访问规则配置的实时反馈服务
KR20140118233A (ko) 카드 부정사용 방지 방법 및 장치
CN117952619B (zh) 基于数字人民币钱包账户关联性的风险行为分析方法、系统及计算机可读介质
WO2019019624A1 (zh) 控制撤单退款的方法、装置、计算机设备及存储介质
CN112017029B (zh) 信息提示方法及装置
WO2013126982A1 (en) System and method of facilitating payday loans
CN117933690A (zh) 管控方法、管控装置、电子设备以及计算机可读存储介质
CN116993353A (zh) 现金交易的风险评估方法和装置、存储介质及电子设备
CN117974297A (zh) 一种业务处理方法、装置、电子设备及计算机可读介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 18919080

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205A DATED 23/03/2021)

122 Ep: pct application non-entry in european phase

Ref document number: 18919080

Country of ref document: EP

Kind code of ref document: A1